@pm_zhousl/xinyun-ai-init 1.14.0 → 1.16.0

package/README.md

@@ -55,7 +55,7 @@ npm run publish:token
 ```
 
 脚本会提示输入 npm token，临时写入 `.npmrc`，发布完成或失败后自动删除 `.npmrc`。
-发布脚本会先执行 `npm run verify:release`；当前 v1.14 支持明确的 `local-degraded` 证据模式，允许发布规则包但不会把项目标记为 `ready`。
+发布脚本会先执行 `npm run verify:release`；v1.16 要求可审计的真实宿主运行证据，且只有证据完整时才允许进入发布流程。未验证范围必须继续保留在证据记录中。
 
 如果需要让 AI 代执行，可先在当前终端设置临时环境变量：
 

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.14.0`。
+当前规则版本：`1.16.0`。
 
 ## Codex 一句话入口
 
@@ -1157,3 +1157,11 @@ Git none、无测试框架和工具链未检测只登记 `not-available/not-dete
 数据库正式模式为 `databaseAccessMode=local-files-read-only`，`legacyDatabaseAccessMode=sql-only` 仅为兼容标识；`sqlExecutionMode=generate-only`。只有数据库相关任务才读取项目内 `*.sql`、`*.ddl`、`*.schema`、`*.migration` 以及 `database/`、`migrations/`、`schema/`、`models/` 下的文本文件。严禁连接本地或线上数据库、打开 SQLite/数据库服务、查询真实数据、执行 SQL、migration、seed 或修改数据，也不自动安装驱动。连接、只读查询、结构变更和数据修改权限仍独立记录；四类授权状态固定为 `not-requested/requested/authorized/denied/expired/failed/unknown`，脱敏状态固定为 `verified/unverified/failed`。SQL 只作为 review 计划输出，需校验规范化 SQL、参数、方言、targetEnvironment、授权范围和 `statementHash`；授权过期或输入变化时回到 `executionStatus=needs-confirmation`，受影响授权进入 `expired` 并追加 audit。
 
 v1.9 不自动复用其他项目会话、不自动连接或修改数据库、不扩大 HTML 迁移范围，不执行 Git 写操作或 npm publish。
+
+## v1.15 会话契约修订
+
+v1.14.0 已发布。v1.12.1/v1.13.x 中的 `providerSessionId` 仅作为历史 provider-session 兼容记录保留；后续规则以 `rules/v1.15.0-session-binding.md` 和 `rules/v1.16.0-capability-efficiency.md` 为准。新的会话绑定使用 `sessionId`、`sessionRefType`、`sessionRef`、项目/角色/任务身份和交互证据。普通 thread ID 只有在宿主可操作、项目归属匹配且七类证据完整时才可绑定，不能仅凭字段名称、taskId、文件名、标题或历史摘要进入 ready。
+
+## v1.16 能力与效率
+
+v1.16.0 在已发布的 v1.15.0 协作闭环之上增加 Skill 运行时路由、增量 CodeGraph、本地派生查询索引和阶段效率统计。三批能力分别验收；JSON/Markdown 仍是事实源，SQLite 只能作为可选派生缓存。缺少真实 v1.16 宿主行为证据时，项目状态保持 `partial`、`blocked` 或 `manual-required`，不得输出 ready 或已发布。

package/init/xinyun-ai-init/rules/init-rules.md

@@ -133,3 +133,7 @@ Run the seven-capability host preflight before role sessions. Materialize the ma
 - v1.9 fields: `sessionMatchStatus`、`selectionEvidence`、`项目简称｜角色中文名｜职责名称`、`coverageStatus=full`、`databaseAccessMode=local-files-read-only`、`legacyDatabaseAccessMode=sql-only`、`targetEnvironment`。
 
 共享事实和 Skill 文件使用临时文件、完整校验和原子重命名。前端审计默认只读；临时会话只有用户确认的代码任务才可创建。不得修改业务代码、数据库、API、依赖、Git 或发布配置。
+
+## v1.15 adapter-neutral session binding
+
+历史 v1.12.1/v1.13.x 的 providerSessionId 记录只用于兼容读取。当前新任务必须使用 `sessionId`、`sessionRefType`、`sessionRef`、`hostId/provider`、项目/角色/任务身份和 identity/interaction evidence。`host-thread`、`provider-session`、`manual-reference`、`local-session` 均需按 adapter-neutral 规则验证；providerSessionId 不再是唯一身份键或 ready 硬门禁。

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -321,3 +321,7 @@ Record all seven host capabilities before role sessions. `available-with-depende
 
 数据库交接必须记录 `databaseAccessMode=local-files-read-only`、`legacyDatabaseAccessMode=sql-only`、`sqlExecutionMode=generate-only`、四类授权、授权状态 `not-requested/requested/authorized/denied/expired/failed/unknown`、`statementHash`、targetEnvironment、`executionStatus`、`redactionStatus=verified/unverified/failed` 和完整 audit。仅允许按需读取本地 SQL/schema/migration/model 文本文件，严禁连接数据库或执行 SQL；授权变化后不得继续执行旧 SQL，执行状态回到 `needs-confirmation`。
 - v1.9 fields: `lexical-fallback`、`duplicate-not-primary`、`项目简称｜角色中文名｜职责名称`、`coverageStatus=full`、`RFC 8785 JCS-SHA-256`。
+
+## v1.15 会话绑定字段
+
+任务单和交接单新增 `sessionRefType`、`sessionRef`、`hostId`、`provider`、`identityEvidence`、`interactionEvidence`、`bindingStatus` 和 `bindingMode`。`sessionId` 仍是控制面关联键；旧 providerSessionId 只作为兼容字段。七类宿主证据不完整、跨项目或跨文件身份不一致时必须暂停或阻塞。

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -149,3 +149,7 @@ Before upgrade role-session work, read `xinyun-ai/index/initialization-recovery.
 - v1.9 fields: `sessionMatchStatus`、`duplicate-not-primary`、`selectionEvidence`、`项目简称｜角色中文名｜职责名称`、`technical-landscape`、`coverageStatus=full`、`RFC 8785 JCS-SHA-256`、`databaseAccessMode=local-files-read-only`、`legacyDatabaseAccessMode=sql-only`、`targetEnvironment`。
 
 同一 taskId + changeDomain 不得重复创建临时会话；容量不足进入 `queued`，unknown occupancy 保持占用，失败不得自动重试。升级不自动安装 Skill 依赖，不执行业务代码、数据库、API 或 Git 写操作。
+
+## v1.15 会话升级兼容
+
+升级读取旧 `providerSessionId` 时映射为 `sessionRefType=provider-session` 和 `sessionRef=providerSessionId`，不得伪造新证据。新会话发现和复用必须验证 `sessionRef` 可操作、项目/角色/任务/cwd/占用一致及七类证据；无法验证进入 pending/blocked/manual-required。普通 host-thread 不因名称自动无效，但也不能仅凭 thread ID 直接 ready。

package/init/xinyun-ai-init/rules/v1.14.0-agent-core.md

@@ -29,3 +29,7 @@ Display names follow `项目名｜角色｜职责或工作流`. Discovery and re
 ## Final delivery gate
 
 The final delivery record must list completed and unfinished work, blocked tasks, actual changed files, business-code change status, tests, review results, risks, next actions, and all gate/evidence references. `ready` requires every required gate, provider evidence, shared-fact consistency, conflict check, sensitive scan, and reviewer result to pass.
+
+## Post-v1.14 compatibility direction
+
+The package is published as v1.14.0. Its provider-specific session evidence remains historical compatibility material only. Starting with v1.15.0, use the adapter-neutral contract in `rules/v1.15.0-session-binding.md`: `sessionId` is the control-plane ID and `sessionRefType/sessionRef` identify the host reference. A `host-thread` value is acceptable only with operability, ownership and all seven interaction evidence categories. `providerSessionId` is retained only for `sessionRefType=provider-session` compatibility and is never the sole ready gate.

package/init/xinyun-ai-init/rules/v1.15.0-session-binding.md

@@ -0,0 +1,44 @@
+# v1.15.0 adapter-neutral session binding
+
+## Contract
+
+v1.15.0 uses a host-independent session binding contract. `sessionId` is the control-plane role-session identifier. The host-operable reference is stored separately in `sessionRefType` and `sessionRef`.
+
+Required binding fields are `sessionId`, `sessionRefType`, `sessionRef`, `hostId`, `provider`, `projectRootHash`, `workspaceScope`, `repositoryScope`, `workstream`, `roleId`, `taskId`, `title`, `cwd`, `identityEvidence`, `interactionEvidence`, `bindingStatus`, `bindingMode`, `createdAt`, and `updatedAt`.
+
+`sessionRefType` is one of `host-thread`, `provider-session`, `manual-reference`, or `local-session`. The adapter decides the reference format. A `providerSessionId` may be retained as a historical provider-session record, but it is not the v1.15 canonical field and its field name cannot decide readiness.
+
+## Binding gate
+
+Bind only when the reference is currently operable, belongs to the current project and workstream, matches `roleId`, `taskId`, `title`, `cwd`, workspace/repository scope and occupancy, and has complete identity and interaction evidence. `sessionId`, assignment/session binding, task index and init-result must agree.
+
+The seven evidence categories are:
+
+1. create or reuse
+2. send
+3. receive
+4. query status
+5. recover
+6. close
+7. control-file read/write
+
+Missing, stale, contradictory or unverifiable evidence keeps `bindingStatus=pending|blocked|manual-required`. It cannot produce `ready` or `executionEligible=true`.
+
+## Positive and negative rules
+
+- A `host-thread` reference is valid only when the current host can send, receive and query that thread and identity evidence proves project/role/task ownership.
+- A `provider-session` reference is accepted through the adapter compatibility path when the provider evidence is complete.
+- A `manual-reference` may be bound only with an actor, timestamp, project/role/task identity evidence and all seven interaction records.
+- A `local-session` is a control-plane correlation record only; it never authorizes real host reuse or ready.
+- A bare thread ID, task ID, filename, title, history summary or user statement is not evidence of operability or ownership.
+- A candidate from another project, workstream, repository scope or occupied role is rejected; history is preserved and never overwritten.
+- Cross-project reuse is always rejected, even when the role name and title are identical.
+- If fields disagree across task, assignment, binding, task-index or init-result, pause and route to the main session.
+
+## Compatibility
+
+v1.12.1 and v1.13.x records remain readable. Map `providerSessionId` to `sessionRefType=provider-session` and `sessionRef=providerSessionId` without deleting the historical field. Do not rewrite historical evidence as if it had used the v1.15 contract.
+
+## Recovery and idempotency
+
+Reuse the original task and role-task IDs, increment `attempt`, preserve audit records, and use the same idempotency key for retries. A failed create, send, receive, status query, recovery, close or control-file write never creates a duplicate binding. Conflicts stop writes until the main session resolves them.

package/init/xinyun-ai-init/rules/v1.16.0-capability-efficiency.md

@@ -0,0 +1,23 @@
+# v1.16.0 capability routing and execution efficiency
+
+v1.16.0 extends the published v1.15 collaboration contract. It does not add roles, create unlimited sessions, install hosts or dependencies, modify business code, connect to databases, execute SQL, or write Git state.
+
+## A. Runtime Skill routing
+
+Route by role, task type, port, language, runtime, platform, framework and risk terms. A task may select multiple Skills, but selection order is deterministic: project binding, framework-specific, generic, then fallback. Record selected, rejected, fallback and blocked decisions with source, version, digest, trust, compatibility, dependency and permission status.
+
+The minimum execution record is `skillRunId`, `skillId`, `roleId`, `taskId`, `routeReason`, `selectedAt`, `status`, `usedTools`, `unusedTools`, `fallbackReason`, `evidence`, `unverifiedScope`, `startedAt` and `finishedAt`. Unknown stacks use a generic Skill with explicit uncertainty. Missing dependencies, insufficient permissions or untrusted sources remain fallback/blocked; they are never installed or reported as executed. Repeated runs reuse the route fingerprint until task scope, stack or Skill version changes.
+
+## B. Incremental CodeGraph and local query index
+
+Reuse a healthy CodeGraph only when project identity and index identity match. Detect changes using file hashes, read-only Git evidence or the existing change ledger. No changes means `unchanged-reused`; local changes mean `incremental-updated`; incompatible or missing indexes mean `full-rebuild-required`, `unknown`, `partial` or `failed`. A failed increment preserves the old healthy index and records failed files and unverified scope.
+
+The local query index is derived from JSON/Markdown control-plane facts and can be rebuilt from them. SQLite is optional cache only. Every index records `sourceHash`, `builtAt`, `indexVersion`, `coverage` and `stale`; every query returns `evidence`, `sourcePath` and `freshness`. A read or time budget overrun returns `partial` or `unknown`, never full understanding.
+
+## C. Efficiency evidence
+
+Record stage duration, preflight time, control-plane reads, CodeGraph cache hits, incrementally updated files, Skill routing time, query index build/query time, role concurrency, queue time, retries, cache hit rate and failure/degradation causes. Compare repeatable stage data with a baseline; host-dependent total duration is not a sole acceptance criterion. Fixed materialization target is 5 seconds, and optimization cannot bypass confirmation, permissions, evidence or safety gates.
+
+## Readiness and compatibility
+
+v1.15 adapter-neutral session binding remains authoritative. `providerSessionId` is historical compatibility data only and is never a v1.16 identity or ready gate. Missing or unverifiable host interaction evidence remains `pending`, `blocked` or `manual-required`.

package/init/xinyun-ai-init/templates/README.template.md

@@ -4,12 +4,16 @@
 
 ## v1.12.1 provider session binding
 
-The canonical external identity of a role session is the provider-returned `providerSessionId`. A normal thread ID, taskId, title, or history summary cannot bind a role. Binding requires project identity, roleId, taskId, title, cwd, exclusive occupancy, and real send/receive evidence; incomplete evidence cannot become ready or executionEligible.
+For v1.12.1/v1.13.x compatibility, historical provider bindings may contain provider-returned `providerSessionId`. The v1.15 contract is adapter-neutral: `sessionId` is the control-plane identifier and `sessionRefType/sessionRef` identify a host-thread, provider-session, manual-reference, or local-session reference. A normal thread ID is accepted only when it is currently operable and project/role/task ownership plus all seven evidence categories are verified. A bare taskId, title, filename, or history summary cannot bind a role; incomplete evidence cannot become ready or executionEligible.
 
 ## v1.13.0 host adapter and manual recovery
 
 Run host adapter preflight before large CodeGraph analysis. Unsupported or unverifiable host capability blocks role sessions and emits a five-role manual recovery guide. Initialization change reports must separate newly created control files from pre-existing user changes.
 
+## v1.16 capability and efficiency
+
+v1.16 adds runtime Skill routing, incremental CodeGraph reuse and a derived local query index. JSON/Markdown control-plane files remain authoritative; SQLite is optional cache only. Stage metrics record reads, cache hits, incremental files, queue time, retries and degradation. Missing real v1.16 behavior evidence keeps readiness at `partial`, `blocked` or `manual-required`.
+
 ## v1.10 接管门禁
 
 当前项目必须先完成 `preflight-report.json` 和 `onboarding-report.json`，再进入业务代码开发。`project-status.json` 只有在项目身份、CodeGraph、基线、团队职责、五个真实角色会话、本地控制面、旧沉淀、宿主能力和敏感扫描全部通过时才可为 `ready`；缺失真实角色会话必须为 `blocked + required-role-session-not-created`。CLI 只创建 `xinyun-ai-init/`，AI 获得授权后才创建项目控制面。

package/init/xinyun-ai-init/templates/agent-profile.template.json

@@ -2,8 +2,8 @@
   "schemaVersion": 1,
   "agentId": "xinyun-ai-agent",
   "name": "欣芸技术开发 Agent",
-  "version": "1.14.0",
-  "packageVersion": "1.14.0",
+  "version": "1.16.0",
+  "packageVersion": "1.16.0",
   "projectIdentity": {
     "projectRootHash": null,
     "workspaceScope": "xinyun-ai-control",

package/init/xinyun-ai-init/templates/codegraph-incremental-record.template.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": 1,
+  "recordId": "codegraph-incremental-template",
+  "projectRootHash": null,
+  "indexIdentity": null,
+  "indexVersion": null,
+  "sourceHash": null,
+  "baseRecordId": null,
+  "updateMode": "unknown",
+  "status": "unknown",
+  "statusEnum": ["unchanged-reused", "incremental-updated", "full-rebuild-required", "unknown", "partial", "failed"],
+  "changedFiles": [],
+  "unchangedFiles": [],
+  "failedFiles": [],
+  "unverifiedScope": [],
+  "failureReason": null,
+  "oldHealthyIndexPreserved": true,
+  "gitReadOnlyEvidence": null,
+  "updatedAt": null,
+  "evidence": []
+}

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -629,6 +629,10 @@ Skill 分配使用 `assignmentStatus`，使用记录使用 `usageStatus`。固
 - 会话展示名使用 `项目名｜角色｜职责或工作流`；provider 模式的发现和复用必须验证项目身份、职责、任务范围、cwd、占用、幂等键和 canonical `providerSessionId`。local-degraded 模式只能使用 `localSessionId` 做控制面关联，不能进行真实宿主复用，历史不得覆盖或删除。
 - 最终交付必须列出已完成、未完成、阻塞任务、实际修改文件、业务代码变更、测试、审查、风险和下一步；所有接管门禁、会话证据、共享事实、冲突检查和敏感扫描通过后才可 ready。
 
+## v1.15 adapter-neutral session binding
+
+v1.14.0 的 `providerSessionId` 规则保留为历史兼容契约。v1.15.0 使用 `sessionId`、`sessionRefType`、`sessionRef`、`hostId/provider`、项目身份、角色/任务范围、`identityEvidence` 和 `interactionEvidence`。`sessionRefType` 可为 `host-thread`、`provider-session`、`manual-reference` 或 `local-session`；字段名称本身不能决定会话是否有效。ready 必须验证引用可操作、项目/角色/任务匹配、占用无冲突，并具备 create/reuse、send、receive、query-status、recover、close、control-file read/write 七类证据。旧 `providerSessionId` 只能作为兼容映射，不得单独触发 ready。
+
 ## 自我学习
 
 发现可复用经验时，先记录为候选经验。候选经验必须标注来源、适用范围、可信度、状态和最后验证时间。用户确认后，才能合并进正式规则。

package/init/xinyun-ai-init/templates/current-task.template.md

@@ -313,3 +313,12 @@
 - packet 失效原因：packet-stale / 待填写
 - databaseAccessMode：local-files-read-only（legacyDatabaseAccessMode=sql-only；sqlExecutionMode=generate-only）
 - 数据库连接、查询、结构变更、数据修改授权状态：待填写
+
+## v1.15 session binding
+
+- sessionId：控制面角色会话标识
+- sessionRefType：host-thread / provider-session / manual-reference / local-session
+- sessionRef：宿主实际可操作引用；不能仅由 taskId、文件名、标题或历史摘要推断
+- providerSessionId：历史兼容字段，可为空；不再作为唯一 ready 门禁
+- identityEvidence / interactionEvidence：必须覆盖项目、角色、任务、cwd 和七类宿主操作
+- bindingStatus：pending / blocked / manual-required / bound / conflict

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -9,9 +9,9 @@
   "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
   "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.14.0",
+  "targetVersion": "1.16.0",
   "agentCore": {
-    "version": "1.14.0",
+    "version": "1.16.0",
     "profilePath": "xinyun-ai/agent-profile.json",
     "capabilitiesPath": "xinyun-ai/agent-capabilities.json",
     "takeoverGatePath": "xinyun-ai/takeover-gate.json",
@@ -20,7 +20,7 @@
     "finalDeliveryPath": "xinyun-ai/final-delivery.json",
     "agentStatus": "manual-required",
     "takeoverStatus": "blocked",
-    "taskStatusLabelMapVersion": "1.14.0"
+    "taskStatusLabelMapVersion": "1.16.0"
   },
   "idempotencyKey": null,
   "createdFiles": [],
@@ -146,6 +146,25 @@
     "readyRequiresAllGates": true,
     "realProviderEvidenceRequired": true
   },
+  "v115": {
+    "status": "released",
+    "sessionBindingPath": "xinyun-ai/sessions/session-bindings.json",
+    "sessionBindingTemplate": "xinyun-ai-init/templates/session-binding.template.json",
+    "sessionIdentityMode": "adapter-neutral",
+    "canonicalControlPlaneId": "sessionId",
+    "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
+    "providerSessionIdPolicy": "compatibility-only; not the sole identity or ready gate",
+    "batchStatus": {"v1.15-A": "released", "v1.15-B": "released", "v1.15-C": "released"}
+  },
+  "v116": {
+    "status": "candidate",
+    "skillRoutePath": "xinyun-ai/skills/runtime-routes.json",
+    "skillRunRecordsPath": "xinyun-ai/skills/runs/",
+    "incrementalCodeGraphPath": "xinyun-ai/index/codegraph-incremental.json",
+    "localQueryIndexPath": "xinyun-ai/index/local-query-index.json",
+    "performanceMetricsPath": "xinyun-ai/index/performance-metrics.json",
+    "batchStatus": {"v1.16-A": "candidate", "v1.16-B": "candidate", "v1.16-C": "candidate"}
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",

package/init/xinyun-ai-init/templates/local-query-index.template.json

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": 1,
+  "indexId": "local-query-index-template",
+  "indexVersion": "1.16.0",
+  "sourcePaths": [],
+  "sourceHash": null,
+  "builtAt": null,
+  "coverage": {"percent": 0, "domains": [], "unverifiedScope": []},
+  "stale": true,
+  "factSourcePolicy": "JSON/Markdown control-plane files are authoritative",
+  "sqlitePolicy": "optional-derived-cache-only",
+  "entries": [],
+  "rebuildPolicy": "rebuild-from-control-plane-files",
+  "queryBudget": {"maxReads": null, "maxMs": null, "onExceeded": "partial-or-unknown"}
+}

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.14.0",
-  "scriptVersion": "2026.07.23",
+  "xinyunAiVersion": "1.16.0",
+  "scriptVersion": "2026.07.31",
   "schemaVersion": "1",
   "initializationMode": "fast",
   "expansionMode": "triggered",
@@ -15,7 +15,7 @@
   },
   "codegraph": { "enabled": false, "status": "unknown" },
   "agentCore": {
-    "version": "1.14.0",
+    "version": "1.16.0",
     "profile": "xinyun-ai/agent-profile.json",
     "capabilities": "xinyun-ai/agent-capabilities.json",
     "takeoverGate": "xinyun-ai/takeover-gate.json",
@@ -119,7 +119,7 @@
     "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
     "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "parentSessionId": null,
-    "targetVersion": "1.14.0",
+    "targetVersion": "1.16.0",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -361,6 +361,30 @@
     "taskStatusLabelMap": {"captured": "待分析", "pending": "待分配", "executing": "执行中", "waiting-review": "待审查", "awaiting-confirmation": "待确认", "completed": "已完成", "blocked": "阻塞", "cancelled": "已取消"},
     "readyRequires": ["controlPlane", "mainTask", "roleTasks", "teamResponsibility", "codeGraph", "roleSessions", "orchestrator", "recovery", "indexes", "sharedFacts", "conflicts", "sensitiveScan"]
   },
+  "v115": {
+    "status": "released",
+    "sessionBindingTemplate": "xinyun-ai-init/templates/session-binding.template.json",
+    "sessionBindingPath": "xinyun-ai/sessions/session-bindings.json",
+    "sessionIdentityMode": "adapter-neutral",
+    "sessionIdentityFields": ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "repositoryScope", "workstream", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode", "createdAt", "updatedAt"],
+    "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+    "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
+    "canonicalControlPlaneId": "sessionId",
+    "providerSessionIdPolicy": "compatibility-only; not the sole identity or ready gate",
+    "batchStatus": {"v1.15-A": "released", "v1.15-B": "released", "v1.15-C": "released"}
+  },
+  "v116": {
+    "status": "candidate",
+    "capability": "skill-routing-incremental-index-efficiency",
+    "skillRoute": "xinyun-ai/skills/runtime-routes.json",
+    "skillRunRecords": "xinyun-ai/skills/runs/",
+    "incrementalCodeGraph": "xinyun-ai/index/codegraph-incremental.json",
+    "localQueryIndex": "xinyun-ai/index/local-query-index.json",
+    "performanceMetrics": "xinyun-ai/index/performance-metrics.json",
+    "statusEnum": ["candidate", "partial", "blocked", "ready"],
+    "batchStatus": {"v1.16-A": "candidate", "v1.16-B": "candidate", "v1.16-C": "candidate"},
+    "providerSessionIdPolicy": "compatibility-only; adapter-neutral session binding remains authoritative"
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -6,6 +6,11 @@
   "roleId": null,
   "sessionId": null,
   "providerSessionId": null,
+  "sessionBindingContract": "adapter-neutral-v1.15",
+  "sessionRefType": "manual-reference",
+  "sessionRef": null,
+  "hostId": null,
+  "adapterNeutralRequiredEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
   "projectRootHash": null,
   "workspaceScope": null,
   "title": null,
@@ -31,6 +36,7 @@
   "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
   "executionEligible": false,
   "eligibilityRule": "bound + verified providerSessionId + all requiredHostEvidence + identity evidence + interaction evidence + role onboarding ready",
+  "v115EligibilityRule": "bound + operable sessionRef + project/role/task identity + seven evidence categories + role onboarding ready; providerSessionId is compatibility-only",
   "fakeSessionIdProhibited": true,
   "rejectionReason": null,
   "audit": [],

package/init/xinyun-ai-init/templates/manual-session-recovery.template.json

@@ -2,6 +2,9 @@
   "schemaVersion": 1,
   "recoveryId": "manual-session-recovery-template",
   "provider": "codex",
+  "sessionBindingContract": "adapter-neutral-v1.15",
+  "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+  "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
   "status": "not-started",
   "statusEnum": ["not-started", "guided", "awaiting-user", "validating", "recovered", "blocked", "failed"],
   "userDecisionEnum": ["manual-create", "defer", "redetect"],
@@ -42,6 +45,7 @@
   "decisionEvidence": [],
   "noChoicePolicy": "remain-blocked-without-repeat-prompt",
   "bindingRequiredFields": ["provider", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "boundBy", "boundAt", "identityEvidence", "interactionEvidence"],
+  "v115BindingRequiredFields": ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode"],
   "decisionEvidenceSchema": ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"],
   "fakeProviderSessionIdProhibited": true,
   "createdAt": null,

package/init/xinyun-ai-init/templates/performance-metrics.template.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "metricsId": "performance-metrics-template",
+  "taskId": null,
+  "attempt": 1,
+  "baselineId": null,
+  "status": "not-started",
+  "stages": [],
+  "stageRequiredFields": ["stageId", "durationMs", "reads", "cacheHit", "queueMs", "retries", "failureReason", "degradationReason"],
+  "metrics": {"preflightMs": null, "controlPlaneReads": 0, "codeGraphCacheHit": false, "incrementalFiles": 0, "skillRouteMs": null, "queryIndexBuildMs": null, "queryMs": null, "roleConcurrency": 0, "queueMs": 0, "retryCount": 0, "cacheHitRate": 0},
+  "relativeBaseline": {"compared": false, "result": "unknown", "reason": null},
+  "fixedMaterializationTargetMs": 5000,
+  "failures": [],
+  "degradations": [],
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/project-check.template.md

@@ -189,3 +189,10 @@
 - 数据库是否为 `local-files-read-only`（`sql-only` 仅兼容标识，SQL 仅生成）：待填写
 - connectionStatus、queryAuthorization、schemaChangeAuthorization、dataMutationAuthorization 是否独立：待填写
 - statementHash、targetEnvironment、executionStatus 和 audit 是否完整：待填写
+
+## v1.15 会话门禁检查
+
+- sessionRefType/sessionRef 是否来自可识别且可操作的宿主引用：待填写
+- 项目身份、角色、任务、cwd、占用和跨文件 sessionId 是否一致：待填写
+- create/reuse、send、receive、query-status、recover、close、control-file read/write 七类证据是否完整：待填写
+- providerSessionId 是否仅作为兼容字段而非唯一 ready 条件：待填写

package/init/xinyun-ai-init/templates/project-guide.template.md

@@ -258,3 +258,7 @@
 - 技术全景：`xinyun-ai/technical-landscape.json`；只有 full coverage、空 unverifiedScope 和核心证据完整才可 ready。
 - packet：`requirement-packet.json` + `technical-impact-packet.json`；使用 RFC8785 JCS-SHA-256，失效时为 `packet-stale`。
 - 数据库默认 `local-files-read-only`，`sql-only` 仅为兼容标识；数据库相关任务只读本地 SQL/schema/migration/model 文本，连接、查询、结构变更和数据修改均禁止，SQL 仅生成供审阅，执行前校验 statementHash、目标环境和 audit。
+
+## v1.15 adapter-neutral session binding
+
+新任务按 `sessionId + sessionRefType + sessionRef` 记录会话。providerSessionId 仅保留历史兼容；host-thread 必须有可操作性、项目归属、角色/任务匹配和七类交互证据，缺失时保持 pending/blocked/manual-required。

package/init/xinyun-ai-init/templates/project-index.template.json

@@ -1,7 +1,7 @@
 {
   "projectSummary": "",
   "agentCore": {
-    "version": "1.14.0",
+    "version": "1.16.0",
     "profile": "xinyun-ai/agent-profile.json",
     "capabilities": "xinyun-ai/agent-capabilities.json",
     "takeoverGate": "xinyun-ai/takeover-gate.json",
@@ -362,6 +362,29 @@
     "taskStatusLabelMap": {"captured": "待分析", "pending": "待分配", "executing": "执行中", "waiting-review": "待审查", "awaiting-confirmation": "待确认", "completed": "已完成", "blocked": "阻塞", "cancelled": "已取消"},
     "readyRequires": ["controlPlane", "mainTask", "roleTasks", "teamResponsibility", "codeGraph", "roleSessions", "orchestrator", "recovery", "indexes", "sharedFacts", "conflicts", "sensitiveScan"]
   },
+  "v115": {
+    "status": "released",
+    "sessionBindingTemplate": "xinyun-ai-init/templates/session-binding.template.json",
+    "sessionBindingPath": "xinyun-ai/sessions/session-bindings.json",
+    "sessionIdentityMode": "adapter-neutral",
+    "sessionIdentityFields": ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "repositoryScope", "workstream", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode", "createdAt", "updatedAt"],
+    "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+    "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
+    "canonicalControlPlaneId": "sessionId",
+    "providerSessionIdPolicy": "compatibility-only; not the sole identity or ready gate",
+    "batchStatus": {"v1.15-A": "released", "v1.15-B": "released", "v1.15-C": "released"}
+  },
+  "v116": {
+    "status": "candidate",
+    "skillRoute": "xinyun-ai/skills/runtime-routes.json",
+    "skillRunRecords": "xinyun-ai/skills/runs/",
+    "incrementalCodeGraph": "xinyun-ai/index/codegraph-incremental.json",
+    "localQueryIndex": "xinyun-ai/index/local-query-index.json",
+    "performanceMetrics": "xinyun-ai/index/performance-metrics.json",
+    "factSourcePolicy": "json-markdown-primary; local index derived",
+    "sqlitePolicy": "optional-derived-cache-only",
+    "batchStatus": {"v1.16-A": "candidate", "v1.16-B": "candidate", "v1.16-C": "candidate"}
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/provider-adapter.template.json

@@ -2,7 +2,11 @@
   "schemaVersion": 1,
   "adapterId": "provider-adapter-template",
   "provider": "codex",
-  "adapterVersion": "1.14.0",
+  "adapterVersion": "1.16.0",
+  "sessionBindingContract": "provider-specific-v1.13-compatible; adapter-neutral-v1.15-extension",
+  "adapterNeutralSessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+  "adapterNeutralControlPlaneSessionIdField": "sessionId",
+  "adapterNeutralSessionReferenceFields": ["sessionRefType", "sessionRef", "hostId", "provider"],
   "status": "not-checked",
   "statusEnum": ["not-checked", "checking", "available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "failed", "not-verified"],
   "canonicalSessionIdField": "providerSessionId",
@@ -28,5 +32,7 @@
   "checkedAt": null,
   "fakeSessionIdProhibited": true,
   "ordinaryThreadIdProhibited": true,
-  "readyGate": "all required operations available and canonical ID plus identity and interaction evidence verified"
+  "ordinaryThreadIdRule": "v1.13 compatibility path rejects bare thread IDs; v1.15 adapter-neutral path accepts host-thread only with operability and ownership evidence",
+  "legacyProviderSessionIdPolicy": "providerSessionId is required only by the historical v1.13 compatibility path; it is not the v1.15 sole ready gate",
+  "readyGate": "v1.13 compatibility: all required operations available plus provider identity and interaction evidence; v1.15: see session-binding.template.json"
 }

package/init/xinyun-ai-init/templates/role-session-binding.template.json

@@ -6,6 +6,11 @@
   "roleId": "project-owner",
   "sessionId": null,
   "sessionIdSemantics": "project compatibility alias; null until providerSessionId is verified",
+  "adapterNeutralContract": "v1.15.0 uses sessionId as the control-plane ID and sessionRefType/sessionRef as the host reference; providerSessionId is compatibility-only",
+  "sessionRefType": "host-thread",
+  "sessionRef": null,
+  "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+  "hostId": null,
   "localSessionId": null,
   "sessionIdentityMode": "provider-canonical",
   "sessionIdentityModeEnum": ["provider-canonical", "local-degraded"],
@@ -42,7 +47,7 @@
     "creationEvidence": [],
     "requiredHostEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close"]
   },
-  "targetVersion": "1.14.0",
+  "targetVersion": "1.16.0",
   "projectRootHash": null,
   "workspaceScope": {"scopeType": "project-root", "scopePathHashes": [], "scopeRevision": null},
   "repositoryScopeHash": null,
@@ -91,9 +96,10 @@
   "renameAudit": null,
   "displayName": null,
   "displayNamePattern": "项目名｜角色｜职责或工作流",
+  "v115ReadyGate": "operable sessionRef + project/role/task identity + seven evidence categories + no conflict",
   "projectDisplayName": null,
   "roleDisplayName": null,
   "responsibilityLabel": null,
   "titleSource": "role-contract",
-  "titleVersion": "1.14.0"
+  "titleVersion": "1.15.0"
 }

package/init/xinyun-ai-init/templates/session-binding.template.json

@@ -0,0 +1,35 @@
+{
+  "schemaVersion": 1,
+  "contractVersion": "1.15.0",
+  "bindingId": "session-binding-template",
+  "sessionId": null,
+  "sessionRefType": "host-thread",
+  "sessionRef": null,
+  "sessionRefTypeEnum": ["host-thread", "provider-session", "manual-reference", "local-session"],
+  "hostId": null,
+  "provider": null,
+  "projectRootHash": null,
+  "workspaceScope": {"scopeType": "project-root", "scopePathHashes": [], "scopeRevision": null},
+  "repositoryScope": [],
+  "workstream": null,
+  "roleId": null,
+  "taskId": null,
+  "title": null,
+  "cwd": null,
+  "identityEvidence": [],
+  "interactionEvidence": [],
+  "requiredEvidenceCategories": ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"],
+  "bindingStatus": "pending",
+  "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "manual-required", "conflict", "released", "recovery-required"],
+  "bindingMode": "auto-created",
+  "bindingModeEnum": ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"],
+  "executionEligible": false,
+  "readyGate": "operable reference + project/role/task identity + seven evidence categories + no conflict",
+  "legacyProviderSessionId": null,
+  "legacyProviderCompatibility": "providerSessionId is retained only when sessionRefType=provider-session; it is not the v1.15 canonical field",
+  "idempotencyKey": null,
+  "attempt": 1,
+  "createdAt": "2026-07-31T00:00:00.000Z",
+  "updatedAt": "2026-07-31T00:00:00.000Z",
+  "audit": []
+}

package/init/xinyun-ai-init/templates/skill-run-record.template.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "skillRunId": "skill-run-template",
+  "skillId": null,
+  "roleId": null,
+  "taskId": null,
+  "routeReason": [],
+  "selectedAt": null,
+  "status": "pending",
+  "statusEnum": ["pending", "selected", "running", "completed", "failed", "fallback", "blocked", "skipped"],
+  "usedTools": [],
+  "unusedTools": [],
+  "fallbackReason": null,
+  "evidence": [],
+  "unverifiedScope": [],
+  "startedAt": null,
+  "finishedAt": null,
+  "skillSource": null,
+  "skillVersion": null,
+  "skillDigest": null,
+  "trustStatus": "unknown",
+  "dependencyStatus": "unknown",
+  "permissionStatus": "unknown"
+}

package/init/xinyun-ai-init/templates/skill-runtime-route.template.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "routeId": "skill-route-template",
+  "taskId": null,
+  "roleId": null,
+  "routeFingerprint": null,
+  "routeReason": [],
+  "candidateSkills": [],
+  "selected": [],
+  "rejected": [],
+  "fallback": [],
+  "blocked": [],
+  "selectionOrder": ["project-binding", "framework-specific", "generic", "fallback"],
+  "registrySource": "xinyun-ai/skills/registry.json",
+  "registryVersion": null,
+  "registryDigest": null,
+  "reusePolicy": "reuse-until-task-scope-stack-or-skill-version-changes",
+  "createdAt": null,
+  "updatedAt": null
+}