agentic-flow-kit 0.8.0 → 0.9.0

package/templates/_agents/lane-surfaces.txt

@@ -0,0 +1,14 @@
+# L2 触达面清单（单源：本文件——check-lane-surface.mjs 检查 A 共读，pre-commit「泳道完整性」门禁）
+# 格式：每行一条 ERE（grep -E 兼容），匹配暂存文件的仓库相对路径（/ 分隔）。
+#   # 注释与空行忽略；本文件缺失或清单为空 = 检查跳过（装户无感升级）。
+#   正则语法错误行 → 门禁 fail-closed 阻断（防静默空洞，修配置后重试）。
+# 语义：命中任一模式 = 本次改动触及「一处定义、多处消费」的契约 / 规则面（L2 触达面，
+#   判据见 .agents/commands/new-task.md §级别判断）。此时须有活跃（draft/approved / open/fixed）
+#   L2/L3 入口罩着；活跃入口全为 L0/L1 会被 pre-commit「触达面判低」拦截（三选修法见门禁消息）。
+#   无任何活跃入口时仅 advisory——docs / bootstrap 豁免类改动（new-task.md §intent 豁免）不受阻。
+# 本仓默认面（引擎 / 契约面，行为承载目录——commands/roles 纯提示文本属 docs 级不列入；按项目自行改）：
+^templates/
+^\.agents/(scripts|hooks)/
+^\.githooks/
+^bin/
+^modules/

package/templates/_agents/roles/implementer.md

@@ -1,6 +1,6 @@
 # Implementer
 
-> 公共角色契约（本文件）：`.agents/roles/implementer.md`。宿主薄适配（`.opencode/` / `.trae/` / `.zcode/` 下 `agents/implementer.md`）正文段同源本文件，frontmatter 各自保留宿主特化字段（check-loop 检查项 6 按本引用校验适配层不断线）。
+> 公共角色契约（本文件）：`.agents/roles/implementer.md`。宿主薄适配（各宿主目录下 `agents/implementer.md`）正文段同源本文件，frontmatter 各自保留宿主特化字段（check-loop 检查项 6 按本引用校验适配层不断线）。
 
 ## 职责
 

package/templates/_agents/roles/independent-reviewer.md

@@ -1,6 +1,6 @@
 # Independent Reviewer
 
-> 公共角色契约（本文件）：`.agents/roles/independent-reviewer.md`。宿主薄适配（`.opencode/` / `.trae/` / `.zcode/` 下 `agents/independent-reviewer.md`）正文段同源本文件，frontmatter 各自保留宿主特化字段（check-loop 检查项 6 按本引用校验适配层不断线）。
+> 公共角色契约（本文件）：`.agents/roles/independent-reviewer.md`。宿主薄适配（各宿主目录下 `agents/independent-reviewer.md`）正文段同源本文件，frontmatter 各自保留宿主特化字段（check-loop 检查项 6 按本引用校验适配层不断线）。
 
 ## 职责
 

package/templates/_agents/roles/ui-verifier.md

@@ -1,6 +1,6 @@
 # UI Verifier
 
-> 公共角色契约（本文件）：`.agents/roles/ui-verifier.md`。宿主薄适配（`.opencode/` / `.trae/` / `.zcode/` 下 `agents/ui-verifier.md`）正文段同源本文件，frontmatter 各自保留宿主特化字段（check-loop 检查项 6 按本引用校验适配层不断线）。
+> 公共角色契约（本文件）：`.agents/roles/ui-verifier.md`。宿主薄适配（各宿主目录下 `agents/ui-verifier.md`）正文段同源本文件，frontmatter 各自保留宿主特化字段（check-loop 检查项 6 按本引用校验适配层不断线）。
 
 ## 职责
 

package/templates/_agents/scripts/check-lane-surface.mjs

@@ -0,0 +1,164 @@
+#!/usr/bin/env node
+// check-lane-surface.mjs — 泳道完整性门禁（pre-commit 增量；2026-10-01 drift-hardening）
+// 检查 A「触达面判低」：暂存 diff 命中项目 L2 触达面（.agents/lane-surfaces.txt，ERE 逐行；
+//   # 注释与空行忽略；文件缺失或清单为空 = 检查跳过，装户无感）时——
+//   存在活跃 L2/L3 入口 → 放行（归因歧义为已知边界：机器不猜「哪个入口在干这批改动」）；
+//   活跃入口全为 L0/L1（含级别缺失）→ hard 拦，点名最新 L0/L1 入口 + 三选修法；
+//   无任何活跃入口 → 仅 advisory（docs / bootstrap 豁免类改动的合法形态）。
+//   活跃 = intents draft/approved + incidents open/fixed（incident≡intent 等价口径）。
+//   experiment/* 分支降级 advisory（泳道哲学：PoC 免闭环纪律，转正由 pre-push 加固门兜底）。
+// 检查 B「探索标记缺失」：experiment/* 分支暂存的 workflow/intents/*.md（排除 _TEMPLATE）
+//   frontmatter 无「阶段: exploring」且无「状态: exploring」（口径同 check-loop 加固门）→ hard 拦。
+//   标记是加固门覆盖率的前提且补写零成本——advisory 免的是纪律负担，不免标记本身。
+// 判据原则（incidents/2026-09-28-batch-ledger-audit 教训）：只用一手事实——暂存文件清单、
+//   当前分支名、工作区 frontmatter 字段；不用时间戳 / 字符串相等反推过程事实。
+// 边界：git 调用一律 -c core.quotepath=off（非 ASCII 路径教训，同 check-pairing-incremental.sh）；
+//   frontmatter 读取容忍 CRLF（显式按 \r?\n 切分）；detached HEAD 分支不可判 → A 按 strict、
+//   B 跳过（沿 pairing 门先例）；配置行正则语法错误 → fail-closed（防静默空洞）。
+// 已知边界：commit-time 门禁，CI / pre-push 复跑面无对应全量检查（push 时刻无暂存 diff 一手事实，
+//   树级反推违背判据原则）——沿增量门禁 pre-commit-only 先例，声明于 spec 风险评估 R2。
+// 用法：node check-lane-surface.mjs [--root <dir>] [--branch <名>] [--staged-file <清单文件>]
+//   （--root/--branch/--staged-file 为测试注入位；缺省自 git 发现。staged-file 每行一个仓库相对路径）
+// 退出码：0 放行（含 advisory）；1 阻断（stderr 出 [标签] 消息与修法）
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+
+const argv = process.argv.slice(2);
+const argOf = (k) => {
+  const i = argv.indexOf(k);
+  return i >= 0 && i + 1 < argv.length ? argv[i + 1] : '';
+};
+
+const gitOut = (cwd, gitArgs) => {
+  const r = spawnSync('git', ['-c', 'core.quotepath=off', ...gitArgs], { cwd, encoding: 'utf8' });
+  return r.status === 0 ? String(r.stdout || '') : '';
+};
+
+const ROOT = argOf('--root') || gitOut(process.cwd(), ['rev-parse', '--show-toplevel']).trim() || process.cwd();
+// detached HEAD 时 abbrev-ref 返回 'HEAD' → 不匹配 experiment/* → A strict / B 跳过
+const BRANCH = argOf('--branch') || gitOut(ROOT, ['rev-parse', '--abbrev-ref', 'HEAD']).trim();
+const stagedArg = argOf('--staged-file');
+const STAGED = stagedArg
+  ? fs.readFileSync(stagedArg, 'utf8').split(/\r?\n/).filter(Boolean)
+  : gitOut(ROOT, ['diff', '--cached', '--name-only', '--diff-filter=ACMR']).split(/\r?\n/).filter(Boolean);
+
+const isExperiment = /^experiment\//.test(BRANCH);
+
+// frontmatter 读取（CRLF 容忍；口径同 check-loop fmGet：--- 包夹、键行前缀匹配）
+const fmOf = (file) => {
+  const fm = {};
+  let lines;
+  try {
+    lines = fs.readFileSync(file, 'utf8').split(/\r?\n/);
+  } catch {
+    return fm;
+  }
+  if (!/^---\s*$/.test(lines[0] || '')) return fm;
+  for (let i = 1; i < lines.length; i++) {
+    if (/^---\s*$/.test(lines[i])) break;
+    const m = lines[i].match(/^([^:]+):\s*(.*)$/);
+    if (m) fm[m[1].trim()] = m[2].trim();
+  }
+  return fm;
+};
+
+// 触达面配置：缺失/空 → []（检查 A 跳过）；语法错误 → fail-closed
+const loadPatterns = () => {
+  const file = path.join(ROOT, '.agents', 'lane-surfaces.txt');
+  if (!fs.existsSync(file)) return [];
+  const bad = [];
+  const pats = fs.readFileSync(file, 'utf8')
+    .split(/\r?\n/)
+    .map((l) => l.trim())
+    .filter((l) => l && !l.startsWith('#'))
+    .map((l) => {
+      try {
+        return new RegExp(l);
+      } catch {
+        bad.push(l);
+        return null;
+      }
+    })
+    .filter(Boolean);
+  if (bad.length) {
+    console.error(`泳道完整性（增量）— BLOCK:\n  [面清单语法错误] .agents/lane-surfaces.txt 存在非法 ERE 行：${bad.join(' | ')}\n  修法：修正或删除该行后重试（fail-closed，防静默空洞）`);
+    process.exit(1);
+  }
+  return pats;
+};
+
+// 活跃入口收集（incident≡intent 等价；日期键 intent=日期 / incident=发现）
+const ACTIVE = {
+  intent: new Set(['draft', 'approved']),
+  incident: new Set(['open', 'fixed']),
+};
+const collectActive = () => {
+  const out = [];
+  for (const [dir, kind, dateKey] of [['intents', 'intent', '日期'], ['incidents', 'incident', '发现']]) {
+    const dirPath = path.join(ROOT, 'workflow', dir);
+    if (!fs.existsSync(dirPath)) continue;
+    for (const f of fs.readdirSync(dirPath).sort()) {
+      if (!f.endsWith('.md') || f === '_TEMPLATE.md') continue;
+      const fm = fmOf(path.join(dirPath, f));
+      if (!ACTIVE[kind].has(fm['状态'] || '')) continue;
+      out.push({ rel: `workflow/${dir}/${f}`, base: f.replace(/\.md$/, ''), level: fm['级别'] || '', date: fm[dateKey] || '', kind });
+    }
+  }
+  return out;
+};
+
+const blocks = [];
+const advisories = [];
+
+// --- 检查 A：触达面判低 ---
+const patterns = loadPatterns();
+const hits = patterns.length ? STAGED.filter((p) => patterns.some((re) => re.test(p))) : [];
+if (hits.length) {
+  const active = collectActive();
+  const hasHigh = active.some((e) => e.level === 'L2' || e.level === 'L3');
+  if (!hasHigh) {
+    const low = active.filter((e) => e.level !== 'L2' && e.level !== 'L3');
+    if (low.length) {
+      const newest = [...low].sort((a, b) => (b.date || '').localeCompare(a.date || '') || b.rel.localeCompare(a.rel))[0];
+      const text = [
+        `[触达面判低] 暂存命中 L2 触达面，但活跃入口全为 L0/L1（含级别缺失）：`,
+        `  命中: ${hits.join(' ')}`,
+        `  关联入口: ${newest.rel}（${newest.level || '级别缺失'}${newest.date ? `，${newest.date}` : ''}；活跃 L0/L1 共 ${low.length} 件）`,
+        `  修法（三选一）: ① 升级该入口「级别/risk_level」至 L2/L3 并补同名 spec（.agents/commands/design.md）`,
+        `    ② 该入口已完成则关单（done）或显式放弃（superseded/cancelled）——不留活跃残留`,
+        `    ③ 面清单误配则修 .agents/lane-surfaces.txt`,
+      ].join('\n');
+      if (isExperiment) advisories.push(`（advisory·experiment 泳道，不阻断；转正由 pre-push 加固门兜底）\n${text}`);
+      else blocks.push(text);
+    } else {
+      advisories.push(`[触达面判低]（advisory）暂存命中 L2 触达面（${hits.length} 个文件），但当前无任何活跃入口——若非 docs / bootstrap 豁免类改动（.agents/commands/new-task.md §intent 豁免），请先立入口文档`);
+    }
+  }
+}
+
+// --- 检查 B：探索标记缺失（仅 experiment/* 分支）---
+if (isExperiment) {
+  const missing = STAGED
+    .filter((p) => /^workflow\/intents\/[^/]+\.md$/.test(p) && path.basename(p) !== '_TEMPLATE.md')
+    .filter((p) => {
+      const fm = fmOf(path.join(ROOT, p));
+      return fm['阶段'] !== 'exploring' && fm['状态'] !== 'exploring';
+    });
+  if (missing.length) {
+    blocks.push([
+      `[探索标记缺失] experiment/* 分支暂存的 intent 缺「阶段: exploring」标记：`,
+      ...missing.map((p) => `  ${p}`),
+      `  修法（二选一）: ① frontmatter 补一行「阶段: exploring」（advisory 免纪律不免标记——标记是 pre-push 加固门覆盖率的前提）`,
+      `    ② 该件不属探索——换正式分支走标准泳道`,
+    ].join('\n'));
+  }
+}
+
+for (const a of advisories) console.error(`泳道完整性（增量）— advisory:\n${a}\n`);
+if (blocks.length) {
+  for (const b of blocks) console.error(`泳道完整性（增量）— BLOCK:\n${b}\n`);
+  console.error('pre-commit: 泳道完整性未通过，提交已阻止（spec: workflow/specs/2026-10-01-drift-hardening.md）');
+  process.exit(1);
+}
+process.exit(0);

package/templates/_agents/scripts/check-lane-surface.test.mjs

@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+// check-lane-surface.test.mjs — 泳道完整性门禁 fixture 套件（2026-10-01 drift-hardening）
+// 方法：现场构造临时根（workflow/{intents,incidents} + .agents/lane-surfaces.txt），经
+//       --root/--branch/--staged-file 三注入位 spawn 脚本，断言 exit code 与输出关键词。
+//       场景集对齐同名 spec「功能行为」表 S1-S6 + 平台边界（CRLF / 非 ASCII / detached /
+//       配置语法 / 状态活性 / incident 等价），另含 1 个 git 真仓端到端（quotepath=off 实路径）。
+// 用法：node templates/_agents/scripts/check-lane-surface.test.mjs（npm test 随跑）
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
+const SCRIPT = path.join(SCRIPT_DIR, 'check-lane-surface.mjs');
+
+let pass = 0;
+let fail = 0;
+const check = (desc, cond, detail = '') => {
+  if (cond) { pass++; console.log(`PASS  ${desc}`); }
+  else { fail++; console.log(`FAIL  ${desc}${detail ? '\n      ' + detail : ''}`); }
+};
+
+const mkfix = () => {
+  const d = fs.mkdtempSync(path.join(os.tmpdir(), 'lane-surface-test-'));
+  for (const s of ['intents', 'incidents']) fs.mkdirSync(path.join(d, 'workflow', s), { recursive: true });
+  fs.mkdirSync(path.join(d, '.agents'), { recursive: true });
+  return d;
+};
+const w = (root, rel, content) => fs.writeFileSync(path.join(root, rel), content);
+// eol='\r\n' 时整文件按 CRLF 写（平台边界：frontmatter 读取容忍性）
+const intent = (name, fm, eol = '\n') => `---${eol}${fm}${eol}---${eol}# INTENT — ${name}${eol}`;
+const incident = (fm) => `---\n${fm}\n---\n# INCIDENT\n`;
+const run = (root, { branch = 'main', staged = [] } = {}) => {
+  const listFile = path.join(root, 'staged.txt');
+  fs.writeFileSync(listFile, staged.join('\n') + '\n');
+  const r = spawnSync(process.execPath, [SCRIPT, '--root', root, '--branch', branch, '--staged-file', listFile], { encoding: 'utf8' });
+  return { code: r.status, out: `${r.stdout || ''}${r.stderr || ''}` };
+};
+
+// 通用 fixture：面清单 + 一个活跃 L1 intent（2026-09-28）+ 可选第二个入口
+const base = (root, { level = 'L1', status = 'approved', extra = null } = {}) => {
+  w(root, '.agents/lane-surfaces.txt', '^templates/\n^\\.agents/(scripts|hooks)/\n');
+  w(root, 'workflow/intents/2026-09-28-old-l1.md', intent('x', `状态: ${status}\n级别: ${level}\n日期: 2026-09-28\n模块: pipeline`));
+  if (extra) w(root, extra[0], intent('y', extra[1]));
+};
+const FM_L0_NEW = '状态: draft\n级别: L0\n日期: 2026-10-01\n模块: ui';
+
+// --- S1：命中 + 活跃 L2 存在 → 豁免放行 ---
+{
+  const d = mkfix();
+  base(d, { level: 'L2' });
+  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs'] });
+  check('S1 命中面+活跃 L2 入口 → 放行且无触达面判低输出', r.code === 0 && !r.out.includes('触达面判低'), r.out);
+}
+// --- S2：命中 + 活跃全为 L0/L1 → 阻断 ---
+{
+  const d = mkfix();
+  base(d);
+  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs', 'docs/readme.md'] });
+  check('S2 命中面+仅活跃 L1 → 阻断且消息含标签/命中文件/入口名/修法',
+    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('templates/_agents/scripts/x.mjs')
+      && r.out.includes('workflow/intents/2026-09-28-old-l1.md') && r.out.includes('修法'),
+    r.out);
+}
+// --- S2b：多个 L0/L1 活跃 → 点名最新（日期排序）---
+{
+  const d = mkfix();
+  base(d, { extra: ['workflow/intents/2026-10-01-new-l0.md', FM_L0_NEW] });
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('S2b 多活跃 L0/L1 → 关联入口取最新日期件', r.code === 1 && r.out.includes('2026-10-01-new-l0') && r.out.includes('共 2 件'), r.out);
+}
+// --- S2c：experiment 分支 → 检查 A 降级 advisory ---
+{
+  const d = mkfix();
+  base(d);
+  const r = run(d, { branch: 'experiment/poc', staged: ['templates/t.md'] });
+  check('S2c experiment 分支检查 A → advisory 放行', r.code === 0 && r.out.includes('advisory·experiment'), r.out);
+}
+// --- S3：命中 + 无活跃入口 → advisory 放行（done 不算活跃）---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
+  w(d, 'workflow/intents/2026-09-01-closed.md', intent('c', '状态: done\n级别: L1\n日期: 2026-09-01\n模块: ui'));
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('S3 命中+无活跃（done 不算活跃）→ advisory 放行', r.code === 0 && r.out.includes('无任何活跃入口'), r.out);
+}
+// --- S4b：experiment 分支 intent 缺标记 → 阻断；补标记放行 ---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r1 = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S4b-1 experiment 分支无标记 intent → 阻断且含修法',
+    r1.code === 1 && r1.out.includes('[探索标记缺失]') && r1.out.includes('阶段: exploring'), r1.out);
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui\n阶段: exploring'));
+  const r2 = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S4b-2 补「阶段: exploring」后放行', r2.code === 0, r2.out);
+}
+// --- S4b-c：口径同加固门——「状态: exploring」亦认 ---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: exploring\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S4b-c 「状态: exploring」亦认（口径同加固门）', r.code === 0, r.out);
+}
+// --- S6：非 experiment 分支 → 检查 B 不触发 ---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r = run(d, { branch: 'main', staged: ['workflow/intents/2026-10-01-poc.md'] });
+  check('S6 非 experiment 分支无标记 intent → 放行（B 不触发）', r.code === 0 && !r.out.includes('探索标记缺失'), r.out);
+}
+// --- S5：配置缺失 → 检查 A 整体静默跳过（装户无感）---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('S5 无 lane-surfaces.txt → 静默跳过', r.code === 0 && r.out.trim() === '', JSON.stringify(r.out));
+}
+// --- incident 等价：open incident L2 豁免；fixed L1 算活跃低级 ---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^src/\n');
+  w(d, 'workflow/incidents/2026-09-30-inc.md', incident('状态: open\n级别: L2\n发现: 2026-09-30\n模块: backend'));
+  const r = run(d, { staged: ['src/a.ts'] });
+  check('incident 等价：活跃 open incident L2 → 豁免放行', r.code === 0, r.out);
+}
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^src/\n');
+  w(d, 'workflow/incidents/2026-09-30-inc.md', incident('状态: fixed\n级别: L1\n发现: 2026-09-30\n模块: backend'));
+  const r = run(d, { staged: ['src/a.ts'] });
+  check('incident 等价：fixed L1 算活跃低级入口 → 阻断',
+    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('incidents/2026-09-30-inc.md'), r.out);
+}
+// --- 级别缺失：按低级计（不能自证 L2+ 即拦）---
+{
+  const d = mkfix();
+  base(d, { level: '', status: 'draft' });
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('级别缺失的活跃入口按低级计 → 阻断且消息含「级别缺失」', r.code === 1 && r.out.includes('级别缺失'), r.out);
+}
+// --- 平台边界：CRLF frontmatter ---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
+  w(d, 'workflow/intents/2026-09-28-crlf.md', intent('x', '状态: approved\r\n级别: L1\r\n日期: 2026-09-28\r\n模块: ui', '\r\n'));
+  const r = run(d, { staged: ['templates/t.md'] });
+  check('CRLF frontmatter 正常解析（仍阻断）', r.code === 1 && r.out.includes('2026-09-28-crlf'), r.out);
+}
+// --- 平台边界：非 ASCII 路径透传（quotepath 教训的对账面）---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^模块/\n');
+  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
+  const r = run(d, { staged: ['模块/接口契约.ts'] });
+  check('非 ASCII 暂存路径命中模式且消息原样透传', r.code === 1 && r.out.includes('模块/接口契约.ts'), r.out);
+}
+// --- 平台边界：detached HEAD（branch=HEAD）→ A strict、B 跳过 ---
+{
+  const d = mkfix();
+  base(d);
+  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
+  const r = run(d, { branch: 'HEAD', staged: ['templates/t.md', 'workflow/intents/2026-10-01-poc.md'] });
+  check('detached HEAD：A 按 strict 阻断、B 不触发', r.code === 1 && r.out.includes('[触达面判低]') && !r.out.includes('探索标记缺失'), r.out);
+}
+// --- 边界：_TEMPLATE.md 排除（不算活跃入口、不触发 B）---
+{
+  const d = mkfix();
+  w(d, 'workflow/intents/_TEMPLATE.md', intent('t', '状态: draft\n级别: L1'));
+  const r = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/_TEMPLATE.md'] });
+  check('_TEMPLATE.md 不触发检查 B，也不算活跃入口', r.code === 0, r.out);
+}
+// --- 配置边界：非法 ERE 行 → fail-closed ---
+{
+  const d = mkfix();
+  w(d, '.agents/lane-surfaces.txt', '^ok/\n[invalid(\n');
+  const r = run(d, { staged: ['ok/a.ts'] });
+  check('配置含非法 ERE → fail-closed 阻断并指出坏行', r.code === 1 && r.out.includes('[面清单语法错误]') && r.out.includes('[invalid('), r.out);
+}
+// --- git 真仓端到端：走生产发现路径（quotepath=off + diff --cached）---
+{
+  const d = mkfix();
+  const g = (a) => spawnSync('git', ['-c', 'core.quotepath=off', ...a], { cwd: d, encoding: 'utf8' });
+  g(['init', '-q']);
+  g(['config', 'user.email', 't@t']);
+  g(['config', 'user.name', 't']);
+  w(d, '.agents/lane-surfaces.txt', '^模块/\n');
+  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
+  fs.mkdirSync(path.join(d, '模块'), { recursive: true });
+  w(d, '模块/接口契约.ts', 'export {};\n');
+  g(['add', '模块/接口契约.ts']);
+  const r = spawnSync(process.execPath, [SCRIPT, '--root', d], { cwd: d, encoding: 'utf8' });
+  check('git 端到端：真实暂存非 ASCII 路径 → 阻断且路径不转义',
+    r.status === 1 && `${r.stdout || ''}${r.stderr || ''}`.includes('模块/接口契约.ts'),
+    `${r.stdout || ''}${r.stderr || ''}`);
+}
+
+console.log(`\n${fail ? `❌ ${fail} failed` : '✅ all passed'}（${pass} passed）`);
+process.exit(fail ? 1 : 0);