create-yss-spec 3.5.2 → 3.5.4

package/template/scripts/lib/strategic-handoff.mjs

@@ -1,3 +1,4 @@
+import { BUSINESS_TICKET_CAPABILITY, checkBusinessTickets, assertBusinessDeferredApprovals } from './business-tickets.mjs';
 import { scopedConsumerCapabilities } from './strategic-handoff-routing.mjs';
 import { existsSync, lstatSync, readFileSync } from './validation-phase.mjs';
 import { mkdirSync, mkdtempSync, renameSync, rmSync, cpSync } from 'node:fs';
@@ -194,8 +195,20 @@ export async function inspectSource(root, handoffRef) {
   const explicitlyReviewed=(gate)=>(roles.gate_policy.digital_human_review||[]).some(rule=>rule.gate===gate)||(roles.gate_policy.dual_digital_human||[]).some(rule=>rule.gate===gate)||(roles.gate_policy.biological_human||[]).includes(gate);
   const terminalGate=currentPlan||explicitlyReviewed('gate.strategic-design-handoff-approved')?'gate.strategic-design-handoff-approved':'gate.stage-decision-package-approved';
   const expectedGates={domain_strategy_ref:currentPlan?'gate.plan-approved':'gate.domain-strategy-approved',stage_decision_package_ref:currentPlan?'gate.plan-approved':'gate.stage-decision-package-approved',spec_ref:'gate.spec-baseline-approved',prototype_ref:currentPlan?'gate.product-design-approved':'gate.user-confirmation',visual_baseline_ref:currentPlan?'gate.product-design-approved':'gate.user-confirmation',business_ticket_set_ref:currentPlan?'gate.plan-approved':terminalGate,handoff:terminalGate};
+  const setSource=read(safe(root,handoff.source.business_ticket_set_ref.persisted_ref));
+  if(setSource?.kind==='business-ticket-set')ensure(roles.user_decision_policy.required_capabilities?.includes(BUSINESS_TICKET_CAPABILITY),'新业务集合缺少批准策略能力声明');
+  let business;
+  if (roles.user_decision_policy.required_capabilities?.includes(BUSINESS_TICKET_CAPABILITY)) {
+    expectedGates.business_ticket_set_ref=terminalGate;
+    business=checkBusinessTickets({root,setRef:handoff.source.business_ticket_set_ref.persisted_ref,mode:'formal'});
+    ensure(business.status==='passed',`业务 Ticket 未正式化: ${business.diagnostics.map(x=>x.code).join(', ')}`);
+    const setBinding=handoff.source.business_ticket_set_ref,specBinding=handoff.source.spec_ref;
+    ensure(business.id===setBinding.id&&business.version===setBinding.version,'业务集合身份或版本与交接不一致');
+    ensure(business.spec.ref===specBinding.persisted_ref&&business.spec.version===specBinding.version&&business.spec.digest===hash(readFileSync(safe(root,specBinding.persisted_ref))),'业务集合未绑定当前交接 Spec');
+  }
   expectedGates.existing_ui_baseline_ref=expectedGates.prototype_ref;
   const bindings={...handoff.source,handoff:{id:handoff.handoff_id,version:handoff.handoff_version,persisted_ref:handoffRef,status:'approved'}};
+  const businessProofRefs=[];
   for(const [key,ref] of Object.entries(bindings)) {
     const approval=config.approvals[key];
     ensure(approval,`缺少资产批准绑定: ${key}`);
@@ -213,9 +226,11 @@ export async function inspectSource(root, handoffRef) {
     const record=sourceApprovalRecord(read(safe(root,approval.record_ref)),approval.gate_id);
     if(key==='existing_ui_baseline_ref')ensure(record.subject_ref===`${ref.persisted_ref}/${ref.manifest_ref}`,'既有 UI 用户决定必须以当前 manifest 为批准主体');
     await sourceApproval(record,roles,root);
+    businessProofRefs.push(approval.record_ref,record.user_decision_ref,record.continuation_ref,record.decision_reuse_ref);
     ensure(record.gate_id===approval.gate_id,`批准门禁不匹配: ${key}`);
     ensure((record.artifact_bindings || []).some(x=>x.id===(ref.id||ref.baseline_id) && x.version===ref.version && x.digest===actual),`批准记录未绑定当前资产: ${key}`);
   }
+  if(business)assertBusinessDeferredApprovals(business,businessProofRefs);
   if (roles.user_decision_policy.required_capabilities?.includes('strategic-decision-reuse-v1')) {
     const record=sourceApprovalRecord(read(safe(root,config.approvals.handoff.record_ref)),config.approvals.handoff.gate_id);
     const scope=read(safe(root,record.subject_ref));
@@ -233,18 +248,24 @@ export async function inspectSource(root, handoffRef) {
     const receipt=previewFiles(root,config.prototype);
     ensure(uiBaselineCaseIds(handoff).every(id=>receipt.case_ids.includes(id)), '离线验证未覆盖视觉基线 case');
   }
-  return {handoff,config,indexes,strategy,stage};
+  return {handoff,config,indexes,strategy,stage,business};
 }
 
 function collect(root, handoffRef, handoff, config) {
   const collected=new Map(), queue=[handoffRef,'CONTEXT.md','.template-spec/agents/digital-human-roles.yaml',...Object.values(handoff.source).map(x=>x.persisted_ref),...Object.values(config.approvals).map(x=>x.record_ref),...handoff.evidence_and_version_digests,...config.additional_files];
+  const roles=sourceApprovalPolicy(read(safe(root,'.template-spec/agents/digital-human-roles.yaml')));
+  if(roles.user_decision_policy.required_capabilities?.includes(BUSINESS_TICKET_CAPABILITY)) {
+    const report=checkBusinessTickets({root,setRef:handoff.source.business_ticket_set_ref.persisted_ref,mode:'formal'});
+    ensure(report.status==='passed','业务 Ticket 导出前来源已变化');
+    queue.push(...report.inputs.map(item=>item.ref));
+  }
   if(config.prototype)queue.push(config.prototype.preview_root,config.prototype.verification_ref);
   if(config.prototype?.profile==='H2')queue.push(config.prototype.source_root,config.prototype.lock_ref);
   const symbolic=config.reference_map || {};
   const enqueue=ref=> { if(symbolic[ref])queue.push(symbolic[ref]); else if(/^https?:\/\//i.test(ref))return; else if(ref.startsWith('evidence.'))throw new TypeError(`未解析 evidence ID: ${ref}`); else if(ref.includes('/') || /\.(?:md|yaml|json|html|png|txt|log)$/.test(ref))queue.push(ref); };
   function refs(value,key='') {
     if(Array.isArray(value)) { if(key==='evidence_refs') value.forEach(enqueue); else value.forEach(v=>refs(v,key)); }
-    else if(value && typeof value==='object') for(const [k,v]of Object.entries(value)) { if(['approval_ref','persisted_ref','user_decision_ref','decision_reuse_ref','continuation_ref','plan_continuation_ref','scope_ref','subject_ref','delivery_ref'].includes(k)&&typeof v==='string')enqueue(v); else if(k==='ref'&&typeof v==='string'&&!/^[a-z]+:\/\//i.test(v))enqueue(v); else refs(v,k); }
+    else if(value && typeof value==='object') for(const [k,v]of Object.entries(value)) { if(['approval_ref','persisted_ref','user_decision_ref','decision_reuse_ref','continuation_ref','plan_continuation_ref','scope_ref','subject_ref','delivery_ref','review_ref'].includes(k)&&typeof v==='string')enqueue(v); else if(k==='ref'&&typeof v==='string'&&!/^[a-z]+:\/\//i.test(v))enqueue(v); else refs(v,k); }
   }
   let totalBytes = 0;
   while(queue.length) {
@@ -421,7 +442,7 @@ export async function importBundle({bundle,targetRoot}) {
       const equal=actual&&['term','meaning','english_identifier','context_id','forbidden_aliases'].every(key=>own(expected[key],actual[key]));
       terms.push({operation,term_ref:expected.term_ref,expected,current:actual||null,status:operation==='deprecated'?(actual?'pending':'matched'):(equal?'matched':actual?'conflict':'pending')});
     }
-    const rows=[...b.indexes.rules.map(x=>({source_id:x.rule_id,source_digest:x.source_digest,kind:'rule'})),...b.indexes.scenarios.filter(x=>x.critical).map(x=>({source_id:x.scenario_id,source_digest:x.source_digest,kind:'scenario'}))].map(x=>({...x,disposition:'pending',tactical_refs:[],test_seam_refs:[],evidence_refs:[],dependent_slice_refs:[],dependency_status:'unknown'}));
+    const rows=[...b.indexes.rules.map(x=>({source_id:x.rule_id,source_digest:x.source_digest,kind:'rule'})),...b.indexes.scenarios.filter(x=>x.critical).map(x=>({source_id:x.scenario_id,source_digest:x.source_digest,kind:'scenario'})),...(b.business?.tickets||[]).map(x=>({source_id:x.id,source_digest:x.source_digest,kind:'business-ticket',business_ticket_ref:`${rel}/package/payload/files/${x.ref}`}))].map(x=>({...x,disposition:'pending',tactical_refs:[],test_seam_refs:[],evidence_refs:[],dependent_slice_refs:[],dependency_status:'unknown'}));
     mkdirSync(path.dirname(dest),{recursive:true});const stage=mkdtempSync(path.join(path.dirname(dest),'.import-staging-'));
     try {
       cpSync(b.root,path.join(stage,'package'),{recursive:true,errorOnExist:true,force:false});
@@ -452,13 +473,13 @@ export async function importBundle({bundle,targetRoot}) {
         schema(receipt,fromDelivery?'.template-spec/process/schemas/strategic-handoff-import-receipt-v3.schema.json':'.template-spec/process/schemas/strategic-handoff-import-receipt.schema.json');
         write(stage,'import-receipt.json',json(receipt));
         write(stage,'context-reconciliation-draft.json',json({schema_version:2,status:'draft',import_receipt_ref:`${rel}/import-receipt.json`,target_context_digest:context.document_digest,route_ids:selected.map(route=>route.route_id),terms}));
-        write(stage,'upstream-change-impact.json',json({schema_version:2,previous_bundle:b.manifest.previous_bundle,routes:selected.map(route=>({route_id:route.route_id,capability:route.capability,activation:route.activation,changed_source_ids:[...b.changes.updated,...b.changes.removed],added_source_ids:b.changes.added,status:'requires-lifecycle-reconciliation'})),policy:'mark-only-known-dependent-contracts-stale; unknown-dependency-or-design-basis-change-blocks-all'}));
+        write(stage,'upstream-change-impact.json',json({schema_version:2,previous_bundle:b.manifest.previous_bundle,...(b.business?{business_ticket_set_ref:`${rel}/package/payload/files/${b.handoff.source.business_ticket_set_ref.persisted_ref}`,business_ticket_status:'requires-current-source-and-dependency-reconciliation',business_ticket_ids:b.business.tickets.map(t=>t.id)}:{}),routes:selected.map(route=>({route_id:route.route_id,capability:route.capability,activation:route.activation,changed_source_ids:[...b.changes.updated,...b.changes.removed],added_source_ids:b.changes.added,status:'requires-lifecycle-reconciliation'})),policy:'mark-only-known-dependent-contracts-stale; unknown-dependency-or-design-basis-change-blocks-all'}));
         const backendRoute=b.handoff.consumer_routes.find(route=>route.capability==='backend-technical-design');
         const frontendRoute=b.handoff.consumer_routes.find(route=>route.capability==='frontend-engineering-design');
         const coordinationRoute=b.handoff.consumer_routes.find(route=>route.capability==='delivery-coordination');
         if(capabilities.includes('backend-technical-design')&&backendRoute.activation!=='not-applicable')write(stage,'backend-technical-traceability-draft.json',json({schema_version:2,route_id:backendRoute.route_id,import_receipt_ref:`${rel}/import-receipt.json`,bundle_digest:b.manifest.bundle_digest,rows}));
         if(capabilities.includes('frontend-engineering-design')&&frontendRoute.activation!=='not-applicable'){
-          const preflight={schema_version:b.handoff.schema_version===5?2:1,status:'draft',route_id:frontendRoute.route_id,capability:frontendRoute.capability,import_receipt_ref:`${rel}/import-receipt.json`,bundle_digest:b.manifest.bundle_digest,context_reconciliation_ref:'',...(b.handoff.schema_version===5?{ui_baseline_kind:uiBaselineKind(b.handoff),ui_baseline_ref:`${rel}/package/payload/files/${uiBaselineRef(b.handoff).persisted_ref}/${uiBaselineRef(b.handoff).manifest_ref}`}:{visual_baseline_ref:`${rel}/package/payload/files/${uiBaselineRef(b.handoff).persisted_ref}/${uiBaselineRef(b.handoff).manifest_ref}`}),source_rule_refs:rows.map(row=>row.source_id),backend_dependency:{mode:backendRoute.activation==='not-applicable'?'not-applicable':'required',route_id:backendRoute.route_id,...(backendRoute.activation==='not-applicable'?{reason:backendRoute.reason,impact_refs:backendRoute.impact_refs,evidence_refs:backendRoute.evidence_refs}:{})},ready_for_agent:false};
+          const preflight={schema_version:b.handoff.schema_version===5?2:1,status:'draft',route_id:frontendRoute.route_id,capability:frontendRoute.capability,import_receipt_ref:`${rel}/import-receipt.json`,bundle_digest:b.manifest.bundle_digest,context_reconciliation_ref:'',...(b.handoff.schema_version===5?{ui_baseline_kind:uiBaselineKind(b.handoff),ui_baseline_ref:`${rel}/package/payload/files/${uiBaselineRef(b.handoff).persisted_ref}/${uiBaselineRef(b.handoff).manifest_ref}`}:{visual_baseline_ref:`${rel}/package/payload/files/${uiBaselineRef(b.handoff).persisted_ref}/${uiBaselineRef(b.handoff).manifest_ref}`}),source_rule_refs:rows.filter(row=>row.kind!=='business-ticket').map(row=>row.source_id),backend_dependency:{mode:backendRoute.activation==='not-applicable'?'not-applicable':'required',route_id:backendRoute.route_id,...(backendRoute.activation==='not-applicable'?{reason:backendRoute.reason,impact_refs:backendRoute.impact_refs,evidence_refs:backendRoute.evidence_refs}:{})},ready_for_agent:false};
           schema(preflight,b.handoff.schema_version===5?'.template-spec/process/schemas/frontend-strategic-preflight-v2.schema.json':'.template-spec/process/schemas/frontend-strategic-preflight.schema.json');
           write(stage,'frontend-strategic-preflight-draft.json',json(preflight));write(stage,'frontend-traceability-draft.json',json({schema_version:1,route_id:frontendRoute.route_id,import_receipt_ref:`${rel}/import-receipt.json`,bundle_digest:b.manifest.bundle_digest,rows:rows.map(({tactical_refs,test_seam_refs,...row})=>({...row,frontend_case_refs:[]}))}));
         }

package/template/scripts/lib/task-package.mjs

@@ -1,3 +1,4 @@
+import { validateReadOnlyIntake } from './read-only-intake.mjs';
 import { assertTrackingEntry } from './stage-tracking.mjs';
 import { normalizeSliceContract } from './slice-contract.mjs';
 import { assertSliceV3TaskPackage } from './slice-task-package.mjs';
@@ -17,7 +18,7 @@ import { LEGACY_TASK_PACKAGE_SCHEMA, TASK_PACKAGE_SCHEMA, validateTaskPackageSch
 
 export { LEGACY_TASK_PACKAGE_SCHEMA, TASK_PACKAGE_SCHEMA, validateTaskPackageSchema };
 export const TASK_PACKAGE_REGISTRY_REF = ".template-spec/agents/digital-human-roles.yaml";
-export const CONTRACT_KINDS = new Set(["lifecycle-work-unit", "slice-implementation", "template-maintenance"]);
+export const CONTRACT_KINDS = new Set(["lifecycle-work-unit", "slice-implementation", "template-maintenance", "read-only-intake"]);
 export const EXECUTION_STATES = new Set(["Explorer", "Drafter", "Worker", "Reviewer", "Verifier"]);
 export const WORKFLOW_STATUSES = new Set(["not-started", "active", "paused", "resolved", "failed"]);
 
@@ -135,7 +136,7 @@ function validateCommon(value, registry, lifecycle) {
   return workUnit;
 }
 
-function validateContract(value, registry, lifecycle) {
+function validateContract(value, registry, lifecycle, { history = false } = {}) {
   const contract = value.contract;
   const implementationWorkUnit = "work-unit.slice-implementation";
   const workUnit = lifecycle.work_units.find((item) => item.id === value.work_unit_id);
@@ -159,6 +160,7 @@ function validateContract(value, registry, lifecycle) {
     if (!existsSync(checkpointPath)) fail(`维护 checkpoint 不存在: ${contract.maintenance_ref}`);
     const checkpoint = maintenanceValidators.loadMaintenanceCheckpoint(contract.maintenance_ref);
     maintenanceValidators.validateMaintenanceCheckpoint(checkpoint, {
+      history,
       allowPendingReview: value.execution_state === "Reviewer" && value.workflow_status !== "resolved"
     });
     if (checkpoint.schema_version === 2 && value.execution_state === "Reviewer") {
@@ -203,8 +205,14 @@ function validateContract(value, registry, lifecycle) {
   if (value.execution_state === "Worker") assertImplementationDecision({ slice_contract_ref: contract.slice_contract_ref, vertical_slice_ticket_ref: slice.lifecycle_refs.ticket, user_decisions: value.user_decisions });
 }
 
-export function validateTaskPackage(value, { rolesDoc, lifecycleDoc } = {}) {
+function validateTaskPackageInternal(value, { rolesDoc, lifecycleDoc, root = ROOT, runDir, history = false } = {}) {
   validateTaskPackageSchema(value);
+  if (value.schema_version === 2) {
+    enforceHarnessTaskScope(value, { root });
+    const registry = rolesDoc || loadDigitalHumanRoles();
+    validateSkillSource(value, registry);
+    return validateReadOnlyIntake(value, { root, runDir, roles: registry, lifecycle: lifecycleDoc || loadRegistry() });
+  }
   enforceHarnessTaskScope(value);
   const intake = value.execution_state === "Explorer" && value.allowed_write_paths.length === 0 && ["work-unit.entry-triage", "work-unit.harness-entry"].includes(value.work_unit_id);
   if (!intake) {
@@ -213,10 +221,20 @@ export function validateTaskPackage(value, { rolesDoc, lifecycleDoc } = {}) {
   const registry = rolesDoc || loadDigitalHumanRoles();
   const lifecycle = lifecycleDoc || loadRegistry();
   validateCommon(value, registry, lifecycle);
-  validateContract(value, registry, lifecycle);
+  validateContract(value, registry, lifecycle, { history });
   return value;
 }
 
+export function validateTaskPackage(value, options = {}) {
+  return validateTaskPackageInternal(value, {...options, history:false});
+}
+
+export function validateHistoricalMaintenanceTaskPackage(value) {
+  if(repositoryMode !== 'template-source' || value.schema_version !== 1 || value.contract?.kind !== 'template-maintenance')fail('历史兼容仅适用于模板维护 schema v1 任务包');
+  validateTaskPackageInternal(value, {history:true});
+  return {status:'historical-only',execution_authorization:'not-evaluated'};
+}
+
 export function generateTaskPackageDefaults(roleId, overrides = {}, { rolesDoc } = {}) {
   const defaults = taskPackageDefaults(roleId, rolesDoc || loadDigitalHumanRoles());
   return {

package/template/scripts/lib/testing/user-decision-fixture.mjs

@@ -0,0 +1,33 @@
+// Synthetic test sources only; never use for real approval records.
+import {mkdirSync,writeFileSync,readFileSync} from "node:fs";
+import path from "node:path";
+import {decisionDigest,requestDigest,renderDecisionRequest} from "../user-decision.mjs";
+export function buildDecisionFixture(root, { boundary = "gate.spec-baseline-approved", scope = ["feature.demo"], subjectRef, subjectContent = "冻结业务基线 v1\n", extraItems = [] } = {}) {
+  mkdirSync(root, { recursive: true });
+  const write = (name, value) => {
+    const ref = path.join(root, name);
+    writeFileSync(ref, typeof value === "string" ? value : JSON.stringify(value, null, 2));
+    return ref;
+  };
+  const subject = subjectRef || write("subject.md", subjectContent);
+  const capture = (name, principal, actor, sentAt, text, kind = "session-export", replyTo = null) => {
+    const value = { source_kind: kind, messages: [{ id: name, principal_ref: principal, actor_kind: actor, sent_at: sentAt, text, ...(replyTo ? { reply_to: replyTo } : {}), original_ref: `test-only://${name}` }] };
+    const ref = write(`${name}.json`, value);
+    return { kind, ref, digest: decisionDigest(readFileSync(ref)), message_id: name };
+  };
+  const record = { schema_version: 1, kind: "user-decision", request: {
+    id: "request.demo", requester_ref: "person.requester",
+    requester_source: capture("requester", "person.requester", "biological-human", "2026-09-05T01:00:00Z", "请整理可审阅的功能方案。"),
+    items: [{ id: "decision.demo", boundary, title: "确认本次范围", subject: { ref: subject, version: "v1", digest: decisionDigest(readFileSync(subject)) }, basis: [], scope, changes: "新增已列明范围", risks: [], recommendation: "批准上述范围", next_actions: ["进入下一工作单元"], responder_ref: "person.requester" }, ...extraItems],
+  }, responses: [] };
+  const present = () => { record.request.presented_source = capture("presentation", "agent.orchestrator", "digital-human", "2026-09-05T01:02:00Z", renderDecisionRequest(record.request)); };
+  present();
+  const respond = ({ principal = "person.requester", actor = "biological-human", text = "同意", decision = "approved", selection = record.request.items.length === 1 ? "single" : "explicit-all", itemIds = record.request.items.map((item) => item.id), approvedScope = record.request.items.flatMap((item) => item.scope), time = "2026-09-05T01:03:00Z", name = `reply-${record.responses.length}` } = {}) => {
+    record.responses.push({ source: capture(name, principal, actor, time, text, "session-export", JSON.parse(readFileSync(record.request.presented_source.ref, "utf8")).messages[0].original_ref), principal_ref: principal, responded_at: time, text, request_digest: requestDigest(record.request), selection, item_ids: itemIds, decision, approved_scope: approvedScope });
+  };
+  respond({ text: extraItems.length ? "同意以上全部事项" : "同意" });
+  const ref = path.join(root, "decision.json");
+  const save = () => writeFileSync(ref, JSON.stringify(record, null, 2));
+  save();
+  return { record, ref, save, write, capture, present, respond, requirement: { boundary, subject_ref: subject, scope: [...scope], user_decision_ref: ref } };
+}

package/template/scripts/lib/user-decision-reuse.mjs

@@ -9,7 +9,7 @@ export function assertApprovalUserDecision(record, roles, options = {}) {
   const policy = roles.user_decision_policy;
   const io = decisionIO(options);
   if (record.continuation_ref) return assertUserDecisionRequirement({boundary:record.gate_id,subject_ref:record.subject_ref,scope:record.approval_scope,continuation_ref:record.continuation_ref}, {...options,rolesDoc:roles});
-  if (policy.required_capabilities?.some(id => id !== DECISION_REUSE_CAPABILITY)) fail('接收工具不支持源用户决定策略，请升级');
+  if (policy.required_capabilities?.some(id => ![DECISION_REUSE_CAPABILITY,'business-ticket-approval-v1'].includes(id))) fail('接收工具不支持源用户决定策略，请升级');
   if (!record.decision_reuse_ref) return assertUserDecisionRequirement({boundary:record.gate_id,subject_ref:record.subject_ref,scope:record.approval_scope,user_decision_ref:record.user_decision_ref}, {...options,rolesDoc:roles});
   if (record.gate_id !== 'gate.strategic-design-handoff-approved' || !policy.required_capabilities?.includes(DECISION_REUSE_CAPABILITY)) fail('未登记的复用边界或能力');
   const reuse = io.document(record.decision_reuse_ref);

package/template/scripts/lifecycle-status

@@ -1,14 +1,24 @@
 #!/usr/bin/env node
 import { parseArgs } from 'node:util';
 import path from 'node:path';
+import { checkProjectGovernance } from './lib/project-governance.mjs';
 import { lifecycleStatus } from './lib/lifecycle-status.mjs';
 
 try {
-  const { values } = parseArgs({ strict: true, options: { root: { type: 'string' }, checkpoint: { type: 'string' } } });
-  const result = lifecycleStatus({ root: path.resolve(values.root ?? '.'), checkpointRef: values.checkpoint });
+  const { values } = parseArgs({ strict: true, options: { root: { type: 'string' }, checkpoint: { type: 'string' }, task: {type: 'string'}, preflight: {type:'boolean'}, help:{type:'boolean'} } });
+  if(values.help)process.stdout.write('用法: scripts/lifecycle-status --root <项目> [--checkpoint <根相对路径>] [--task <任务包>] [--preflight]\n普通查询不执行预检；--preflight 复验当前证据，仅提供恢复动作，不批准或派发。普通查询退出码保持 0/1；预检 0=通过、1=失败、2=输入或能力异常。\n');
+  else if(values.preflight) {
+    if(!values.checkpoint&&!values.task)throw new Error('--preflight 必须指定 --checkpoint 或 --task');
+    const {report,exitCode}=checkProjectGovernance({root:path.resolve(values.root??'.'),checkpointRef:values.checkpoint,taskRef:values.task,recovery:true});
+    process.stdout.write(JSON.stringify(report,null,2)+'\n');process.exitCode=exitCode;
+  } else {
+  const result = lifecycleStatus({ root: path.resolve(values.root ?? '.'), checkpointRef: values.checkpoint, taskPackageRef: values.task });
   process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
   if (result.blockers.length) process.exitCode = 1;
+  }
 } catch (error) {
   process.stdout.write(`${JSON.stringify({ schema_version: 1, read_only: true, blockers: [error.message], owner: '未登记', next_action: `核查状态输入：${error.message}`, execution_authorization: 'not-evaluated', verification_scope: [{ id: 'status-input', status: 'failed', refs: [], reason: error.message }], diagnostics: [{ code: 'status-input-invalid', severity: 'error', message: error.message, source_ref: null, owner: '未登记', recovery: '修复输入后重新读取状态' }], next_step: { action_type: 'repair', command: null, input_refs: [], prerequisites: ['提供有效项目根和 checkpoint 引用'] } }, null, 2)}\n`);
-  process.exitCode = 1;
+  process.exitCode = process.argv.includes('--preflight') ? 2 : 1;
 }
+
+process.stdout.on('error',()=>{process.exitCode=process.argv.includes('--preflight')?2:1;});

package/template/scripts/prepare-read-only-intake

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import {parseArgs} from 'node:util';
+import {ROOT} from './lib/lifecycle-registry.mjs';
+import {loadTaskPackage,generateTaskPackageDefaults,validateTaskPackage} from './lib/task-package.mjs';
+try {
+ const {values}=parseArgs({options:{input:{type:'string'},output:{type:'string'}}});
+ if(!values.input||!values.output)throw Error('用法: prepare-read-only-intake --input <来源选择.json|yaml> --output <仓库外/task.json>');
+ const {value:input}=loadTaskPackage(values.input);
+ const output=path.resolve(values.output),parent=fs.realpathSync(path.dirname(output)),root=fs.realpathSync(ROOT);
+ if(parent===root||parent.startsWith(root+path.sep))throw Error('任务包必须保存于仓库外运行目录');
+ const task=generateTaskPackageDefaults(input.role_id,{...input,schema_version:2,execution_state:'Explorer',workflow_status:'active',allowed_write_paths:[],expected_evidence_files:[],verification_commands:input.verification_commands||[],verification_results:[],verification_status:'not-executed',contract:{...input.contract,kind:'read-only-intake',status:'issued'}});
+ validateTaskPackage(task);
+ fs.writeFileSync(output,JSON.stringify(task,null,2)+'\n',{flag:'wx'});process.stdout.write(output+'\n');
+}catch(error){process.stderr.write(error.message+'\n');process.exitCode=1;}

package/template/scripts/project-ci

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { parseArgs } from 'node:util';
+import { planProjectCi, applyProjectCi } from './lib/project-ci-install.mjs';
+import { checkProjectGovernance } from './lib/project-governance.mjs';
+
+try {
+  const {values,positionals}=parseArgs({allowPositionals:true,options:{root:{type:'string',default:'.'},provider:{type:'string',default:'github'},branch:{type:'string'},plan:{type:'string'},'additional-path':{type:'string',multiple:true},base:{type:'string'},recover:{type:'boolean'},json:{type:'boolean'},help:{type:'boolean'}}});
+  if(values.help){process.stdout.write('用法: scripts/project-ci plan --provider github --root <项目> [--branch main] [--additional-path <根相对路径>]\n      scripts/project-ci apply --root <项目> --plan <plan.json>\n      scripts/project-ci apply --root <项目> --recover\n      scripts/project-ci check --root <项目> [--base <40位commit>] --json\nplan/check 只读，apply 仅显式管理自身工作流；不改远端或批准。退出码 0=通过/计划完成，1=检查失败/冲突，2=输入/能力/执行异常。\n');}
+  else {
+    if(positionals.length!==1||!['plan','apply','check'].includes(positionals[0]))throw new Error('需要 plan、apply 或 check；参见 --help');
+    const root=path.resolve(values.root);let result;
+    if(positionals[0]==='plan'){result=planProjectCi({root,provider:values.provider,branch:values.branch,additionalPaths:values['additional-path']});if(result.conflicts.length)process.exitCode=1;}
+    if(positionals[0]==='apply'){if(!values.recover&&!values.plan)throw new Error('apply 需要 --plan');result=applyProjectCi({root,recover:values.recover,plan:values.plan?JSON.parse(fs.readFileSync(values.plan,'utf8')):undefined});}
+    if(positionals[0]==='check'){const check=checkProjectGovernance({root,base:values.base});result=check.report;process.exitCode=check.exitCode;}
+    process.stdout.write(JSON.stringify(result,null,2)+'\n');
+  }
+}catch(error){process.stdout.write(JSON.stringify({schema_version:1,status:'error',read_only:process.argv[2]!=='apply',error:error.message})+'\n');process.stderr.write(error.message+'\n');process.exitCode=error.exitCode||2;}
+process.stdout.on('error',error=>{process.stderr.write(`输出失败: ${error.message}\n`);process.exitCode=2;});

package/template/scripts/project-ci-transition

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+// Loaded only for an actual transition. Stage-selective instances need not install
+// future stage capabilities until a checkpoint claims their transition.
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { readDocument, safeFile } from './lib/governance-io.mjs';
+try {
+  if(process.argv.length!==3)throw new Error('需要 checkpoint 根相对路径');
+  const root=process.cwd(),ref=process.argv[2],checkpoint=readDocument(root,ref);
+  const {validateNextRoute}=await import(pathToFileURL(safeFile(root,'scripts/lib/lifecycle-transition.mjs')).href);
+  const result=validateNextRoute(checkpoint.stage_trace?.completed_work_unit,checkpoint.next_work_unit,{...checkpoint,checkpoint_ref:ref},{root});
+  process.stdout.write(JSON.stringify(result)+'\n');if(result.result!=='allowed')process.exitCode=1;
+}catch(error){process.stderr.write(`${error.code||''} ${error.message}\n`);process.exitCode=/MODULE_NOT_FOUND/.test(error.code||'')?2:1;}

package/template/scripts/query-lifecycle-context

@@ -5,6 +5,7 @@ import { queryLifecycleContext } from "./lib/lifecycle-context-query.mjs";
 try {
   const { values } = parseArgs({
     options: {
+      help: {type:'boolean'},
       mode: { type: "string" },
       stage: { type: "string" },
       "work-unit": { type: "string" },
@@ -12,6 +13,8 @@ try {
     },
     strict: true,
   });
+  if(values.help)process.stdout.write('用法: scripts/query-lifecycle-context [--mode route] [--stage stage.plan] [--work-unit work-unit.plan-opportunity] [--include <资产>]\n只读查询，不证明批准；退出码 0=查询完成、1=输入或执行失败。\n');
+  else {
   const result = queryLifecycleContext({
     mode: values.mode,
     stageId: values.stage,
@@ -19,6 +22,7 @@ try {
     include: values.include ?? [],
   });
   process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+  }
 } catch (error) {
   process.stderr.write(`${error.message}\n`);
   process.exitCode = 1;

package/template/scripts/run-read-only-intake

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import { parseArgs } from 'node:util';
+import { ROOT } from './lib/lifecycle-registry.mjs';
+import { loadTaskPackage, validateTaskPackage } from './lib/task-package.mjs';
+import { observeReadOnlyIntake } from './lib/read-only-intake.mjs';
+try {
+  const {values,positionals} = parseArgs({options:{task:{type:'string'},'run-dir':{type:'string'},'timeout-ms':{type:'string',default:'0'}},allowPositionals:true});
+  if(!values.task||!values['run-dir'])throw Error('需要 --task 和仓库外新目录 --run-dir；命令放在 -- 之后');
+  const {value}=loadTaskPackage(values.task);validateTaskPackage(value);
+  if(value.schema_version!==2||value.workflow_status!=='active')throw Error('只接受 active 的只读 v2 任务');
+  const result=await observeReadOnlyIntake(value,{root:ROOT,runDir:values['run-dir'],command:positionals[0],args:positionals.slice(1),timeoutMs:Number(values['timeout-ms'])});
+  validateTaskPackage(result,{runDir:values['run-dir']});
+  process.stdout.write(JSON.stringify(result,null,2)+'\n');if(result.workflow_status!=='resolved')process.exitCode=1;
+}catch(error){process.stderr.write(error.message+'\n');process.exitCode=1;}

package/template/scripts/stage-tracking

@@ -21,5 +21,6 @@ try {
     result = command === 'check' ? checkTracking(root, values.checkpoint) : planTracking(root, { checkpoint_ref: values.checkpoint, items: input, refresh: values.refresh });
     if (result.status === 'blocked' || (result.status === 'missing-checkpoint' && result.enabled)) process.exitCode = 1;
   }
+  if(result.reading_update?.status==='failed')process.exitCode=1;
   process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
 } catch (error) { process.stderr.write(`${error.message}\n`); process.exitCode = 1; }

package/template/scripts/vendor/NOTICES.md

@@ -10,6 +10,34 @@ These generated Node runtime bundles contain the following packages:
   - license: MIT
   - integrity: sha512-N6//FLET/tXYNM/F6ABca1oH6fWB+KlTt909Le28WMDBk8oaT4vY17DCrwg2MvmuqUKt3Ni4N5dGJ/EoBgcO6A==
   - source: https://github.com/NaturalIntelligence/anynum
+- bail@2.0.2
+  - license: MIT
+  - integrity: sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==
+  - source: wooorm/bail
+- ccount@2.0.1
+  - license: MIT
+  - integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==
+  - source: wooorm/ccount
+- character-entities@2.0.2
+  - license: MIT
+  - integrity: sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==
+  - source: wooorm/character-entities
+- decode-named-character-reference@1.3.0
+  - license: MIT
+  - integrity: sha512-GtpQYB283KrPp6nRw50q3U9/VfOutZOe103qlN7BPP6Ad27xYnOIWv4lPzo8HCAL+mMZofJ9KEy30fq6MfaK6Q==
+  - source: wooorm/decode-named-character-reference
+- devlop@1.1.0
+  - license: MIT
+  - integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==
+  - source: wooorm/devlop
+- escape-string-regexp@5.0.0
+  - license: MIT
+  - integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==
+  - source: sindresorhus/escape-string-regexp
+- extend@3.0.2
+  - license: MIT
+  - integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==
+  - source: https://github.com/justmoon/node-extend.git
 - fast-xml-builder@1.3.1
   - license: MIT
   - integrity: sha512-pIM/1n3ntFXKYrUZwW7QCK0gAW7XY+wzj1YMIV3tLDvPj/V+zTGJK5e3/4WJfwj0qWw2ElNXiTixda/R+3YSug==
@@ -18,18 +46,222 @@ These generated Node runtime bundles contain the following packages:
   - license: MIT
   - integrity: sha512-9IGxMqvqLOnqP+Egi1nqDHKv5k8aZ7r9n558enxcucmyVGEBNPAU+MOg/8jPIS7rO7sSq4gFm1/nHtiaubMruw==
   - source: git+https://github.com/NaturalIntelligence/fast-xml-parser.git
+- is-plain-obj@4.1.0
+  - license: MIT
+  - integrity: sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==
+  - source: sindresorhus/is-plain-obj
 - is-unsafe@2.0.0
   - license: MIT
   - integrity: sha512-2LdV822R+wmI86unXA93WCFpL6g+av8ynWk0nrHyJqGop5VoocYsSLFgN8jrfalT6iGeLNM4KXuVSsULP53kEA==
   - source: https://github.com/NaturalIntelligence/is-unsafe
+- longest-streak@3.1.0
+  - license: MIT
+  - integrity: sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==
+  - source: wooorm/longest-streak
+- markdown-table@3.0.4
+  - license: MIT
+  - integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==
+  - source: wooorm/markdown-table
+- mdast-util-find-and-replace@3.0.2
+  - license: MIT
+  - integrity: sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==
+  - source: syntax-tree/mdast-util-find-and-replace
+- mdast-util-from-markdown@2.0.3
+  - license: MIT
+  - integrity: sha512-W4mAWTvSlKvf8L6J+VN9yLSqQ9AOAAvHuoDAmPkz4dHf553m5gVj2ejadHJhoJmcmxEnOv6Pa8XJhpxE93kb8Q==
+  - source: syntax-tree/mdast-util-from-markdown
+- mdast-util-gfm@3.1.0
+  - license: MIT
+  - integrity: sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ==
+  - source: syntax-tree/mdast-util-gfm
+- mdast-util-gfm-autolink-literal@2.0.1
+  - license: MIT
+  - integrity: sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ==
+  - source: syntax-tree/mdast-util-gfm-autolink-literal
+- mdast-util-gfm-footnote@2.1.0
+  - license: MIT
+  - integrity: sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ==
+  - source: syntax-tree/mdast-util-gfm-footnote
+- mdast-util-gfm-strikethrough@2.0.1
+  - license: MIT
+  - integrity: sha512-OuJHqvr455pwu2OaOrir7dbzqs4jlWKOtlu9L6GjcIjjQwNyw02VntQsr/Ek6/A13vgnXfUhBekWRUP1OkNivw==
+  - source: syntax-tree/mdast-util-gfm-strikethrough
+- mdast-util-gfm-table@2.0.0
+  - license: MIT
+  - integrity: sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg==
+  - source: syntax-tree/mdast-util-gfm-table
+- mdast-util-gfm-task-list-item@2.0.0
+  - license: MIT
+  - integrity: sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ==
+  - source: syntax-tree/mdast-util-gfm-task-list-item
+- mdast-util-phrasing@4.1.0
+  - license: MIT
+  - integrity: sha512-TqICwyvJJpBwvGAMZjj4J2n0X8QWp21b9l0o7eXyVJ25YNWYbJDVIyD1bZXE6WtV6RmKJVYmQAKWa0zWOABz2w==
+  - source: syntax-tree/mdast-util-phrasing
+- mdast-util-to-markdown@2.1.3
+  - license: MIT
+  - integrity: sha512-wgyJtgUkUcdU7zci7uuwc/tzoAhm0TswWhaXuvnWolqug+8jY7bgNkBBL0dYBnHgc/tHL7lCzRdPsdUxUKKBqw==
+  - source: syntax-tree/mdast-util-to-markdown
+- mdast-util-to-string@4.0.0
+  - license: MIT
+  - integrity: sha512-0H44vDimn51F0YwvxSJSm0eCDOJTRlmN0R1yBh4HLj9wiV1Dn0QoXGbvFAWj2hSItVTlCmBF1hqKlIyUBVFLPg==
+  - source: syntax-tree/mdast-util-to-string
+- micromark@4.0.3
+  - license: MIT
+  - integrity: sha512-oGYfQzHSG5dOMovQcJ3fyTmZlWAWpi0XA0sJwJs+i6OT88o1+Jtw/8z0CmdowSLxGhhFK89rQ/oXph/wN02PNw==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark
+- micromark-core-commonmark@2.0.4
+  - license: MIT
+  - integrity: sha512-wxEeE8v8XVvOrxn1TZj74qYhAtTQsSqufHVS3uNVyT1MupXxhyaHk8/9xDNPh9BmL77QNDgWTkZ3RsYHB2ry7w==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-core-commonmark
+- micromark-extension-gfm@3.0.0
+  - license: MIT
+  - integrity: sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==
+  - source: micromark/micromark-extension-gfm
+- micromark-extension-gfm-autolink-literal@2.1.0
+  - license: MIT
+  - integrity: sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw==
+  - source: micromark/micromark-extension-gfm-autolink-literal
+- micromark-extension-gfm-footnote@2.1.0
+  - license: MIT
+  - integrity: sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw==
+  - source: micromark/micromark-extension-gfm-footnote
+- micromark-extension-gfm-strikethrough@2.1.0
+  - license: MIT
+  - integrity: sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw==
+  - source: micromark/micromark-extension-gfm-strikethrough
+- micromark-extension-gfm-table@2.1.2
+  - license: MIT
+  - integrity: sha512-pRzm4kDTu0MjlmBkxmS9yYhw60nncfcEwu9NNdPFSQEFXS95ZKyIIyTSHu/o3ReBUrLKYEq+7YaXCRn/bPB4MA==
+  - source: micromark/micromark-extension-gfm-table
+- micromark-extension-gfm-tagfilter@2.0.0
+  - license: MIT
+  - integrity: sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg==
+  - source: micromark/micromark-extension-gfm-tagfilter
+- micromark-extension-gfm-task-list-item@2.1.0
+  - license: MIT
+  - integrity: sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw==
+  - source: micromark/micromark-extension-gfm-task-list-item
+- micromark-factory-destination@2.0.1
+  - license: MIT
+  - integrity: sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-factory-destination
+- micromark-factory-label@2.0.1
+  - license: MIT
+  - integrity: sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-factory-label
+- micromark-factory-space@2.1.0
+  - license: MIT
+  - integrity: sha512-fS8hnLIjnjvdQIj39Geug8wWsR0HrYZ43KShKxNfwT7t2LOHo/LbWZEzEaSOjwtjdCsjoE6syHhonEzW0zv0+Q==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-factory-space
+- micromark-factory-title@2.0.1
+  - license: MIT
+  - integrity: sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-factory-title
+- micromark-factory-whitespace@2.0.1
+  - license: MIT
+  - integrity: sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-factory-whitespace
+- micromark-util-character@2.1.1
+  - license: MIT
+  - integrity: sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-character
+- micromark-util-chunked@2.0.1
+  - license: MIT
+  - integrity: sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-chunked
+- micromark-util-classify-character@2.0.1
+  - license: MIT
+  - integrity: sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-classify-character
+- micromark-util-combine-extensions@2.0.1
+  - license: MIT
+  - integrity: sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-combine-extensions
+- micromark-util-decode-numeric-character-reference@2.0.2
+  - license: MIT
+  - integrity: sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-decode-numeric-character-reference
+- micromark-util-decode-string@2.0.1
+  - license: MIT
+  - integrity: sha512-nDV/77Fj6eH1ynwscYTOsbK7rR//Uj0bZXBwJZRfaLEJ1iGBR6kIfNmlNqaqJf649EP0F3NWNdeJi03elllNUQ==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-decode-string
+- micromark-util-edit-map@1.0.0
+  - license: MIT
+  - integrity: sha512-Pa2ljlsEL6sVwFaYeyrOLSYbQt73JvGbPOYFq+9AElXiSnfI5Q4465RRZ1sHv7lDjDOnGRDDaqPXqClqWK/q1Q==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-edit-map
+- micromark-util-encode@2.0.1
+  - license: MIT
+  - integrity: sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-encode
+- micromark-util-html-tag-name@2.0.1
+  - license: MIT
+  - integrity: sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-html-tag-name
+- micromark-util-normalize-identifier@2.0.1
+  - license: MIT
+  - integrity: sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-normalize-identifier
+- micromark-util-resolve-all@2.0.1
+  - license: MIT
+  - integrity: sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-resolve-all
+- micromark-util-sanitize-uri@2.0.1
+  - license: MIT
+  - integrity: sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-sanitize-uri
+- micromark-util-subtokenize@2.1.0
+  - license: MIT
+  - integrity: sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA==
+  - source: https://github.com/micromark/micromark/tree/main/packages/micromark-util-subtokenize
 - path-expression-matcher@1.6.2
   - license: MIT
   - integrity: sha512-enSlaiat05iasnzmgNxRj8reFdj3puY2QpNgP1aPIaVfT6nn9ICuPoFlKHk8EN22HcwewshO+mN2DGbkCEOtqQ==
   - source: https://github.com/NaturalIntelligence/path-expression-matcher
+- remark-gfm@4.0.1
+  - license: MIT
+  - integrity: sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==
+  - source: remarkjs/remark-gfm
+- remark-parse@11.0.0
+  - license: MIT
+  - integrity: sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA==
+  - source: https://github.com/remarkjs/remark/tree/main/packages/remark-parse
 - strnum@2.4.2
   - license: MIT
   - integrity: sha512-rDG3Ah4TV0k1hWvLSzkZtMmLN9+eS+h3knq4MP6A42Y3Yh5qGNnOUs1jJkoSr8FG5dsL28c7KgkIBzSEykqtuw==
   - source: https://github.com/NaturalIntelligence/strnum
+- trough@2.2.0
+  - license: MIT
+  - integrity: sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==
+  - source: wooorm/trough
+- unified@11.0.5
+  - license: MIT
+  - integrity: sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA==
+  - source: unifiedjs/unified
+- unist-util-is@6.0.1
+  - license: MIT
+  - integrity: sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==
+  - source: syntax-tree/unist-util-is
+- unist-util-stringify-position@4.0.0
+  - license: MIT
+  - integrity: sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==
+  - source: syntax-tree/unist-util-stringify-position
+- unist-util-visit@5.1.0
+  - license: MIT
+  - integrity: sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==
+  - source: syntax-tree/unist-util-visit
+- unist-util-visit-parents@6.0.2
+  - license: MIT
+  - integrity: sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==
+  - source: syntax-tree/unist-util-visit-parents
+- vfile@6.0.3
+  - license: MIT
+  - integrity: sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==
+  - source: vfile/vfile
+- vfile-message@4.0.3
+  - license: MIT
+  - integrity: sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw==
+  - source: vfile/vfile-message
 - xml-naming@0.3.0
   - license: MIT
   - integrity: sha512-ghig2TBE/H11aOVgmahA3MhimvkBr6JIYknH/Dhdk10nXwdbIqBJsbfMxpvFPG8bAw77gN29aQWvKpmVoPlvPQ==
@@ -38,8 +270,13 @@ These generated Node runtime bundles contain the following packages:
   - license: ISC
   - integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==
   - source: github:eemeli/yaml
+- zwitch@2.0.4
+  - license: MIT
+  - integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==
+  - source: wooorm/zwitch
 
 ## Bundle SHA-256
 
 - yaml.mjs: sha256:58c510627769ef4e75e90bcf410d63ba33e64b46bc9cfc53149839d5ccb1709b
 - xml.mjs: sha256:bab9b35f123c30198a7597422ca0baa9f207c0e536b41f2c478c6fd6b7fdfc79
+- markdown.mjs: sha256:e11d4cbcc75212bac94f99cd3218395d2c3f9f87e1b2d74c008b0c0740c4f836