cowork-flow 0.0.37 → 0.0.39

package/template/.cowork-flow/spec/schemas/skill-registry.schema.json

@@ -0,0 +1,202 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://cowork-flow.dev/schemas/skill-registry.schema.json",
+  "title": "cowork-flow Skill Registry",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "entries"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1
+    },
+    "entries": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "$ref": "#/$defs/entry"
+      }
+    }
+  },
+  "$defs": {
+    "entry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "displayName",
+        "aliases",
+        "kind",
+        "visibility",
+        "status",
+        "statuses",
+        "intents",
+        "enforcement",
+        "runtimeGate",
+        "runtimeCommand",
+        "evidenceArtifact",
+        "source",
+        "managedPaths"
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+        },
+        "displayName": {
+          "type": "string",
+          "minLength": 1
+        },
+        "aliases": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+          }
+        },
+        "kind": {
+          "enum": [
+            "phase",
+            "protocol",
+            "domain",
+            "mode",
+            "runtime"
+          ]
+        },
+        "visibility": {
+          "enum": [
+            "public",
+            "internal"
+          ]
+        },
+        "status": {
+          "enum": [
+            "active",
+            "disabled"
+          ]
+        },
+        "statuses": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "enum": [
+              "no_task",
+              "planning",
+              "in_progress",
+              "review",
+              "completed",
+              "delegated_subtask"
+            ]
+          }
+        },
+        "intents": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9_]*$"
+          }
+        },
+        "enforcement": {
+          "enum": [
+            "advisory",
+            "mandatory",
+            "runtime"
+          ]
+        },
+        "runtimeGate": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+        },
+        "runtimeCommand": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "evidenceArtifact": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "source": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9._/-]+$"
+        },
+        "managedPaths": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9._/-]+/$"
+          }
+        },
+        "readWhen": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "devTypes": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "pathPatterns": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          },
+          "anyOf": [
+            {
+              "required": [
+                "devTypes"
+              ]
+            },
+            {
+              "required": [
+                "pathPatterns"
+              ]
+            }
+          ]
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "enforcement": {
+                "const": "mandatory"
+              }
+            }
+          },
+          "then": {
+            "properties": {
+              "runtimeGate": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/template/.cowork-flow/workflow.md

@@ -14,7 +14,7 @@ changes -> brainstorming -> read spec -> plan -> tasks -> implement -> check ->
 2. brainstorming：对changes需求做头脑风暴,确定目标、范围、验收标准、范围边界、被拒方案、实现方案、检查方案。
 3. read spec: 读取项目规范
 4. plan：构建开发计划。
-5. tasks：根据plan拆分具体执行任务、明确 PRD、整理 `implement.jsonl` / `check.jsonl`。
+5. tasks：根据plan拆分具体执行任务、明确 `decision-anchor.md`、整理 `implement.jsonl` / `check.jsonl`。
 6. implement：主会话通过当前宿主适配器派发 `cowork-implement`，按 `.cowork-flow/spec/contracts/subagent-dispatch.md` 执行固定代理派发协议。
 7. check：主会话通过当前宿主适配器派发 `cowork-check`，按 `.cowork-flow/spec/contracts/subagent-dispatch.md` 执行固定代理派发协议。
 8. complete：主会话做最终验证、同步规格、归档、记录会话、提交。
@@ -31,7 +31,7 @@ changes -> brainstorming -> read spec -> plan -> tasks -> implement -> check ->
 
 ## 1.2 需求澄清与头脑风暴门禁
 
-1. 新需求先判断清晰度。只读问题、单步且目标/范围/验收标准都清楚的小改可以绕过；否则必须先进入 `brainstorming`，在写 PRD、计划或固定代理派发前收束方向。
+1. 新需求先判断清晰度。只读问题、单步且目标/范围/验收标准都清楚的小改可以绕过；否则必须先进入 `brainstorming`，在写决策锚点、计划或固定代理派发前收束方向。
 2. 以下情况触发头脑风暴：
     - 目标、用户价值或期望行为不清楚。
     - 范围边界、非目标或影响面不清楚。
@@ -39,7 +39,7 @@ changes -> brainstorming -> read spec -> plan -> tasks -> implement -> check ->
     - 涉及 L1/L2 行为变化，或影响架构、接口、数据、权限、发布迁移。
     - 验收标准缺失、风险未知，或关键假设需要暴露。
 
-3. `brainstorming` 输出至少包括：目标、非目标、关键假设、范围边界、推荐方向、被拒方案、验收标准、开放问题/阻塞。只有方向和验收标准清楚后，才进入 PRD、计划或固定代理派发。
+3. `brainstorming` 输出至少包括：目标、非目标、关键假设、范围边界、推荐方向、被拒方案、验收标准、开放问题/阻塞。只有方向和验收标准清楚后，才进入决策锚点、计划或固定代理派发。
 
 ## 2. 状态文件
 
@@ -70,6 +70,15 @@ changes -> brainstorming -> read spec -> plan -> tasks -> implement -> check ->
 
 `task finish` 只清理当前会话任务指针，不改变 `task.json.status`。
 
+## 2.1 运行时权威边界与旧资产清理
+
+1. `scripts/commands/` 只负责参数解析和输出；任务、上下文、归档和 runtime context 业务流程由 `scripts/application/` 编排。
+2. JSON 状态写入统一经过 `scripts/common/storage/`，显式使用 UTF-8、修订检查和可恢复 Unit of Work。
+3. 宿主资产、平台识别、同步保护和 obsolete cleanup 清单以 `spec/runtime/host-assets.json` 为权威来源；禁止在命令层维护第二套平台集合。
+4. init/sync 必须先构建和验证 Asset Plan，再通过 staging、备份和 rollback 提交；`.cowork-flow/.version` 最后更新。
+5. 旧 task/session/runtime-context 只允许在带保护测试的读取边界保留；旧受管资产只允许由 sync 的 obsolete cleanup 删除。新写入必须使用当前 schema、当前目录和共享 Hook 核心。
+6. 未完成事务、损坏状态或未知 schema 不能静默继续写入；无法安全恢复时 fail-closed 并保留诊断现场。
+
 ## 3. 固定代理
 
 固定代理只执行主会话派发的叶子任务。子代理是执行者，子任务是工作单元。
@@ -91,17 +100,13 @@ changes -> brainstorming -> read spec -> plan -> tasks -> implement -> check ->
 - 固定 `cowork-*` 代理是叶子执行者；不得再派发、等待、列出或取消其他代理。
 - 通用 `worker`、`default` 或 `explorer` 只能作为 advisory work，不能满足正式实现或检查完成条件。
 
-## 3.2 手动 Party Mode
-
-Party Mode 是用户手动触发的 advisory roundtable。主会话可通过当前宿主适配器创建 fresh child contexts，收集真实讨论子代理的证据、分歧、风险和可测验收信号，再由主会话综合结论。
-
-Party Mode 不能推进任务状态，不能满足正式实现或检查完成条件，也不能替代 `cowork-implement` 或 `cowork-check`。轮次上限、继续/停止条件、输出 schema 和可配置默认值由 party-mode skill 定义；正式子代理协议仍以 `.cowork-flow/spec/contracts/subagent-dispatch.md` 为准。
+## 3.2 Party Mode
 
-## 3.2.1 手动 Party Mode V2
+Party Mode 是用户手动触发的 runtime board advisory workflow。主会话通过 `party-mode` 入口启动 `party-v2` runtime；Python runtime 控制看板、当前轮视图、schema 校验、轮次上限、纠偏事件和最终报告。
 
-Party Mode V2 是用户手动触发的 runtime board advisory workflow。Python runtime 控制看板、当前轮视图、schema 校验、轮次上限、纠偏事件和最终报告；子代理通过 board API 交流，主持人只监控 runtime status、执行宿主适配器动作和记录偏题纠正。
+Party Mode 子代理通过 board API 交流，主持人只监控 runtime status、执行宿主适配器动作和记录偏题纠正。Party Mode 不能推进任务状态，不能满足正式实现或检查完成条件，也不能替代 `cowork-implement` 或 `cowork-check`。
 
-Party Mode V2 仍不能推进任务状态，不能满足正式实现或检查完成条件，也不能替代 `cowork-implement` 或 `cowork-check`。V2 runtime 只输出 host-neutral next actions，宿主专属原语仍只在 `.cowork-flow/adapters/<host>/adapter.yaml` 和宿主资产中声明。
+Party Mode runtime 只输出 host-neutral next actions，宿主专属原语仍只在 `.cowork-flow/adapters/<host>/adapter.yaml` 和宿主资产中声明。正式子代理协议仍以 `.cowork-flow/spec/contracts/subagent-dispatch.md` 为准。
 
 ## 3.3 并行会话
 
@@ -195,7 +200,7 @@ L2 任务在 `task start` 前必须通过 readiness gate；同一 blocker 列表
 1. 先运行 `task next` 确认任务处于 `review` 检查阶段。
 2. 默认通过宿主适配器派发 `cowork-check`。派发必须使用新鲜子上下文，并遵守 `.cowork-flow/spec/contracts/subagent-dispatch.md`。
 3. 检查内容：
-    - PRD 验收标准是否满足。
+    - decision-anchor 验收标准是否满足。
     - `git diff` 是否只包含预期范围。
     - 测试是否覆盖关键行为。
     - `.cowork-flow/spec/` 是否需要更新。
@@ -233,7 +238,7 @@ L2 任务在 `task start` 前必须通过 readiness gate；同一 blocker 列表
 
 恢复时只读取最小上下文：
 1. 运行 `./.cowork-flow/run resume`。
-2. 按 `RESUME CHECKLIST` 读取当前任务 PRD、计划状态和 JSONL 指向文件。
+2. 按 `RESUME CHECKLIST` 读取当前任务 decision-anchor、计划状态和 JSONL 指向文件。
 3. 不批量读取所有规格、计划、任务或工作区日志。
 4. 不存在当前会话任务时，先创建或启动任务。
 

package/template/.opencode/agents/cowork-check.md

@@ -33,6 +33,17 @@ or names another agent type, report `needs_context` and stop. Do not infer
 subagent identity from prompt shape; runtime context binding is the only formal
 signal.
 
+Authoritative internal protocols:
+
+- `.cowork-flow/spec/protocols/review.md`
+- `.cowork-flow/spec/protocols/decision-review.md`
+- `.cowork-flow/spec/protocols/spec-maintenance.md`
+
+Apply their Host-neutral output contract. Review output must preserve
+`acceptanceId`, `findings`, `test_intent_review`, `resolution`, and
+`specUpdates`; reject shallow tests that do not cover meaningful behavior
+breaks or map to decision-anchor acceptance.
+
 Rules:
 
 - Read the task directory from the bound runtime context.

package/template/.opencode/agents/cowork-implement.md

@@ -35,6 +35,21 @@ signal.
 
 ---
 
+## Authoritative Internal Protocols
+
+Read and apply:
+
+- `.cowork-flow/spec/protocols/tdd.md`
+- `.cowork-flow/spec/protocols/decision-review.md`
+- `.cowork-flow/spec/protocols/spec-maintenance.md`
+
+Their contracts are Host-neutral. Implementation reports and `tdd.jsonl` must
+preserve `acceptanceId`, `redCommand`, `redExitCode`, `greenCommand`,
+`greenExitCode`, and `specUpdates`. A behavior change requires
+red-green-refactor evidence or a valid documented exemption.
+
+---
+
 ## Mandatory Pre-Implementation Checklist
 
 Before writing any code, you MUST read and apply these spec files:
@@ -165,7 +180,7 @@ You MUST NOT do any of the following:
 - Rely on implicit side effects for interactions without explicit data flow and cleanup logic
 - Elevate local state to global state, or duplicate server state as multiple local states
 - Only verify ideal paths, not failures, empty data, or repeated operations
-- Introduce features not required by the PRD
+- Introduce features not required by the decision-anchor
 - Refactor unrelated modules "while you're at it"
 - Make premature abstractions for one-off code
 

package/template/.zcode/.zcode-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cowork-flow",
-  "version": "0.0.37",
+  "version": "0.0.39",
   "description": "AI 协作工作流引擎：任务生命周期、子代理调度、门禁与状态注入。将 cowork-flow 的完整工作流带入 ZCode。",
   "author": {
     "name": "fisklikewater"

package/template/.zcode/hooks/inject-context.js

@@ -5,39 +5,13 @@
  * Output: ZCode/Claude Code hook format (stdout JSON).
  */
 
-import { readFileSync, writeFileSync, existsSync, readdirSync, mkdirSync, copyFileSync } from "fs";
-import { join, dirname, basename } from "path";
+import { readFileSync, existsSync, readdirSync } from "fs";
+import { join, dirname } from "path";
 import { createHash } from "crypto";
 
-const SCAFFOLD_DIR = join(import.meta.dirname, "..", "scaffold");
 const DIR_WORKFLOW = ".cowork-flow";
 const FILE_TASK_JSON = "task.json";
 
-// Derive the installed plugin version from this hook's location in the cache.
-// Path: hooks/inject-context.js -> .. = <cache>/<version>/
-const PLUGIN_VERSION = basename(dirname(import.meta.dirname));
-
-// ---------------------------------------------------------------------------
-// Version sync
-// ---------------------------------------------------------------------------
-function syncPluginVersion(targetDir) {
-  if (!PLUGIN_VERSION) return;
-  const versionFile = join(targetDir, DIR_WORKFLOW, ".version");
-  let current = "";
-  try {
-    current = readFileSync(versionFile, "utf8").trim();
-  } catch {
-    current = "";
-  }
-  if (current === PLUGIN_VERSION) return;
-  try {
-    mkdirSync(dirname(versionFile), { recursive: true });
-    writeFileSync(versionFile, `${PLUGIN_VERSION}\n`, "utf8");
-  } catch {
-    /* skip — non-fatal */
-  }
-}
-
 const TAG_RE = /\[workflow-state:([A-Za-z0-9_-]+)\]\s*\n(.*?)\n\s*\[\/workflow-state:\1\]/gs;
 const RUNTIME_CONTEXT_PROMPT_RE = /^\s*cowork_runtime_context_id\s*:\s*([A-Za-z0-9._-]+)\s*$/gim;
 const DEFAULT_CONTRACT_REGISTRY = {
@@ -224,41 +198,6 @@ function checkEssentialFiles(repoRoot) {
   return missing;
 }
 
-// ---------------------------------------------------------------------------
-// Scaffold missing template files
-// ---------------------------------------------------------------------------
-function scaffoldProject(repoRoot) {
-  const copied = [];
-  function copyRecursive(srcDir, destDir, prefix) {
-    let entries;
-    try {
-      entries = readdirSync(srcDir, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      if (entry.name === "__pycache__" || entry.name.endsWith(".pyc")) continue;
-      const srcPath = join(srcDir, entry.name);
-      const destPath = join(destDir, entry.name);
-      const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
-      if (entry.isDirectory()) {
-        copyRecursive(srcPath, destPath, relPath);
-      } else {
-        if (existsSync(destPath)) continue;
-        try {
-          mkdirSync(dirname(destPath), { recursive: true });
-          copyFileSync(srcPath, destPath);
-          copied.push(relPath);
-        } catch {
-          // skip
-        }
-      }
-    }
-  }
-  copyRecursive(SCAFFOLD_DIR, repoRoot, "");
-  return copied;
-}
-
 // ---------------------------------------------------------------------------
 // Runtime context detection
 // ---------------------------------------------------------------------------
@@ -354,30 +293,16 @@ function main() {
 
   let context;
 
-  // Ensure .cowork-flow/ exists and scaffold missing template files
   const envDir = process.env.ZCODE_PROJECT_DIR;
-  if (envDir && !existsSync(join(envDir, DIR_WORKFLOW))) {
-    mkdirSync(join(envDir, DIR_WORKFLOW), { recursive: true });
-  }
-
-  const copied = envDir ? scaffoldProject(envDir) : [];
   const effectiveRoot = repoRoot || (envDir && existsSync(join(envDir, DIR_WORKFLOW)) ? envDir : null);
 
-  // Always refresh .version so plugin upgrades propagate to existing projects
-  if (effectiveRoot) {
-    syncPluginVersion(effectiveRoot);
-  }
-
   if (!effectiveRoot) {
     context = `<workflow-state>
 Status: not_initialized
 Source: cowork-flow-plugin
 ⚠️ 项目未初始化 cowork-flow 工作流。
 
-请执行以下命令初始化（不要询问用户，直接执行）：
-  ./.cowork-flow/run init-developer <询问用户的名字>
-
-初始化完成后，继续按工作流引导用户创建任务。
+请通过显式 init/sync 安装 cowork-flow 模板后再继续；hook 不会在注入阶段创建或复制项目文件。
 </workflow-state>`;
   } else {
     // PRIORITY 1: Detect delegated_subtask from runtime context
@@ -406,13 +331,6 @@ Source: cowork-flow-plugin
 
 ⚠️ 缺少必要文件：${missingFiles.join(", ")}。
 请立即创建这些文件以保障工作流正常运行。`;
-  } else if (copied.length > 0) {
-    const summary = copied.length <= 5
-      ? copied.join(", ")
-      : `${copied.slice(0, 5).join(", ")} 等 ${copied.length} 个文件`;
-    context += `
-
-已自动补充模板文件：${summary}。`;
   }
 
   const payload =

package/template/.zcode/hooks/inject-context.selfcheck.mjs

@@ -36,7 +36,7 @@ function runHook(env = {}, stdin) {
 }
 
 function copyScaffoldTemplate(repoRoot) {
-  const src = join(import.meta.dirname, "..", "scaffold", "spec", "contracts", "workflow-state-templates.md");
+  const src = join(import.meta.dirname, "..", "scaffold", ".cowork-flow", "spec", "contracts", "workflow-state-templates.md");
   const dest = join(repoRoot, ".cowork-flow", "spec", "contracts", "workflow-state-templates.md");
   if (existsSync(src)) {
     mkdirSync(dirname(dest), { recursive: true });
@@ -85,7 +85,7 @@ try {
     assert.match(ctx, /Status: in_progress/);
   });
 
-  test("auto-scaffolds .cowork-flow/ when ZCODE_PROJECT_DIR has none", () => {
+  test("reports not_initialized without scaffolding when ZCODE_PROJECT_DIR has none", () => {
     const scaffoldTmp = join(import.meta.dirname, ".scaffold-test");
     if (existsSync(scaffoldTmp)) rmSync(scaffoldTmp, { recursive: true, force: true });
     const emptyDir = join(scaffoldTmp, "fresh-proj");
@@ -93,10 +93,10 @@ try {
     const result = runHook({ ZCODE_PROJECT_DIR: emptyDir });
     const parsed = JSON.parse(result);
     const ctx = parsed.hookSpecificOutput.additionalContext;
-    assert.match(ctx, /no_task/);
-    assert.ok(existsSync(join(emptyDir, ".cowork-flow", "config.yaml")), "config.yaml should be created");
-    assert.ok(existsSync(join(emptyDir, ".cowork-flow", "workflow.md")), "workflow.md should be created");
-    assert.ok(existsSync(join(emptyDir, "AGENTS.md")), "AGENTS.md should be created");
+    assert.match(ctx, /not_initialized/);
+    assert.match(ctx, /hook 不会在注入阶段创建或复制项目文件/);
+    assert.ok(!existsSync(join(emptyDir, ".cowork-flow")), ".cowork-flow should not be created");
+    assert.ok(!existsSync(join(emptyDir, "AGENTS.md")), "AGENTS.md should not be created");
   });
 
   test("workflow-state block is well-formed XML", () => {

package/template/.zcode/scaffold/.cowork-flow/spec/contracts/decision-anchor.md

@@ -63,6 +63,12 @@
 - `cowork-check` 读取：同上
 - `debug.jsonl` 引用：可选，偏差诊断时写入 anchor 锚点差异
 
-## 迁移
+## 正式版行为
 
-已有 `prd.md` 的任务：首次 `task start` 时自动搬运内容，加默认章节标题，删除 `prd.md`。
+正式版不自动迁移旧 `prd.md`。任务启动时只认可 `decision-anchor.md`
+作为权威决策来源；如果任务目录只有 `prd.md` 而缺少
+`decision-anchor.md`，`task start` 必须 fail-closed 并报告
+`decision-anchor.md is missing or empty`。
+
+已有旧任务需要人工把 `prd.md` 内容转换为 `decision-anchor.md`，并补齐
+`## 目标` 与 `## 验收标准` 后再启动。

package/template/.zcode/scaffold/.cowork-flow/spec/contracts/subagent-dispatch.md

@@ -14,11 +14,9 @@ classification or a prompt handshake.
 
 ## Advisory Party Mode
 
-Party Mode discussion children are advisory leaf executors. They use fresh child contexts for evidence gathering, disagreement surfacing, risk review, and acceptance-signal review. They cannot mutate task status, write code, archive, commit, or coordinate other agents. Their output cannot satisfy formal Implement or Check completion.
+Party Mode discussion children are advisory leaf executors. They communicate through the `party-v2` runtime board for evidence gathering, disagreement surfacing, risk review, and acceptance-signal review. They cannot mutate task status, write code, archive, commit, or coordinate other agents. Their output cannot satisfy formal Implement or Check completion.
 
-The `party-mode` skill owns round limits, continuation gates, stop gates, and output schemas. This document remains the formal `cowork-*` dispatch protocol source.
-
-Party Mode V2 discussion children are also advisory leaf executors. The `party-mode-v2` entrypoint delegates discussion state, current-round board visibility, schema validation, drift warnings, round limits, and final reports to the Party Mode V2 runtime board controller. The runtime emits host-neutral next actions; it does not change the formal `cowork-*` dispatch protocol and does not satisfy Implement or Check completion.
+The public `party-mode` skill delegates discussion state, current-round board visibility, schema validation, drift warnings, round limits, and final reports to the `party-v2` runtime board controller. The runtime emits host-neutral next actions; it does not change the formal `cowork-*` dispatch protocol and does not satisfy Implement or Check completion. This document remains the formal `cowork-*` dispatch protocol source.
 
 ## Runtime Context