@pm_zhousl/xinyun-ai-init 1.7.2 → 1.7.3

package/scripts/verify-init-package.js

@@ -103,18 +103,18 @@ function verifyPackageFiles() {
   );
 
   addCheck(
-    "package.json 版本为 1.7.2",
-    packageJson.version === "1.7.2",
+    "package.json 版本为 1.7.3",
+    packageJson.version === "1.7.3",
     `当前版本为 ${packageJson.version}`
   );
   addCheck(
-    "version.json 版本为 1.7.2",
-    versionJson.version === "1.7.2",
+    "version.json 版本为 1.7.3",
+    versionJson.version === "1.7.3",
     `当前版本为 ${versionJson.version}`
   );
   addCheck(
-    "manifest.template.json 版本为 1.7.2",
-    manifestTemplate.xinyunAiVersion === "1.7.2",
+    "manifest.template.json 版本为 1.7.3",
+    manifestTemplate.xinyunAiVersion === "1.7.3",
     `当前版本为 ${manifestTemplate.xinyunAiVersion}`
   );
 }
@@ -469,8 +469,8 @@ function verifyInitRules() {
 
 function verifyTestScenarios() {
   requireIncludes("test-scenarios/scenarios.md", [
-    "1-87",
-    "88",
+    "1-96",
+    "97",
     "## 40. v1.6-A",
     "## 53. v1.6 tarball",
     "## 55. verify:rules",
@@ -479,15 +479,18 @@ function verifyTestScenarios() {
     "## 69. verify:rules JSON schema",
     "## 71. v1.7.1 主任务命名",
     "## 87. v1.7.1 普通咨询和版本回归",
-    "## 88. Skill",
+    "## 89. v1.7.3 Codex 真实角色会话创建",
+    "## 96. v1.7.3 普通咨询边界",
+    "## 97. Skill",
   ]);
 
   requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.7.2.tgz",
-    "1-87",
-    "88",
+    "pm_zhousl-xinyun-ai-init-1.7.3.tgz",
+    "1-96",
+    "97",
     "npm run verify:rules",
     "v1.7.2-scenarios.md",
+    "v1.7.3-scenarios.md",
   ]);
 
   requireIncludes("test-scenarios/v1.7.1-scenarios.md", [
@@ -507,6 +510,17 @@ function verifyTestScenarios() {
     "幂等补建",
     "补建失败和索引恢复",
   ]);
+
+  requireIncludes("test-scenarios/v1.7.3-scenarios.md", [
+    "真实角色子会话创建",
+    "provider=codex",
+    "sessionStatus=onboarding",
+    "taskId + roleId + provider + targetVersion",
+    "local-degraded-no-fake-session-id",
+    "created-but-writeback-failed",
+    "单角色失败不影响其他角色",
+    "普通咨询边界",
+  ]);
 }
 function verifyFrameworkRules() {
   const required = [
@@ -751,7 +765,7 @@ function verifyV16Contracts() {
   ]);
 
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.2`",
+    "当前规则版本：`1.7.3`",
     "v1.6 初始化任务、幂等恢复与结果记录",
     "xinyun-ai/tasks/.idempotency/",
     "xinyun-ai/init-result.json",
@@ -951,7 +965,7 @@ function verifyV16Contracts() {
   }
 
   addCheck("init-result mode 为 initialization", initResult.mode === "initialization");
-  addCheck("init-result targetVersion=1.7.2", initResult.targetVersion === "1.7.2");
+  addCheck("init-result targetVersion=1.7.3", initResult.targetVersion === "1.7.3");
   addCheck("init-result businessCodeChanged 初始为 unknown", initResult.businessCodeChanged && initResult.businessCodeChanged.value === "unknown");
   addCheck("task-lock scope=xinyun-ai-control", taskLock.scope === "xinyun-ai-control");
   addCheck("task-lock audit 包含 released", Array.isArray(taskLock.audit) && taskLock.audit.some((item) => item.action === "released"));
@@ -1057,7 +1071,7 @@ function verifyV17Contracts() {
   addCheck("html migration pilot requires separate confirmation", htmlMigration.pilotPlan && htmlMigration.pilotPlan.requiresSeparateConfirmation === true);
 
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.2`",
+    "当前规则版本：`1.7.3`",
     "v1.7 规则包一致性检查与 verify:rules",
     "frameworkStatus=confirmed/inferred/not-found/unknown/detected-unsupported",
     "v1.7 深化预算：5 层目录、80 个关键文件、100 条证据",
@@ -1076,17 +1090,17 @@ function verifyV17Contracts() {
   ]);
 
   requireIncludes("test-scenarios/scenarios.md", [
-    "当前必测场景为 1-87",
-    "当前观察场景为 88",
+    "当前必测场景为 1-96",
+    "当前观察场景为 97",
     "## 55. verify:rules 正常通过",
     "## 69. verify:rules JSON schema 和重复执行",
-    "## 88. Skill 触发测试",
+    "## 97. Skill 触发测试",
   ]);
 
   requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.7.2.tgz",
-    "当前必测场景为 `scenarios.md` 的 1-87",
-    "当前观察场景为 `scenarios.md` 的 88",
+    "pm_zhousl-xinyun-ai-init-1.7.3.tgz",
+    "当前必测场景为 `scenarios.md` 的 1-96",
+    "当前观察场景为 `scenarios.md` 的 97",
     "npm run verify:rules",
   ]);
 }
@@ -1152,7 +1166,7 @@ function verifyV171Contracts() {
   addCheck("init-result taskTree role count", initResult.taskTree && initResult.taskTree.roleTaskCount === 5, "init-result taskTree.roleTaskCount 应为 5");
 
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.2`",
+    "当前规则版本：`1.7.3`",
     "项目初始化：<项目显示名>",
     "xinyun-ai/tasks/task-index.json",
     "xinyun-ai/tasks/.archive-transactions/<archiveTransactionId>.json",
@@ -1303,7 +1317,7 @@ function verifyV172Contracts() {
     addCheck(`role-execution template field ${field}`, roleExecution.includes(`- ${field}：`), `role-execution 模板缺少 ${field}`);
   }
   requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.7.2`",
+    "当前规则版本：`1.7.3`",
     "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
     "activeTaskIds",
     "executableTaskIds",
@@ -1324,6 +1338,140 @@ function verifyV172Contracts() {
   requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.2 角色执行任务补充字段", "roleExecutionResult"]);
 }
 
+function verifyV173Contracts() {
+  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
+  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
+  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
+  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
+  const assignments = JSON.parse(readText("init/xinyun-ai-init/templates/team/assignments.json"));
+  const bindingTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/role-session-binding.template.json"));
+  const roleExecution = readText("init/xinyun-ai-init/templates/role-execution.template.md");
+  const statusEnum = ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"];
+
+  requireFile("init/xinyun-ai-init/templates/role-session-binding.template.json");
+  requireFile("test-scenarios/v1.7.3-scenarios.md");
+
+  addCheck(
+    "manifest v1.7.3 codexRoleSessionOrchestration",
+    manifestTemplate.capabilities && manifestTemplate.capabilities.codexRoleSessionOrchestration === true,
+    "manifest 缺少 codexRoleSessionOrchestration 能力"
+  );
+  addCheck(
+    "manifest roleSessions provider codex",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.provider === "codex",
+    "manifest roleSessions.provider 必须为 codex"
+  );
+  addCheck(
+    "manifest roleSessions targetVersion=1.7.3",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.targetVersion === "1.7.3",
+    "manifest roleSessions.targetVersion 必须为 1.7.3"
+  );
+  addCheck(
+    "manifest roleSessions bindings path",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json",
+    "manifest roleSessions.bindings 不一致"
+  );
+  addCheck(
+    "manifest roleSessions directory",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.directory === "xinyun-ai/sessions/roles/",
+    "manifest roleSessions.directory 不一致"
+  );
+  addCheck(
+    "manifest roleSessions bindingTemplate",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.bindingTemplate === "xinyun-ai-init/templates/role-session-binding.template.json",
+    "manifest roleSessions.bindingTemplate 不一致"
+  );
+  addCheck(
+    "manifest roleSessions requiredRoleCount=5",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.requiredRoleCount === 5,
+    "manifest roleSessions.requiredRoleCount 必须为 5"
+  );
+  addCheck(
+    "manifest roleSessions status enum",
+    manifestTemplate.roleSessions && JSON.stringify(manifestTemplate.roleSessions.statusEnum) === JSON.stringify(statusEnum),
+    "manifest roleSessions.statusEnum 不完整"
+  );
+  addCheck(
+    "manifest roleSessions idempotency fields",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.idempotency && JSON.stringify(manifestTemplate.roleSessions.idempotency.keyFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]),
+    "manifest roleSessions.idempotency.keyFields 不一致"
+  );
+  addCheck(
+    "manifest roleSessions host unsupported policy",
+    manifestTemplate.roleSessions && manifestTemplate.roleSessions.hostUnsupportedPolicy === "local-degraded-no-fake-session-id",
+    "manifest roleSessions.hostUnsupportedPolicy 不一致"
+  );
+
+  addCheck(
+    "project-index roleSessions path",
+    projectIndexTemplate.roleSessions && projectIndexTemplate.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json",
+    "project-index roleSessions.bindings 不一致"
+  );
+  addCheck(
+    "project-index roleSessions status enum",
+    projectIndexTemplate.roleSessions && JSON.stringify(projectIndexTemplate.roleSessions.statusEnum) === JSON.stringify(statusEnum),
+    "project-index roleSessions.statusEnum 不完整"
+  );
+  addCheck("project-index roleSessions records array", projectIndexTemplate.roleSessions && Array.isArray(projectIndexTemplate.roleSessions.records), "project-index roleSessions.records 必须是数组");
+
+  addCheck("task-index roleSessionBindingIds array", Array.isArray(taskIndex.roleSessionBindingIds), "task-index roleSessionBindingIds 必须是数组");
+  addCheck("task-index roleSessionBindings array", Array.isArray(taskIndex.roleSessionBindings), "task-index roleSessionBindings 必须是数组");
+  addCheck(
+    "task-index roleSession status enum",
+    JSON.stringify(taskIndex.roleSessionStatusEnum) === JSON.stringify(statusEnum),
+    "task-index roleSessionStatusEnum 不完整"
+  );
+  addCheck(
+    "task-index roleSession idempotency fields",
+    taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.keyFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]),
+    "task-index roleSessionIdempotency.keyFields 不一致"
+  );
+
+  addCheck("init-result roleSessions provider codex", initResult.roleSessions && initResult.roleSessions.provider === "codex", "init-result roleSessions.provider 必须为 codex");
+  addCheck("init-result roleSessions requiredRoleCount=5", initResult.roleSessions && initResult.roleSessions.requiredRoleCount === 5, "init-result roleSessions.requiredRoleCount 必须为 5");
+  for (const field of ["createdCount", "reusedCount", "failedCount", "blockedCount", "localDegradedCount"]) {
+    addCheck(`init-result roleSessions ${field}`, initResult.roleSessions && typeof initResult.roleSessions[field] === "number", `init-result roleSessions.${field} 必须是数字`);
+  }
+
+  for (const field of ["sessionId", "parentSessionId", "provider", "sessionStatus"]) {
+    addCheck(`assignments required field ${field}`, assignments.recordContract && assignments.recordContract.requiredFields.includes(field), `assignments recordContract 缺少 ${field}`);
+  }
+  addCheck("assignments session binding rule mentions real host value", assignments.recordContract && assignments.recordContract.sessionBindingRule.includes("real host-returned value"), "assignments sessionBindingRule 必须说明真实宿主返回值");
+
+  addCheck("binding template provider codex", bindingTemplate.provider === "codex", "binding template provider 必须为 codex");
+  addCheck("binding template targetVersion=1.7.3", bindingTemplate.targetVersion === "1.7.3", "binding template targetVersion 必须为 1.7.3");
+  addCheck("binding template fakeSessionId prohibited", bindingTemplate.degradation && bindingTemplate.degradation.fakeSessionIdProhibited === true, "binding template 必须禁止伪造 sessionId");
+  addCheck("binding template onboarding readOnly", bindingTemplate.onboarding && bindingTemplate.onboarding.readOnly === true, "binding template onboarding.readOnly 必须为 true");
+
+  for (const field of ["parentSessionId", "provider", "sessionStatus", "sessionBindingId", "sessionBindingPath", "sessionIdempotencyKey"]) {
+    addCheck(`role-execution v1.7.3 field ${field}`, roleExecution.includes(`- ${field}：`), `role-execution 模板缺少 ${field}`);
+  }
+
+  const snippets = [
+    "v1.7.3 Codex 角色会话自动创建与绑定",
+    "provider=codex",
+    "sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed",
+    "taskId + roleId + provider + targetVersion",
+    "真实 `sessionId`",
+    "不得伪造 sessionId",
+    "local-degraded-no-fake-session-id",
+    "onboarding",
+    "created-but-writeback-failed",
+    "创建成功不等于业务代码修改授权",
+  ];
+  requireIncludes("init/xinyun-ai-init/README.md", snippets);
+  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", snippets);
+  requireIncludes("init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7.3 Codex 角色会话自动创建与绑定", "provider=codex", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", ["v1.7.3 Codex 角色会话初始化", "provider=codex", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.3 升级创建和绑定真实角色会话", "created-but-writeback-failed", "不得伪造 sessionId"]);
+  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.3 角色会话绑定目录", "xinyun-ai/sessions/role-session-bindings.json", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.3 角色会话交接字段", "roleSessionIdempotency", "不得伪造 sessionId"]);
+  requireIncludes("init/xinyun-ai-init/templates/project-guide.template.md", ["v1.7.3 Codex role session anchors", "roleSessionIdempotency", "local-degraded-no-fake-session-id"]);
+  requireIncludes("init/xinyun-ai-init/templates/project-check.template.md", ["v1.7.3 checks", "provider=codex", "不存在伪造 sessionId"]);
+  requireIncludes("test-scenarios/scenarios.md", ["当前必测场景为 1-96", "当前观察场景为 97", "## 89. v1.7.3 Codex 真实角色会话创建", "## 96. v1.7.3 普通咨询边界", "## 97. Skill"]);
+  requireIncludes("test-scenarios/review-template.md", ["1-96 必测", "89. v1.7.3 Codex 真实角色会话创建", "96. v1.7.3 普通咨询边界", "97. Skill"]);
+}
+
 function main() {
   requireFile("bin/xinyun-ai-init.js");
   requireFile("init/xinyun-ai-init/README.md");
@@ -1338,6 +1486,7 @@ function main() {
   verifyV17Contracts();
   verifyV171Contracts();
   verifyV172Contracts();
+  verifyV173Contracts();
   verifyTestScenarios();
   verifyJsonAndMarkdown();
 

package/scripts/verify-rules-package.js

@@ -5,7 +5,7 @@ const os = require("os");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
-const VERSION = "1.7.2";
+const VERSION = "1.7.3";
 const checks = [];
 
 function parseArgs(argv) {
@@ -150,6 +150,7 @@ function validatePackageFiles(root, target, isTarball) {
     "test-scenarios/scenarios.md",
     "test-scenarios/v1.7.1-scenarios.md",
     "test-scenarios/v1.7.2-scenarios.md",
+    "test-scenarios/v1.7.3-scenarios.md",
     "init/xinyun-ai-init/README.md",
     "init/xinyun-ai-init/rules/frameworks/README.md",
     "init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md",
@@ -174,12 +175,13 @@ function validatePackageFiles(root, target, isTarball) {
     "init/xinyun-ai-init/templates/role-subtask.template.md",
     "init/xinyun-ai-init/templates/archive-transaction.template.json",
     "init/xinyun-ai-init/templates/role-execution.template.md",
+    "init/xinyun-ai-init/templates/role-session-binding.template.json",
   ];
 
   for (const file of requiredFiles) requireFile(root, target, file);
 
   if (isTarball) {
-    const sourceOnly = "version-plans/releases/v1.7.2.md";
+    const sourceOnly = "version-plans/releases/v1.7.3.md";
     addCheck(target, "package.source-only", "package", !existsPath(root, sourceOnly) ? "pass" : "warn", sourceOnly, null, "not required in tarball", existsPath(root, sourceOnly) ? "present" : "not present", "source-only version-plans is not required in tarball.", "No action required unless package policy changes.", "optional");
   }
 }
@@ -216,6 +218,7 @@ function validateRegistries(root, target) {
     "taskArchiveTransactions",
     "codeGraphRequiredInitialization",
     "roleExecutionVisibility",
+    "codexRoleSessionOrchestration",
   ]) {
     addCheck(target, "registry.manifest", "manifest", capabilities[flag] === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", `capabilities.${flag}`, true, capabilities[flag], "Manifest capability registered.", "Register the missing capability.");
   }
@@ -277,6 +280,9 @@ function validateRegistries(root, target) {
   }
   addCheck(target, "registry.manifest", "manifest", manifest.taskTree && manifest.taskTree.roleExecutionPathPattern === "xinyun-ai/tasks/role-execution/<roleTaskId>.md" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "taskTree.roleExecutionPathPattern", "xinyun-ai/tasks/role-execution/<roleTaskId>.md", manifest.taskTree && manifest.taskTree.roleExecutionPathPattern, "Manifest role execution path checked.", "Register the role execution path.");
   addCheck(target, "registry.project-index", "project-index", projectIndex.taskTree && projectIndex.taskTree.roleExecutionPathPattern === "xinyun-ai/tasks/role-execution/<roleTaskId>.md" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "taskTree.roleExecutionPathPattern", "xinyun-ai/tasks/role-execution/<roleTaskId>.md", projectIndex.taskTree && projectIndex.taskTree.roleExecutionPathPattern, "Project-index role execution path checked.", "Register the role execution path.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.bindings", "xinyun-ai/sessions/role-session-bindings.json", manifest.roleSessions && manifest.roleSessions.bindings, "Manifest role session bindings checked.", "Register roleSessions.bindings.");
+  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && projectIndex.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.bindings", "xinyun-ai/sessions/role-session-bindings.json", projectIndex.roleSessions && projectIndex.roleSessions.bindings, "Project-index role session bindings checked.", "Register roleSessions.bindings.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.provider", "codex", manifest.roleSessions && manifest.roleSessions.provider, "Manifest role session provider checked.", "Register roleSessions.provider.");
 }
 
 function validateV17Content(root, target) {
@@ -298,7 +304,7 @@ function validateV17Content(root, target) {
     "scope/unverifiedScope",
     "pauseReason=out-of-scope",
   ];
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.7.2`", ...common]);
+  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.7.3`", ...common]);
   requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", common);
   requireIncludes(root, target, "init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7 规则包一致性、技术栈 profile 与 HTML 迁移准备", "`verify:rules` 只读", "ThinkPHP 不得误套其他项目", ...common.slice(5)]);
   requireIncludes(root, target, "init/xinyun-ai-init/templates/current-task.template.md", ["verify:rules.status", "language", "runtime", "platform", "framework", ...common.slice(5)]);
@@ -310,9 +316,9 @@ function validateV17Content(root, target) {
   requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7 任务单补充字段", "verifyRulesStatus", "migrationStatus", "HTML 迁移只允许评估和单页面 / 区块试点计划"]);
   requireIncludes(root, target, "init/xinyun-ai-init/rules/frameworks/README.md", ["v1.7 技术栈 profile", "coverage=partial", ...common.slice(5, 10)]);
   requireIncludes(root, target, "init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md", ["v1.7 ThinkPHP 深化模块", "frameworkStatus=confirmed", "moduleStatus=loaded", "Controller", "Request/Validate", "Service", "Model/ORM", "Middleware", "队列"]);
-  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-87", "当前观察场景为 88", "## 55. verify:rules 正常通过", "## 69. verify:rules JSON schema 和重复执行"]);
-  requireIncludes(root, target, "test-scenarios/review-template.md", ["55. verify:rules 正常通过", "69. verify:rules JSON schema 和重复执行", "88. Skill 触发测试"]);
-  requireIncludes(root, target, "test-scenarios/README.md", ["npm run verify:rules", "pm_zhousl-xinyun-ai-init-1.7.2.tgz", "v1.7.2-scenarios.md", "当前必测场景为 `scenarios.md` 的 1-87", "当前观察场景为 `scenarios.md` 的 88"]);
+  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-96", "当前观察场景为 97", "## 55. verify:rules 正常通过", "## 69. verify:rules JSON schema 和重复执行"]);
+  requireIncludes(root, target, "test-scenarios/review-template.md", ["55. verify:rules 正常通过", "69. verify:rules JSON schema 和重复执行", "97. Skill 触发测试"]);
+  requireIncludes(root, target, "test-scenarios/README.md", ["npm run verify:rules", "pm_zhousl-xinyun-ai-init-1.7.3.tgz", "v1.7.2-scenarios.md", "v1.7.3-scenarios.md", "当前必测场景为 `scenarios.md` 的 1-96", "当前观察场景为 `scenarios.md` 的 97"]);
 }
 
 function validateV171Content(root, target) {
@@ -341,7 +347,7 @@ function validateV171Content(root, target) {
   requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.1 升级补齐"]);
   requireIncludes(root, target, "init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.1 任务树、归档与 CodeGraph 目录"]);
   requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.1 任务单补充字段"]);
-  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-87", "当前观察场景为 88", "## 71. v1.7.1 主任务命名", "## 87. v1.7.1 普通咨询和版本回归"]);
+  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-96", "当前观察场景为 97", "## 71. v1.7.1 主任务命名", "## 87. v1.7.1 普通咨询和版本回归"]);
   requireIncludes(root, target, "test-scenarios/v1.7.1-scenarios.md", ["主任务命名", "CodeGraph记录与失败矩阵", "普通咨询边界"]);
 }
 
@@ -358,7 +364,7 @@ function validateV172Content(root, target) {
     "JCS-SHA-256",
     "blockedReason=write-failed",
   ];
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.7.2`", ...snippets]);
+  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.7.3`", ...snippets]);
   requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", snippets);
   requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.7.2 角色后续任务可见性", "role-execution"]);
   requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.2 升级补建角色后续任务", "write-failed"]);
@@ -367,6 +373,52 @@ function validateV172Content(root, target) {
   requireIncludes(root, target, "test-scenarios/v1.7.2-scenarios.md", ["固定优先级", "幂等补建", "补建失败和索引恢复"]);
 }
 
+function validateV173Content(root, target) {
+  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
+  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
+  const taskIndex = readJson(root, "init/xinyun-ai-init/templates/task-index.template.json");
+  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
+  const assignments = readJson(root, "init/xinyun-ai-init/templates/team/assignments.json");
+  const binding = readJson(root, "init/xinyun-ai-init/templates/role-session-binding.template.json");
+  const statusEnum = ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"];
+
+  addCheck(target, "registry.manifest", "manifest", manifest.capabilities && manifest.capabilities.codexRoleSessionOrchestration === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "capabilities.codexRoleSessionOrchestration", true, manifest.capabilities && manifest.capabilities.codexRoleSessionOrchestration, "Codex role session capability checked.", "Register codexRoleSessionOrchestration.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.provider", "codex", manifest.roleSessions && manifest.roleSessions.provider, "Role session provider checked.", "Set provider=codex.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.targetVersion === VERSION ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.targetVersion", VERSION, manifest.roleSessions && manifest.roleSessions.targetVersion, "Role session target version checked.", "Set targetVersion.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.bindings", "xinyun-ai/sessions/role-session-bindings.json", manifest.roleSessions && manifest.roleSessions.bindings, "Role session binding path checked.", "Register binding path.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.directory === "xinyun-ai/sessions/roles/" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.directory", "xinyun-ai/sessions/roles/", manifest.roleSessions && manifest.roleSessions.directory, "Role session directory checked.", "Register role session directory.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && JSON.stringify(manifest.roleSessions.statusEnum) === JSON.stringify(statusEnum) ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.statusEnum", statusEnum, manifest.roleSessions && manifest.roleSessions.statusEnum, "Role session status enum checked.", "Use the fixed v1.7.3 enum.");
+  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.idempotency && JSON.stringify(manifest.roleSessions.idempotency.keyFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]) ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.idempotency.keyFields", ["taskId", "roleId", "provider", "targetVersion"], manifest.roleSessions && manifest.roleSessions.idempotency && manifest.roleSessions.idempotency.keyFields, "Role session idempotency fields checked.", "Use taskId + roleId + provider + targetVersion.");
+  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && projectIndex.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.provider", "codex", projectIndex.roleSessions && projectIndex.roleSessions.provider, "Project-index role session provider checked.", "Set provider=codex.");
+  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && Array.isArray(projectIndex.roleSessions.records) ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.records", "array", projectIndex.roleSessions && projectIndex.roleSessions.records, "Project-index role session records checked.", "Add records array.");
+  addCheck(target, "registry.task-index", "task-index", Array.isArray(taskIndex.roleSessionBindingIds) ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionBindingIds", "array", taskIndex.roleSessionBindingIds, "Task-index binding IDs checked.", "Add roleSessionBindingIds.");
+  addCheck(target, "registry.task-index", "task-index", Array.isArray(taskIndex.roleSessionBindings) ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionBindings", "array", taskIndex.roleSessionBindings, "Task-index bindings checked.", "Add roleSessionBindings.");
+  addCheck(target, "registry.task-index", "task-index", taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.keyFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]) ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionIdempotency.keyFields", ["taskId", "roleId", "provider", "targetVersion"], taskIndex.roleSessionIdempotency && taskIndex.roleSessionIdempotency.keyFields, "Task-index role session idempotency checked.", "Use fixed key fields.");
+  addCheck(target, "registry.init-result", "init-result", initResult.roleSessions && initResult.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/init-result.template.json", "roleSessions.provider", "codex", initResult.roleSessions && initResult.roleSessions.provider, "Init-result role session provider checked.", "Set provider=codex.");
+  addCheck(target, "registry.assignments", "assignments", assignments.recordContract && assignments.recordContract.requiredFields.includes("sessionStatus") ? "pass" : "fail", "init/xinyun-ai-init/templates/team/assignments.json", "recordContract.requiredFields", "sessionStatus", assignments.recordContract && assignments.recordContract.requiredFields, "Assignments sessionStatus checked.", "Add sessionStatus to assignments contract.");
+  addCheck(target, "registry.binding-template", "template", binding.provider === "codex" && binding.targetVersion === VERSION && binding.degradation && binding.degradation.fakeSessionIdProhibited === true ? "pass" : "fail", "init/xinyun-ai-init/templates/role-session-binding.template.json", "provider/targetVersion/degradation", "codex / version / fakeSessionIdProhibited", binding, "Role session binding template checked.", "Fix binding template.");
+
+  const snippets = [
+    "v1.7.3 Codex 角色会话自动创建与绑定",
+    "provider=codex",
+    "sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed",
+    "taskId + roleId + provider + targetVersion",
+    "不得伪造 sessionId",
+    "local-degraded-no-fake-session-id",
+    "created-but-writeback-failed",
+    "创建成功不等于业务代码修改授权",
+  ];
+  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.7.3`", ...snippets]);
+  requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", snippets);
+  requireIncludes(root, target, "init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7.3 Codex 角色会话自动创建与绑定", "provider=codex", "local-degraded-no-fake-session-id"]);
+  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.7.3 Codex 角色会话初始化", "provider=codex", "local-degraded-no-fake-session-id"]);
+  requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.3 升级创建和绑定真实角色会话", "created-but-writeback-failed", "不得伪造 sessionId"]);
+  requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.3 角色会话交接字段", "roleSessionIdempotency", "不得伪造 sessionId"]);
+  requireIncludes(root, target, "init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.3 角色会话绑定目录", "xinyun-ai/sessions/role-session-bindings.json", "local-degraded-no-fake-session-id"]);
+  requireIncludes(root, target, "test-scenarios/v1.7.3-scenarios.md", ["五个真实角色子会话创建", "会话绑定回写一致性", "onboarding 只读边界", "宿主不支持时本地降级"]);
+  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-96", "当前观察场景为 97", "## 89. v1.7.3 Codex 真实角色会话创建", "## 96. v1.7.3 普通咨询边界"]);
+}
+
 function validateJsonFiles(root, target) {
   const jsonFiles = [
     "package.json",
@@ -377,6 +429,7 @@ function validateJsonFiles(root, target) {
     "init/xinyun-ai-init/templates/html-migration-record.template.json",
     "init/xinyun-ai-init/templates/task-index.template.json",
     "init/xinyun-ai-init/templates/archive-transaction.template.json",
+    "init/xinyun-ai-init/templates/role-session-binding.template.json",
   ];
 
   for (const file of jsonFiles) {
@@ -404,6 +457,7 @@ function validateRoot(root, target, isTarball = false) {
   validateV17Content(root, target);
   validateV171Content(root, target);
   validateV172Content(root, target);
+  validateV173Content(root, target);
   validateJsonFiles(root, target);
 }
 

package/test-scenarios/README.md

@@ -37,7 +37,7 @@ npm pack
 随后在临时项目中使用 tarball 测试。注意不要直接执行 `npx <tarball> --force`，该形式可能不会正确调用 bin。推荐：
 
 ```powershell
-npx --yes --package E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\pm_zhousl-xinyun-ai-init-1.7.2.tgz xinyun-ai-init --force --no-version-check
+npx --yes --package E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\pm_zhousl-xinyun-ai-init-1.7.3.tgz xinyun-ai-init --force --no-version-check
 ```
 
 ### 3. 线上回归测试
@@ -59,9 +59,9 @@ npx --yes @pm_zhousl/xinyun-ai-init@latest --force
 - 必测场景：用于判断当前版本是否可以发布。
 - 观察场景：用于收集后续优化建议，不作为当前版本发布阻断项。
 
-当前必测场景为 `scenarios.md` 的 1-87。
+当前必测场景为 `scenarios.md` 的 1-96。
 
-当前观察场景为 `scenarios.md` 的 88。Skill 触发机制仍在后续候选池中，不进入当前可发布范围。
+当前观察场景为 `scenarios.md` 的 97。Skill 触发机制仍在后续候选池中，不进入当前可发布范围。
 
 ## v1.7 规则包一致性校验
 
@@ -70,7 +70,7 @@ npx --yes @pm_zhousl/xinyun-ai-init@latest --force
 ```powershell
 npm run verify:rules
 npm run verify:rules -- --json
-npm run verify:rules -- --tarball .\pm_zhousl-xinyun-ai-init-1.7.2.tgz
+npm run verify:rules -- --tarball .\pm_zhousl-xinyun-ai-init-1.7.3.tgz
 npm run verify:rules:security
 ```
 
@@ -89,6 +89,10 @@ npm run verify:init
 
 除 `scenarios.md` 外，发布前必须逐条执行 `v1.7.2-scenarios.md`。重点验证已归档的 v1.7.1 项目能补建 5 个 `role-execution` 任务，活动任务不被错误显示为 idle，重复升级按逐角色幂等键复用，索引中断后可恢复。
 
+## v1.7.3 Codex 角色会话回归
+
+除 `scenarios.md` 外，发布前必须逐条执行 `v1.7.3-scenarios.md`。重点验证 Codex 主会话在 5 个 `role-execution` 本地任务之后创建或明确降级 5 个真实角色子会话，真实 `sessionId` 回写一致，创建后先进入只读 onboarding，重复升级复用，宿主不支持时使用 `local-degraded-no-fake-session-id` 且不得伪造 sessionId。
+
 ## 审查原则
 
 - 重点看 AI 行为是否符合规则，不只看文件是否生成。

package/test-scenarios/review-template.md

@@ -91,7 +91,7 @@
 - 可以后续优化：
 - 不建议纳入本版本：
 
-说明：历史 Skill 触发测试是观察项。当前版本发布阻断以 1-87 必测场景为准。
+说明：历史 Skill 触发测试是观察项。当前版本发布阻断以 1-96 必测场景为准。
 ## v1.7 审查增量行
 
 | 场景 | 结果 | 证据 | 是否阻断 |
@@ -128,8 +128,16 @@
 | 85. v1.7.1 CodeGraph 失败矩阵 | 待填写 | 待填写 | 待填写 |
 | 86. v1.7.1 CodeGraph 状态登记与去重 | 待填写 | 待填写 | 待填写 |
 | 87. v1.7.1 普通咨询和版本回归 | 待填写 | 待填写 | 待填写 |
-| 88. Skill 触发测试（观察项，不阻断发布） | 待填写 | 待填写 | 待填写 |
+| 89. v1.7.3 Codex 真实角色会话创建 | 待填写 | 待填写 | 待填写 |
+| 90. v1.7.3 会话绑定回写一致性 | 待填写 | 待填写 | 待填写 |
+| 91. v1.7.3 onboarding 只读边界 | 待填写 | 待填写 | 待填写 |
+| 92. v1.7.3 会话幂等复用 | 待填写 | 待填写 | 待填写 |
+| 93. v1.7.3 宿主不支持本地降级 | 待填写 | 待填写 | 待填写 |
+| 94. v1.7.3 创建成功但回写失败恢复 | 待填写 | 待填写 | 待填写 |
+| 95. v1.7.3 单角色失败隔离 | 待填写 | 待填写 | 待填写 |
+| 96. v1.7.3 普通咨询边界 | 待填写 | 待填写 | 待填写 |
+| 97. Skill 触发测试（观察项，不阻断发布） | 待填写 | 待填写 | 待填写 |
 
-说明：Skill 触发测试是观察项。除非它影响 1-87 的必测场景，否则不作为当前版本不可发布的理由。
+说明：Skill 触发测试是观察项。除非它影响 1-96 的必测场景，否则不作为当前版本不可发布的理由。
 
 

package/test-scenarios/scenarios.md

@@ -2,10 +2,10 @@
 
 ## 测试分级说明
 
-- 必测场景：1-87，用于判断当前版本是否可以发布。
-- 观察场景：88，用于收集后续优化建议，不作为当前版本发布阻断项。
+- 必测场景：1-96，用于判断当前版本是否可以发布。
+- 观察场景：97，用于收集后续优化建议，不作为当前版本发布阻断项。
 
-当前必测场景为 1-87；当前观察场景为 88。
+当前必测场景为 1-96；当前观察场景为 97。
 
 ## 1. 初始化可用性测试
 
@@ -1092,7 +1092,79 @@
 
 验收：不修改业务代码、数据库、API、配置、依赖或 Git。
 
-## 88. Skill 触发测试（观察项）
+## 89. v1.7.3 Codex 真实角色会话创建
+
+目标：验证 5 个 `role-execution` 本地任务存在后，Codex 主会话能创建或明确降级 5 个真实角色子会话。
+
+验收：
+- 覆盖 `project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer`。
+- 真实 `sessionId` 来自 Codex 宿主返回值。
+- CLI 仍只创建 `xinyun-ai-init/`。
+
+## 90. v1.7.3 会话绑定回写一致性
+
+目标：验证角色会话绑定同步到所有控制文件。
+
+验收：
+- `xinyun-ai/sessions/role-session-bindings.json` 可解析。
+- 角色任务、assignments、task-index、manifest、project-index、init-result 引用同一 binding/session 摘要。
+- 包含 `provider=codex`、`parentSessionId` 和 `sessionStatus`。
+
+## 91. v1.7.3 onboarding 只读边界
+
+目标：验证新建角色会话不会直接获得执行授权。
+
+验收：
+- 创建成功后先进入 `sessionStatus=onboarding`。
+- 未完成职责理解、职责确认、成员 / 会话绑定和确认门禁前不得 `ready`。
+- 不修改业务代码、数据库、API、配置、依赖或 Git。
+
+## 92. v1.7.3 会话幂等复用
+
+目标：验证重复升级不会重复创建角色会话。
+
+验收：
+- 幂等键为 `taskId + roleId + provider + targetVersion`。
+- 已有真实 sessionId 和 binding 被复用。
+- 不出现重复 roleId/taskId/provider/targetVersion 绑定。
+
+## 93. v1.7.3 宿主不支持本地降级
+
+目标：验证无法创建子会话时不得伪造 sessionId。
+
+验收：
+- `sessionId=null`。
+- 写入 `local-degraded-no-fake-session-id`。
+- `sessionStatus=blocked` 或 failed，并记录 reason/nextAction。
+
+## 94. v1.7.3 创建成功但回写失败恢复
+
+目标：验证 created-but-writeback-failed 可追溯和可恢复。
+
+验收：
+- 记录真实 sessionId 来源、失败文件和 audit。
+- 下次按幂等键查询并恢复绑定。
+- 不重复创建同一角色会话。
+
+## 95. v1.7.3 单角色失败隔离
+
+目标：验证单角色失败不影响其他角色。
+
+验收：
+- 失败角色单独 blocked 或 failed。
+- 其他角色继续 created/onboarding/ready 流程。
+- init-result 统计 createdCount/reusedCount/failedCount/blockedCount/localDegradedCount。
+
+## 96. v1.7.3 普通咨询边界
+
+目标：验证普通咨询不触发角色会话链。
+
+验收：
+- 不创建角色会话。
+- 不写 `xinyun-ai/sessions/role-session-bindings.json`。
+- 不创建外部账号、第三个会话或业务任务链。
+
+## 97. Skill 触发测试（观察项）
 
 目标：观察 AI 是否具备按任务触发 Skill 的倾向。