@xulthekl/team-flow 0.67.0 → 0.69.0

package/scripts/guard/checks/security-baseline.mjs

@@ -0,0 +1,141 @@
+// scripts/guard/checks/security-baseline.mjs — 安全基线闸门（重档：full/hotfix/planned）
+// 设计：docs/plan/security-baseline-integration-design.md v1.3 §L2
+// 输入只读结构化制品，不解析 markdown 审查报告：
+//   ① .security-scope.json（现场推导落盘，security-scope.mjs 唯一实现）
+//   ② .security-verification.json（L3 code-reviewer 产出）
+//   ③ state 键（security_baseline_skipped / _skip_reason / security_scope_hash + schema_version）
+// 判定序（v1.3 重排）：存量分档 → 现场推导 → 无类别 PASS → skip 短路 →
+// 重/轻档分流（完备性对账 + verdict 映射）→ infra 交接检查。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+import { deriveSecurityScope, loadSecurityBaseline, readScopeFile } from '../../lib/security-scope.mjs';
+
+const VERIFICATION_FILE = '.security-verification.json';
+const HANDOFF_REL = join('security', 'handoff.md');
+
+function readVerification(changeDir) {
+  const p = join(changeDir, VERIFICATION_FILE);
+  if (!existsSync(p)) return null;
+  try { return JSON.parse(readFileSync(p, 'utf-8')); } catch { return 'malformed'; }
+}
+
+// verdict → 门禁映射（设计 §L3，写死）：
+//   must+satisfied / should+satisfied → PASS
+//   not-applicable → 须过 reason 判据（≥10 字符或含控制点序号），否则视同 uncovered
+//   uncovered / 缺席 → must=FAIL，should=WARN（不阻断）
+function evaluateVerdicts(baseline, scope, verification) {
+  const failures = [];
+  const warnings = [];
+  const byId = new Map((verification.items || []).map(i => [Number(i.id), i]));
+  const reasonOk = (v, id) => {
+    const r = (v.reason || '').trim();
+    return r.length >= 10 || r.includes(String(id));
+  };
+
+  for (const id of scope.code_item_ids) {
+    const item = baseline.items.find(b => b.id === id);
+    const v = byId.get(id);
+    const must = item?.severity === 'must';
+    if (!v) {
+      // 完备性对账：适用项缺席 = uncovered（防空/残缺 items 空过，设计 §L3）
+      (must ? failures : warnings).push(`#${id} ${item?.title ?? ''} 缺席于 verification（=uncovered）`);
+      continue;
+    }
+    if (v.verdict === 'satisfied') continue;
+    if (v.verdict === 'not-applicable') {
+      if (!reasonOk(v, id)) {
+        failures.push(`#${id} not-applicable 的 reason 不合格（需 ≥10 字符或含序号）`);
+      }
+      continue;
+    }
+    // uncovered 或未知 verdict（未知按 uncovered，fail-closed）
+    if (must) failures.push(`#${id} ${item?.title ?? ''} uncovered（must）`);
+    else warnings.push(`#${id} ${item?.title ?? ''} uncovered（should，WARN 不阻断）`);
+  }
+  return { failures, warnings };
+}
+
+/**
+ * 核心求值。mode = 'full'（查 verification）| 'light'（跳过逐条核验）
+ */
+export function evaluateSecurityBaseline(changeDir, mode) {
+  const state = readState(changeDir);
+
+  // 步 1：存量分档（单一判据 = 无 schema_version → WARN 软着陆，设计 §二.3）
+  if (state.schema_version == null) {
+    return { pass: true, failures: [], reason: 'legacy soft-land: no schema_version (存量 change，安全基线不阻断)' };
+  }
+
+  // 步 2：现场推导（写盘留痕；推导失败 fail-closed）
+  let scope;
+  try {
+    scope = deriveSecurityScope(changeDir, { source: 'guard' });
+  } catch (e) {
+    return { pass: false, failures: [`security scope derive crashed: ${e.message}`] };
+  }
+  if (scope.error) {
+    return {
+      pass: false,
+      failures: [`scope derive degraded (error=${scope.error}) — 无法推导适用范围，fail-closed；检查 git 基线（tf state init 打戳 base_sha）后重试 tf security scope`],
+    };
+  }
+
+  // 步 3：无适用触发类别 → PASS（已落盘留痕，可区分"无触发"与"门禁未生效"）
+  if (scope.triggered_categories.length === 0) {
+    return { pass: true, failures: [], reason: `no applicable trigger categories (${scope.files_scanned} surface files scanned); scope written for audit` };
+  }
+
+  // 步 4：skip 短路（最先于实质检查；hash 不匹配 = 范围已变 → skip 失效继续）
+  const skipped = state.security_baseline_skipped === true || state.security_baseline_skipped === 'true';
+  if (skipped) {
+    const reason = (state.security_baseline_skip_reason || '').trim();
+    if (!reason || reason === 'null') {
+      return { pass: false, failures: ['security_baseline_skipped=true but no skip reason — set security_baseline_skip_reason via tf state set'] };
+    }
+    if (state.security_scope_hash && state.security_scope_hash === scope.scope_hash) {
+      return { pass: true, failures: [], reason: `skipped: ${reason}` };
+    }
+    // hash 缺失/不匹配 → skip 失效（fail-closed 方向），继续实质检查
+  }
+
+  // 步 5：档位分流
+  if (mode === 'full') {
+    const ver = readVerification(changeDir);
+    if (!ver) {
+      return {
+        pass: false,
+        failures: [`.security-verification.json missing — 派发 code-reviewer（末 wave / planned 最终审查）产核验 JSON；无适用 code 项时亦须落盘（空 items + 全 N/A 说明）`],
+      };
+    }
+    if (ver === 'malformed') {
+      return { pass: false, failures: ['.security-verification.json malformed (JSON parse failed)'] };
+    }
+    const baseline = loadSecurityBaseline();
+    const { failures, warnings } = evaluateVerdicts(baseline, scope, ver);
+    if (failures.length) {
+      return { pass: false, failures, ...(warnings.length ? { warnings } : {}) };
+    }
+    if (warnings.length) {
+      return { pass: true, failures: [], reason: `pass with WARN: ${warnings.join('; ')}` };
+    }
+  }
+  // light 档（quick/lightweight）：不查 verification（direct 档无审查 receipt，设计 §八.5）
+
+  // 步 6：infra/config/process 交接检查（检查对象 = handoff.md，台账不进 guard）
+  if (scope.infra_item_ids.length > 0) {
+    const handoffPath = join(changeDir, HANDOFF_REL);
+    if (!existsSync(handoffPath) || !readFileSync(handoffPath, 'utf-8').trim()) {
+      return {
+        pass: false,
+        failures: [`infra-scope items ${scope.infra_item_ids.join('/')} apply but security/handoff.md missing or empty — write the handoff BEFORE tf state transition closing (设计 §L5 时序)`],
+      };
+    }
+  }
+
+  return { pass: true, failures: [] };
+}
+
+export function checkSecurityBaseline(changeDir) {
+  return evaluateSecurityBaseline(changeDir, 'full');
+}

package/scripts/guard/guard.mjs

@@ -36,6 +36,9 @@ import { checkCompoundWritebackLight } from './checks/compound-writeback-light.m
 import { checkTestMergedLight } from './checks/test-merged-light.mjs';
 import { checkCrossChangeConsistencyLight } from './checks/cross-change-consistency-light.mjs';
 import { checkExecutionReviewsPassedLight } from './checks/execution-reviews-passed-light.mjs';
+// security-baseline-integration-design v1.3：安全基线双维度（executing→closing）
+import { checkSecurityBaseline } from './checks/security-baseline.mjs';
+import { checkSecurityBaselineLight } from './checks/security-baseline-light.mjs';
 
 // Transition matrix: <from>:<to> → required check dimensions
 const TRANSITION_CHECKS = {
@@ -82,7 +85,12 @@ const TRANSITION_CHECKS = {
   // artifacts_hash）→ **伪绿静默通过**。本维度直接比对 state.artifacts_hash 与制品实算值，
   // refresh-hash 无法清屏（它只改 plan JSON，不碰 state）——故为 refresh-hash 之外的独立锚。
   // hotfix/tweak 不挂：二者跳过 spec-writer、无 planning 四件，冻结机制本身 N/A（设计 §3.9）。
-  'executing:closing':              ['contract-fresh', 'tasks-complete', 'tests-passing', 'specs-merged', 'execution-plan-ready', 'execution-reviews-passed', 'compound-captured', 'test-matrix-complete', 'arch-snapshot', 'delegation-status', 'arch-merged'],
+  // v1.3（security-baseline-integration-design）：security-baseline 新增——
+  // 44 项企业安全基线的机械闸门（现场推导 scope + verification 完备性 + infra 交接）。
+  // full（legacy variant）走本基表；hotfix 走 WORKFLOW 表、planned 走 PLANNED 表、
+  // quick/lightweight 走 QUICK 表挂 -light 变体、tweak 天然不挂（豁免）。
+  // 存量 change（无 schema_version）WARN 软着陆，冷启动零行为变化。
+  'executing:closing':              ['contract-fresh', 'tasks-complete', 'tests-passing', 'specs-merged', 'execution-plan-ready', 'execution-reviews-passed', 'compound-captured', 'test-matrix-complete', 'arch-snapshot', 'delegation-status', 'arch-merged', 'security-baseline'],
 
   // Debugging side-path
   'executing:debugging':            [],
@@ -116,7 +124,9 @@ const WORKFLOW_TRANSITION_CHECKS = {
     'bridging:approved-for-build': ['contract-current', 'dp3-approved'],
     'approved-for-build:executing': ['contract-current', 'dp3-approved', 'execution-plan-ready'],
     // hotfix exemption: no test-matrix-complete (v0.12 §45.3)
-    'executing:closing': ['tasks-complete', 'tests-passing', 'specs-merged', 'execution-plan-ready', 'execution-reviews-passed', 'compound-captured'],
+    // v1.3：security-baseline 重档——hotfix 走逐 wave 审查（execution-reviews-passed 已挂），
+    // code-reviewer 派发即 verification 生产者，重档不死锁（P1.5 R3-C1 裁定回滚）。
+    'executing:closing': ['tasks-complete', 'tests-passing', 'specs-merged', 'execution-plan-ready', 'execution-reviews-passed', 'compound-captured', 'security-baseline'],
   },
   tweak: {
     'exploring:approved-for-build': [],
@@ -141,14 +151,15 @@ const QUICK_TRANSITION_CHECKS = {
   quick: {
     'exploring:approved-for-build': ['direct-short-path', 'prd-clarity', 'history-risk'],
     'approved-for-build:executing': ['direct-short-path', 'test-matrix-ready', 'prd-clarity', 'history-risk'],
-    'executing:closing': ['direct-short-path', 'direct-test-result', 'test-matrix-complete'],
+    // v1.3：security-baseline-light——direct 档无审查 receipt，省逐条 verdict（设计 §八.5）
+    'executing:closing': ['direct-short-path', 'direct-test-result', 'test-matrix-complete', 'security-baseline-light'],
     'executing:debugging': [],
     'debugging:executing': ['direct-test-result'],
   },
   lightweight: {
     'exploring:approved-for-build': ['direct-short-path', 'prd-clarity', 'history-risk'],
     'approved-for-build:executing': ['direct-short-path', 'test-matrix-ready', 'prd-clarity', 'history-risk'],
-    'executing:closing': ['direct-short-path', 'direct-test-result', 'lightweight-completion-evidence', 'test-matrix-complete'],
+    'executing:closing': ['direct-short-path', 'direct-test-result', 'lightweight-completion-evidence', 'test-matrix-complete', 'security-baseline-light'],
     'executing:debugging': [],
     'debugging:executing': ['direct-test-result'],
   },
@@ -166,6 +177,8 @@ const PLANNED_TRANSITION_CHECKS = {
     'execution-plan-ready', 'execution-reviews-passed-light', 'test-matrix-complete',
     'tests-passing', 'arch-merged-light', 'compound-writeback-light', 'test-merged-light',
     'cross-change-consistency-light', 'delegation-status', 'specs-merged', 'tasks-complete',
+    // v1.3：security-baseline 重档（planned 有最终审查，verification 有生产者）
+    'security-baseline',
   ],
   'executing:debugging': [],
   'debugging:executing': ['execution-plan-ready', 'tests-passing'],
@@ -298,7 +311,7 @@ async function main() {
     'test-matrix-complete': (dir) => checkTestMatrixComplete(dir, CTX),
     'test-matrix-ready': (dir) => checkTestMatrixReady(dir, CTX),
     'gates-probed': (dir) => checkGatesProbed(dir),
-    // agent-governance P1-1（33 维）：接活前双维度。缺失态中性——冷启动零行为变化。
+    // agent-governance P1-1：接活前双维度。缺失态中性——冷启动零行为变化。
     'prd-clarity': (dir) => checkPrdClarityState(dir),
     'history-risk': (dir) => checkHistoryRisk(dir),
     'arch-readiness': (dir) => checkArchReadiness(dir),
@@ -317,6 +330,10 @@ async function main() {
     'test-merged-light': (dir) => checkTestMergedLight(dir),
     'cross-change-consistency-light': (dir) => checkCrossChangeConsistencyLight(dir),
     'execution-reviews-passed-light': (dir) => checkExecutionReviewsPassedLight(dir),
+    // security-baseline-integration-design v1.3（35 维）：安全基线双维度。
+    // 重档（full/hotfix/planned）查 verification 完备性；轻档（quick/lightweight）省逐条核验。
+    'security-baseline': (dir) => checkSecurityBaseline(dir),
+    'security-baseline-light': (dir) => checkSecurityBaselineLight(dir),
   };
 
   const checks = [];

package/scripts/lib/cmd-security.mjs

@@ -0,0 +1,61 @@
+// scripts/lib/cmd-security.mjs — tf security 子命令
+// v1.3（security-baseline-integration-design）：`tf security scope <change-dir> [--json]`
+// 运行共享推导模块（scripts/lib/security-scope.mjs 唯一实现），落盘 .security-scope.json
+// 并打印 scope_hash。调用点：① L3 派发前（主会话取适用子集随 dispatch prompt 传参）
+// ② 人工刷新（guard 对账 FAIL 后重跑）。LLM/人从不手写 scope JSON（设计 §二.6）。
+import { parseArgs } from 'node:util';
+import { deriveSecurityScope, loadSecurityBaseline, SCOPE_FILE } from './security-scope.mjs';
+
+export async function run(args) {
+  const { positionals, values } = parseArgs({
+    args,
+    options: { json: { type: 'boolean', default: false } },
+    allowPositionals: true,
+  });
+
+  const sub = positionals[0];
+
+  if (sub === 'baseline') {
+    // tf security baseline [--json] — 查看基线双载体（人类可读路径 + 版本锚）
+    const data = loadSecurityBaseline();
+    if (values.json) {
+      console.log(JSON.stringify({
+        baseline_version: data.baseline_version,
+        items: data.items.length,
+        path: new URL('../../skills/ce-brainstorm/references/security-baseline.json', import.meta.url).pathname,
+      }, null, 2));
+    } else {
+      console.log(`security-baseline ${data.baseline_version} — ${data.items.length} items (md+json 双载体，见 skills/ce-brainstorm/references/security-baseline.md)`);
+    }
+    return 0;
+  }
+
+  if (sub !== 'scope') {
+    console.error('Usage: tf security <scope|baseline> <args>\n' +
+      '  scope <change-dir> [--json]   推导适用触发类别并落盘 .security-scope.json\n' +
+      '  baseline [--json]             查看 44 项基线版本锚');
+    return 2;
+  }
+
+  const changeDir = positionals[1];
+  if (!changeDir) {
+    console.error('Usage: tf security scope <change-dir> [--json]');
+    return 2;
+  }
+
+  const result = deriveSecurityScope(changeDir, { source: 'cli' });
+
+  if (values.json) {
+    console.log(JSON.stringify(result, null, 2));
+  } else {
+    if (result.error) {
+      console.error(`scope derive degraded (error=${result.error}) — 基线/diff 不可用，gate 侧将 fail-closed`);
+    }
+    console.log(`Scope written: ${SCOPE_FILE}`);
+    console.log(`  triggered: ${result.triggered_categories.length ? result.triggered_categories.join(', ') : '(none — 静默 PASS 类别)'}`);
+    console.log(`  applicable items: ${result.applicable_items.length} (code: ${result.code_item_ids.length}, infra-only: ${result.infra_item_ids.length})`);
+    console.log(`  scope_hash: ${result.scope_hash}`);
+  }
+  // 推导失败（无基线/diff 失败）按 fail-closed 返回非零，供调用方判断
+  return result.error ? 1 : 0;
+}

package/scripts/lib/cmd-state.mjs

@@ -78,6 +78,11 @@ const SETTABLE_FIELDS = [
   'gates_probed_skipped', 'gates_probed_skip_reason', 'gates_probed_na',
   // v0.64.0（§4 arch-design-light）：轻架构说明显式跳过键（须附理由）
   'arch_design_light_skipped', 'arch_design_light_skip_reason',
+  // security-baseline-integration-design v1.3（§L2 三环第 3 环）：安全基线跳过三键。
+  // 三键必须与 state-loader BUILTIN_DEFAULTS + writeState 序列化分支同步注册，
+  // 缺任一环即「回显成功却零写入」。skip 写入规范：设置 skipped 必须同批带
+  // security_scope_hash（值取最近 tf security scope 输出），hash 缺失时 guard 判 skip 失效。
+  'security_baseline_skipped', 'security_baseline_skip_reason', 'security_scope_hash',
 ];
 
 export async function run(args) {

package/scripts/lib/security-scope.mjs

@@ -0,0 +1,188 @@
+// scripts/lib/security-scope.mjs — Scope Deriver（安全基线范围推导，唯一实现）
+// 设计：docs/plan/security-baseline-integration-design.md v1.3 §三
+// 单一真相源 = skills/ce-brainstorm/references/security-baseline.json（与 .md 双载体，
+// 一致性由测试断言锁）。本模块是推导的唯一实现——CLI `tf security scope` 与 guard
+// 检查器都只经此调用，杜绝多处各自实现漂移（§二.6）。
+//
+// 输出（写盘 <change-dir>/.security-scope.json）：
+//   { base_sha, triggered_categories[], applicable_items[], code_item_ids[],
+//     infra_item_ids[], scope_hash, derived_at, derived_by, files_scanned, error }
+// scope_hash 预像 = 规范化（排序）后的 triggered_categories + applicable_items id
+// （排除 derived_at 等易变字段）——见设计 §三 Scope Deriver 段。
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync, realpathSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { join, resolve, relative } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { gitChangedFiles } from './surface-scan.mjs';
+import { readState } from './state-loader.mjs';
+
+export const SCOPE_FILE = '.security-scope.json';
+
+const BASELINE_JSON_URL = new URL(
+  '../../skills/ce-brainstorm/references/security-baseline.json', import.meta.url,
+);
+
+export function loadSecurityBaseline() {
+  const raw = readFileSync(fileURLToPath(BASELINE_JSON_URL), 'utf-8');
+  const data = JSON.parse(raw);
+  if (!Array.isArray(data.items) || data.items.length !== 44) {
+    throw new Error(`security-baseline.json malformed: expected 44 items, got ${data.items?.length}`);
+  }
+  return data;
+}
+
+// --- 触发推导规则（路径启发式 + 文档关键词；规则改动须同步设计文档 §三） ---
+
+// 不构成暴露面的文件（文档 / 测试 / 元数据）——纯此类变更 → 无触发类别 → 静默 PASS
+const NON_SURFACE = /\.(md|txt|png|jpe?g|gif|svg|pdf|lock|sum|ipynb|css|scss|html?)$/i;
+const TEST_PATH = /(^|\/)(test|tests|__tests__|spec|e2e)(\/|$)|\.(test|spec)\.[jt]sx?$/i;
+
+// 源码扩展名 → 基础触发类别（改代码即查基础安全判据）
+const SOURCE_EXT = /\.(java|kt|kts|ts|tsx|js|jsx|mjs|cjs|vue|py|go|rs|cs|php|rb|scala|swift|sql|sh|groovy|xml|yaml|yml|json|toml|properties|conf|ini|dockerfile)$/i;
+const SOURCE_BASE_TRIGGERS = ['code-quality', 'input', 'output'];
+
+// 路径启发式 → 追加触发类别（对路径与文件名匹配，大小写不敏感）
+const PATH_RULES = [
+  { re: /upload|attachment|multipart|file[_-]?(io|controller|service|handler)/i, cat: 'file-io' },
+  { re: /auth|login|session|token|jwt|oauth|permission|rbac|role|sso|passwd|password/i, cat: 'authn-authz' },
+  { re: /redirect|forward|callback|goto|跳转|重定向/i, cat: 'redirect' },
+  { re: /audit|operat(ion|ing)_?log|审计/i, cat: 'audit' },
+  { re: /ingress|gateway|nginx|tls|ssl|cert|https|deploy|k8s|kubernetes/i, cat: 'transport' },
+  { re: /xml|soap|xxe|jaxb/i, cat: 'processing' },
+  { re: /pom\.xml$|package\.json$|requirements.*\.txt$|go\.mod$|build\.gradle$|gemfile$|composer\.json$/i, cat: 'deps' },
+];
+
+// 部署/依赖清单路径 → deps（与 SOURCE_EXT 重叠时两者都算）
+const DEPLOY_PATH = /(^|\/)(\.github|\.gitlab-ci|deploy|helm|charts|docker|k8s|infrastructure)(\/|$)|Dockerfile|docker-compose/i;
+
+// spec/arch 文档关键词 → 追加触发类别（文本扫描，中文+英文）
+const TEXT_RULES = [
+  { re: /文件上传|上传附件|multipart|file\s*upload/i, cat: 'file-io' },
+  { re: /登录|认证|鉴权|权限|会话|token|jwt|oauth/i, cat: 'authn-authz' },
+  { re: /跳转|重定向|redirect/i, cat: 'redirect' },
+  { re: /审计日志|操作日志|审计/i, cat: 'audit' },
+  { re: /https|tls|hsts|ssl|传输加密/i, cat: 'transport' },
+  { re: /xxe|xml\s*实体|soap/i, cat: 'processing' },
+  { re: /依赖升级|组件版本|中间件版本|cve/i, cat: 'deps' },
+  { re: /响应头|content-security-policy|x-frame|nosniff/i, cat: 'output' },
+  { re: /sql\s*注入|参数化|查询注入/i, cat: 'code-quality' },
+];
+
+const DOC_TARGETS = ['proposal.md', 'design.md', 'specs', 'architecture'];
+
+function scanDocText(changeDir) {
+  const texts = [];
+  for (const t of DOC_TARGETS) {
+    const p = join(changeDir, t);
+    if (!existsSync(p)) continue;
+    try {
+      const st = readFileSync(p, 'utf-8');
+      texts.push(st);
+    } catch { /* skip */ }
+  }
+  return texts.join('\n');
+}
+
+/**
+ * 推导安全基线适用范围。
+ * @param {string} changeDir
+ * @param {object} [opts]
+ * @param {'cli'|'guard'} [opts.source]  落盘 provenance 标记
+ * @param {boolean} [opts.write=true]    是否写盘 .security-scope.json
+ * @returns 推导结果对象（含 error 字段：'no-baseline'|'diff-failed'|null）
+ */
+export function deriveSecurityScope(changeDir, opts = {}) {
+  const { source = 'cli', write = true } = opts;
+  const state = readState(changeDir);
+  const baseline = loadSecurityBaseline();
+
+  const changed = gitChangedFiles(changeDir, state);
+  const error = changed.error; // no-baseline / diff-failed / null
+  // 排除 change 目录自身（.team-flow.yaml / .security-*.json / .superpowers/ 等
+  // 流程产物会被 git status 三源扫到——它们不是变更代码的暴露面）。
+  const changeRoot = relativeRepoPrefix(changeDir);
+  const files = (changed.files || []).filter(f =>
+    !(changeRoot && f.startsWith(changeRoot)) && !f.startsWith('.superpowers/'));
+
+  const triggered = new Set();
+  let filesScanned = 0;
+
+  for (const f of files) {
+    if (TEST_PATH.test(f)) continue;
+    if (NON_SURFACE.test(f) && !DEPLOY_PATH.test(f)) continue;
+    filesScanned++;
+    if (SOURCE_EXT.test(f) || DEPLOY_PATH.test(f)) {
+      for (const c of SOURCE_BASE_TRIGGERS) triggered.add(c);
+    }
+    for (const rule of PATH_RULES) {
+      if (rule.re.test(f)) triggered.add(rule.cat);
+    }
+    if (DEPLOY_PATH.test(f)) triggered.add('deps');
+  }
+
+  const docText = scanDocText(changeDir);
+  if (docText) {
+    for (const rule of TEXT_RULES) {
+      if (rule.re.test(docText)) triggered.add(rule.cat);
+    }
+  }
+
+  const triggeredList = [...triggered].sort();
+  const applicable = baseline.items
+    .filter(i => triggeredList.includes(i.trigger))
+    .sort((a, b) => a.id - b.id);
+
+  const hashPreimage = JSON.stringify({
+    triggered: triggeredList,
+    items: applicable.map(i => i.id),
+  });
+  const scopeHash = createHash('sha256').update(hashPreimage).digest('hex').slice(0, 16);
+
+  const result = {
+    base_sha: changed.base ?? state.base_sha ?? null,
+    triggered_categories: triggeredList,
+    applicable_items: applicable.map(i => i.id),
+    code_item_ids: applicable.filter(i => i.locus.includes('code')).map(i => i.id),
+    infra_item_ids: applicable.filter(i => !i.locus.includes('code')).map(i => i.id),
+    scope_hash: scopeHash,
+    derived_at: new Date().toISOString(),
+    derived_by: source,
+    files_scanned: filesScanned,
+    error,
+  };
+
+  if (write) {
+    writeFileSync(join(changeDir, SCOPE_FILE), JSON.stringify(result, null, 2) + '\n', 'utf-8');
+  }
+  return result;
+}
+
+/** changeDir 在其 git 仓库内的相对前缀（带尾 /），用于过滤流程产物自身。
+ *  双侧 realpath 归一——macOS /var → /private/var 符号链接会让字符串前缀比较失效。 */
+function relativeRepoPrefix(changeDir) {
+  try {
+    // stdio 收窄：非 git 目录时 git 会往 stderr 打 fatal 原文（报错不指向真因），
+    // 由调用侧按 error=no-baseline 给结构化提示
+    const root = realpathSync(execFileSync('git', ['rev-parse', '--show-toplevel'], {
+      cwd: changeDir, encoding: 'utf-8', timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim());
+    if (!root) return null;
+    const abs = realpathSync(resolve(changeDir));
+    if (!abs.startsWith(root)) return null;
+    const rel = relative(root, abs);
+    return rel && !rel.startsWith('..') ? rel.replace(/\\/g, '/') + '/' : '';
+  } catch {
+    return null;
+  }
+}
+
+export function readScopeFile(changeDir) {
+  const p = join(changeDir, SCOPE_FILE);
+  if (!existsSync(p)) return null;
+  try {
+    return JSON.parse(readFileSync(p, 'utf-8'));
+  } catch {
+    return null;
+  }
+}

package/scripts/lib/state-loader.mjs

@@ -114,6 +114,13 @@ const BUILTIN_DEFAULTS = {
   // 与 arch_merge_skipped / test_matrix_skipped 同型：跳过必须附理由留痕）
   arch_design_light_skipped: null,
   arch_design_light_skip_reason: null,
+  // Security baseline gate (security-baseline-integration-design v1.3 §L2)
+  // 三键全量三环（BUILTIN_DEFAULTS + writeState 序列化 + cmd-state SETTABLE_FIELDS），
+  // 缺任一环即「回显成功却零写入」（v0.59.0 同型教训）。security_scope_hash 绑定
+  // 最近一次推导的 scope_hash——范围变化（hash 不匹配）时 skip 自动失效（防跨轮固化）。
+  security_baseline_skipped: null,
+  security_baseline_skip_reason: null,
+  security_scope_hash: null,
   // 注意：schema_version 故意不在 BUILTIN_DEFAULTS 中（v0.13 §48.1）——
   // 它只由 `tf state init` 在 change 创建时打戳，字段缺失本身就是"存量 change"信号。
 };
@@ -281,6 +288,11 @@ export function writeState(changeDir, state) {
   lines.push('# === Light architecture design gate (v0.64.0) ===');
   lines.push(`arch_design_light_skipped: ${state.arch_design_light_skipped ?? 'null'}`);
   lines.push(`arch_design_light_skip_reason: ${state.arch_design_light_skip_reason ?? 'null'}`);
+  lines.push('');
+  lines.push('# === Security baseline gate (security-baseline-integration-design v1.3) ===');
+  lines.push(`security_baseline_skipped: ${state.security_baseline_skipped ?? 'null'}`);
+  lines.push(`security_baseline_skip_reason: ${state.security_baseline_skip_reason ?? 'null'}`);
+  lines.push(`security_scope_hash: ${state.security_scope_hash ?? 'null'}`);
 
   fs.writeFileSync(filePath, lines.join('\n') + '\n', 'utf-8');
 }

package/scripts/team-flow.mjs

@@ -44,6 +44,8 @@ const COMMANDS = {
   'glaf4-evidence-export': () => import('./lib/glaf4-evidence-export.mjs'),
   'glaf4-delegation': () => import('./lib/glaf4-delegation.mjs'),
   'repo-layout': () => import('./lib/cmd-repo-layout.mjs'),
+  // security-baseline-integration-design v1.3：安全基线范围推导（Scope Deriver CLI 入口）
+  security:            () => import('./lib/cmd-security.mjs'),
   test:                () => import('./lib/test-record.mjs'),
 };
 
@@ -94,6 +96,11 @@ Commands:
   config [options]      Display or modify configuration
   config --resolve-model <profile>  Resolve a configured model profile without switching models
   state <sub> <dir>     Manage .team-flow.yaml state (init|check|transition|get|rebuild|set|upgrade)
+  security scope <change-dir> [--json]
+                        Derive security-baseline applicability (trigger categories + items),
+                        write .security-scope.json, print scope_hash (v1.3 Scope Deriver CLI)
+  security baseline [--json]
+                        Show 44-item enterprise security baseline version anchor (md+json 双载体)
   inject <dir>          Generate phase-guard artifacts; use --platforms <name|all> when platform is ambiguous
   audit <dir>           Generate decision-point-audit.md from .team-flow.yaml
   checkpoint save <change-dir> --task <id> --next <text>