@pm_zhousl/xinyun-ai-init 1.7.1 → 1.7.3

package/init/xinyun-ai-init/templates/task-index.template.json

@@ -4,7 +4,36 @@
   "executableTaskIds": [],
   "archivedTaskIds": [],
   "currentTaskId": null,
+  "roleExecutionDirectory": "xinyun-ai/tasks/role-execution/",
+  "roleExecutionTaskIds": [],
+  "roleSessionBindingIds": [],
+  "roleExecutionStatusEnum": ["pending", "assigned", "accepted", "executing", "paused", "blocked", "completed", "cancelled"],
+  "roleSessionStatusEnum": ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"],
+  "roleExecutionPriority": {
+    "project-owner": 10,
+    "project-product": 20,
+    "chief-engineer": 30,
+    "programmer": 40,
+    "test-reviewer": 50
+  },
+  "taskSortOrder": ["priority", "createdAt", "roleId", "taskId"],
+  "currentTaskPolicy": {
+    "idleWhenActiveTaskIdsEmpty": true,
+    "activeButNotExecutableStatus": ["pending", "blocked"],
+    "idleTaskId": null
+  },
+  "idempotency": {
+    "keyFields": ["sourceTaskId", "roleId", "taskKind", "targetVersion"],
+    "algorithm": "JCS-SHA-256",
+    "duplicatePolicy": "reuse"
+  },
+  "roleSessionIdempotency": {
+    "keyFields": ["taskId", "roleId", "provider", "targetVersion"],
+    "algorithm": "JCS-SHA-256",
+    "duplicatePolicy": "reuse"
+  },
   "tasks": [],
+  "roleSessionBindings": [],
   "archiveTransactions": [],
   "statusEnum": ["pending", "executing", "partial", "blocked", "completed", "cancelled"],
   "idleCurrentTask": {

package/init/xinyun-ai-init/templates/team/README.md

@@ -9,6 +9,16 @@
 - `confirmations/<roleId>.md` 和 `understandings/<roleId>.md` 的 `createdAt`、`updatedAt` 必须存在且为 ISO 8601 时间；首次落盘可使用模板初始时间或替换为当前时间，但不得留空。
 - `xinyun-ai/team/**` 属于 AI 工作区控制文件，不授权修改业务代码、数据库、API、依赖、构建脚本或执行发布操作。
 
+## Codex 角色会话绑定
+
+- v1.7.3 起，在 Codex 宿主支持创建子会话时，主会话可以为五个默认角色自动创建真实角色子会话，并把真实 `sessionId` 回写到角色任务、`assignments.json`、`task-index.json`、`manifest.json`、`project-index.json` 和 `xinyun-ai/sessions/role-session-bindings.json`。
+- 固定角色为 `project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer`，不得因为初始化或升级创建超过 5 个角色会话。
+- `sessionId` 必须来自 Codex 宿主返回值，不得使用任务 ID、随机占位字符串、本地文件名或历史会话记忆冒充。
+- 会话绑定最小字段为 `taskId`、`roleId`、`sessionId`、`parentSessionId`、`provider`、`sessionStatus`、`createdAt`、`updatedAt`。
+- 会话状态固定为 `pending/creating/created/onboarding/ready/blocked/failed/closed`。
+- 创建成功后先进入 `onboarding`，只允许只读理解职责范围和项目资料；职责理解、确认关系和执行门禁满足后才允许 `ready`。
+- Codex 宿主不支持创建子会话、权限不足或创建失败时，必须进入本地降级：保留 `sessionId=null`，记录 `sessionStatus=blocked/failed`、失败原因和下一步动作，不得伪造会话。
+
 ## 默认角色
 
 - `project-owner`：项目负责人，负责需求最终确认、业务验收和发布授权。

package/init/xinyun-ai-init/templates/team/assignments.json

@@ -10,6 +10,10 @@
       "assignmentId",
       "taskId",
       "roleId",
+      "sessionId",
+      "parentSessionId",
+      "provider",
+      "sessionStatus",
       "memberId",
       "workstream",
       "scope",
@@ -27,7 +31,8 @@
     ],
     "pausedRule": "status=paused requires pauseReason; other statuses require pauseReason=null.",
     "blockedRule": "status=blocked requires blockedReason=approver-unavailable or member-conflict.",
-    "executionEligibility": "member bound, role ready, responsibility confirmed, understanding ready, and executor memberId not equal to final approver member IDs."
+    "executionEligibility": "member bound, role ready, sessionStatus=ready, responsibility confirmed, understanding ready, and executor memberId not equal to final approver member IDs.",
+    "sessionBindingRule": "sessionId must be a real host-returned value when provider=codex; if the host cannot create sessions, sessionId remains null and sessionStatus=blocked or failed with a local degradation reason."
   },
   "updatedAt": ""
 }

package/init/xinyun-ai-init/version.json

@@ -1,8 +1,8 @@
 {
   "packageName": "xinyun-ai-init",
   "displayName": "欣芸技术开发 Agent 流初始化包",
-  "version": "1.7.1",
-  "scriptVersion": "2026.07.20",
+  "version": "1.7.3",
+  "scriptVersion": "2026.07.22",
   "schemaVersion": "1",
   "defaultMode": "fast-init",
   "targetWorkspace": "xinyun-ai",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pm_zhousl/xinyun-ai-init",
-  "version": "1.7.1",
+  "version": "1.7.3",
   "description": "欣芸技术开发 Agent 流初始化包",
   "bin": {
     "xinyun-ai-init": "bin/xinyun-ai-init.js"
@@ -30,4 +30,4 @@
   "engines": {
     "node": ">=16"
   }
-}
+}

package/scripts/verify-init-package.js

@@ -103,18 +103,18 @@ function verifyPackageFiles() {
   );
 
   addCheck(
-    "package.json 版本为 1.7.1",
-    packageJson.version === "1.7.1",
+    "package.json 版本为 1.7.3",
+    packageJson.version === "1.7.3",
     `当前版本为 ${packageJson.version}`
   );
   addCheck(
-    "version.json 版本为 1.7.1",
-    versionJson.version === "1.7.1",
+    "version.json 版本为 1.7.3",
+    versionJson.version === "1.7.3",
     `当前版本为 ${versionJson.version}`
   );
   addCheck(
-    "manifest.template.json 版本为 1.7.1",
-    manifestTemplate.xinyunAiVersion === "1.7.1",
+    "manifest.template.json 版本为 1.7.3",
+    manifestTemplate.xinyunAiVersion === "1.7.3",
     `当前版本为 ${manifestTemplate.xinyunAiVersion}`
   );
 }
@@ -469,8 +469,8 @@ function verifyInitRules() {
 
 function verifyTestScenarios() {
   requireIncludes("test-scenarios/scenarios.md", [
-    "1-87",
-    "88",
+    "1-96",
+    "97",
     "## 40. v1.6-A",
     "## 53. v1.6 tarball",
     "## 55. verify:rules",
@@ -479,14 +479,18 @@ function verifyTestScenarios() {
     "## 69. verify:rules JSON schema",
     "## 71. v1.7.1 主任务命名",
     "## 87. v1.7.1 普通咨询和版本回归",
-    "## 88. Skill",
+    "## 89. v1.7.3 Codex 真实角色会话创建",
+    "## 96. v1.7.3 普通咨询边界",
+    "## 97. Skill",
   ]);
 
   requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.7.1.tgz",
-    "1-87",
-    "88",
+    "pm_zhousl-xinyun-ai-init-1.7.3.tgz",
+    "1-96",
+    "97",
     "npm run verify:rules",
+    "v1.7.2-scenarios.md",
+    "v1.7.3-scenarios.md",
   ]);
 
   requireIncludes("test-scenarios/v1.7.1-scenarios.md", [
@@ -497,6 +501,26 @@ function verifyTestScenarios() {
     "CodeGraph记录与失败矩阵",
     "普通咨询边界",
   ]);
+
+  requireIncludes("test-scenarios/v1.7.2-scenarios.md", [
+    "role-execution",
+    "activeTaskIds",
+    "executableTaskIds",
+    "固定优先级",
+    "幂等补建",
+    "补建失败和索引恢复",
+  ]);
+
+  requireIncludes("test-scenarios/v1.7.3-scenarios.md", [
+    "真实角色子会话创建",
+    "provider=codex",
+    "sessionStatus=onboarding",
+    "taskId + roleId + provider + targetVersion",
+    "local-degraded-no-fake-session-id",
+    "created-but-writeback-failed",
+    "单角色失败不影响其他角色",
+    "普通咨询边界",
+  ]);
 }
 function verifyFrameworkRules() {
   const required = [
@@ -741,7 +765,7 @@ function verifyV16Contracts() {
   ]);
 
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.1`",
+    "当前规则版本：`1.7.3`",
     "v1.6 初始化任务、幂等恢复与结果记录",
     "xinyun-ai/tasks/.idempotency/",
     "xinyun-ai/init-result.json",
@@ -941,7 +965,7 @@ function verifyV16Contracts() {
   }
 
   addCheck("init-result mode 为 initialization", initResult.mode === "initialization");
-  addCheck("init-result targetVersion=1.7.1", initResult.targetVersion === "1.7.1");
+  addCheck("init-result targetVersion=1.7.3", initResult.targetVersion === "1.7.3");
   addCheck("init-result businessCodeChanged 初始为 unknown", initResult.businessCodeChanged && initResult.businessCodeChanged.value === "unknown");
   addCheck("task-lock scope=xinyun-ai-control", taskLock.scope === "xinyun-ai-control");
   addCheck("task-lock audit 包含 released", Array.isArray(taskLock.audit) && taskLock.audit.some((item) => item.action === "released"));
@@ -1047,7 +1071,7 @@ function verifyV17Contracts() {
   addCheck("html migration pilot requires separate confirmation", htmlMigration.pilotPlan && htmlMigration.pilotPlan.requiresSeparateConfirmation === true);
 
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.1`",
+    "当前规则版本：`1.7.3`",
     "v1.7 规则包一致性检查与 verify:rules",
     "frameworkStatus=confirmed/inferred/not-found/unknown/detected-unsupported",
     "v1.7 深化预算：5 层目录、80 个关键文件、100 条证据",
@@ -1066,17 +1090,17 @@ function verifyV17Contracts() {
   ]);
 
   requireIncludes("test-scenarios/scenarios.md", [
-    "当前必测场景为 1-87",
-    "当前观察场景为 88",
+    "当前必测场景为 1-96",
+    "当前观察场景为 97",
     "## 55. verify:rules 正常通过",
     "## 69. verify:rules JSON schema 和重复执行",
-    "## 88. Skill 触发测试",
+    "## 97. Skill 触发测试",
   ]);
 
   requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.7.1.tgz",
-    "当前必测场景为 `scenarios.md` 的 1-87",
-    "当前观察场景为 `scenarios.md` 的 88",
+    "pm_zhousl-xinyun-ai-init-1.7.3.tgz",
+    "当前必测场景为 `scenarios.md` 的 1-96",
+    "当前观察场景为 `scenarios.md` 的 97",
     "npm run verify:rules",
   ]);
 }
@@ -1142,7 +1166,7 @@ function verifyV171Contracts() {
   addCheck("init-result taskTree role count", initResult.taskTree && initResult.taskTree.roleTaskCount === 5, "init-result taskTree.roleTaskCount 应为 5");
 
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.1`",
+    "当前规则版本：`1.7.3`",
     "项目初始化：<项目显示名>",
     "xinyun-ai/tasks/task-index.json",
     "xinyun-ai/tasks/.archive-transactions/<archiveTransactionId>.json",
@@ -1210,6 +1234,244 @@ function verifyJsonAndMarkdown() {
   }
 }
 
+function verifyV172Contracts() {
+  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
+  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
+  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
+  const roleExecution = readText("init/xinyun-ai-init/templates/role-execution.template.md");
+  const expectedPriority = {
+    "project-owner": 10,
+    "project-product": 20,
+    "chief-engineer": 30,
+    "programmer": 40,
+    "test-reviewer": 50,
+  };
+
+  requireFile("init/xinyun-ai-init/templates/role-execution.template.md");
+  requireFile("test-scenarios/v1.7.2-scenarios.md");
+  addCheck(
+    "manifest v1.7.2 roleExecutionVisibility",
+    manifestTemplate.capabilities && manifestTemplate.capabilities.roleExecutionVisibility === true,
+    "manifest 缺少 roleExecutionVisibility 能力"
+  );
+  addCheck(
+    "manifest roleExecutionDirectory",
+    manifestTemplate.tasking && manifestTemplate.tasking.roleExecutionDirectory === "xinyun-ai/tasks/role-execution/",
+    "manifest roleExecutionDirectory 不一致"
+  );
+  addCheck(
+    "project-index roleExecutionDirectory",
+    projectIndexTemplate.tasking && projectIndexTemplate.tasking.roleExecutionDirectory === "xinyun-ai/tasks/role-execution/",
+    "project-index roleExecutionDirectory 不一致"
+  );
+  addCheck(
+    "manifest roleExecution path pattern",
+    manifestTemplate.taskTree && manifestTemplate.taskTree.roleExecutionPathPattern === "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
+    "manifest roleExecution path pattern 不一致"
+  );
+  addCheck(
+    "task-index roleExecutionDirectory",
+    taskIndex.roleExecutionDirectory === "xinyun-ai/tasks/role-execution/",
+    "task-index roleExecutionDirectory 不一致"
+  );
+  addCheck("task-index roleExecutionTaskIds array", Array.isArray(taskIndex.roleExecutionTaskIds), "roleExecutionTaskIds 必须是数组");
+  addCheck(
+    "task-index roleExecution status enum",
+    JSON.stringify(taskIndex.roleExecutionStatusEnum) === JSON.stringify(["pending", "assigned", "accepted", "executing", "paused", "blocked", "completed", "cancelled"]),
+    "roleExecutionStatusEnum 不完整"
+  );
+  addCheck(
+    "task-index task sort order",
+    JSON.stringify(taskIndex.taskSortOrder) === JSON.stringify(["priority", "createdAt", "roleId", "taskId"]),
+    "任务稳定排序字段不一致"
+  );
+  addCheck(
+    "task-index current task idle policy",
+    taskIndex.currentTaskPolicy && taskIndex.currentTaskPolicy.idleWhenActiveTaskIdsEmpty === true && taskIndex.currentTaskPolicy.idleTaskId === null,
+    "current-task idle policy 不完整"
+  );
+  addCheck(
+    "task-index role idempotency fields",
+    taskIndex.idempotency && JSON.stringify(taskIndex.idempotency.keyFields) === JSON.stringify(["sourceTaskId", "roleId", "taskKind", "targetVersion"]) && taskIndex.idempotency.algorithm === "JCS-SHA-256" && taskIndex.idempotency.duplicatePolicy === "reuse",
+    "逐角色幂等契约不完整"
+  );
+  for (const [roleId, priority] of Object.entries(expectedPriority)) {
+    addCheck(
+      `task-index priority ${roleId}`,
+      taskIndex.roleExecutionPriority && taskIndex.roleExecutionPriority[roleId] === priority,
+      `${roleId} 默认优先级不一致`
+    );
+    addCheck(
+      `manifest priority ${roleId}`,
+      manifestTemplate.taskTree && manifestTemplate.taskTree.roleExecutionPriority && manifestTemplate.taskTree.roleExecutionPriority[roleId] === priority,
+      `${roleId} manifest 默认优先级不一致`
+    );
+  }
+
+  const requiredRoleFields = [
+    "taskId", "roleTaskId", "parentTaskId", "roleId", "taskKind", "title", "priority", "status",
+    "assignmentStatus", "understandingStatus", "confirmationStatus", "memberId", "sessionId",
+    "executionEligible", "blockedReason", "nextAction", "sourceTaskId", "idempotencyKey", "createdAt", "updatedAt",
+  ];
+  for (const field of requiredRoleFields) {
+    addCheck(`role-execution template field ${field}`, roleExecution.includes(`- ${field}：`), `role-execution 模板缺少 ${field}`);
+  }
+  requireIncludes("init/xinyun-ai-init/README.md", [
+    "当前规则版本：`1.7.3`",
+    "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
+    "activeTaskIds",
+    "executableTaskIds",
+    "priority ASC",
+    "JCS-SHA-256",
+    "blockedReason=write-failed",
+  ]);
+  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", [
+    "v1.7.2 初始化后角色任务可见性与执行任务分离",
+    "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
+    "activeTaskIds",
+    "executableTaskIds",
+    "JCS-SHA-256",
+  ]);
+  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", ["v1.7.2 角色后续任务可见性", "role-execution"]);
+  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.2 升级补建角色后续任务", "write-failed"]);
+  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.2 任务可见性目录", "role-execution"]);
+  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.2 角色执行任务补充字段", "roleExecutionResult"]);
+}
+
+function verifyV173Contracts() {
+  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
+  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
+  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
+  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
+  const assignments = JSON.parse(readText("init/xinyun-ai-init/templates/team/assignments.json"));
+  const bindingTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/role-session-binding.template.json"));
+  const roleExecution = readText("init/xinyun-ai-init/templates/role-execution.template.md");
+  const statusEnum = ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"];
+
+  requireFile("init/xinyun-ai-init/templates/role-session-binding.template.json");
+  requireFile("test-scenarios/v1.7.3-scenarios.md");
+
+  addCheck(
+    "manifest v1.7.3 codexRoleSessionOrchestration",
+    manifestTemplate.capabilities && manifestTemplate.capabilities.codexRoleSessionOrchestration === true,
+    "manifest 缺少 codexRoleSessionOrchestration 能力"
+  );
+  addCheck(
+    "manifest roleSessions provider codex",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.provider === "codex",
+    "manifest roleSessions.provider 必须为 codex"
+  );
+  addCheck(
+    "manifest roleSessions targetVersion=1.7.3",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.targetVersion === "1.7.3",
+    "manifest roleSessions.targetVersion 必须为 1.7.3"
+  );
+  addCheck(
+    "manifest roleSessions bindings path",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json",
+    "manifest roleSessions.bindings 不一致"
+  );
+  addCheck(
+    "manifest roleSessions directory",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.directory === "xinyun-ai/sessions/roles/",
+    "manifest roleSessions.directory 不一致"
+  );
+  addCheck(
+    "manifest roleSessions bindingTemplate",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.bindingTemplate === "xinyun-ai-init/templates/role-session-binding.template.json",
+    "manifest roleSessions.bindingTemplate 不一致"
+  );
+  addCheck(
+    "manifest roleSessions requiredRoleCount=5",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.requiredRoleCount === 5,
+    "manifest roleSessions.requiredRoleCount 必须为 5"
+  );
+  addCheck(
+    "manifest roleSessions status enum",
+    manifestTemplate.roleSessions && JSON.stringify(manifestTemplate.roleSessions.statusEnum) === JSON.stringify(statusEnum),
+    "manifest roleSessions.statusEnum 不完整"
+  );
+  addCheck(
+    "manifest roleSessions idempotency fields",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.idempotency && JSON.stringify(manifestTemplate.roleSessions.idempotency.keyFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]),
+    "manifest roleSessions.idempotency.keyFields 不一致"
+  );
+  addCheck(
+    "manifest roleSessions host unsupported policy",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.hostUnsupportedPolicy === "local-degraded-no-fake-session-id",
+    "manifest roleSessions.hostUnsupportedPolicy 不一致"
+  );
+
+  addCheck(
+    "project-index roleSessions path",
+    projectIndexTemplate.roleSessions && projectIndexTemplate.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json",
+    "project-index roleSessions.bindings 不一致"
+  );
+  addCheck(
+    "project-index roleSessions status enum",
+    projectIndexTemplate.roleSessions && JSON.stringify(projectIndexTemplate.roleSessions.statusEnum) === JSON.stringify(statusEnum),
+    "project-index roleSessions.statusEnum 不完整"
+  );
+  addCheck("project-index roleSessions records array", projectIndexTemplate.roleSessions && Array.isArray(projectIndexTemplate.roleSessions.records), "project-index roleSessions.records 必须是数组");
+
+  addCheck("task-index roleSessionBindingIds array", Array.isArray(taskIndex.roleSessionBindingIds), "task-index roleSessionBindingIds 必须是数组");
+  addCheck("task-index roleSessionBindings array", Array.isArray(taskIndex.roleSessionBindings), "task-index roleSessionBindings 必须是数组");
+  addCheck(
+    "task-index roleSession status enum",
+    JSON.stringify(taskIndex.roleSessionStatusEnum) === JSON.stringify(statusEnum),
+    "task-index roleSessionStatusEnum 不完整"
+  );
+  addCheck(
+    "task-index roleSession idempotency fields",
+    taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.keyFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]),
+    "task-index roleSessionIdempotency.keyFields 不一致"
+  );
+
+  addCheck("init-result roleSessions provider codex", initResult.roleSessions && initResult.roleSessions.provider === "codex", "init-result roleSessions.provider 必须为 codex");
+  addCheck("init-result roleSessions requiredRoleCount=5", initResult.roleSessions && initResult.roleSessions.requiredRoleCount === 5, "init-result roleSessions.requiredRoleCount 必须为 5");
+  for (const field of ["createdCount", "reusedCount", "failedCount", "blockedCount", "localDegradedCount"]) {
+    addCheck(`init-result roleSessions ${field}`, initResult.roleSessions && typeof initResult.roleSessions[field] === "number", `init-result roleSessions.${field} 必须是数字`);
+  }
+
+  for (const field of ["sessionId", "parentSessionId", "provider", "sessionStatus"]) {
+    addCheck(`assignments required field ${field}`, assignments.recordContract && assignments.recordContract.requiredFields.includes(field), `assignments recordContract 缺少 ${field}`);
+  }
+  addCheck("assignments session binding rule mentions real host value", assignments.recordContract && assignments.recordContract.sessionBindingRule.includes("real host-returned value"), "assignments sessionBindingRule 必须说明真实宿主返回值");
+
+  addCheck("binding template provider codex", bindingTemplate.provider === "codex", "binding template provider 必须为 codex");
+  addCheck("binding template targetVersion=1.7.3", bindingTemplate.targetVersion === "1.7.3", "binding template targetVersion 必须为 1.7.3");
+  addCheck("binding template fakeSessionId prohibited", bindingTemplate.degradation && bindingTemplate.degradation.fakeSessionIdProhibited === true, "binding template 必须禁止伪造 sessionId");
+  addCheck("binding template onboarding readOnly", bindingTemplate.onboarding && bindingTemplate.onboarding.readOnly === true, "binding template onboarding.readOnly 必须为 true");
+
+  for (const field of ["parentSessionId", "provider", "sessionStatus", "sessionBindingId", "sessionBindingPath", "sessionIdempotencyKey"]) {
+    addCheck(`role-execution v1.7.3 field ${field}`, roleExecution.includes(`- ${field}：`), `role-execution 模板缺少 ${field}`);
+  }
+
+  const snippets = [
+    "v1.7.3 Codex 角色会话自动创建与绑定",
+    "provider=codex",
+    "sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed",
+    "taskId + roleId + provider + targetVersion",
+    "真实 `sessionId`",
+    "不得伪造 sessionId",
+    "local-degraded-no-fake-session-id",
+    "onboarding",
+    "created-but-writeback-failed",
+    "创建成功不等于业务代码修改授权",
+  ];
+  requireIncludes("init/xinyun-ai-init/README.md", snippets);
+  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", snippets);
+  requireIncludes("init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7.3 Codex 角色会话自动创建与绑定", "provider=codex", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", ["v1.7.3 Codex 角色会话初始化", "provider=codex", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.3 升级创建和绑定真实角色会话", "created-but-writeback-failed", "不得伪造 sessionId"]);
+  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.3 角色会话绑定目录", "xinyun-ai/sessions/role-session-bindings.json", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.3 角色会话交接字段", "roleSessionIdempotency", "不得伪造 sessionId"]);
+  requireIncludes("init/xinyun-ai-init/templates/project-guide.template.md", ["v1.7.3 Codex role session anchors", "roleSessionIdempotency", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/templates/project-check.template.md", ["v1.7.3 checks", "provider=codex", "不存在伪造 sessionId"]);
+  requireIncludes("test-scenarios/scenarios.md", ["当前必测场景为 1-96", "当前观察场景为 97", "## 89. v1.7.3 Codex 真实角色会话创建", "## 96. v1.7.3 普通咨询边界", "## 97. Skill"]);
+  requireIncludes("test-scenarios/review-template.md", ["1-96 必测", "89. v1.7.3 Codex 真实角色会话创建", "96. v1.7.3 普通咨询边界", "97. Skill"]);
+}
+
 function main() {
   requireFile("bin/xinyun-ai-init.js");
   requireFile("init/xinyun-ai-init/README.md");
@@ -1223,6 +1485,8 @@ function main() {
   verifyV16Contracts();
   verifyV17Contracts();
   verifyV171Contracts();
+  verifyV172Contracts();
+  verifyV173Contracts();
   verifyTestScenarios();
   verifyJsonAndMarkdown();