@pm_zhousl/xinyun-ai-init 1.7.2 → 1.8.0

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.7.2",
-  "scriptVersion": "2026.07.20",
+  "xinyunAiVersion": "1.8.0",
+  "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
   "expansionMode": "triggered",
@@ -44,8 +44,13 @@
     "htmlToClientMigrationPreparation": true,
     "namedInitializationTaskTree": true,
     "taskArchiveTransactions": true,
-    "codeGraphRequiredInitialization": true
-    ,"roleExecutionVisibility": true
+    "codeGraphRequiredInitialization": true,
+    "roleExecutionVisibility": true,
+    "codexRoleSessionOrchestration": true,
+    "sharedProjectFactsCoordination": true,
+    "skillRouting": true,
+    "frontendCouplingAudit": true,
+    "temporaryProgrammerSessions": true
   },
   "tasking": {
     "currentTask": "xinyun-ai/current-task.md",
@@ -62,9 +67,82 @@
     "mainTaskTemplate": "xinyun-ai-init/templates/task-main.template.md",
     "roleSubtaskTemplate": "xinyun-ai-init/templates/role-subtask.template.md",
     "taskIndexTemplate": "xinyun-ai-init/templates/task-index.template.json",
-    "archiveTransactionTemplate": "xinyun-ai-init/templates/archive-transaction.template.json"
-    ,"roleExecutionDirectory": "xinyun-ai/tasks/role-execution/"
-    ,"roleExecutionTemplate": "xinyun-ai-init/templates/role-execution.template.md"
+    "archiveTransactionTemplate": "xinyun-ai-init/templates/archive-transaction.template.json",
+    "roleExecutionDirectory": "xinyun-ai/tasks/role-execution/",
+    "roleExecutionTemplate": "xinyun-ai-init/templates/role-execution.template.md",
+    "roleSessionBindings": "xinyun-ai/sessions/role-session-bindings.json",
+    "roleSessionBindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json"
+  },
+  "roleSessions": {
+    "enabled": true,
+    "provider": "codex",
+    "directory": "xinyun-ai/sessions/roles/",
+    "bindings": "xinyun-ai/sessions/role-session-bindings.json",
+    "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "parentSessionId": null,
+    "targetVersion": "1.8.0",
+    "requiredRoleCount": 5,
+    "statusEnum": [
+      "pending",
+      "creating",
+      "created",
+      "onboarding",
+      "ready",
+      "blocked",
+      "failed",
+      "closed"
+    ],
+    "idempotency": {
+      "keyFields": [
+        "taskId",
+        "roleId",
+        "provider",
+        "targetVersion"
+      ],
+      "algorithm": "JCS-SHA-256",
+      "duplicatePolicy": "reuse"
+    },
+    "hostUnsupportedPolicy": "local-degraded-no-fake-session-id",
+    "readyPolicy": "created session enters onboarding first; ready requires role understanding, responsibility confirmation, and execution eligibility gates."
+  },
+  "coordination": {
+    "enabled": true,
+    "directory": "xinyun-ai/coordination/",
+    "projectFacts": "xinyun-ai/coordination/project-facts.json",
+    "changeLedger": "xinyun-ai/coordination/change-ledger.json",
+    "contractSnapshots": "xinyun-ai/coordination/contract-snapshots/",
+    "conflictRecords": "xinyun-ai/coordination/conflict-records/",
+    "transactions": "xinyun-ai/coordination/.transactions/",
+    "statusSources": {
+      "taskStatus": "xinyun-ai/tasks/task-index.json",
+      "changeStatus": "xinyun-ai/coordination/change-ledger.json",
+      "conflictStatus": "xinyun-ai/coordination/conflict-records/<conflictId>.json",
+      "refreshStatus": "affected task record"
+    },
+    "transactionPhaseEnum": ["prepared", "validated", "renamed", "revision-updated", "committed", "recovery-required", "blocked"]
+  },
+  "skills": {
+    "enabled": true,
+    "directory": "xinyun-ai/skills/",
+    "registry": "xinyun-ai/skills/registry.json",
+    "assignments": "xinyun-ai/skills/assignments.json",
+    "usageRecords": "xinyun-ai/skills/usage-records/",
+    "assignmentStatusField": "assignmentStatus",
+    "usageStatusField": "usageStatus"
+  },
+  "frontendAudit": {
+    "enabled": true,
+    "directory": "xinyun-ai/frontend-audits/",
+    "recordTemplate": "xinyun-ai-init/templates/frontend-audit.template.json",
+    "defaultDecision": "audit-only"
+  },
+  "temporarySessions": {
+    "enabled": true,
+    "directory": "xinyun-ai/sessions/temporary/",
+    "recordTemplate": "xinyun-ai-init/templates/temporary-session.template.json",
+    "maxConcurrent": 3,
+    "sessionStatusField": "status",
+    "occupancyStatusEnum": ["occupied", "released", "unknown"]
   },
   "taskTree": {
     "enabled": true,

package/init/xinyun-ai-init/templates/project-check.template.md

@@ -124,6 +124,21 @@
 - 重复升级是否按逐角色 JCS-SHA-256 幂等键复用：待填写
 - 单角色失败是否为 blocked/write-failed，索引中断是否可恢复：待填写
 
+## v1.7.3 checks
+
+- 是否创建或复用 5 个 Codex 真实角色会话：待填写
+- `provider=codex` 是否一致：待填写
+- `xinyun-ai/sessions/role-session-bindings.json` 是否可解析：待填写
+- `xinyun-ai/sessions/roles/` 是否登记五个角色入口：待填写
+- `sessionStatus` 是否只使用 pending / creating / created / onboarding / ready / blocked / failed / closed：待填写
+- `roleSessionIdempotency` 是否为 taskId + roleId + provider + targetVersion：待填写
+- 真实 `sessionId` 是否来自宿主返回值：待填写
+- 是否不存在伪造 sessionId：待填写
+- 创建后是否先进入只读 onboarding，未直接 ready：待填写
+- 宿主不支持时是否记录 local-degraded-no-fake-session-id 且 sessionId=null：待填写
+- created-but-writeback-failed 是否可恢复：待填写
+- 普通咨询是否未创建角色会话或第三个会话：待填写
+
 - frameworkStatus=confirmed/inferred/not-found/unknown/detected-unsupported
 - moduleStatus=loaded/not-loaded
 - activation=loaded/not-loaded
@@ -131,3 +146,11 @@
 - decision=direct-map/rewrite-required/backend-required/unsupported/pending/unknown
 - status=planned/assessing/partial/blocked/paused/completed
 - coverage=full/partial/unknown
+
+## v1.8 检查
+
+- `xinyun-ai/coordination/` 的事实、台账、冲突和事务文件是否可追溯。
+- 是否统一使用 `assignmentStatus`，且与 `usageStatus` 合法映射。
+- 前端 audit-only 是否零 diff，refactor-now 是否有确认、哈希、diff 和测试证据。
+- 临时会话是否遵守单变更域、并发上限 3、unknown occupancy 和 releaseAudit。
+- 是否未执行自动安装依赖、业务代码修改、数据库/API改动或 Git 写操作。

package/init/xinyun-ai-init/templates/project-guide.template.md

@@ -209,9 +209,29 @@
 - idempotencyKey：JCS-SHA-256(sourceTaskId, roleId, taskKind, targetVersion)
 - activeTaskIds 非空时 current-task 不得为 idle/null
 
+## v1.7.3 Codex role session anchors
+
+- role session provider：provider=codex
+- role session bindings：xinyun-ai/sessions/role-session-bindings.json
+- role session directory：xinyun-ai/sessions/roles/
+- sessionStatus：pending / creating / created / onboarding / ready / blocked / failed / closed
+- roleSessionIdempotency：JCS-SHA-256(taskId, roleId, provider, targetVersion)
+- parentSessionId：待填写
+- real sessionId：待填写；不得伪造 sessionId
+- onboarding：created 后先只读 onboarding，不能直接 ready
+- host unsupported：local-degraded-no-fake-session-id
+- created-but-writeback-failed：待填写恢复线索
+
 - frameworkStatus=confirmed/inferred/not-found/unknown/detected-unsupported
 - moduleStatus=loaded/not-loaded
 - activation=loaded/not-loaded
 - decision=direct-map/rewrite-required/backend-required/unsupported/pending/unknown
 - status=planned/assessing/partial/blocked/paused/completed
 - coverage=full/partial/unknown
+
+## v1.8 协作能力
+
+- 共享事实与冲突协调：`xinyun-ai/coordination/`；状态字段按 fact/change/conflict/task/refresh 分域。
+- Skill 路由：`xinyun-ai/skills/`；正式字段为 `assignmentStatus` 与 `usageStatus`。
+- 前端耦合审计：`xinyun-ai/frontend-audits/`；audit-only 零 diff。
+- 临时程序员会话：最多 3 个并行运行额度；unknown occupancy 不自动释放。

package/init/xinyun-ai-init/templates/project-index.template.json

@@ -133,6 +133,64 @@
       "sortOrder": ["priority", "createdAt", "roleId", "taskId"]
     }
   },
+  "roleSessions": {
+    "enabled": true,
+    "provider": "codex",
+    "directory": "xinyun-ai/sessions/roles/",
+    "bindings": "xinyun-ai/sessions/role-session-bindings.json",
+    "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "requiredRoleCount": 5,
+    "statusEnum": [
+      "pending",
+      "creating",
+      "created",
+      "onboarding",
+      "ready",
+      "blocked",
+      "failed",
+      "closed"
+    ],
+    "records": []
+  },
+  "coordination": {
+    "enabled": true,
+    "directory": "xinyun-ai/coordination/",
+    "projectFacts": "xinyun-ai/coordination/project-facts.json",
+    "changeLedger": "xinyun-ai/coordination/change-ledger.json",
+    "contractSnapshots": "xinyun-ai/coordination/contract-snapshots/",
+    "conflictRecords": "xinyun-ai/coordination/conflict-records/",
+    "transactions": "xinyun-ai/coordination/.transactions/",
+    "statusSources": {
+      "taskStatus": "xinyun-ai/tasks/task-index.json",
+      "changeStatus": "xinyun-ai/coordination/change-ledger.json",
+      "conflictStatus": "xinyun-ai/coordination/conflict-records/<conflictId>.json",
+      "refreshStatus": "affected task record"
+    },
+    "transactionPhaseEnum": ["prepared", "validated", "renamed", "revision-updated", "committed", "recovery-required", "blocked"]
+  },
+  "skills": {
+    "enabled": true,
+    "directory": "xinyun-ai/skills/",
+    "registry": "xinyun-ai/skills/registry.json",
+    "assignments": "xinyun-ai/skills/assignments.json",
+    "usageRecords": "xinyun-ai/skills/usage-records/",
+    "assignmentStatusField": "assignmentStatus",
+    "usageStatusField": "usageStatus"
+  },
+  "frontendAudit": {
+    "enabled": true,
+    "directory": "xinyun-ai/frontend-audits/",
+    "recordTemplate": "xinyun-ai-init/templates/frontend-audit.template.json",
+    "defaultDecision": "audit-only"
+  },
+  "temporarySessions": {
+    "enabled": true,
+    "directory": "xinyun-ai/sessions/temporary/",
+    "recordTemplate": "xinyun-ai-init/templates/temporary-session.template.json",
+    "maxConcurrent": 3,
+    "sessionStatusField": "status",
+    "occupancyStatusEnum": ["occupied", "released", "unknown"]
+  },
   "codeGraphRequired": {
     "codeGraphRecordId": null,
     "required": true,

package/init/xinyun-ai-init/templates/role-execution.template.md

@@ -13,11 +13,17 @@
 - confirmationStatus：pending
 - memberId：null
 - sessionId：null
+- parentSessionId：null
+- provider：codex
+- sessionStatus：pending
+- sessionBindingId：
+- sessionBindingPath：xinyun-ai/sessions/role-session-bindings.json
 - executionEligible：false
 - blockedReason：member-unassigned
 - nextAction：绑定成员、完成职责确认和项目理解后再执行
 - sourceTaskId：task-template
 - idempotencyKey：
+- sessionIdempotencyKey：
 - createdAt：2026-07-21T00:00:00.000Z
 - updatedAt：2026-07-21T00:00:00.000Z
 
@@ -29,7 +35,19 @@
 - 待分配任务使用 `status=pending`；权限、冲突、写入失败或不可恢复错误使用 `status=blocked`，并填写 `blockedReason` 和 `nextAction`。
 - `sourceTaskId` 指向已经归档的初始化主任务；角色任务完成前不得加入 `archivedTaskIds`。
 
+## Codex 真实角色会话绑定
+
+- v1.7.3 中，Codex 主会话在 5 个 `role-execution` 本地任务创建或恢复后，可以为 `project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer` 固定创建 5 个真实角色子会话。
+- 真实 `sessionId` 只能来自 Codex 宿主创建子会话后的返回值；不得使用 `taskId`、`roleTaskId`、随机占位字符串或本地模拟值冒充。
+- 会话绑定字段至少包含 `taskId`、`roleId`、`sessionId`、`parentSessionId`、`provider`、`sessionStatus`、`createdAt`、`updatedAt`。
+- 会话状态固定为 `pending/creating/created/onboarding/ready/blocked/failed/closed`。
+- 会话创建成功后先进入 `sessionStatus=onboarding`，只读职责范围内资料并生成角色理解记录；不得因会话创建成功直接把任务标为 `ready` 或获得业务代码修改授权。
+- 只有角色理解完成、职责确认完成、成员/会话绑定满足、确认人关系无冲突且执行门禁满足时，才允许 `sessionStatus=ready` 与 `executionEligible=true`。
+- Codex 宿主不支持创建子会话、权限不足或创建失败时，必须保留 `sessionId=null`，记录 `sessionStatus=blocked/failed`、失败原因和本地降级说明，不得伪造会话。
+
 ## 幂等
 
 - `idempotencyKey` 是对 `{sourceTaskId, roleId, taskKind, targetVersion}` 使用 v1.6 JCS 规范化 JSON 后计算的 SHA-256。
 - 同一幂等键只允许对应一个角色后续任务；重复升级必须复用任务并补齐索引。
+- `sessionIdempotencyKey` 是对 `{taskId, roleId, provider, targetVersion}` 使用 JCS 规范化 JSON 后计算的 SHA-256。
+- 同一 `sessionIdempotencyKey` 只允许绑定一个有效真实角色会话；会话已创建但本地回写失败时，下次升级必须按该键查询并补齐绑定，不得创建第二个会话。

package/init/xinyun-ai-init/templates/role-session-binding.template.json

@@ -0,0 +1,43 @@
+{
+  "schemaVersion": 1,
+  "bindingId": "role-session-binding-template",
+  "taskId": "role-execution-task-template",
+  "roleId": "project-owner",
+  "sessionId": null,
+  "parentSessionId": null,
+  "provider": "codex",
+  "targetVersion": "1.8.0",
+  "sessionStatus": "pending",
+  "understandingStatus": "pending",
+  "confirmationStatus": "pending",
+  "executionEligible": false,
+  "idempotencyKey": null,
+  "hostCapability": "unknown",
+  "createdAt": "2026-07-22T00:00:00.000Z",
+  "updatedAt": "2026-07-22T00:00:00.000Z",
+  "createdBy": "main-session",
+  "onboarding": {
+    "readOnly": true,
+    "startedAt": null,
+    "completedAt": null,
+    "understandingRecord": null,
+    "readyRequires": [
+      "real sessionId returned by host",
+      "role understanding ready",
+      "responsibility confirmation confirmed",
+      "execution eligibility gates satisfied"
+    ]
+  },
+  "failure": {
+    "blockedReason": null,
+    "failureReason": null,
+    "retryCount": 0,
+    "nextAction": null
+  },
+  "degradation": {
+    "localOnly": false,
+    "reason": null,
+    "fakeSessionIdProhibited": true
+  },
+  "audit": []
+}

package/init/xinyun-ai-init/templates/skills-assignments.template.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 1,
+  "assignments": [],
+  "recordContract": {
+    "requiredFields": ["assignmentId", "skillId", "roleId", "taskId", "workstream", "matchReason", "permittedPaths", "assignmentStatus", "usageRecordId", "createdAt", "updatedAt"],
+    "assignmentStatusEnum": ["pending", "selected", "running", "completed", "fallback", "blocked", "cancelled"],
+    "usageStatusEnum": ["selected", "running", "completed", "failed", "skipped", "fallback", "blocked"],
+    "statusMapping": {
+      "pending": ["selected"],
+      "selected": ["selected", "running"],
+      "running": ["running"],
+      "completed": ["completed"],
+      "fallback": ["fallback"],
+      "blocked": ["failed", "blocked"],
+      "cancelled": ["skipped"]
+    },
+    "failedRule": "usageStatus=failed requires assignmentStatus=blocked, failureReason and nextAction"
+  }
+}

package/init/xinyun-ai-init/templates/skills-registry.template.json

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": 1,
+  "skills": [],
+  "recordContract": {
+    "requiredFields": ["skillId", "name", "version", "source", "digest", "description", "priority", "availabilityStatus", "trustStatus", "reviewedAt", "allowedRoles", "frameworks", "platforms", "dependencies", "permissions", "evidence", "fallbackPlan", "createdAt", "updatedAt"],
+    "availabilityStatusEnum": ["available", "unavailable", "disabled", "unknown"],
+    "trustStatusEnum": ["unreviewed", "reviewed", "blocked", "expired"]
+  },
+  "selectionOrder": ["project-binding", "framework-specific", "generic", "fallback"]
+}

package/init/xinyun-ai-init/templates/task-index.template.json

@@ -6,7 +6,9 @@
   "currentTaskId": null,
   "roleExecutionDirectory": "xinyun-ai/tasks/role-execution/",
   "roleExecutionTaskIds": [],
+  "roleSessionBindingIds": [],
   "roleExecutionStatusEnum": ["pending", "assigned", "accepted", "executing", "paused", "blocked", "completed", "cancelled"],
+  "roleSessionStatusEnum": ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"],
   "roleExecutionPriority": {
     "project-owner": 10,
     "project-product": 20,
@@ -25,7 +27,13 @@
     "algorithm": "JCS-SHA-256",
     "duplicatePolicy": "reuse"
   },
+  "roleSessionIdempotency": {
+    "keyFields": ["taskId", "roleId", "provider", "targetVersion"],
+    "algorithm": "JCS-SHA-256",
+    "duplicatePolicy": "reuse"
+  },
   "tasks": [],
+  "roleSessionBindings": [],
   "archiveTransactions": [],
   "statusEnum": ["pending", "executing", "partial", "blocked", "completed", "cancelled"],
   "idleCurrentTask": {

package/init/xinyun-ai-init/templates/team/README.md

@@ -9,6 +9,16 @@
 - `confirmations/<roleId>.md` 和 `understandings/<roleId>.md` 的 `createdAt`、`updatedAt` 必须存在且为 ISO 8601 时间；首次落盘可使用模板初始时间或替换为当前时间，但不得留空。
 - `xinyun-ai/team/**` 属于 AI 工作区控制文件，不授权修改业务代码、数据库、API、依赖、构建脚本或执行发布操作。
 
+## Codex 角色会话绑定
+
+- v1.7.3 起，在 Codex 宿主支持创建子会话时，主会话可以为五个默认角色自动创建真实角色子会话，并把真实 `sessionId` 回写到角色任务、`assignments.json`、`task-index.json`、`manifest.json`、`project-index.json` 和 `xinyun-ai/sessions/role-session-bindings.json`。
+- 固定角色为 `project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer`，不得因为初始化或升级创建超过 5 个角色会话。
+- `sessionId` 必须来自 Codex 宿主返回值，不得使用任务 ID、随机占位字符串、本地文件名或历史会话记忆冒充。
+- 会话绑定最小字段为 `taskId`、`roleId`、`sessionId`、`parentSessionId`、`provider`、`sessionStatus`、`createdAt`、`updatedAt`。
+- 会话状态固定为 `pending/creating/created/onboarding/ready/blocked/failed/closed`。
+- 创建成功后先进入 `onboarding`，只允许只读理解职责范围和项目资料；职责理解、确认关系和执行门禁满足后才允许 `ready`。
+- Codex 宿主不支持创建子会话、权限不足或创建失败时，必须进入本地降级：保留 `sessionId=null`，记录 `sessionStatus=blocked/failed`、失败原因和下一步动作，不得伪造会话。
+
 ## 默认角色
 
 - `project-owner`：项目负责人，负责需求最终确认、业务验收和发布授权。

package/init/xinyun-ai-init/templates/team/assignments.json

@@ -10,6 +10,10 @@
       "assignmentId",
       "taskId",
       "roleId",
+      "sessionId",
+      "parentSessionId",
+      "provider",
+      "sessionStatus",
       "memberId",
       "workstream",
       "scope",
@@ -27,7 +31,8 @@
     ],
     "pausedRule": "status=paused requires pauseReason; other statuses require pauseReason=null.",
     "blockedRule": "status=blocked requires blockedReason=approver-unavailable or member-conflict.",
-    "executionEligibility": "member bound, role ready, responsibility confirmed, understanding ready, and executor memberId not equal to final approver member IDs."
+    "executionEligibility": "member bound, role ready, sessionStatus=ready, responsibility confirmed, understanding ready, and executor memberId not equal to final approver member IDs.",
+    "sessionBindingRule": "sessionId must be a real host-returned value when provider=codex; if the host cannot create sessions, sessionId remains null and sessionStatus=blocked or failed with a local degradation reason."
   },
   "updatedAt": ""
 }

package/init/xinyun-ai-init/templates/temporary-session.template.json

@@ -0,0 +1,32 @@
+{
+  "taskId": "",
+  "parentTaskId": "",
+  "moduleId": "",
+  "moduleOwnerTaskId": "",
+  "executorType": "temporary-programmer",
+  "provider": "codex",
+  "sessionId": null,
+  "parentSessionId": null,
+  "planId": "",
+  "userConfirmationId": "",
+  "permittedPaths": [],
+  "changeDomain": [],
+  "autoCreated": true,
+  "autoClose": true,
+  "status": "pending",
+  "occupancyStatus": "released",
+  "leaseId": null,
+  "attempt": 1,
+  "failureReason": null,
+  "nextAction": "awaiting-confirmation",
+  "closeEvidence": null,
+  "createdAt": "",
+  "updatedAt": "",
+  "closedAt": null,
+  "closedBy": null,
+  "releaseAudit": null,
+  "statusEnum": ["pending", "creating", "onboarding", "queued", "executing", "waiting-review", "completed", "blocked", "failed", "closed", "cancelled"],
+  "occupancyStatusEnum": ["occupied", "released", "unknown"],
+  "maxConcurrent": 3,
+  "unknownPolicy": "unknown occupancy continues to consume capacity until complete releaseAudit is recorded"
+}

package/init/xinyun-ai-init/version.json

@@ -1,8 +1,8 @@
 {
   "packageName": "xinyun-ai-init",
   "displayName": "欣芸技术开发 Agent 流初始化包",
-  "version": "1.7.2",
-  "scriptVersion": "2026.07.20",
+  "version": "1.8.0",
+  "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "defaultMode": "fast-init",
   "targetWorkspace": "xinyun-ai",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pm_zhousl/xinyun-ai-init",
-  "version": "1.7.2",
+  "version": "1.8.0",
   "description": "欣芸技术开发 Agent 流初始化包",
   "bin": {
     "xinyun-ai-init": "bin/xinyun-ai-init.js"