agentic-flow-kit 1.8.2 → 2.0.0

package/src/gate-dotnet-ca.test.mjs

@@ -1,124 +0,0 @@
-#!/usr/bin/env node
-// gate-dotnet-ca.test.mjs — dotnet-ca 门禁模块判定回归（2026-09-27 host-gates-p1，incident 三件套「防复发验证」落点）
-// 方法：fixture 临时 git 仓构造 CONFIG 指向的最小目录树，复制包源 check-architecture.sh 并按场景改 CONFIG，
-//       spawn sh 跑门禁断言 exit 码与输出。三场景对位三个 P1：
-//       ①豁免清单多值生效（P1-B1：旧 tr ':' '|' 造 "A|B" BRE 字面量永不命中）
-//       ②CONTROLLERS_DIR 缺失 fail-closed（P1-B3：旧 2>/dev/null 静默放行）
-//       ③csproj 缺失 fail-closed（随 B3：旧 glob 展开失败静默放行）
-// 用法：node src/gate-dotnet-ca.test.mjs（npm test 随跑）
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-
-let pass = 0;
-let fail = 0;
-const check = (desc, cond, detail = '') => {
-  if (cond) { pass++; console.log(`PASS  ${desc}`); }
-  else { fail++; console.log(`FAIL  ${desc}${detail ? `\n${detail}` : ''}`); }
-};
-
-const PKG_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const GATE_SRC = path.join(PKG_ROOT, 'modules', 'gates', 'dotnet-ca', 'check-architecture.sh');
-
-// mkfixture：最小 dotnet 目录树（Application/API/Domain/Infrastructure/Controllers）+ 可覆盖 CONFIG
-function mkfixture(configOverride = {}) {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'gate-ca-test-'));
-  const dirs = {
-    APP_DIR: 'backend/src/App.Application',
-    API_DIR: 'backend/src/App.API',
-    DBCTX_FILE: 'backend/src/App.Infrastructure/Data/AppDbContext.cs',
-    DOMAIN_ENTITIES_DIR: 'backend/src/App.Domain/Entities',
-    CONTROLLERS_DIR: 'backend/src/App.API/Controllers',
-  };
-  for (const rel of Object.values(dirs)) fs.mkdirSync(path.dirname(path.join(root, rel)), { recursive: true }); // 文件型键取父目录；目录型键随后显式建
-  fs.mkdirSync(path.join(root, dirs.APP_DIR), { recursive: true });
-  fs.mkdirSync(path.join(root, dirs.API_DIR), { recursive: true });
-  fs.mkdirSync(path.join(root, dirs.DOMAIN_ENTITIES_DIR), { recursive: true });
-  fs.mkdirSync(path.join(root, dirs.CONTROLLERS_DIR), { recursive: true });
-  fs.writeFileSync(path.join(root, dirs.DBCTX_FILE), 'class AppDbContext { }\n');
-  const cfg = {
-    ...Object.fromEntries(Object.entries(dirs).map(([k, v]) => [k, v])),
-    DBCTX_CLASS: 'AppDbContext',
-    INFRA_USING: 'using App.Infrastructure',
-    EXEMPT_CTRL: 'ExemptedA:ExemptedB',
-    SHARED_TYPES: '',
-    ...configOverride,
-  };
-  // 包源脚本 CONFIG 段替换：按「^KEY=" 任意到行尾」整行重写（值含 / 且行尾带注释——不用值内正则）；
-  // EXEMPT_CTRL/SHARED_TYPES 行尾有注释，重写时保留注释语义（测试值自带说明则省略）
-  let script = fs.readFileSync(GATE_SRC, 'utf8');
-  for (const [k, v] of Object.entries(cfg)) {
-    script = script.replace(new RegExp(`^${k}=.*$`, 'm'), `${k}="${v}"`);
-  }
-  const scriptPath = path.join(root, 'check-architecture.sh');
-  fs.writeFileSync(scriptPath, script);
-  // fixture 需为 git 仓（脚本首行 git rev-parse --show-toplevel）
-  spawnSync('git', ['init', '-q', '.'], { cwd: root });
-  return { root, scriptPath, dirs };
-}
-const runGate = (root, scriptPath) => spawnSync('sh', [scriptPath], { cwd: root, encoding: 'utf8' });
-// ctrlWrite：往 fixture 的 Controllers 目录写文件（目录可能尚未创建）
-const ctrlWrite = (root, dirs, name, content) => {
-  fs.mkdirSync(path.join(root, dirs.CONTROLLERS_DIR), { recursive: true });
-  fs.writeFileSync(path.join(root, dirs.CONTROLLERS_DIR, name), content);
-};
-// addCsproj：补干净 csproj（fail-closed 后红线 1 先查 csproj——不写则走不到目标断言）
-const addCsproj = (root, dirs) => fs.writeFileSync(path.join(root, dirs.APP_DIR, 'App.Application.csproj'), '<Project Sdk="Microsoft.NET.Sdk" />\n');
-
-// ---- ① 豁免清单多值（P1-B1）----
-{
-  const { root, scriptPath, dirs } = mkfixture();
-  addCsproj(root, dirs);
-  // API 层两处 DbContext 引用：一个在豁免 Controller 文件、一个在普通 Controller——豁免只应放过前者
-  ctrlWrite(root, dirs, 'ExemptedAController.cs', '// AppDbContext 直接引用（豁免）\n');
-  ctrlWrite(root, dirs, 'OrdersController.cs', '// AppDbContext 直接引用（应拦）\n');
-  const r = runGate(root, scriptPath);
-  check('①多值豁免生效：ExemptedA 文件行不出现、Orders 行出现（违例 exit 1）',
-    r.status === 1 && !r.stderr.includes('ExemptedAController') && r.stderr.includes('OrdersController'),
-    `exit=${r.status}\n${r.stdout}\n${r.stderr}`);
-  fs.rmSync(root, { recursive: true, force: true });
-}
-// ①附：干净树（豁免命中全部 DbContext 引用）→ 红线 3 不拦（整体 exit 0 需其余红线干净）
-{
-  const { root, scriptPath, dirs } = mkfixture();
-  addCsproj(root, dirs);
-  ctrlWrite(root, dirs, 'ExemptedAController.cs', '// AppDbContext\n');
-  ctrlWrite(root, dirs, 'ExemptedBController.cs', '// AppDbContext\n');
-  const r = runGate(root, scriptPath);
-  check('①两个豁免 Controller 全命中 → 红线 3 零输出 exit 0', r.status === 0 && !r.stderr, `exit=${r.status}\n${r.stderr}`);
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- ② CONTROLLERS_DIR 缺失 fail-closed（P1-B3）----
-{
-  const { root, scriptPath, dirs } = mkfixture({ CONTROLLERS_DIR: 'backend/src/App.API/NotThere' });
-  addCsproj(root, dirs);
-  const r = runGate(root, scriptPath);
-  check('②Controllers 目录缺失 → fail-closed exit 1 点名目标（旧代码静默放行）',
-    r.status === 1 && r.stderr.includes('NotThere') && r.stderr.includes('fail-closed'),
-    `exit=${r.status}\n${r.stderr}`);
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- ③ csproj 缺失 fail-closed（随 B3）----
-{
-  const { root, scriptPath } = mkfixture();
-  // Application 目录存在但无 .csproj（glob 展开失败形态）
-  const r = runGate(root, scriptPath);
-  check('③Application 无 csproj → fail-closed exit 1（旧代码静默放行）',
-    r.status === 1 && r.stderr.includes('csproj') && r.stderr.includes('fail-closed'),
-    `exit=${r.status}\n${r.stderr}`);
-  fs.rmSync(root, { recursive: true, force: true });
-}
-// ③附：有 csproj 且干净 → 过红线 1
-{
-  const { root, scriptPath, dirs } = mkfixture();
-  fs.writeFileSync(path.join(root, dirs.APP_DIR, 'App.Application.csproj'), '<Project Sdk="Microsoft.NET.Sdk" />\n');
-  const r = runGate(root, scriptPath);
-  check('③干净 csproj 存在 → 整体 exit 0', r.status === 0, `exit=${r.status}\n${r.stderr}`);  fs.rmSync(root, { recursive: true, force: true });
-}
-
-console.log(`\n合计: PASS ${pass} / FAIL ${fail}`);
-process.exit(fail ? 1 : 0);

package/src/gates.test.mjs

@@ -1,143 +0,0 @@
-#!/usr/bin/env node
-// 三个可选门禁：临时 git 仓库里暂存违规 / 干净文件，断言退出码。
-import { spawnSync } from 'node:child_process';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const git = process.platform === 'win32' ? 'git.exe' : 'git';
-let pass = 0;
-let fail = 0;
-const check = (name, cond, detail = '') => {
-  if (cond) { pass++; console.log(`PASS  ${name}`); }
-  else { fail++; console.log(`FAIL  ${name}${detail ? `\n      ${detail}` : ''}`); }
-};
-
-function repo() {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'fk-gate-'));
-  spawnSync(git, ['init', '-q'], { cwd: dir });
-  spawnSync(git, ['config', 'user.email', 't@t'], { cwd: dir });
-  spawnSync(git, ['config', 'user.name', 't'], { cwd: dir });
-  return dir;
-}
-function stage(dir, rel, text) {
-  const abs = path.join(dir, rel);
-  fs.mkdirSync(path.dirname(abs), { recursive: true });
-  fs.writeFileSync(abs, text);
-  spawnSync(git, ['add', '--', rel], { cwd: dir });
-}
-function run(script, dir, env = {}) {
-  return spawnSync(process.execPath, [path.join(ROOT, script)], {
-    cwd: dir, encoding: 'utf8', env: { ...process.env, ...env },
-  });
-}
-
-{
-  const dir = repo();
-  stage(dir, 'src/app.mjs', "import { x } from '../tests/helper.mjs';\n");
-  const bad = run('modules/gates/node-layer/check-node-layer.mjs', dir);
-  check('node-layer 引用 tests → exit 1', bad.status === 1 && bad.stderr.includes('src/app.mjs'), bad.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'src/app.mjs', "import { x } from './util.mjs';\n");
-  const ok = run('modules/gates/node-layer/check-node-layer.mjs', dir);
-  check('node-layer 只引 src 内文件 → exit 0', ok.status === 0, ok.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'src/app.mjs', "import { x } from '../tests/helper.mjs';\n");
-  fs.writeFileSync(path.join(dir, 'src/app.mjs'), "import { x } from './util.mjs';\n");
-  const bad = run('modules/gates/node-layer/check-node-layer.mjs', dir);
-  check('node-layer 暂存违规、工作区已改回 → exit 1', bad.status === 1 && bad.stderr.includes('src/app.mjs'), bad.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'src/app.mjs', "import { x } from './util.mjs';\n");
-  fs.writeFileSync(path.join(dir, 'src/app.mjs'), "import { x } from '../tests/helper.mjs';\n");
-  const ok = run('modules/gates/node-layer/check-node-layer.mjs', dir);
-  check('node-layer 暂存干净、工作区违规 → exit 0', ok.status === 0, ok.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'pkg/mod.py', 'from tests.unit import helper\n');
-  const bad = run('modules/gates/py-import/check-py-import.mjs', dir);
-  check('py-import 业务文件 import tests → exit 1', bad.status === 1 && bad.stderr.includes('pkg/mod.py'), bad.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'tests/test_mod.py', 'from tests.unit import helper\n');
-  const ok = run('modules/gates/py-import/check-py-import.mjs', dir);
-  check('py-import 测试目录自身 → exit 0', ok.status === 0, ok.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'pkg/mod.py', 'from tests.unit import helper\n');
-  fs.writeFileSync(path.join(dir, 'pkg/mod.py'), 'import pkg.local\n');
-  const bad = run('modules/gates/py-import/check-py-import.mjs', dir);
-  check('py-import 暂存违规、工作区已改回 → exit 1', bad.status === 1 && bad.stderr.includes('pkg/mod.py'), bad.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'pkg/mod.py', 'import pkg.local\n');
-  fs.writeFileSync(path.join(dir, 'pkg/mod.py'), 'from tests.unit import helper\n');
-  const ok = run('modules/gates/py-import/check-py-import.mjs', dir);
-  check('py-import 暂存干净、工作区违规 → exit 0', ok.status === 0, ok.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  const body = 'before\n<!-- GENERATED:BEGIN -->\nsecret\n<!-- GENERATED:END -->\nafter\n';
-  stage(dir, 'doc.md', body);
-  spawnSync(git, ['-c', 'user.email=t@t', '-c', 'user.name=t', 'commit', '-qm', 'base'], { cwd: dir });
-  const next = body.replace('secret', 'edited');
-  stage(dir, 'doc.md', next);
-  const bad = run('modules/gates/generated-readonly/check-generated.mjs', dir);
-  check('generated 区被改 → exit 1', bad.status === 1 && bad.stderr.includes('GENERATED'), bad.stderr);
-  const allowed = run('modules/gates/generated-readonly/check-generated.mjs', dir, { FLOW_KIT_ALLOW_GENERATED: '1' });
-  check('FLOW_KIT_ALLOW_GENERATED=1 → exit 0', allowed.status === 0, allowed.stderr);
-  fs.writeFileSync(path.join(dir, 'doc.md'), 'before\nafter\n');
-  const still = run('modules/gates/generated-readonly/check-generated.mjs', dir);
-  check('generated 暂存改区、工作区删掉标记 → exit 1', still.status === 1 && still.stderr.includes('GENERATED'), still.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  const body = 'before\n<!-- GENERATED:BEGIN -->\nsecret\n<!-- GENERATED:END -->\nafter\n';
-  stage(dir, 'doc.md', body);
-  spawnSync(git, ['-c', 'user.email=t@t', '-c', 'user.name=t', 'commit', '-qm', 'base'], { cwd: dir });
-  stage(dir, 'doc.md', body.replace('before', 'before2'));
-  fs.writeFileSync(path.join(dir, 'doc.md'), body.replace('secret', 'edited'));
-  const ok = run('modules/gates/generated-readonly/check-generated.mjs', dir);
-  check('generated 暂存改区外、工作区改区内 → exit 0', ok.status === 0, ok.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'src/app.mjs', 'export const fix = 1;\n');
-  stage(dir, 'tests/app.test.mjs', "import { fix } from '../src/app.mjs';\n");
-  const bad = run('modules/gates/test-protect/check-test-protect.mjs', dir);
-  check('test-protect 测试与代码同框 → exit 1', bad.status === 1 && bad.stderr.includes('test-protect'), bad.stderr);
-  const allowed = run('modules/gates/test-protect/check-test-protect.mjs', dir, { FLOW_KIT_ALLOW_TEST_EDIT: '1' });
-  check('test-protect FLOW_KIT_ALLOW_TEST_EDIT=1 → exit 0', allowed.status === 0, allowed.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-{
-  const dir = repo();
-  stage(dir, 'tests/app.test.mjs', "import { fix } from '../src/app.mjs';\n");
-  const ok = run('modules/gates/test-protect/check-test-protect.mjs', dir);
-  check('test-protect 纯测试提交 → exit 0', ok.status === 0, ok.stderr);
-  fs.rmSync(dir, { recursive: true, force: true });
-}
-
-console.log(`\n合计: PASS ${pass} / FAIL ${fail}`);
-process.exit(fail ? 1 : 0);

package/src/init.mjs

@@ -1,382 +0,0 @@
-// flow-kit init：无参数 → 交互确认环节；带参数 → 直接执行。
-// 渲染模板树 + 宿主适配层 → 生成 owned 基线配置 → 挂 git 钩子 → 写 kit.json → 跑生成器与 doctor
-import fs from 'node:fs';
-import path from 'node:path';
-import readline from 'node:readline';
-import { execSync, spawnSync } from 'node:child_process';
-import { renderTree, renderContent, sha256, scriptTrusted, listTree } from './render.mjs';
-import { HOSTS, STACKS, STACK_ALIASES, settingsJson, commitCheckConfig, pickStackVars, isOwned, srcTemplatePath, TEMPLATE_DRIFT_EXCLUDE } from './profiles.mjs';
-import { doctor, GATE_TRUST_DEFAULT } from './doctor.mjs';
-
-function fail(msg) {
-  console.error(`❌ ${msg}`);
-  process.exit(1);
-}
-
-function runNode(target, script, args = []) {
-  const r = spawnSync(process.execPath, [script, ...args], { cwd: target, encoding: 'utf8' });
-  return { ok: r.status === 0, out: `${r.stdout || ''}${r.stderr || ''}` };
-}
-
-// makePrompt：行队列式问答（比逐次 rl.question 稳——管道/EOF 提前关闭时不会抛错，安全回退默认值或取消）
-// ask(question, def)：def 为默认值（空输入 / EOF 回退）；无 def 时空输入返回 ''（用于必须显式确认的问句）
-function makePrompt() {
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout, terminal: false });
-  const lines = [];
-  const waiters = [];
-  let ended = false;
-  rl.on('line', (l) => { const w = waiters.shift(); if (w) w(l.trim()); else lines.push(l.trim()); });
-  rl.on('close', () => { ended = true; while (waiters.length) waiters.shift()(''); });
-  return {
-    ask(question, def) {
-      return new Promise((resolve) => {
-        process.stdout.write(def ? `${question}（直接回车=${def}）：` : `${question}：`);
-        const fin = (a) => resolve(a || def || '');
-        const l = lines.shift();
-        if (l !== undefined) fin(l);
-        else if (ended) fin('');
-        else waiters.push(fin);
-      });
-    },
-    close() { rl.close(); },
-  };
-}
-
-// ---- TUI 风格：hand-rolled ANSI（零依赖纪律）；NO_COLOR / 非 TTY 自动降级纯文本 ----
-const RAW = !process.env.NO_COLOR && process.stdout.isTTY;
-const paint = (code, s) => (RAW ? `\x1b[${code}m${s}\x1b[0m` : String(s));
-const bold = (s) => paint('1', s);
-const dim = (s) => paint('2', s);
-const cyan = (s) => paint('36', s);
-
-// normalizeStack：ts/js 用户口径归一为 node 栈；其余小写透传（STACKS 校验兜底未知值）
-export function normalizeStack(s) {
-  const t = String(s || '').trim().toLowerCase();
-  return STACK_ALIASES[t] || t;
-}
-
-// parseChoices：序号/名称/混输多选解析（逗号/全角逗号/空白分隔，去重保序）；
-// 空输入 → [def]（EOF/直接回车安全回退默认）；含非法 token 返回 null（调用方就地重问）；
-// map 用于输入侧归一（如 ts→node），序号先于 map 解析。
-export function parseChoices(input, names, def, map = (x) => x) {
-  const text = String(input || '').trim();
-  if (!text) return [def];
-  const out = [];
-  for (const tok of text.split(/[,，\s]+/).filter(Boolean)) {
-    const i = /^\d+$/.test(tok) ? Number(tok) - 1 : names.indexOf(map(tok.toLowerCase()));
-    if (!Number.isInteger(i) || i < 0 || i >= names.length) return null;
-    if (!out.includes(names[i])) out.push(names[i]);
-  }
-  return out;
-}
-
-// ---- AGENTS.md 骨架探测与追加补齐 ----
-// 标记随模板渲染落盘：新装/补齐后的 AGENTS.md 都含它，探测以此为准（不猜标题——避免误伤项目自写的同名「AI工作流」节）
-const SKELETON_MARKER = '<!-- flow-kit:agents-skeleton -->';
-export function hasAgentsSkeleton(text) {
-  return String(text || '').includes(SKELETON_MARKER);
-}
-// mergeAgents：原内容在上（尾部空白折叠），空行分隔，含标记的完整骨架在下
-export function menuMark(i) {
-  return String(i + 1);
-}
-
-export function mergeAgents(existing, incoming) {
-  const head = String(existing || '').replace(/\s+$/, '');
-  const tail = String(incoming || '').trim();
-  return head ? `${head}\n\n${tail}\n` : `${tail}\n`;
-}
-
-// 交互确认环节：序号菜单问答（宿主多选 → 技术栈 → 看板端口）→ 已选 recap → 显式确认
-// （EOF / 非 y 一律取消，不装；makePrompt 行式语义不变——管道/EOF 安全回退默认）
-async function interactive() {
-  const p = makePrompt();
-  const hostNames = Object.keys(HOSTS);
-  const stackNames = Object.keys(STACKS);
-  const stackLabel = (n) => (n === 'node' ? 'node（ts/js）' : n);
-  const menu = (names) => '  ' + names.map((n, i) => dim(`${menuMark(i)} ${stackLabel(n)}`)).join(dim('   '));
-
-  console.log(bold(cyan('▶ flow-kit init')) + dim(' · AI 闭环工作流 + wiki 知识层脚手架'));
-  console.log(dim('  安装到当前目录：.agents/ · .githooks/ · workflow/ · wiki/ · AGENTS.md · .github/workflows/kit-ci.yml（CI 远端门，非 GitHub 装户可删）（已存在的文件保守跳过；AGENTS.md 无工作流骨架时文末追加补齐）'));
-  try {
-    let hosts;
-    for (;;) {
-      console.log(`\n${cyan('── 1/3 · agent 宿主')} ${dim('· 可多选')}`);
-      console.log(menu(hostNames));
-      const picked = parseChoices(await p.ask(dim('  序号或名称，逗号分隔（直接回车 = zcode）')), hostNames, hostNames[0]);
-      if (picked) { hosts = picked; break; }
-      console.log(dim('  ⚠️ 没认出这个组合——序号或名称再来一次（如 1,3 或 zcode,trae）'));
-    }
-    let stack;
-    for (;;) {
-      console.log(`\n${cyan('── 2/3 · 技术栈')} ${dim('· 决定编译检查与自检验命令初值')}`);
-      console.log(menu(stackNames));
-      const picked = parseChoices(await p.ask(dim('  序号或名称（直接回车 = none；ts/js 自动归一 node）')), stackNames, 'none', normalizeStack);
-      if (picked) { stack = picked[0]; break; }
-      console.log(dim('  ⚠️ 没认出——序号或名称再来一次'));
-    }
-    console.log(`\n${cyan('── 3/3 · workflow 看板端口')}`);
-    let boardPort = '';
-    for (;;) {
-      boardPort = (await p.ask(dim('  直接回车 = 8933'))) || '8933';
-      if (/^(0|[1-9]\d*)$/.test(String(boardPort)) && Number(boardPort) >= 1 && Number(boardPort) <= 65535) break;
-      console.log(dim('  ⚠️ 端口须为 1-65535 整数——再来一次'));
-    }
-
-    console.log(`\n  ${bold(`宿主 ${hosts.join('、')}`)}${dim(' ｜ ')}${bold(`技术栈 ${stack}`)}${dim(' ｜ ')}${bold(`端口 ${boardPort}`)}`);
-    const yes = await p.ask(dim('  确认安装到当前目录？(y/n，回车取消)'));
-    if (!/^(y|yes)$/i.test(yes)) {
-      console.log('已取消（未做任何改动）');
-      process.exit(0);
-    }
-    return { hosts: hosts.join(','), stack, boardPort, dir: process.cwd(), force: false };
-  } finally {
-    p.close();
-  }
-}
-
-export async function init(args, pkgRoot) {
-  let opt;
-  if (args.length === 0) {
-    opt = await interactive();
-  } else {
-    opt = { hosts: 'zcode', stack: 'none', boardPort: '8933', dir: process.cwd(), force: false };
-    for (let i = 0; i < args.length; i++) {
-      const a = args[i];
-      const next = () => {
-        const v = args[++i];
-        if (v === undefined) fail(`选项 ${a} 缺少值`);
-        return v;
-      };
-      if (a === '--hosts') opt.hosts = next();
-      else if (a === '--stack') opt.stack = next();
-      else if (a === '--board-port') opt.boardPort = next();
-      else if (a === '--dir') opt.dir = next();
-      else if (a === '--force') opt.force = true;
-      else fail(`未知选项：${a}（flow-kit init --help 看全部）`);
-    }
-  }
-
-  opt.stack = normalizeStack(opt.stack);
-  if (!STACKS[opt.stack]) fail(`未知技术栈：${opt.stack}（可选 dotnet | node（ts/js） | python | go | none——对应编译检查与自检验命令初值）`);
-  // 端口校验（2026-09-27 p2-batch1）：任意字符串曾直进 vars 渲染进 AGENTS.md（AI 每会话必读面）——1-65535 整数 fail-fast
-  if (!/^(0|[1-9]\d*)$/.test(String(opt.boardPort)) || Number(opt.boardPort) < 1 || Number(opt.boardPort) > 65535) {
-    fail(`--board-port 须为 1-65535 整数（现「${opt.boardPort}」）`);
-  }
-  const hosts = opt.hosts.split(',').map((s) => s.trim()).filter(Boolean);
-  for (const h of hosts) {
-    if (!HOSTS[h]) fail(`未知宿主：${h}（可选 ${Object.keys(HOSTS).join(' | ')}）`);
-  }
-
-  const target = path.resolve(opt.dir);
-  if (!fs.existsSync(target)) fail(`目标目录不存在：${target}`);
-  const kitPath = path.join(target, '.agents', 'kit.json');
-  if (fs.existsSync(kitPath) && !opt.force) {
-    fail(`${target} 已安装 agentic-flow-kit（.agents/kit.json 存在）。重装/修复用 --force；升级将由 flow-kit sync 提供。`);
-  }
-
-  const vars = { BOARD_PORT: String(opt.boardPort), ...pickStackVars(opt.stack) };
-
-  console.log(`${bold(cyan('▶ flow-kit init'))}${dim(' → ')}${target}`);
-  console.log(`  宿主：${hosts.join(', ')} ｜ 技术栈：${opt.stack} ｜ 看板端口：${opt.boardPort}`);
-
-  // 1) 模板树（保守：已存在文件跳过，--force 覆盖；p2-batch1：--force 下已存在 owned 仍跳过——
-  //    「项目自持」两态模型在重装路径的对齐，实测曾静默丢用户自定义「项目适配区」内容。
-  //    保护集 = 包源模板树内 isOwned 为真的 rel，现场枚举单源不另抄清单）
-  const protectSet = opt.force
-    ? new Set(listTree(path.join(pkgRoot, 'templates')).filter((rel) => isOwned(rel)))
-    : null;
-  const t = renderTree(path.join(pkgRoot, 'templates'), target, vars, { force: opt.force, protectSet });
-  for (const rel of t.protectedSkipped || []) {
-    console.log(`  跳过（owned 项目自持，--force 不覆盖）：${rel}——如需重置请手动删除后重跑`);
-  }
-
-  // 1.5) AGENTS.md 特例：已存在且无骨架标记 → 文末追加补齐（原内容保留）；带标记 → 保守跳过。
-  //  门槛含 protectedSkipped（p2-batch1 复核 P1-2）：--force 下 owned 保护跳过也属「已存在不覆盖」，
-  //  无骨架时同样要追加（追加本就是非覆盖语义，与保护不冲突）——否则自带 AGENTS.md 的装户经
-  //  --force 重装永远拿不到工作流骨架且无感知
-  let agentsMergedSha = null;
-  if (t.skipped.includes('AGENTS.md') || (t.protectedSkipped || []).includes('AGENTS.md')) {
-    const agentsAbs = path.join(target, 'AGENTS.md');
-    const existing = fs.readFileSync(agentsAbs, 'utf8');
-    if (hasAgentsSkeleton(existing)) {
-      t.skipped = t.skipped.filter((r) => r !== 'AGENTS.md'); // 专属提示已报，不进末尾「未覆盖」汇总重复列
-      console.log('  跳过（已存在且含工作流骨架）：AGENTS.md');
-    } else {
-      const incoming = renderContent(fs.readFileSync(path.join(pkgRoot, 'templates', 'AGENTS.md'), 'utf8'), vars);
-      fs.writeFileSync(agentsAbs, mergeAgents(existing, incoming));
-      // LF 归一记账（init-p1-batch P1-4）：用户 CRLF 原文 + LF 追加的混合文件与 doctor §6.6 / sync ownedSha 同口径
-      agentsMergedSha = sha256(Buffer.from(fs.readFileSync(agentsAbs, 'utf8').replace(/\r\n/g, '\n'), 'utf8'));
-      t.skipped = t.skipped.filter((r) => r !== 'AGENTS.md');
-      console.log('  AGENTS.md 已存在但无工作流骨架——文末追加补齐（原内容保留，「项目适配区」照常自填）');
-    }
-  }
-
-  // 2) 宿主适配层
-  const hostResults = {};
-  for (const h of hosts) {
-    hostResults[h] = renderTree(path.join(pkgRoot, 'modules', 'hosts', h), path.join(target, HOSTS[h].dir), vars, { force: opt.force });
-  }
-  // 换 --hosts 重装：旧宿主目录脱账提示（kit.json 只记新宿主，孤儿对 doctor §4.5 不可见——审查 P2-1 附带）
-  if (fs.existsSync(kitPath)) {
-    try {
-      const oldHosts = (JSON.parse(fs.readFileSync(kitPath, 'utf8')).options?.hosts) || [];
-      const removed = oldHosts.filter((h) => HOSTS[h] && !hosts.includes(h));
-      for (const h of removed) {
-        console.log(`  ⚠️ 旧宿主 ${HOSTS[h].dir}/ 不在新 --hosts 清单——其文件已脱账（成静默孤儿），如弃用请手动删除目录`);
-      }
-    } catch { /* 旧台账不可读（--force 重装修复场景），跳过提示 */ }
-  }
-
-  // 3) 生成的 owned 基线配置（引擎按固定路径读取；存在则跳过，永不覆盖；技术栈命令由项目在文件内自填）
-  const generated = {
-    '.agents/settings.json': settingsJson(opt.stack),
-    '.agents/hooks/commit-check.config.json': commitCheckConfig(opt.stack),
-  };
-  const ownedGenerated = [];
-  for (const [rel, content] of Object.entries(generated)) {
-    const p = path.join(target, rel);
-    if (fs.existsSync(p)) { console.log(`  跳过（已存在）：${rel}`); continue; }
-    fs.mkdirSync(path.dirname(p), { recursive: true });
-    fs.writeFileSync(p, content);
-    ownedGenerated.push({ rel, sha256: sha256(Buffer.from(content, 'utf8')) });
-  }
-
-  // 4) .gitignore 追加（缺哪条补哪条）。2026-10-05 起七个宿主一律 localOnly:false，
-  // 宿主目录不再自动进 .gitignore——补 .agents/cache/ 运行时缓存与 .agents/judgments.jsonl
-  // 判定流水（2026-10-13 judgment-ledger 回灌 B4：check-loop 每次真实运行追加的本机运行判定，
-  // 各机各自产生不跨机共享，月度聚合经 agg-judgments.mjs）。
-  const giPath = path.join(target, '.gitignore');
-  const giNeed = ['.agents/cache/', '.agents/judgments.jsonl', ...(hosts.filter((h) => HOSTS[h].localOnly).map((h) => `${HOSTS[h].dir}/`))];
-  let giText = fs.existsSync(giPath) ? fs.readFileSync(giPath, 'utf8') : '';
-  const giAdd = giNeed.filter((l) => !giText.split(/\r?\n/).some((x) => x.trim() === l));
-  if (giAdd.length) {
-    giText = (giText.endsWith('\n') || giText === '' ? giText : giText + '\n') + '# agentic-flow-kit\n' + giAdd.join('\n') + '\n';
-    fs.writeFileSync(giPath, giText);
-    console.log(`  .gitignore 追加：${giAdd.join('、')}`);
-  }
-
-  // 5) git 钩子挂载
-  try {
-    execSync('git rev-parse --git-dir', { cwd: target, stdio: 'pipe' });
-    execSync('git config core.hooksPath .githooks', { cwd: target, stdio: 'pipe' });
-    console.log('  已挂载 git 钩子：core.hooksPath=.githooks（pre-commit / pre-push / commit-msg / post-commit / pre-merge-commit）');
-    try {
-      execSync('git config merge.ours.driver true', { cwd: target, stdio: 'pipe' });
-      console.log('  已启用 merge.ours driver（.gitattributes 的 merge=ours 生效）');
-    } catch { /* 可选配置，失败不阻断 */ }
-    try {
-      // 台账并集合并 driver（2026-10-12 ledger-merge-driver）：确认台账是尾部追加形态，多人/多 worktree
-      // 并行时默认合并会给文本冲突，人工「整取一侧」会静默丢确认行。配了 driver 后合并 = 并集去重。
-      // 本机态配置不跨机共享（与 core.hooksPath 同款性质）——漏配则退化为文本冲突，不静默丢数据。
-      execSync('git config merge.jsonl-union.driver "node .agents/scripts/git-merge-jsonl.mjs %O %A %B"', { cwd: target, stdio: 'pipe' });
-      console.log('  已启用 merge.jsonl-union driver（台账 .agents/*.jsonl 合并走并集去重，不再文本冲突）');
-    } catch { /* 可选配置，失败不阻断 */ }
-  } catch {
-    console.log('  ⚠️ 目标不是 git 仓库——钩子未挂载；git init 后手动执行：git config core.hooksPath .githooks');
-  }
-
-  // 6) 生成器首跑（幂等）：workflow/INDEX.md 活跃层索引 + wiki 速览计数与看板 DATA
-  //    先于 kit.json 记账（init-p1-batch P1-2：生成器会重写 owned 起步文档，先跑后记账则 doctor §6.6 对账即绿，
-  //    fresh init 不再必现 owned FAIL / exit 1）；执行前过供应链防线（P1-3）——目标侧脚本与包源渲染值
-  //    sha 一致才执行（目标目录预置脚本不可信，「已存在保守跳过」语义下预置件会被原样保留）
-  const guardRun = (rel) => {
-    const g = scriptTrusted({ pkgRoot, target, rel, vars });
-    if (!g.ok) {
-      console.log(`  ⚠️ 跳过执行 ${rel}——${g.note}（供应链防线：只执行与包源渲染值一致的目标侧脚本）`);
-      return false;
-    }
-    return true;
-  };
-  if (guardRun('.agents/scripts/gen-workflow-index.mjs')) {
-    const genIndex = runNode(target, '.agents/scripts/gen-workflow-index.mjs');
-    console.log(genIndex.ok ? '  已生成 workflow/INDEX.md（活跃层索引）' : `  ⚠️ gen-workflow-index 失败：${genIndex.out.split('\n')[0]}`);
-  }
-  if (guardRun('.agents/scripts/gen-wiki-board.mjs')) {
-    const genBoard = runNode(target, '.agents/scripts/gen-wiki-board.mjs');
-    console.log(genBoard.ok ? '  已生成 wiki 速览计数与知识沉淀总览 DATA' : `  ⚠️ gen-wiki-board 失败：${genBoard.out.split('\n')[0]}`);
-  }
-
-  // 7) kit.json：managed（模板/适配层，升级可覆盖）与 owned（基线配置+起步文档，升级不动）台账
-  //    owned 的生成器目标按生成后盘面重记（P1-2）；记账一律 LF 归一 sha（P1-4——render 写盘已归一，
-  //    生成器重写目标与用户合并文件两侧同口径，跨 checkout 字节稳定）
-  const shaText = (p) => sha256(Buffer.from(fs.readFileSync(p, 'utf8').replace(/\r\n/g, '\n'), 'utf8'));
-  const GEN_TARGETS = TEMPLATE_DRIFT_EXCLUDE; // 单源挪 profiles（2026-10-06 template-downstream）：模板感知排除面与生成器重记面同集
-  const managed = [
-    ...t.written.filter((f) => !isOwned(f.rel)),
-    // 宿主文件渲染时相对宿主根，入台账须还原为项目根相对路径
-    ...hosts.flatMap((h) => hostResults[h].written.map((f) => ({ ...f, rel: `${HOSTS[h].dir}/${f.rel}` }))),
-  ];
-  const owned = [...t.written.filter((f) => isOwned(f.rel)), ...ownedGenerated]
-    .map((f) => (GEN_TARGETS.has(f.rel) && fs.existsSync(path.join(target, f.rel))
-      ? { ...f, sha256: shaText(path.join(target, f.rel)) }
-      : f));
-  // protectedSkipped 件按盘面 LF 归一 sha 补记（p2-batch1 复核 P2-3）：--force 重装受保护 owned
-  // 不补记会让 doctor §6.6 的漂移可见性静默消失（台账缺口对体检不可见）
-  for (const rel of t.protectedSkipped || []) {
-    if (!isOwned(rel) || !fs.existsSync(path.join(target, rel))) continue;
-    if (rel === 'AGENTS.md' && agentsMergedSha) continue; // 追加特例已记（agentsMergedSha），避免台账重复条目（复核收口 P2）
-    if (owned.some((f) => f.rel === rel)) continue;
-    owned.push({ rel, sha256: shaText(path.join(target, rel)) });
-  }
-  if (agentsMergedSha) owned.push({ rel: 'AGENTS.md', sha256: agentsMergedSha });
-  // 模板下发感知初始锚（2026-10-06 template-downstream）：有包源模板对应的 owned 条目记
-  // srcSha256＝包源模板原始文件 LF 归一 sha——锚记「见过的源」而非「期望盘面」（装户渲染/定制与锚正交）；
-  // GEN_TARGETS 是生成器重写目标，不期望被跟随，排除出感知面（防「拉取了也被重写」的单周期无谓出账）
-  const ownedFinal = owned.map((f) => {
-    if (GEN_TARGETS.has(f.rel)) return f;
-    const src = srcTemplatePath(pkgRoot, f.rel);
-    return src ? { ...f, srcSha256: shaText(src) } : f;
-  });
-  const pkg = JSON.parse(fs.readFileSync(path.join(pkgRoot, 'package.json'), 'utf8'));
-  fs.mkdirSync(path.dirname(kitPath), { recursive: true });
-  fs.writeFileSync(kitPath, `${JSON.stringify({
-    kit: 'agentic-flow-kit',
-    version: pkg.version,
-    // policyVersion 12（2026-10-13 B6b-2 回灌对齐源仓 v12）：新装即带全锚——v9–v12 = incidentRegrSince /
-    // specVerifSince / attributionSince / convergenceSince / convergenceHardSince / reviewerSince
-    // （§21–26 六段 + §3x 防复发证据门 + 复核上下文子检）。新装空台账零回溯：各段锚前存量豁免、空仓零
-    // 噪声；v1–v11 存量装户不受影响（缺键 → 对应消费段整体跳过）。
-    policyVersion: 12,
-    // 新装默认只跑硬规则。缺省（旧台账无此字段）在 check-loop 里仍是全量，避免升级后卫生检查突然消失。
-    audit: false,
-    // 门禁信任档（2026-10-12 gate-trust-level）：默认 'project' —— gate 安装锚失配只 WARN，
-    // 装户对门有最终所有权（1.7.11 起现状，此处只是把隐式默认显式命名）。多仓/组织场景改 'org'
-    // 即让失配升 FAIL（doctor exit 1），对齐 managed policy 的组织级强制。
-    // ⚠️ 默认值取 gateTrustOf / GATE_TRUST_DEFAULT 而非字面量：判据单源在 doctor.mjs（§6.6b 消费），
-    // 两处各写一份字符串即漂移面（N3 教训）。
-    gateTrust: GATE_TRUST_DEFAULT,
-    createdAt: new Date().toISOString(),
-    options: { hosts, stack: opt.stack, boardPort: String(opt.boardPort) },
-    managed,
-    owned: ownedFinal,
-  }, null, 2)}\n`);
-  console.log(`  kit.json 台账：managed ${managed.length} 份 ｜ owned ${ownedFinal.length} 份（版本 ${pkg.version}）`);
-
-  // 生效规则视图种子（2026-10-13 verify-gates 回灌）：verify.mjs `effective-policy` 门 --check 对缺文件
-  // 判漂移（红）——源仓等价物是该生成物随生成器同笔入库；kit 新装由 init 首跑种子，保证 fresh 装户
-  // 首个 verify 不被卡。**必须在 kit.json 落盘之后**：渲染读 loadKitPolicy（.agents/kit.json 的
-  // policyVersion），先跑会按回落 v1 种子、装完即与 v12 视图漂移（fresh 实测）。本文件不入 owned 台账
-  // （生成器重写面，非模板渲染件），不受 P1-2「先跑后记账」约束；视图日期 = 安装日，--check 按磁盘
-  // 视图日期重渲染，跨锚日字节稳定。
-  if (guardRun('.agents/scripts/gen-effective-policy.mjs')) {
-    const genPolicy = runNode(target, '.agents/scripts/gen-effective-policy.mjs');
-    console.log(genPolicy.ok ? '  已生成 workflow/effective-policy.md（生效规则视图——policy 变更后重生成并随同提交）' : `  ⚠️ gen-effective-policy 失败：${genPolicy.out.split('\n')[0]}`);
-  }
-
-  // 8) 自检（kit.json 已按生成后盘面记账——doctor §6.6 应全绿，fresh init 以 exit 0 收场）
-  // 输出语义（p2-batch1 P2-4）：doctor 打印在异步端口回调里、晚于本横幅——脚本化消费方按退出码判定
-  console.log('▶ flow-kit doctor（安装产物已就位；体检 FAIL 时本命令 exit 1，产物无损——按 FAIL 项处置）');
-  doctor(['--dir', target], pkgRoot);
-
-  if (t.skipped.length) console.log(`  跳过（已存在，未覆盖）：${t.skipped.join('、')}`);
-  for (const h of hosts) if (hostResults[h].skipped.length) console.log(`  跳过（${h} 已存在）：${hostResults[h].skipped.join('、')}`);
-  console.log('\n✅ 安装完成。下一步：');
-  if (opt.stack === 'none') {
-    console.log('  1. 技术栈未配置（none）：填 AGENTS.md「项目适配区」构建/测试命令 + .agents/hooks/commit-check.config.json 的 builds（编译检查）+ settings.json allow（自检验命令权限）');
-  } else {
-    console.log('  1. 按需微调 AGENTS.md「项目适配区」与 .agents/hooks/commit-check.config.json（已按技术栈预填初值）');
-  }
-  console.log('  2. 按项目模块改 .agents/workflow-modules.txt 词表与 .agents/rule-budgets.txt 预算');
-  console.log('  3. 第一个任务从 .agents/commands/new-task.md 流程发起（立 intent → 与用户确认）');
-}