@pm_zhousl/xinyun-ai-init 2.0.0 → 3.0.0

package/scripts/verify-init-package.js

@@ -1,2297 +0,0 @@
-#!/usr/bin/env node
-
-const fs = require("fs");
-const path = require("path");
-const crypto = require("crypto");
-
-const root = path.resolve(__dirname, "..");
-if (require(path.join(root, "package.json")).version.startsWith("2.")) {
-  const targetScript = process.argv.includes("--tarball") ? "verify-v2-tarball.js" : "verify-v2-package.js";
-  const result = require("child_process").spawnSync(process.execPath, [path.join(__dirname, targetScript), ...process.argv.slice(2)], { stdio: "inherit" });
-  process.exit(typeof result.status === "number" ? result.status : 1);
-}
-const initRoot = path.join(root, "init", "xinyun-ai-init");
-const CURRENT_VERSION = "1.16.0";
-
-const checks = [];
-
-function rel(filePath) {
-  return path.relative(root, filePath).replace(/\\/g, "/");
-}
-
-function readText(relativePath) {
-  const filePath = path.join(root, relativePath);
-  return fs.readFileSync(filePath, "utf8");
-}
-
-function addCheck(name, ok, detail) {
-  checks.push({ name, ok, detail });
-}
-
-function requireFile(relativePath) {
-  const filePath = path.join(root, relativePath);
-  addCheck(`文件存在：${relativePath}`, fs.existsSync(filePath), "缺少必需文件");
-}
-
-function requireIncludes(relativePath, snippets) {
-  const content = readText(relativePath);
-  for (const snippet of snippets) {
-    const expectedSnippet = snippet === "当前规则版本：`1.9.0`" ? `当前规则版本：\`${CURRENT_VERSION}\`` : snippet;
-    addCheck(
-      `${relativePath} 包含：${snippet}`,
-      content.includes(expectedSnippet),
-      `未找到关键文本：${snippet}`
-    );
-  }
-}
-
-function markdownFieldValue(content, fieldName) {
-  const escaped = fieldName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const match = content.match(new RegExp(`^- ${escaped}：(.+)$`, "m"));
-  return match ? match[1].trim() : "";
-}
-
-function isIso8601Utc(value) {
-  return (
-    /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) &&
-    !Number.isNaN(Date.parse(value))
-  );
-}
-
-function requireJson(relativePath) {
-  try {
-    JSON.parse(readText(relativePath));
-    addCheck(`JSON 可解析：${relativePath}`, true);
-  } catch (error) {
-    addCheck(`JSON 可解析：${relativePath}`, false, error.message);
-  }
-}
-
-function requireMarkdownBalanced(relativePath) {
-  const content = readText(relativePath);
-  const fenceCount = (content.match(/```/g) || []).length;
-  addCheck(
-    `Markdown 代码块闭合：${relativePath}`,
-    fenceCount % 2 === 0,
-    `代码块围栏数量为 ${fenceCount}`
-  );
-}
-
-function walkFiles(dirPath) {
-  const result = [];
-  for (const entry of fs.readdirSync(dirPath, { withFileTypes: true })) {
-    const entryPath = path.join(dirPath, entry.name);
-    if (entry.isDirectory()) {
-      result.push(...walkFiles(entryPath));
-    } else {
-      result.push(entryPath);
-    }
-  }
-  return result;
-}
-
-const v19SessionReuseFiles = [
-  "init/xinyun-ai-init/README.md",
-  "init/xinyun-ai-init/templates/AGENTS.template.md",
-  "init/xinyun-ai-init/templates/core-rules.template.md",
-  "init/xinyun-ai-init/templates/project-guide.template.md",
-  "init/xinyun-ai-init/templates/project-check.template.md",
-  "init/xinyun-ai-init/templates/role-execution.template.md",
-  "init/xinyun-ai-init/rules/init-rules.md",
-  "init/xinyun-ai-init/rules/upgrade-rules.md",
-  "init/xinyun-ai-init/rules/session-workbench.md",
-];
-
-const v19SessionKeyFields = [
-  "projectRootHash",
-  "workspaceScope",
-  "repositoryScopeHash",
-  "workstream",
-  "taskId",
-  "roleId",
-  "provider",
-  "targetVersion",
-];
-
-function verifyV19SessionReuseText() {
-  const legacyPatterns = [
-    /\btaskId\s*\+\s*roleId\s*\+\s*provider\s*\+\s*targetVersion\b/,
-    /JCS-SHA-256\s*\(\s*taskId\s*,\s*roleId\s*,\s*provider\s*,\s*targetVersion\s*\)/,
-    /(?:roleSessionIdempotency|sessionIdempotencyKey|legacyCreationIndexFields)[^\n]{0,300}\{\s*taskId\s*,\s*roleId\s*,\s*provider\s*,\s*targetVersion\s*\}/,
-  ];
-  const allowedLegacyMarkers = [
-    /legacy/i,
-    /compatib/i,
-    /兼容/,
-    /不得参与候选选择/,
-    /不参与候选选择/,
-    /绝不参与/,
-    /never used for candidate selection/i,
-    /only.*creation/i,
-    /只作/,
-    /仅作/,
-  ];
-
-  for (const relativePath of v19SessionReuseFiles) {
-    const content = readText(relativePath);
-    const hits = [];
-    for (const [index, line] of content.split(/\r?\n/).entries()) {
-      if (!legacyPatterns.some((pattern) => pattern.test(line))) continue;
-      const allowed = allowedLegacyMarkers.some((marker) => marker.test(line));
-      hits.push({ line: index + 1, allowed, text: line.trim() });
-    }
-    const unauthorized = hits.filter((hit) => !hit.allowed);
-    addCheck(
-      `v1.9 会话复用文本扫描：${relativePath}`,
-      unauthorized.length === 0,
-      unauthorized.length === 0
-        ? hits.length === 0
-          ? "未发现旧四字段会话复用表述"
-          : `仅发现兼容索引命中 ${hits.length} 处；均明确禁止候选选择、复用或跨项目判定`
-        : `发现未标注兼容用途的旧四字段命中：${unauthorized.map((hit) => `L${hit.line}`).join(", ")}`
-    );
-    addCheck(
-      `v1.9 完整会话复用键：${relativePath}`,
-      v19SessionKeyFields.every((field) => content.includes(field)) && content.includes("RFC8785-JCS-SHA-256"),
-      "正式可执行会话复用文本必须包含八字段和 RFC8785-JCS-SHA-256"
-    );
-  }
-}
-
-function verifyPackageFiles() {
-  const packageJson = JSON.parse(readText("package.json"));
-  const versionJson = JSON.parse(readText("init/xinyun-ai-init/version.json"));
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const expectedFiles = ["bin/", "init/", "scripts/", "test-scenarios/", "README.md"];
-
-  for (const expected of expectedFiles) {
-    addCheck(
-      `package.json files 包含：${expected}`,
-      Array.isArray(packageJson.files) && packageJson.files.includes(expected),
-      "发布文件白名单缺少该路径"
-    );
-  }
-
-  addCheck(
-    "package.json scripts 包含 verify:init",
-    packageJson.scripts && packageJson.scripts["verify:init"] === "node ./scripts/verify-init-package.js",
-    "缺少发布前校验命令"
-  );
-  addCheck(
-    "package.json scripts 包含 evidence:v1.10",
-    packageJson.scripts && packageJson.scripts["evidence:v1.10"] === "node ./scripts/collect-v1.10-evidence.js",
-    "缺少 v1.10 真实会话证据采集入口"
-  );
-
-  addCheck(
-    "package.json 版本为当前版本",
-    packageJson.version === CURRENT_VERSION,
-    `当前版本为 ${packageJson.version}`
-  );
-  addCheck(
-    "version.json 版本为当前版本",
-    versionJson.version === CURRENT_VERSION,
-    `当前版本为 ${versionJson.version}`
-  );
-  addCheck(
-    "manifest.template.json 版本为当前版本",
-    manifestTemplate.xinyunAiVersion === CURRENT_VERSION,
-    `当前版本为 ${manifestTemplate.xinyunAiVersion}`
-  );
-}
-
-function verifyCliBoundary() {
-  const cli = readText("bin/xinyun-ai-init.js");
-
-  requireIncludes("bin/xinyun-ai-init.js", [
-    "This CLI only creates xinyun-ai-init/",
-    "It does not create xinyun-ai/ or modify business code",
-    "printNextStep",
-  ]);
-
-  addCheck(
-    "CLI 目标目录仅为 xinyun-ai-init",
-    cli.includes('const target = path.join(cwd, "xinyun-ai-init");'),
-    "CLI 不应直接创建 xinyun-ai/"
-  );
-}
-
-function verifyInitRules() {
-  requireIncludes("init/xinyun-ai-init/README.md", [
-    "用户发送一句话入口后，AI 可以按本 README 和 `templates/` 创建或补齐首次最小落盘清单。",
-    "该授权只覆盖 AI 工作区初始化，不代表授权修改业务代码",
-    "标准改动计划",
-    "前端改动模式：样式微调 / 新页面 / 页面重写 / 组件重构 / 不涉及",
-    "页面类型：生产页面 / 原型页面 / 营销页面 / 不涉及",
-    "页面文案预算",
-    "用户确认状态",
-    "发现新增影响范围",
-    "当前项目 AI 规则以 `xinyun-ai/` 为准",
-    "旧 AI 文档、旧 docs、旧提示词、旧规则文件只作为历史线索，不作为执行依据",
-    "规则优先级",
-    "`xinyun-ai/` 当前正式规则",
-    "当前文件系统事实",
-    "历史会话记忆",
-    "先识别、再分类、再接管",
-    "可接管",
-    "不接管",
-    "待确认",
-    "不创建自动迁移脚本",
-    "中文需求解析",
-    "用户原话",
-    "任务类型至少包括",
-    "高歧义表达",
-    "优化一下",
-    "处理一下",
-    "高风险词",
-    "订单、支付、退款",
-    "最多追问 1-3 个关键问题",
-    "ThinkPHP、uni-app、微信小程序",
-    "涉及 SQL / 数据库改动时，必须单独输出 SQL 执行提醒",
-    "商业逻辑",
-    "xinyun-ai/global-review/",
-    "首次极速初始化不强制创建 `xinyun-ai/global-review/`",
-    "reviewId",
-    "xinyun-ai/global-review/index.json",
-    "Git 工作区与危险操作门禁",
-    "单仓库",
-    "多仓库",
-    "混合仓库",
-    "commit",
-    "push",
-    "rebase",
-    "前端官方组件与 API 优先",
-    "微信小程序",
-    "uni.*",
-    "Vue2 / Vue3",
-    "React",
-    "第三方库",
-    "生产页面默认采用克制文案",
-    "本页面用于",
-    "智能、高效、便捷、全方位",
-    "真实业务表达",
-    "删除非必要说明后核心操作仍清楚",
-    "明显 AI 话术",
-    "不做无关全量扫描",
-    "少复述规则",
-    "双会话执行闭环（MVP）",
-    "xinyun-ai/index/session-current.md",
-    "xinyun-ai/handoffs/current-execution.md",
-    "taskId",
-    "executionId",
-    "待主会话复核",
-    "不得自动重试",
-    "是否执行过高风险操作",
-    "交付输出要求",
-    "字段变更类任务还必须细分为",
-    "字段影响审视 / 普通改动计划 / SQL 提醒 / 业务流程理解",
-    "多仓库 Git 只读索引与端口映射",
-    "最多记录 20 个仓库候选和 200 个相关目录 / 文件条目",
-    "`repoRoot`",
-    "`parentRepo`",
-    "`kind`",
-    "字段变更影响审视",
-    "每个端口最多检查 300 个候选文件、1000 条匹配结果和 50 条证据记录",
-    "排除 `node_modules`、`dist`、`build`、`vendor`",
-    "CodeGraph 可用时，结构性影响优先使用 CodeGraph",
-    "旧数据兼容方案",
-    "未确认前不得执行 SQL、migration、seed、批量数据修复或接口兼容改动",
-    "AI 项目团队与责任闭环",
-    "xinyun-ai/team/",
-    "roles.json",
-    "members.json",
-    "assignments.json",
-    "responsibility-matrix.json",
-    "file-ownership.json",
-    "confirmations/<roleId>.md",
-    "understandings/<roleId>.md",
-    "capabilities.teamResponsibilityClosure: true",
-    "roleCount=5",
-    "confirmationCount=5",
-    "status=pending-confirmation",
-    "`createdAt`、`updatedAt` 必须存在且为 ISO 8601 时间",
-    "memberId` 不得等于 `technicalApproverMemberId`",
-    "status=paused",
-    "pauseReason=out-of-scope",
-    "paused-out-of-scope",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/AGENTS.template.md", [
-    "当前项目 AI 规则以 `xinyun-ai/` 为准",
-    "规则优先级",
-    "历史会话记忆不得覆盖当前文件系统事实",
-    "先识别、再分类、再接管",
-    "未确认内容不得直接写入正式规则",
-    "任何代码、配置、数据库、依赖、构建脚本、测试逻辑、API 行为、UI 行为或业务流程修改前",
-    "只有用户明确回复“确认执行”“可以修改”“按方案改”“同意”等类似内容后",
-    "发现新增影响范围",
-    "前端组件调用、框架 API 和交互能力优先使用官方组件",
-    "页面类型必须标注为：生产页面 / 原型页面 / 营销页面 / 不涉及",
-    "生产页面默认采用克制文案",
-    "明显 AI 话术",
-    "单仓库 / 多仓库 / 混合仓库 / 无 Git",
-    "不得自动执行 `commit`、`tag`、`push`、`pull`、`merge`、`rebase`、`reset`、`checkout` 回滚或切分支",
-    "双会话文件契约",
-    "失败、中断、超时后不得自动重试",
-    "中文需求解析与任务分型",
-    "高歧义表达包括",
-    "高风险词包括",
-    "最多追问 1-3 个关键问题",
-    "全局影响审视",
-    "首次极速初始化不强制创建",
-    "字段变更类任务必须细分为",
-    "多仓库 Git 只读索引最多向下发现 4 层目录",
-    "仓库索引必须包含 `repoRoot`",
-    "ThinkPHP、uni-app、微信小程序轻量识别每个端口最多发现 3 层目录",
-    "字段新增、删除、重命名、类型变化、含义变化",
-    "xinyun-ai/team/",
-    "teamResponsibilityClosure",
-    "roleCount=5",
-    "confirmationCount=5",
-    "memberId` 不得等于 `technicalApproverMemberId`",
-    "pauseReason=out-of-scope",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", [
-    "标准改动计划",
-    "前端改动模式：样式微调 / 新页面 / 页面重写 / 组件重构 / 不涉及",
-    "规则优先级",
-    "历史会话记忆不得覆盖当前文件系统事实",
-    "先识别、再分类、再接管",
-    "不创建自动迁移脚本",
-    "中文需求解析格式",
-    "用户原话",
-    "任务类型至少包括",
-    "高歧义表达包括",
-    "高风险词包括",
-    "最多追问 1-3 个关键问题",
-    "页面类型：生产页面 / 原型页面 / 营销页面 / 不涉及",
-    "页面文案预算",
-    "发现新增影响范围",
-    "有 CodeGraph 时，结构性问题优先使用 CodeGraph",
-    "发现可复用经验时，先记录为候选经验",
-    "前端官方组件与 API 优先",
-    "uni.*",
-    "Vue2 / Vue3",
-    "React 官方组件模式",
-    "生产页面默认采用克制文案",
-    "本页面用于",
-    "智能、高效、便捷、全方位",
-    "真实业务表达",
-    "删除非必要说明后核心操作仍清楚",
-    "不做无关全量扫描",
-    "少复述规则",
-    "Git 工作区与危险操作门禁",
-    "首次极速初始化不强制创建 `xinyun-ai/global-review/`",
-    "`reviewId`",
-    "xinyun-ai/global-review/index.json",
-    "单仓库 / 多仓库 / 混合仓库 / 无 Git",
-    "不得自动执行 `commit`、`tag`、`push`、`pull`、`merge`、`rebase`、`reset`、`checkout` 回滚或切分支",
-    "双会话执行闭环（MVP）",
-    "xinyun-ai/index/session-current.md",
-    "xinyun-ai/handoffs/current-execution.md",
-    "taskId",
-    "executionId",
-    "不得自动重试",
-    "人工启动第二会话",
-    "交付输出",
-    "字段变更类任务必须细分为",
-    "多仓库 Git 只读索引最多向下发现 4 层目录",
-    "`repoRoot`、`path`、`workstream`、`kind`、`parentRepo`",
-    "每个端口从端口根目录向下最多发现 3 层目录",
-    "正向识别必须输出证据路径和证据类型",
-    "字段变更影响审视",
-    "每个端口最多检查 300 个候选文件、1000 条匹配结果和 50 条证据记录",
-    "字段影响审视输出契约",
-    "AI 项目团队与责任闭环",
-    "project-owner",
-    "project-product",
-    "chief-engineer",
-    "programmer",
-    "test-reviewer",
-    "capabilities.teamResponsibilityClosure: true",
-    "roleCount=5",
-    "confirmationCount=5",
-    "`createdAt`、`updatedAt` 必须存在且为 ISO 8601 时间",
-    "memberId` 不得等于 `technicalApproverMemberId`",
-    "blockedReason=member-conflict",
-    "blockedReason=approver-unavailable",
-    "pauseReason=out-of-scope",
-    "paused-out-of-scope",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/current-task.template.md", [
-    "前端改动模式",
-    "中文需求解析",
-    "用户原话",
-    "任务类型",
-    "风险词",
-    "是否需要追问",
-    "页面类型",
-    "页面文案预算",
-    "用户确认状态",
-    "交付状态",
-    "下一步动作",
-    "字段任务分型",
-    "字段专项路由",
-    "多仓库 Git 只读索引",
-    "字段影响审视",
-    "团队责任闭环",
-    "technicalApproverMemberId",
-    "businessApproverMemberId",
-    "publishAuthorizerMemberId",
-    "预计更新文件目录",
-    "实际更新文件目录",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/project-index.template.json", [
-    "single-project-single-active-task-main-session-plus-execution-session",
-    "productionCopyMode",
-    "conclusion-first",
-    "legacyHandoff",
-    "globalReview",
-    "requirementParsing",
-    "createOnFastInit",
-    "frameworkEvidenceBudget",
-    "gitRepositories",
-    "fieldImpactReview",
-    "fieldChangeRequirementRouting",
-    "team",
-    "roleCount",
-    "confirmationCount",
-    "pending-confirmation",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", [
-    "状态机至少包含",
-    "失败、中断、超时后不得自动重试",
-    "临时执行任务单建议结构",
-    "执行交接单建议结构",
-    "是否执行过高风险操作",
-    "可接管、不接管、待确认",
-    "中文需求解析结果",
-    "全局影响审视摘要",
-    "字段变更任务单还必须记录字段分类",
-    "多仓库 Git 任务单还必须记录只读仓库索引",
-    "字段影响审视交接",
-    "团队责任任务单还必须记录需求负责人",
-    "memberId` 等于 `technicalApproverMemberId`",
-    "blockedReason=member-conflict",
-    "blockedReason=approver-unavailable",
-    "pauseReason=out-of-scope",
-    "实际更新文件目录",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/project-guide.template.md", [
-    "规则优先级",
-    "中文需求解析与任务分型",
-    "全局影响审视",
-    "待确认内容",
-    "多仓库 Git 只读索引",
-    "字段影响审视",
-    "字段任务分型",
-    "AI 项目团队与责任闭环",
-    "角色数量",
-    "职责确认记录数量",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/project-check.template.md", [
-    "规则入口优先级",
-    "中文需求解析触发情况",
-    "全局影响审视触发情况",
-    "待确认内容",
-    "多仓库 Git 只读索引",
-    "字段变更任务分型与专项路由",
-    "证据路径与证据类型",
-    "字段影响审视",
-    "AI 项目团队与责任闭环",
-    "5 个 JSON 配置是否可解析",
-    "自确认 memberId 冲突阻断",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", [
-    "当前项目 AI 规则以 `xinyun-ai/` 为准",
-    "当前项目未发现",
-    "可接管、不接管、待确认",
-    "首次极速初始化不强制创建",
-    "最多追问 1-3 个关键问题",
-    "多仓库 Git 只读索引最多发现 4 层目录",
-    "字段新增、删除、重命名",
-    "xinyun-ai/team/",
-    "teamResponsibilityClosure",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", [
-    "规则优先级",
-    "中文需求解析",
-    "xinyun-ai/global-review/",
-    "不自动迁移全部旧 AI 文档",
-    "框架识别证据路径、证据类型",
-    "多仓库 Git 只读索引字段",
-    "字段影响审视",
-    "xinyun-ai/team/",
-    "teamResponsibilityClosure",
-    "pauseReason=out-of-scope",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", [
-    "xinyun-ai/global-review/",
-    "首次极速初始化不强制创建",
-    "xinyun-ai/global-review/index.json",
-    "`reviewId`",
-    "端口框架线索",
-    "多仓库 Git 结构",
-    "字段审视记录",
-    "xinyun-ai/team/",
-    "index/project-index.json",
-    "paused-out-of-scope",
-  ]);
-}
-
-function verifyTestScenarios() {
-  requireIncludes("test-scenarios/scenarios.md", [
-    "1-133",
-    "106",
-    "## 40. v1.6-A",
-    "## 53. v1.6 tarball",
-    "## 55. verify:rules",
-    "## 59. ThinkPHP",
-    "## 64. HTML",
-    "## 69. verify:rules JSON schema",
-    "## 71. v1.7.1 主任务命名",
-    "## 87. v1.7.1 普通咨询和版本回归",
-    "## 89. v1.7.3 Codex 真实角色会话创建",
-    "## 96. v1.7.3 普通咨询边界",
-    "## 97. Skill",
-  ]);
-
-  requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.10.1.tgz",
-    "1-133",
-    "119",
-    "npm run verify:rules",
-    "v1.7.2-scenarios.md",
-    "v1.7.3-scenarios.md",
-  ]);
-
-  requireIncludes("test-scenarios/v1.7.1-scenarios.md", [
-    "主任务命名",
-    "角色登记与执行资格分离",
-    "归档原子性和任务索引",
-    "CodeGraph初始化授权边界",
-    "CodeGraph记录与失败矩阵",
-    "普通咨询边界",
-  ]);
-
-  requireIncludes("test-scenarios/v1.7.2-scenarios.md", [
-    "role-execution",
-    "activeTaskIds",
-    "executableTaskIds",
-    "固定优先级",
-    "幂等补建",
-    "补建失败和索引恢复",
-  ]);
-
-  requireIncludes("test-scenarios/v1.7.3-scenarios.md", [
-    "真实角色子会话创建",
-    "provider=codex",
-    "sessionStatus=onboarding",
-    "taskId + roleId + provider + targetVersion",
-    "local-degraded-no-fake-session-id",
-    "created-but-writeback-failed",
-    "单角色失败不影响其他角色",
-    "普通咨询边界",
-  ]);
-}
-function verifyFrameworkRules() {
-  const required = [
-    "init/xinyun-ai-init/rules/frameworks/README.md",
-    "init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md",
-    "init/xinyun-ai-init/rules/frameworks/frontend/uni-app.md",
-    "init/xinyun-ai-init/rules/frameworks/frontend/wechat-miniprogram.md",
-  ];
-
-  for (const file of required) {
-    requireFile(file);
-  }
-
-  requireIncludes("init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md", [
-    "topthink/framework",
-    "think\\facade",
-    "最多发现 3 层目录",
-    "最多读取 20 个关键文件",
-    "证据路径和证据类型",
-    "未在项目中发现",
-    "状态未知",
-    "覆盖范围：部分",
-  ]);
-  requireIncludes("init/xinyun-ai-init/rules/frameworks/frontend/uni-app.md", [
-    "pages.json",
-    "vite-plugin-uni",
-    "最多发现 3 层目录",
-    "最多读取 20 个关键文件",
-    "证据路径和证据类型",
-    "未在项目中发现",
-    "状态未知",
-    "覆盖范围：部分",
-    "不把原生微信小程序规则反向套到 uni-app",
-  ]);
-  requireIncludes("init/xinyun-ai-init/rules/frameworks/frontend/wechat-miniprogram.md", [
-    "project.config.json",
-    ".wxml",
-    "最多发现 3 层目录",
-    "最多读取 20 个关键文件",
-    "证据路径和证据类型",
-    "未在项目中发现",
-    "状态未知",
-    "覆盖范围：部分",
-    "不把 uni-app 规则反向套到原生微信小程序",
-  ]);
-  requireIncludes("init/xinyun-ai-init/rules/frameworks/README.md", [
-    "证据路径和证据类型",
-    "发现预算：目录深度 3 层、关键文件 20 个",
-    "未在项目中发现",
-    "状态未知",
-    "覆盖范围：部分",
-  ]);
-}
-
-function verifyTeamTemplates() {
-  const roleIds = ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"];
-  const teamFiles = [
-    "init/xinyun-ai-init/templates/team/README.md",
-    "init/xinyun-ai-init/templates/team/roles.json",
-    "init/xinyun-ai-init/templates/team/members.json",
-    "init/xinyun-ai-init/templates/team/assignments.json",
-    "init/xinyun-ai-init/templates/team/responsibility-matrix.json",
-    "init/xinyun-ai-init/templates/team/file-ownership.json",
-  ];
-
-  for (const file of teamFiles) {
-    requireFile(file);
-  }
-
-  for (const roleId of roleIds) {
-    requireFile(`init/xinyun-ai-init/templates/team/confirmations/${roleId}.md`);
-    requireFile(`init/xinyun-ai-init/templates/team/understandings/${roleId}.md`);
-  }
-
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const roles = JSON.parse(readText("init/xinyun-ai-init/templates/team/roles.json"));
-  const members = JSON.parse(readText("init/xinyun-ai-init/templates/team/members.json"));
-  const assignments = JSON.parse(readText("init/xinyun-ai-init/templates/team/assignments.json"));
-  const matrix = JSON.parse(readText("init/xinyun-ai-init/templates/team/responsibility-matrix.json"));
-  const ownership = JSON.parse(readText("init/xinyun-ai-init/templates/team/file-ownership.json"));
-
-  addCheck(
-    "manifest capabilities 包含 teamResponsibilityClosure",
-    manifestTemplate.capabilities && manifestTemplate.capabilities.teamResponsibilityClosure === true,
-    "manifest.template.json 未声明 teamResponsibilityClosure"
-  );
-
-  const expectedTeamPaths = {
-    directory: "xinyun-ai/team/",
-    roles: "xinyun-ai/team/roles.json",
-    members: "xinyun-ai/team/members.json",
-    assignments: "xinyun-ai/team/assignments.json",
-    responsibilityMatrix: "xinyun-ai/team/responsibility-matrix.json",
-    fileOwnership: "xinyun-ai/team/file-ownership.json",
-    understandingsDirectory: "xinyun-ai/team/understandings/",
-    confirmationsDirectory: "xinyun-ai/team/confirmations/",
-  };
-
-  for (const [key, value] of Object.entries(expectedTeamPaths)) {
-    addCheck(
-      `manifest team 路径 ${key}`,
-      manifestTemplate.team && manifestTemplate.team[key] === value,
-      `manifest team.${key} 应为 ${value}`
-    );
-    addCheck(
-      `project-index team 路径 ${key}`,
-      projectIndexTemplate.team &&
-        projectIndexTemplate.team.paths &&
-        projectIndexTemplate.team.paths[key] === value,
-      `project-index team.paths.${key} 应为 ${value}`
-    );
-  }
-
-  addCheck("project-index team enabled", projectIndexTemplate.team && projectIndexTemplate.team.enabled === true);
-  addCheck("project-index team roleCount=5", projectIndexTemplate.team && projectIndexTemplate.team.roleCount === 5);
-  addCheck("project-index team confirmationCount=5", projectIndexTemplate.team && projectIndexTemplate.team.confirmationCount === 5);
-  addCheck("project-index team status=pending-confirmation", projectIndexTemplate.team && projectIndexTemplate.team.status === "pending-confirmation");
-
-  const actualRoleIds = Array.isArray(roles.roles) ? roles.roles.map((role) => role.roleId) : [];
-  addCheck("roles.json 包含 5 个角色", actualRoleIds.length === 5, `当前角色数 ${actualRoleIds.length}`);
-  addCheck("roles.json roleId 全局唯一", new Set(actualRoleIds).size === actualRoleIds.length, "roleId 存在重复");
-
-  for (const roleId of roleIds) {
-    addCheck(`roles.json 包含角色 ${roleId}`, actualRoleIds.includes(roleId), "缺少默认角色");
-  }
-
-  const memberIds = Array.isArray(members.members) ? members.members.map((member) => member.memberId) : [];
-  addCheck("members.json 包含 5 个成员槽位", memberIds.length === 5, `当前成员槽位 ${memberIds.length}`);
-  addCheck("members.json memberId 全局唯一", new Set(memberIds).size === memberIds.length, "memberId 存在重复");
-  addCheck(
-    "members.json 未绑定时 personId/sessionId 为 null",
-    Array.isArray(members.members) && members.members.every((member) => member.personId === null && member.sessionId === null),
-    "未绑定成员不得虚构 personId/sessionId"
-  );
-
-  addCheck("assignments.json 状态包含 paused", assignments.statusEnum && assignments.statusEnum.includes("paused"));
-  addCheck("assignments.json 状态包含 blocked", assignments.statusEnum && assignments.statusEnum.includes("blocked"));
-  addCheck("assignments.json pauseReason 包含 out-of-scope", assignments.pauseReasonEnum && assignments.pauseReasonEnum.includes("out-of-scope"));
-  addCheck("assignments.json blockedReason 包含 member-conflict", assignments.blockedReasonEnum && assignments.blockedReasonEnum.includes("member-conflict"));
-  addCheck("assignments.json blockedReason 包含 approver-unavailable", assignments.blockedReasonEnum && assignments.blockedReasonEnum.includes("approver-unavailable"));
-  addCheck(
-    "assignments.json 包含 memberId 自确认冲突规则",
-    typeof assignments.memberConflictRule === "string" && assignments.memberConflictRule.includes("technicalApproverMemberId"),
-    "缺少成员级冲突规则"
-  );
-
-  const matrixRoleIds = Array.isArray(matrix.matrix) ? matrix.matrix.map((item) => item.roleId) : [];
-  addCheck("responsibility-matrix.json 包含 5 条职责矩阵", matrixRoleIds.length === 5, `当前矩阵数 ${matrixRoleIds.length}`);
-  addCheck(
-    "chief-engineer 默认技术确认候选为空",
-    Array.isArray(matrix.matrix) &&
-      matrix.matrix.some((item) => item.roleId === "chief-engineer" && item.technicalApproverRoleId === null),
-    "总工不得默认自指技术确认"
-  );
-  addCheck(
-    "programmer 禁止最终确认和发布授权",
-    Array.isArray(matrix.matrix) &&
-      matrix.matrix.some((item) => item.roleId === "programmer" && item.forbiddenActions.includes("technical-final-approval") && item.forbiddenActions.includes("publish-authorization")),
-    "程序员不得担任技术、业务或发布最终确认人"
-  );
-
-  addCheck("file-ownership pathType 包含 file", ownership.pathTypeEnum && ownership.pathTypeEnum.includes("file"));
-  addCheck("file-ownership pathType 包含 directory", ownership.pathTypeEnum && ownership.pathTypeEnum.includes("directory"));
-  addCheck("file-ownership pathType 包含 glob", ownership.pathTypeEnum && ownership.pathTypeEnum.includes("glob"));
-  addCheck(
-    "file-ownership 包含 out-of-scope 暂停规则",
-    ownership.recordContract && ownership.recordContract.outOfScopeRule && ownership.recordContract.outOfScopeRule.includes("pauseReason=out-of-scope"),
-    "缺少超范围暂停规则"
-  );
-
-  for (const roleId of roleIds) {
-    const confirmationPath = `init/xinyun-ai-init/templates/team/confirmations/${roleId}.md`;
-    const understandingPath = `init/xinyun-ai-init/templates/team/understandings/${roleId}.md`;
-    const confirmationContent = readText(confirmationPath);
-    const understandingContent = readText(understandingPath);
-
-    requireIncludes(confirmationPath, [
-      `roleId：${roleId}`,
-      "status：pending",
-      "memberId：null",
-      "confirmedBy：null",
-      "confirmedAt：null",
-      "createdAt：",
-      "updatedAt：",
-    ]);
-    addCheck(
-      `${confirmationPath} createdAt 为 ISO 8601`,
-      isIso8601Utc(markdownFieldValue(confirmationContent, "createdAt")),
-      "createdAt 不得为空，且必须为 ISO 8601 UTC 时间"
-    );
-    addCheck(
-      `${confirmationPath} updatedAt 为 ISO 8601`,
-      isIso8601Utc(markdownFieldValue(confirmationContent, "updatedAt")),
-      "updatedAt 不得为空，且必须为 ISO 8601 UTC 时间"
-    );
-
-    requireIncludes(understandingPath, [
-      `roleId：${roleId}`,
-      "status：pending",
-      "executionEligible：false",
-      "evidence：",
-      "coverage：",
-      "createdAt：",
-      "updatedAt：",
-    ]);
-    addCheck(
-      `${understandingPath} createdAt 为 ISO 8601`,
-      isIso8601Utc(markdownFieldValue(understandingContent, "createdAt")),
-      "createdAt 不得为空，且必须为 ISO 8601 UTC 时间"
-    );
-    addCheck(
-      `${understandingPath} updatedAt 为 ISO 8601`,
-      isIso8601Utc(markdownFieldValue(understandingContent, "updatedAt")),
-      "updatedAt 不得为空，且必须为 ISO 8601 UTC 时间"
-    );
-  }
-}
-
-function verifyV16Contracts() {
-  const requiredTemplates = [
-    "init/xinyun-ai-init/templates/init-result.template.json",
-    "init/xinyun-ai-init/templates/task-lock.template.json",
-    "init/xinyun-ai-init/templates/task-history.template.md",
-    "init/xinyun-ai-init/templates/task-result.template.json",
-    "init/xinyun-ai-init/templates/managed-baseline.template.json",
-    "init/xinyun-ai-init/templates/capabilities.template.json",
-  ];
-
-  for (const file of requiredTemplates) {
-    requireFile(file);
-  }
-
-  requireIncludes("bin/xinyun-ai-init.js", [
-    "update-check.json",
-    "lastNotifiedVersion",
-    "lastNotifiedAt",
-    "24 hours",
-    "After upgrading the npm package",
-    "XDG_CACHE_HOME",
-    "LOCALAPPDATA",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.9.0`",
-    "v1.6 初始化任务、幂等恢复与结果记录",
-    "xinyun-ai/tasks/.idempotency/",
-    "xinyun-ai/init-result.json",
-    "xinyun-ai/task-lock.json",
-    "workspace-initialization",
-    "workspace-upgrade",
-    "idempotencyKey",
-    "JCS",
-    "normalizedEntryHash",
-    "normalizedRequestHash",
-    "businessCodeChanged.value=no",
-    "task.status",
-    "upgrade.status",
-    "lock.status",
-    "baselineHash",
-    "templateHash",
-    "both-changed",
-    "conflict-pending",
-    "能力检测证据",
-    "fallbackPlan",
-    "releasedBy",
-    "releasedAt",
-    "releaseReason",
-    "sensitiveScanStatus=unknown",
-    "[REDACTED]",
-    "24 小时",
-    "update-check.json",
-    "HTML 整站转微信小程序或 uni-app 不进入 v1.6.0",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/AGENTS.template.md", [
-    "v1.6 初始化任务、恢复、升级和安全控制",
-    "xinyun-ai/init-result.json",
-    "xinyun-ai/task-lock.json",
-    "idempotencyKey",
-    "workspaceScope=xinyun-ai-control",
-    "businessCodeChanged.value",
-    "baselineHash",
-    "capability.status",
-    "lock.status",
-    "[REDACTED]",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", [
-    "v1.6 初始化任务、幂等恢复与结果记录",
-    "xinyun-ai/tasks/.idempotency/",
-    "task.status",
-    "result.status",
-    "upgrade.status",
-    "lock.status",
-    "idempotencyKey",
-    "JCS",
-    "businessCodeChanged.value=no",
-    "baselineHash",
-    "templateHash",
-    "package-only",
-    "user-only",
-    "reconciled",
-    "both-changed",
-    "task-lock.json",
-    "releasedBy",
-    "capabilityId",
-    "fallbackPlan",
-    "[REDACTED]",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/current-task.template.md", [
-    "idempotencyKey",
-    "task.status",
-    "upgrade.status",
-    "lock.status",
-    "result.status",
-    "init-result.json",
-    "businessCodeChanged",
-    "baselineHash",
-    "capability.status",
-    "sensitiveScanStatus",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/project-index.template.json", [
-    "tasking",
-    "idempotencyDirectory",
-    "initResult",
-    "taskLock",
-    "managedBaseline",
-    "capabilities",
-    "stateMachine",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/project-guide.template.md", [
-    "idempotencyKey",
-    "task.status",
-    "init-result.json",
-    "task-lock.json",
-    "businessCodeChanged",
-    "managed-baseline.json",
-    "capability.status",
-    "sensitiveScanStatus",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/project-check.template.md", [
-    "v1.6 统一初始化任务",
-    "init-result.json",
-    "task-lock.json",
-    "v1.6 升级差异与基线",
-    "managed-baseline.json",
-    "v1.6 能力检测与降级",
-    "capabilities.json",
-    "v1.6 锁、可信边界与脱敏",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", [
-    "xinyun-ai/tasks/.idempotency/",
-    "init-result.json",
-    "task-lock.json",
-    "idempotencyKey",
-    "businessCodeChanged.value",
-    "[REDACTED]",
-    "HTML 整站转微信小程序或 uni-app 不进入 v1.6.0",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", [
-    "v1.6 升级差异与冲突保护",
-    "baselineHash",
-    "templateHash",
-    "both-changed",
-    "conflict-pending",
-    "task-lock.json",
-    "businessCodeChanged.value=no",
-    "[REDACTED]",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", [
-    "xinyun-ai/tasks/.idempotency/",
-    "init-result.json",
-    "task-lock.json",
-    "managed-baseline.json",
-    "capabilities.json",
-    "baselineHash",
-    "capabilityId",
-    "sensitiveScanStatus=unknown",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", [
-    "idempotencyKey",
-    "init-result.json",
-    "businessCodeChanged.value",
-    "task-lock.json",
-    "lock audit",
-    "[REDACTED]",
-  ]);
-
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const taskLock = JSON.parse(readText("init/xinyun-ai-init/templates/task-lock.template.json"));
-  const capabilityTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/capabilities.template.json"));
-
-  const capabilityFlags = [
-    "workspaceTaskHistory",
-    "idempotentInitialization",
-    "upgradeConflictProtection",
-    "capabilityDetectionEvidence",
-    "localTaskLock",
-    "sensitiveRedaction",
-  ];
-
-  for (const flag of capabilityFlags) {
-    addCheck(
-      `manifest capabilities 包含 ${flag}`,
-      manifestTemplate.capabilities && manifestTemplate.capabilities[flag] === true,
-      `manifest.template.json 未声明 ${flag}`
-    );
-  }
-
-  const taskingPaths = {
-    currentTask: "xinyun-ai/current-task.md",
-    tasksDirectory: "xinyun-ai/tasks/",
-    idempotencyDirectory: "xinyun-ai/tasks/.idempotency/",
-    initResult: "xinyun-ai/init-result.json",
-    taskLock: "xinyun-ai/task-lock.json",
-    managedBaseline: "xinyun-ai/index/managed-baseline.json",
-    capabilities: "xinyun-ai/index/capabilities.json",
-  };
-
-  for (const [key, value] of Object.entries(taskingPaths)) {
-    addCheck(
-      `manifest tasking 路径 ${key}`,
-      manifestTemplate.tasking && manifestTemplate.tasking[key] === value,
-      `manifest tasking.${key} 应为 ${value}`
-    );
-    addCheck(
-      `project-index tasking 路径 ${key}`,
-      projectIndexTemplate.tasking && projectIndexTemplate.tasking[key] === value,
-      `project-index tasking.${key} 应为 ${value}`
-    );
-  }
-
-  addCheck("init-result mode 为 initialization", initResult.mode === "initialization");
-  addCheck("init-result targetVersion=current", initResult.targetVersion === CURRENT_VERSION);
-  addCheck("init-result businessCodeChanged 初始为 unknown", initResult.businessCodeChanged && initResult.businessCodeChanged.value === "unknown");
-  addCheck("task-lock scope=xinyun-ai-control", taskLock.scope === "xinyun-ai-control");
-  addCheck("task-lock audit 包含 released", Array.isArray(taskLock.audit) && taskLock.audit.some((item) => item.action === "released"));
-  addCheck(
-    "capabilities.template 包含 fallbackPlan",
-    Array.isArray(capabilityTemplate.capabilities) &&
-      capabilityTemplate.capabilities.some((item) => typeof item.fallbackPlan === "string" && item.fallbackPlan.includes("静态分析")),
-    "能力模板缺少降级方案"
-  );
-}
-
-function verifyV17Contracts() {
-  const packageJson = JSON.parse(readText("package.json"));
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const frameworkProfile = JSON.parse(readText("init/xinyun-ai-init/templates/framework-profile.template.json"));
-  const htmlMigration = JSON.parse(readText("init/xinyun-ai-init/templates/html-migration-record.template.json"));
-
-  addCheck(
-    "package.json scripts contains verify:rules",
-    packageJson.scripts && packageJson.scripts["verify:rules"] === "node ./scripts/verify-rules-package.js",
-    "missing verify:rules package consistency command"
-  );
-
-  const requiredTemplates = [
-    "init/xinyun-ai-init/templates/framework-profile.template.md",
-    "init/xinyun-ai-init/templates/framework-profile.template.json",
-    "init/xinyun-ai-init/templates/html-migration-scope.template.md",
-    "init/xinyun-ai-init/templates/html-migration-compatibility-matrix.template.md",
-    "init/xinyun-ai-init/templates/html-migration-route-map.template.md",
-    "init/xinyun-ai-init/templates/html-migration-asset-map.template.md",
-    "init/xinyun-ai-init/templates/html-migration-pilot-plan.template.md",
-    "init/xinyun-ai-init/templates/html-migration-open-issues.template.md",
-    "init/xinyun-ai-init/templates/html-migration-record.template.json",
-    "scripts/verify-rules-package.js",
-    "test-scenarios/v1.7.1-scenarios.md",
-  ];
-
-  for (const file of requiredTemplates) {
-    requireFile(file);
-  }
-
-  for (const flag of [
-    "rulePackageConsistencyCheck",
-    "technologyStackProfile",
-    "thinkphpDeepProfile",
-    "htmlToClientMigrationPreparation",
-  ]) {
-    addCheck(
-      `manifest capabilities contains ${flag}`,
-      manifestTemplate.capabilities && manifestTemplate.capabilities[flag] === true,
-      `manifest.template.json missing ${flag}`
-    );
-  }
-
-  const frameworkPaths = {
-    directory: "xinyun-ai/frameworks/",
-    markdown: "xinyun-ai/frameworks/framework-profile.md",
-    json: "xinyun-ai/frameworks/framework-profile.json",
-  };
-  for (const [key, value] of Object.entries(frameworkPaths)) {
-    addCheck(
-      `manifest frameworkProfile path ${key}`,
-      manifestTemplate.frameworkProfile && manifestTemplate.frameworkProfile[key] === value,
-      `manifest frameworkProfile.${key} should be ${value}`
-    );
-  }
-
-  const htmlPaths = {
-    directory: "xinyun-ai/migrations/html-to-client/",
-    scope: "xinyun-ai/migrations/html-to-client/migration-scope.md",
-    compatibilityMatrix: "xinyun-ai/migrations/html-to-client/compatibility-matrix.md",
-    routeMap: "xinyun-ai/migrations/html-to-client/route-map.md",
-    assetMap: "xinyun-ai/migrations/html-to-client/asset-map.md",
-    pilotPlan: "xinyun-ai/migrations/html-to-client/pilot-plan.md",
-    openIssues: "xinyun-ai/migrations/html-to-client/open-issues.md",
-    recordJson: "xinyun-ai/migrations/html-to-client/migration-record.json",
-  };
-  for (const [key, value] of Object.entries(htmlPaths)) {
-    addCheck(
-      `manifest htmlMigration path ${key}`,
-      manifestTemplate.htmlMigration && manifestTemplate.htmlMigration[key] === value,
-      `manifest htmlMigration.${key} should be ${value}`
-    );
-  }
-
-  addCheck("project-index frameworkProfile enabled", projectIndexTemplate.frameworkProfile && projectIndexTemplate.frameworkProfile.enabled === true);
-  addCheck("project-index htmlMigration enabled", projectIndexTemplate.htmlMigration && projectIndexTemplate.htmlMigration.enabled === true);
-  addCheck("framework profile language object exists", frameworkProfile.language && typeof frameworkProfile.language === "object");
-  addCheck("framework profile runtime object exists", frameworkProfile.runtime && typeof frameworkProfile.runtime === "object");
-  addCheck("framework profile platform object exists", frameworkProfile.platform && typeof frameworkProfile.platform === "object");
-  addCheck("framework profile frameworkStatus enum default", frameworkProfile.frameworkStatus === "unknown");
-  addCheck("framework profile moduleStatus default", frameworkProfile.moduleStatus === "not-loaded");
-  addCheck("framework profile activation default", frameworkProfile.activation === "not-loaded");
-  addCheck("framework profile deep budget depth=5", frameworkProfile.budgets && frameworkProfile.budgets.deep && frameworkProfile.budgets.deep.maxDepthPerWorkstream === 5);
-  addCheck("framework profile deep budget files=80", frameworkProfile.budgets && frameworkProfile.budgets.deep && frameworkProfile.budgets.deep.maxKeyFilesPerWorkstream === 80);
-  addCheck("framework profile deep budget evidence=100", frameworkProfile.budgets && frameworkProfile.budgets.deep && frameworkProfile.budgets.deep.maxEvidence === 100);
-  addCheck("html migration status default planned", htmlMigration.status === "planned");
-  addCheck("html migration coverage default unknown", htmlMigration.coverage === "unknown");
-  addCheck("html migration budget pages=20", htmlMigration.budgets && htmlMigration.budgets.maxPages === 20);
-  addCheck("html migration budget files=200", htmlMigration.budgets && htmlMigration.budgets.maxRelatedFiles === 200);
-  addCheck("html migration budget evidence=100", htmlMigration.budgets && htmlMigration.budgets.maxEvidence === 100);
-  addCheck("html migration pilot requires separate confirmation", htmlMigration.pilotPlan && htmlMigration.pilotPlan.requiresSeparateConfirmation === true);
-
-  requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.9.0`",
-    "v1.7 规则包一致性检查与 verify:rules",
-    "frameworkStatus=confirmed/inferred/not-found/unknown/detected-unsupported",
-    "v1.7 深化预算：5 层目录、80 个关键文件、100 条证据",
-    "HTML 迁移到微信小程序/uni-app落地准备",
-    "decision=direct-map/rewrite-required/backend-required/unsupported/pending/unknown",
-    "status=planned/assessing/partial/blocked/paused/completed",
-    "coverage=full/partial/unknown",
-    "pauseReason=out-of-scope",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", [
-    "v1.7 规则包一致性检查与 verify:rules",
-    "`language`、`runtime`、`platform`、`framework` 必须独立记录",
-    "v1.7 HTML 迁移落地准备",
-    "scope/unverifiedScope",
-  ]);
-
-  requireIncludes("test-scenarios/scenarios.md", [
-    "当前必测场景为 1-133",
-    "当前观察场景为 106 和 119",
-    "## 55. verify:rules 正常通过",
-    "## 69. verify:rules JSON schema 和重复执行",
-    "## 97. Skill 触发测试",
-  ]);
-
-  requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.10.1.tgz",
-    "当前 v1.8 既有必测场景为 `scenarios.md` 的 1-105；v1.9 新增 107-118",
-    "当前观察场景为 `scenarios.md` 的 106 和 119",
-    "npm run verify:rules",
-  ]);
-}
-
-function verifyV171Contracts() {
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
-  const archiveTransaction = JSON.parse(readText("init/xinyun-ai-init/templates/archive-transaction.template.json"));
-
-  const requiredTemplates = [
-    "init/xinyun-ai-init/templates/task-index.template.json",
-    "init/xinyun-ai-init/templates/task-main.template.md",
-    "init/xinyun-ai-init/templates/role-subtask.template.md",
-    "init/xinyun-ai-init/templates/archive-transaction.template.json",
-    "test-scenarios/v1.7.1-scenarios.md",
-  ];
-  for (const file of requiredTemplates) requireFile(file);
-
-  for (const flag of ["namedInitializationTaskTree", "taskArchiveTransactions", "codeGraphRequiredInitialization"]) {
-    addCheck(
-      `manifest capabilities 包含 ${flag}`,
-      manifestTemplate.capabilities && manifestTemplate.capabilities[flag] === true,
-      `manifest.template.json 未声明 ${flag}`
-    );
-  }
-
-  const taskingPaths = {
-    taskIndex: "xinyun-ai/tasks/task-index.json",
-    archiveDirectory: "xinyun-ai/tasks/archive/",
-    archiveTransactionsDirectory: "xinyun-ai/tasks/.archive-transactions/",
-    archiveTempDirectory: "xinyun-ai/tasks/.archive-tmp/",
-  };
-  for (const [key, value] of Object.entries(taskingPaths)) {
-    addCheck(`manifest v1.7.1 tasking 路径 ${key}`, manifestTemplate.tasking && manifestTemplate.tasking[key] === value, `manifest tasking.${key} 应为 ${value}`);
-    addCheck(`project-index v1.7.1 tasking 路径 ${key}`, projectIndexTemplate.tasking && projectIndexTemplate.tasking[key] === value, `project-index tasking.${key} 应为 ${value}`);
-  }
-
-  addCheck("manifest taskTree enabled", manifestTemplate.taskTree && manifestTemplate.taskTree.enabled === true, "manifest.taskTree.enabled 应为 true");
-  addCheck("project-index taskTree enabled", projectIndexTemplate.taskTree && projectIndexTemplate.taskTree.enabled === true, "project-index.taskTree.enabled 应为 true");
-  addCheck("taskTree 主任务标题模式", manifestTemplate.taskTree && manifestTemplate.taskTree.mainTaskTitlePattern === "项目初始化：<项目显示名>", "主任务标题模式不一致");
-  addCheck("taskTree 角色任务数为 5", manifestTemplate.taskTree && manifestTemplate.taskTree.roleTaskCount === 5, "roleTaskCount 应为 5");
-
-  addCheck("task-index activeTaskIds 数组", Array.isArray(taskIndex.activeTaskIds), "activeTaskIds 必须是数组");
-  addCheck("task-index executableTaskIds 数组", Array.isArray(taskIndex.executableTaskIds), "executableTaskIds 必须是数组");
-  addCheck("task-index archivedTaskIds 数组", Array.isArray(taskIndex.archivedTaskIds), "archivedTaskIds 必须是数组");
-  addCheck("task-index idle status", taskIndex.idleCurrentTask && taskIndex.idleCurrentTask.status === "idle", "idleCurrentTask.status 应为 idle");
-  addCheck("task-index idle taskId null", taskIndex.idleCurrentTask && taskIndex.idleCurrentTask.taskId === null, "idleCurrentTask.taskId 应为 null");
-  addCheck("task-index idle title", taskIndex.idleCurrentTask && taskIndex.idleCurrentTask.title === "暂无待执行任务", "idle 标题不一致");
-
-  const phases = ["prepared", "validated", "moved", "indexed", "committed", "recovery-required", "blocked"];
-  addCheck("archive transaction phase prepared", archiveTransaction.phase === "prepared", "归档事务默认 phase 应为 prepared");
-  addCheck("archive transaction phase enum 完整", phases.every((phase) => archiveTransaction.phaseEnum && archiveTransaction.phaseEnum.includes(phase)), "归档事务 phaseEnum 缺少必需状态");
-
-  const codeGraphStatuses = ["initialized", "healthy", "missing", "unavailable", "permission-denied", "failed", "unknown"];
-  addCheck("manifest CodeGraph required", manifestTemplate.codeGraphRequired && manifestTemplate.codeGraphRequired.required === true, "manifest CodeGraph required 应为 true");
-  addCheck("project-index CodeGraph required", projectIndexTemplate.codeGraphRequired && projectIndexTemplate.codeGraphRequired.required === true, "project-index CodeGraph required 应为 true");
-  addCheck("manifest CodeGraph status enum 完整", codeGraphStatuses.every((status) => manifestTemplate.codeGraphRequired && manifestTemplate.codeGraphRequired.statusEnum.includes(status)), "CodeGraph statusEnum 缺少状态");
-  addCheck("manifest CodeGraph command", manifestTemplate.codeGraphRequired && manifestTemplate.codeGraphRequired.command === "codegraph init -i", "CodeGraph command 应为 codegraph init -i");
-  addCheck("init-result CodeGraph required", initResult.codeGraph && initResult.codeGraph.required === true, "init-result CodeGraph required 应为 true");
-  addCheck("init-result CodeGraph command", initResult.codeGraph && initResult.codeGraph.command === "codegraph init -i", "init-result CodeGraph command 不一致");
-  addCheck("init-result taskTree role count", initResult.taskTree && initResult.taskTree.roleTaskCount === 5, "init-result taskTree.roleTaskCount 应为 5");
-
-  requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.9.0`",
-    "项目初始化：<项目显示名>",
-    "xinyun-ai/tasks/task-index.json",
-    "xinyun-ai/tasks/.archive-transactions/<archiveTransactionId>.json",
-    "taskKind=initialization-record",
-    "taskKind=role-execution",
-    "status=idle",
-    "taskId=null",
-    "title=暂无待执行任务",
-    "codeGraphRecordId",
-    "codegraph init -i",
-    "permission-denied",
-    "MCP 未连接或健康状态无法确认=`unknown`",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", [
-    "v1.7.1 初始化主任务、角色子任务与归档",
-    "v1.7.1 CodeGraph 必备初始化与状态闭环",
-    "项目初始化：<项目显示名>",
-    "xinyun-ai/tasks/<taskId>/subtasks/<roleTaskId>.md",
-    "executionEligible=true",
-    "xinyun-ai/tasks/archive/<taskId>/",
-    "prepared",
-    "recovery-required",
-    "codeGraphRecordId",
-    "degradationAuthorized=true",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/AGENTS.template.md", [
-    "v1.7.1 初始化任务树与 CodeGraph",
-    "项目初始化：<项目显示名>",
-    "xinyun-ai/tasks/task-index.json",
-    "xinyun-ai/tasks/.archive-transactions/<archiveTransactionId>.json",
-    "codeGraphRecordId",
-    "codegraph init -i",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/templates/current-task.template.md", [
-    "初始化任务树",
-    "任务归档",
-    "CodeGraph 必备初始化",
-    "currentTaskIdleStatus：status=idle, taskId=null, title=暂无待执行任务",
-    "codeGraphRecordId",
-  ]);
-
-  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", [
-    "v1.7.1 初始化任务树与 CodeGraph",
-    "xinyun-ai/tasks/task-index.json",
-    "codegraph init -i",
-  ]);
-  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.1 升级补齐", "CodeGraph 状态闭环"]);
-  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.1 任务树、归档与 CodeGraph 目录"]);
-  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.1 任务单补充字段"]);
-}
-
-function verifyJsonAndMarkdown() {
-  const jsonFiles = walkFiles(initRoot).filter((filePath) => filePath.endsWith(".json"));
-  const mdFiles = walkFiles(initRoot).filter((filePath) => filePath.endsWith(".md"));
-
-  for (const filePath of jsonFiles) {
-    requireJson(rel(filePath));
-  }
-
-  for (const filePath of mdFiles) {
-    requireMarkdownBalanced(rel(filePath));
-  }
-}
-
-function verifyV172Contracts() {
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
-  const roleExecution = readText("init/xinyun-ai-init/templates/role-execution.template.md");
-  const expectedPriority = {
-    "project-owner": 10,
-    "project-product": 20,
-    "chief-engineer": 30,
-    "programmer": 40,
-    "test-reviewer": 50,
-  };
-
-  requireFile("init/xinyun-ai-init/templates/role-execution.template.md");
-  requireFile("test-scenarios/v1.7.2-scenarios.md");
-  addCheck(
-    "manifest v1.7.2 roleExecutionVisibility",
-    manifestTemplate.capabilities && manifestTemplate.capabilities.roleExecutionVisibility === true,
-    "manifest 缺少 roleExecutionVisibility 能力"
-  );
-  addCheck(
-    "manifest roleExecutionDirectory",
-    manifestTemplate.tasking && manifestTemplate.tasking.roleExecutionDirectory === "xinyun-ai/tasks/role-execution/",
-    "manifest roleExecutionDirectory 不一致"
-  );
-  addCheck(
-    "project-index roleExecutionDirectory",
-    projectIndexTemplate.tasking && projectIndexTemplate.tasking.roleExecutionDirectory === "xinyun-ai/tasks/role-execution/",
-    "project-index roleExecutionDirectory 不一致"
-  );
-  addCheck(
-    "manifest roleExecution path pattern",
-    manifestTemplate.taskTree && manifestTemplate.taskTree.roleExecutionPathPattern === "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
-    "manifest roleExecution path pattern 不一致"
-  );
-  addCheck(
-    "task-index roleExecutionDirectory",
-    taskIndex.roleExecutionDirectory === "xinyun-ai/tasks/role-execution/",
-    "task-index roleExecutionDirectory 不一致"
-  );
-  addCheck("task-index roleExecutionTaskIds array", Array.isArray(taskIndex.roleExecutionTaskIds), "roleExecutionTaskIds 必须是数组");
-  addCheck(
-    "task-index roleExecution status enum",
-    JSON.stringify(taskIndex.roleExecutionStatusEnum) === JSON.stringify(["pending", "assigned", "accepted", "executing", "paused", "blocked", "completed", "cancelled"]),
-    "roleExecutionStatusEnum 不完整"
-  );
-  addCheck(
-    "task-index task sort order",
-    JSON.stringify(taskIndex.taskSortOrder) === JSON.stringify(["priority", "createdAt", "roleId", "taskId"]),
-    "任务稳定排序字段不一致"
-  );
-  addCheck(
-    "task-index current task idle policy",
-    taskIndex.currentTaskPolicy && taskIndex.currentTaskPolicy.idleWhenActiveTaskIdsEmpty === true && taskIndex.currentTaskPolicy.idleTaskId === null,
-    "current-task idle policy 不完整"
-  );
-  addCheck(
-    "task-index role idempotency fields",
-    taskIndex.idempotency && JSON.stringify(taskIndex.idempotency.keyFields) === JSON.stringify(["sourceTaskId", "roleId", "taskKind", "targetVersion"]) && taskIndex.idempotency.algorithm === "JCS-SHA-256" && taskIndex.idempotency.duplicatePolicy === "reuse",
-    "逐角色幂等契约不完整"
-  );
-  for (const [roleId, priority] of Object.entries(expectedPriority)) {
-    addCheck(
-      `task-index priority ${roleId}`,
-      taskIndex.roleExecutionPriority && taskIndex.roleExecutionPriority[roleId] === priority,
-      `${roleId} 默认优先级不一致`
-    );
-    addCheck(
-      `manifest priority ${roleId}`,
-      manifestTemplate.taskTree && manifestTemplate.taskTree.roleExecutionPriority && manifestTemplate.taskTree.roleExecutionPriority[roleId] === priority,
-      `${roleId} manifest 默认优先级不一致`
-    );
-  }
-
-  const requiredRoleFields = [
-    "taskId", "roleTaskId", "parentTaskId", "roleId", "taskKind", "title", "priority", "status",
-    "assignmentStatus", "understandingStatus", "confirmationStatus", "memberId", "sessionId",
-    "executionEligible", "blockedReason", "nextAction", "sourceTaskId", "idempotencyKey", "createdAt", "updatedAt",
-  ];
-  for (const field of requiredRoleFields) {
-    addCheck(`role-execution template field ${field}`, roleExecution.includes(`- ${field}：`), `role-execution 模板缺少 ${field}`);
-  }
-  requireIncludes("init/xinyun-ai-init/README.md", [
-    "当前规则版本：`1.9.0`",
-    "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
-    "activeTaskIds",
-    "executableTaskIds",
-    "priority ASC",
-    "JCS-SHA-256",
-    "blockedReason=write-failed",
-  ]);
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", [
-    "v1.7.2 初始化后角色任务可见性与执行任务分离",
-    "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
-    "activeTaskIds",
-    "executableTaskIds",
-    "JCS-SHA-256",
-  ]);
-  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", ["v1.7.2 角色后续任务可见性", "role-execution"]);
-  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.2 升级补建角色后续任务", "write-failed"]);
-  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.2 任务可见性目录", "role-execution"]);
-  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.2 角色执行任务补充字段", "roleExecutionResult"]);
-}
-
-function verifyV173Contracts() {
-  const manifestTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndexTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const assignments = JSON.parse(readText("init/xinyun-ai-init/templates/team/assignments.json"));
-  const bindingTemplate = JSON.parse(readText("init/xinyun-ai-init/templates/role-session-binding.template.json"));
-  const roleExecution = readText("init/xinyun-ai-init/templates/role-execution.template.md");
-  const statusEnum = ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"];
-
-  requireFile("init/xinyun-ai-init/templates/role-session-binding.template.json");
-  requireFile("test-scenarios/v1.7.3-scenarios.md");
-
-  addCheck(
-    "manifest v1.7.3 codexRoleSessionOrchestration",
-    manifestTemplate.capabilities && manifestTemplate.capabilities.codexRoleSessionOrchestration === true,
-    "manifest 缺少 codexRoleSessionOrchestration 能力"
-  );
-  addCheck(
-    "manifest roleSessions provider codex",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.provider === "codex",
-    "manifest roleSessions.provider 必须为 codex"
-  );
-  addCheck(
-    "manifest roleSessions targetVersion=current",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.targetVersion === CURRENT_VERSION,
-    "manifest roleSessions.targetVersion 必须为当前版本"
-  );
-  addCheck(
-    "manifest roleSessions bindings path",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json",
-    "manifest roleSessions.bindings 不一致"
-  );
-  addCheck(
-    "manifest roleSessions directory",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.directory === "xinyun-ai/sessions/roles/",
-    "manifest roleSessions.directory 不一致"
-  );
-  addCheck(
-    "manifest roleSessions bindingTemplate",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.bindingTemplate === "xinyun-ai-init/templates/role-session-binding.template.json",
-    "manifest roleSessions.bindingTemplate 不一致"
-  );
-  addCheck(
-    "manifest roleSessions requiredRoleCount=5",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.requiredRoleCount === 5,
-    "manifest roleSessions.requiredRoleCount 必须为 5"
-  );
-  addCheck(
-    "manifest roleSessions status enum",
-    manifestTemplate.roleSessions && JSON.stringify(manifestTemplate.roleSessions.statusEnum) === JSON.stringify(statusEnum),
-    "manifest roleSessions.statusEnum 不完整"
-  );
-  addCheck(
-    "manifest roleSessions idempotency fields",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.idempotency && JSON.stringify(manifestTemplate.roleSessions.idempotency.keyFields) === JSON.stringify(["projectRootHash", "workspaceScope", "repositoryScopeHash", "workstream", "taskId", "roleId", "provider", "targetVersion"]) && manifestTemplate.roleSessions.idempotency.algorithm === "RFC8785-JCS-SHA-256",
-    "manifest roleSessions.idempotency.keyFields 不一致"
-  );
-  addCheck(
-    "manifest roleSessions legacy creation index",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.idempotency && JSON.stringify(manifestTemplate.roleSessions.idempotency.legacyCreationIndexFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]) && manifestTemplate.roleSessions.idempotency.legacyCreationIndexPolicy.includes("never used for candidate selection"),
-    "manifest roleSessions 旧兼容索引策略不完整"
-  );
-  addCheck(
-    "manifest roleSessions host unsupported policy",
-    manifestTemplate.roleSessions && manifestTemplate.roleSessions.hostUnsupportedPolicy === "local-degraded-no-fake-session-id",
-    "manifest roleSessions.hostUnsupportedPolicy 不一致"
-  );
-
-  addCheck(
-    "project-index roleSessions path",
-    projectIndexTemplate.roleSessions && projectIndexTemplate.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json",
-    "project-index roleSessions.bindings 不一致"
-  );
-  addCheck(
-    "project-index roleSessions status enum",
-    projectIndexTemplate.roleSessions && JSON.stringify(projectIndexTemplate.roleSessions.statusEnum) === JSON.stringify(statusEnum),
-    "project-index roleSessions.statusEnum 不完整"
-  );
-  addCheck("project-index roleSessions records array", projectIndexTemplate.roleSessions && Array.isArray(projectIndexTemplate.roleSessions.records), "project-index roleSessions.records 必须是数组");
-  addCheck(
-    "project-index roleSessions idempotency fields",
-    projectIndexTemplate.roleSessions && projectIndexTemplate.roleSessions.idempotency && JSON.stringify(projectIndexTemplate.roleSessions.idempotency.keyFields) === JSON.stringify(["projectRootHash", "workspaceScope", "repositoryScopeHash", "workstream", "taskId", "roleId", "provider", "targetVersion"]) && projectIndexTemplate.roleSessions.idempotency.algorithm === "RFC8785-JCS-SHA-256",
-    "project-index roleSessions.idempotency 不一致"
-  );
-
-  addCheck("task-index roleSessionBindingIds array", Array.isArray(taskIndex.roleSessionBindingIds), "task-index roleSessionBindingIds 必须是数组");
-  addCheck("task-index roleSessionBindings array", Array.isArray(taskIndex.roleSessionBindings), "task-index roleSessionBindings 必须是数组");
-  addCheck(
-    "task-index roleSession status enum",
-    JSON.stringify(taskIndex.roleSessionStatusEnum) === JSON.stringify(statusEnum),
-    "task-index roleSessionStatusEnum 不完整"
-  );
-  addCheck(
-    "task-index roleSession idempotency fields",
-    taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.keyFields) === JSON.stringify(["projectRootHash", "workspaceScope", "repositoryScopeHash", "workstream", "taskId", "roleId", "provider", "targetVersion"]) && taskIndex.roleSessionIdempotency.algorithm === "RFC8785-JCS-SHA-256",
-    "task-index roleSessionIdempotency.keyFields 不一致"
-  );
-  addCheck(
-    "task-index legacy creation index",
-    taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.legacyCreationIndexFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]) && taskIndex.roleSessionIdempotency.legacyCreationIndexPolicy.includes("never used for candidate selection"),
-    "task-index 旧兼容索引策略不完整"
-  );
-
-  addCheck("init-result roleSessions provider codex", initResult.roleSessions && initResult.roleSessions.provider === "codex", "init-result roleSessions.provider 必须为 codex");
-  addCheck("init-result roleSessions requiredRoleCount=5", initResult.roleSessions && initResult.roleSessions.requiredRoleCount === 5, "init-result roleSessions.requiredRoleCount 必须为 5");
-  for (const field of ["createdCount", "reusedCount", "failedCount", "blockedCount", "localDegradedCount"]) {
-    addCheck(`init-result roleSessions ${field}`, initResult.roleSessions && typeof initResult.roleSessions[field] === "number", `init-result roleSessions.${field} 必须是数字`);
-  }
-
-  for (const field of ["sessionId", "parentSessionId", "provider", "sessionStatus"]) {
-    addCheck(`assignments required field ${field}`, assignments.recordContract && assignments.recordContract.requiredFields.includes(field), `assignments recordContract 缺少 ${field}`);
-  }
-  addCheck("assignments session binding rule mentions real host value", assignments.recordContract && assignments.recordContract.sessionBindingRule.includes("real host-returned value"), "assignments sessionBindingRule 必须说明真实宿主返回值");
-
-  addCheck("binding template provider codex", bindingTemplate.provider === "codex", "binding template provider 必须为 codex");
-  addCheck("binding template targetVersion=current", bindingTemplate.targetVersion === CURRENT_VERSION, "binding template targetVersion 必须为当前版本");
-  addCheck("binding template fakeSessionId prohibited", bindingTemplate.degradation && bindingTemplate.degradation.fakeSessionIdProhibited === true, "binding template 必须禁止伪造 sessionId");
-  addCheck("binding template onboarding readOnly", bindingTemplate.onboarding && bindingTemplate.onboarding.readOnly === true, "binding template onboarding.readOnly 必须为 true");
-
-  for (const field of ["parentSessionId", "provider", "sessionStatus", "sessionBindingId", "sessionBindingPath", "sessionIdempotencyKey"]) {
-    addCheck(`role-execution v1.7.3 field ${field}`, roleExecution.includes(`- ${field}：`), `role-execution 模板缺少 ${field}`);
-  }
-
-  const snippets = [
-    "v1.7.3 Codex 角色会话自动创建与绑定",
-    "provider=codex",
-    "sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed",
-    "projectRootHash, workspaceScope, repositoryScopeHash, workstream, taskId, roleId, provider, targetVersion",
-    "RFC8785-JCS-SHA-256",
-    "真实 `sessionId`",
-    "不得伪造 sessionId",
-    "local-degraded-no-fake-session-id",
-    "onboarding",
-    "created-but-writeback-failed",
-    "创建成功不等于业务代码修改授权",
-  ];
-  requireIncludes("init/xinyun-ai-init/README.md", snippets);
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", snippets);
-  requireIncludes("init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7.3 Codex 角色会话自动创建与绑定", "provider=codex", "local-degraded-no-fake-session-id"]);
-  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", ["v1.7.3 Codex 角色会话初始化", "provider=codex", "local-degraded-no-fake-session-id"]);
-  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.3 升级创建和绑定真实角色会话", "created-but-writeback-failed", "不得伪造 sessionId"]);
-  requireIncludes("init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.3 角色会话绑定目录", "xinyun-ai/sessions/role-session-bindings.json", "local-degraded-no-fake-session-id"]);
-  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.3 角色会话交接字段", "roleSessionIdempotency", "不得伪造 sessionId"]);
-  requireIncludes("init/xinyun-ai-init/templates/project-guide.template.md", ["v1.7.3 Codex role session anchors", "roleSessionIdempotency", "local-degraded-no-fake-session-id"]);
-  requireIncludes("init/xinyun-ai-init/templates/project-check.template.md", ["v1.7.3 checks", "provider=codex", "不存在伪造 sessionId"]);
-  requireIncludes("test-scenarios/scenarios.md", ["当前必测场景为 1-133", "当前观察场景为 106 和 119", "## 89. v1.7.3 Codex 真实角色会话创建", "## 96. v1.7.3 普通咨询边界", "## 97. Skill"]);
-  requireIncludes("test-scenarios/review-template.md", ["1-133 必测", "89. v1.7.3 Codex 真实角色会话创建", "96. v1.7.3 普通咨询边界", "97. Skill"]);
-}
-
-function verifyV18Contracts() {
-  const manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const skillAssignments = JSON.parse(readText("init/xinyun-ai-init/templates/skills-assignments.template.json"));
-  const skillRegistry = JSON.parse(readText("init/xinyun-ai-init/templates/skills-registry.template.json"));
-  const frontendAudit = JSON.parse(readText("init/xinyun-ai-init/templates/frontend-audit.template.json"));
-  const temporarySession = JSON.parse(readText("init/xinyun-ai-init/templates/temporary-session.template.json"));
-  const transaction = JSON.parse(readText("init/xinyun-ai-init/templates/coordination-transaction.template.json"));
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/coordination.md",
-    "init/xinyun-ai-init/rules/skills.md",
-    "init/xinyun-ai-init/rules/frontend-audit.md",
-    "init/xinyun-ai-init/rules/temporary-sessions.md",
-    "init/xinyun-ai-init/templates/coordination-project-facts.template.json",
-    "init/xinyun-ai-init/templates/coordination-change-ledger.template.json",
-    "init/xinyun-ai-init/templates/coordination-contract-snapshot.template.json",
-    "init/xinyun-ai-init/templates/coordination-conflict-record.template.json",
-    "init/xinyun-ai-init/templates/coordination-transaction.template.json",
-    "init/xinyun-ai-init/templates/skills-registry.template.json",
-    "init/xinyun-ai-init/templates/skills-assignments.template.json",
-    "init/xinyun-ai-init/templates/frontend-audit.template.json",
-    "init/xinyun-ai-init/templates/temporary-session.template.json",
-    "test-scenarios/v1.8.0-scenarios.md",
-  ];
-  for (const file of requiredFiles) requireFile(file);
-
-  for (const capability of ["sharedProjectFactsCoordination", "skillRouting", "frontendCouplingAudit", "temporaryProgrammerSessions"]) {
-    addCheck(`manifest capability ${capability}`, manifest.capabilities && manifest.capabilities[capability] === true, `manifest.capabilities.${capability} 必须为 true`);
-  }
-  const pathChecks = [
-    [manifest.coordination, "directory", "xinyun-ai/coordination/"],
-    [manifest.skills, "directory", "xinyun-ai/skills/"],
-    [manifest.frontendAudit, "directory", "xinyun-ai/frontend-audits/"],
-    [manifest.temporarySessions, "directory", "xinyun-ai/sessions/temporary/"],
-    [projectIndex.coordination, "directory", "xinyun-ai/coordination/"],
-    [projectIndex.skills, "directory", "xinyun-ai/skills/"],
-    [projectIndex.frontendAudit, "directory", "xinyun-ai/frontend-audits/"],
-    [projectIndex.temporarySessions, "directory", "xinyun-ai/sessions/temporary/"],
-  ];
-  for (const [object, field, expected] of pathChecks) addCheck(`v1.8 path ${expected}`, object && object[field] === expected, `路径必须为 ${expected}`);
-
-  addCheck("coordination transaction phase enum", JSON.stringify(transaction.phaseEnum) === JSON.stringify(["prepared", "validated", "renamed", "revision-updated", "committed", "recovery-required", "blocked"]), "事务阶段不完整");
-  addCheck("Skill uses assignmentStatus", skillAssignments.recordContract && skillAssignments.recordContract.requiredFields.includes("assignmentStatus"), "Skill 分配必须使用 assignmentStatus");
-  addCheck("Skill does not use status alias", !JSON.stringify(skillAssignments).includes("assignments.json.status"), "不得使用 assignments.json.status");
-  addCheck("Skill usageStatus mapping exists", skillAssignments.recordContract && skillAssignments.recordContract.statusMapping && skillAssignments.recordContract.statusMapping.blocked.includes("failed"), "缺少失败到 blocked 的映射");
-  addCheck("Skill failed requires reason/action", skillAssignments.recordContract && skillAssignments.recordContract.failedRule.includes("failureReason") && skillAssignments.recordContract.failedRule.includes("nextAction"), "缺少失败证据契约");
-  addCheck("Skill registry separates availability/trust", skillRegistry.recordContract && skillRegistry.recordContract.requiredFields.includes("availabilityStatus") && skillRegistry.recordContract.requiredFields.includes("trustStatus"), "Skill 可用性和可信度必须独立");
-  addCheck("frontend audit-only decision", frontendAudit.decision === "audit-only", "默认必须为 audit-only");
-  addCheck("frontend audit status enum", frontendAudit.statusEnum && frontendAudit.statusEnum.includes("unknown"), "审计状态枚举不完整");
-  addCheck("frontend refactor evidence contract", frontendAudit.refactorNowRequired && frontendAudit.refactorNowRequired.includes("userConfirmationId") && frontendAudit.refactorNowRequired.includes("diffEvidence"), "refactor-now 证据契约不完整");
-  addCheck("temporary session maxConcurrent=3", temporarySession.maxConcurrent === 3, "临时会话并发上限必须为 3");
-  addCheck("temporary session has occupancyStatus", temporarySession.occupancyStatusEnum && temporarySession.occupancyStatusEnum.includes("unknown"), "缺少 occupancyStatus=unknown");
-
-  const v18Snippets = ["v1.8", "factStatus", "changeStatus", "conflictStatus", "assignmentStatus", "usageStatus", "audit-only", "refactor-now", "occupancyStatus=unknown", "coordinationTransactionId"];
-  requireIncludes("init/xinyun-ai-init/README.md", v18Snippets);
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", v18Snippets);
-  requireIncludes("init/xinyun-ai-init/rules/coordination.md", ["三道门禁", "coordinationTransactionId", "status-inconsistent"]);
-  requireIncludes("init/xinyun-ai-init/rules/skills.md", ["assignmentStatus", "usageStatus", "failureReason", "nextAction"]);
-  requireIncludes("init/xinyun-ai-init/rules/frontend-audit.md", ["audit-only", "refactor-now", "unverifiedScope"]);
-  requireIncludes("init/xinyun-ai-init/rules/temporary-sessions.md", ["最多同时占用 3 个运行额度", "occupancyStatus=unknown", "releaseAudit"]);
-  requireIncludes("test-scenarios/scenarios.md", ["当前必测场景为 1-133", "当前观察场景为 106 和 119", "## 98. v1.8-A", "## 105. v1.8 敏感信息边界"]);
-  requireIncludes("test-scenarios/review-template.md", ["1-133 必测", "98. v1.8-A 状态域和来源一致性", "105. v1.8 敏感信息边界"]);
-}
-
-function verifyV19Contracts() {
-  const manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const identity = JSON.parse(readText("init/xinyun-ai-init/templates/project-identity.template.json"));
-  const candidates = JSON.parse(readText("init/xinyun-ai-init/templates/session-candidates.template.json"));
-  const landscape = JSON.parse(readText("init/xinyun-ai-init/templates/technical-landscape.template.json"));
-  const requirementPacket = JSON.parse(readText("init/xinyun-ai-init/templates/requirement-packet.template.json"));
-  const impactPacket = JSON.parse(readText("init/xinyun-ai-init/templates/technical-impact-packet.template.json"));
-  const database = JSON.parse(readText("init/xinyun-ai-init/templates/database-authorization.template.json"));
-  const requiredFiles = [
-    "init/xinyun-ai-init/templates/project-identity.template.json",
-    "init/xinyun-ai-init/templates/session-candidates.template.json",
-    "init/xinyun-ai-init/templates/technical-landscape.template.json",
-    "init/xinyun-ai-init/templates/requirement-packet.template.json",
-    "init/xinyun-ai-init/templates/technical-impact-packet.template.json",
-    "init/xinyun-ai-init/templates/database-authorization.template.json",
-    "test-scenarios/v1.9.0-scenarios.md",
-  ];
-
-  for (const file of requiredFiles) requireFile(file);
-
-  for (const capability of ["projectSessionIsolation", "roleDisplayNaming", "technicalLandscapeCoordination", "databaseSqlOnlyAuthorization"]) {
-    addCheck(`manifest v1.9 capability ${capability}`, manifest.capabilities && manifest.capabilities[capability] === true, `缺少 ${capability}`);
-  }
-
-  const expectedPaths = {
-    projectIdentity: "xinyun-ai/project-identity.json",
-    sessionCandidates: "xinyun-ai/sessions/session-candidates.json",
-    technicalLandscape: "xinyun-ai/technical-landscape.json",
-    requirementPacket: "xinyun-ai/packets/requirement-packet.json",
-    technicalImpactPacket: "xinyun-ai/packets/technical-impact-packet.json",
-    databaseAuthorization: "xinyun-ai/database/authorization.json",
-  };
-  for (const [key, value] of Object.entries(expectedPaths)) {
-    addCheck(`manifest v1.9 path ${key}`, manifest.v19 && manifest.v19[key] === value, `manifest.v19.${key} 应为 ${value}`);
-    addCheck(`project-index v1.9 path ${key}`, projectIndex.v19 && projectIndex.v19[key] === value, `project-index.v19.${key} 应为 ${value}`);
-  }
-
-  addCheck("project identity normalization", identity.normalization && identity.normalization.resolutionMode === "unknown" && identity.normalization.unicodeNormalization === "NFC", "项目身份规范化契约不完整");
-  addCheck("project identity hash fields", Object.prototype.hasOwnProperty.call(identity, "projectRootHash") && Object.prototype.hasOwnProperty.call(identity, "repositoryScopeHash"), "项目身份缺少 hash 字段");
-  addCheck("session match enum excludes current-match", !candidates.sessionMatchStatusEnum.includes("current-match") && candidates.sessionMatchStatusEnum.includes("reusable") && candidates.sessionMatchStatusEnum.includes("renamed"), "sessionMatchStatus 枚举不符合 v1.9");
-  addCheck("session candidate required fields", ["hostRecoveryAvailable", "hostRecoveryEvidence", "selectionEvidence"].every((field) => candidates.candidateRequiredFields.includes(field) || Object.prototype.hasOwnProperty.call(candidates, field)), "会话候选恢复/选择证据字段不完整");
-  addCheck("session reuse algorithm", candidates.reuseIdempotency && candidates.reuseIdempotency.algorithm === "RFC8785-JCS-SHA-256", "会话复用算法不完整");
-  addCheck("technical landscape ready gate", landscape.coverage.coverageStatus === "unknown" && landscape.status === "not-started", "技术全景初始状态不安全");
-  addCheck("technical landscape status contract", landscape.status === "not-started" && landscape.coverage.coverageStatus === "unknown" && Array.isArray(landscape.unverifiedScope), "技术全景状态契约不完整");
-  addCheck("packet minimum fields", [requirementPacket, impactPacket].every((packet) => ["schemaVersion", "packetId", "requirementId", "taskId", "projectRootHash", "version", "status", "content", "evidence", "sourceRevision", "contentHash", "createdAt", "updatedAt"].every((field) => Object.prototype.hasOwnProperty.call(packet, field))), "packet 最小字段不完整");
-  addCheck("packet hash algorithm", manifest.v19 && manifest.v19.packetHashAlgorithm === "RFC8785-JCS-SHA-256", "packet hash 算法不完整");
-  addCheck("database legacy sql-only compatibility", database.legacyDatabaseAccessMode === "sql-only" && database.databaseAccessMode === "local-files-read-only" && database.sqlExecutionMode === "generate-only", "database legacy compatibility marker is incomplete");
-  addCheck("database authorization separation", ["connectionStatus", "queryAuthorization", "schemaChangeAuthorization", "dataMutationAuthorization"].every((field) => Object.prototype.hasOwnProperty.call(database, field)), "数据库权限未分离");
-  addCheck("database local-files-read-only default", database.databaseAccessMode === "local-files-read-only" && database.legacyDatabaseAccessMode === "sql-only" && database.sqlExecutionMode === "generate-only" && database.executionStatus === "needs-confirmation" && database.connectionStatus === "not-requested" && database.connected === false && database.sqlExecuted === false, "database local-file read-only default is incomplete");
-  const localDatabaseScope = ["*.sql", "*.ddl", "*.schema", "*.migration", "database/", "migrations/", "schema/", "models/"];
-  addCheck("database local file policy", JSON.stringify(database.localDatabaseFileScope) === JSON.stringify(localDatabaseScope) && database.localFileReadPolicy === "database-related-task-only" && database.forbiddenOperations.includes("database-connection") && database.forbiddenOperations.includes("sql-execution"), "database local file scope or forbidden operations are incomplete");
-  addCheck("database defaults across v19 templates", manifest.v19 && projectIndex.v19 && manifest.v19.databaseAccessModeDefault === "local-files-read-only" && projectIndex.v19.databaseAccessModeDefault === manifest.v19.databaseAccessModeDefault && manifest.v19.legacyDatabaseAccessMode === "sql-only" && projectIndex.v19.legacyDatabaseAccessMode === "sql-only" && manifest.v19.sqlExecutionMode === "generate-only" && projectIndex.v19.sqlExecutionMode === "generate-only", "manifest and project-index database policy is inconsistent");
-  const authorizationStates = ["not-requested", "requested", "authorized", "denied", "expired", "failed", "unknown"];
-  addCheck("database authorization state enum", database.authorizationStatusEnum && JSON.stringify(database.authorizationStatusEnum) === JSON.stringify(authorizationStates) && ["connectionStatusEnum", "queryAuthorizationEnum", "schemaChangeAuthorizationEnum", "dataMutationAuthorizationEnum"].every((field) => JSON.stringify(database[field]) === JSON.stringify(authorizationStates)), "数据库四类授权状态枚举不完整");
-  addCheck("database authorization transitions", database.authorizationTransitionRules && database.authorizationTransitionRules.authorized.includes("expired") && database.invalidatingChanges.includes("statement-hash-changed") && database.invalidatingAction.includes("needs-confirmation"), "数据库授权失效转移不完整");
-  addCheck("database redaction status enum", JSON.stringify(database.redactionStatusEnum) === JSON.stringify(["verified", "unverified", "failed"]) && database.redactionStatus === "verified", "数据库脱敏状态枚举不完整");
-  addCheck("database execution status enum", JSON.stringify(database.executionStatusEnum) === JSON.stringify(["not-run", "needs-confirmation", "authorized", "executed", "failed", "unknown"]), "数据库执行状态枚举不完整");
-  addCheck("database statement hash contract", database.statementHashAlgorithm === "RFC8785-JCS-SHA-256" && database.statementHashCanonicalInput.includes("parameters") && database.statementHashCanonicalInput.includes("targetEnvironment"), "statementHash 契约不完整");
-  addCheck("database audit contract", database.auditRequiredFields.includes("auditId") && database.auditRequiredFields.includes("statementHash") && database.auditRequiredFields.includes("redactionStatus"), "数据库 audit 契约不完整");
-
-  const snippets = [
-    "v1.9",
-    "lexical-fallback",
-    "sessionMatchStatus",
-    "duplicate-not-primary",
-    "selectionEvidence",
-    "项目简称｜角色中文名｜职责名称",
-    "technical-landscape",
-    "coverageStatus=full",
-    "packet-stale",
-    "RFC 8785 JCS-SHA-256",
-    "databaseAccessMode=local-files-read-only",
-    "legacyDatabaseAccessMode=sql-only",
-    "statementHash",
-    "targetEnvironment",
-  ];
-  for (const file of [
-    "init/xinyun-ai-init/README.md",
-    "init/xinyun-ai-init/templates/AGENTS.template.md",
-    "init/xinyun-ai-init/templates/core-rules.template.md",
-    "init/xinyun-ai-init/rules/init-rules.md",
-    "init/xinyun-ai-init/rules/upgrade-rules.md",
-    "init/xinyun-ai-init/rules/session-workbench.md",
-  ]) requireIncludes(file, snippets);
-
-  requireIncludes("test-scenarios/v1.9.0-scenarios.md", ["## 107.", "## 109.", "## 113.", "## 115.", "## 118.", "packet-stale", "sql-only", "行为证据"]);
-  verifyV19BehaviorEvidence();
-}
-
-function sha256Text(value) {
-  return crypto.createHash("sha256").update(value, "utf8").digest("hex");
-}
-
-function verifyV19BehaviorEvidence() {
-  const relativePath = "test-scenarios/v1.9.0-behavior-evidence.json";
-  requireFile(relativePath);
-  if (!fs.existsSync(path.join(root, relativePath))) return;
-  let report;
-  try {
-    report = JSON.parse(readText(relativePath));
-    addCheck("v1.9 behavior evidence JSON parse", true, "行为证据 JSON 可解析");
-  } catch (error) {
-    addCheck("v1.9 behavior evidence JSON parse", false, error.message);
-    return;
-  }
-  const expectedIds = Array.from({ length: 12 }, (_, index) => 107 + index);
-  const scenarios = Array.isArray(report.scenarios) ? report.scenarios : [];
-  addCheck("v1.9 behavior evidence source classification", report.evidenceType === "behavioral-replay" && report.executionMode === "controlled-isolated-fixture-replay" && report.realAiSessionVerified === false && typeof report.testMethod === "string" && typeof report.temporaryProjectBoundary === "string", "受控回放证据来源和边界未明确");
-  addCheck("v1.9 behavior evidence scenario count", scenarios.length === expectedIds.length, "必须覆盖 107-118");
-  addCheck("v1.9 behavior evidence scenario IDs", JSON.stringify(scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds), "场景 ID 必须完整且有序");
-  const crossProjectScenario = scenarios.find((scenario) => scenario.scenarioId === 109);
-  addCheck(
-    "v1.9 cross-project reuse negative",
-    Boolean(crossProjectScenario && crossProjectScenario.input.includes("projectRootHash") && crossProjectScenario.actualOutput.includes("other-project") && crossProjectScenario.afterSnapshot.includes("createdCount=0")),
-    "场景 109 必须证明旧四字段相同但项目身份不同的候选被拒绝且不创建重复绑定"
-  );
-  const requiredFields = ["scenarioId", "input", "expectedOutput", "actualOutput", "beforeSnapshot", "afterSnapshot", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "controlFilesChanged", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordHash", "recordedAt"];
-  for (const scenario of scenarios) {
-    const prefix = `v1.9 behavior evidence ${scenario.scenarioId}`;
-    addCheck(`${prefix} required fields`, requiredFields.every((field) => Object.prototype.hasOwnProperty.call(scenario, field)), "场景证据字段不完整");
-    addCheck(`${prefix} result`, scenario.result === "replay-passed", "受控回放场景必须使用 replay-passed，不得冒充真实行为 passed");
-    addCheck(`${prefix} snapshot hashes`, scenario.beforeSnapshotHash === sha256Text(scenario.beforeSnapshot) && scenario.afterSnapshotHash === sha256Text(scenario.afterSnapshot), "before/after 快照 hash 不匹配");
-    const recordPayload = { ...scenario };
-    delete recordPayload.recordHash;
-    addCheck(`${prefix} record hash`, scenario.recordHash === sha256Text(JSON.stringify(recordPayload)), "场景 recordHash 不匹配");
-    addCheck(`${prefix} changed files separated`, Array.isArray(scenario.changedFiles) && Array.isArray(scenario.controlFilesChanged), "changedFiles 与 controlFilesChanged 必须分离");
-    addCheck(`${prefix} forbidden operations`, scenario.forbiddenOperations && scenario.forbiddenOperations.gitWrite === false && scenario.forbiddenOperations.databaseConnection === false && scenario.forbiddenOperations.sqlExecution === false && scenario.forbiddenOperations.businessCodeWrite === false, "禁止操作证明不完整");
-    addCheck(`${prefix} sensitive scan`, scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && Array.isArray(scenario.sensitiveScan.matches) && scenario.sensitiveScan.matches.length === 0, "敏感信息扫描必须无命中");
-  }
-}
-
-function verifyV110Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/templates/host-capabilities.template.json",
-    "init/xinyun-ai-init/templates/project-status.template.json",
-    "init/xinyun-ai-init/templates/preflight-report.template.json",
-    "init/xinyun-ai-init/templates/onboarding-report.template.json",
-    "init/xinyun-ai-init/templates/takeover-baseline.template.json",
-    "init/xinyun-ai-init/templates/control-plane-index.template.json",
-    "init/xinyun-ai-init/templates/init-result.template.json",
-    "init/xinyun-ai-init/templates/current-task.template.md",
-    "test-scenarios/v1.10.0-scenarios.md",
-    "test-scenarios/v1.10.0-behavior-evidence.json",
-    "scripts/collect-v1.10-evidence.js",
-    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/README.md",
-    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json",
-    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json",
-    "init/xinyun-ai-init/rules/v1.10.2-contract.md",
-    "init/xinyun-ai-init/rules/v1.11.0-acceleration.md",
-    "init/xinyun-ai-init/templates/fixed-materialization.template.json",
-    "init/xinyun-ai-init/templates/bootstrap-snapshot.template.json",
-    "init/xinyun-ai-init/templates/initialization-stages.template.json",
-    "init/xinyun-ai-init/templates/initialization-cache.template.json",
-    "init/xinyun-ai-init/templates/parallelism.template.json",
-  ];
-  for (const file of requiredFiles) requireFile(file);
-
-  const manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const host = JSON.parse(readText("init/xinyun-ai-init/templates/host-capabilities.template.json"));
-  const projectStatus = JSON.parse(readText("init/xinyun-ai-init/templates/project-status.template.json"));
-  const preflight = JSON.parse(readText("init/xinyun-ai-init/templates/preflight-report.template.json"));
-  const onboarding = JSON.parse(readText("init/xinyun-ai-init/templates/onboarding-report.template.json"));
-  const baseline = JSON.parse(readText("init/xinyun-ai-init/templates/takeover-baseline.template.json"));
-  const controlPlane = JSON.parse(readText("init/xinyun-ai-init/templates/control-plane-index.template.json"));
-  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const fixedMaterialization = JSON.parse(readText("init/xinyun-ai-init/templates/fixed-materialization.template.json"));
-  const bootstrapSnapshot = JSON.parse(readText("init/xinyun-ai-init/templates/bootstrap-snapshot.template.json"));
-  const initializationStages = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-stages.template.json"));
-  const initializationCache = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-cache.template.json"));
-  const parallelism = JSON.parse(readText("init/xinyun-ai-init/templates/parallelism.template.json"));
-  const currentTask = readText("init/xinyun-ai-init/templates/current-task.template.md");
-
-  const paths = {
-    projectStatus: "xinyun-ai/project-status.json",
-    preflightReport: "xinyun-ai/preflight-report.json",
-    onboardingReport: "xinyun-ai/onboarding-report.json",
-    hostCapabilities: "xinyun-ai/host-capabilities.json",
-    takeoverBaseline: "xinyun-ai/index/takeover-baseline.json",
-    controlPlaneIndex: "xinyun-ai/index/control-plane-index.json",
-  };
-  for (const [key, expected] of Object.entries(paths)) {
-    addCheck(`v1.10 manifest path ${key}`, manifest.v110 && manifest.v110[key] === expected, expected);
-    addCheck(`v1.10 project-index path ${key}`, projectIndex.v110 && projectIndex.v110[key] === expected, expected);
-  }
-
-  const projectStatuses = ["not-started", "initializing", "partial", "blocked", "ready"];
-  addCheck("v1.10 version metadata", manifest.xinyunAiVersion === CURRENT_VERSION && projectIndex.v110 && projectIndex.v110.projectStatusEnum.join(",") === projectStatuses.join(","), CURRENT_VERSION);
-  addCheck("v1.10 ready gate", manifest.v110 && manifest.v110.readyRequires && manifest.v110.readyRequires.includes("roleSessions") && manifest.v110.readyRequires.includes("sensitiveScan") && manifest.v110.requiredRoleSessionBlockedReason === "required-role-session-not-created", "required gates and blocked reason");
-  addCheck("v1.10 host capability schema", host.status === "unknown" && host.readyPolicy && host.readyPolicy.fakeSessionIdProhibited === true && host.readyPolicy.requiredCapabilities.length === 6, "conservative host defaults");
-  addCheck("v1.10 project status schema", projectStatus.projectStatus === "not-started" && projectStatus.executionEligible === false && JSON.stringify(projectStatus.projectStatusEnum) === JSON.stringify(projectStatuses), "not-started and executionEligible=false");
-  addCheck("v1.10 preflight schema", preflight.result === "not-run" && preflight.projectStatus === "not-started" && preflight.codeGraph.command === "codegraph init -i" && Array.isArray(preflight.unverifiedScope), "preflight defaults");
-  addCheck("v1.10 onboarding schema", onboarding.executionEligible === false && onboarding.roleSessionContract.realSessionIdRequired === true && onboarding.roleSessionContract.missingSessionReason === "required-role-session-not-created" && onboarding.requiredRoleIds.length === 5, "role session gate");
-  addCheck("v1.10 baseline schema", baseline.hashAlgorithm === "SHA-256" && baseline.git.writePerformed === false && baseline.businessFiles && baseline.controlFiles, "baseline hashes and read-only Git");
-  addCheck("v1.10 control-plane schema", controlPlane.atomicWriteContract && controlPlane.atomicWriteContract.tempFileRequired === true && controlPlane.atomicWriteContract.fsyncBeforeRename === true && controlPlane.idempotency && controlPlane.idempotency.duplicatePolicy === "reuse-and-audit", "atomic/idempotent control plane");
-  addCheck("v1.10 init-result database default", initResult.databaseAuthorization && initResult.databaseAuthorization.authorization === "not-requested" && initResult.databaseAuthorization.executionStatus === "needs-confirmation" && initResult.databaseAuthorization.redactionStatus === "verified" && initResult.databaseAuthorization.connected === false, "init-result database default");
-  addCheck("v1.10.2 identity separation", initResult.roleSessions && initResult.roleSessions.orchestratorIdentityType === "orchestrator-session" && initResult.roleSessions.identityMapping && ["hostThreadId", "hostSessionId", "projectSessionId", "orchestratorSessionId", "mappingStatus", "identityEvidence", "creationEvidence"].every((field) => Object.prototype.hasOwnProperty.call(initResult.roleSessions.identityMapping, field)), "host/project/orchestrator identity map");
-  addCheck("v1.10.2 result evidence schema", initResult.businessCodeChanged && initResult.businessCodeChanged.value === "unknown" && JSON.stringify(initResult.businessCodeChanged.evidenceSchema) === JSON.stringify(["evidenceType", "path", "beforeHash", "afterHash", "checkedAt"]) && initResult.roleSessions.realAiSessionVerified === false, "business-change evidence and real session gate");
-  addCheck("v1.10.2 task status source", taskIndex && taskIndex.statusConsistency && taskIndex.statusConsistency.sourceOfTruth === "task.status" && taskIndex.statusConsistency.illegalCombinationAction === "blocked-and-stop-write", "cross-file status source");
-  addCheck("v1.11 fixed materialization schema", fixedMaterialization.targetVersion === "1.11.0" && fixedMaterialization.hashAlgorithm === "SHA-256" && fixedMaterialization.atomicWrite && fixedMaterialization.atomicWrite.rename === true && fixedMaterialization.statusEnum.includes("conflict-pending"), "fixed template conflict contract");
-  addCheck("v1.11 initialization stages schema", initializationStages.stageStatusEnum.includes("recovery-required") && JSON.stringify(initializationStages.stages.map((stage) => stage.stageId)) === JSON.stringify(["preflight", "fixed-materialization", "control-plane", "codegraph", "bootstrap-snapshot", "role-sessions", "onboarding", "final-gate"]), "ordered initialization stages");
-  addCheck("v1.11 snapshot and cache schema", bootstrapSnapshot.scanBudget.maxDepth === 3 && Array.isArray(bootstrapSnapshot.unverifiedScope) && initializationCache.ttlHours === 24 && initializationCache.keyAlgorithm === "RFC8785-JCS-SHA-256", "bounded snapshot and expiring cache");
-  addCheck("v1.11 parallelism schema", parallelism.maxConcurrency === 3 && parallelism.requestedConcurrency === 3 && parallelism.queueOrder.includes("taskId"), "parallel role-session limit");
-  addCheck("v1.11 registry paths", manifest.v111 && projectIndex.v111 && manifest.v111.fixedMaterialization === "xinyun-ai/fixed-materialization.json" && projectIndex.v111.initializationStages === "xinyun-ai/initialization-stages.json" && manifest.v111.defaultRoleConcurrency === 3 && manifest.v111.cacheTtlHours === 24, "v1.11 manifest/project-index paths");
-  addCheck("v1.10 database defaults across control plane", manifest.v110 && projectIndex.v110 && JSON.stringify(manifest.v110.databaseDefault) === JSON.stringify(projectIndex.v110.databaseDefault) && JSON.stringify(manifest.v110.databaseDefault) === JSON.stringify({ authorization: "not-requested", executionStatus: "needs-confirmation", redactionStatus: "verified" }) && preflight.database && preflight.database.authorization === manifest.v110.databaseDefault.authorization && preflight.database.executionStatus === manifest.v110.databaseDefault.executionStatus && preflight.database.redactionStatus === manifest.v110.databaseDefault.redactionStatus && initResult.databaseAuthorization && initResult.databaseAuthorization.authorization === manifest.v110.databaseDefault.authorization && initResult.databaseAuthorization.executionStatus === manifest.v110.databaseDefault.executionStatus && initResult.databaseAuthorization.redactionStatus === manifest.v110.databaseDefault.redactionStatus, "database defaults agree across manifest/project-index/preflight/init-result");
-  const localDatabaseScope = ["*.sql", "*.ddl", "*.schema", "*.migration", "database/", "migrations/", "schema/", "models/"];
-  addCheck("v1.10 database local-file policy across control plane", preflight.database && initResult.databaseAuthorization && preflight.database.databaseAccessMode === "local-files-read-only" && initResult.databaseAuthorization.databaseAccessMode === "local-files-read-only" && preflight.database.legacyDatabaseAccessMode === "sql-only" && initResult.databaseAuthorization.legacyDatabaseAccessMode === "sql-only" && preflight.database.sqlExecutionMode === "generate-only" && initResult.databaseAuthorization.sqlExecutionMode === "generate-only" && preflight.database.connected === false && initResult.databaseAuthorization.connected === false && preflight.database.sqlExecuted === false && initResult.databaseAuthorization.sqlExecuted === false && JSON.stringify(preflight.database.localDatabaseFileScope) === JSON.stringify(localDatabaseScope) && JSON.stringify(initResult.databaseAuthorization.localDatabaseFileScope) === JSON.stringify(localDatabaseScope), "preflight and init-result database policy is inconsistent");
-  verifyV110CodeGraphContract(manifest, projectIndex, preflight, onboarding, initResult, currentTask);
-  verifyV110HostCapabilityContract(host, projectStatus);
-  const capabilityStatuses = ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"];
-  const capabilityStatusText = capabilityStatuses.join(" / ");
-  const projectGuide = readText("init/xinyun-ai-init/templates/project-guide.template.md");
-  addCheck("v1.10 capability enum across templates", projectIndex.tasking && projectIndex.tasking.stateMachine && JSON.stringify(projectIndex.tasking.stateMachine.capabilityStatus) === JSON.stringify(capabilityStatuses) && currentTask.includes(capabilityStatusText) && projectGuide.includes(capabilityStatusText), "complete capability status enum");
-
-  requireIncludes("init/xinyun-ai-init/README.md", ["v1.10", "projectStatus=not-started/initializing/partial/blocked/ready", "required-role-session-not-created", "codegraph init -i", "authorization=not-requested", "executionStatus=needs-confirmation", "redactionStatus=verified", "不得进入业务代码开发"]);
-  requireIncludes("init/xinyun-ai-init/templates/core-rules.template.md", ["v1.10", "projectStatus", "executionEligible", "required-role-session-not-created", "host-capabilities", "takeover-baseline", "不得伪造 sessionId"]);
-  requireIncludes("init/xinyun-ai-init/rules/init-rules.md", ["v1.10", "preflight", "projectStatus", "codegraph init -i", "required-role-session-not-created", "sql-only"]);
-  requireIncludes("init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.10", "projectStatus", "recovery", "不得覆盖", "required-role-session-not-created"]);
-  requireIncludes("init/xinyun-ai-init/rules/session-workbench.md", ["v1.10", "host capability", "真实 sessionId", "不得伪造 sessionId", "executionEligible"]);
-  requireIncludes("init/xinyun-ai-init/templates/current-task.template.md", ["statusSource：xinyun-ai/manifest.json", "sourceRevision：", "indexScope：", "unindexedScope："]);
-  requireIncludes("init/xinyun-ai-init/templates/project-guide.template.md", ["available / available-with-dependency / unavailable / permission-denied / unknown / not-checked / not-verified / failed"]);
-  requireIncludes("test-scenarios/v1.10.0-scenarios.md", ["## 120.", "## 123.", "## 123-A.", "## 121-A.", "## 121-B.", "## 128.", "## 128-A.", "## 130.", "## 133.", "projectStatus", "not-verified", "available-with-dependency", "状态源缺失"]);
-
-  verifyV110BehaviorEvidence();
-}
-
-function verifyV110CodeGraphContract(manifest, projectIndex, preflight, onboarding, initResult, currentTask) {
-  const source = manifest.codeGraphRequired;
-  const indexSource = projectIndex.codeGraphRequired;
-  const summaryFields = ["codeGraphRecordId", "statusSource", "status", "sourceRevision", "indexScope", "unindexedScope", "failureReason", "evidence"];
-  const sameSummary = (record) => record && summaryFields.every((field) => JSON.stringify(record[field]) === JSON.stringify(source[field]));
-  addCheck("v1.10 CodeGraph manifest is the status source", source && source.statusSource === "xinyun-ai/manifest.json" && source.required === true, "manifest.codeGraphRequired");
-  addCheck("v1.10 CodeGraph project-index summary", sameSummary(indexSource), "project-index.codeGraphRequired mirrors manifest");
-  addCheck("v1.10 CodeGraph preflight summary", sameSummary(preflight.codeGraph), "preflight.codeGraph mirrors manifest");
-  addCheck("v1.10 CodeGraph onboarding summary", onboarding.codeGraphRecordId === source.codeGraphRecordId && sameSummary({ ...onboarding.codeGraph, codeGraphRecordId: onboarding.codeGraphRecordId }), "onboarding codeGraph mirrors manifest");
-  addCheck("v1.10 CodeGraph init-result summary", sameSummary(initResult.codeGraph), "init-result.codeGraph mirrors manifest");
-  addCheck("v1.10 CodeGraph source fields", ["sourceRevision", "indexScope", "unindexedScope", "failureReason", "evidence"].every((field) => Object.prototype.hasOwnProperty.call(source, field)), "status source includes range and failure evidence");
-  addCheck("v1.10 CodeGraph current-task fields", ["statusSource：xinyun-ai/manifest.json", "sourceRevision：", "indexScope：", "unindexedScope：", "failureReason："].every((field) => currentTask.includes(field)), "current-task mirrors CodeGraph summary");
-}
-
-function verifyV110HostCapabilityContract(host, projectStatus) {
-  const requiredFields = ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"];
-  const statuses = ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"];
-  const dependencyStatuses = ["not-required", "required", "authorized", "not-authorized", "unknown"];
-  const capabilities = host && host.capabilities ? Object.values(host.capabilities) : [];
-  addCheck("v1.10 host capability status enum", JSON.stringify(host.statusEnum) === JSON.stringify(statuses), "all host capability statuses");
-  addCheck("v1.10 host dependency status enum", JSON.stringify(host.dependencyStatusEnum) === JSON.stringify(dependencyStatuses), "all dependency statuses");
-  addCheck("v1.10 host capability minimum fields", capabilities.length === 6 && capabilities.every((capability) => requiredFields.every((field) => Object.prototype.hasOwnProperty.call(capability, field))), "six capabilities have the minimum evidence contract");
-  addCheck("v1.10 host dependency gate", host.readyPolicy && host.readyPolicy.availableWithDependencyBlocksReady === true && host.readyPolicy.notVerifiedBlocksReady === true && host.readyPolicy.blockedStatuses.includes("not-verified") && host.readyPolicy.dependencyRequiredStatus === "authorized" && host.readyPolicy.fakeSessionIdProhibited === true, "dependency authorization and not-verified are required blockers");
-  const blockedStatuses = ["unknown", "unavailable", "permission-denied", "failed", "available-with-dependency", "not-checked", "not-verified"];
-  addCheck("v1.10 project ready blocked statuses", projectStatus.readyPolicy && blockedStatuses.every((status) => projectStatus.readyPolicy.requiredCapabilityBlockedStatuses.includes(status)) && projectStatus.readyPolicy.availableWithDependencyRequires.includes("dependencyStatus=authorized"), "required capability failures cannot reach ready");
-}
-
-function verifyV110BehaviorEvidence() {
-  const relativePath = "test-scenarios/v1.10.0-behavior-evidence.json";
-  let report;
-  try {
-    report = JSON.parse(readText(relativePath));
-    addCheck("v1.10 behavior evidence JSON parse", true, "JSON parse");
-  } catch (error) {
-    addCheck("v1.10 behavior evidence JSON parse", false, error.message);
-    return;
-  }
-  const scenarios = Array.isArray(report.scenarios) ? report.scenarios : [];
-  const expectedIds = Array.from({ length: 14 }, (_, index) => 120 + index);
-  const requiredFields = ["scenarioId", "sessionId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordedAt"];
-  addCheck("v1.10 behavior evidence source", report.evidenceType === "not-verified" && report.executionMode === "host-capability-unavailable" && report.realAiSessionVerified === false && report.publishBlocked === true, "not-verified evidence is required when role sessions are unavailable");
-  addCheck("v1.10 behavior evidence fixture", report.fixturePath === "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture" && fs.existsSync(path.join(root, report.fixturePath, "before", "project-status.json")) && fs.existsSync(path.join(root, report.fixturePath, "after", "project-status.json")), "persistent fixture boundary exists");
-  addCheck("v1.10 behavior evidence IDs", JSON.stringify(scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds), "scenarios 120-133");
-  for (const scenario of scenarios) {
-    const prefix = `v1.10 behavior evidence ${scenario.scenarioId}`;
-    addCheck(`${prefix} required fields`, requiredFields.every((field) => Object.prototype.hasOwnProperty.call(scenario, field)), "required evidence fields");
-    addCheck(`${prefix} not verified`, scenario.result === "not-verified" && scenario.sessionId === null && scenario.actualOutput === "not-verified", "no real session must remain not-verified");
-    addCheck(`${prefix} forbidden operations`, scenario.forbiddenOperations && Object.values(scenario.forbiddenOperations).every((value) => value === false), "forbidden operations must not run");
-    addCheck(`${prefix} sensitive scan`, scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && Array.isArray(scenario.sensitiveScan.matches) && scenario.sensitiveScan.matches.length === 0, "sensitive scan");
-  }
-}
-
-function verifyV112Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.12.0-recovery.md",
-    "init/xinyun-ai-init/templates/host-preflight.template.json",
-    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
-    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
-    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
-    "init/xinyun-ai-init/templates/initialization-timing.template.json",
-    "test-scenarios/v1.12.0-scenarios.md",
-    "test-scenarios/v1.12.0-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(file);
-
-  let manifest;
-  let projectIndex;
-  let host;
-  let recovery;
-  let binding;
-  let snapshot;
-  let timing;
-  let initResult;
-  try {
-    manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-    projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-    host = JSON.parse(readText("init/xinyun-ai-init/templates/host-preflight.template.json"));
-    recovery = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-recovery.template.json"));
-    binding = JSON.parse(readText("init/xinyun-ai-init/templates/manual-session-binding.template.json"));
-    snapshot = JSON.parse(readText("init/xinyun-ai-init/templates/shared-project-snapshot.template.json"));
-    timing = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-timing.template.json"));
-    initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  } catch (error) {
-    addCheck("v1.12 template JSON parse", false, error.message);
-    return;
-  }
-
-  const paths = ["hostPreflight", "initializationRecovery", "manualSessionBindings", "sharedProjectSnapshot", "initializationTiming"];
-  addCheck("v1.12 manifest/project-index registration", manifest.v112 && projectIndex.v112 && paths.every((key) => manifest.v112[key] === projectIndex.v112[key]), "v1.12 paths must match across index files");
-  addCheck("v1.12 capability flags", ["hostPreflightRecovery", "manualRoleSessionBinding", "codeGraphIncrementalReuse", "sharedProjectSnapshot", "initializationTiming"].every((key) => manifest.capabilities && manifest.capabilities[key] === true), "v1.12 manifest capabilities");
-  addCheck("v1.12 capability enum consistency", JSON.stringify(manifest.v112.hostCapabilityStatusEnum) === JSON.stringify(projectIndex.v112.hostCapabilityStatusEnum) && host.capabilityStatusEnum.every((status) => manifest.v112.hostCapabilityStatusEnum.includes(status)), "host capability statuses are consistent");
-  addCheck("v1.12 required host capabilities", JSON.stringify(host.requiredCapabilities) === JSON.stringify(manifest.v112.preflightRequiredCapabilities) && host.capabilities && manifest.v112.preflightRequiredCapabilities.every((id) => host.capabilities[id]), "all seven host capabilities are required");
-  const capabilityFields = ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"];
-  addCheck("v1.12 host capability evidence fields", Object.values(host.capabilities).every((capability) => capabilityFields.every((field) => Object.prototype.hasOwnProperty.call(capability, field))), "host capability minimum evidence fields");
-  addCheck("v1.12 conservative preflight default", host.status === "not-checked" && host.readyGate && host.readyGate.allRequiredCapabilitiesPassed === false && host.readyGate.unknownBlocksReady === true && host.readyGate.fakeSessionIdProhibited === true && host.realSessionIdEvidence.verified === false, "preflight cannot default to ready");
-  addCheck("v1.12 task-first recovery", recovery.status === "not-started" && recovery.reuseContract.reuseTaskId === true && recovery.reuseContract.reuseRoleTaskIds === true && recovery.reuseContract.incrementAttempt === true && recovery.reuseContract.createDuplicateTasks === false && recovery.resumeTriggers.every((trigger) => manifest.v112.resumeConfirmationPhrases.includes(trigger)), "resume reuses IDs and prevents duplicate tasks");
-  addCheck("v1.12 atomic recovery", recovery.atomicWrite && recovery.atomicWrite.tempFileRequired === true && recovery.atomicWrite.fsyncBeforeRename === true && recovery.atomicWrite.rename === true && recovery.atomicWrite.recoveryOnFailure === true, "recovery writes are atomic");
-  addCheck("v1.12 manual binding gate", binding.sessionId === null && binding.bindingStatus === "pending" && binding.executionEligible === false && binding.fakeSessionIdProhibited === true && binding.evidenceRequiredFields.includes("sessionId") && binding.evidenceRequiredFields.includes("interactionHash"), "manual binding requires real evidence");
-  addCheck("v1.12 snapshot reuse", snapshot.generatedOnce === false && snapshot.snapshotStatus === "not-checked" && snapshot.reuseDecision === "unknown" && snapshot.reusedByRoleIds.length === 0 && manifest.v112.projectSnapshotReusePolicy === "reuse-until-business-or-codegraph-hash-changes", "one shared snapshot with explicit refresh triggers");
-  addCheck("v1.12 timing schema", JSON.stringify(timing.stageRequiredFields) === JSON.stringify(manifest.v112.stageTimingRequiredFields) && timing.attempt === 1 && timing.stages.length === 0, "stage duration and recovery evidence fields");
-  addCheck("v1.12 init-result links", initResult.targetVersion === CURRENT_VERSION && initResult.v112 && paths.every((key) => initResult.v112[`${key}Path`] === manifest.v112[key]) && initResult.v112.duplicateTasksCreated === 0 && initResult.v112.realSessionIdRequired === true, "init-result links v1.12 control files");
-  const scenarioText = readText("test-scenarios/v1.12.0-scenarios.md");
-  addCheck("v1.12 scenarios", Array.from({ length: 12 }, (_, index) => 134 + index).every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("sessionId=null") && scenarioText.includes("确认继续初始化"), "v1.12 scenarios 134-145");
-  let behaviorEvidence;
-  try {
-    behaviorEvidence = JSON.parse(readText("test-scenarios/v1.12.0-behavior-evidence.json"));
-  } catch (error) {
-    addCheck("v1.12 behavior evidence JSON", false, error.message);
-    behaviorEvidence = null;
-  }
-  const behaviorScenarios = behaviorEvidence && Array.isArray(behaviorEvidence.scenarios) ? behaviorEvidence.scenarios : [];
-  addCheck("v1.12 behavior evidence honest gate", behaviorEvidence && behaviorEvidence.evidenceType === "not-verified" && behaviorEvidence.realAiSessionVerified === false && behaviorEvidence.publishBlocked === true && behaviorEvidence.sessionIdPolicy.includes("sessionId remains null"), "real host behavior is not fabricated");
-  addCheck("v1.12 behavior evidence IDs", JSON.stringify(behaviorScenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(Array.from({ length: 12 }, (_, index) => 134 + index)), "behavior evidence covers 134-145");
-  addCheck("v1.12 behavior evidence not-verified", behaviorScenarios.length === 12 && behaviorScenarios.every((scenario) => scenario.sessionId === null && scenario.result === "not-verified" && scenario.actualOutput === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0), "unavailable host remains blocked without fake IDs");
-  const releasePath = path.join(root, "version-plans/releases/v1.12.0.md");
-  if (fs.existsSync(releasePath)) {
-    const releaseText = readText("version-plans/releases/v1.12.0.md");
-    addCheck("v1.12 release exclusions", releaseText.includes("No automatic host login") && releaseText.includes("no database connection") && releaseText.includes("no npm publish"), "v1.12 safety and scope exclusions");
-  } else {
-    addCheck("v1.12 release exclusions", true, "source-only release material is not required in tarball");
-  }
-  addCheck("v1.12 rule contract", readText("init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("available-with-dependency") && readText("init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("shared-project-snapshot.json"), "v1.12 recovery rule is present");
-}
-
-function verifyV1121Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md",
-    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
-    "test-scenarios/v1.12.1-scenarios.md",
-    "test-scenarios/v1.12.1-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(file);
-
-  let manifest;
-  let projectIndex;
-  let initResult;
-  let binding;
-  let manual;
-  let evidence;
-  try {
-    manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-    projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-    initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-    binding = JSON.parse(readText("init/xinyun-ai-init/templates/provider-session-binding.template.json"));
-    manual = JSON.parse(readText("init/xinyun-ai-init/templates/manual-session-binding.template.json"));
-    evidence = JSON.parse(readText("test-scenarios/v1.12.1-behavior-evidence.json"));
-  } catch (error) {
-    addCheck("v1.12.1 template JSON parse", false, error.message);
-    return;
-  }
-
-  const bindingStatuses = ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"];
-  const bindingModes = ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"];
-  const identityFields = ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"];
-  const interactionFields = ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"];
-  const bindingFields = ["provider", "providerSessionId", "roleId", "taskId", "projectRootHash", "workspaceScope", "title", "cwd", "createdAt", "identityEvidence", "interactionEvidence", "bindingMode", "bindingStatus", "boundBy", "boundAt"];
-  addCheck("v1.12.1 version metadata", manifest.xinyunAiVersion === CURRENT_VERSION && initResult.targetVersion === CURRENT_VERSION && binding.targetVersion === undefined, CURRENT_VERSION);
-  addCheck("v1.12.1 registry paths", manifest.v1121 && projectIndex.v1121 && manifest.v1121.providerBindings === projectIndex.v1121.providerBindings && manifest.v1121.providerBindingTemplate === projectIndex.v1121.providerBindingTemplate && manifest.roleSessions.providerSessionBindings === projectIndex.roleSessions.providerSessionBindings, "manifest/project-index provider binding paths");
-  addCheck("v1.12.1 binding fields", bindingFields.every((field) => Object.prototype.hasOwnProperty.call(binding, field)), "canonical provider binding fields");
-  addCheck("v1.12.1 binding enums", JSON.stringify(binding.bindingStatusEnum) === JSON.stringify(bindingStatuses) && bindingModes.includes(binding.bindingMode), "binding modes and statuses");
-  addCheck("v1.12.1 evidence fields", identityFields.every((field) => Object.prototype.hasOwnProperty.call(binding.identityEvidence, field)) && interactionFields.every((field) => Object.prototype.hasOwnProperty.call(binding.interactionEvidence, field)), "identity and interaction evidence fields");
-  addCheck("v1.12.1 conservative template", binding.providerSessionId === null && binding.bindingStatus === "pending" && binding.executionEligible === false && binding.fakeProviderSessionIdProhibited === true, "provider ID and execution defaults");
-  addCheck("v1.12.1 manual compatibility", manual.providerSessionId === null && manual.bindingMode === "manual" && manual.executionEligible === false && manual.fakeSessionIdProhibited === true && manual.evidenceRequiredFields.includes("providerSessionId"), "manual binding remains gated");
-  addCheck("v1.12.1 init-result link", initResult.v1121 && initResult.v1121.providerSessionBindingsPath === manifest.v1121.providerBindings && initResult.v1121.providerSessionBindingTemplate === manifest.v1121.providerBindingTemplate && initResult.v1121.fakeProviderSessionIdProhibited === true, "init-result provider binding link");
-  const scenarioText = readText("test-scenarios/v1.12.1-scenarios.md");
-  const scenarioIds = Array.from({ length: 13 }, (_, index) => 146 + index);
-  addCheck("v1.12.1 scenarios", scenarioIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("providerSessionId=null"), "scenarios 146-158");
-  addCheck("v1.12.1 honest behavior evidence", evidence.version === "1.12.1" && evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && JSON.stringify(evidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(scenarioIds), "real host evidence status");
-  addCheck("v1.12.1 no fabricated IDs", evidence.scenarios.every((scenario) => scenario.providerSessionId === null && scenario.sessionId === null && scenario.result === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0), "provider session IDs remain null without host evidence");
-  const ruleText = readText("init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md");
-  addCheck("v1.12.1 rule contract", ["providerSessionId", "canonical", "identityEvidence", "interactionEvidence", "exclusive occupancy", "Do not fabricate"].every((term) => ruleText.includes(term)), "provider session rule contract");
-}
-
-function verifyV113Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.13.0-host-adapter.md",
-    "init/xinyun-ai-init/templates/provider-adapter.template.json",
-    "init/xinyun-ai-init/templates/manual-session-recovery.template.json",
-    "init/xinyun-ai-init/templates/initialization-change-report.template.json",
-    "init/xinyun-ai-init/templates/role-session-binding.template.json",
-    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
-    "init/xinyun-ai-init/templates/task-index.template.json",
-    "init/xinyun-ai-init/templates/team/assignments.json",
-    "test-scenarios/v1.13.0-scenarios.md",
-    "test-scenarios/v1.13.0-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(file);
-
-  let manifest;
-  let projectIndex;
-  let initResult;
-  let adapter;
-  let recovery;
-  let changeReport;
-  let roleBinding;
-  let providerBinding;
-  let taskIndex;
-  let assignments;
-  let evidence;
-  try {
-    manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-    projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-    initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-    adapter = JSON.parse(readText("init/xinyun-ai-init/templates/provider-adapter.template.json"));
-    recovery = JSON.parse(readText("init/xinyun-ai-init/templates/manual-session-recovery.template.json"));
-    changeReport = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-change-report.template.json"));
-    roleBinding = JSON.parse(readText("init/xinyun-ai-init/templates/role-session-binding.template.json"));
-    providerBinding = JSON.parse(readText("init/xinyun-ai-init/templates/provider-session-binding.template.json"));
-    taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
-    assignments = JSON.parse(readText("init/xinyun-ai-init/templates/team/assignments.json"));
-    evidence = JSON.parse(readText("test-scenarios/v1.13.0-behavior-evidence.json"));
-  } catch (error) {
-    addCheck("v1.13 template JSON parse", false, error.message);
-    return;
-  }
-
-  const paths = ["providerAdapter", "manualSessionRecovery", "initializationChangeReport"];
-  addCheck("v1.13 manifest/project-index registration", manifest.v113 && projectIndex.v113 && paths.every((key) => manifest.v113[key] === projectIndex.v113[key]), "v1.13 paths must match across index files");
-  addCheck("v1.13 init-result registration", initResult.v113 && paths.every((key) => initResult.v113[`${key}Path`] === manifest.v113[key]), "init-result links all v1.13 control files");
-  const userDecisions = ["manual-create", "defer", "redetect"];
-  const decisionStatuses = ["not-asked", "awaiting-user", "selected", "processing", "completed", "blocked"];
-  const decisionFields = ["userDecision", "requiredRoleCount", "createdRoleCount", "remainingRoleIds", "decisionStatus", "decidedAt", "nextAction", "decisionEvidence"];
-  addCheck("v1.13 decision registry", manifest.v113 && projectIndex.v113 && JSON.stringify(manifest.v113.userDecisionEnum) === JSON.stringify(userDecisions) && JSON.stringify(projectIndex.v113.userDecisionEnum) === JSON.stringify(userDecisions) && JSON.stringify(manifest.v113.decisionStatusEnum) === JSON.stringify(decisionStatuses) && JSON.stringify(projectIndex.v113.decisionStatusEnum) === JSON.stringify(decisionStatuses), "decision enums match across registries");
-  addCheck("v1.13 decision defaults", decisionFields.every((field) => Object.prototype.hasOwnProperty.call(initResult.v113, field)) && initResult.v113.requiredRoleCount === 5 && initResult.v113.createdRoleCount === 0 && initResult.v113.decisionStatus === "not-asked" && initResult.v113.userDecision === null, "init-result preserves the one-time decision gate");
-  const sessionCreationStatuses = ["not-asked", "awaiting-confirmation", "approved", "deferred", "processing", "completed", "blocked"];
-  addCheck("v1.13 task-first session gate", recovery.taskFirstSessionGate && initResult.v113.sessionCreationDecision && recovery.taskFirstSessionGate.mainTaskCreatedBeforeSession === true && recovery.taskFirstSessionGate.roleTasksCreatedBeforeSession === true && recovery.taskFirstSessionGate.sessionIdsRemainNullUntilDecision === true && JSON.stringify(recovery.taskFirstSessionGate.sessionCreationStatusEnum) === JSON.stringify(sessionCreationStatuses) && JSON.stringify(initResult.v113.sessionCreationDecision.statusEnum) === JSON.stringify(sessionCreationStatuses) && initResult.v113.sessionCreationDecision.status === "awaiting-confirmation" && initResult.v113.sessionCreationDecision.sessionIdsRemainNullUntilDecision === true, "tasks are created before user-approved session creation");
-  const decisionMetadataFields = ["decisionId", "actor", "source"];
-  const decisionEvidenceFields = ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"];
-  const recoveryText = readText("init/xinyun-ai-init/templates/manual-session-recovery.template.json");
-  addCheck("v1.13 decision metadata", decisionMetadataFields.every((field) => Object.prototype.hasOwnProperty.call(recovery, field) && Object.prototype.hasOwnProperty.call(initResult.v113, field)) && decisionEvidenceFields.every((field) => recovery.decisionEvidenceSchema.includes(field) && initResult.v113.decisionEvidenceSchema.includes(field)) && (recoveryText.match(/^  \"nextAction\"/gm) || []).length === 1, "decision identity fields are mirrored and top-level nextAction is singular");
-  const capabilities = ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "querySessionStatus", "recoverSession", "closeSession", "controlFileReadWrite"];
-  addCheck("v1.13 required capabilities", JSON.stringify(manifest.v113.preflightRequiredCapabilities) === JSON.stringify(capabilities), "all eight preflight capabilities are registered");
-
-  const statusEnum = ["not-checked", "checking", "available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "failed", "not-verified"];
-  addCheck("v1.13 adapter status enum", JSON.stringify(adapter.statusEnum) === JSON.stringify(statusEnum), "adapter status enum is complete");
-  addCheck("v1.13 adapter operations", capabilities.every((id) => Object.values(adapter.operations).some((operation) => operation.operationId === id)), "all required adapter operations exist");
-  addCheck("v1.13 canonical session ID", adapter.canonicalSessionIdField === "providerSessionId" && adapter.canonicalSessionIdSource === "provider-supported-session-api-response" && adapter.fakeSessionIdProhibited === true && adapter.ordinaryThreadIdProhibited === true, "only provider canonical IDs can bind sessions");
-  addCheck("v1.13 adapter ready gate", adapter.readyGate.includes("identity") && adapter.readyGate.includes("interaction") && adapter.readyGate.includes("all required operations available"), "adapter ready gate requires evidence");
-
-  const sessionIdentityFields = ["hostThreadId", "hostSessionId", "providerSessionId", "projectSessionId", "sessionId", "orchestratorSessionId"];
-  const requiredHostEvidence = ["create-or-reuse", "send", "receive", "query-status", "recover", "close"];
-  const identityContractMatches = JSON.stringify(manifest.v113.sessionIdentityFields) === JSON.stringify(sessionIdentityFields)
-    && JSON.stringify(projectIndex.v113.sessionIdentityFields) === JSON.stringify(sessionIdentityFields)
-    && JSON.stringify(taskIndex.sessionIdentityContract.fields) === JSON.stringify(sessionIdentityFields)
-    && JSON.stringify(manifest.v113.requiredHostEvidence) === JSON.stringify(requiredHostEvidence)
-    && JSON.stringify(projectIndex.v113.requiredHostEvidence) === JSON.stringify(requiredHostEvidence)
-    && JSON.stringify(taskIndex.sessionIdentityContract.requiredHostEvidence) === JSON.stringify(requiredHostEvidence);
-  addCheck("v1.13 session identity registry", identityContractMatches && manifest.v113.canonicalSessionIdentity === "providerSessionId" && projectIndex.v113.canonicalSessionIdentity === "providerSessionId" && taskIndex.sessionIdentityContract.canonicalField === "providerSessionId", "session identity fields and canonical source match");
-  addCheck("v1.13 binding identity mapping", roleBinding.identityMapping.equivalenceRule.includes("sessionId equals providerSessionId") && providerBinding.identityMapping.equivalenceRule.includes("sessionId equals providerSessionId") && roleBinding.identityMapping.providerSessionId === null && providerBinding.providerSessionId === null && roleBinding.sessionId === null && providerBinding.sessionId === null, "role/provider bindings start unverified and use one mapping rule");
-  addCheck("v1.13 assignment identity contract", assignments.recordContract.requiredFields.includes("projectSessionId") && assignments.recordContract.requiredFields.includes("hostThreadId") && assignments.recordContract.requiredFields.includes("hostSessionId") && assignments.recordContract.requiredFields.includes("identityMapping") && assignments.recordContract.sessionBindingRule.includes("create-or-reuse") && assignments.recordContract.sessionBindingRule.includes("close") && assignments.recordContract.sessionBindingRule.includes("providerSessionId"), "assignments enforce canonical provider evidence");
-
-  const roleIds = ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"];
-  addCheck("v1.13 manual recovery roles", JSON.stringify(recovery.roles.map((role) => role.roleId)) === JSON.stringify(roleIds) && recovery.roles.every((role) => role.providerSessionId === null && role.bindingStatus === "pending" && role.sessionTitle && role.responsibility && role.firstTaskPrompt), "five manual recovery entries are conservative and actionable");
-  addCheck("v1.13 recovery contract", recovery.reuseContract && recovery.reuseContract.reuseTaskId === true && recovery.reuseContract.reuseRoleTaskId === true && recovery.reuseContract.incrementAttempt === true && recovery.reuseContract.createDuplicateTasks === false && recovery.reuseContract.replaceUnverifiedSession === false && recovery.fakeProviderSessionIdProhibited === true, "recovery reuses IDs and forbids fabricated sessions");
-  const bindingFields = ["provider", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "boundBy", "boundAt", "identityEvidence", "interactionEvidence"];
-  addCheck("v1.13 recovery binding fields", bindingFields.every((field) => recovery.bindingRequiredFields.includes(field)), "manual binding fields are complete");
-
-  const originEnum = ["initialization-created", "initialization-updated", "pre-existing-user-change", "control-plane-only"];
-  addCheck("v1.13 change origin contract", JSON.stringify(changeReport.changeOriginEnum) === JSON.stringify(originEnum) && changeReport.businessCodeChanged.value === "unknown" && changeReport.requiredChangeFields.includes("beforeHash") && changeReport.requiredChangeFields.includes("afterHash"), "initialization changes are separated from user changes");
-
-  const expectedIds = Array.from({ length: 27 }, (_, index) => 159 + index);
-  const scenarioText = readText("test-scenarios/v1.13.0-scenarios.md");
-  addCheck("v1.13 scenario catalog", expectedIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("manual-create") && scenarioText.includes("create-and-onboard") && scenarioText.includes("decisionStatus"), "scenarios 159-185 are catalogued with task-first session decisions");
-  addCheck("v1.13 behavior evidence honest gate", evidence.version === "1.13.1" && evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && evidence.sessionId === null && evidence.providerSessionId === null && JSON.stringify(evidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds), "unavailable host evidence remains blocked without fake IDs");
-  const evidenceFields = ["scenarioId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "controlFilesChanged", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordHash", "recordedAt"];
-  addCheck("v1.13 behavior evidence fields", evidence.scenarios.length === expectedIds.length && JSON.stringify(evidence.scenarioRequiredFields) === JSON.stringify(evidenceFields) && evidence.scenarios.every((scenario) => evidenceFields.every((field) => Object.prototype.hasOwnProperty.call(scenario, field)) && scenario.evidenceType === "not-verified" && scenario.recordHash === "not-recorded" && scenario.result === "not-verified" && scenario.sessionId === null && scenario.providerSessionId === null && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0), "scenarios 159-181 have auditable fields and remain explicitly not-verified");
-  const ruleText = readText("init/xinyun-ai-init/rules/v1.13.0-host-adapter.md");
-  addCheck("v1.13 rule contract", ["providerSessionId", "Ordinary", "Manual recovery", "manual-create", "defer", "redetect", "decisionStatus=awaiting-user", "pre-existing-user-change", "No provider login/install"].every((term) => ruleText.includes(term)), "host adapter and recovery decision rules are present");
-}
-
-function verifyV114Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.14.0-agent-core.md",
-    "init/xinyun-ai-init/templates/agent-profile.template.json",
-    "init/xinyun-ai-init/templates/agent-capabilities.template.json",
-    "init/xinyun-ai-init/templates/takeover-gate.template.json",
-    "init/xinyun-ai-init/templates/orchestrator.template.json",
-    "init/xinyun-ai-init/templates/task-graph.template.json",
-    "init/xinyun-ai-init/templates/handoff.template.json",
-    "init/xinyun-ai-init/templates/final-delivery.template.json",
-    "test-scenarios/v1.14.0-scenarios.md",
-    "test-scenarios/v1.14.0-behavior-evidence.json",
-  ];
-  requiredFiles.forEach(requireFile);
-
-  const manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const projectStatus = JSON.parse(readText("init/xinyun-ai-init/templates/project-status.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const taskIndex = JSON.parse(readText("init/xinyun-ai-init/templates/task-index.template.json"));
-  const profile = JSON.parse(readText("init/xinyun-ai-init/templates/agent-profile.template.json"));
-  const capabilities = JSON.parse(readText("init/xinyun-ai-init/templates/agent-capabilities.template.json"));
-  const takeover = JSON.parse(readText("init/xinyun-ai-init/templates/takeover-gate.template.json"));
-  const orchestrator = JSON.parse(readText("init/xinyun-ai-init/templates/orchestrator.template.json"));
-  const graph = JSON.parse(readText("init/xinyun-ai-init/templates/task-graph.template.json"));
-  const handoff = JSON.parse(readText("init/xinyun-ai-init/templates/handoff.template.json"));
-  const delivery = JSON.parse(readText("init/xinyun-ai-init/templates/final-delivery.template.json"));
-  const evidence = JSON.parse(readText("test-scenarios/v1.14.0-behavior-evidence.json"));
-  const ruleText = readText("init/xinyun-ai-init/rules/v1.14.0-agent-core.md");
-  const coreRules = readText("init/xinyun-ai-init/templates/core-rules.template.md");
-
-  const pathKeys = ["profile", "capabilities", "takeoverGate", "orchestrator", "taskGraph", "handoffsDirectory", "finalDelivery"];
-  addCheck("v1.14 manifest/project-index registration", manifest.v114 && projectIndex.v114 && manifest.agentCore && projectIndex.agentCore && pathKeys.every((key) => manifest.agentCore[key] === projectIndex.agentCore[key] || key === "handoffsDirectory"), "v1.14 control-plane paths must be registered");
-  addCheck("v1.14 init-result registration", initResult.v114 && initResult.agentCore && initResult.agentCore.profilePath === manifest.agentCore.profile && initResult.v114.finalDeliveryPath === manifest.agentCore.finalDelivery, "init-result links v1.14 records");
-  addCheck("v1.14 agent profile", ["agentId", "name", "version", "projectIdentity", "serviceGoal", "configuredRoles", "supportedStacks", "supportedTools", "allowedOperations", "forbiddenOperations", "readyPrerequisites", "capabilityStatus"].every((field) => Object.prototype.hasOwnProperty.call(profile, field)) && profile.configuredRoles.length === 5 && profile.capabilityStatus === "manual-required", "agent profile contract is complete and conservative");
-  addCheck("v1.14 capability status", JSON.stringify(capabilities.aggregateStatusEnum) === JSON.stringify(["ready", "partial", "blocked", "manual-required"]) && capabilities.aggregateStatus === "manual-required" && capabilities.capabilities[0].required === true, "capability aggregation defaults to manual-required");
-  addCheck("v1.14 takeover gate", takeover.status === "blocked" && takeover.executionEligible === false && takeover.requiredGates.length >= 12 && takeover.blockedReasons.includes("required-role-session-not-created"), "takeover gate blocks without required evidence");
-  addCheck("v1.14 orchestrator and graph", orchestrator.orchestratorSessionId === null && orchestrator.responsibilities.length >= 8 && graph.acyclic === true && graph.taskStatusLabelMap.completed === "已完成", "orchestrator and task graph are independent and gated");
-  addCheck("v1.14 task status compatibility", taskIndex.taskStatusLabelMap.blocked === "阻塞" && taskIndex.taskStatusLabelMap["waiting-review"] === "待审查" && projectStatus.agentStatus === "manual-required" && projectStatus.takeoverGateStatus === "blocked", "machine statuses remain compatible with Chinese labels");
-  addCheck("v1.14 handoff and delivery", handoff.readBeforeExecution && handoff.readBeforeExecution.projectSnapshotHash === null && Array.isArray(handoff.changedFiles) && Array.isArray(delivery.blockedTasks) && delivery.status === "blocked", "handoff read/write and final delivery contracts are present");
-  addCheck("v1.14 session naming safety", readText("init/xinyun-ai-init/templates/role-session-binding.template.json").includes("项目名｜角色｜职责或工作流") && readText("init/xinyun-ai-init/templates/role-session-binding.template.json").includes("localSessionId") && ruleText.includes("providerSessionId") && ruleText.includes("local-degraded") && ruleText.includes("Cross-project"), "session naming keeps canonical provider identity and explicit local fallback");
-  const expectedIds = Array.from({ length: 20 }, (_, index) => 186 + index);
-  const scenarioText = readText("test-scenarios/v1.14.0-scenarios.md");
-  addCheck("v1.14 scenario catalog", expectedIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("beforeSnapshotHash") && scenarioText.includes("conflict"), "v1.14 scenarios 186-205 are catalogued");
-  addCheck("v1.14 behavior evidence local gate", evidence.version === "1.14.0" && evidence.evidenceType === "local-session" && evidence.executionMode === "local-degraded" && evidence.sessionIdentityMode === "local-degraded" && evidence.realAiSessionVerified === false && evidence.readyEligible === false && evidence.publishBlocked === false && typeof evidence.localSessionId === "string" && evidence.providerSessionId === null && JSON.stringify(evidence.scenarioRange) === JSON.stringify([186, 205]), "v1.14 local-degraded evidence is publishable but non-ready");
-  const v114EvidenceFields = ["scenarioId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "controlFilesChanged", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordHash", "recordedAt", "localSessionId"];
-  addCheck("v1.14 behavior evidence fields", JSON.stringify(evidence.scenarioRequiredFields) === JSON.stringify(v114EvidenceFields) && evidence.scenarios.length === 20 && evidence.scenarios.every((scenario, index) => v114EvidenceFields.every((field) => Object.prototype.hasOwnProperty.call(scenario, field)) && scenario.scenarioId === expectedIds[index] && scenario.expectedOutput && scenario.actualOutput === "local-degraded-verified" && scenario.sessionId === null && scenario.providerSessionId === null && scenario.localSessionId === evidence.localSessionId && scenario.result === "local-passed" && scenario.recordHash !== "not-recorded" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0), "v1.14 behavior evidence has complete local auditable fields without fake provider IDs");
-  addCheck("v1.14 rule and core rule", ["Agent identity", "Takeover gate", "Orchestrator", "Shared facts", "Final delivery", "localSessionId", "local-degraded"].every((term) => ruleText.includes(term)) && coreRules.includes("v1.14.0 智能体核心能力"), "v1.14 rules are registered in the package guidance");
-}
-
-function verifyV115Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.15.0-session-binding.md",
-    "init/xinyun-ai-init/templates/session-binding.template.json",
-    "test-scenarios/v1.15.0-scenarios.md",
-    "test-scenarios/v1.15.0-behavior-evidence.json",
-  ];
-  requiredFiles.forEach(requireFile);
-  const manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const binding = JSON.parse(readText("init/xinyun-ai-init/templates/session-binding.template.json"));
-  const evidence = JSON.parse(readText("test-scenarios/v1.15.0-behavior-evidence.json"));
-  const fields = ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "repositoryScope", "workstream", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode", "createdAt", "updatedAt"];
-  const categories = ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"];
-  addCheck("v1.15 adapter-neutral registry", manifest.v115 && projectIndex.v115 && initResult.v115 && manifest.v115.sessionBindingTemplate === projectIndex.v115.sessionBindingTemplate && manifest.v115.sessionBindingTemplate === initResult.v115.sessionBindingTemplate && manifest.v115.canonicalControlPlaneId === "sessionId", "v1.15 registry paths and canonical control-plane ID are consistent");
-  addCheck("v1.15 session binding schema", fields.every((field) => Object.prototype.hasOwnProperty.call(binding, field)) && JSON.stringify(binding.requiredEvidenceCategories) === JSON.stringify(categories) && binding.bindingStatus === "pending" && binding.executionEligible === false, "v1.15 binding schema has all fields, seven evidence categories, and a non-ready default");
-  const ruleText = readText("init/xinyun-ai-init/rules/v1.15.0-session-binding.md");
-  addCheck("v1.15 session binding rule", ["adapter-neutral", "sessionRefType", "host-thread", "provider-session", "manual-reference", "local-session", "providerSessionId", "seven evidence"].every((term) => ruleText.includes(term)), "v1.15 adapter-neutral session binding rules are present");
-  const scenarioText = readText("test-scenarios/v1.15.0-scenarios.md");
-  const ids = Array.from({ length: 18 }, (_, index) => 206 + index);
-  addCheck("v1.15 scenario catalog", ids.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("跨项目") && scenarioText.includes("host-thread"), "v1.15 scenarios 206-223 are catalogued");
-  const evidenceOperations = new Set((evidence.interactionEvidence || []).map((record) => record.operation));
-  const plannedEvidence = evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && evidence.scenarios.every((scenario) => scenario.actualOutput === "not-verified" && scenario.result === "not-verified");
-  const realHostEvidence = evidence.evidenceType === "real-session" && evidence.realAiSessionVerified === true && evidence.sessionRefType === "host-thread" && typeof evidence.sessionRef === "string" && evidence.readyEligible === true && categories.every((operation) => evidenceOperations.has(operation)) && evidence.scenarios.some((scenario) => scenario.scenarioId === 206 && scenario.result === "real-passed" && scenario.sessionRef === evidence.sessionRef) && evidence.scenarios.every((scenario) => scenario.result === "real-passed" || scenario.result === "real-negative-passed" || scenario.result === "contract-passed");
-  addCheck("v1.15 behavior evidence gate", evidence.version === "1.15.0" && JSON.stringify(evidence.scenarioRange) === JSON.stringify([206, 223]) && evidence.scenarios.length === 18 && evidence.scenarios.every((scenario, index) => scenario.scenarioId === 206 + index) && (plannedEvidence || realHostEvidence), "v1.15 behavior evidence is either honestly planned or backed by all seven real host-thread operation records");
-}
-
-function verifyV116Contracts() {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.16.0-capability-efficiency.md",
-    "init/xinyun-ai-init/templates/skill-runtime-route.template.json",
-    "init/xinyun-ai-init/templates/skill-run-record.template.json",
-    "init/xinyun-ai-init/templates/codegraph-incremental-record.template.json",
-    "init/xinyun-ai-init/templates/local-query-index.template.json",
-    "init/xinyun-ai-init/templates/performance-metrics.template.json",
-    "test-scenarios/v1.16.0-scenarios.md",
-    "test-scenarios/v1.16.0-behavior-evidence.json",
-    "scripts/collect-v1.16-evidence.js",
-  ];
-  requiredFiles.forEach(requireFile);
-  const manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
-  const projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
-  const initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
-  const route = JSON.parse(readText("init/xinyun-ai-init/templates/skill-runtime-route.template.json"));
-  const run = JSON.parse(readText("init/xinyun-ai-init/templates/skill-run-record.template.json"));
-  const graph = JSON.parse(readText("init/xinyun-ai-init/templates/codegraph-incremental-record.template.json"));
-  const index = JSON.parse(readText("init/xinyun-ai-init/templates/local-query-index.template.json"));
-  const metrics = JSON.parse(readText("init/xinyun-ai-init/templates/performance-metrics.template.json"));
-  const evidence = JSON.parse(readText("test-scenarios/v1.16.0-behavior-evidence.json"));
-  const scenarioText = readText("test-scenarios/v1.16.0-scenarios.md");
-  const ruleText = readText("init/xinyun-ai-init/rules/v1.16.0-capability-efficiency.md");
-  const expectedIds = Array.from({ length: 15 }, (_, index) => index + 301);
-  addCheck("v1.16 registry", manifest.v116 && projectIndex.v116 && initResult.v116 && manifest.v116.skillRoute === "xinyun-ai/skills/runtime-routes.json" && projectIndex.v116.skillRoute === manifest.v116.skillRoute && initResult.v116.skillRoutePath === manifest.v116.skillRoute, "v1.16 runtime paths are consistent");
-  addCheck("v1.16 route and run schemas", ["selected", "rejected", "fallback", "blocked", "selectionOrder"].every((field) => Object.prototype.hasOwnProperty.call(route, field)) && ["skillRunId", "skillId", "taskId", "usedTools", "unusedTools", "unverifiedScope"].every((field) => Object.prototype.hasOwnProperty.call(run, field)), "Skill routing and execution records are complete");
-  addCheck("v1.16 CodeGraph and query index schemas", ["changedFiles", "unchangedFiles", "failedFiles", "oldHealthyIndexPreserved"].every((field) => Object.prototype.hasOwnProperty.call(graph, field)) && ["sourceHash", "builtAt", "indexVersion", "coverage", "stale", "queryBudget"].every((field) => Object.prototype.hasOwnProperty.call(index, field)), "Incremental CodeGraph and derived query index records are complete");
-  addCheck("v1.16 efficiency schema", metrics.fixedMaterializationTargetMs === 5000 && metrics.stageRequiredFields.includes("cacheHit") && Object.prototype.hasOwnProperty.call(metrics.metrics, "controlPlaneReads"), "Efficiency metrics include repeatable stages and the 5-second target");
-  addCheck("v1.16 rule", ["Runtime Skill routing", "Incremental CodeGraph", "local query index", "SQLite is optional", "providerSessionId", "partial", "blocked"].every((term) => ruleText.includes(term)), "v1.16 capability rules are present");
-  addCheck("v1.16 scenario catalog", expectedIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("three batches"), "v1.16 scenarios 301-315 are catalogued");
-  const expectedRealBehavior = ["skill-route", "codegraph-cache", "incremental-update", "query-index", "efficiency-metrics"];
-  const scenarioResultsValid = evidence.scenarios.every((scenario, index) => scenario.scenarioId === expectedIds[index] && (scenario.result === "contract-passed" || scenario.result === "real-passed") && (scenario.result !== "real-passed" || scenario.sessionRef === evidence.sessionRef));
-  const plannedEvidence = evidence.evidenceType === "contract-regression" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && evidence.readyEligible === false;
-  const realHostEvidence = evidence.evidenceType === "real-session" && evidence.executionMode === "real-host" && evidence.realAiSessionVerified === true && evidence.sessionRefType === "host-thread" && typeof evidence.sessionRef === "string" && evidence.readyEligible === true && evidence.publishBlocked === false && Array.isArray(evidence.verifiedRealBehavior) && expectedRealBehavior.every((item) => evidence.verifiedRealBehavior.includes(item)) && evidence.sensitiveScan && evidence.sensitiveScan.status === "pass" && evidence.sensitiveScan.matches.length === 0;
-  addCheck("v1.16 behavior evidence", evidence.version === "1.16.0" && JSON.stringify(evidence.scenarioRange) === JSON.stringify([301, 315]) && evidence.scenarios.length === 15 && scenarioResultsValid && (plannedEvidence || realHostEvidence), "v1.16 behavior evidence is either honestly planned or backed by the recorded real host probe");
-}
-
-function main() {
-  requireFile("bin/xinyun-ai-init.js");
-  requireFile("init/xinyun-ai-init/README.md");
-  requireFile("init/xinyun-ai-init/version.json");
-
-  verifyPackageFiles();
-  verifyCliBoundary();
-  verifyInitRules();
-  verifyFrameworkRules();
-  verifyTeamTemplates();
-  verifyV16Contracts();
-  verifyV17Contracts();
-  verifyV171Contracts();
-  verifyV172Contracts();
-  verifyV173Contracts();
-  verifyV18Contracts();
-  verifyV19Contracts();
-  verifyV19SessionReuseText();
-  verifyV110Contracts();
-  verifyV112Contracts();
-  verifyV1121Contracts();
-  verifyV113Contracts();
-  verifyV114Contracts();
-  verifyV115Contracts();
-  verifyV116Contracts();
-  verifyTestScenarios();
-  verifyJsonAndMarkdown();
-
-  const failed = checks.filter((check) => !check.ok);
-
-  for (const check of checks) {
-    const prefix = check.ok ? "[PASS]" : "[FAIL]";
-    console.log(`${prefix} ${check.name}`);
-    if (!check.ok && check.detail) {
-      console.log(`       ${check.detail}`);
-    }
-  }
-
-  console.log("");
-  console.log(`[xinyun-ai-init verify] ${checks.length - failed.length}/${checks.length} checks passed.`);
-
-  if (failed.length > 0) {
-    process.exit(1);
-  }
-}
-
-main();
-