agentic-flow-kit 0.7.0 → 0.9.0

package/templates/_agents/scripts/check-lane-surface.test.mjs

@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+// check-lane-surface.test.mjs — 泳道完整性门禁 fixture 套件（2026-10-01 drift-hardening）
+// 方法：现场构造临时根（workflow/{intents,incidents} + .agents/lane-surfaces.txt），经
+//       --root/--branch/--staged-file 三注入位 spawn 脚本，断言 exit code 与输出关键词。
+//       场景集对齐同名 spec「功能行为」表 S1-S6 + 平台边界（CRLF / 非 ASCII / detached /
+//       配置语法 / 状态活性 / incident 等价），另含 1 个 git 真仓端到端（quotepath=off 实路径）。
+// 用法：node templates/_agents/scripts/check-lane-surface.test.mjs（npm test 随跑）
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
+const SCRIPT = path.join(SCRIPT_DIR, 'check-lane-surface.mjs');
+
+let pass = 0;
+let fail = 0;
+const check = (desc, cond, detail = '') => {
+  if (cond) { pass++; console.log(`PASS  ${desc}`); }
+  else { fail++; console.log(`FAIL  ${desc}${detail ? '\n      ' + detail : ''}`); }
+};
+
+const mkfix = () => {
+  const d = fs.mkdtempSync(path.join(os.tmpdir(), 'lane-surface-test-'));
+  for (const s of ['intents', 'incidents']) fs.mkdirSync(path.join(d, 'workflow', s), { recursive: true });
+  fs.mkdirSync(path.join(d, '.agents'), { recursive: true });
+  return d;
+};
+const w = (root, rel, content) => fs.writeFileSync(path.join(root, rel), content);
+// eol='\r\n' 时整文件按 CRLF 写（平台边界：frontmatter 读取容忍性）
+const intent = (name, fm, eol = '\n') => `---${eol}${fm}${eol}---${eol}# INTENT — ${name}${eol}`;
+const incident = (fm) => `---\n${fm}\n---\n# INCIDENT\n`;
+const run = (root, { branch = 'main', staged = [] } = {}) => {
+  const listFile = path.join(root, 'staged.txt');
+  fs.writeFileSync(listFile, staged.join('\n') + '\n');
+  const r = spawnSync(process.execPath, [SCRIPT, '--root', root, '--branch', branch, '--staged-file', listFile], { encoding: 'utf8' });
+  return { code: r.status, out: `${r.stdout || ''}${r.stderr || ''}` };
+};
+
+// 通用 fixture：面清单 + 一个活跃 L1 intent（2026-09-28）+ 可选第二个入口
+const base = (root, { level = 'L1', status = 'approved', extra = null } = {}) => {
+  w(root, '.agents/lane-surfaces.txt', '^templates/\n^\\.agents/(scripts|hooks)/\n');
+  w(root, 'workflow/intents/2026-09-28-old-l1.md', intent('x', `状态: ${status}\n级别: ${level}\n日期: 2026-09-28\n模块: pipeline`));
+  if (extra) w(root, extra[0], intent('y', extra[1]));
+};
+const FM_L0_NEW = '状态: draft\n级别: L0\n日期: 2026-10-01\n模块: ui';
+
+// --- S1：命中 + 活跃 L2 存在 → 豁免放行 ---
+{
+  const d = mkfix();
+  base(d, { level: 'L2' });
+  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs'] });
+  check('S1 命中面+活跃 L2 入口 → 放行且无触达面判低输出', r.code === 0 && !r.out.includes('触达面判低'), r.out);
+}
+// --- S2：命中 + 活跃全为 L0/L1 → 阻断 ---
+{
+  const d = mkfix();
+  base(d);
+  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs', 'docs/readme.md'] });
+  check('S2 命中面+仅活跃 L1 → 阻断且消息含标签/命中文件/入口名/修法',
+    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('templates/_agents/scripts/x.mjs')
+      && r.out.includes('workflow/intents/2026-09-28-old-l1.md') && r.out.includes('修法'),
+    r.out);
+}
+// --- S2b：多个 L0/L1 活跃 → 点名最新（日期排序）---
+{
+  const d = mkfix();
+  base(d, { extra: ['workflow/intents/2026-10-01-new-l0.md', FM_L0_NEW] });
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('S2b 多活跃 L0/L1 → 关联入口取最新日期件', r.code === 1 && r.out.includes('2026-10-01-new-l0') && r.out.includes('共 2 件'), r.out);
+}
+// --- S2c：experiment 分支 → 检查 A 降级 advisory ---
+{
+  const d = mkfix();
+  base(d);
+  const r = run(d, { branch: 'experiment/poc', staged: ['templates/t.md'] });
+  check('S2c experiment 分支检查 A → advisory 放行', r.code === 0 && r.out.includes('advisory·experiment'), r.out);
+}
+// --- S3：命中 + 无活跃入口 → advisory 放行（done 不算活跃）---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
+  w(d, 'workflow/intents/2026-09-01-closed.md', intent('c', '状态: done\n级别: L1\n日期: 2026-09-01\n模块: ui'));
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('S3 命中+无活跃（done 不算活跃）→ advisory 放行', r.code === 0 && r.out.includes('无任何活跃入口'), r.out);
+}
+// --- S4b：experiment 分支 intent 缺标记 → 阻断；补标记放行 ---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r1 = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S4b-1 experiment 分支无标记 intent → 阻断且含修法',
+    r1.code === 1 && r1.out.includes('[探索标记缺失]') && r1.out.includes('阶段: exploring'), r1.out);
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui\n阶段: exploring'));
+  const r2 = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S4b-2 补「阶段: exploring」后放行', r2.code === 0, r2.out);
+}
+// --- S4b-c：口径同加固门——「状态: exploring」亦认 ---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: exploring\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S4b-c 「状态: exploring」亦认（口径同加固门）', r.code === 0, r.out);
+}
+// --- S6：非 experiment 分支 → 检查 B 不触发 ---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r = run(d, { branch: 'main', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S6 非 experiment 分支无标记 intent → 放行（B 不触发）', r.code === 0 && !r.out.includes('探索标记缺失'), r.out);
+}
+// --- S5：配置缺失 → 检查 A 整体静默跳过（装户无感）---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('S5 无 lane-surfaces.txt → 静默跳过', r.code === 0 && r.out.trim() === '', JSON.stringify(r.out));
+}
+// --- incident 等价：open incident L2 豁免；fixed L1 算活跃低级 ---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^src/\n');
+  w(d, 'workflow/incidents/2026-09-30-inc.md', incident('状态: open\n级别: L2\n发现: 2026-09-30\n模块: backend'));
+  const r = run(d, { staged: ['src/a.ts'] });
+  check('incident 等价：活跃 open incident L2 → 豁免放行', r.code === 0, r.out);
+}
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^src/\n');
+  w(d, 'workflow/incidents/2026-09-30-inc.md', incident('状态: fixed\n级别: L1\n发现: 2026-09-30\n模块: backend'));
+  const r = run(d, { staged: ['src/a.ts'] });
+  check('incident 等价：fixed L1 算活跃低级入口 → 阻断',
+    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('incidents/2026-09-30-inc.md'), r.out);
+}
+// --- 级别缺失：按低级计（不能自证 L2+ 即拦）---
+{
+  const d = mkfix();
+  base(d, { level: '', status: 'draft' });
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('级别缺失的活跃入口按低级计 → 阻断且消息含「级别缺失」', r.code === 1 && r.out.includes('级别缺失'), r.out);
+}
+// --- 平台边界：CRLF frontmatter ---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
+  w(d, 'workflow/intents/2026-09-28-crlf.md', intent('x', '状态: approved\r\n级别: L1\r\n日期: 2026-09-28\r\n模块: ui', '\r\n'));
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('CRLF frontmatter 正常解析（仍阻断）', r.code === 1 && r.out.includes('2026-09-28-crlf'), r.out);
+}
+// --- 平台边界：非 ASCII 路径透传（quotepath 教训的对账面）---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^模块/\n');
+  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
+  const r = run(d, { staged: ['模块/接口契约.ts'] });
+  check('非 ASCII 暂存路径命中模式且消息原样透传', r.code === 1 && r.out.includes('模块/接口契约.ts'), r.out);
+}
+// --- 平台边界：detached HEAD（branch=HEAD）→ A strict、B 跳过 ---
+{
+  const d = mkfix();
+  base(d);
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r = run(d, { branch: 'HEAD', staged: ['templates/t.md', 'workflow/intents/2026-10-01-poc.md'] });
+  check('detached HEAD：A 按 strict 阻断、B 不触发', r.code === 1 && r.out.includes('[触达面判低]') && !r.out.includes('探索标记缺失'), r.out);
+}
+// --- 边界：_TEMPLATE.md 排除（不算活跃入口、不触发 B）---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/_TEMPLATE.md', intent('t', '状态: draft\n级别: L1'));
+  const r = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/_TEMPLATE.md'] });
+  check('_TEMPLATE.md 不触发检查 B，也不算活跃入口', r.code === 0, r.out);
+}
+// --- 配置边界：非法 ERE 行 → fail-closed ---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^ok/\n[invalid(\n');
+  const r = run(d, { staged: ['ok/a.ts'] });
+  check('配置含非法 ERE → fail-closed 阻断并指出坏行', r.code === 1 && r.out.includes('[面清单语法错误]') && r.out.includes('[invalid('), r.out);
+}
+// --- git 真仓端到端：走生产发现路径（quotepath=off + diff --cached）---
+{
+  const d = mkfix();
+  const g = (a) => spawnSync('git', ['-c', 'core.quotepath=off', ...a], { cwd: d, encoding: 'utf8' });
+  g(['init', '-q']);
+  g(['config', 'user.email', 't@t']);
+  g(['config', 'user.name', 't']);
+  w(d, '.agents/lane-surfaces.txt', '^模块/\n');
+  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
+  fs.mkdirSync(path.join(d, '模块'), { recursive: true });
+  w(d, '模块/接口契约.ts', 'export {};\n');
+  g(['add', '模块/接口契约.ts']);
+  const r = spawnSync(process.execPath, [SCRIPT, '--root', d], { cwd: d, encoding: 'utf8' });
+  check('git 端到端：真实暂存非 ASCII 路径 → 阻断且路径不转义',
+    r.status === 1 && `${r.stdout || ''}${r.stderr || ''}`.includes('模块/接口契约.ts'),
+    `${r.stdout || ''}${r.stderr || ''}`);
+}
+
+console.log(`\n${fail ? `❌ ${fail} failed` : '✅ all passed'}（${pass} passed）`);
+process.exit(fail ? 1 : 0);

package/templates/_agents/scripts/check-ledger.mjs

@@ -0,0 +1,65 @@
+// check-ledger.mjs — managed 台账快检（2026-09-28 ledger-precommit-gate）：kit.json 台账 sha ↔ 盘面工作树
+// 补 pre-commit 盲区：双源门禁（source-sync-check）查 templates↔.agents 正文，两侧成对回退时静默；
+// doctor §4 查台账↔盘面但只在手动全量跑——「台账 sha 预 landing」（台账记了盘面尚不存在的内容 sha）
+// 随常规提交静默落 main，三次真实发生（0272a1c 预入 / ff3c721 还原窗口 / 537df18 闭合），本脚本在
+// 提交时刻补齐第三边。sha 口径：LF 归一 utf8（同 doctor §4 / render.mjs shaText / source-sync-check
+// 读取侧，跨 checkout 稳定；装户自包含约束决定独立实现，三处口径改动须同批）。
+// 边界：仅包源环境由 .githooks/pre-commit 触发（装户 managed 手改走 doctor §4 WARN 口径，不硬拦）；
+//       managed 删除即拦——sync 对 removed 只报不删，删件须手动同步装副本并重跑 sync 刷台账。
+// 用法：node .agents/scripts/check-ledger.mjs（cwd = 仓库根；非零出口即阻断提交）
+//       单元测试：import { ledgerDrift } from './check-ledger.mjs'
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+
+export function ledgerDrift(target = process.cwd()) {
+  const kitPath = path.join(target, '.agents', 'kit.json');
+  if (!fs.existsSync(kitPath)) return { skipped: true, note: '无 .agents/kit.json（非 flow-kit 安装）' };
+  let kit;
+  try {
+    kit = JSON.parse(fs.readFileSync(kitPath, 'utf8'));
+  } catch (e) {
+    return { skipped: false, fatal: `kit.json 解析失败：${e.message}`, modified: [], gone: [], total: 0, version: '?' };
+  }
+  if (!Array.isArray(kit.managed)) {
+    // fail-loud（独立复核 P2-3，2026-09-28）：JSON 合法但 managed 缺失/非数组时静默「全对齐」= 假放，
+    // 同 doctor §4 的 Array.isArray 显式判口径，台账结构坏了必须响
+    return { skipped: false, fatal: 'kit.json managed 缺失或非数组', modified: [], gone: [], total: 0, version: kit.version };
+  }
+  const modified = [];
+  const gone = [];
+  const managed = kit.managed;
+  for (const f of managed) {
+    const p = path.join(target, f.rel);
+    if (!fs.existsSync(p)) { gone.push(f.rel); continue; }
+    const h = createHash('sha256').update(fs.readFileSync(p, 'utf8').replace(/\r\n/g, '\n'), 'utf8').digest('hex'); // LF 归一，同 doctor §4
+    if (h !== f.sha256) modified.push(f.rel);
+  }
+  return { skipped: false, fatal: '', modified, gone, total: managed.length, version: kit.version };
+}
+
+const isMain = process.argv[1] && process.argv[1].endsWith('check-ledger.mjs');
+if (isMain) {
+  const r = ledgerDrift();
+  console.log('▶ flow-kit check-ledger');
+  if (r.skipped) {
+    console.log('  ' + r.note + '，跳过 ✅');
+    process.exit(0);
+  }
+  console.log('  kit.json v' + r.version + '：managed ' + r.total + ' 份，台账 ↔ 盘面（工作树，LF 归一）');
+  if (r.fatal) console.error('❌ ' + r.fatal);
+  if (r.modified.length) {
+    console.error('  台账漂移（盘面 ≠ 台账 sha）' + r.modified.length + '：');
+    for (const rel of r.modified) console.error('    - ' + rel);
+  }
+  if (r.gone.length) {
+    console.error('  managed 缺失 ' + r.gone.length + '：');
+    for (const rel of r.gone) console.error('    - ' + rel);
+  }
+  if (r.fatal || r.modified.length || r.gone.length) {
+    console.error('  提交被拦：kit.json 与盘面不一致（预 landing / 手改未随动）——跑 node bin/flow-kit.mjs sync 成对后原路重试');
+    process.exit(1);
+  }
+  console.log('  全对齐 ✅');
+  process.exit(0);
+}

package/templates/_agents/scripts/check-ledger.test.mjs

@@ -0,0 +1,127 @@
+// check-ledger.test.mjs — managed 台账快检测试（2026-09-28 ledger-precommit-gate）
+// 方法：fixture 临时目录 .agents/kit.json + managed 件，调 ledgerDrift() + spawnSync CLI 出口码；
+//       真实仓库 baseline（包源环境全对齐；装户环境 SKIP 不计失败，沿 source-sync-check 先例）
+// 判据：S1 全对齐  S2 内容漂移逐份列出  S3 缺失  S4 CRLF×LF 归一不误报  S5 无 kit.json skip
+//       S6 kit.json 解析失败 fatal  S7/S8 CLI 出口码 0/1  S9 真实仓 baseline
+// 用法：node templates/_agents/scripts/check-ledger.test.mjs（装副本直跑亦然）
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { createHash } from 'node:crypto';
+import { ledgerDrift } from './check-ledger.mjs';
+
+let pass = 0, failCount = 0;
+function check(name, cond, detail = '') {
+  if (cond) { pass++; console.log('PASS ' + name); }
+  else { failCount++; console.log('FAIL ' + name + (detail ? '——' + detail : '')); }
+}
+
+// LF 归一 sha（同 check-ledger.mjs / doctor §4 口径）
+const lfSha = (s) => createHash('sha256').update(s.replace(/\r\n/g, '\n'), 'utf8').digest('hex');
+
+function mkFixture(managed, entries, kitRaw) {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'fk-cl-'));
+  for (const [rel, content] of Object.entries(managed)) {
+    fs.mkdirSync(path.join(root, path.dirname(rel)), { recursive: true });
+    fs.writeFileSync(path.join(root, rel), content);
+  }
+  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
+  fs.writeFileSync(path.join(root, '.agents', 'kit.json'),
+    kitRaw !== undefined ? kitRaw : JSON.stringify({ kit: 't', version: '0.0.0-test', managed: entries }));
+  return root;
+}
+
+const SCRIPT = path.join(path.dirname(fileURLToPath(import.meta.url)), 'check-ledger.mjs');
+const runCli = (cwd) => spawnSync(process.execPath, [SCRIPT], { encoding: 'utf8', cwd });
+
+// ---- S1 全对齐 → 无漂移无缺失 ----
+{
+  const root = mkFixture({ '.agents/scripts/a.mjs': 'A v1\n' }, [{ rel: '.agents/scripts/a.mjs', sha256: lfSha('A v1\n') }]);
+  const r = ledgerDrift(root);
+  check('S1 全对齐 → modified=0 gone=0 total=1', !r.skipped && r.modified.length === 0 && r.gone.length === 0 && r.total === 1, JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S2 内容漂移 → 逐份列出 rel ----
+{
+  const root = mkFixture({ '.agents/scripts/a.mjs': 'A 改了\n' }, [{ rel: '.agents/scripts/a.mjs', sha256: lfSha('A v1\n') }]);
+  const r = ledgerDrift(root);
+  check('S2 内容漂移 → modified=[a.mjs]', !r.skipped && r.modified.length === 1 && r.modified[0] === '.agents/scripts/a.mjs' && r.gone.length === 0, JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S3 managed 缺失 → gone ----
+{
+  const root = mkFixture({}, [{ rel: '.agents/scripts/gone.mjs', sha256: lfSha('x') }]);
+  const r = ledgerDrift(root);
+  check('S3 缺失 → gone=[gone.mjs]', !r.skipped && r.gone.length === 1 && r.gone[0] === '.agents/scripts/gone.mjs' && r.modified.length === 0, JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S4 CRLF 盘面 × LF 台账 → 归一不误报 ----
+{
+  const root = mkFixture({ '.agents/scripts/crlf.mjs': 'B v1\r\nline2\r\n' }, [{ rel: '.agents/scripts/crlf.mjs', sha256: lfSha('B v1\nline2\n') }]);
+  const r = ledgerDrift(root);
+  check('S4 CRLF 盘面 × LF 台账 → modified=0（归一口径）', !r.skipped && r.modified.length === 0 && r.gone.length === 0, JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S5 无 kit.json → skipped（非 flow-kit 安装兼容） ----
+{
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'fk-cl-'));
+  const r = ledgerDrift(root);
+  check('S5 无 kit.json → skipped=true', r.skipped === true && typeof r.note === 'string', JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S6 kit.json 解析失败 → fatal ----
+{
+  const root = mkFixture({}, [], '{ kit: 坏 json');
+  const r = ledgerDrift(root);
+  check('S6 解析失败 → fatal 非空', !r.skipped && typeof r.fatal === 'string' && r.fatal.includes('解析失败'), JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S6b JSON 合法但 managed 缺失/非数组 → fatal（不静默全对齐；独立复核 P2-3） ----
+{
+  const root = mkFixture({}, [], JSON.stringify({ kit: 't', version: '0.0.0-test' }));
+  const r = ledgerDrift(root);
+  check('S6b managed 非数组 → fatal 非空（fail-loud）', !r.skipped && typeof r.fatal === 'string' && r.fatal.includes('managed'), JSON.stringify(r));
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S7 CLI 干净 fixture → exit 0 + 全对齐 ----
+{
+  const root = mkFixture({ '.agents/scripts/a.mjs': 'A v1\n' }, [{ rel: '.agents/scripts/a.mjs', sha256: lfSha('A v1\n') }]);
+  const p = runCli(root);
+  check('S7 CLI 全对齐 → exit 0 + 「全对齐」', p.status === 0 && p.stdout.includes('全对齐'), `status=${p.status} out=${p.stdout}`);
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S8 CLI 漂移 fixture → exit 1 + 列出 rel + sync 提示 ----
+{
+  const root = mkFixture({ '.agents/scripts/a.mjs': 'A 改了\n' }, [{ rel: '.agents/scripts/a.mjs', sha256: lfSha('A v1\n') }]);
+  const p = runCli(root);
+  check('S8 CLI 漂移 → exit 1 + rel + sync 提示', p.status === 1 && p.stderr.includes('.agents/scripts/a.mjs') && p.stderr.includes('sync'), `status=${p.status} err=${p.stderr}`);
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+// ---- S9 真实仓 baseline：包源环境台账↔盘面全对齐；装户环境 SKIP 不计失败 ----
+{
+  let srcRoot = path.dirname(fileURLToPath(import.meta.url));
+  for (let i = 0; i < 5 && srcRoot; i++) {
+    if (fs.existsSync(path.join(srcRoot, 'templates', '_agents'))) break;
+    srcRoot = path.dirname(srcRoot);
+  }
+  if (!srcRoot || !fs.existsSync(path.join(srcRoot, 'templates', '_agents'))) {
+    console.log('SKIP S9（装户环境无包源，不计失败）');
+  } else {
+    const r = ledgerDrift(srcRoot);
+    check('S9 真实仓 baseline → 台账↔盘面全对齐', !r.skipped && r.modified.length === 0 && r.gone.length === 0, JSON.stringify({ modified: r.modified, gone: r.gone }));
+  }
+}
+
+console.log(`\n合计: PASS ${pass} / FAIL ${failCount}`);
+process.exit(failCount ? 1 : 0);