agentic-flow-kit 1.8.7 → 2.0.0

package/templates/_agents/scripts/check-lane-surface.mjs

@@ -1,238 +0,0 @@
-#!/usr/bin/env node
-// check-lane-surface.mjs — 泳道完整性门禁（pre-commit 增量；2026-10-01 drift-hardening）
-// 布局前提：本门读 .agents/lane-surfaces.txt，豁免出口是 workflow/intents 的活跃 L2/L3 入口——
-//   二者都是**装户侧**件。纯包源仓（装户端内容清理后）两处皆无：清单缺失 = 检查 A/C 按既定
-//   「装户无感」口径跳过，本门整体惰性。此时把清单解析改双路径**只会让门跑起来而不会可用**——
-//   无 L2 入口机器时，任何控制面改动都走「无活跃入口」分支（A 出 advisory / C 出 BLOCK），
-//   纯包源仓的控制面保护改由 npm test（47 套件覆盖门禁逻辑）+ 评审 + CHANGELOG 承担。
-// 检查 A「触达面判低」：暂存 diff 命中项目 L2 触达面（.agents/lane-surfaces.txt，ERE 逐行；
-//   # 注释与空行忽略；文件缺失或清单为空 = 检查跳过，装户无感）时——
-//   存在活跃 L2/L3 入口 → 放行（归因歧义为已知边界：机器不猜「哪个入口在干这批改动」）；
-//   活跃入口全为 L1（含级别缺失）→ hard 拦，点名最新 L1 入口 + 三选修法（2026-10-13 L0 退役，低泳道=L1 专属）；
-//   无任何活跃入口 → 仅 advisory（docs / bootstrap 豁免类改动的合法形态）。
-//   活跃 = intents draft/approved + incidents open/fixed（incident≡intent 等价口径）。
-//   experiment/* 分支降级 advisory（泳道哲学：PoC 免闭环纪律，转正由 pre-push 加固门兜底）。
-// 检查 B「探索标记缺失」：experiment/* 分支暂存的 workflow/intents/*.md（排除 _TEMPLATE）
-//   frontmatter 无「阶段: exploring」且无「状态: exploring」（口径同 check-loop 加固门）→ hard 拦。
-//   标记是加固门覆盖率的前提且补写零成本——advisory 免的是纪律负担，不免标记本身。
-// 判据原则（2026-09-28 台账批量代录事故教训）：只用一手事实——暂存文件清单、
-//   当前分支名、工作区 frontmatter 字段；不用时间戳 / 字符串相等反推过程事实。
-// 边界：git 调用一律 -c core.quotepath=off（非 ASCII 路径教训，同 check-pairing-incremental.mjs）；
-//   frontmatter 读取容忍 CRLF（显式按 \r?\n 切分）；detached HEAD 分支不可判 → A 按 strict、
-//   B 跳过（沿 pairing 门先例）；配置行正则语法错误 → fail-closed（防静默空洞）。
-// 已知边界：commit-time 门禁，CI / pre-push 复跑面无对应全量检查（push 时刻无暂存 diff 一手事实，
-//   树级反推违背判据原则）——沿增量门禁 pre-commit-only 先例，声明于 spec 风险评估 R2。
-// 用法：node check-lane-surface.mjs [--merge] [--root <dir>] [--branch <名>] [--staged-file <清单文件>]
-//   （--root/--branch/--staged-file 为测试注入位；缺省自 git 发现。staged-file 每行一个仓库相对路径）
-// 退出码：0 放行（含 advisory）；1 阻断（stderr 出 [标签] 消息与修法）
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { laneOfEntry, laneOfDoc } from './stage-gates.mjs';
-import { loadKitPolicy } from './policy.mjs';
-import { loadLevelHints, hintLevelFor, rankOf, maxLevel } from './level-criteria.mjs';
-
-const argv = process.argv.slice(2);
-const argOf = (k) => {
-  const i = argv.indexOf(k);
-  return i >= 0 && i + 1 < argv.length ? argv[i + 1] : '';
-};
-
-const gitOut = (cwd, gitArgs) => {
-  const r = spawnSync('git', ['-c', 'core.quotepath=off', ...gitArgs], { cwd, encoding: 'utf8' });
-  return r.status === 0 ? String(r.stdout || '') : '';
-};
-
-const ROOT = argOf('--root') || gitOut(process.cwd(), ['rev-parse', '--show-toplevel']).trim() || process.cwd();
-// detached HEAD 时 abbrev-ref 返回 'HEAD' → 不匹配 experiment/* → A strict / B 跳过
-const BRANCH = argOf('--branch') || gitOut(ROOT, ['rev-parse', '--abbrev-ref', 'HEAD']).trim();
-const stagedArg = argOf('--staged-file');
-const STAGED = stagedArg
-  ? fs.readFileSync(stagedArg, 'utf8').split(/\r?\n/).filter(Boolean)
-  : gitOut(ROOT, ['diff', '--cached', '--name-only', '--diff-filter=ACMR']).split(/\r?\n/).filter(Boolean);
-
-const isExperiment = /^experiment\//.test(BRANCH);
-// 合并进行中（2026-10-15 自源仓 13f67ef7 回灌）：pre-merge-commit 显式传 --merge（git merge 自动提交
-// 窗口 MERGE_HEAD 已不可靠，只认显式旗标）；冲突解决后的手动 commit 由 MERGE_HEAD 探测兜底（此时
-// 合并仍在进行、MERGE_HEAD 确定存在）。合并提交不引入新首发改动，各笔已在自身提交时刻过门 → 检查 A 跳过。
-const FORCE_MERGE = argv.includes('--merge');
-// 泳道协议锚（单源 policy.mjs）：无 kit.json 的测试夹具回落 v1（无键=双字段协议从未生效，单字段判）
-const RISK_LEVEL_SINCE = loadKitPolicy(ROOT).riskLevelSince;
-
-// frontmatter 读取（CRLF 容忍；口径同 check-loop fmGet：--- 包夹、键行前缀匹配）
-const fmOf = (file) => {
-  const fm = {};
-  let lines;
-  try {
-    lines = fs.readFileSync(file, 'utf8').split(/\r?\n/);
-  } catch {
-    return fm;
-  }
-  if (!/^---\s*$/.test(lines[0] || '')) return fm;
-  for (let i = 1; i < lines.length; i++) {
-    if (/^---\s*$/.test(lines[i])) break;
-    const m = lines[i].match(/^([^:]+):\s*(.*)$/);
-    if (m) fm[m[1].trim()] = m[2].trim();
-  }
-  return fm;
-};
-
-// 触达面配置：缺失/空 → []（检查 A 跳过）；语法错误 → fail-closed
-const loadPatterns = () => {
-  const file = path.join(ROOT, '.agents', 'lane-surfaces.txt');
-  if (!fs.existsSync(file)) return [];
-  const bad = [];
-  const pats = fs.readFileSync(file, 'utf8')
-    .split(/\r?\n/)
-    .map((l) => l.trim())
-    .filter((l) => l && !l.startsWith('#'))
-    .map((l) => {
-      try {
-        return new RegExp(l);
-      } catch {
-        bad.push(l);
-        return null;
-      }
-    })
-    .filter(Boolean);
-  if (bad.length) {
-    console.error(`泳道完整性（增量）— BLOCK:\n  [面清单语法错误] .agents/lane-surfaces.txt 存在非法 ERE 行：${bad.join(' | ')}\n  修法：修正或删除该行后重试（fail-closed，防静默空洞）`);
-    process.exit(1);
-  }
-  return pats;
-};
-
-// 活跃入口收集（incident≡intent 等价；日期键 intent=日期 / incident=发现）。
-// 泳道单源（2026-10-02 caliber-convergence 方案 C 分歧双严）：intent 走 laneOfEntry（双字段三态，
-// 协议锚 policy.riskLevelSince），其余走 laneOfDoc（级别单字段）——suspect（缺失/非法/分歧）不计
-// high（不作豁免依据）、计入拦截集（消息按 suspect 给「两字段对齐」指引）。
-const ACTIVE = {
-  intent: new Set(['draft', 'approved']),
-  incident: new Set(['open', 'fixed']),
-};
-const collectActive = () => {
-  const out = [];
-  for (const [dir, kind, dateKey] of [['intents', 'intent', '日期'], ['incidents', 'incident', '发现']]) {
-    const dirPath = path.join(ROOT, 'workflow', dir);
-    if (!fs.existsSync(dirPath)) continue;
-    for (const f of fs.readdirSync(dirPath).sort()) {
-      if (!f.endsWith('.md') || f === '_TEMPLATE.md') continue;
-      const fm = fmOf(path.join(dirPath, f));
-      if (!ACTIVE[kind].has(fm['状态'] || '')) continue;
-      const lane = kind === 'intent'
-        ? laneOfEntry(fm['级别'] || '', fm['risk_level'] || '', RISK_LEVEL_SINCE, fm['日期'] || '')
-        : laneOfDoc(fm['级别'] || '');
-      out.push({ rel: `workflow/${dir}/${f}`, base: f.replace(/\.md$/, ''), level: fm['级别'] || '', risk: fm['risk_level'] || '', lane, date: fm[dateKey] || '', kind });
-    }
-  }
-  return out;
-};
-
-const blocks = [];
-const advisories = [];
-
-// --- 检查 A0：level-hints 路径下限对账（2026-10-13 hints-backstop）----------------
-// 背景：此前「就高不就低」只在 flow-kit route 输出 advisory，而提交面判低门只认 lane-surfaces.txt
-//   → 两份清单各管一头、**无机器对账**：项目在 hints 里登记了「改这些面至少 L2/L3」，提交面却可能
-//   靠一个 L1 活跃入口放行（判低有机可乘）。本段把 hints 接进提交面：
-//   ① hints 命中 → 要求存在**级别 ≥ 命中档**的活跃入口（不只「有个 high 入口」），否则 hard 拦；
-//   ② hints 已登记高风险面、lane-surfaces.txt 却缺失/为空 → advisory 提示「意图面登记了、提交面无兜底」。
-//   fail-closed：hints 语法错 → hard 拦（写错配置比没配置危险，见 level-criteria parseLevelHints）。
-const hintsState = (() => {
-  try {
-    const { hints } = loadLevelHints(ROOT);
-    return { hints, invalid: null };
-  } catch (e) {
-    return { hints: [], invalid: e.message };
-  }
-})();
-
-if (hintsState.invalid) {
-  blocks.push([
-    '[level-hints 配置错误] .agents/level-hints.txt 非法（档位只收 L2/L3；ERE 不得带行内注释）——配置面坏了整条兜底不可信：',
-    ...String(hintsState.invalid).split('\n').map((l) => `  ${l}`),
-    '  修法：修正清单后重试（fail-closed，防静默空洞——写错配置比没配置危险：没配置会提示，写错会误判档位）',
-  ].join('\n'));
-}
-
-// 命中判定复用判据单源的 hintLevelFor（2026-10-13 executor-review）：此前本文件手写了一遍
-//   「路径归一化 + 多条命中取高档」，与 level-criteria.mjs:104 的实现同形但独立演进——
-//   双源漂移是本仓硬规则（doctor 段就写着「不复刻解析器」），一旦归一化口径调整，
-//   route 会判 L1 而本门拦 L3，且没有任何测试能发现。
-const hintHits = hintsState.hints.length
-  ? STAGED
-    .map((p) => ({ p, lv: hintLevelFor(hintsState.hints, [p]).level }))
-    .filter((x) => x.lv)
-  : [];
-const hintLevel = hintHits.reduce((acc, x) => maxLevel(acc, x.lv), '');
-
-// --- 检查 A：触达面判低 ---
-const patterns = loadPatterns();
-
-if (hintLevel && !patterns.length) {
-  advisories.push(
-    `[level-hints 无提交面兜底] .agents/level-hints.txt 登记了 ${hintHits.length} 个命中（${hintHits.slice(0, 5).map((x) => `${x.p}→${x.lv}`).join(' ')}）——`
-    + '但 .agents/lane-surfaces.txt 缺失或为空，触达面判低检查整体跳过：意图面登记了高风险面，提交面却无兜底',
-  );
-}
-const hits = patterns.length ? STAGED.filter((p) => patterns.some((re) => re.test(p))) : [];
-// 本次提交触达到的**最低应然档位**：lane-surfaces 命中隐含 L2（沿原口径），hints 命中按登记档取。
-// 混档取高——与 level-criteria maxLevel 同一口径（就高不就低在提交面同样成立）。
-const requiredLevel = maxLevel(hits.length ? 'L2' : '', hintLevel);
-const merging = FORCE_MERGE || gitOut(ROOT, ['rev-parse', '-q', '--verify', 'MERGE_HEAD']).trim() !== '';
-if (requiredLevel && merging) {
-  advisories.push(`[触达面判低]（advisory）合并进行中（${FORCE_MERGE ? '--merge 显式标记' : 'MERGE_HEAD 在场'}）——检查 A 跳过：合并提交不引入新首发改动，各笔已在自身提交时刻过门`);
-} else if (requiredLevel) {
-  const active = collectActive();
-  const requiredRank = rankOf(requiredLevel) ?? 1;
-  // 入口是否够格：级别 rank ≥ 应然档。**suspect（级别/risk_level 缺失、非法或分歧）一律不够格**——
-  //   沿用原口径「suspect 不作豁免依据」：分歧（L2/L1）这类看似够档的入口，机器无法确认它真罩着这批改动。
-  const enough = (e) => e.lane !== 'suspect' && (rankOf(e.level) ?? -1) >= requiredRank;
-  const insufficient = active.filter((e) => !enough(e));
-  if (insufficient.length) {
-    const newest = [...insufficient].sort((a, b) => (b.date || '').localeCompare(a.date || '') || b.rel.localeCompare(a.rel))[0];
-    const hitList = [...hits.map((p) => `${p}（触达面）`), ...hintHits.map((x) => `${x.p}（hints→${x.lv}）`)];
-    const fixVerb = newest.lane === 'suspect'
-      ? `① 对齐该入口「级别」与「risk_level」两字段至一致的 ${requiredLevel}（fill-intent 双写口径；现两值缺失/非法/分歧）并补同名 spec（.agents/commands/design.md）`
-      : `① 升级该入口「级别」与「risk_level」两字段至 ${requiredLevel} 及以上并补同名 spec（.agents/commands/design.md）`;
-    const text = [
-      `[触达面判低] 暂存命中高风险面，但活跃入口无 ${requiredLevel} 及以上（存在更低档/low/suspect）：`,
-      `  命中: ${hitList.join(' ')}`,
-      `  关联入口: ${newest.rel}（级别 ${newest.level || '缺失'}/risk_level ${newest.risk || '缺失'}→ 泳道 ${newest.lane}${newest.date ? `，${newest.date}` : ''}；活跃不足共 ${insufficient.length} 件）`,
-      ...(hintLevel ? ['  判据：.agents/level-hints.txt 登记的路径下限——就高不就低在提交面同样成立（此前只 advisory，无门）'] : []),
-      `  修法（三选一）: ${fixVerb}`,
-      `    ② 该入口已完成则关单（done）或显式放弃（superseded/cancelled）——不留活跃残留`,
-      `    ③ 清单误配则修 .agents/lane-surfaces.txt${hintLevel ? ' 或 .agents/level-hints.txt' : ''}`,
-    ].join('\n');
-    if (isExperiment) advisories.push(`（advisory·experiment 泳道，不阻断；转正由 pre-push 加固门兜底）\n${text}`);
-    else blocks.push(text);
-  } else if (!active.length) {
-    advisories.push(`[触达面判低]（advisory）暂存命中高风险面（${hits.length + hintHits.length} 个文件，应然 ${requiredLevel}），但当前无任何活跃入口——若非 docs / bootstrap 豁免类改动（.agents/commands/new-task.md §intent 豁免），请先立入口文档`);
-  }
-}
-
-// --- 检查 B：探索标记缺失（仅 experiment/* 分支）---
-if (isExperiment) {
-  const missing = STAGED
-    .filter((p) => /^workflow\/intents\/[^/]+\.md$/.test(p) && path.basename(p) !== '_TEMPLATE.md')
-    .filter((p) => {
-      const fm = fmOf(path.join(ROOT, p));
-      return fm['阶段'] !== 'exploring' && fm['状态'] !== 'exploring';
-    });
-  if (missing.length) {
-    blocks.push([
-      `[探索标记缺失] experiment/* 分支暂存的 intent 缺「阶段: exploring」标记：`,
-      ...missing.map((p) => `  ${p}`),
-      `  修法（二选一）: ① frontmatter 补一行「阶段: exploring」（advisory 免纪律不免标记——标记是 pre-push 加固门覆盖率的前提）`,
-      `    ② 该件不属探索——换正式分支走标准泳道`,
-    ].join('\n'));
-  }
-}
-
-for (const a of advisories) console.error(`泳道完整性（增量）— advisory:\n${a}\n`);
-if (blocks.length) {
-  for (const b of blocks) console.error(`泳道完整性（增量）— BLOCK:\n${b}\n`);
-  console.error('pre-commit: 泳道完整性未通过，提交已阻止（判据单源见 .agents/scripts/level-criteria.mjs）');
-  process.exit(1);
-}
-process.exit(0);

package/templates/_agents/scripts/check-lane-surface.test.mjs

@@ -1,302 +0,0 @@
-#!/usr/bin/env node
-// check-lane-surface.test.mjs — 泳道完整性门禁 fixture 套件（2026-10-01 drift-hardening）
-// 方法：现场构造临时根（workflow/{intents,incidents} + .agents/lane-surfaces.txt），经
-//       --root/--branch/--staged-file 三注入位 spawn 脚本，断言 exit code 与输出关键词。
-//       场景集对齐同名 spec「功能行为」表 S1-S6 + 平台边界（CRLF / 非 ASCII / detached /
-//       配置语法 / 状态活性 / incident 等价），另含 1 个 git 真仓端到端（quotepath=off 实路径）。
-// 用法：node templates/_agents/scripts/check-lane-surface.test.mjs（npm test 随跑）
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-
-const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
-const SCRIPT = path.join(SCRIPT_DIR, 'check-lane-surface.mjs');
-
-let pass = 0;
-let fail = 0;
-const check = (desc, cond, detail = '') => {
-  if (cond) { pass++; console.log(`PASS  ${desc}`); }
-  else { fail++; console.log(`FAIL  ${desc}${detail ? '\n      ' + detail : ''}`); }
-};
-
-const mkfix = () => {
-  const d = fs.mkdtempSync(path.join(os.tmpdir(), 'lane-surface-test-'));
-  for (const s of ['intents', 'incidents']) fs.mkdirSync(path.join(d, 'workflow', s), { recursive: true });
-  fs.mkdirSync(path.join(d, '.agents'), { recursive: true });
-  return d;
-};
-const w = (root, rel, content) => fs.writeFileSync(path.join(root, rel), content);
-// eol='\r\n' 时整文件按 CRLF 写（平台边界：frontmatter 读取容忍性）
-const intent = (name, fm, eol = '\n') => `---${eol}${fm}${eol}---${eol}# INTENT — ${name}${eol}`;
-const incident = (fm) => `---\n${fm}\n---\n# INCIDENT\n`;
-const run = (root, { branch = 'main', staged = [], args = [] } = {}) => {
-  const listFile = path.join(root, 'staged.txt');
-  fs.writeFileSync(listFile, staged.join('\n') + '\n');
-  const r = spawnSync(process.execPath, [SCRIPT, '--root', root, '--branch', branch, '--staged-file', listFile, ...args], { encoding: 'utf8' });
-  return { code: r.status, out: `${r.stdout || ''}${r.stderr || ''}` };
-};
-
-// 通用 fixture：面清单 + 一个活跃 L1 intent（2026-09-28）+ 可选第二个入口
-const base = (root, { level = 'L1', status = 'approved', extra = null } = {}) => {
-  w(root, '.agents/lane-surfaces.txt', '^templates/\n^\\.agents/(scripts|hooks)/\n');
-  w(root, 'workflow/intents/2026-09-28-old-l1.md', intent('x', `状态: ${status}\n级别: ${level}\n日期: 2026-09-28\n模块: pipeline`));
-  if (extra) w(root, extra[0], intent('y', extra[1]));
-};
-const FM_LOW_NEW = '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui';
-
-// --- S1：命中 + 活跃 L2 存在 → 豁免放行 ---
-{
-  const d = mkfix();
-  base(d, { level: 'L2' });
-  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs'] });
-  check('S1 命中面+活跃 L2 入口 → 放行且无触达面判低输出', r.code === 0 && !r.out.includes('触达面判低'), r.out);
-}
-// --- S2：命中 + 活跃全为 L1（低泳道）→ 阻断 ---
-{
-  const d = mkfix();
-  base(d);
-  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs', 'docs/readme.md'] });
-  check('S2 命中面+仅活跃 L1 → 阻断且消息含标签/命中文件/入口名/修法',
-    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('templates/_agents/scripts/x.mjs')
-      && r.out.includes('workflow/intents/2026-09-28-old-l1.md') && r.out.includes('修法'),
-    r.out);
-}
-// --- S2b：多个低泳道（L1）活跃 → 点名最新（日期排序）---
-{
-  const d = mkfix();
-  base(d, { extra: ['workflow/intents/2026-10-01-new-low.md', FM_LOW_NEW] });
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('S2b 多活跃 L1 → 关联入口取最新日期件', r.code === 1 && r.out.includes('2026-10-01-new-low') && r.out.includes('共 2 件'), r.out);
-}
-// --- S2c：experiment 分支 → 检查 A 降级 advisory ---
-{
-  const d = mkfix();
-  base(d);
-  const r = run(d, { branch: 'experiment/poc', staged: ['templates/t.md'] });
-  check('S2c experiment 分支检查 A → advisory 放行', r.code === 0 && r.out.includes('advisory·experiment'), r.out);
-}
-// --- S2d/S2e：合并进行中 → 检查 A 跳过（2026-10-16 自源仓 13f67ef7 回灌）---
-// git merge 自动提交窗口 MERGE_HEAD 已不可靠 → pre-merge-commit 显式传 --merge（fixture 无 MERGE_HEAD，
-// 恰验证 --merge 独生效）；对照：同夹具不带 --merge 时命中面+仅活跃 L1 照拦。
-{
-  const d = mkfix();
-  base(d);
-  const r = run(d, { staged: ['templates/_agents/scripts/x.mjs'], args: ['--merge'] });
-  check('S2d --merge 显式标记 → 检查 A 跳过且明示来源',
-    r.code === 0 && r.out.includes('合并进行中（--merge 显式标记）') && !r.out.includes('[触达面判低] 暂存命中高风险面'),
-    r.out);
-  const r2 = run(d, { staged: ['templates/_agents/scripts/x.mjs'] });
-  check('S2e 无 --merge 同夹具照拦（对照：跳过仅由旗标/MERGE_HEAD 触发）',
-    r2.code === 1 && r2.out.includes('[触达面判低]'), r2.out);
-}
-// --- S3：命中 + 无活跃入口 → advisory 放行（done 不算活跃）---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
-  w(d, 'workflow/intents/2026-09-01-closed.md', intent('c', '状态: done\n级别: L1\n日期: 2026-09-01\n模块: ui'));
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('S3 命中+无活跃（done 不算活跃）→ advisory 放行', r.code === 0 && r.out.includes('无任何活跃入口'), r.out);
-}
-// --- S4b：experiment 分支 intent 缺标记 → 阻断；补标记放行 ---
-{
-  const d = mkfix();
-  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
-  const r1 = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
-  check('S4b-1 experiment 分支无标记 intent → 阻断且含修法',
-    r1.code === 1 && r1.out.includes('[探索标记缺失]') && r1.out.includes('阶段: exploring'), r1.out);
-  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui\n阶段: exploring'));
-  const r2 = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
-  check('S4b-2 补「阶段: exploring」后放行', r2.code === 0, r2.out);
-}
-// --- S4b-c：口径同加固门——「状态: exploring」亦认 ---
-{
-  const d = mkfix();
-  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: exploring\n级别: L1\n日期: 2026-10-01\n模块: ui'));
-  const r = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/2026-10-01-poc.md'] });
-  check('S4b-c 「状态: exploring」亦认（口径同加固门）', r.code === 0, r.out);
-}
-// --- S6：非 experiment 分支 → 检查 B 不触发 ---
-{
-  const d = mkfix();
-  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
-  const r = run(d, { branch: 'main', staged: ['workflow/intents/2026-10-01-poc.md'] });
-  check('S6 非 experiment 分支无标记 intent → 放行（B 不触发）', r.code === 0 && !r.out.includes('探索标记缺失'), r.out);
-}
-// --- S5：配置缺失 → 检查 A 整体静默跳过（装户无感）---
-{
-  const d = mkfix();
-  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('S5 无 lane-surfaces.txt → 静默跳过', r.code === 0 && r.out.trim() === '', JSON.stringify(r.out));
-}
-// --- incident 等价：open incident L2 豁免；fixed L1 算活跃低级 ---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^src/\n');
-  w(d, 'workflow/incidents/2026-09-30-inc.md', incident('状态: open\n级别: L2\n发现: 2026-09-30\n模块: backend'));
-  const r = run(d, { staged: ['src/a.ts'] });
-  check('incident 等价：活跃 open incident L2 → 豁免放行', r.code === 0, r.out);
-}
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^src/\n');
-  w(d, 'workflow/incidents/2026-09-30-inc.md', incident('状态: fixed\n级别: L1\n发现: 2026-09-30\n模块: backend'));
-  const r = run(d, { staged: ['src/a.ts'] });
-  check('incident 等价：fixed L1 算活跃低级入口 → 阻断',
-    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('incidents/2026-09-30-inc.md'), r.out);
-}
-// --- 级别缺失：suspect 拦截（方案 C：不能自证 high 即拦，消息给两字段对齐指引）---
-{
-  const d = mkfix();
-  base(d, { level: '', status: 'draft' });
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('级别缺失 → 泳道 suspect 拦断且消息含两字段对齐指引',
-    r.code === 1 && r.out.includes('suspect') && r.out.includes('对齐'), r.out);
-}
-// --- 方案 C：级别与 risk_level 分歧 → suspect 拦截（两字段协议期）---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
-  w(d, '.agents/kit.json', JSON.stringify({ policyVersion: 2 }));
-  w(d, 'workflow/intents/2026-10-02-divergent.md',
-    intent('x', '状态: approved\n级别: L2\nrisk_level: L1\n日期: 2026-10-02\n模块: pipeline'));
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('分歧（L2/L1）→ suspect 拦断（不作豁免依据）',
-    r.code === 1 && r.out.includes('suspect') && r.out.includes('2026-10-02-divergent'), r.out);
-}
-// --- 方案 C：两字段一致 high → 豁免（对照）---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
-  w(d, '.agents/kit.json', JSON.stringify({ policyVersion: 2 }));
-  w(d, 'workflow/intents/2026-10-02-aligned.md',
-    intent('x', '状态: approved\n级别: L2\nrisk_level: L2\n日期: 2026-10-02\n模块: pipeline'));
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('两字段一致 L2 → 豁免放行', r.code === 0 && !r.out.includes('触达面判低'), r.out);
-}
-// --- 平台边界：CRLF frontmatter ---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^templates/\n');
-  w(d, 'workflow/intents/2026-09-28-crlf.md', intent('x', '状态: approved\r\n级别: L1\r\n日期: 2026-09-28\r\n模块: ui', '\r\n'));
-  const r = run(d, { staged: ['templates/t.md'] });
-  check('CRLF frontmatter 正常解析（仍阻断）', r.code === 1 && r.out.includes('2026-09-28-crlf'), r.out);
-}
-// --- 平台边界：非 ASCII 路径透传（quotepath 教训的对账面）---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^模块/\n');
-  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
-  const r = run(d, { staged: ['模块/接口契约.ts'] });
-  check('非 ASCII 暂存路径命中模式且消息原样透传', r.code === 1 && r.out.includes('模块/接口契约.ts'), r.out);
-}
-// --- 平台边界：detached HEAD（branch=HEAD）→ A strict、B 跳过 ---
-{
-  const d = mkfix();
-  base(d);
-  w(d, 'workflow/intents/2026-10-01-poc.md', intent('p', '状态: draft\n级别: L1\n日期: 2026-10-01\n模块: ui'));
-  const r = run(d, { branch: 'HEAD', staged: ['templates/t.md', 'workflow/intents/2026-10-01-poc.md'] });
-  check('detached HEAD：A 按 strict 阻断、B 不触发', r.code === 1 && r.out.includes('[触达面判低]') && !r.out.includes('探索标记缺失'), r.out);
-}
-// --- 边界：_TEMPLATE.md 排除（不算活跃入口、不触发 B）---
-{
-  const d = mkfix();
-  w(d, 'workflow/intents/_TEMPLATE.md', intent('t', '状态: draft\n级别: L1'));
-  const r = run(d, { branch: 'experiment/poc', staged: ['workflow/intents/_TEMPLATE.md'] });
-  check('_TEMPLATE.md 不触发检查 B，也不算活跃入口', r.code === 0, r.out);
-}
-// --- 配置边界：非法 ERE 行 → fail-closed ---
-{
-  const d = mkfix();
-  w(d, '.agents/lane-surfaces.txt', '^ok/\n[invalid(\n');
-  const r = run(d, { staged: ['ok/a.ts'] });
-  check('配置含非法 ERE → fail-closed 阻断并指出坏行', r.code === 1 && r.out.includes('[面清单语法错误]') && r.out.includes('[invalid('), r.out);
-}
-// --- S-hints（2026-10-13 hints-backstop）：level-hints 接入提交面判低 ---
-// 此前「就高不就低」只在 flow-kit route 输出 advisory，提交面只认 lane-surfaces → 两份清单无机器对账。
-{
-  // ① hints 命中 L3，但活跃入口只有 L2 → 判低必须拦（此前「有个 high 入口」就放行）
-  const d = mkfix();
-  base(d, { level: 'L2' });
-  w(d, '.agents/level-hints.txt', 'L3 ^src/db/\n');
-  const r = run(d, { staged: ['src/db/schema.sql'] });
-  check('S-hints hints 命中 L3 + 活跃仅 L2 → 阻断（要求入口 ≥ L3，不只「有个 high」）',
-    r.code === 1 && r.out.includes('[触达面判低]') && r.out.includes('src/db/schema.sql')
-      && r.out.includes('L3') && r.out.includes('level-hints.txt'), r.out);
-
-  // ② 升到 L3 后放行
-  const d2 = mkfix();
-  base(d2, { level: 'L3' });
-  w(d2, '.agents/level-hints.txt', 'L3 ^src/db/\n');
-  const r2 = run(d2, { staged: ['src/db/schema.sql'] });
-  check('S-hints 入口升到 L3 → 放行', r2.code === 0 && !r2.out.includes('[触达面判低]'), r2.out);
-
-  // ③ 无 hints（默认空）→ 不产生任何新阻断面（旧装户零影响）
-  const d3 = mkfix();
-  base(d3, { level: 'L1' });
-  const r3 = run(d3, { staged: ['src/db/schema.sql'] });
-  check('S-hints 未配 hints → 不触发新判定（默认空=纯语义定级）', !r3.out.includes('[触达面判低]'), r3.out);
-
-  // ④ hints 命中但无任何活跃入口 → advisory（与检查 A 同口径，豁免 docs/bootstrap 类）
-  const d4 = mkfix();
-  w(d4, '.agents/lane-surfaces.txt', '^templates/\n');
-  w(d4, '.agents/level-hints.txt', 'L2 ^src/db/\n');
-  const r4 = run(d4, { staged: ['src/db/x.sql'] });
-  check('S-hints 命中但无活跃入口 → advisory 不阻断',
-    r4.code === 0 && r4.out.includes('触达面判低') && r4.out.includes('advisory'), r4.out);
-
-  // ⑤ hints 语法错 → fail-closed（写错配置比没配置危险）
-  const d5 = mkfix();
-  base(d5, { level: 'L2' });
-  w(d5, '.agents/level-hints.txt', 'L3 [bad(\n');
-  const r5 = run(d5, { staged: ['ok/a.ts'] });
-  check('S-hints 非法 hints → fail-closed 阻断并带路径行号',
-    r5.code === 1 && r5.out.includes('[level-hints 配置错误]') && r5.out.includes('level-hints.txt'), r5.out);
-
-  // ⑥ 两份清单交叉对账：hints 登记了高风险面、lane-surfaces 为空 → advisory 点名「提交面无兜底」
-  const d6 = mkfix();
-  w(d6, '.agents/level-hints.txt', 'L2 ^src/db/\n');
-  const r6 = run(d6, { staged: ['src/db/x.sql'] });
-  check('S-hints hints 已登记但触达面清单空 → advisory 点名无兜底',
-    r6.code === 0 && r6.out.includes('level-hints 无提交面兜底'), r6.out);
-
-  // ⑦ L0 档 hints → 配置错误 fail-closed（2026-10-13 executor-review 实测 Major）
-  //   原实现接受 `L0 ^docs/`，提交面判低门当真 → 纯文档提交被硬拦，修法还让人「升级至 L0 及以上」
-  const d7 = mkfix();
-  base(d7, { level: 'L1' });
-  w(d7, '.agents/level-hints.txt', 'L0 ^docs/\n');
-  const r7 = run(d7, { staged: ['docs/readme.md'] });
-  check('S-hints L0 档 hints → fail-closed 阻断（不拿低档当门槛）',
-    r7.code === 1 && r7.out.includes('[level-hints 配置错误]') && r7.out.includes('L2 或 L3'), r7.out);
-
-  // ⑧ 路径归一化口径与判据单源一致（复用 hintLevelFor，不再各自复刻）
-  //   同一文件同时命中 hints 与触达面 → 判据里点名两处来源；Windows 反斜杠写法也要能命中
-  const d8 = mkfix();
-  base(d8, { level: 'L3' });
-  w(d8, '.agents/level-hints.txt', 'L3 ^src/db/\n');
-  const r8 = run(d8, { staged: ['src\\db\\a.sql'] });
-  check('S-hints 反斜杠路径经单源归一后仍命中（复用 hintLevelFor）',
-    r8.code === 0 && !r8.out.includes('[触达面判低]'), r8.out);
-}
-// --- git 真仓端到端：走生产发现路径（quotepath=off + diff --cached）---
-{
-  const d = mkfix();
-  const g = (a) => spawnSync('git', ['-c', 'core.quotepath=off', ...a], { cwd: d, encoding: 'utf8' });
-  g(['init', '-q']);
-  g(['config', 'user.email', 't@t']);
-  g(['config', 'user.name', 't']);
-  w(d, '.agents/lane-surfaces.txt', '^模块/\n');
-  w(d, 'workflow/intents/2026-09-28-l1.md', intent('x', '状态: approved\n级别: L1\n日期: 2026-09-28\n模块: ui'));
-  fs.mkdirSync(path.join(d, '模块'), { recursive: true });
-  w(d, '模块/接口契约.ts', 'export {};\n');
-  g(['add', '模块/接口契约.ts']);
-  const r = spawnSync(process.execPath, [SCRIPT, '--root', d], { cwd: d, encoding: 'utf8' });
-  check('git 端到端：真实暂存非 ASCII 路径 → 阻断且路径不转义',
-    r.status === 1 && `${r.stdout || ''}${r.stderr || ''}`.includes('模块/接口契约.ts'),
-    `${r.stdout || ''}${r.stderr || ''}`);
-}
-
-console.log(`\n合计: PASS ${pass} / FAIL ${fail}`);
-process.exit(fail ? 1 : 0);