agentic-flow-kit 1.8.2 → 2.0.0

package/templates/_agents/scripts/commit-check-trigger.test.mjs

@@ -1,205 +0,0 @@
-// commit-check-trigger.test.mjs — builds/checks 触发判定测试（ext 全局 / prefix 前缀 / 双不命中 / 引擎自改豁免 / --full）。
-// 方法：临时 git 仓库 + 被测 hook + 假构建命令（node -e 打标）——不跑真实构建，秒级完成。
-// 命名避开装户项目的 commit-check.test.mjs（敏感判据测试，项目自持）——本文件测触发器，随包走。
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-
-const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
-const HOOK = path.join(SCRIPT_DIR, '..', 'hooks', 'commit-check.cjs');
-
-let pass = 0, fail = 0;
-const check = (desc, cond, detail = '') => {
-  if (cond) { pass++; console.log(`PASS  ${desc}`); }
-  else { fail++; console.log(`FAIL  ${desc}${detail ? `\n       ${detail}` : ''}`); }
-};
-const git = (root, args) => spawnSync('git', args, { cwd: root, encoding: 'utf8' });
-
-// mkfix：临时 git 仓 + hook + 触发器假配置（构建命令 = 打标文件，跑没跑看标记存在性）
-const mkfix = () => {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'cc-trigger-test-'));
-  git(root, ['init', '-q']);
-  git(root, ['config', 'user.email', 't@t']);
-  git(root, ['config', 'user.name', 't']);
-  fs.mkdirSync(path.join(root, '.agents', 'hooks'), { recursive: true });
-  fs.copyFileSync(HOOK, path.join(root, '.agents', 'hooks', 'commit-check.cjs'));
-  const marks = path.join(root, 'marks');
-  const cmd = (name) => `node -e "require('fs').writeFileSync('${marks.replaceAll('\\', '/').replaceAll('\'', '\\\'')}/${name}','')"`;
-  fs.mkdirSync(marks);
-  fs.writeFileSync(path.join(root, '.agents', 'hooks', 'commit-check.config.json'), JSON.stringify({
-    knownPatterns: [],
-    builds: [
-      { name: 'extbuild', command: cmd('extbuild'), ext: ['.xyz'] },
-      { name: 'prefixbuild', command: cmd('prefixbuild'), prefix: 'docs/' },
-    ],
-    checks: [],
-  }));
-  return { root, marks, cmd };
-};
-
-// stage：写文件并暂存，跑 hook（extraArgs 透传如 --full），返回 { status, out, ran }
-const runHook = (root, extraArgs = []) => {
-  const r = spawnSync('node', ['.agents/hooks/commit-check.cjs', ...extraArgs], { cwd: root, encoding: 'utf8' });
-  return { status: r.status, out: `${r.stdout || ''}${r.stderr || ''}` };
-};
-const stage = (root, rel, content) => {
-  const abs = path.join(root, rel);
-  fs.mkdirSync(path.dirname(abs), { recursive: true });
-  fs.writeFileSync(abs, content, 'utf8');
-  git(root, ['add', '--', rel]);
-};
-const ran = (marks, name) => fs.existsSync(path.join(marks, name));
-
-let f = mkfix();
-
-// 场景 1：ext 全局触发——任意目录下 .xyz 命中 extbuild
-stage(f.root, 'src/a.xyz', 'x');
-let r = runHook(f.root);
-check('S1 ext 全局触发（.xyz → extbuild 跑）', ran(f.marks, 'extbuild') && r.status === 0, r.out);
-
-// 场景 2：prefix 前缀触发——docs/ 下任意文件命中 prefixbuild；其他位置同名扩展不命中
-f = mkfix();
-stage(f.root, 'wiki/看板.html', '<html></html>');
-r = runHook(f.root);
-check('S2 prefix 外的 .html 不触发 prefixbuild（wiki html 场景）', !ran(f.marks, 'prefixbuild') && r.status === 0, r.out);
-stage(f.root, 'docs/readme.md', 'doc');
-r = runHook(f.root);
-check('S2b docs/ 前缀任意文件触发 prefixbuild', ran(f.marks, 'prefixbuild') && r.status === 0, r.out);
-
-// 场景 3：双不命中 → SKIP 提示且零构建
-f = mkfix();
-stage(f.root, 'notes/other.txt', 'plain');
-r = runHook(f.root);
-check('S3 双不命中 → SKIP 提示、无构建', r.out.includes('SKIP') && !ran(f.marks, 'extbuild') && !ran(f.marks, 'prefixbuild') && r.status === 0, r.out);
-
-// 场景 4：引擎自改豁免——.agents/ 下即使放 .xyz 也不触发构建
-f = mkfix();
-stage(f.root, '.agents/scripts/engine.xyz', 'engine');
-r = runHook(f.root);
-check('S4 .agents/ 自身变更不触发构建', !ran(f.marks, 'extbuild') && r.status === 0, r.out);
-
-// 场景 5：--full 全跑（合并提交口径）
-f = mkfix();
-stage(f.root, 'unrelated.txt', 'x');
-r = runHook(f.root, ['--full']);
-check('S5 --full 无条件全跑全部 builds', ran(f.marks, 'extbuild') && ran(f.marks, 'prefixbuild') && r.status === 0, r.out);
-
-// 场景 6：builds.when = pkg:scripts.build。无脚本则 SKIP 且不执行；文件型 when 缺失仍跳过。
-f = mkfix();
-fs.writeFileSync(path.join(f.root, '.agents', 'hooks', 'commit-check.config.json'), JSON.stringify({
-  knownPatterns: [],
-  builds: [{ name: 'build', command: f.cmd('build'), ext: ['.js'], when: ['pkg:scripts.build'] }],
-  checks: [{ name: 'lint', command: f.cmd('lint'), ext: ['.js'], when: ['eslint.config.js'] }],
-}));
-fs.writeFileSync(path.join(f.root, 'package.json'), JSON.stringify({ name: 't', scripts: {} }));
-stage(f.root, 'src/a.js', 'console.log(1)\n');
-r = runHook(f.root);
-check('S6 无 scripts.build → 构建 SKIP、命令不跑、退出 0',
-  r.status === 0 && !ran(f.marks, 'build') && r.out.includes('pkg:scripts.build') && r.out.includes('SKIP')
-  && !r.out.includes('无匹配的源码变更'), r.out);
-check('S6 文件型 when 缺失仍跳过（eslint.config.js）', !ran(f.marks, 'lint') && r.out.includes('eslint.config.js'), r.out);
-
-// 场景 7：scripts.build 为非空字符串 → 构建命令执行；补上 eslint 配置后质量检查也执行。
-f = mkfix();
-fs.writeFileSync(path.join(f.root, '.agents', 'hooks', 'commit-check.config.json'), JSON.stringify({
-  knownPatterns: [],
-  builds: [{ name: 'build', command: f.cmd('build'), ext: ['.js'], when: ['pkg:scripts.build'] }],
-  checks: [{ name: 'lint', command: f.cmd('lint'), ext: ['.js'], when: ['eslint.config.js'] }],
-}));
-fs.writeFileSync(path.join(f.root, 'package.json'), JSON.stringify({ name: 't', scripts: { build: 'node -e 0' } }));
-fs.writeFileSync(path.join(f.root, 'eslint.config.js'), 'export default [];\n');
-stage(f.root, 'src/a.js', 'console.log(1)\n');
-r = runHook(f.root);
-check('S7 有 scripts.build 且 eslint 配置存在 → 构建与质量检查都执行',
-  r.status === 0 && ran(f.marks, 'build') && ran(f.marks, 'lint'), r.out);
-
-// 场景 8：--full 也不越过 pkg: when（没有脚本就不跑）
-f = mkfix();
-fs.writeFileSync(path.join(f.root, '.agents', 'hooks', 'commit-check.config.json'), JSON.stringify({
-  knownPatterns: [],
-  builds: [{ name: 'build', command: f.cmd('build'), ext: ['.js'], when: ['pkg:scripts.build'] }],
-  checks: [],
-}));
-fs.writeFileSync(path.join(f.root, 'package.json'), JSON.stringify({ name: 't' }));
-stage(f.root, 'src/a.js', 'console.log(1)\n');
-r = runHook(f.root, ['--full']);
-check('S8 --full 仍尊重 pkg:scripts.build',
-  r.status === 0 && !ran(f.marks, 'build') && r.out.includes('SKIP') && !r.out.includes('无匹配的源码变更'), r.out);
-
-// 场景 9：pkg:scripts.build 四种不满足都不执行（空白、非字符串、非法 JSON、没有 package.json）
-const unsatisfied = [
-  ['空白字符串', (root) => fs.writeFileSync(path.join(root, 'package.json'), JSON.stringify({ name: 't', scripts: { build: '   ' } }))],
-  ['非字符串', (root) => fs.writeFileSync(path.join(root, 'package.json'), JSON.stringify({ name: 't', scripts: { build: 1 } }))],
-  ['非法 JSON', (root) => fs.writeFileSync(path.join(root, 'package.json'), '{')],
-  ['缺少 package.json', () => {}],
-];
-for (const [label, writePkg] of unsatisfied) {
-  f = mkfix();
-  fs.writeFileSync(path.join(f.root, '.agents', 'hooks', 'commit-check.config.json'), JSON.stringify({
-    knownPatterns: [],
-    builds: [{ name: 'build', command: f.cmd('build'), ext: ['.js'], when: ['pkg:scripts.build'] }],
-    checks: [],
-  }));
-  writePkg(f.root);
-  stage(f.root, 'src/a.js', 'console.log(1)\n');
-  r = runHook(f.root);
-  check(`S9 ${label} → SKIP、命令不跑、不报无匹配`,
-    r.status === 0 && !ran(f.marks, 'build') && r.out.includes('pkg:scripts.build') && !r.out.includes('无匹配的源码变更'), r.out);
-}
-
-// 场景 10：--no-build 跳过全部构建（2026-10-16 构建门后移 pre-push）——ext 命中也不跑
-f = mkfix();
-stage(f.root, 'src/a.xyz', 'x');
-r = runHook(f.root, ['--no-build']);
-check('S10 --no-build 命中 ext 也不构建（后移 pre-push）',
-  r.status === 0 && !ran(f.marks, 'extbuild') && r.out.includes('--no-build'), r.out);
-
-// 场景 11：--range 推送范围模式——范围内 .xyz 触发 extbuild；敏感扫描跳过有提示
-f = mkfix();
-fs.writeFileSync(path.join(f.root, 'old.txt'), 'old\n');
-git(f.root, ['add', 'old.txt']);
-git(f.root, ['commit', '-q', '-m', 'old']);
-stage(f.root, 'src/ranged.xyz', 'x');
-const shaOld = git(f.root, ['rev-parse', 'HEAD']).stdout.trim();
-git(f.root, ['commit', '-q', '-m', 'ranged']);
-const shaNew = git(f.root, ['rev-parse', 'HEAD']).stdout.trim();
-r = runHook(f.root, ['--range', shaOld, shaNew]);
-check('S11 --range 范围内 .xyz 触发 extbuild 且提示跳过敏感扫描',
-  r.status === 0 && ran(f.marks, 'extbuild') && r.out.includes('SKIP: --range 模式跳过敏感扫描'), r.out);
-
-// 场景 11b：--range 范围只含非触发文件 → 零构建
-f = mkfix();
-fs.writeFileSync(path.join(f.root, 'a.txt'), 'a\n');
-git(f.root, ['add', 'a.txt']);
-git(f.root, ['commit', '-q', '-m', 'a']);
-const s1 = git(f.root, ['rev-parse', 'HEAD']).stdout.trim();
-fs.writeFileSync(path.join(f.root, 'b.txt'), 'b\n');
-git(f.root, ['add', 'b.txt']);
-git(f.root, ['commit', '-q', '-m', 'b']);
-const s2 = git(f.root, ['rev-parse', 'HEAD']).stdout.trim();
-r = runHook(f.root, ['--range', s1, s2]);
-check('S11b --range 范围无触发文件 → 零构建',
-  r.status === 0 && !ran(f.marks, 'extbuild') && !ran(f.marks, 'prefixbuild'), r.out);
-
-// 场景 12：--range 全零 old sha（新分支首推）→ 全量构建语义（等价 --full 构建面）
-f = mkfix();
-fs.writeFileSync(path.join(f.root, 'seed.txt'), 'seed\n');
-git(f.root, ['add', 'seed.txt']);
-git(f.root, ['commit', '-q', '-m', 'seed']);
-const shaHead = git(f.root, ['rev-parse', 'HEAD']).stdout.trim();
-r = runHook(f.root, ['--range', '0'.repeat(40), shaHead]);
-check('S12 --range 全零 old = 全量构建语义',
-  r.status === 0 && ran(f.marks, 'extbuild') && ran(f.marks, 'prefixbuild'), r.out);
-
-// 场景 13：--range sha 非法 → BLOCK（信任边界：sha 来自 git 管道仍校验）
-f = mkfix();
-r = runHook(f.root, ['--range', 'not-a-sha', 'HEAD']);
-check('S13 --range 非 sha 参数 → BLOCK exit 1', r.status === 1 && r.out.includes('BLOCK'), r.out);
-
-for (const d of fs.readdirSync(os.tmpdir()).filter((x) => x.startsWith('cc-trigger-test-'))) {
-  fs.rmSync(path.join(os.tmpdir(), d), { recursive: true, force: true });
-}
-console.log(`\n合计: PASS ${pass} / FAIL ${fail}`);
-process.exit(fail ? 1 : 0);

package/templates/_agents/scripts/compact-ledgers.mjs

@@ -1,97 +0,0 @@
-#!/usr/bin/env node
-// compact-ledgers.mjs — 台账分片归并器（2026-10-12 ledger-shard-write 配套；2026-10-13 ledger-shard-default 起为默认分片的收敛动作）
-// 用途：里程碑节点或发布前，把 `.agents/confirmations.d/*.jsonl` 的分片确认行并回主台账
-//   `.agents/confirmations.jsonl` 并清理分片。分片已是**默认**写入口径（confirm-doc 不带 --no-shard 即写分片），
-//   长期不归并会让台账面无限碎片化——本脚本就是可选的收敛动作（跨分支合并另由 union driver 承担，归并非必需）。
-//
-// 保持 append-only 前缀不变量：主台账既有行**严格保序不动**，分片新行只追加到末尾——这正是
-//   check-ledger-invariant 的「旧 blob 是新 blob 的逐字节前缀」所要求的形态。绝不做重排/去重改写。
-//
-// 安全设计（三条，缺一条都可能损坏主台账）：
-//   ① 默认 dry-run：只报告「将并入 N 行」，不动盘。必须显式 execute 才写。
-//   ② 原子覆写：同目录临时文件 + rename。中途崩溃 = 主台账原样、分片未删，可安全重跑。
-//   ③ 幂等：并集按整行文本去重（复用 git-merge-jsonl 的同款判据），重复执行结果不变。
-//   任一分片读取失败 → 立即中止，主台账与全部分片保持原样。
-//
-// 用法：node .agents/scripts/compact-ledgers.mjs [--root <仓库根>] [--execute]
-import fs from 'node:fs';
-import path from 'node:path';
-import { mergeJsonlLines } from './git-merge-jsonl.mjs';
-import { LEDGER_REL, SHARD_DIR_REL } from './ledger-loader.mjs';
-
-const linesOf = (t) => (t || '').replace(/\r\n/g, '\n').split('\n').filter((l) => l.trim().length > 0);
-
-// compactLedgers(root, { execute })：纯函数形态，供测试直测。
-//   返回 { ok, skipped?, reason?, added, before, after, shards, shardLines, error? }
-export function compactLedgers(root = process.cwd(), { execute = false } = {}) {
-  const mainLedger = path.join(root, ...LEDGER_REL.split('/'));
-  const shardDir = path.join(root, ...SHARD_DIR_REL.split('/'));
-
-  if (!fs.existsSync(shardDir) || !fs.statSync(shardDir).isDirectory()) {
-    return { ok: true, skipped: true, reason: '无分片目录', added: 0, before: 0, after: 0, shards: 0, shardLines: 0 };
-  }
-  const shardFiles = fs.readdirSync(shardDir).filter((f) => f.endsWith('.jsonl')).sort();
-  if (shardFiles.length === 0) {
-    return { ok: true, skipped: true, reason: '分片目录无 .jsonl', added: 0, before: 0, after: 0, shards: 0, shardLines: 0 };
-  }
-
-  const mainBefore = fs.existsSync(mainLedger) ? fs.readFileSync(mainLedger, 'utf8') : '';
-  const mainBeforeLines = linesOf(mainBefore);
-
-  let shardCombined = '';
-  let shardLineCount = 0;
-  for (const f of shardFiles) {
-    try {
-      const t = fs.readFileSync(path.join(shardDir, f), 'utf8');
-      shardLineCount += linesOf(t).length;
-      shardCombined += '\n' + t;
-    } catch (err) {
-      // fail-soft 中止：主台账与全部分片保持原样（修好重跑即可——并集按行去重，重跑安全）
-      return { ok: false, error: `读取分片失败: ${f} (${err.message})`, added: 0, before: mainBeforeLines.length, after: mainBeforeLines.length, shards: shardFiles.length, shardLines: shardLineCount };
-    }
-  }
-
-  const merged = mergeJsonlLines(mainBefore, shardCombined);
-  const added = linesOf(merged).filter((l) => !mainBeforeLines.includes(l)).length;
-  const after = linesOf(merged).length;
-
-  if (!execute) {
-    return { ok: true, skipped: true, reason: 'dry-run', added, before: mainBeforeLines.length, after, shards: shardFiles.length, shardLines: shardLineCount };
-  }
-
-  const tmpMain = `${mainLedger}.tmp`;
-  try {
-    fs.writeFileSync(tmpMain, merged, 'utf8');
-    fs.renameSync(tmpMain, mainLedger);
-  } catch (err) {
-    try { fs.unlinkSync(tmpMain); } catch { /* tmp 可能未创建或删除失败 */ }
-    return { ok: false, error: `主台账写入失败: ${err.message}`, added: 0, before: mainBeforeLines.length, after: mainBeforeLines.length, shards: shardFiles.length, shardLines: shardLineCount };
-  }
-
-  for (const f of shardFiles) {
-    try { fs.unlinkSync(path.join(shardDir, f)); } catch { /* 残留分片不影响正确性，下轮再清 */ }
-  }
-  try { if (fs.readdirSync(shardDir).length === 0) fs.rmdirSync(shardDir); } catch { /* 忽略 */ }
-
-  return { ok: true, added, before: mainBeforeLines.length, after, shards: shardFiles.length, shardLines: shardLineCount };
-}
-
-const isMain = process.argv[1] && process.argv[1].replace(/\\/g, '/').endsWith('compact-ledgers.mjs');
-if (isMain) {
-  const argv = process.argv.slice(2);
-  const i = argv.indexOf('--root');
-  const root = path.resolve(i >= 0 && argv[i + 1] ? argv[i + 1] : process.cwd());
-  const execute = argv.includes('--execute');
-  const r = compactLedgers(root, { execute });
-
-  if (!r.ok) { console.error(`[compact-ledgers] ${r.error}`); console.error('[compact-ledgers] 已中止：主台账与分片保持原样，修好重跑即可。'); process.exit(1); }
-  if (r.skipped) { console.log(`[compact-ledgers] ${r.reason}，无需归并。`); process.exit(0); }
-  if (!execute) {
-    console.log(`[compact-ledgers] dry-run：将并入 ${r.added} 行（分片共 ${r.shardLines} 行 / ${r.shards} 个文件，其中 ${r.shardLines - r.added} 行主台账已有），主台账 ${r.before} → ${r.after} 行`);
-    console.log('[compact-ledgers] 加 --execute 执行（未加则不动盘）。');
-    process.exit(0);
-  }
-  console.log(`[compact-ledgers] ✅ 归并完成：并入 ${r.added} 行，主台账 ${r.before} → ${r.after} 行；${r.shards} 个分片已清理。`);
-  console.log('[compact-ledgers] 提醒：归并产生的台账变更请随下一笔提交入库——历史前缀不变量按提交判，不入库等于没生效。');
-  process.exit(0);
-}

package/templates/_agents/scripts/compact-ledgers.test.mjs

@@ -1,162 +0,0 @@
-#!/usr/bin/env node
-// compact-ledgers.test.mjs — 台账分片写入与 compact 归并 fixture 套件（2026-10-12 ledger-shard-write）
-// 覆盖：分片写入定位 + 跨来源链衔接 / compact 默认 dry-run 不动盘 / 幂等 / 前缀不变式（既有行保序）/
-//       读取失败中止 / 分片历史扫描与 compact 删除豁免 / 行未并入时仍拦丢行。
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-import { spawnSync } from 'node:child_process';
-
-const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
-const { compactLedgers } = await import(pathToFileURL(path.join(SCRIPT_DIR, 'compact-ledgers.mjs')).href);
-const { appendLedger } = await import(pathToFileURL(path.join(SCRIPT_DIR, 'confirm-doc.mjs')).href);
-const { ledgerChainHash } = await import(pathToFileURL(path.join(SCRIPT_DIR, 'policy.mjs')).href);
-// 夹具闭包（2026-10-12 fixture-closure-rootfix）：整闭包自动跟随，不再手写依赖枚举（漏拷 = 假绿）
-const { copyScriptClosure } = await import(pathToFileURL(path.join(SCRIPT_DIR, 'fixture-scripts.mjs')).href);
-
-let pass = 0, fail = 0;
-const check = (name, ok, detail = '') => {
-  if (ok) { pass++; console.log(`  ok  ${name}`); }
-  else { fail++; console.error(`FAIL  ${name}${detail ? ' — ' + detail : ''}`); }
-};
-
-const DOC_A = 'workflow/intents/2026-10-01-a.md';
-const DOC_B = 'workflow/intents/2026-10-01-b.md';
-const baseEntry = (doc, stage = 'approved') => ({
-  ts: new Date().toISOString(), doc, stage, fingerprint: 'a'.repeat(64), source: 'tty',
-});
-// --shard 依赖 doc 链口径（policyVersion ≥ 8）：分片与主台账是不同文件，只有 doc 链跨来源接续。
-// 装 kit.json 的 policyVersion=8 来启用，与真实装户升级后的形态一致。
-const enableDocChain = (root) => {
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: 8 }), 'utf8');
-};
-
-// ============ 场景 1：--shard 写入定位到分片，且跨来源链接得上 ============
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'shard-write-'));
-  enableDocChain(root);
-  // 先用主台账写一行（模拟该 doc 的历史行在主台账）
-  appendLedger(root, baseEntry(DOC_A));
-  const mainPath = path.join(root, '.agents', 'confirmations.jsonl');
-  check('S1 默认写主台账', fs.existsSync(mainPath));
-
-  // 再对同一 doc 用 --shard 写一行：前驱必须接主台账那行，而不是从 '' 重启
-  appendLedger(root, baseEntry(DOC_A, 'done'), { shard: true });
-  const shardPath = path.join(root, '.agents', 'confirmations.d', '2026-10-01-a.jsonl');
-  check('S1 --shard 写入分片文件（按 doc 基名命名）', fs.existsSync(shardPath));
-
-  const mainRows = fs.readFileSync(mainPath, 'utf8').trim().split('\n').map((l) => JSON.parse(l));
-  const shardRows = fs.readFileSync(shardPath, 'utf8').trim().split('\n').map((l) => JSON.parse(l));
-  check('S1 分片行的 prevHash 接主台账同 doc 行（跨来源衔接，链不断）',
-    shardRows[0].prevHash === mainRows[0].hash, `${shardRows[0].prevHash} vs ${mainRows[0].hash}`);
-  // 行内重算仍一致（doc 链前提）
-  const { hash, prevHash, ...rest } = shardRows[0];
-  check('S1 分片行行内哈希可重算', ledgerChainHash(rest, prevHash) === hash);
-}
-
-// ============ 场景 2：compact 默认 dry-run 不动盘 ============
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'shard-dry-'));
-  appendLedger(root, baseEntry(DOC_A));
-  appendLedger(root, baseEntry(DOC_B), { shard: true });
-  const mainPath = path.join(root, '.agents', 'confirmations.jsonl');
-  const before = fs.readFileSync(mainPath, 'utf8');
-  const shardPath = path.join(root, '.agents', 'confirmations.d', '2026-10-01-b.jsonl');
-
-  const r = compactLedgers(root); // 默认 execute:false
-  check('S2 dry-run 标记 skipped 且给出并入行数', r.ok && r.skipped && r.reason === 'dry-run' && r.added === 1, JSON.stringify(r));
-  check('S2 dry-run 主台账字节不变', fs.readFileSync(mainPath, 'utf8') === before);
-  check('S2 dry-run 分片仍在', fs.existsSync(shardPath));
-}
-
-// ============ 场景 3：--execute 归并 + 前缀不变式 ============
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'shard-exec-'));
-  appendLedger(root, baseEntry(DOC_A));
-  const mainPath = path.join(root, '.agents', 'confirmations.jsonl');
-  const before = fs.readFileSync(mainPath, 'utf8');
-  appendLedger(root, baseEntry(DOC_B), { shard: true });
-
-  const r = compactLedgers(root, { execute: true });
-  const after = fs.readFileSync(mainPath, 'utf8');
-  check('S3 execute 归并成功并计入 1 行', r.ok && !r.skipped && r.added === 1, JSON.stringify(r));
-  check('S3 既有行严格保序在前（append-only 前缀不变式）', after.startsWith(before), JSON.stringify(after.slice(0, 40)));
-  check('S3 分片已清理', !fs.existsSync(path.join(root, '.agents', 'confirmations.d', '2026-10-01-b.jsonl')));
-}
-
-// ============ 场景 4：幂等（重跑不重复追加）============
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'shard-idem-'));
-  enableDocChain(root);
-  appendLedger(root, baseEntry(DOC_A));
-  appendLedger(root, baseEntry(DOC_B), { shard: true });
-  compactLedgers(root, { execute: true });
-  const mainPath = path.join(root, '.agents', 'confirmations.jsonl');
-  const after1 = fs.readFileSync(mainPath, 'utf8');
-  const mergedLine = after1.trim().split('\n').pop(); // 归并时实际追加的那一行（含 prevHash/hash）
-
-  // 把**同一行原文**再放进分片重跑（模拟重复归并同批内容）——行文本逐字相同才会被去重
-  fs.mkdirSync(path.join(root, '.agents', 'confirmations.d'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'confirmations.d', '2026-10-01-b.jsonl'), mergedLine + '\n', 'utf8');
-  const r = compactLedgers(root, { execute: true });
-  const after2 = fs.readFileSync(mainPath, 'utf8');
-  check('S4 重复归并不重复追加（并集按整行去重）', r.ok && r.added === 0 && after1 === after2, `added=${r.added}`);
-}
-
-// ============ 场景 5：无分片 / 空分片 → 跳过且不报错 ============
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'shard-none-'));
-  const r = compactLedgers(root);
-  check('S5 无分片目录 → 跳过且 ok', r.ok && r.skipped);
-}
-
-// ============ 场景 6：分片历史扫描 + compact 删除豁免（真 git）============
-{
-  const d = fs.mkdtempSync(path.join(os.tmpdir(), 'shard-hist-'));
-  const git = (...args) => spawnSync('git', args, { cwd: d, encoding: 'utf8' });
-  git('init', '-q', '.'); git('config', 'user.email', 't@t.io'); git('config', 'user.name', 't');
-  git('config', 'core.autocrlf', 'false');
-  fs.mkdirSync(path.join(d, '.agents', 'scripts'), { recursive: true });
-  copyScriptClosure(path.join(d, '.agents', 'scripts'), ['check-ledger-invariant.mjs']);
-  const mkDoc = (rel) => {
-    const p = path.join(d, ...rel.split('/'));
-    fs.mkdirSync(path.dirname(p), { recursive: true });
-    fs.writeFileSync(p, '---\n状态: approved\n---\n# doc\n', 'utf8');
-  };
-  const rowObj = (doc) => JSON.stringify({ ts: '2026-10-01T00:00:00Z', doc, stage: 'approved', fingerprint: 'a'.repeat(64), source: 'tty' });
-  const runGate = () => spawnSync(process.execPath, ['.agents/scripts/check-ledger-invariant.mjs'], { cwd: d, encoding: 'utf8' });
-
-  mkDoc(DOC_A); mkDoc(DOC_B);
-  // 基线：主台账一行 + 分片一行（分片持有 B 的行）
-  fs.mkdirSync(path.join(d, '.agents', 'confirmations.d'), { recursive: true });
-  fs.writeFileSync(path.join(d, '.agents', 'confirmations.jsonl'), rowObj(DOC_A) + '\n', 'utf8');
-  fs.writeFileSync(path.join(d, '.agents', 'confirmations.d', '2026-10-01-b.jsonl'), rowObj(DOC_B) + '\n', 'utf8');
-  git('add', '-A'); git('commit', '-qm', 'base with shard');
-  let r = runGate();
-  check('S6 分片入库且未删 → 历史扫描放行', r.status === 0, `exit=${r.status} ${r.stderr}`);
-
-  // compact 归并后删分片：删除豁免应认领
-  fs.writeFileSync(path.join(d, '.agents', 'confirmations.jsonl'), rowObj(DOC_A) + '\n' + rowObj(DOC_B) + '\n', 'utf8');
-  fs.rmSync(path.join(d, '.agents', 'confirmations.d', '2026-10-01-b.jsonl'));
-  git('add', '-A'); git('commit', '-qm', 'compact merged');
-  r = runGate();
-  check('S6 compact 归并删分片 → 删除豁免认领，exit 0', r.status === 0, `exit=${r.status} ${r.stderr}`);
-  check('S6 豁免记录点名 compact 归并形态', /compact 归并形态/.test(r.stderr), r.stderr.slice(0, 200));
-
-  // 未归并就删分片（丢行）→ 仍 hard 拦。用**从未进过主台账**的独立 doc C，
-  // 否则它的行已在主台账里（早先 compact 并过），删除豁免会正确地放行——那正是豁免该有的行为。
-  const DOC_C = 'workflow/intents/2026-10-01-c.md';
-  mkDoc(DOC_C);
-  fs.writeFileSync(path.join(d, '.agents', 'confirmations.d', '2026-10-01-c.jsonl'), rowObj(DOC_C) + '\n', 'utf8');
-  git('add', '-A'); git('commit', '-qm', 'add shard c');
-  fs.rmSync(path.join(d, '.agents', 'confirmations.d', '2026-10-01-c.jsonl'));
-  git('add', '-A'); git('commit', '-qm', 'drop shard c without merge');
-  r = runGate();
-  check('S6 未归并即删分片（丢行）→ exit 1 hard 拦', r.status === 1, `exit=${r.status}`);
-  check('S6 报文点名「分片删除丢行」', /分片删除丢行/.test(r.stderr), r.stderr.slice(0, 300));
-}
-
-console.log(`\n[compact-ledgers.test] PASS ${pass} / FAIL ${fail}`);
-process.exit(fail ? 1 : 0);