@pm_zhousl/xinyun-ai-init 2.0.0 → 3.0.0

package/scripts/verify-v2-package.js

@@ -1,210 +0,0 @@
-#!/usr/bin/env node
-
-const fs = require("fs");
-const path = require("path");
-
-const root = path.resolve(__dirname, "..");
-const initRoot = path.join(root, "init", "xinyun-ai-init");
-const checks = [];
-
-function read(relativePath) {
-  return fs.readFileSync(path.join(root, relativePath), "utf8");
-}
-
-function json(relativePath) {
-  return JSON.parse(read(relativePath));
-}
-
-function check(name, ok, detail = "") {
-  checks.push({ name, ok: Boolean(ok), detail });
-}
-
-function hasOwn(value, field) {
-  return Object.prototype.hasOwnProperty.call(value, field);
-}
-
-function findForbiddenKeys(value, forbidden, location = "$") {
-  const hits = [];
-  if (Array.isArray(value)) {
-    value.forEach((item, index) => hits.push(...findForbiddenKeys(item, forbidden, `${location}[${index}]`)));
-  } else if (value && typeof value === "object") {
-    for (const [key, item] of Object.entries(value)) {
-      if (forbidden.has(key)) hits.push(`${location}.${key}`);
-      hits.push(...findForbiddenKeys(item, forbidden, `${location}.${key}`));
-    }
-  }
-  return hits;
-}
-
-function walk(dir) {
-  const files = [];
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name);
-    if (entry.isDirectory()) files.push(...walk(full));
-    else files.push(full);
-  }
-  return files;
-}
-
-function verifyFiles() {
-  const required = [
-    "package.json",
-    "bin/xinyun-ai-init.js",
-    "init/xinyun-ai-init/README.md",
-    "init/xinyun-ai-init/version.json",
-    "init/xinyun-ai-init/rules/v2.0.0-shared-project-conversations.md",
-    "init/xinyun-ai-init/templates/manifest.template.json",
-    "init/xinyun-ai-init/templates/project-index.template.json",
-    "init/xinyun-ai-init/templates/current-task.template.md",
-    "init/xinyun-ai-init/templates/task-main.template.md",
-    "init/xinyun-ai-init/templates/task-index.template.json",
-    "init/xinyun-ai-init/templates/task-graph.template.json",
-    "init/xinyun-ai-init/templates/project-context.template.json",
-    "init/xinyun-ai-init/templates/conversation-registry.template.json",
-    "init/xinyun-ai-init/templates/conversation-binding.template.json",
-    "init/xinyun-ai-init/templates/conversation-stream-head.template.json",
-    "init/xinyun-ai-init/templates/conversation-event.template.json",
-    "init/xinyun-ai-init/templates/conversation-sync-cursor.template.json",
-    "init/xinyun-ai-init/templates/sync-check.template.json",
-    "init/xinyun-ai-init/templates/task-lease.template.json",
-    "init/xinyun-ai-init/templates/skill-runtime-route.template.json",
-    "init/xinyun-ai-init/templates/skill-run-record.template.json",
-    "init/xinyun-ai-init/templates/skills-assignments.template.json",
-    "init/xinyun-ai-init/templates/multi-conversation-migration.template.json",
-    "init/xinyun-ai-init/templates/project-status.template.json",
-    "init/xinyun-ai-init/templates/takeover-gate.template.json",
-    "init/xinyun-ai-init/templates/re-takeover-record.template.json",
-    "init/xinyun-ai-init/templates/provider-adapter.template.json",
-    "test-scenarios/v2.0.0-behavior-evidence.json",
-    "test-scenarios/v2.0.0-scenarios.md",
-    "test-scenarios/re-takeover-evidence.json",
-    "test-scenarios/re-takeover-scenarios.md",
-    "test-scenarios/multi-conversation-evidence.json",
-    "test-scenarios/multi-conversation-scenarios.md",
-    "scripts/verify-re-takeover-contract.js",
-    "scripts/verify-multi-conversation-contract.js"
-  ];
-  for (const file of required) check(`required:${file}`, fs.existsSync(path.join(root, file)), "missing");
-}
-
-function verifyJsonAndMarkdown() {
-  for (const file of walk(initRoot)) {
-    const relative = path.relative(root, file).replace(/\\/g, "/");
-    if (file.endsWith(".json")) {
-      try {
-        JSON.parse(fs.readFileSync(file, "utf8"));
-        check(`json:${relative}`, true);
-      } catch (error) {
-        check(`json:${relative}`, false, error.message);
-      }
-    }
-    if (file.endsWith(".md")) {
-      const fences = (fs.readFileSync(file, "utf8").match(/```/g) || []).length;
-      check(`markdown:${relative}`, fences % 2 === 0, "unbalanced code fence");
-    }
-  }
-}
-
-function verifyContracts() {
-  const packageJson = json("package.json");
-  const version = json("init/xinyun-ai-init/version.json");
-  const manifest = json("init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = json("init/xinyun-ai-init/templates/project-index.template.json");
-  const taskIndex = json("init/xinyun-ai-init/templates/task-index.template.json");
-  const taskGraph = json("init/xinyun-ai-init/templates/task-graph.template.json");
-  const projectContext = json("init/xinyun-ai-init/templates/project-context.template.json");
-  const conversationRegistry = json("init/xinyun-ai-init/templates/conversation-registry.template.json");
-  const binding = json("init/xinyun-ai-init/templates/conversation-binding.template.json");
-  const streamHead = json("init/xinyun-ai-init/templates/conversation-stream-head.template.json");
-  const event = json("init/xinyun-ai-init/templates/conversation-event.template.json");
-  const cursor = json("init/xinyun-ai-init/templates/conversation-sync-cursor.template.json");
-  const syncCheck = json("init/xinyun-ai-init/templates/sync-check.template.json");
-  const taskLease = json("init/xinyun-ai-init/templates/task-lease.template.json");
-  const route = json("init/xinyun-ai-init/templates/skill-runtime-route.template.json");
-  const run = json("init/xinyun-ai-init/templates/skill-run-record.template.json");
-  const assignments = json("init/xinyun-ai-init/templates/skills-assignments.template.json");
-  const skillRegistry = json("init/xinyun-ai-init/templates/skills-registry.template.json");
-  const migration = json("init/xinyun-ai-init/templates/multi-conversation-migration.template.json");
-  const projectStatus = json("init/xinyun-ai-init/templates/project-status.template.json");
-  const takeoverGate = json("init/xinyun-ai-init/templates/takeover-gate.template.json");
-  const reTakeover = json("init/xinyun-ai-init/templates/re-takeover-record.template.json");
-  const providerAdapter = json("init/xinyun-ai-init/templates/provider-adapter.template.json");
-  const agentProfile = json("init/xinyun-ai-init/templates/agent-profile.template.json");
-  const handoff = json("init/xinyun-ai-init/templates/handoff.template.json");
-  const initializationRecovery = json("init/xinyun-ai-init/templates/initialization-recovery.template.json");
-  const initializationStages = json("init/xinyun-ai-init/templates/initialization-stages.template.json");
-  const evidence = json("test-scenarios/v2.0.0-behavior-evidence.json");
-  const multiConversationEvidence = json("test-scenarios/multi-conversation-evidence.json");
-  const active = { manifest, projectIndex, taskIndex, taskGraph, projectContext, conversationRegistry, binding, streamHead, event, cursor, syncCheck, taskLease, route, run, assignments, skillRegistry, projectStatus, takeoverGate, reTakeover, providerAdapter, agentProfile, handoff, initializationRecovery, initializationStages };
-  const forbidden = new Set(["roleId", "roleTaskId", "roleSessionId", "providerSessionId", "configuredRoles", "sessionId"]);
-
-  check("package-version", packageJson.version === "2.0.0", packageJson.version);
-  check("bundle-version", version.version === "2.0.0" && version.schemaVersion === "2", JSON.stringify(version));
-  check("execution-model", Object.values(active).every((item) => item.executionModel === "shared-project-multi-conversation-runtime"));
-  for (const [name, value] of Object.entries(active)) {
-    const hits = findForbiddenKeys(value, forbidden);
-    check(`role-free:${name}`, hits.length === 0, hits.join(", "));
-  }
-
-  check("one-project-context", manifest.projectContextPath === "xinyun-ai/project-context.json" && projectContext.projectContextId === null);
-  check("multi-conversation", manifest.conversations.activeConversationLimit === null && conversationRegistry.conversationLimit === null);
-  check("re-takeover-context-execution-separation", manifest.reTakeover && manifest.reTakeover.executionRequiresConversationBindingEvidence === true && manifest.reTakeover.threadIdPolicy === "host-thread-candidate-only" && takeoverGate.contextStatus === "blocked" && takeoverGate.executionEligible === false);
-  check("fixed-role-routing-disabled", manifest.skills.fixedRoleRouting === false);
-  check("legacy-read-only", manifest.migration.legacyMode === "read-only" && manifest.migration.deleteLegacyMaterials === false && projectIndex.legacy.activeRuntime === false);
-  check("task-atomicity", manifest.tasking.atomicWriteRequired === true && taskIndex.consistency.writeMode === "transactional-atomic-replace");
-  check("task-four-file-contract", taskIndex.consistency.requiredFiles.length === 4);
-  check("task-idempotency", JSON.stringify(taskIndex.idempotency.keyFields) === JSON.stringify(["projectRootHash", "requestFingerprint", "parentTaskId", "taskType"]));
-  check("task-graph", taskGraph.acyclic === true && taskGraph.orphanTasksAllowed === false && taskGraph.edgeTypeEnum.includes("parent-of"));
-
-  const evidenceCategories = ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"];
-  check("conversation-evidence", JSON.stringify(manifest.conversations.requiredEvidenceCategories) === JSON.stringify(evidenceCategories));
-  check("conversation-default-read-only", binding.bindingStatus === "pending" && binding.readOnlyEligible === true && binding.writeEligible === false);
-  check("thread-not-provider", binding.legacyCompatibility.includes("never converted into a provider session id"));
-  check("single-writer-events", streamHead.writeMode === "single-writer-atomic-replace" && manifest.coordination.eventWriteMode === "per-conversation-single-writer");
-  check("vector-cursor", hasOwn(cursor, "streamPositions") && cursor.statusEnum.includes("recovery-required"));
-  check("silent-sync", syncCheck.silentWhenNoChanges === true && syncCheck.userNotificationRequired === false && syncCheck.triggerEnum.includes("user-message-received"));
-  check("task-lease", hasOwn(taskLease, "targetKeys") && hasOwn(taskLease, "baselineHashes") && taskLease.statusEnum.includes("conflict"));
-
-  check("route-task-facts", hasOwn(route, "taskFacts") && hasOwn(route, "selected") && hasOwn(route, "rejected") && hasOwn(route, "fallback") && hasOwn(route, "blocked"));
-  check("skill-run-fields", ["skillRunId", "skillId", "taskId", "projectContextId", "conversationBindingId", "syncCheckIdBeforeRun", "phase", "usedTools", "inputEvidence", "outputEvidence", "fallbackReason", "unverifiedScope", "startedAt", "finishedAt"].every((field) => hasOwn(run, field)));
-  check("self-check-default", run.reviewMode === "self-check");
-  check("assignment-role-free", !assignments.recordContract.requiredFields.includes("roleId"));
-  check("registry-task-based", skillRegistry.recordContract.requiredFields.includes("supportedTaskTypes") && !skillRegistry.recordContract.requiredFields.includes("allowedRoles"));
-
-  check("migration-transaction", ["beforeHash", "afterHash", "idempotencyKey", "legacyInventory", "preservedReadOnlyPaths", "rollbackPaths"].every((field) => hasOwn(migration, field)));
-  check("migration-no-delete", migration.phaseEnum.includes("recovery-required") && migration.phaseEnum.includes("manual-required"));
-  check("takeover-shared-context", projectStatus.requiredGates.includes("projectContext") && projectStatus.requiredGates.includes("incrementalSync") && takeoverGate.requiredGates.includes("sevenHostOperations"));
-  check("adapter-neutral", providerAdapter.conversationBindingContract === "adapter-neutral-v2" && providerAdapter.legacyProviderSessionIdPolicy.includes("never derive from a host thread"));
-  check("re-takeover-contract", reTakeover.contextStatusEnum.includes("context-ready") && reTakeover.conversationBindingDecisionEnum.includes("register-new") && reTakeover.executionEligible === false);
-
-  check("contract-evidence-version", evidence.version === "2.0.0" && evidence.evidenceType === "contract-regression");
-  check("contract-evidence-honest", evidence.realAiSessionVerified === false && evidence.readyEligible === false && evidence.publishBlocked === true);
-  check("contract-scenarios", Array.isArray(evidence.scenarios) && evidence.scenarios.length === 15 && evidence.scenarios.every((item, index) => item.scenarioId === 401 + index && item.result === "contract-passed"));
-  check("contract-sensitive-scan", evidence.sensitiveScan.status === "pass" && evidence.sensitiveScan.matches.length === 0);
-  check("multi-conversation-evidence", multiConversationEvidence.executionModel === "shared-project-multi-conversation-runtime" && multiConversationEvidence.scenarios.length === 12 && multiConversationEvidence.realCrossConversationVerified === false);
-
-  const readme = read("init/xinyun-ai-init/README.md");
-  const rule = read("init/xinyun-ai-init/rules/v2.0.0-shared-project-conversations.md");
-  const cli = read("bin/xinyun-ai-init.js");
-  check("readme-current-model", readme.includes("shared-project-multi-conversation-runtime") && readme.includes("legacy/read-only"));
-  check("rule-task-first", rule.includes("xinyun-ai/tasks/<taskId>.md") && rule.includes("control-file-read-write"));
-  check("rule-publish-boundary", rule.includes("npm 发布必须由用户单独授权"));
-  check("cli-boundary", cli.includes("This CLI only creates xinyun-ai-init/. It does not create xinyun-ai/ or modify business code."));
-
-  for (const historical of ["v1.14.0", "v1.15.0", "v1.16.0"]) {
-    const file = path.join(root, "test-scenarios", `${historical}-behavior-evidence.json`);
-    check(`historical-evidence:${historical}`, fs.existsSync(file) && `v${JSON.parse(fs.readFileSync(file, "utf8")).version}` === historical);
-  }
-}
-
-function main() {
-  verifyFiles();
-  verifyJsonAndMarkdown();
-  verifyContracts();
-  for (const item of checks) console.log(`[${item.ok ? "PASS" : "FAIL"}] ${item.name}${item.ok || !item.detail ? "" : `: ${item.detail}`}`);
-  const failed = checks.filter((item) => !item.ok);
-  console.log(`[v2 package] ${checks.length - failed.length}/${checks.length} checks passed`);
-  if (failed.length > 0) process.exitCode = 1;
-}
-
-main();

package/scripts/verify-v2-tarball.js

@@ -1,73 +0,0 @@
-#!/usr/bin/env node
-
-const fs = require("fs");
-const path = require("path");
-const zlib = require("zlib");
-
-function arg(name) {
-  const index = process.argv.indexOf(name);
-  return index >= 0 ? process.argv[index + 1] || null : null;
-}
-
-function fail(message) {
-  const result = { status: "error", checks: [{ name: "tarball-entry-safety", actual: message }] };
-  if (process.argv.includes("--json")) console.log(JSON.stringify(result));
-  else console.error(`[v2 tarball] ${message}`);
-  process.exitCode = 2;
-}
-
-function isZeroBlock(block) {
-  return block.every((byte) => byte === 0);
-}
-
-function stringField(block, offset, length) {
-  return block.subarray(offset, offset + length).toString("utf8").replace(/\0.*$/, "");
-}
-
-function octalField(block, offset, length) {
-  const value = stringField(block, offset, length).trim();
-  return value ? Number.parseInt(value, 8) : 0;
-}
-
-function validateEntry(name, type) {
-  if (!name) throw new Error("Unsafe tarball entry: empty path");
-  if (name.includes("\\")) throw new Error(`Unsafe tarball entry: backslash path ${name}`);
-  if (name.startsWith("/") || /^[A-Za-z]:/.test(name)) throw new Error(`Unsafe tarball entry: absolute path ${name}`);
-  const segments = name.split("/");
-  if (segments.includes("..")) throw new Error(`Unsafe tarball entry: path traversal ${name}`);
-  if (type === "1") throw new Error(`unsupported tar entry: hard link ${name}`);
-  if (type === "2") throw new Error(`unsupported tar entry: symbolic link ${name}`);
-  if (!["", "0", "5"].includes(type)) throw new Error(`unsupported tar entry type ${type} for ${name}`);
-}
-
-function main() {
-  const tarballPath = arg("--tarball");
-  if (!tarballPath || !fs.existsSync(path.resolve(tarballPath))) {
-    fail("tarball path is required");
-    return;
-  }
-  try {
-    const buffer = zlib.gunzipSync(fs.readFileSync(path.resolve(tarballPath)));
-    let offset = 0;
-    let entries = 0;
-    while (offset + 512 <= buffer.length) {
-      const header = buffer.subarray(offset, offset + 512);
-      if (isZeroBlock(header)) break;
-      const name = stringField(header, 0, 100);
-      const prefix = stringField(header, 345, 155);
-      const fullName = prefix ? `${prefix}/${name}` : name;
-      const type = String.fromCharCode(header[156] || 0).replace("\0", "");
-      validateEntry(fullName, type);
-      const size = octalField(header, 124, 12);
-      offset += 512 + Math.ceil(size / 512) * 512;
-      entries += 1;
-    }
-    const result = { status: "pass", checks: [{ name: "tarball-entry-safety", actual: `${entries} safe entries` }] };
-    if (process.argv.includes("--json")) console.log(JSON.stringify(result));
-    else console.log(`[v2 tarball] PASS: ${entries} safe entries`);
-  } catch (error) {
-    fail(error.message);
-  }
-}
-
-main();

package/test-scenarios/README.md

@@ -1,130 +0,0 @@
-# xinyun-ai-init 测试场景
-
-本目录用于让其他 AI 或人工审查员测试 `@pm_zhousl/xinyun-ai-init` 初始化包的真实使用效果。
-
-当前版本必测场景为 `scenarios.md` 的 1-133，106 和 119 为观察项；v1.10.0 新增接管门禁场景 120-133，详见 `v1.10.0-scenarios.md`。
-
-## 使用方式
-
-### 1. 本地待发布版本测试
-
-用于测试当前工作区尚未发布到 npm 的包体。
-
-1. 准备一个临时测试项目。
-2. 在测试项目根目录执行：
-
-```powershell
-node E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\bin\xinyun-ai-init.js --force --no-version-check
-```
-
-3. 将以下一句话发给 AI：
-
-```md
-请执行 `node E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\bin\xinyun-ai-init.js --force --no-version-check`，然后读取 `xinyun-ai-init/README.md`，按其中规则初始化或升级当前项目。
-```
-
-4. 按 `scenarios.md` 中的场景逐条测试。
-5. 将结果填写到 `review-template.md`。
-
-### 2. 打包版本测试
-
-用于确认 `npm pack` 后的 tarball 是否包含完整文件。
-
-```powershell
-cd E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm
-npm run verify:init
-npm pack
-```
-
-随后在临时项目中使用 tarball 测试。注意不要直接执行 `npx <tarball> --force`，该形式可能不会正确调用 bin。推荐：
-
-```powershell
-npx --yes --package E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\pm_zhousl-xinyun-ai-init-1.10.1.tgz xinyun-ai-init --force --no-version-check
-```
-
-### 3. 线上回归测试
-
-发布后再测试 npm 线上最新版本。
-
-```powershell
-npx --yes @pm_zhousl/xinyun-ai-init@latest --force
-```
-
-将以下一句话发给 AI：
-
-```md
-请执行 `npx --yes @pm_zhousl/xinyun-ai-init@latest --force`，然后读取 `xinyun-ai-init/README.md`，按其中规则初始化或升级当前项目。
-```
-
-## 测试分级
-
-- 必测场景：用于判断当前版本是否可以发布。
-- 观察场景：用于收集后续优化建议，不作为当前版本发布阻断项。
-
-当前 v1.8 既有必测场景为 `scenarios.md` 的 1-105；v1.9 新增 107-118。
-
-当前观察场景为 `scenarios.md` 的 106 和 119。Skill 触发机制仍在后续候选池中，不进入当前可发布范围。
-
-v1.9.0 的 107-118 行为证据必须保存在 `v1.9.0-behavior-evidence.json`，每项包含输入、期望与实际输出、控制面 before/after 快照及 hash、业务文件与控制文件变更分离、禁止操作证明和敏感扫描。该报告不能用 `verify:init` 或 `verify:rules` 的结构结果替代。
-
-## v1.7 规则包一致性校验
-
-发布前执行：
-
-```powershell
-npm run verify:rules
-npm run verify:rules -- --json
-npm run verify:rules -- --tarball .\pm_zhousl-xinyun-ai-init-1.10.1.tgz
-npm run verify:rules:security
-```
-
-## 自动校验
-
-发布前必须先执行：
-
-```powershell
-cd E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm
-npm run verify:init
-```
-
-自动校验负责检查包体文件、模板关键规则、JSON 可解析、Markdown 代码块闭合和 CLI 边界。人工场景负责验证 AI 在真实项目里的行为。
-
-## v1.7.2 角色任务可见性回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.7.2-scenarios.md`。重点验证已归档的 v1.7.1 项目能补建 5 个 `role-execution` 任务，活动任务不被错误显示为 idle，重复升级按逐角色幂等键复用，索引中断后可恢复。
-
-## v1.7.3 Codex 角色会话回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.7.3-scenarios.md`。重点验证 Codex 主会话在 5 个 `role-execution` 本地任务之后创建或明确降级 5 个真实角色子会话，真实 `sessionId` 回写一致，创建后先进入只读 onboarding，重复升级复用，宿主不支持时使用 `local-degraded-no-fake-session-id` 且不得伪造 sessionId。
-
-## v1.10.2 真实角色任务会话绑定回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.10.2-scenarios.md`。重点验证独立主调度会话、5 个真实角色任务会话、`hostThreadId`/`hostSessionId`/项目 `sessionId` 映射、v1.9 八字段项目隔离幂等键、授权门禁、真实请求/响应证据和失败恢复。只有五个角色均有完整真实证据时才能进入 `ready`；不能把宿主线程 ID、任务 ID 或回放材料当作项目 `sessionId`。
-
-## v1.11.0 初始化加速回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.11.0-scenarios.md`。重点验证固定基础文件预置、模板哈希冲突保护、分阶段初始化、公共项目快照、最多 3 个角色会话并行、缓存复用、断点恢复、状态域隔离和最终门禁。主项目 `xinyun-ai/`、主项目任务和主项目会话不得进入 npm tarball。
-
-## v1.14.0 智能体核心能力回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.14.0-scenarios.md` 的 186-205。重点验证智能体身份/能力声明、统一接管门禁、主会话总控和任务图、共享事实读写、冲突暂停、会话命名与安全复用、最终交付门禁和 v1.13.1 兼容性。真实 provider 行为不可用时，使用明确的 `local-degraded`/`localSessionId` 证据；该模式允许发布规则包，但项目状态必须保持 `partial`、`blocked` 或 `manual-required`，不得变为 `ready`。
-
-## 审查原则
-
-## v1.8 多会话协作回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.8.0-scenarios.md`。重点验证四个阶段分别通过：A 的共享事实/事务状态，B 的 Skill 路由和 `assignmentStatus` 映射，C 的前端 audit-only/refactor-now 边界，D 的临时会话并发/occupancy 恢复。真实 AI 行为报告必须保存 before/after、changedFiles、禁止操作和敏感扫描结果。
-
-- 重点看 AI 行为是否符合规则，不只看文件是否生成。
-- 初始化应轻量，不做全量扫描。
-- 改代码前必须先出方案并等待确认。
-- 旧 AI 沉淀只能先梳理、分类、待确认，不能直接当作项目事实。
-- 普通聊天、无关问题、被否定方向不能沉淀。
-- 观察场景可以记录问题和建议，但不要因为观察场景未完全满足而判定当前版本不可发布。
-- 本地待发布版本、打包版本、线上 `@latest` 要分开测试，避免把线上旧版本误判为本地整改结果。
-
-## v1.9 项目会话与数据库回归
-
-除 `scenarios.md` 外，发布前必须逐条执行 `v1.9.0-scenarios.md`。必须保留项目身份规范化、会话候选排序与复用、中文名称、技术全景 ready/partial、packet stale、数据库 sql-only 和授权审计证据；不得执行 npm publish、Git 写操作、数据库连接或真实业务修改。
-
-

package/test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/README.md

@@ -1,23 +0,0 @@
-# v1.10.0 Takeover Gate Fixture
-
-This fixture is synthetic and isolated from any business project. It exists so
-the v1.10 behavior material has a real, packageable fixture boundary.
-
-It must only be used for rule replay and evidence-shape checks. It does not
-contain a real Codex role session, a database, SQL, Git metadata, credentials,
-or business source files. A replay result is never evidence of real AI
-acceptance.
-
-For real-session evidence, provide an external host export to
-`scripts/collect-v1.10-evidence.js`. The export must contain host-returned
-session IDs, interaction logs, and before/after control-plane snapshots. The
-collector rejects missing or synthetic session IDs and otherwise records
-`not-verified`.
-
-Expected synthetic control-plane states:
-
-- `before/project-status.json`: `blocked` with
-  `required-role-session-not-created`.
-- `after/project-status.json`: remains `blocked` when any required role
-  session is absent.
-- `before/after` contain no business files and no sensitive values.

package/test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json

@@ -1,7 +0,0 @@
-{
-  "projectStatus": "blocked",
-  "executionEligible": false,
-  "blockedReason": "required-role-session-not-created",
-  "roleSessionCount": 0,
-  "businessCodeChanged": "unknown"
-}

package/test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json

@@ -1,7 +0,0 @@
-{
-  "projectStatus": "blocked",
-  "executionEligible": false,
-  "blockedReason": "required-role-session-not-created",
-  "roleSessionCount": 0,
-  "businessCodeChanged": "unknown"
-}

package/test-scenarios/fixtures/v1.9.0-behavior-fixture/README.md

@@ -1,9 +0,0 @@
-# v1.9.0 Behavior Fixture
-
-This fixture is isolated from real business projects. It contains only synthetic control-plane state used to record v1.9.0 AI behavior decisions.
-
-- Business files: none
-- Database connection: forbidden
-- SQL execution: forbidden
-- Git write operations: forbidden
-- Sensitive values: synthetic markers are excluded from persistent evidence

package/test-scenarios/multi-conversation-evidence.json

@@ -1,26 +0,0 @@
-{
-  "schemaVersion": 1,
-  "version": "2.0.0",
-  "evidenceType": "multi-conversation-contract",
-  "executionModel": "shared-project-multi-conversation-runtime",
-  "realCrossConversationVerified": false,
-  "readyEligible": false,
-  "publishBlocked": true,
-  "blockedReason": "real-host-cross-conversation-evidence-required",
-  "scenarios": [
-    {"scenarioId": 601, "name": "one-project-context-many-conversations", "result": "contract-passed"},
-    {"scenarioId": 602, "name": "per-conversation-single-writer-stream", "result": "contract-passed"},
-    {"scenarioId": 603, "name": "interaction-triggered-head-check", "result": "contract-passed"},
-    {"scenarioId": 604, "name": "no-change-silent-path", "result": "contract-passed"},
-    {"scenarioId": 605, "name": "incremental-event-consumption", "result": "contract-passed"},
-    {"scenarioId": 606, "name": "meaningful-result-auto-writeback", "result": "contract-passed"},
-    {"scenarioId": 607, "name": "vector-cursor-recovery", "result": "contract-passed"},
-    {"scenarioId": 608, "name": "event-chain-corruption-blocked", "result": "contract-passed"},
-    {"scenarioId": 609, "name": "target-lease-concurrency", "result": "contract-passed"},
-    {"scenarioId": 610, "name": "baseline-change-blocked", "result": "contract-passed"},
-    {"scenarioId": 611, "name": "thread-reference-not-provider-session", "result": "contract-passed"},
-    {"scenarioId": 612, "name": "cross-project-isolation", "result": "contract-passed"}
-  ],
-  "sensitiveScan": {"status": "pass", "matches": []},
-  "unverifiedScope": ["real host cross-conversation result propagation", "real no-change silent check", "real concurrent lease conflict and recovery"]
-}

package/test-scenarios/multi-conversation-scenarios.md

@@ -1,16 +0,0 @@
-# v2.0.0 多对话共享合同场景
-
-- 601：一个项目只有一个 `projectContextId`，可以登记多个活动对话。
-- 602：每个对话只写自己的不可变事件流。
-- 603：收到用户消息时比较所有活动流 head 与本对话向量游标。
-- 604：没有新增事件时结果为 `no-changes`，不要求向用户提示。
-- 605：发现新增事件时只读取新增序号和受影响事实。
-- 606：对话完成有长期价值的任务结果后自动写入事件流和事实源。
-- 607：对话中断后可按各流序号恢复游标，不重复消费事件。
-- 608：事件缺失、哈希链断裂、head 倒退或游标超前时阻断。
-- 609：不同目标租约允许并行，重叠目标租约进入冲突。
-- 610：写入前基线哈希变化时阻断，不静默覆盖。
-- 611：thread ID 只作为 `host-thread` 引用，不成为 `providerSessionId`。
-- 612：跨项目绑定、事件、游标和租约均拒绝复用。
-
-这些场景是静态合同证据。至少两个真实宿主对话之间的结果传播、静默检查和并发冲突仍需真实行为证据。

package/test-scenarios/re-takeover-evidence.json

@@ -1,20 +0,0 @@
-{
-  "version": "2.0.0",
-  "evidenceType": "re-takeover-contract",
-  "executionModel": "shared-project-multi-conversation-runtime",
-  "contextAndExecutionSeparated": true,
-  "threadIdNeverProviderSessionId": true,
-  "scenarios": [
-    {"scenarioId": 501, "name": "unchanged-project", "result": "contract-passed"},
-    {"scenarioId": 502, "name": "source-changed-incremental", "result": "contract-passed"},
-    {"scenarioId": 503, "name": "control-plane-conflict", "result": "contract-passed"},
-    {"scenarioId": 504, "name": "new-thread-candidate", "result": "contract-passed"},
-    {"scenarioId": 505, "name": "reuse-existing-main-session", "result": "contract-passed"},
-    {"scenarioId": 506, "name": "project-scope-conflict", "result": "contract-passed"},
-    {"scenarioId": 507, "name": "interrupted-takeover-recovery", "result": "contract-passed"},
-    {"scenarioId": 508, "name": "sensitive-and-legacy-isolation", "result": "contract-passed"}
-  ],
-  "sensitiveScan": {"status": "pass", "matches": []},
-  "realHostVerified": false,
-  "unverifiedScope": ["real host re-takeover behavior", "real provider session reuse"]
-}

package/test-scenarios/re-takeover-scenarios.md

@@ -1,33 +0,0 @@
-# 新对话重新接管场景
-
-## RT-001 未变化项目
-
-新对话进入正确项目根目录，核心控制面和快照均存在且源哈希未变化。预期使用增量接管，`contextStatus=context-ready`，`understandingStatus` 保留或提升，不能因没有新宿主会话证据而伪造执行资格。
-
-## RT-002 源码发生变化
-
-项目源码或配置哈希发生变化。预期只扫描变化路径及其相关入口，记录 `changedPaths` 和新的快照哈希，并将理解状态标记为 `expanded` 或 `stale`，不能继续使用旧事实作为已验证事实。
-
-## RT-003 控制面不一致
-
-`current-task.md`、任务索引和任务图对当前任务的描述不一致。预期接管状态为 `blocked`，只记录冲突和恢复动作，不选择 Skill，不修改业务文件。
-
-## RT-004 新 thread 建立独立对话绑定
-
-新对话拥有宿主 thread ID，但没有真实 provider 会话证据。预期创建独立 `conversationBindingId`，仅记录 `sessionRefType=host-thread` 和该 thread 引用，`providerSessionId` 保持 `null`。本地控制面读取和增量同步可以继续，依赖 provider canonical session 的操作保持不可用，不得伪造 provider 身份。
-
-## RT-005 对话绑定复用与增量同步
-
-同一 thread 的既有对话绑定、项目根哈希、cwd 和范围均匹配时，预期幂等复用原 `conversationBindingId` 和向量游标，不创建重复绑定。不同 thread 接入同一项目时创建新的独立绑定，比较所有事件流 head，并只消费游标之后的新事件。
-
-## RT-006 项目范围错误
-
-对话当前 cwd、项目根哈希或仓库范围与控制面不匹配。预期进入 `blocked` 或 `manual-required`，不得读取或写回其他项目事实。
-
-## RT-007 接管中断恢复
-
-接管记录在快照写回前中断。预期根据 `takeoverId`、旧快照哈希和阶段证据恢复，不产生半写入的项目索引，不丢失原有任务状态。
-
-## RT-008 敏感信息和历史隔离
-
-扫描发现敏感信息或旧角色历史材料。预期敏感扫描阻断交付；旧角色材料仅登记为 `legacy/read-only`，不进入新路由，也不复制其他项目事实。