@pm_zhousl/xinyun-ai-init 1.13.1 → 1.15.0

package/README.md

@@ -55,6 +55,7 @@ npm run publish:token
 ```
 
 脚本会提示输入 npm token，临时写入 `.npmrc`，发布完成或失败后自动删除 `.npmrc`。
+发布脚本会先执行 `npm run verify:release`；当前 v1.14 支持明确的 `local-degraded` 证据模式，允许发布规则包但不会把项目标记为 `ready`。
 
 如果需要让 AI 代执行，可先在当前终端设置临时环境变量：
 
@@ -67,5 +68,6 @@ $env:NPM_TOKEN=$null
 发布前预演：
 
 ```powershell
+npm run verify:release
 npm run publish:token:dry
 ```

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.13.1`。
+当前规则版本：`1.15.0`。
 
 ## Codex 一句话入口
 
@@ -22,6 +22,8 @@ v1.7.2 fixed task contract keys: `taskKind=initialization-main`, `taskKind=initi
 v1.7.3 fixed Codex role session creation compatibility fields: `provider=codex`, `sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed`, and legacy creation index `{taskId,roleId,provider,targetVersion}`. v1.10.x takeover gates are authoritative for project readiness.
 v1.7.3 Codex role session orchestration is host-level only; CLI still only creates `xinyun-ai-init/`.
 
+v1.14.0 adds the agent profile/capability declaration, aggregate takeover gate, orchestrator task graph, shared-fact handoffs, safe session naming/reuse, and final delivery gate. These controls are additive to v1.13.1; `providerSessionId` remains the only canonical provider identity in provider mode. When the host API is unavailable, `sessionIdentityMode=local-degraded` may use a control-plane `localSessionId` for local correlation only; it never makes the project `ready` or `executionEligible`.
+
 执行上面的命令后，会生成 `xinyun-ai-init/`。随后让 AI 读取 `xinyun-ai-init/README.md` 即可。
 
 ## AI 执行入口
@@ -56,6 +58,9 @@ AI 读取本文件后，必须按以下方式执行：
 26. 完成后用中文输出初始化或升级结果、项目导读、团队责任状态、任务状态、CodeGraph 状态、待确认问题和后续短指令。
 27. v1.10.2 必须区分宿主线程、宿主会话、项目会话和主调度会话；真实 sessionId 只能来自宿主返回值，无法验证时保持 blocked。
 28. v1.11.0 使用固定模板物化、阶段状态、项目快照、24 小时缓存和最多 3 个角色并发；缓存命中不能跳过必要会话、授权或最终门禁。
+29. v1.14.0 必须创建或补齐智能体档案、能力矩阵、接管门禁、主会话总控、任务图、交接记录和最终交付记录；任务状态使用 v1.13 机器状态并同步中文展示状态。
+30. v1.14.0 任务开始前读取公共快照、任务索引、近期变更、交接、契约和占用；任务结束后写回实际改动、跨任务影响、未完成事项和证据。
+31. v1.14.0 只有所有接管门禁、真实 provider 会话证据、共享事实一致性、冲突检查、敏感扫描、测试和审查通过后才允许 `ready`；没有宿主 API 时可使用 `local-degraded` 与 `localSessionId` 继续控制面工作，但状态必须保持 `partial`、`blocked` 或 `manual-required`。
 
 ## 初始化授权边界
 
@@ -1152,3 +1157,7 @@ Git none、无测试框架和工具链未检测只登记 `not-available/not-dete
 数据库正式模式为 `databaseAccessMode=local-files-read-only`，`legacyDatabaseAccessMode=sql-only` 仅为兼容标识；`sqlExecutionMode=generate-only`。只有数据库相关任务才读取项目内 `*.sql`、`*.ddl`、`*.schema`、`*.migration` 以及 `database/`、`migrations/`、`schema/`、`models/` 下的文本文件。严禁连接本地或线上数据库、打开 SQLite/数据库服务、查询真实数据、执行 SQL、migration、seed 或修改数据，也不自动安装驱动。连接、只读查询、结构变更和数据修改权限仍独立记录；四类授权状态固定为 `not-requested/requested/authorized/denied/expired/failed/unknown`，脱敏状态固定为 `verified/unverified/failed`。SQL 只作为 review 计划输出，需校验规范化 SQL、参数、方言、targetEnvironment、授权范围和 `statementHash`；授权过期或输入变化时回到 `executionStatus=needs-confirmation`，受影响授权进入 `expired` 并追加 audit。
 
 v1.9 不自动复用其他项目会话、不自动连接或修改数据库、不扩大 HTML 迁移范围，不执行 Git 写操作或 npm publish。
+
+## v1.15 会话契约修订
+
+v1.14.0 已发布。v1.12.1/v1.13.x 中的 `providerSessionId` 仅作为历史 provider-session 兼容记录保留；后续规则以 `rules/v1.15.0-session-binding.md` 为准。新的会话绑定使用 `sessionId`、`sessionRefType`、`sessionRef`、项目/角色/任务身份和交互证据。普通 thread ID 只有在宿主可操作、项目归属匹配且七类证据完整时才可绑定，不能仅凭字段名称、taskId、文件名、标题或历史摘要进入 ready。

package/init/xinyun-ai-init/rules/init-rules.md

@@ -77,6 +77,16 @@ Run the seven-capability host preflight before role sessions. Materialize the ma
 - `businessCodeChanged.value=no` requires structured evidence; without evidence it must be `unknown`. Missing real behavior evidence cannot produce `ready`.
 - v1.11 stages are `preflight`, `fixed-materialization`, `control-plane`, `codegraph`, `bootstrap-snapshot`, `role-sessions`, `onboarding`, and `final-gate`. Fixed templates, a bounded project snapshot, a 24-hour cache, and at most three role sessions may reduce repeated work but cannot bypass the final gate.
 
+## v1.14.0 agent core
+
+- Create `agent-profile.json`, `agent-capabilities.json`, `takeover-gate.json`, `tasks/orchestrator.json`, `tasks/task-graph.json`, `handoffs/` and `final-delivery.json` as control-plane records.
+- Agent capability status is `ready/partial/blocked/manual-required`; missing provider evidence or unresolved required gates cannot be `ready`.
+- The orchestrator owns requirement understanding, task decomposition, assignment, dependencies, result aggregation, conflict routing, test review and final delivery. Task creation is not task completion.
+- Task records retain v1.13 machine statuses and add `statusCode`/`statusLabel`; the display labels are `待分析/待分配/执行中/待审查/待确认/已完成/阻塞/已取消`.
+- Before execution, read the shared snapshot, active task index, recent changes, handoffs, contract snapshots and occupancy. After execution, write actual files, API/field/component/process impacts, unfinished work and evidence.
+- Same-file, API, field, component or business-flow conflicts pause the affected task and require orchestrator/chief-engineer resolution.
+- Final delivery must list completed, unfinished, blocked, changed files, business-code change status, tests, review, risks and next actions. Only all gates and evidence may produce `ready`.
+
 ## v1.7.2 角色后续任务可见性
 
 - 初始化主任务使用 `taskKind=initialization-main`；角色登记使用 `taskKind=initialization-record`；后续执行任务使用 `taskKind=role-execution`。
@@ -123,3 +133,7 @@ Run the seven-capability host preflight before role sessions. Materialize the ma
 - v1.9 fields: `sessionMatchStatus`、`selectionEvidence`、`项目简称｜角色中文名｜职责名称`、`coverageStatus=full`、`databaseAccessMode=local-files-read-only`、`legacyDatabaseAccessMode=sql-only`、`targetEnvironment`。
 
 共享事实和 Skill 文件使用临时文件、完整校验和原子重命名。前端审计默认只读；临时会话只有用户确认的代码任务才可创建。不得修改业务代码、数据库、API、依赖、Git 或发布配置。
+
+## v1.15 adapter-neutral session binding
+
+历史 v1.12.1/v1.13.x 的 providerSessionId 记录只用于兼容读取。当前新任务必须使用 `sessionId`、`sessionRefType`、`sessionRef`、`hostId/provider`、项目/角色/任务身份和 identity/interaction evidence。`host-thread`、`provider-session`、`manual-reference`、`local-session` 均需按 adapter-neutral 规则验证；providerSessionId 不再是唯一身份键或 ready 硬门禁。

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -321,3 +321,7 @@ Record all seven host capabilities before role sessions. `available-with-depende
 
 数据库交接必须记录 `databaseAccessMode=local-files-read-only`、`legacyDatabaseAccessMode=sql-only`、`sqlExecutionMode=generate-only`、四类授权、授权状态 `not-requested/requested/authorized/denied/expired/failed/unknown`、`statementHash`、targetEnvironment、`executionStatus`、`redactionStatus=verified/unverified/failed` 和完整 audit。仅允许按需读取本地 SQL/schema/migration/model 文本文件，严禁连接数据库或执行 SQL；授权变化后不得继续执行旧 SQL，执行状态回到 `needs-confirmation`。
 - v1.9 fields: `lexical-fallback`、`duplicate-not-primary`、`项目简称｜角色中文名｜职责名称`、`coverageStatus=full`、`RFC 8785 JCS-SHA-256`。
+
+## v1.15 会话绑定字段
+
+任务单和交接单新增 `sessionRefType`、`sessionRef`、`hostId`、`provider`、`identityEvidence`、`interactionEvidence`、`bindingStatus` 和 `bindingMode`。`sessionId` 仍是控制面关联键；旧 providerSessionId 只作为兼容字段。七类宿主证据不完整、跨项目或跨文件身份不一致时必须暂停或阻塞。

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -149,3 +149,7 @@ Before upgrade role-session work, read `xinyun-ai/index/initialization-recovery.
 - v1.9 fields: `sessionMatchStatus`、`duplicate-not-primary`、`selectionEvidence`、`项目简称｜角色中文名｜职责名称`、`technical-landscape`、`coverageStatus=full`、`RFC 8785 JCS-SHA-256`、`databaseAccessMode=local-files-read-only`、`legacyDatabaseAccessMode=sql-only`、`targetEnvironment`。
 
 同一 taskId + changeDomain 不得重复创建临时会话；容量不足进入 `queued`，unknown occupancy 保持占用，失败不得自动重试。升级不自动安装 Skill 依赖，不执行业务代码、数据库、API 或 Git 写操作。
+
+## v1.15 会话升级兼容
+
+升级读取旧 `providerSessionId` 时映射为 `sessionRefType=provider-session` 和 `sessionRef=providerSessionId`，不得伪造新证据。新会话发现和复用必须验证 `sessionRef` 可操作、项目/角色/任务/cwd/占用一致及七类证据；无法验证进入 pending/blocked/manual-required。普通 host-thread 不因名称自动无效，但也不能仅凭 thread ID 直接 ready。

package/init/xinyun-ai-init/rules/v1.14.0-agent-core.md

@@ -0,0 +1,35 @@
+# v1.14.0 agent core
+
+## Agent identity and capability declaration
+
+Every initialized control plane records one `agent-profile.json` and one `agent-capabilities.json`. The profile identifies the agent, package version, project identity, service goal, configured roles, supported stacks/tools, allowed operations, forbidden operations, and ready prerequisites. Capability records must include detection method, status, dependency status, evidence, fallback plan, and unverified scope.
+
+When the host does not expose a canonical provider API, the control plane may use `sessionIdentityMode=local-degraded` and a control-plane-generated `localSessionId` for local correlation. `localSessionId` is never a provider identity, never makes `sessionId` non-null, and never grants `ready` or `executionEligible`. Real provider mode continues to require `providerSessionId` and the v1.13 host evidence contract.
+
+Agent capability status is `ready`, `partial`, `blocked`, or `manual-required`. Missing canonical provider evidence, unknown required host capability, or an unresolved high-risk conflict cannot be `ready`.
+
+## Takeover gate
+
+`takeover-gate.json` is the aggregate decision for project control-plane readiness. It must verify the control plane, named main task, five role tasks, team responsibility records, CodeGraph status, provider session bindings, orchestrator registration, recovery records, indexes, shared facts, conflict checks, and sensitive scanning. Missing evidence produces `partial`, `blocked`, or `manual-required`; it never produces `ready`. Local-degraded operation may publish the package and continue read-only control-plane work, but the project remains non-ready until real provider evidence is bound.
+
+## Orchestrator and task graph
+
+The main session owns requirement understanding, task decomposition, role assignment, dependency management, result aggregation, conflict routing, test review, and final delivery. `orchestrator.json` stores its identity and evidence. `task-graph.json` stores nodes and dependency edges.
+
+Task records keep the v1.13 machine status and add `statusCode`/`statusLabel` for the unified workflow: `待分析`, `待分配`, `执行中`, `待审查`, `待确认`, `已完成`, `阻塞`, `已取消`. A task is complete only after its result, evidence, reviewer, and required write-backs pass validation.
+
+## Shared facts and handoff
+
+Before execution, read the public project snapshot, active task index, recent change ledger, other handoffs, API/database/component records, and file/workflow occupancy. After execution, write back actual files and impacts, unfinished work, confirmations, evidence, and the next action. Same-file, API, field, component, or business-flow conflicts pause the task and require orchestrator/chief-engineer resolution.
+
+## Session naming and reuse
+
+Display names follow `项目名｜角色｜职责或工作流`. Discovery and reuse require matching project identity, role, task scope, title, cwd, occupancy, idempotency key, and canonical `providerSessionId` evidence. Cross-project candidates are rejected and historical records are preserved. Host thread IDs, task IDs, filenames, titles, and history summaries remain evidence only and can never become a session ID.
+
+## Final delivery gate
+
+The final delivery record must list completed and unfinished work, blocked tasks, actual changed files, business-code change status, tests, review results, risks, next actions, and all gate/evidence references. `ready` requires every required gate, provider evidence, shared-fact consistency, conflict check, sensitive scan, and reviewer result to pass.
+
+## Post-v1.14 compatibility direction
+
+The package is published as v1.14.0. Its provider-specific session evidence remains historical compatibility material only. Starting with v1.15.0, use the adapter-neutral contract in `rules/v1.15.0-session-binding.md`: `sessionId` is the control-plane ID and `sessionRefType/sessionRef` identify the host reference. A `host-thread` value is acceptable only with operability, ownership and all seven interaction evidence categories. `providerSessionId` is retained only for `sessionRefType=provider-session` compatibility and is never the sole ready gate.

package/init/xinyun-ai-init/rules/v1.15.0-session-binding.md

@@ -0,0 +1,44 @@
+# v1.15.0 adapter-neutral session binding
+
+## Contract
+
+v1.15.0 uses a host-independent session binding contract. `sessionId` is the control-plane role-session identifier. The host-operable reference is stored separately in `sessionRefType` and `sessionRef`.
+
+Required binding fields are `sessionId`, `sessionRefType`, `sessionRef`, `hostId`, `provider`, `projectRootHash`, `workspaceScope`, `repositoryScope`, `workstream`, `roleId`, `taskId`, `title`, `cwd`, `identityEvidence`, `interactionEvidence`, `bindingStatus`, `bindingMode`, `createdAt`, and `updatedAt`.
+
+`sessionRefType` is one of `host-thread`, `provider-session`, `manual-reference`, or `local-session`. The adapter decides the reference format. A `providerSessionId` may be retained as a historical provider-session record, but it is not the v1.15 canonical field and its field name cannot decide readiness.
+
+## Binding gate
+
+Bind only when the reference is currently operable, belongs to the current project and workstream, matches `roleId`, `taskId`, `title`, `cwd`, workspace/repository scope and occupancy, and has complete identity and interaction evidence. `sessionId`, assignment/session binding, task index and init-result must agree.
+
+The seven evidence categories are:
+
+1. create or reuse
+2. send
+3. receive
+4. query status
+5. recover
+6. close
+7. control-file read/write
+
+Missing, stale, contradictory or unverifiable evidence keeps `bindingStatus=pending|blocked|manual-required`. It cannot produce `ready` or `executionEligible=true`.
+
+## Positive and negative rules
+
+- A `host-thread` reference is valid only when the current host can send, receive and query that thread and identity evidence proves project/role/task ownership.
+- A `provider-session` reference is accepted through the adapter compatibility path when the provider evidence is complete.
+- A `manual-reference` may be bound only with an actor, timestamp, project/role/task identity evidence and all seven interaction records.
+- A `local-session` is a control-plane correlation record only; it never authorizes real host reuse or ready.
+- A bare thread ID, task ID, filename, title, history summary or user statement is not evidence of operability or ownership.
+- A candidate from another project, workstream, repository scope or occupied role is rejected; history is preserved and never overwritten.
+- Cross-project reuse is always rejected, even when the role name and title are identical.
+- If fields disagree across task, assignment, binding, task-index or init-result, pause and route to the main session.
+
+## Compatibility
+
+v1.12.1 and v1.13.x records remain readable. Map `providerSessionId` to `sessionRefType=provider-session` and `sessionRef=providerSessionId` without deleting the historical field. Do not rewrite historical evidence as if it had used the v1.15 contract.
+
+## Recovery and idempotency
+
+Reuse the original task and role-task IDs, increment `attempt`, preserve audit records, and use the same idempotency key for retries. A failed create, send, receive, status query, recovery, close or control-file write never creates a duplicate binding. Conflicts stop writes until the main session resolves them.

package/init/xinyun-ai-init/templates/README.template.md

@@ -4,7 +4,7 @@
 
 ## v1.12.1 provider session binding
 
-The canonical external identity of a role session is the provider-returned `providerSessionId`. A normal thread ID, taskId, title, or history summary cannot bind a role. Binding requires project identity, roleId, taskId, title, cwd, exclusive occupancy, and real send/receive evidence; incomplete evidence cannot become ready or executionEligible.
+For v1.12.1/v1.13.x compatibility, historical provider bindings may contain provider-returned `providerSessionId`. The v1.15 contract is adapter-neutral: `sessionId` is the control-plane identifier and `sessionRefType/sessionRef` identify a host-thread, provider-session, manual-reference, or local-session reference. A normal thread ID is accepted only when it is currently operable and project/role/task ownership plus all seven evidence categories are verified. A bare taskId, title, filename, or history summary cannot bind a role; incomplete evidence cannot become ready or executionEligible.
 
 ## v1.13.0 host adapter and manual recovery
 

package/init/xinyun-ai-init/templates/agent-capabilities.template.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "agentId": "xinyun-ai-agent",
+  "capabilities": [
+    {
+      "capabilityId": "capability-template",
+      "name": "能力模板",
+      "category": "control-plane",
+      "required": true,
+      "detectionMethod": "not-checked",
+      "status": "unknown",
+      "statusEnum": ["ready", "partial", "blocked", "manual-required", "unknown"],
+      "dependencyStatus": "unknown",
+      "evidence": [],
+      "fallbackPlan": "blocked; preserve task IDs and emit next action",
+      "usedTools": [],
+      "unusedTools": [],
+      "unverifiedScope": [],
+      "failureReason": null,
+      "checkedAt": null
+    }
+  ],
+  "aggregateStatus": "manual-required",
+  "aggregateStatusEnum": ["ready", "partial", "blocked", "manual-required"],
+  "aggregateRule": "required capabilities and evidence must pass before ready; local-degraded may run with localSessionId but remains manual-required",
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/agent-profile.template.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "agentId": "xinyun-ai-agent",
+  "name": "欣芸技术开发 Agent",
+  "version": "1.15.0",
+  "packageVersion": "1.15.0",
+  "projectIdentity": {
+    "projectRootHash": null,
+    "workspaceScope": "xinyun-ai-control",
+    "repositoryScopeHash": null,
+    "workstream": "project-control-plane"
+  },
+  "serviceGoal": "按用户确认的范围协作完成软件开发任务并提供可审计交付结论",
+  "configuredRoles": ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"],
+  "supportedStacks": [],
+  "supportedTools": [],
+  "allowedOperations": ["read-project-files", "write-control-plane", "run-approved-verification"],
+  "forbiddenOperations": ["fake-session-id", "database-connection", "sql-execution", "business-code-without-confirmation", "git-write", "dependency-install", "host-login", "npm-publish"],
+  "readyPrerequisites": ["control-plane", "task-tree", "team-responsibility", "codegraph", "provider-session-evidence", "orchestrator", "recovery-and-index-consistency", "sensitive-scan", "conflict-free"],
+  "capabilityStatus": "manual-required",
+  "capabilityStatusEnum": ["ready", "partial", "blocked", "manual-required"],
+  "evidence": [],
+  "unverifiedScope": ["real provider canonical session behavior"],
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/control-plane-index.template.json

@@ -6,6 +6,13 @@
   "sessionIndex": "xinyun-ai/sessions/role-session-bindings.json",
   "roleIndex": "xinyun-ai/team/assignments.json",
   "factIndex": "xinyun-ai/coordination/project-facts.json",
+  "agentProfile": "xinyun-ai/agent-profile.json",
+  "agentCapabilities": "xinyun-ai/agent-capabilities.json",
+  "takeoverGate": "xinyun-ai/takeover-gate.json",
+  "orchestrator": "xinyun-ai/tasks/orchestrator.json",
+  "taskGraph": "xinyun-ai/tasks/task-graph.json",
+  "handoffsDirectory": "xinyun-ai/handoffs/",
+  "finalDelivery": "xinyun-ai/final-delivery.json",
   "evidenceIndex": "xinyun-ai/index/evidence-index.json",
   "eventLog": "xinyun-ai/events/events.jsonl",
   "lockFile": "xinyun-ai/task-lock.json",

package/init/xinyun-ai-init/templates/coordination-change-ledger.template.json

@@ -1,6 +1,8 @@
 {
   "schemaVersion": 1,
   "changes": [],
+  "occupancy": [],
+  "conflictKeys": ["path", "api", "database-field", "component", "business-flow"],
   "recordContract": {
     "requiredFields": ["schemaVersion", "changeId", "taskId", "sessionId", "actor", "role", "changeDomain", "targetPaths", "baselineHash", "changeStatus", "evidence", "createdAt", "updatedAt"],
     "changeStatusEnum": ["proposed", "reserved", "in-progress", "completed", "conflict-pending", "blocked", "cancelled"],

package/init/xinyun-ai-init/templates/coordination-project-facts.template.json

@@ -1,6 +1,15 @@
 {
   "schemaVersion": 1,
   "facts": [],
+  "publicSnapshot": {
+    "snapshotId": null,
+    "snapshotHash": null,
+    "sourceRevision": null,
+    "refreshedAt": null,
+    "refreshTriggers": ["business-change", "control-plane-change", "codegraph-change", "source-revision-change"]
+  },
+  "executionReadContract": ["publicSnapshot", "taskIndex", "recentChanges", "handoffs", "contractSnapshots", "occupancy"],
+  "executionWriteContract": ["changedFiles", "apiChanges", "databaseFieldChanges", "componentChanges", "businessFlowChanges", "unfinishedWork", "pendingConfirmations", "evidence"],
   "recordContract": {
     "requiredFields": ["schemaVersion", "factId", "factType", "scope", "valueHash", "source", "taskId", "sessionId", "evidence", "confidence", "factStatus", "revision", "observedAt", "updatedAt"],
     "factStatusEnum": ["proposed", "confirmed", "superseded", "unknown", "blocked"]

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -618,6 +618,21 @@ Skill 分配使用 `assignmentStatus`，使用记录使用 `usageStatus`。固
 
 数据库正式 databaseAccessMode=local-files-read-only，legacyDatabaseAccessMode=sql-only 仅为兼容标识，sqlExecutionMode=generate-only。普通初始化不读取数据库文件；数据库相关任务仅可读取项目内受限的 SQL/schema/migration/model 文本文件。严禁连接本地或线上数据库、查询真实数据、执行 SQL、migration、seed 或数据修改。连接、只读查询、结构变更、数据修改分别授权，四类授权状态固定为 not-requested/requested/authorized/denied/expired/failed/unknown，redactionStatus 固定为 verified/unverified/failed；SQL 仅用于 review 计划，需校验规范化 SQL、参数、方言、targetEnvironment、授权范围生成的 statementHash。授权或输入变化时回到 needs-confirmation，并追加包含 auditId、action、actorType、actorId、authorizationType、statementHash、targetEnvironment、resultStatus、redactionStatus、evidence、at 的 audit。
 
+## v1.14.0 智能体核心能力
+
+- 必须登记 `agent-profile.json` 和 `agent-capabilities.json`。智能体状态固定为 `ready/partial/blocked/manual-required`；宿主 canonical provider 证据缺失时不得 ready。宿主 API 不可用时允许显式 `sessionIdentityMode=local-degraded`，使用控制面生成的 `localSessionId` 做本地关联，但不得把它写入 `providerSessionId` 或把项目标记为 ready。
+- 必须登记 `takeover-gate.json`、`tasks/orchestrator.json`、`tasks/task-graph.json`、`handoffs/` 和 `final-delivery.json`，并在 manifest、project-index、init-result 和 control-plane-index 中引用。
+- 主会话负责需求理解、任务拆分、角色分配、依赖管理、结果汇总、冲突处理、测试审查和最终交付；任务创建不等于任务完成。
+- 任务保留既有机器状态，并同步 `statusCode/statusLabel`：`待分析/待分配/执行中/待审查/待确认/已完成/阻塞/已取消`。
+- 任务开始前必须读取公共快照、活动任务索引、近期变更、其他交接、契约快照和文件/工作流占用；完成后必须写回实际文件、API/字段/组件/流程影响、未完成事项、待确认项和证据。
+- 同文件、接口、字段、组件或业务流程冲突时，相关任务进入 `conflict-pending` 或 `blocked`，由主会话/总工处理，不得静默覆盖。
+- 会话展示名使用 `项目名｜角色｜职责或工作流`；provider 模式的发现和复用必须验证项目身份、职责、任务范围、cwd、占用、幂等键和 canonical `providerSessionId`。local-degraded 模式只能使用 `localSessionId` 做控制面关联，不能进行真实宿主复用，历史不得覆盖或删除。
+- 最终交付必须列出已完成、未完成、阻塞任务、实际修改文件、业务代码变更、测试、审查、风险和下一步；所有接管门禁、会话证据、共享事实、冲突检查和敏感扫描通过后才可 ready。
+
+## v1.15 adapter-neutral session binding
+
+v1.14.0 的 `providerSessionId` 规则保留为历史兼容契约。v1.15.0 使用 `sessionId`、`sessionRefType`、`sessionRef`、`hostId/provider`、项目身份、角色/任务范围、`identityEvidence` 和 `interactionEvidence`。`sessionRefType` 可为 `host-thread`、`provider-session`、`manual-reference` 或 `local-session`；字段名称本身不能决定会话是否有效。ready 必须验证引用可操作、项目/角色/任务匹配、占用无冲突，并具备 create/reuse、send、receive、query-status、recover、close、control-file read/write 七类证据。旧 `providerSessionId` 只能作为兼容映射，不得单独触发 ready。
+
 ## 自我学习
 
 发现可复用经验时，先记录为候选经验。候选经验必须标注来源、适用范围、可信度、状态和最后验证时间。用户确认后，才能合并进正式规则。

package/init/xinyun-ai-init/templates/current-task.template.md

@@ -313,3 +313,12 @@
 - packet 失效原因：packet-stale / 待填写
 - databaseAccessMode：local-files-read-only（legacyDatabaseAccessMode=sql-only；sqlExecutionMode=generate-only）
 - 数据库连接、查询、结构变更、数据修改授权状态：待填写
+
+## v1.15 session binding
+
+- sessionId：控制面角色会话标识
+- sessionRefType：host-thread / provider-session / manual-reference / local-session
+- sessionRef：宿主实际可操作引用；不能仅由 taskId、文件名、标题或历史摘要推断
+- providerSessionId：历史兼容字段，可为空；不再作为唯一 ready 门禁
+- identityEvidence / interactionEvidence：必须覆盖项目、角色、任务、cwd 和七类宿主操作
+- bindingStatus：pending / blocked / manual-required / bound / conflict

package/init/xinyun-ai-init/templates/final-delivery.template.json

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": 1,
+  "deliveryId": "delivery-template",
+  "taskId": null,
+  "orchestratorSessionId": null,
+  "status": "blocked",
+  "statusEnum": ["pending", "partial", "blocked", "ready"],
+  "completedItems": [],
+  "unfinishedItems": [],
+  "blockedTasks": [],
+  "changedFiles": [],
+  "businessCodeChanged": "unknown",
+  "tests": [],
+  "reviewResults": [],
+  "risks": [],
+  "nextActions": [],
+  "gateReferences": [],
+  "evidence": [],
+  "readyRule": "all required takeover gates, session evidence, shared facts, conflict checks, sensitive scan, tests and reviewer results must pass",
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/handoff.template.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "handoffId": "handoff-template",
+  "taskId": null,
+  "roleId": null,
+  "sessionId": null,
+  "fromActor": null,
+  "toActor": null,
+  "status": "pending",
+  "statusEnum": ["pending", "accepted", "blocked", "closed"],
+  "readBeforeExecution": {
+    "projectSnapshotHash": null,
+    "taskIndexRevision": null,
+    "recentChangeIds": [],
+    "otherHandoffIds": [],
+    "contractSnapshotIds": [],
+    "occupancyEvidence": []
+  },
+  "completedWork": [],
+  "changedFiles": [],
+  "apiChanges": [],
+  "databaseFieldChanges": [],
+  "componentChanges": [],
+  "businessFlowChanges": [],
+  "impactOnOtherTasks": [],
+  "unfinishedWork": [],
+  "pendingConfirmations": [],
+  "evidence": [],
+  "nextAction": null,
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/host-capabilities.template.json

@@ -7,6 +7,8 @@
   "statusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
   "dependencyStatusEnum": ["not-required", "required", "authorized", "not-authorized", "unknown"],
   "capabilityRequiredFields": ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"],
+  "historicalCapabilityContract": { "version": "1.10", "requiredCount": 6, "status": "legacy-compatible" },
+  "currentProviderCapabilityContract": { "version": "1.13.1", "requiredCount": 8, "source": "host-preflight.template.json", "requiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "querySessionStatus", "recoverSession", "closeSession", "controlFileReadWrite"] },
   "evidenceRequiredFields": ["evidenceType", "source", "summaryOrHash", "checkedAt"],
   "unknownPolicy": "unknown-means-no-verifiable-evidence; never report verified or unavailable without evidence",
   "checkedAt": null,

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -9,7 +9,19 @@
   "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
   "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.13.1",
+  "targetVersion": "1.15.0",
+  "agentCore": {
+    "version": "1.15.0",
+    "profilePath": "xinyun-ai/agent-profile.json",
+    "capabilitiesPath": "xinyun-ai/agent-capabilities.json",
+    "takeoverGatePath": "xinyun-ai/takeover-gate.json",
+    "orchestratorPath": "xinyun-ai/tasks/orchestrator.json",
+    "taskGraphPath": "xinyun-ai/tasks/task-graph.json",
+    "finalDeliveryPath": "xinyun-ai/final-delivery.json",
+    "agentStatus": "manual-required",
+    "takeoverStatus": "blocked",
+    "taskStatusLabelMapVersion": "1.15.0"
+  },
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],
@@ -124,6 +136,26 @@
       "sessionIdsRemainNullUntilDecision": true
     }
   },
+  "v114": {
+    "handoffsDirectory": "xinyun-ai/handoffs/",
+    "finalDeliveryPath": "xinyun-ai/final-delivery.json",
+    "requiredRoleCount": 5,
+    "orchestratorSessionId": null,
+    "taskGraphStatus": "blocked",
+    "takeoverGateStatus": "blocked",
+    "readyRequiresAllGates": true,
+    "realProviderEvidenceRequired": true
+  },
+  "v115": {
+    "status": "candidate",
+    "sessionBindingPath": "xinyun-ai/sessions/session-bindings.json",
+    "sessionBindingTemplate": "xinyun-ai-init/templates/session-binding.template.json",
+    "sessionIdentityMode": "adapter-neutral",
+    "canonicalControlPlaneId": "sessionId",
+    "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
+    "providerSessionIdPolicy": "compatibility-only; not the sole identity or ready gate",
+    "batchStatus": {"v1.15-A": "candidate", "v1.15-B": "candidate", "v1.15-C": "candidate"}
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.13.1",
+  "xinyunAiVersion": "1.15.0",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -14,6 +14,18 @@
     "git": "unknown"
   },
   "codegraph": { "enabled": false, "status": "unknown" },
+  "agentCore": {
+    "version": "1.15.0",
+    "profile": "xinyun-ai/agent-profile.json",
+    "capabilities": "xinyun-ai/agent-capabilities.json",
+    "takeoverGate": "xinyun-ai/takeover-gate.json",
+    "orchestrator": "xinyun-ai/tasks/orchestrator.json",
+    "taskGraph": "xinyun-ai/tasks/task-graph.json",
+    "handoffsDirectory": "xinyun-ai/handoffs/",
+    "finalDelivery": "xinyun-ai/final-delivery.json",
+    "statusEnum": ["ready", "partial", "blocked", "manual-required"],
+    "status": "manual-required"
+  },
   "index": { "primary": "json_markdown", "sqlite": "optional" },
   "capabilities": {
     "confirmationGate": true,
@@ -107,7 +119,7 @@
     "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
     "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "parentSessionId": null,
-    "targetVersion": "1.13.1",
+    "targetVersion": "1.15.0",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -333,6 +345,34 @@
     "manualBindingConfirmationPhrase": "已创建，继续绑定",
     "noChoicePolicy": "remain-blocked-without-repeat-prompt"
   },
+  "v114": {
+    "status": "implemented-in-package",
+    "capability": "agentCoreAndTakeoverControl",
+    "agentProfile": "xinyun-ai/agent-profile.json",
+    "agentCapabilities": "xinyun-ai/agent-capabilities.json",
+    "takeoverGate": "xinyun-ai/takeover-gate.json",
+    "orchestrator": "xinyun-ai/tasks/orchestrator.json",
+    "taskGraph": "xinyun-ai/tasks/task-graph.json",
+    "handoffsDirectory": "xinyun-ai/handoffs/",
+    "finalDelivery": "xinyun-ai/final-delivery.json",
+    "agentStatusEnum": ["ready", "partial", "blocked", "manual-required"],
+    "takeoverStatusEnum": ["not-started", "assessing", "partial", "blocked", "manual-required", "ready"],
+    "taskStatusCodeEnum": ["captured", "pending", "executing", "waiting-review", "awaiting-confirmation", "completed", "blocked", "cancelled"],
+    "taskStatusLabelMap": {"captured": "待分析", "pending": "待分配", "executing": "执行中", "waiting-review": "待审查", "awaiting-confirmation": "待确认", "completed": "已完成", "blocked": "阻塞", "cancelled": "已取消"},
+    "readyRequires": ["controlPlane", "mainTask", "roleTasks", "teamResponsibility", "codeGraph", "roleSessions", "orchestrator", "recovery", "indexes", "sharedFacts", "conflicts", "sensitiveScan"]
+  },
+  "v115": {
+    "status": "candidate",
+    "sessionBindingTemplate": "xinyun-ai-init/templates/session-binding.template.json",
+    "sessionBindingPath": "xinyun-ai/sessions/session-bindings.json",
+    "sessionIdentityMode": "adapter-neutral",
+    "sessionIdentityFields": ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "repositoryScope", "workstream", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode", "createdAt", "updatedAt"],
+    "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+    "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
+    "canonicalControlPlaneId": "sessionId",
+    "providerSessionIdPolicy": "compatibility-only; not the sole identity or ready gate",
+    "batchStatus": {"v1.15-A": "candidate", "v1.15-B": "candidate", "v1.15-C": "candidate"}
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -6,6 +6,11 @@
   "roleId": null,
   "sessionId": null,
   "providerSessionId": null,
+  "sessionBindingContract": "adapter-neutral-v1.15",
+  "sessionRefType": "manual-reference",
+  "sessionRef": null,
+  "hostId": null,
+  "adapterNeutralRequiredEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
   "projectRootHash": null,
   "workspaceScope": null,
   "title": null,
@@ -31,6 +36,7 @@
   "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
   "executionEligible": false,
   "eligibilityRule": "bound + verified providerSessionId + all requiredHostEvidence + identity evidence + interaction evidence + role onboarding ready",
+  "v115EligibilityRule": "bound + operable sessionRef + project/role/task identity + seven evidence categories + role onboarding ready; providerSessionId is compatibility-only",
   "fakeSessionIdProhibited": true,
   "rejectionReason": null,
   "audit": [],

package/init/xinyun-ai-init/templates/manual-session-recovery.template.json

@@ -2,6 +2,9 @@
   "schemaVersion": 1,
   "recoveryId": "manual-session-recovery-template",
   "provider": "codex",
+  "sessionBindingContract": "adapter-neutral-v1.15",
+  "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+  "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
   "status": "not-started",
   "statusEnum": ["not-started", "guided", "awaiting-user", "validating", "recovered", "blocked", "failed"],
   "userDecisionEnum": ["manual-create", "defer", "redetect"],
@@ -42,6 +45,7 @@
   "decisionEvidence": [],
   "noChoicePolicy": "remain-blocked-without-repeat-prompt",
   "bindingRequiredFields": ["provider", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "boundBy", "boundAt", "identityEvidence", "interactionEvidence"],
+  "v115BindingRequiredFields": ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode"],
   "decisionEvidenceSchema": ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"],
   "fakeProviderSessionIdProhibited": true,
   "createdAt": null,

package/init/xinyun-ai-init/templates/orchestrator.template.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": 1,
+  "orchestratorId": "orchestrator-template",
+  "orchestratorSessionId": null,
+  "provider": "codex",
+  "parentTaskId": null,
+  "projectRootHash": null,
+  "workspaceScope": "xinyun-ai-control",
+  "responsibilities": ["requirement-understanding", "task-decomposition", "role-assignment", "dependency-management", "result-aggregation", "conflict-routing", "test-review", "final-delivery"],
+  "status": "blocked",
+  "statusEnum": ["pending", "active", "blocked", "closed"],
+  "identityEvidence": [],
+  "dispatchEvidence": [],
+  "taskGraphPath": "xinyun-ai/tasks/task-graph.json",
+  "nextAction": "obtain canonical orchestrator session evidence",
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/project-check.template.md

@@ -189,3 +189,10 @@
 - 数据库是否为 `local-files-read-only`（`sql-only` 仅兼容标识，SQL 仅生成）：待填写
 - connectionStatus、queryAuthorization、schemaChangeAuthorization、dataMutationAuthorization 是否独立：待填写
 - statementHash、targetEnvironment、executionStatus 和 audit 是否完整：待填写
+
+## v1.15 会话门禁检查
+
+- sessionRefType/sessionRef 是否来自可识别且可操作的宿主引用：待填写
+- 项目身份、角色、任务、cwd、占用和跨文件 sessionId 是否一致：待填写
+- create/reuse、send、receive、query-status、recover、close、control-file read/write 七类证据是否完整：待填写
+- providerSessionId 是否仅作为兼容字段而非唯一 ready 条件：待填写

package/init/xinyun-ai-init/templates/project-guide.template.md

@@ -258,3 +258,7 @@
 - 技术全景：`xinyun-ai/technical-landscape.json`；只有 full coverage、空 unverifiedScope 和核心证据完整才可 ready。
 - packet：`requirement-packet.json` + `technical-impact-packet.json`；使用 RFC8785 JCS-SHA-256，失效时为 `packet-stale`。
 - 数据库默认 `local-files-read-only`，`sql-only` 仅为兼容标识；数据库相关任务只读本地 SQL/schema/migration/model 文本，连接、查询、结构变更和数据修改均禁止，SQL 仅生成供审阅，执行前校验 statementHash、目标环境和 audit。
+
+## v1.15 adapter-neutral session binding
+
+新任务按 `sessionId + sessionRefType + sessionRef` 记录会话。providerSessionId 仅保留历史兼容；host-thread 必须有可操作性、项目归属、角色/任务匹配和七类交互证据，缺失时保持 pending/blocked/manual-required。