@shundoo-ai/dsh-cosmic 1.0.21 → 1.0.22

package/skills/cosmic-build/scripts/test/fixtures/operation-entry-field-prepare.java

@@ -0,0 +1,78 @@
+package kd.bos.app.uhyl.bfy11.operate;
+
+import java.util.List;
+
+import kd.bos.dataentity.entity.DynamicObject;
+import kd.bos.dataentity.entity.DynamicObjectCollection;
+import kd.bos.entity.ExtendedDataEntity;
+import kd.bos.entity.plugin.AbstractOperationServicePlugIn;
+import kd.bos.entity.plugin.AddValidatorsEventArgs;
+import kd.bos.entity.plugin.PreparePropertysEventArgs;
+import kd.bos.entity.validate.AbstractValidator;
+
+/**
+ * 定场单提交校验操作插件。
+ *
+ * 提交时逐行校验订场明细：
+ * 1. 结束时间必须晚于开始时间
+ * 2. 时段必须在营业时间 08:00–22:00 之内
+ *
+ * 批量提交多张单时每张单独立判断，合格的照常提交，不合格的给出原因。
+ */
+public class UhylBookingOrderOpPlugin extends AbstractOperationServicePlugIn {
+
+    private static final String ENTRY_COLLECTION = "uhyl_book_order_detail";
+    private static final String FIELD_START_TIME = "uhyl_start_time";
+    private static final String FIELD_END_TIME = "uhyl_end_time";
+    private static final String FIELD_BILLNO = "billno";
+
+    /** 营业开始时间 08:00:00（午夜后秒数） */
+    private static final int BUSINESS_OPEN_SECONDS = 8 * 3600;
+    /** 营业结束时间 22:00:00（午夜后秒数） */
+    private static final int BUSINESS_CLOSE_SECONDS = 22 * 3600;
+
+    @Override
+    public void onPreparePropertys(PreparePropertysEventArgs e) {
+        super.onPreparePropertys(e);
+        List<String> fieldKeys = e.getFieldKeys();
+        fieldKeys.add(FIELD_BILLNO);
+        fieldKeys.add(ENTRY_COLLECTION);
+    }
+
+    @Override
+    public void onAddValidators(AddValidatorsEventArgs e) {
+        super.onAddValidators(e);
+        e.addValidator(new AbstractValidator() {
+            @Override
+            public void validate() {
+                for (ExtendedDataEntity entity : this.getDataEntities()) {
+                    DynamicObject dataEntity = entity.getDataEntity();
+                    String billNo = dataEntity.getString(FIELD_BILLNO);
+                    DynamicObjectCollection entryRows =
+                        dataEntity.getDynamicObjectCollection(ENTRY_COLLECTION);
+                    if (entryRows == null || entryRows.isEmpty()) {
+                        continue;
+                    }
+                    for (int i = 0; i < entryRows.size(); i++) {
+                        DynamicObject row = entryRows.get(i);
+                        int rowNum = i + 1;
+                        int startTime = row.getInt(FIELD_START_TIME);
+                        int endTime = row.getInt(FIELD_END_TIME);
+
+                        if (endTime <= startTime) {
+                            this.addErrorMessage(entity,
+                                "单据[" + billNo + "]第" + rowNum + "行：结束时间必须晚于开始时间");
+                        }
+
+                        if (startTime < BUSINESS_OPEN_SECONDS
+                            || endTime > BUSINESS_CLOSE_SECONDS) {
+                            this.addErrorMessage(entity,
+                                "单据[" + billNo + "]第" + rowNum
+                                + "行：时段必须在营业时间 08:00–22:00 之内");
+                        }
+                    }
+                }
+            }
+        });
+    }
+}

package/skills/cosmic-build/scripts/test/test_add_field_required_contract.py

@@ -73,3 +73,15 @@ print(json.dumps(cmd_formactions._verify_add_field_contract(
         assert result["ok"] is False, scripts
         assert "mustInput" in result["scope"], scripts
         assert result["mustInputReadBack"]["observed"] is False, scripts
+
+
+def test_omitted_type_is_rejected_before_target_lookup_or_write():
+    for scripts in SCRIPT_TREES:
+        result = _run(scripts, """
+result = cmd_formactions.do_add_field({}, None, "selected_form", "New business field", "business_field")
+print(json.dumps(result))
+""")
+        assert result["status"] is False
+        assert result["errorCode"] == "FIELD_SPEC_INVALID"
+        assert result["data"]["writeAttempted"] is False
+        assert "field-type" in result["message"]

package/skills/cosmic-build/scripts/test/test_batch5_drift_governance.py

@@ -11,7 +11,10 @@ APP_BUILD_ROOT = Path(__file__).resolve().parents[2]
 
 
 def _load_sync_module():
-    path = APP_BUILD_ROOT / "scripts/sync_generated_locale_assets.py"
+    # 同步器按设计只发布在规范树；显式运行中文镜像测试也使用同一个同步器。
+    root = next(root for root in (APP_BUILD_ROOT, *APP_BUILD_ROOT.parents)
+                if (root / "scripts" / "sync_generated_locale_assets.py").is_file())
+    path = root / "scripts" / "sync_generated_locale_assets.py"
     spec = importlib.util.spec_from_file_location("sync_generated_locale_assets", path)
     assert spec is not None and spec.loader is not None
     module = importlib.util.module_from_spec(spec)
@@ -39,11 +42,22 @@ class GeneratedLocaleAssetsTest(unittest.TestCase):
              "kingscript-gate-v1", "mcp-server-v1", "metalog-v1",
              "operation-contract-harvest-v1", "operation-write-v1",
              "plugin-handoff-v1", "property-policy-contract-v1", "python-runtime-v1",
-             "report-tests-v1", "report-write-v1", "rule-write-v1", "execution-recovery-v1", "plugin-handoff-query-v1"},
+             "report-tests-v1", "report-write-v1", "rule-write-v1", "execution-recovery-v1", "plugin-handoff-query-v1",
+             "list-execution-v1", "report-repair-v1"},
             set(result["families"]),
         )
         self.assertEqual(len(result["files"]), result["counts"]["in_sync"])
 
+    def test_report_repair_sync_preserves_localized_runtime_diagnostics(self) -> None:
+        module = _load_sync_module()
+        generated = {item for group in module.GENERATED_FAMILIES.values() for item in group}
+        for name in ("cmd_apps.py", "validators.py"):
+            self.assertNotIn(f"skills/cosmic-meta-api/scripts/_core/{name}", generated)
+        self.assertIn("skills/cosmic-meta-api/scripts/test/test_metadata_unchanged_fail_closed.py",
+                      module.GENERATED_FAMILIES["report-repair-v1"])
+        result = module.inspect(["report-repair-v1"])
+        self.assertTrue(result["ok"], result)
+
     def test_execution_recovery_mirrors_are_machine_synced(self) -> None:
         module = _load_sync_module()
         result = module.inspect(["execution-recovery-v1"])
@@ -60,6 +74,11 @@ class GeneratedLocaleAssetsTest(unittest.TestCase):
         module = _load_sync_module()
         family = module.GENERATED_FAMILIES["report-tests-v1"]
         self.assertIn("scripts/test/test_plugin_handoff.py", family)
+        self.assertIn("scripts/test/test_dcs_code_gate.py", family)
+        self.assertIn("scripts/dcs_code_gate.py", module.GENERATED_FAMILIES["plugin-handoff-v1"])
+        self.assertIn("scripts/dcs-rule-catalog.json", module.GENERATED_FAMILIES["plugin-handoff-v1"])
+        result = module.inspect(["plugin-handoff-v1"])
+        self.assertTrue(result["ok"], result)
         for _family, source, target in module.iter_assets(["report-tests-v1"]):
             with self.subTest(asset=source.name):
                 self.assertTrue(target.is_file(), f"{source.name} has no zh mirror")
@@ -114,6 +133,8 @@ class ReportSingleSourceTest(unittest.TestCase):
         expected = {
             "setReportColumns": "columns",
             "addReportColumns": "columns",
+            # Single-leaf deletion has its own minimal payload: one exact fieldKey, never a column set.
+            "removeReportColumn": "columnRemoval",
             "setReportFilters": "filters",
             "setReportSorts": "sorts",
             "registerReportPlugin": "plugin",

package/skills/cosmic-build/scripts/test/test_compile_plugin_source.py

@@ -69,6 +69,7 @@ def test_timeprop_hints_survive_single_and_batch_handoff_without_false_blocking(
     source = project_root / "src" / "main" / "java" / "demo" / "Booking.java"
     source.parent.mkdir(parents=True)
     source.write_text(
+        'package demo;\n'
         'class Booking {\n'
         '  private static final String START = "start_time";\n'
         '  void check(DynamicObject row) { row.getDate(START); }\n'
@@ -196,10 +197,10 @@ BUILD FAILED
 
     assert errors == [
         {"file": "/tmp/DailyTask.java", "line": 7,
-         "message": "程序包kd.bos.datahelper不存在", "detail": []},
+         "message": "程序包kd.bos.datahelper不存在", "detail": ["import kd.bos.datahelper.BusinessDataServiceHelper;", "^"]},
         {"file": "/tmp/DailyTask.java", "line": 14,
          "message": "cannot find symbol",
-         "detail": ["symbol:   variable SaveServiceHelper", "location: class DailyTask"]},
+         "detail": ["SaveServiceHelper.save(values);", "^", "symbol:   variable SaveServiceHelper", "location: class DailyTask"]},
     ]
 
 
@@ -399,6 +400,87 @@ def test_compile_refuses_a_qfilter_operator_written_as_a_string_literal(tmp_path
     assert not (project_root / ".temp").exists()
 
 
+def test_compile_refuses_swapped_operation_arguments_even_without_javac(tmp_path, monkeypatch):
+    project = tmp_path / "module"
+    source = project / "src" / "main" / "java" / "demo" / "DeleteFlock.java"
+    source.parent.mkdir(parents=True)
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda write_derived: {
+        "status": "disabled", "compile": False,
+    })
+    for option in ("", ", OperateOption.create()"):
+        source.write_text('''package demo;
+import kd.bos.servicehelper.BusinessDataServiceHelper;
+import kd.bos.servicehelper.operation.OperationServiceHelper;
+import kd.bos.dataentity.entity.DynamicObject;
+''' + ('import kd.bos.dataentity.OperateOption;\n' if option else '') + '''class DeleteFlock {
+    private static final String FLOCK_ENTITY = "demo_flock";
+    void run(Object id) {
+        DynamicObject flk = BusinessDataServiceHelper.loadSingle(id, FLOCK_ENTITY);
+        OperationServiceHelper.executeOperate(FLOCK_ENTITY, "delete", new DynamicObject[]{flk}''' + option + ''');
+    }
+}
+''', encoding="utf-8")
+        result = compile_plugin_source.compile_source(
+            project, source, "DeleteFlock", 30, app_root=tmp_path / "app",
+            plugin_type="operation", form_number="demo_receipt", operation_keys=["delete"],
+            description="删除关联记录",
+        )
+        assert result["status"] is False, result
+        assert "PLUGIN_SOURCE_OPERATION_ARGUMENT_ORDER" in result["errorCodes"]
+        assert not (tmp_path / "app" / "archive.json").exists()
+        assert not (project / ".temp").exists()
+
+
+def test_unverified_operation_overload_cannot_be_archived_when_compilation_is_disabled(tmp_path, monkeypatch):
+    project = tmp_path / "module"
+    source = project / "src" / "main" / "java" / "demo" / "OperationCall.java"
+    source.parent.mkdir(parents=True)
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda write_derived: {
+        "status": "disabled", "compile": False,
+    })
+    for option, expected in (("", False), (", option", True)):
+        source.write_text('''package demo;
+import kd.bos.servicehelper.operation.OperationServiceHelper;
+import kd.bos.dataentity.OperateOption;
+class OperationCall {
+    Object run(Object id, OperateOption option) {
+        return OperationServiceHelper.executeOperate("delete", "demo_flock", new Object[]{id}''' + option + ''');
+    }
+}''', encoding="utf-8")
+        result = compile_plugin_source.compile_source(
+            project, source, "OperationCall", 30, app_root=tmp_path / "app",
+            plugin_type="operation", form_number="demo_receipt", operation_keys=["delete"],
+            description="关联记录删除",
+        )
+        assert result["status"] is expected, result
+        if not expected:
+            assert result["errorCode"] == "PLUGIN_SOURCE_OPERATION_OVERLOAD_UNVERIFIED"
+            assert not (tmp_path / "app" / "archive.json").exists()
+            assert not (project / ".temp").exists()
+            continue
+        assert result["compileSkipped"] is True
+        assert result["loadingVerification"]["runtimeVerified"] is False
+
+
+def test_operation_contract_cli_blocks_proven_swap_and_reports_unknown_overload(tmp_path):
+    source = tmp_path / "OperationCall.java"
+    source.write_text('''import kd.bos.servicehelper.BusinessDataServiceHelper;
+import kd.bos.servicehelper.operation.OperationServiceHelper;
+class OperationCall {
+    void run(Object id) {
+        Object flk = BusinessDataServiceHelper.loadSingle(id, "demo_flock");
+        OperationServiceHelper.executeOperate("demo_flock", "delete", new Object[]{id});
+    }
+}''', encoding="utf-8")
+    run = subprocess.run([sys.executable, str(SCRIPTS / "platform_api_contract.py"),
+                          "--source-path", str(source)], capture_output=True, text=True)
+    result = json.loads(run.stdout)
+    assert run.returncode == 2
+    assert result["errorCode"] == "PLUGIN_SOURCE_OPERATION_ARGUMENT_ORDER"
+    assert result["issues"][0]["line"] == 6
+    assert result["sourceWarnings"][0]["errorCode"] == "PLUGIN_SOURCE_OPERATION_OVERLOAD_UNVERIFIED"
+
+
 def test_compile_refuses_a_member_name_that_does_not_exist(tmp_path, monkeypatch):
     project_root = tmp_path / "module"
     source = project_root / "src" / "main" / "java" / "demo" / "EntryCountFormPlugin.java"
@@ -574,10 +656,11 @@ def test_compile_accepts_the_registered_return_type(tmp_path, monkeypatch):
         "import kd.bos.dataentity.metadata.dynamicobject.DynamicObjectType;\n"
         "import kd.bos.servicehelper.BusinessDataServiceHelper;\n"
         "public class Task {\n"
-        "    public void run(Object[] pks, DynamicObjectType type) {\n"
+        "    public Object[] run(Object[] pks, DynamicObjectType type) {\n"
         "        DynamicObject[] rows = BusinessDataServiceHelper.load(pks, type);\n"
         "        Map<Object, DynamicObject> cached = BusinessDataServiceHelper.loadFromCache(pks, type);\n"
         "        DynamicObject one = BusinessDataServiceHelper.loadSingle(pks[0], type);\n"
+        "        return new Object[] {rows, cached, one};\n"
         "    }\n"
         "}\n",
         encoding="utf-8",
@@ -596,6 +679,78 @@ def test_compile_accepts_the_registered_return_type(tmp_path, monkeypatch):
     assert result["compileSkipped"] is True
 
 
+def test_compile_refuses_what_the_dcs_deployment_gate_would_reject(tmp_path, monkeypatch):
+    """DCS rejects the packaged module after delivery; the same rules stop it here, before archive."""
+    project_root = tmp_path / "module"
+    source = project_root / "src" / "main" / "java" / "demo" / "Sync.java"
+    app_root = tmp_path / "app" / "uhyl_demo"
+    source.parent.mkdir(parents=True)
+    app_root.mkdir(parents=True)
+    body = (
+        "package demo;\n"
+        "import java.util.HashMap;\n"
+        "import java.util.Map;\n"
+        "public class Sync {\n"
+        "    private static final Map<String, Object> CACHE = new HashMap<>();\n"
+        "    public Object read(String key) {\n"
+        "        %s\n"
+        "        return CACHE.get(key);\n"
+        "    }\n"
+        "}\n"
+    )
+    source.write_text(body % "System.out.println(key);", encoding="utf-8")
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda write_derived: {
+        "status": "disabled", "compile": False,
+    })
+
+    def compile_it():
+        return compile_plugin_source.compile_source(
+            project_root, source, "Sync", 30,
+            app_root=app_root, plugin_type="task", form_number="uhyl_demo",
+            operation_keys=[], description="sync cache",
+        )
+
+    result = compile_it()
+
+    assert result["status"] is False
+    assert result["errorCode"] == "PLUGIN_SOURCE_DCS_RULE_VIOLATION"
+    codes = {code for issue in result["issues"] for code in issue["ruleCodes"]}
+    assert {"CVE-KD-0056-02", "java:S106"} <= codes
+    assert all(issue["fix"] and issue["dcsRisk"] for issue in result["issues"])
+    assert not (app_root / "archive.json").exists()
+    # Commented-out code is advisory: it is reported but does not stop delivery.
+    source.write_text((body % "// return CACHE.get(key.trim());").replace(
+        "    private static final Map<String, Object> CACHE = new HashMap<>();\n", "").replace(
+        "import java.util.HashMap;\nimport java.util.Map;\n", "").replace(
+        "return CACHE.get(key);", "return key;"), encoding="utf-8")
+    result = compile_it()
+    assert result["status"] is True
+    assert [item["errorCode"] for item in result["sourceWarnings"]] == ["PLUGIN_SOURCE_DCS_RULE_ADVISORY"]
+    assert result["sourceWarnings"][0]["ruleCodes"] == ["java:S125"]
+
+
+def test_new_spreadsheet_rules_stop_delivery_before_archive_with_compile_disabled(tmp_path, monkeypatch):
+    project = tmp_path / "module"
+    source = project / "src" / "main" / "java" / "demo" / "Task.java"
+    source.parent.mkdir(parents=True)
+    source.write_text(
+        'package demo;\nimport kd.bos.servicehelper.BusinessDataServiceHelper;\n'
+        'public class Task {\n'
+        '    public void run(Object[] ids) {\n'
+        '        for (Object id : ids) { BusinessDataServiceHelper.loadSingle(id); }\n'
+        '    }\n}\n', encoding="utf-8")
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda **_: {"status": "disabled", "compile": False})
+    result = compile_plugin_source.compile_source(
+        project, source, "Task", 30, app_root=tmp_path / "app", plugin_type="task",
+        form_number="demo", operation_keys=[], description="check new DCS rules")
+    assert result["status"] is False
+    assert "PLUGIN_SOURCE_DCS_RULE_VIOLATION" in result["errorCodes"]
+    codes = {code for issue in result["issues"] for code in issue.get("ruleCodes", [])}
+    assert "CVE-KD-0051-47" in codes
+    assert not (tmp_path / "app" / "archive.json").exists()
+    assert not (project / ".temp").exists()
+
+
 def test_the_compile_skipped_result_names_what_the_source_gates_do_not_cover(tmp_path, monkeypatch):
     """`compileSkipped=true` archives and registers with nothing having compiled the source, so the
     result has to say which classes of error the four gates cannot reach."""
@@ -795,7 +950,9 @@ def test_batch_builds_one_module_once_and_keeps_full_diagnostics_in_one_log(tmp_
     assert "--rerun-tasks" not in calls[0]
     assert len(result["results"]) == 6
     assert all(item["status"] is False for item in result["results"])
-    assert sum(len(item.get("diagnostics", [])) for item in result["results"]) == 5
+    assert all(any(error["file"].endswith(item["className"] + ".java") for error in item["diagnostics"]) for item in result["results"])
+    assert all(item["diagnosticCount"] == 60 for item in result["results"])
+    assert all(len(item["diagnostics"]) == 5 for item in result["results"])
     paths = {item["logPath"] for item in result["results"]}
     assert len(paths) == 1
     assert Path(next(iter(paths))).read_text() == diagnostics
@@ -870,3 +1027,129 @@ def test_compile_consumes_handoff_without_retyped_identity(tmp_path, monkeypatch
     archive = json.loads((tmp_path / "app" / "archive.json").read_text())
     assert archive["javas"][0]["className"] == "Example"
     assert archive["javas"][0]["filePath"] == str(source.resolve())
+
+
+_REPORT_FORM_SOURCE = '''package sample;
+import java.util.List;
+import kd.bos.form.events.HyperLinkClickListener;
+import kd.bos.report.events.SortAndFilterEvent;
+import kd.bos.report.plugin.AbstractReportFormPlugin;
+public class KpiFormPlugin extends AbstractReportFormPlugin implements HyperLinkClickListener {
+    @Override
+    public void setSortAndFilter(List<SortAndFilterEvent> allColumns) {
+        super.setSortAndFilter(allColumns);
+        for (SortAndFilterEvent column : allColumns) {
+            column.setFilter(true);
+        }
+    }
+%s}
+'''
+_REPORT_DATA_SOURCE = '''package sample;
+import java.util.ArrayList;
+import java.util.List;
+import kd.bos.algo.DataSet;
+import kd.bos.entity.report.AbstractReportListDataPlugin;
+import kd.bos.entity.report.ReportQueryParam;
+import kd.bos.orm.query.QFilter;
+import kd.bos.servicehelper.QueryServiceHelper;
+public class KpiDataPlugin extends AbstractReportListDataPlugin {
+    @Override
+    public DataSet query(ReportQueryParam queryParam, Object selectedObj) throws Throwable {
+        List<QFilter> filters = new ArrayList<>(queryParam.getFilter().getQFilters());
+%s        return QueryServiceHelper.queryDataSet("kpi", "uhyl_kpi", "id", filters.toArray(new QFilter[filters.size()]), null);
+    }
+}
+'''
+
+
+def _report_source(tmp_path, name, text):
+    source = tmp_path / "src" / "main" / "java" / "sample" / f"{name}.java"
+    source.parent.mkdir(parents=True, exist_ok=True)
+    source.write_text(text, encoding="utf-8")
+    return source
+
+
+def _compile_report(tmp_path, source, name, plugin_type):
+    return compile_plugin_source.compile_source(
+        tmp_path, source, name, 10, app_root=tmp_path / "app", plugin_type=plugin_type,
+        form_number="uhyl_kpi_rpt", operation_keys=[], description="report plugin")
+
+
+def test_compile_refuses_a_report_drill_down_that_never_registers_its_listener(tmp_path, monkeypatch):
+    """The defect compiles and registers; only the gate can say the link will never fire."""
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda **_: {"status": "disabled"})
+    source = _report_source(tmp_path, "KpiFormPlugin", _REPORT_FORM_SOURCE % (
+        "    @Override\n"
+        "    public void hyperLinkClick(kd.bos.form.events.HyperLinkClickEvent evt) { }\n"))
+
+    result = _compile_report(tmp_path, source, "KpiFormPlugin", "reportform")
+
+    assert result["status"] is False
+    assert result["errorCode"] == "PLUGIN_SOURCE_LISTENER_UNREGISTERED"
+    assert result["issues"][0]["requiredCall"] == "addHyperClickListener"
+    assert not (tmp_path / "app" / "archive.json").exists()
+
+
+def test_head_filtering_without_its_data_half_is_warned_by_whichever_plugin_compiles_second(
+        tmp_path, monkeypatch):
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda **_: {"status": "disabled"})
+    data = _report_source(tmp_path, "KpiDataPlugin", _REPORT_DATA_SOURCE % "")
+    form = _report_source(tmp_path, "KpiFormPlugin", _REPORT_FORM_SOURCE % "")
+
+    first = _compile_report(tmp_path, data, "KpiDataPlugin", "reportlist")
+    second = _compile_report(tmp_path, form, "KpiFormPlugin", "reportform")
+
+    assert first["status"] is True and first["sourceWarnings"] == []
+    assert second["status"] is True
+    assert [item["errorCode"] for item in second["sourceWarnings"]] == [
+        "PLUGIN_REPORT_HEAD_FILTER_UNAPPLIED"]
+    assert "KpiDataPlugin" in second["sourceWarnings"][0]["message"]
+    # The data plugin compiled again after the form plugin sees the same gap from its side.
+    again = _compile_report(tmp_path, data, "KpiDataPlugin", "reportlist")
+    assert [item["errorCode"] for item in again["sourceWarnings"]] == [
+        "PLUGIN_REPORT_HEAD_FILTER_UNAPPLIED"]
+    assert "KpiFormPlugin" in again["sourceWarnings"][0]["message"]
+    # Applying the header conditions closes it on both sides.
+    data.write_text(_REPORT_DATA_SOURCE % (
+        "        filters.addAll(queryParam.getFilter().getHeadFilters());\n"), encoding="utf-8")
+    assert _compile_report(tmp_path, data, "KpiDataPlugin", "reportlist")["sourceWarnings"] == []
+    assert _compile_report(tmp_path, form, "KpiFormPlugin", "reportform")["sourceWarnings"] == []
+
+
+def test_stale_handoff_fails_before_archiving_or_advancing_source_gate(tmp_path, monkeypatch):
+    import hashlib
+    import pytest
+    input_file = tmp_path / 'intent.json'
+    input_file.write_text('{"coreLogic":["old"]}')
+    handoff = tmp_path / 'handoff.json'
+    handoff.write_text(json.dumps({'status': True, 'handoff': {}, 'inputFiles': [
+        {'path': str(input_file), 'sha256': hashlib.sha256(input_file.read_bytes()).hexdigest()}]}))
+    input_file.write_text('{"coreLogic":["new"]}')
+    with pytest.raises(compile_plugin_source.CompileError) as error:
+        compile_plugin_source.compile_handoff(str(handoff))
+    assert error.value.code == 'PLUGIN_HANDOFF_STALE'
+    assert not (tmp_path / 'archive.json').exists()
+    assert not (tmp_path / 'output' / 'generated').exists()
+
+
+def test_batch_checks_all_sources_before_any_build_or_archive(tmp_path, monkeypatch, capsys):
+    project = tmp_path / "module"
+    java = project / "src" / "main" / "java" / "demo"
+    java.mkdir(parents=True)
+    app = tmp_path / "app"
+    good = java / "Good.java"
+    bad = java / "Bad.java"
+    good.write_text("package demo; public class Good {}\n")
+    bad.write_text("package demo; public class Bad { // L3-BLOCK: unresolved requirement\n}\n")
+    batch = tmp_path / "sources.json"
+    batch.write_text(json.dumps([{"sourcePath": str(source), "className": source.stem, "type": "task",
+                                  "formNumber": "example", "description": "scheduled task"}
+                                 for source in (good, bad)]))
+    monkeypatch.setattr(sys, "argv", ["compile_plugin_source.py", "--project-root", str(project),
+                                     "--app-root", str(app), "--sources-file", str(batch)])
+    monkeypatch.setattr(compile_plugin_source, "inspect_config", lambda **_: (_ for _ in ()).throw(AssertionError("build was started")))
+    assert compile_plugin_source.main() == 2
+    result = json.loads(capsys.readouterr().out)
+    assert [item["errorCode"] for item in result["results"]] == ["PLUGIN_BATCH_PREFLIGHT_BLOCKED", "PLUGIN_SOURCE_PLACEHOLDER_BLOCKED"]
+    assert not (app / "archive.json").exists()
+    assert not (project / ".temp").exists()

package/skills/cosmic-build/scripts/test/test_configure_list_delivery.py

@@ -0,0 +1,132 @@
+from __future__ import annotations
+
+import importlib.util
+import json
+import subprocess
+import sys
+from pathlib import Path
+
+import pytest
+
+SCRIPT = Path(__file__).resolve().parents[1] / "configure_list.py"
+spec = importlib.util.spec_from_file_location("configure_list_delivery", SCRIPT)
+assert spec and spec.loader
+DRIVER = importlib.util.module_from_spec(spec)
+spec.loader.exec_module(DRIVER)
+
+
+@pytest.fixture
+def children(tmp_path, monkeypatch):
+    root = tmp_path / "应用目录"
+    root.mkdir()
+    calls = tmp_path / "calls.jsonl"
+    api = tmp_path / "native_api.py"
+    payload = tmp_path / "payload.json"
+    rendered = tmp_path / "rendered.txt"
+    api.write_text("import sys,json\nfrom pathlib import Path\n"
+        f"with Path({str(calls)!r}).open('a') as f: f.write(json.dumps(['configure',sys.argv[1:]])+'\\n')\n"
+        f"value=json.loads(Path({str(payload)!r}).read_text(encoding='utf-8'))\n"
+        "Path(sys.argv[sys.argv.index('--output')+1]).write_text(json.dumps(value,ensure_ascii=False),encoding='utf-8')\n"
+        "raise SystemExit(0 if value['status'] else 3)\n", encoding="utf-8")
+    renderer = tmp_path / "render_output_cards.py"
+    renderer.write_text("import sys,json\nfrom pathlib import Path\n"
+        f"with Path({str(calls)!r}).open('a') as f: f.write(json.dumps(['render',sys.argv[1:]])+'\\n')\n"
+        f"print(Path({str(rendered)!r}).read_text(encoding='utf-8'))\n", encoding="utf-8")
+    monkeypatch.setattr(DRIVER, "API", api)
+    monkeypatch.setattr(DRIVER, "SCRIPTS", tmp_path)
+    return root, payload, rendered, calls
+
+
+def receipt(root, outcome):
+    return {"status": outcome in {"verified", "verified_noop"}, "errorCode": "0" if outcome in {"verified", "verified_noop"} else "TEST_REJECTION",
+        "writeAttempted": outcome == "verified", "mutation": {"outcome": outcome, "writeAttempted": outcome == "verified"},
+        "verification": {"verified": outcome in {"verified", "verified_noop"}, "columns": [{"fieldKey": "count", "properties": {
+            "Summary": {"requested": 0, "actual": 0, "matched": True},
+            "ZeroShow": {"requested": False, "actual": False, "matched": True}}}]},
+        "data": {"formNumber": "exact_form", "appRoot": str(root), "structuralOps": 0,
+            "propertyWrites": int(outcome == "verified"),
+            "completion": {"requiresArtifactFinalization": outcome == "verified"}}}
+
+
+def test_verified_update_combines_native_delivery_preserves_assertions_and_tracked_sync(children):
+    root, payload, rendered, calls = children
+    expected = receipt(root, "verified")
+    payload.write_text(json.dumps(expected))
+    block = ':::render:kdform\n{"title":"测试表","url":"https://example.test"}\n:::'
+    sync = 'DYM_BACKGROUND_REQUEST={"command":["python3","worker.py"],"run_in_background":true,"preview":false}'
+    rendered.write_text(block + "\n" + sync, encoding="utf-8")
+    value = '{"columns":[{"fieldKey":"a\' $()","properties":{"ZeroShow":false}}]}'
+    code, output = DRIVER.execute(str(root), None, "用户显示名", value)
+    assert code == 0 and output.startswith(block + "\n") and sync in output
+    result = json.loads(output.split("RESULT_SUMMARY=", 1)[1])
+    assert result["verification"] == expected["verification"]
+    assert result["verifiedPropertyCount"] == 2
+    assert result["completion"]["requiresArtifactFinalization"] is False
+    assert result["data"]["completion"] == result["completion"]
+    assert result["completion"]["nextAction"] == "launch_returned_background_request_then_respond"
+    observed = [json.loads(line) for line in calls.read_text().splitlines()]
+    assert [row[0] for row in observed] == ["configure", "render"]
+    assert observed[0][1][observed[0][1].index("--input") + 1] == value
+    assert observed[1][1][observed[1][1].index("--form-number") + 1] == "exact_form"
+    assert observed[1][1][observed[1][1].index("--app-root") + 1] == str(root)
+    # Exercise the actual unchanged host auto-arm predicate, not a copied regex.
+    source = SCRIPT.parents[3] / "src" / "tool" / "bash.ts"
+    output_path = root / "driver-output.txt"
+    output_path.write_text(output, encoding="utf-8")
+    run = subprocess.run(["bun", "-e", "const {isSuccessfulRenderOutput}=await import(process.argv[1]); process.stdout.write(JSON.stringify(isSuccessfulRenderOutput(await Bun.file(process.argv[2]).text(),0)))", str(source), str(output_path)], capture_output=True, text=True, timeout=30)
+    assert run.returncode == 0, run.stderr
+    assert json.loads(run.stdout) is True
+
+
+@pytest.mark.parametrize("outcome", ["verified_noop", "failed_preflight"])
+def test_noop_and_refusal_end_without_old_cards_or_delivery(children, outcome):
+    root, payload, _rendered, calls = children
+    expected = receipt(root, outcome)
+    payload.write_text(json.dumps(expected))
+    (root / "archive.json").write_text(json.dumps({"artifacts": [{"title": "OLD_CARD"}]}))
+    code, output = DRIVER.execute(str(root), None, "display", '{}')
+    result = json.loads(output)
+    assert code == (0 if outcome == "verified_noop" else 3)
+    assert ":::render:" not in output and "OLD_CARD" not in output and "DYM_BACKGROUND_REQUEST" not in output
+    assert result["verification"] == expected["verification"]
+    assert result["completion"]["requiresArtifactFinalization"] is False
+    assert result["data"]["completion"] == result["completion"]
+    assert [json.loads(line)[0] for line in calls.read_text().splitlines()] == ["configure"]
+
+
+def test_render_failure_exposes_delivery_only_retry_without_replaying_write(children):
+    root, payload, rendered, calls = children
+    payload.write_text(json.dumps(receipt(root, "verified")))
+    rendered.write_text("No card was produced")
+    code, output = DRIVER.execute(str(root), None, "display", '{}')
+    result = json.loads(output)
+    assert code == 3 and result["verification"]["verified"] is True
+    assert result["status"] is False and result["errorCode"] == "LIST_DELIVERY_PENDING"
+    assert result["configurationVerified"] is True
+    assert result["completion"]["nextAction"] == "retry_delivery_only"
+    assert "render_output_cards.py" in result["completion"]["command"][1]
+    assert [json.loads(line)[0] for line in calls.read_text().splitlines()].count("configure") == 1
+
+
+def test_unknown_write_state_never_renders_or_replays(children):
+    root, payload, _rendered, calls = children
+    payload.write_text(json.dumps(receipt(root, "unknown_after_write")))
+    code, output = DRIVER.execute(str(root), None, "display", '{}')
+    assert code == 3 and json.loads(output)["completion"]["nextAction"] == "reconcile_write_state"
+    assert [json.loads(line)[0] for line in calls.read_text().splitlines()] == ["configure"]
+
+
+def test_native_preflight_receipt_without_duplicate_top_level_flag_still_reports_zero_write(children):
+    root, payload, _rendered, _calls = children
+    value = receipt(root, "failed_preflight")
+    value.pop("writeAttempted")
+    value["data"]["writeAttempted"] = False
+    payload.write_text(json.dumps(value))
+    code, output = DRIVER.execute(str(root), None, "display", '{}')
+    assert code == 3 and json.loads(output)["writeAttempted"] is False
+
+
+def test_list_executables_remain_identical_in_localized_package():
+    root = SCRIPT.parents[1]
+    for relative in ["scripts/configure_list.py", "skills/cosmic-meta-api/scripts/_core/cmd_listui.py"]:
+        assert (root / relative).read_bytes() == (root / ".locales/zh" / relative).read_bytes()