@xulthekl/team-flow 0.63.0 → 0.64.0

package/.claude/always/phase-guard.md

@@ -1,3 +1,3 @@
-# team-flow v0.63.0 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.64.0 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "team-flow",
       "description": "8-state spec workflow + compound global compounding + architecture-design (4A/DDD) + local HTML prototype + product-level orchestration + bootstrap + e2e + session handoff + workflow feedback + independent business analysis. 28 skills + 17 agents with embedded TDD, SDD, code review, debugging, delta spec sync, and design-system-driven prototyping.",
-      "version": "0.63.0",
+      "version": "0.64.0",
       "source": "./",
       "author": {
         "name": "LT",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking) + business-analysis (independent requirement/scenario artifact) + design-system (design tokens + component contract + AI primer + showcase) + test-strategy (test strategy design) + project-initialize (new service onboarding) + jarvis (team-flow decision agent, opt-in). 28 skills + 17 agents, one install.",
   "source": "./",
   "author": {

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "Spec-first workflow that bridges OpenSpec-style planning and Superpowers-style execution discipline.",
   "author": {
     "name": "MageByte",

package/.cursor-plugin/marketplace.json

@@ -5,7 +5,7 @@
   },
   "metadata": {
     "description": "Unified workflow plugin marketplace for Cursor (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.63.0"
+    "version": "0.64.0"
   },
   "plugins": [
     {

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "team-flow",
   "displayName": "team-flow",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking) + business-analysis (independent requirement/scenario artifact) + jarvis (team-flow decision agent, opt-in). 28 skills + 17 agents, one install.",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "author": {
     "name": "LT",
     "url": "https://github.com/LT"

package/.github/plugin/marketplace.json

@@ -6,13 +6,13 @@
   },
   "metadata": {
     "description": "Unified workflow plugins and skills for AI coding agents (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.63.0"
+    "version": "0.64.0"
   },
   "plugins": [
     {
       "name": "team-flow",
       "description": "Unified workflow with planning artifacts, execution contracts, TDD, review gates, systematic debugging, delta spec sync, architecture-design, independent business analysis, and local HTML prototyping.",
-      "version": "0.63.0",
+      "version": "0.64.0",
       "source": ".",
       "author": {
         "name": "LT",

package/.github/workflows/ci.yml

@@ -24,6 +24,7 @@ jobs:
       - run: npm ci
       - run: npm run build
       - run: npm test
+      - run: npm run test:e2e
       - name: Check version consistency
         run: node scripts/check-version-consistency.mjs
       - name: CLI smoke
@@ -83,6 +84,7 @@ jobs:
       - run: npm ci
       - run: npm run build
       - run: npm test
+      - run: npm run test:e2e
       - name: Check version consistency
         run: node scripts/check-version-consistency.mjs
       - name: Token efficiency lint (warning only)

package/CHANGELOG.md

@@ -4,6 +4,34 @@ All notable changes to `team-flow` will be documented in this file.
 
 The format loosely follows Keep a Changelog.
 
+## [0.64.0] - 2026-09-24
+
+### Added（spec-superflow 2.0 同步：双前门 + 轻路径 + 轻量全局态闸门；设计 = docs/plan/spec-superflow-2.0-implementation-plan.md v2.1，P1.5 两轮独立评审 13+13 组全闭合）
+
+**双前门（`workflow_variant` 与 `workflow` 正交）**
+- direct（→`quick`）：零文档零契约，`exploring→approved-for-build→executing→closing` 捷径；planned（→`full`）：proposal+tasks 两份 + `tf execution plan --derive`（tasks.md 派生单 wave，免 recommend/receipt/DP-4）+ 一次最终审查。
+- legacy/null 走既有全量流程零破坏（null≡legacy + TTY 单次提示 / headless 不挂起）；`workflow` 枚举扩为五值（+`quick`/`lightweight`）。
+- 新子命令：`tf state upgrade <dir> <planned|full>`（升档唯一机械入口：方向向上 + `variant_source=upgrade` + 回退 approved-for-build + 重算 hash；**降档拒绝**）。
+- 新 CLI 参数：`tf execution plan --derive`、`tf arch-merge --light`、`tf test-merge --light`（changelog 归因锚 `change:<name>`）、guard `--workflow-variant`/`--planned-arch`。
+
+**11 个新 guard 维度（CHECK_RUNNERS 20→31）+ 共享扫描层**
+- `surface-scan.mjs`：三源合并（committed diff + 工作区 + untracked）+ `base_sha` 基线（缺省 origin merge-base，再缺 fail-closed）+ 架构 surface 路径模式表 + `.team-flow/aggregate-dirs.txt` 聚合清单（**缺失 FAIL，显式空文件 = 确认无聚合**）+ `.team-flow/scan-ignore` 排除。
+- direct 侧：`direct-short-path`（碰 API/DB/聚合 → FAIL+升档指引，G1）、`direct-test-result`/`lightweight-completion-evidence`（只读 `tf test record` 程序化证据，guard 不现场跑测试）。
+- planned 侧 closing「轻回写四灯」：`arch-merged-light`（同 sink：最小 architecture.md/api.md/database.md 持久源 + 全局台账 `change:<name>` 归因）、`compound-writeback-light`（禁 `compound_skipped` 自清）、`test-merged-light`、`cross-change-consistency-light`（**确定性扫描 runner**，语义级仍由 checker agent 兜底）+ `execution-reviews-passed-light`（≥5 行内容契约）+ `artifacts-planned`（proposal≥10 行 + checkbox，反空壳）+ `arch-design-light`/`arch-snapshot-light`（`planned_arch=true` 条件挂载）。
+- 既有 4 维加轻分支：`test-matrix-ready/complete` 无契约轻判据（D4）、`execution-plan-ready` planned 豁免 DP-4、`specs-merged` planned 无 specs 即过/有 specs 无 delta 头 FAIL。
+
+**状态机 schema（三环齐全）**
+- `workflow_variant` / `variant_source` / `variant_direction` / `planned_arch` / `model_profile`（接入既有 `models` 键四档，非新配置）/ `base_sha` / `arch_design_light_skipped(+reason)`；`workflow_variant` 经 `tf state set` 通用通道**仅 exploring 态可写**。
+
+**SKILL 层**
+- workflow-start：Front Doors 三分支路由 + infer 双通道（`suggested_path` 绝不写入 workflow；arch 信号→建议 planned 而非 full）+ 架构门/Guardrails 按 variant 分叉（direct/planned 结构性不经 `exploring:specifying`，Q3 零代码满足的限定条件落地）。
+- release-archivist：关门序列按 variant 三分叉（planned 回写+审查全前置、transition 最后——防 closing 维度死锁；direct 仅 transition）+ Verdict 新增 **ACCEPTED-RISK**（仅非 guard 维度、禁自判、不伪造通过、不自动合并）。
+- jarvis/session-handoff：variant 回显；test-strategy/clean-code description 收紧（§3.8 静态复核）。
+
+**测试（npm test 1237 + test:e2e 103 全绿；CI 补 `npm run test:e2e` 步骤）**
+- `light-paths.test.mjs`（21 用例，每新维度正/负例）、`light-merge-survival.test.mjs`（D8 same-sink 存活三断言：marker 聚合行 + 演进归因 + API 端点经 full merge 存活）、`light-pilot.test.mjs`（P7 双路径真实 CLI 全链 + 升档/禁降档试点）。
+- e2e test-matrix 登记 L1–L5。
+
 ## [0.63.0] - 2026-09-23
 
 ### Added（sop-flow 效率八项改进 S1–S6 + E1/E2；来源：emp-auth workflow-feedback 20260923-013114，经 308 行独立专家评审定稿）

package/GEMINI.md

@@ -8,7 +8,7 @@ The workflow is self-contained and does not require OpenSpec or Superpowers at r
 
 
 <!-- team-flow-phase-guard-start -->
-# team-flow v0.63.0 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.64.0 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。
 <!-- team-flow-phase-guard-end -->

package/INSTALL.md

@@ -7,7 +7,7 @@
 - [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec) — 规划引擎（Schema 验证、Delta Spec、工件解析）
 - [obra/superpowers](https://github.com/obra/superpowers) — 执行纪律（TDD 铁律、SDD、系统化调试、代码审查）
 
-当前发布版本：**v0.63.0**。
+当前发布版本：**v0.64.0**。
 
 ---
 

package/README.md

@@ -1,6 +1,6 @@
 # team-flow
 
-> 当前版本：`v0.63.0`
+> 当前版本：`v0.64.0`
 
 > 统一插件：**team-flow**（spec 驱动开发）+ **compound-engineering 核心子集**（全局复利）+ **architecture-design**（4A+DDD 增量设计）+ **prototype**（本地 HTML 原型）+ **e2e**（AC 驱动 E2E）+ **workflow-orchestrator**（产品级编排）+ **workflow-bootstrap**（既有项目接入）。一次安装，十三套能力协同（详见下文「十三套能力」）。
 

package/docs/README_en.md

@@ -126,7 +126,7 @@ npm install -g team-flow
 
 ### Version
 
-- Current: `v0.63.0`
+- Current: `v0.64.0`
 - v0.9.1 highlights: DP-4 execution-mode recommendations, a portable runtime across 17 platforms, and a raw-package smoke with no plugin-root variable.
 - Self-contained — no OpenSpec or Superpowers runtime required
 - Upstream: [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec), [obra/superpowers](https://github.com/obra/superpowers)

package/docs/state-machine.md

@@ -112,6 +112,8 @@ eight core states.
   exploring ──── hotfix ─────────> bridging          (fast-path)
   bridging  ──── hotfix ─────────> approved-for-build
   exploring ──── tweak ──────────> approved-for-build (fast-path)
+  exploring ──── quick/lightweight ─> approved-for-build > executing > closing   (direct 前门, v0.64.0)
+  exploring ──── full+planned ───> approved-for-build > executing > closing     (planned 前门, v0.64.0)
 
   exploring -> specifying -> bridging -> approved-for-build -> executing -> closing
                 ^              ^             |                 ^    |
@@ -159,4 +161,5 @@ If the contract changed, the artifacts changed.
 - `hotfix` follows `exploring -> bridging -> approved-for-build -> executing`.
 - `hotfix` may skip full planning artifacts such as `proposal.md`, `design.md`, and `specs/`; `tasks.md` requires an explicit `tasks_skipped=true` + `tasks_skip_reason` (v0.22 §85) rather than a silent skip. The key is rejected for `full`/`auto` workflows — declare the mode first (`tf state set <dir> workflow hotfix|tweak`) or produce `tasks.md`.
 - `hotfix` still requires a fresh minimal `execution-contract.md` and explicit DP-3 approval before implementation.
-- `tweak` remains the only path that can jump directly from `exploring` to `approved-for-build`.
+- `tweak` is **no longer the only** path from `exploring` to `approved-for-build` (v0.64.0)——`quick`/`lightweight`（direct 前门）与 `full`+`workflow_variant=planned`（planned 前门）同样走该捷径，维度表分别由 `QUICK_TRANSITION_CHECKS` / `PLANNED_TRANSITION_CHECKS` 管辖（见 workflow-start SKILL「Front Doors」与 guard.mjs）。`workflow_variant` 与 `workflow` 是两个正交维度：direct→`quick`、planned→`full`，**不是 workflow 取值**。
+- 升档唯一机械入口 `tf state upgrade <dir> <planned|full>`（方向向上 + `variant_source=upgrade`；降档拒绝）。`executing → debugging → executing` 对 quick/planned 按档分支（direct: `direct-test-result`；planned: `execution-plan-ready`+`tests-passing`），**不回落 full 表**。

package/docs/team-flow /344/275/277/347/224/250/350/257/264/346/230/216/357/274/210/347/240/224/345/217/221/345/233/242/351/230/237/347/211/210/357/274/211.md"

@@ -1,6 +1,6 @@
 # team-flow 使用说明（研发团队版）
 
-> 版本锚点：v0.63.0（28 skills + 17 agents）· 更新日期：2026-09-21
+> 版本锚点：v0.64.0（28 skills + 17 agents）· 更新日期：2026-09-21
 > 读者：使用 team-flow 做日常研发的工程师。不需要你懂插件内部实现，只需要照着路径走。
 > 配套文档：安装细节见 [INSTALL.md](../INSTALL.md)；状态机细节见 [state-machine.md](state-machine.md)；决策点细节见 [decision-points.md](decision-points.md)；平台差异见 [platform-matrix.md](platform-matrix.md)。
 
@@ -232,7 +232,7 @@ workflow-start 在初始化时自动推断（`tf runtime infer`），你也可
 tf runtime guard check <change-dir> <from-state> <to-state> [--workflow full|hotfix|tweak]
 ```
 
-**full 模式的完整转换矩阵**（20 个维度 + 1 个 workflow 限制维度）：
+**full 模式的完整转换矩阵**（31 个维度 + 1 个 workflow 限制维度；v0.64.0 增 quick/lightweight/planned 轻路径 11 维）：
 
 | 转换 | 维度 |
 |------|------|

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
   "description": "Unified workflow plugin: team-flow (spec-driven dev) + compound-engineering core subset + architecture-design (4A/DDD) + prototype (local HTML) + business-analysis (independent requirement/scenario artifact) + jarvis (team-flow decision agent, opt-in). 28 skills, one install.",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "contextFileName": "GEMINI.md"
 }

package/hooks/session-start

@@ -1,11 +1,11 @@
 #!/usr/bin/env bash
-# v0.63.0: auto-sync CLI version with plugin version
+# v0.64.0: auto-sync CLI version with plugin version
 set -e
 
 # ═══════════════════════════════════════════════════════════════
 # Plugin version (update this when releasing new versions)
 # ═══════════════════════════════════════════════════════════════
-PLUGIN_VERSION="0.63.0"
+PLUGIN_VERSION="0.64.0"
 
 # ═══════════════════════════════════════════════════════════════
 # Step 1: Auto-sync CLI version with plugin version

package/llms.txt

@@ -3,7 +3,7 @@
 ## Overview
 spec-superflow is a self-contained workflow integration plugin for Claude Code, Cursor, OpenAI Codex CLI/App, GitHub Copilot CLI, Gemini CLI, OpenCode, WorkBuddy, and Trae. It merges spec-driven planning artifacts (proposal, specs, design, tasks) with disciplined execution guardrails (TDD, review gates, controlled handoff) into one unified workflow.
 
-Current version: v0.63.0.
+Current version: v0.64.0.
 
 ## Key Documents
 - README.md: Chinese homepage with full usage guide and FAQ

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xulthekl/team-flow",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "Unified plugin (28 skills + 17 agents) integrating team-flow, compound-engineering, architecture-design, prototype, design-system, workflow-orchestrator, workflow-bootstrap, e2e, session-handoff, workflow-feedback, business-analysis for multi-agent coding tools.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking) + business-analysis (independent requirement/scenario artifact) + design-system (design tokens + component contract + AI primer + showcase) + test-strategy (test strategy design) + project-initialize (new service onboarding) + jarvis (team-flow decision agent, opt-in). 28 skills + 17 agents, one install.",
   "author": {
     "name": "LT"

package/scripts/guard/checks/_fs-utils.mjs

@@ -0,0 +1,18 @@
+// scripts/guard/checks/_fs-utils.mjs — light check 共享的文件系统小工具
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+
+/** 递归扫描 dir 下所有 .md，文件名或内容任一含 needle 即 true（dir 不存在 → false） */
+export function filesContainDir(dir, needle) {
+  if (!existsSync(dir)) return false;
+  const entries = readdirSync(dir, { recursive: true, withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isFile() || !/\.md$/i.test(e.name)) continue;
+    if (e.name.includes(needle)) return true;
+    const parent = typeof e.parentPath === 'string' ? e.parentPath : dir;
+    try {
+      if (readFileSync(join(parent, e.name), 'utf-8').includes(needle)) return true;
+    } catch { /* skip unreadable */ }
+  }
+  return false;
+}

package/scripts/guard/checks/arch-design-light.mjs

@@ -0,0 +1,39 @@
+// scripts/guard/checks/arch-design-light.mjs — 轻架构说明（§4，可选维度）
+// v0.64.0：挂 planned 且 planned_arch=true（exploring→approved-for-build / approved-for-build→executing）。
+// 判据：architecture/light-note.md 存在非空，或显式 skip-with-reason（arch_design_light_skipped
+// + arch_design_light_skip_reason 两键齐全）。不要求 4A+DDD 全套 + 契约 + DP。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+
+export function checkArchDesignLight(changeDir) {
+  const state = readState(changeDir);
+
+  if (state.arch_design_light_skipped === 'true') {
+    const reason = (state.arch_design_light_skip_reason || '').trim();
+    if (!reason || reason === 'null') {
+      return {
+        pass: false,
+        failures: ['arch_design_light_skipped=true but no skip reason — set arch_design_light_skip_reason via tf state set'],
+      };
+    }
+    return { pass: true, failures: [], reason: `skipped: ${reason}` };
+  }
+
+  const notePath = join(changeDir, 'architecture', 'light-note.md');
+  if (!existsSync(notePath)) {
+    return {
+      pass: false,
+      failures: [
+        'architecture/light-note.md missing — write a short light architecture note '
+        + '(touched surfaces, key decisions; no 4A+DDD suite needed), or skip explicitly: '
+        + 'tf state set <dir> arch_design_light_skipped true + arch_design_light_skip_reason "<reason>"',
+      ],
+    };
+  }
+  const content = readFileSync(notePath, 'utf-8').trim();
+  if (!content) {
+    return { pass: false, failures: ['architecture/light-note.md is empty — write the light architecture note'] };
+  }
+  return { pass: true, failures: [] };
+}

package/scripts/guard/checks/arch-merged-light.mjs

@@ -0,0 +1,67 @@
+// scripts/guard/checks/arch-merged-light.mjs — 架构台账轻回写（§4，非 negotiable 底线）
+// v0.64.0（D8/D10）：
+// - 无架构 surface → 过（G4）
+// - 有 surface → 最小持久源齐（architecture.md 必产；触及 API/DB 另需 api.md/database.md）
+//   + 全局台账（docs/architecture/**）含归因 `change:<name>`（归因锚 = 扫描 + 条目，非快照）
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+import { scanArchitectureSurface } from '../../lib/surface-scan.mjs';
+
+function filesContain(dir, needle) {
+  if (!existsSync(dir)) return false;
+  const entries = readdirSync(dir, { recursive: true, withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isFile() || !/\.md$/i.test(e.name)) continue;
+    const parent = typeof e.parentPath === 'string' ? e.parentPath : dir;
+    try {
+      if (readFileSync(join(parent, e.name), 'utf-8').includes(needle)) return true;
+    } catch { /* skip unreadable */ }
+  }
+  return false;
+}
+
+function minSourceOk(changeDir, rel) {
+  const p = join(changeDir, 'architecture', rel);
+  return existsSync(p) && readFileSync(p, 'utf-8').trim().length > 0;
+}
+
+export function checkArchMergedLight(changeDir) {
+  const state = readState(changeDir);
+  const changeName = state.change_name || changeDir.split('/').filter(Boolean).pop();
+  const scan = scanArchitectureSurface(changeDir, state);
+
+  if (scan.error === 'no-baseline' || scan.error === 'diff-failed') {
+    return { pass: false, failures: [`surface scan failed (${scan.error}) — cannot verify ledger writeback, fail-closed`] };
+  }
+  if (scan.error === 'aggregate-list-missing') {
+    return {
+      pass: false,
+      failures: ['aggregate list missing (.team-flow/aggregate-dirs.txt) — cannot classify architecture surface, fail-closed'],
+    };
+  }
+
+  if (scan.architectureSurface.length === 0) {
+    return { pass: true, failures: [], reason: 'no architecture surface touched — ledger writeback N/A (G4)' };
+  }
+
+  const failures = [];
+  // D8 最小持久源：architecture.md 必产（聚合注册行 + 演进日志段 = marker 区投影输入）
+  if (!minSourceOk(changeDir, 'architecture.md')) {
+    failures.push('changes/<name>/architecture/architecture.md missing/empty — minimal persistent source required (aggregate lines + ### change:<name> evolution entry); run the light arch writeback');
+  }
+  if (scan.apiFiles.length > 0 && !minSourceOk(changeDir, 'api.md')) {
+    failures.push('API surface touched but architecture/api.md missing/empty — minimal endpoint delta required (feeds arch-merge rebuild)');
+  }
+  if (scan.dbFiles.length > 0 && !minSourceOk(changeDir, 'database.md')) {
+    failures.push('DB surface touched but architecture/database.md missing/empty — minimal schema delta required');
+  }
+
+  const anchor = `change:${changeName}`;
+  const globalLedger = join(scan.projectRoot, 'docs', 'architecture');
+  if (!filesContain(globalLedger, anchor)) {
+    failures.push(`global ledger (docs/architecture/**) has no '${anchor}' attribution — run: tf arch-merge --light <change-dir>`);
+  }
+
+  return failures.length ? { pass: false, failures } : { pass: true, failures: [] };
+}

package/scripts/guard/checks/arch-snapshot-light.mjs

@@ -0,0 +1,30 @@
+// scripts/guard/checks/arch-snapshot-light.mjs — 轻架构快照（§4，条件维度）
+// v0.64.0（D10 裁决）：仅当 light-note 产出时需要快照（供演进日志 diff 展示）；
+// arch-merged-light 的归因锚 = 扫描 + 台账条目，不依赖本快照——无 note / 已 skip → N/A 通过。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+
+export function checkArchSnapshotLight(changeDir) {
+  const state = readState(changeDir);
+
+  const notePath = join(changeDir, 'architecture', 'light-note.md');
+  const hasNote = existsSync(notePath) && readFileSync(notePath, 'utf-8').trim().length > 0;
+  const skipped = state.arch_design_light_skipped === 'true';
+
+  if (!hasNote || skipped) {
+    return { pass: true, failures: [], reason: 'no light architecture note — snapshot N/A (D10: anchor is scan+ledger, not snapshot)' };
+  }
+
+  const snapPath = join(changeDir, 'architecture', 'snapshot-light.md');
+  if (!existsSync(snapPath)) {
+    return {
+      pass: false,
+      failures: ['light note present but architecture/snapshot-light.md missing — snapshot the touched surfaces before closing'],
+    };
+  }
+  if (!readFileSync(snapPath, 'utf-8').trim()) {
+    return { pass: false, failures: ['architecture/snapshot-light.md is empty'] };
+  }
+  return { pass: true, failures: [] };
+}

package/scripts/guard/checks/artifacts-planned.mjs

@@ -0,0 +1,38 @@
+// scripts/guard/checks/artifacts-planned.mjs — planned 的规划制品判据（§4.5②，替代四件套）
+// v0.64.0（B-01 强化）：不止「存在」——防空壳套餐：
+// proposal.md 非空（≥10 个非空行）+ tasks.md ≥1 条 checkbox。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parseTaskLine } from '../../lib/md-normalize.mjs';
+
+function nonEmptyLines(text) {
+  return text.split('\n').filter(l => l.trim()).length;
+}
+
+export function checkArtifactsPlanned(changeDir) {
+  const failures = [];
+  const proposalPath = join(changeDir, 'proposal.md');
+  const tasksPath = join(changeDir, 'tasks.md');
+
+  if (!existsSync(proposalPath)) {
+    failures.push('proposal.md is missing — planned path requires proposal.md + tasks.md');
+  } else {
+    const proposal = readFileSync(proposalPath, 'utf-8');
+    const lines = nonEmptyLines(proposal);
+    if (lines < 10) {
+      failures.push(`proposal.md too thin (${lines} non-empty lines, need ≥10) — state intent, scope, and acceptance criteria`);
+    }
+  }
+
+  if (!existsSync(tasksPath)) {
+    failures.push('tasks.md is missing — planned path requires proposal.md + tasks.md');
+  } else {
+    const tasks = readFileSync(tasksPath, 'utf-8');
+    const taskCount = tasks.split('\n').map(l => parseTaskLine(l)).filter(Boolean).length;
+    if (taskCount < 1) {
+      failures.push('tasks.md has no task checkboxes — add at least one `- [ ]` task');
+    }
+  }
+
+  return failures.length ? { pass: false, failures } : { pass: true, failures: [] };
+}

package/scripts/guard/checks/compound-writeback-light.mjs

@@ -0,0 +1,45 @@
+// scripts/guard/checks/compound-writeback-light.mjs — 复利轻回写（§4，同 sink 不另起台账）
+// v0.64.0：planned closing 必执行（含「无新增决策」的显式空捕获记录），
+// **不走 compound_skipped 自清**（§3.7——自清会让 closed 后的全局库漏写无兜底）。
+// 判据：docs/solutions/** 存在归因 `change:<name>` 的条目（INDEX 单写入口 tf solutions 系列产出）。
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+import { findProjectRoot } from '../../lib/surface-scan.mjs';
+
+function filesContain(dir, needle) {
+  if (!existsSync(dir)) return false;
+  const entries = readdirSync(dir, { recursive: true, withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isFile() || !/\.md$/i.test(e.name)) continue;
+    const parent = typeof e.parentPath === 'string' ? e.parentPath : dir;
+    try {
+      if (readFileSync(join(parent, e.name), 'utf-8').includes(needle)) return true;
+    } catch { /* skip */ }
+  }
+  return false;
+}
+
+export function checkCompoundWritebackLight(changeDir) {
+  const state = readState(changeDir);
+  const changeName = state.change_name || changeDir.split('/').filter(Boolean).pop();
+
+  // 自清通道对本维度无效（planned 禁 compound_skipped，§3.7）
+  if (state.compound_skipped === true || state.compound_skipped === 'true') {
+    return {
+      pass: false,
+      failures: ['compound_skipped is not accepted on the planned light path — capture into the global library (empty capture "no new decisions" is fine): tf solutions capture / ce-compound with change:<name> attribution'],
+    };
+  }
+
+  const projectRoot = findProjectRoot(changeDir);
+  const solutionsDir = join(projectRoot, 'docs', 'solutions');
+  const anchor = `change:${changeName}`;
+  if (filesContain(solutionsDir, anchor) || filesContain(solutionsDir, changeName)) {
+    return { pass: true, failures: [] };
+  }
+  return {
+    pass: false,
+    failures: [`no solution entry attributed '${anchor}' (or '${changeName}') in docs/solutions/** — run compound capture (tf solutions capture / ce-compound), INDEX single-writer + dedup; an explicit 'no new decisions' entry satisfies this gate`],
+  };
+}

package/scripts/guard/checks/cross-change-consistency-light.mjs

@@ -0,0 +1,75 @@
+// scripts/guard/checks/cross-change-consistency-light.mjs — 跨 change 冲突确定性初筛（§3.3）
+// v0.64.0（A-14/S-07 重定义）：guard runner 是 10s 内确定性 Node 函数，**不能调 LLM agent**。
+// 本 runner 做机械初筛：其他在途 change（state ∈ executing/debugging/approved-for-build）
+// 的 minimal api.md 端点路径 / architecture.md 聚合行 与本 change 的最小源求交——
+// 交集非空 = 共享 surface 冲突。语义级冲突由 release-archivist 关门序列派发
+// cross-change-consistency-checker agent 兜底（分工见 §3.3）。
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join, basename, dirname } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+import { findProjectRoot } from '../../lib/surface-scan.mjs';
+
+const IN_FLIGHT = new Set(['approved-for-build', 'executing', 'debugging']);
+
+function extractApiPaths(file) {
+  if (!existsSync(file)) return new Set();
+  const text = readFileSync(file, 'utf-8');
+  // 端点表单元格里的路径 token（/api/xxx、/v1/xxx、{id} 形态）
+  const out = new Set();
+  for (const m of text.matchAll(/(\/[A-Za-z0-9_\-{}./]+)/g)) {
+    const p = m[1];
+    if (p.length > 1 && !p.endsWith('.md')) out.add(p.replace(/\/+$/, ''));
+  }
+  return out;
+}
+
+function extractAggregateNames(file) {
+  if (!existsSync(file)) return new Set();
+  const text = readFileSync(file, 'utf-8');
+  const out = new Set();
+  for (const m of text.matchAll(/聚合[：:\s*`]+[`*]*([A-Za-z][A-Za-z0-9_\-]*)/g)) out.add(m[1]);
+  return out;
+}
+
+export function checkCrossChangeConsistencyLight(changeDir) {
+  const state = readState(changeDir);
+  const projectRoot = findProjectRoot(changeDir);
+  const changesDir = join(projectRoot, 'changes');
+  if (!existsSync(changesDir)) return { pass: true, failures: [], reason: 'no changes/ dir' };
+
+  const selfName = state.change_name || basename(changeDir);
+  const selfApi = extractApiPaths(join(changeDir, 'architecture', 'api.md'));
+  const selfAgg = extractAggregateNames(join(changeDir, 'architecture', 'architecture.md'));
+
+  const conflicts = [];
+  for (const entry of readdirSync(changesDir, { withFileTypes: true })) {
+    if (!entry.isDirectory() || entry.name === selfName) continue;
+    const otherDir = join(changesDir, entry.name);
+    const otherStatePath = join(otherDir, '.team-flow.yaml');
+    if (!existsSync(otherStatePath)) continue;
+    const other = readState(otherDir);
+    if (!IN_FLIGHT.has(other.state)) continue;
+
+    const otherApi = extractApiPaths(join(otherDir, 'architecture', 'api.md'));
+    const otherAgg = extractAggregateNames(join(otherDir, 'architecture', 'architecture.md'));
+
+    const apiOverlap = [...selfApi].filter(p => otherApi.has(p));
+    const aggOverlap = [...selfAgg].filter(a => otherAgg.has(a));
+    if (apiOverlap.length || aggOverlap.length) {
+      conflicts.push(
+        `${entry.name}: api=[${apiOverlap.slice(0, 5).join(', ')}] aggregates=[${aggOverlap.slice(0, 5).join(', ')}]`
+      );
+    }
+  }
+
+  if (conflicts.length) {
+    return {
+      pass: false,
+      failures: [
+        `shared surface conflicts with in-flight change(s):\n    ${conflicts.join('\n    ')} `
+        + '— resolve ownership or stagger closing; semantic-level review via cross-change-consistency-checker agent',
+      ],
+    };
+  }
+  return { pass: true, failures: [] };
+}

package/scripts/guard/checks/direct-short-path.mjs

@@ -0,0 +1,52 @@
+// scripts/guard/checks/direct-short-path.mjs — direct/lightweight 短路径 + 架构 surface 扫描
+// v0.64.0（实施计划 §4，G1 加固）：
+// - 挂 quick/lightweight 的 exploring→approved-for-build / approved-for-build→executing / closing
+// - G4 前提保障：无架构 surface（API/DB/聚合）→ 过（真琐碎零负担）
+// - 命中架构 surface → FAIL 并给升级指引（禁止静默过）；扫描失败/清单缺失一律 fail-closed
+import { readState } from '../../lib/state-loader.mjs';
+import { scanArchitectureSurface } from '../../lib/surface-scan.mjs';
+
+const UPGRADE_HINT =
+  'architecture surface (API/DB/aggregate) touched — upgrade to planned: '
+  + 'tf state upgrade <change-dir> planned (keeps code/test evidence, rolls back to approved-for-build, '
+  + 're-runs planned gates + light writeback sequence; downgrades rejected)';
+
+export function checkDirectShortPath(changeDir) {
+  const state = readState(changeDir);
+  const scan = scanArchitectureSurface(changeDir, state);
+
+  if (scan.error === 'no-baseline') {
+    return {
+      pass: false,
+      failures: [
+        'no scan baseline: base_sha missing and no origin/<default> to derive merge-base — '
+        + 'run inside a git repo with at least one commit (tf state init stamps base_sha), fail-closed',
+      ],
+    };
+  }
+  if (scan.error === 'diff-failed') {
+    return {
+      pass: false,
+      failures: [`git diff against base failed (base=${scan.base ?? 'unknown'}) — cannot verify architecture surface, fail-closed`],
+    };
+  }
+  if (scan.error === 'aggregate-list-missing') {
+    return {
+      pass: false,
+      failures: [
+        'aggregate list missing: create .team-flow/aggregate-dirs.txt (one dir prefix per line; '
+        + 'empty file = explicitly no aggregates) or run workflow-bootstrap — fail-closed, aggregate surface is blind otherwise',
+      ],
+    };
+  }
+
+  if (scan.architectureSurface.length > 0) {
+    return {
+      pass: false,
+      failures: [
+        `${UPGRADE_HINT}\n    touched: ${scan.architectureSurface.slice(0, 10).join(', ')}`,
+      ],
+    };
+  }
+  return { pass: true, failures: [] };
+}