dsh-agent-board 1.7.0 → 1.7.1

package/test/core.test.mjs

@@ -13,6 +13,9 @@ import * as core from '../lib/core.mjs'
 import { suggestSplitOf, withSplitHint, SUGGEST_SPLIT_TEXT, TASK_SIZE_CONTRACT, TEAM_SPLIT_RULE } from '../index.mjs'
 import { aggregateUsageSummary, readRunUsage, findRunLog } from '../index.mjs'
 import { createRpc } from '../lib/rpc.mjs'
+// no-root 刷屏根治（task-muuf0o7a）专项：会话层幻影板防线 + 派发层 root 闸门直调断言
+import { createSession, isFullSessionId } from '../lib/session.mjs'
+import { createDispatch } from '../lib/dispatch.mjs'
 // host 端源码拼接（Phase 2 模块化后：薄壳 index.mjs + lib/*.mjs 领域模块），供源码级接线断言
 const HOST_SOURCES = ['../index.mjs', '../lib/policy.mjs', '../lib/usage.mjs', '../lib/session.mjs', '../lib/store.mjs', '../lib/notify.mjs', '../lib/dispatch.mjs', '../lib/rpc.mjs']
 function hostSrc() { return HOST_SOURCES.map(function (f) { return readFileSync(new URL(f, import.meta.url), 'utf8') }).join('\n') }
@@ -706,12 +709,16 @@ test('粒度治理接线：工具描述/Team 提示词/双出口返回体均已
 // ===== create-task 空 description 软警告（E 卡）=====
 // 轻量 RPC 直调 harness：mock ctx（tools/effect/webServer）+ deps 最小面，直接调 handlers['create-task']
 // extra 可覆盖默认 deps（如 epic 预检用例注入 pushSysNote 捕获 / sessionCwd 解析根）
+// 幻影板防线（task-muuf0o7a）落地后，create-task 对不完整短 id 直接报错——mock 默认 sid
+// 必须是完整形态（session-xxxx-xxxx-...），否则全量 create-task 用例会被防线拦住。
+const FULL_SID = 'session-test-0000-0000-000000000000'
 function mkRpcHandlers(board, extra) {
   const state = { handlers: {}, teamModeCache: {}, feedbackCache: {} }
-  const ctx = { tools: { register() {} }, effect() {}, webServer: { register() { return () => {} } } }
+  const tools = {} // 工具通道捕获：双通道接线测试经 __tools['task_create'].execute(...) 直调
+  const ctx = { tools: { register(t) { tools[t.name] = t } }, effect() {}, webServer: { register() { return () => {} } } }
   const deps = Object.assign({
     getActorId: () => 'tester', resolveRoot: (x) => x,
-    toolSessionId: () => 's1', rpcSessionId: () => 's1',
+    toolSessionId: () => FULL_SID, rpcSessionId: () => FULL_SID,
     rootForSession: () => null, deriveWorkMode: () => 'solo', runsFor: () => [],
     rt: async () => board, mutateLocked: (sid, fn) => fn(board),
     maybeNotify: () => {}, notifyTaskDone: () => {},
@@ -719,6 +726,7 @@ function mkRpcHandlers(board, extra) {
     pushSysNote: () => {}, sessionCwd: () => '',
   }, extra || {})
   createRpc(ctx, state, deps)
+  state.handlers.__tools = tools
   return state.handlers
 }
 const EMPTY_DESC_WARNING = '任务描述为空——Worker 只能凭标题猜需求，建议补一句目标/约束'
@@ -857,6 +865,119 @@ test('update-task RPC: 发布 epic（有子任务缺调研注入）→ pushSysNo
   assert.equal(r3.ok, false); assert.match(r3.error, /not a draft/); assert.equal(notes2.length, 0)
 })
 
+// ===== 调研遵循·host 三件套（task-mutnj3a4）：touches→suggestedContextFiles 桥接 + Verifier 归因 + 驳回 hint =====
+
+test('suggestContextFiles: glob 跳过 / 锚点剥离 / 存在性过滤 / 去重 / 上限 20 全矩阵', () => {
+  // 非数组 / 空条目 / 非字符串 → 空
+  assert.deepEqual(core.suggestContextFiles(null, () => true), [])
+  assert.deepEqual(core.suggestContextFiles(['', '  ', 42], () => true), [])
+  // glob 条目（* ? [ ] { } 任一）跳过；具体文件保留
+  assert.deepEqual(core.suggestContextFiles(['src/**', '*.mjs', 'a?.js', 'x/[ab].js', 'x/{a,b}.js', 'lib/a.mjs'], () => true), ['lib/a.mjs'])
+  // 锚点 :L 段剥掉后再查存在性，返回剥锚后的相对原样
+  const seen = []
+  const r = core.suggestContextFiles(['lib/a.mjs:L10-L20'], (p) => { seen.push(p); return true })
+  assert.deepEqual(r, ['lib/a.mjs']); assert.deepEqual(seen, ['lib/a.mjs'])
+  // 存在性过滤：不存在的剔除
+  assert.deepEqual(core.suggestContextFiles(['a.mjs', 'b.mjs'], (p) => p === 'b.mjs'), ['b.mjs'])
+  // exists 抛异常视为不存在（宁缺勿滥）
+  assert.deepEqual(core.suggestContextFiles(['a.mjs'], () => { throw new Error('x') }), [])
+  // exists 缺省 → 退化为只做 glob/锚点过滤（与 epicPrecheck 同口径）
+  assert.deepEqual(core.suggestContextFiles(['a.mjs', 'src/**']), ['a.mjs'])
+  // 去重（按剥锚后原串）+ 顺序保持
+  assert.deepEqual(core.suggestContextFiles(['a.mjs', 'a.mjs:L5', 'b.mjs', 'a.mjs'], () => true), ['a.mjs', 'b.mjs'])
+  // 上限 20（与 contextFiles 上限一致）
+  const many = []
+  for (let i = 0; i < 25; i++) many.push('f' + i + '.mjs')
+  assert.equal(core.suggestContextFiles(many, () => true).length, 20)
+})
+
+test('attachContextSuggestions: 触发②且有建议 → warning 补尾 + 挂字段；否则形态不变', () => {
+  // 触发：warnings 含无调研警告且 touches 有可建议文件
+  const out = { ok: true }
+  const warns = core.createTaskWarnings(mkTask({ description: 'd', touches: ['lib/a.mjs'] }))
+  const suggested = core.attachContextSuggestions(out, warns, ['lib/a.mjs'], () => true)
+  assert.deepEqual(suggested, ['lib/a.mjs'])
+  assert.deepEqual(out.suggestedContextFiles, ['lib/a.mjs'])
+  assert.match(warns[0], /可直接 task_update contextFiles 补上/)
+  // 不触发①：无「未附调研上下文」警告（已有调研上下文）→ null，out 不挂字段
+  const out2 = { ok: true }
+  const warns2 = core.createTaskWarnings(mkTask({ description: 'd', touches: ['lib/a.mjs'], context: { files: [], notes: 'n' } }))
+  assert.equal(core.attachContextSuggestions(out2, warns2, ['lib/a.mjs'], () => true), null)
+  assert.equal('suggestedContextFiles' in out2, false)
+  // 不触发②：touches 全 glob → null，warning 原文不变（不补尾巴）
+  const out3 = { ok: true }
+  const warns3 = core.createTaskWarnings(mkTask({ description: 'd', touches: ['src/**'] }))
+  const before = warns3.join('；')
+  assert.equal(core.attachContextSuggestions(out3, warns3, ['src/**'], () => true), null)
+  assert.equal('suggestedContextFiles' in out3, false)
+  assert.equal(warns3.join('；'), before)
+})
+
+test('create-task 双通道：touches 指向真实文件且无调研上下文 → 挂 suggestedContextFiles + warning 补尾', async () => {
+  const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'board-suggest-'))
+  fs.writeFileSync(path.join(tmp, 'real.mjs'), '// x')
+  const extra = { sessionCwd: () => tmp }
+  // RPC 通道：ghost.mjs 不存在、src/** 是 glob → 均剔除，只剩 real.mjs
+  const board = mkBoard([])
+  const r = await mkRpcHandlers(board, extra)['create-task']({ title: 'T', description: 'd', touches: ['real.mjs', 'ghost.mjs', 'src/**'] })
+  assert.equal(r.ok, true)
+  assert.deepEqual(r.suggestedContextFiles, ['real.mjs'])
+  assert.match(r.warning, /未附调研上下文/); assert.match(r.warning, /可直接 task_update contextFiles 补上/)
+  // 工具通道（同口径）
+  const board2 = mkBoard([])
+  const tools = mkRpcHandlers(board2, extra).__tools
+  const r2 = await tools['task_create'].execute({ title: 'T', description: 'd', touches: ['real.mjs'] }, {})
+  assert.equal(r2.ok, true)
+  assert.deepEqual(r2.suggestedContextFiles, ['real.mjs'])
+  assert.match(r2.warning, /可直接 task_update contextFiles 补上/)
+})
+
+test('create-task：touches 全 glob 或已有调研上下文 → 不挂 suggestedContextFiles（返回体形态不变）', async () => {
+  const board = mkBoard([])
+  const r = await mkRpcHandlers(board)['create-task']({ title: 'T', description: 'd', touches: ['src/**'] })
+  assert.equal(r.ok, true); assert.match(r.warning, /未附调研上下文/)
+  assert.equal('suggestedContextFiles' in r, false)
+  assert.ok(!/可直接 task_update/.test(r.warning)) // 无建议时尾巴也不补
+  const board2 = mkBoard([])
+  const r2 = await mkRpcHandlers(board2)['create-task']({ title: 'T', description: 'd', touches: ['lib/a.mjs'], contextNotes: '已调研' })
+  assert.equal(r2.ok, true); assert.equal('warning' in r2, false); assert.equal('suggestedContextFiles' in r2, false)
+})
+
+test('verify 驳回 hint：verify-task RPC + task_verify 工具 rejected 附重派提示，approved 不附', async () => {
+  // RPC 通道 rejected → 附 hint，驳回语义不变（回 in-progress）
+  const board = mkBoard([mkTask({ id: 'v1', status: 'verifying' })])
+  const r = await mkRpcHandlers(board)['verify-task']({ taskId: 'v1', verdict: 'rejected', comment: '跑偏了' })
+  assert.equal(r.ok, true); assert.match(r.hint, /驳回原因写进 description/); assert.match(r.hint, /新 Worker 没有上一轮记忆/)
+  assert.equal(board.tasks[0].status, 'in-progress')
+  // RPC 通道 approved → 无 hint 字段
+  const board2 = mkBoard([mkTask({ id: 'v2', status: 'verifying' })])
+  const r2 = await mkRpcHandlers(board2)['verify-task']({ taskId: 'v2', verdict: 'approved' })
+  assert.equal(r2.ok, true); assert.equal('hint' in r2, false)
+  // 工具通道 rejected → 同口径附 hint
+  const board3 = mkBoard([mkTask({ id: 'v3', status: 'verifying' })])
+  const r3 = await mkRpcHandlers(board3).__tools['task_verify'].execute({ taskId: 'v3', verdict: 'rejected', comment: '缺测试' }, {})
+  assert.equal(r3.ok, true); assert.match(r3.hint, /驳回原因写进 description/)
+  // 工具通道 approved → 无 hint
+  const board4 = mkBoard([mkTask({ id: 'v4', status: 'verifying' })])
+  const r4 = await mkRpcHandlers(board4).__tools['task_verify'].execute({ taskId: 'v4', verdict: 'approved' }, {})
+  assert.equal(r4.ok, true); assert.equal('hint' in r4, false)
+})
+
+test('buildVerifierPrompt: 含「立单缺调研」驳回归因条款', () => {
+  const p = core.buildVerifierPrompt(mkTask({ id: 'tx', status: 'verifying' }), '')
+  assert.match(p, /立单缺调研/)
+  assert.match(p, /驳回热点统计/)
+})
+
+test('调研遵循接线：双通道 attachContextSuggestions / 驳回 hint 双挂 / Verifier 归因条款（源码级断言）', () => {
+  const src = hostSrc()
+  assert.equal((src.match(/attachContextSuggestions\(/g) || []).length, 2) // task_create 工具 + create-task RPC
+  assert.equal((src.match(/\.hint = REJECT_REDISPATCH_HINT/g) || []).length, 2) // task_verify 工具 + verify-task RPC
+  const coreSrc = readFileSync(new URL('../lib/core.mjs', import.meta.url), 'utf8')
+  assert.match(coreSrc, /立单缺调研/) // Verifier prompt 归因条款在位
+  assert.match(coreSrc, /export function suggestContextFiles/)
+})
+
 test('调研门禁接线：双通道 warning 调用 / epic 预检投递 / 读包失败落卡（源码级轻量断言）', () => {
   const src = hostSrc()
   assert.equal((src.match(/createTaskWarnings\(t\)/g) || []).length, 2) // task_create 工具 + create-task RPC
@@ -999,7 +1120,7 @@ test('学习飞轮接线：两处触发点 + push-lesson 开关拦截 + prompt/
   // 候选教训两处触发：Verifier 驳回（文本通道 + 工具通道 + GUI RPC）与主窗口仲裁结论
   assert.match(host, /pushRejectLesson\(d, t, vsecs\.verifySummary \|\| trimmed, t\.verification\.at\)/)
   assert.match(host, /if \(!approved\) pushRejectLesson\(d, t, \(args\.summary \|\| ''\)/)
-  assert.match(host, /if \(args\.verdict === 'rejected'\) pushRejectLesson\(d, t, args\.comment\)/)
+  assert.match(host, /if \(args\.verdict === 'rejected'\) \{ pushRejectLesson\(d, t, args\.comment\); r\.hint = REJECT_REDISPATCH_HINT \}/) // verify-task RPC：候选教训 + 驳回重派 hint（task-mutnj3a4）同分支挂载
   assert.match(host, /pushArbitrationLesson\(d, t, escQ, answer \|\| '', arbAt\)/)
   // 生成前一律过 feedbackEnabled 总开关（关掉 = 不生成、不推）
   assert.equal((host.match(/if \(!cfg\(d\)\.feedbackEnabled\) return false/g) || []).length, 2)
@@ -1136,9 +1257,9 @@ test('史诗语义层接线：poolCycle 派发分支触发父卡流转 + get-tas
   assert.match(host, /claimApply\(d, t, 'spawn-pending', 'dispatch'\); if \(parentKickOnDispatch\(d, t\)\)/)
   // get-tasks 现算 childStats（零存储）
   assert.match(host, /d\.childStats = aggregateChildStats\(d\.tasks\)/)
-  // 两模块都从 core 解构引入（接线不断）；rpc.mjs 解构表尾部随调研门禁（task-mute6zpw）扩展三个纯函数
+  // 两模块都从 core 解构引入（接线不断）；rpc.mjs 解构表尾部随调研门禁（task-mute6zpw）、调研遵循三件套（task-mutnj3a4）、tasksHash（task-mutrtwin）扩展
   assert.match(host, /parentKickOnDispatch, LESSON_RECALL_HINT \} = core/)
-  assert.match(host, /boardHome, aggregateChildStats, createTaskWarnings, epicPrecheck, epicPrecheckNote \} = core/)
+  assert.match(host, /boardHome, aggregateChildStats, createTaskWarnings, epicPrecheck, epicPrecheckNote, attachContextSuggestions, REJECT_REDISPATCH_HINT, tasksHash \} = core/)
   // 既有「全子任务 resolved → 父 verifying」逻辑不动（checkParentAuto 仍在 verifyApply 链路；core.mjs 不在 hostSrc 清单，单独读）
   const coreSrc = readFileSync(new URL('../lib/core.mjs', import.meta.url), 'utf8')
   assert.match(coreSrc, /if \(verdict === 'approved' && isb\(t\)\) \{ var p = checkParentAuto\(d, t\)/)
@@ -1177,3 +1298,245 @@ test('调研门禁 UI 接线：卡片「⚠️ 无调研」徽章 + 详情「调
   assert.match(cli, /if \(r && r\.warning\)/)                          // 创建表单消费 create-task 响应的 warning 字段
   assert.match(cli, /'⚠️ ' \+ warn/)                                   // warning 原文黄色行展示（C.warn）
 })
+
+// ===== 反馈修复（task-mutrtwin）：僵尸 epic 归档放行 + get-tasks tasksHash =====
+// ① archive-task 对「无活跃 run 的 in-progress」放行（parentKick 僵尸态出清，反馈 n-mutma3mmwceq）；
+// ② get-tasks 附 tasksHash（core 纯函数 djb2），kernel hash 相同跳渲染（反馈 n-mut9rzs2mkhg）。
+
+test('tasksHash: 同输入同 hash（纯函数稳定；JSON 重解析的等价形态 hash 相同）', () => {
+  const a = [mkTask({ id: 'a', title: '甲' }), mkTask({ id: 'b', status: 'in-progress' })]
+  assert.equal(core.tasksHash(a), core.tasksHash(a))
+  // 跨轮询 rt() 重新 JSON.parse 的同内容对象 → hash 相同（短路生效的前提）
+  assert.equal(core.tasksHash(a), core.tasksHash(JSON.parse(JSON.stringify(a))))
+  assert.equal(core.tasksHash([]), core.tasksHash([]))
+  assert.equal(core.tasksHash(undefined), core.tasksHash(null)) // 非数组一律按空板兜底
+})
+
+test('tasksHash: 关键字段变 → hash 变；非关键字段（history/messages/usage）变 → hash 不变', () => {
+  const h0 = core.tasksHash([mkTask({ id: 'a' })])
+  // 关键字段逐一变化（驱动列表/详情渲染的字段）
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', status: 'in-progress' })]), h0)
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', title: '改名' })]), h0)
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', priority: 'high' })]), h0)
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', lastError: 'boom' })]), h0)
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', lastProgress: { text: '过半', at: 'x' } })]), h0)
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', resolvedAt: '2026-01-02T00:00:00Z' })]), h0)
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', frozen: true })]), h0)
+  // escalation 必须入 hash：board_report escalate 只写 escalation/messages/history、
+  // 不动其他任何字段——漏掉它「新歧义自动弹开面板」会被 hash 短路吞掉
+  assert.notEqual(core.tasksHash([mkTask({ id: 'a', escalation: { question: '歧义', at: 'x', by: 'w' } })]), h0)
+  // 非关键字段不动 hash（不驱动列表渲染，参与会让结算写账/进展消息引发空渲染抖动）
+  const t1 = mkTask({ id: 'a' }); t1.history.push({ from: 'pending', to: 'in-progress', timestamp: 'x', actor: 'y', note: '' })
+  assert.equal(core.tasksHash([t1]), h0)
+  const t2 = mkTask({ id: 'a' }); t2.messages.push({ kind: 'progress', text: 'p', at: 'x', by: 'w' })
+  assert.equal(core.tasksHash([t2]), h0)
+  const t3 = mkTask({ id: 'a' }); t3.usage = { input: 1, output: 2, cacheRead: 3, cacheWrite: 4, total: 10, runs: 1, models: {} }
+  assert.equal(core.tasksHash([t3]), h0)
+})
+
+test('tasksHash: 顺序有关（数组序变化 → hash 变；看板按数组序渲染，口径写清）', () => {
+  const a = mkTask({ id: 'a' }), b = mkTask({ id: 'b' })
+  assert.notEqual(core.tasksHash([a, b]), core.tasksHash([b, a]))
+})
+
+test('archive-task RPC: resolved/cancelled 放行（既有行为不破）', async () => {
+  const board = mkBoard([mkTask({ id: 'r1', status: 'resolved' }), mkTask({ id: 'c1', status: 'cancelled' })])
+  const h = mkRpcHandlers(board)
+  assert.equal((await h['archive-task']({ taskId: 'r1' })).ok, true)
+  assert.equal((await h['archive-task']({ taskId: 'c1' })).ok, true)
+  assert.equal(board.tasks[0].status, 'archived')
+  assert.equal(board.tasks[1].status, 'archived')
+})
+
+test('archive-task RPC: in-progress 无活跃 run 放行（parentKick 僵尸 epic 出清）', async () => {
+  // 僵尸态还原：direct epic 被 parentKickOnDispatch 推进到 in-progress，子任务已归档、无 run、claimedBy=null
+  const zombie = mkTask({ id: 'z1', status: 'in-progress', claimedBy: null, pipeline: 'direct' })
+  const board = mkBoard([zombie])
+  const h = mkRpcHandlers(board, { hasActiveRun: () => false })
+  const r = await h['archive-task']({ taskId: 'z1' })
+  assert.equal(r.ok, true); assert.equal(zombie.status, 'archived'); assert.ok(zombie.archivedAt)
+})
+
+test('archive-task RPC: in-progress 有活跃 run 拒绝；已 settled run 放行；未注入 hasActiveRun 按活跃兜底', async () => {
+  // 有活跃 run → 拒绝（不能归在跑的任务）
+  let t = mkTask({ id: 'a1', status: 'in-progress' })
+  let h = mkRpcHandlers(mkBoard([t]), { hasActiveRun: () => true })
+  let r = await h['archive-task']({ taskId: 'a1' })
+  assert.equal(r.ok, false); assert.match(r.error, /cannot archive/); assert.equal(t.status, 'in-progress')
+  // 有 run 记录但已 settled（finish→settleRun 过渡窗口，Worker 已结束）→ 放行
+  // （hasActiveRun 的 !settled 口径由 index.mjs 实现，此处 mock 其结论）
+  t = mkTask({ id: 'a2', status: 'in-progress' })
+  h = mkRpcHandlers(mkBoard([t]), { hasActiveRun: () => false })
+  r = await h['archive-task']({ taskId: 'a2' })
+  assert.equal(r.ok, true); assert.equal(t.status, 'archived')
+  // deps 未注入 hasActiveRun → 保守兜底视为有活跃 run → 拒绝（保持旧门禁行为，不误放在跑任务）
+  t = mkTask({ id: 'a3', status: 'in-progress' })
+  h = mkRpcHandlers(mkBoard([t]))
+  r = await h['archive-task']({ taskId: 'a3' })
+  assert.equal(r.ok, false); assert.match(r.error, /cannot archive/)
+  // 其余状态（verifying 等）仍拒绝——放行面只扩到「无活跃 run 的 in-progress」
+  t = mkTask({ id: 'a4', status: 'verifying' })
+  h = mkRpcHandlers(mkBoard([t]), { hasActiveRun: () => false })
+  r = await h['archive-task']({ taskId: 'a4' })
+  assert.equal(r.ok, false); assert.match(r.error, /cannot archive/)
+})
+
+test('task_archive 工具：与 archive-task RPC 同一门禁口径（僵尸放行/活跃拒绝）', async () => {
+  let t = mkTask({ id: 'z2', status: 'in-progress', claimedBy: null })
+  let h = mkRpcHandlers(mkBoard([t]), { hasActiveRun: () => false })
+  let r = await h.__tools['task_archive'].execute({ taskId: 'z2' }, {})
+  assert.equal(r.ok, true); assert.equal(t.status, 'archived')
+  t = mkTask({ id: 'z3', status: 'in-progress' })
+  h = mkRpcHandlers(mkBoard([t]), { hasActiveRun: () => true })
+  r = await h.__tools['task_archive'].execute({ taskId: 'z3' }, {})
+  assert.equal(r.ok, false); assert.match(r.error, /cannot archive/)
+})
+
+test('反馈修复接线断言：index.mjs 注入 hasActiveRun + get-tasks 附 tasksHash + kernel 短路分支（源码级）', () => {
+  const host = hostSrc()
+  // index.mjs：hasActiveRun 定义（runsFor 表有记录且 !settled 即活跃）并注入 createRpc deps
+  assert.match(host, /function hasActiveRun\(sid, taskId\) \{ var rec = session\.runsFor\(sid\)\[taskId\]; return !!\(rec && !rec\.settled\) \}/)
+  assert.match(host, /hasActiveRun: hasActiveRun,/)
+  // rpc.mjs：get-tasks 响应附 tasksHash（现算不落盘）；archiveErr 门禁 = 定义1 + RPC1 + 工具1
+  assert.match(host, /d\.tasksHash = tasksHash\(d\.tasks\)/)
+  const rpcSrc = readFileSync(new URL('../lib/rpc.mjs', import.meta.url), 'utf8')
+  assert.equal((rpcSrc.match(/archiveErr\(sid, t\)/g) || []).length, 3)
+  // kernel：hash 短路分支存在（hash 相同跳过 tasks 赋值 + notify；老 host 无 hash 恒视为变化）
+  const ksrc = readFileSync(new URL('../lib/client/kernel.js', import.meta.url), 'utf8')
+  assert.match(ksrc, /var newHash = \(d && d\.tasksHash\) \|\| ''/)
+  assert.match(ksrc, /var tasksChanged = !newHash \|\| newHash !== state\.tasksHash/)
+  assert.match(ksrc, /if \(tasksChanged\) \{[\s\S]*?notify\(\)/)
+})
+
+// ===== 无障碍两件套（task-mutrubay，反馈 n-mut9rzpyc7p1）：卡片键盘可达 + 详情页「流转到」按钮组（源码级断言）=====
+test('无障碍接线：卡片 role/tabIndex/aria-label/onKeyDown/焦点框 + 详情页流转按钮组（源码级）', () => {
+  const cli = readFileSync(new URL('../lib/client.js', import.meta.url), 'utf8')
+  // ① 卡片键盘可达：button 角色 + Tab 序 + 读屏标签（标题+状态）+ Enter/Space 与点击共用同一激活函数 + 主题色焦点框
+  assert.match(cli, /role: 'button', tabIndex: 0, 'aria-label': t\.title \+ '（' \+ \(statusLabels\[t\.status\] \|\| t\.status\) \+ '）'/)
+  assert.match(cli, /onKeyDown: function \(e\) \{ if \(e\.key === 'Enter' \|\| e\.key === ' '\) \{ e\.preventDefault\(\); activate\(\) \} \}/)
+  assert.match(cli, /onClick: activate,/) // 点击与键盘同一条激活路径（多选=切换选中，否则开详情）
+  assert.match(cli, /outline: isCardFocus\(t\.id\) \? '2px solid ' \+ C\.brand : 'none'/) // 主题色焦点框（非浏览器默认蓝框）
+  assert.match(cli, /function isCardFocus\(id\)/) // 焦点态走 state 现算（轮询重渲染不丢焦点框）
+  // ② 详情页「流转到」按钮组：合法迁移表 + 组容器（读屏可报组名）+ 四状态按钮文案
+  assert.match(cli, /var FLOW_DEF = \{/)
+  assert.match(cli, /role: 'group', 'aria-label': '状态流转'/)
+  assert.match(cli, /'⇄ 流转到：'/)
+  assert.match(cli, /'▶ 开始处理'/); assert.match(cli, /'✅ 提交验收'/); assert.match(cli, /'⛔ 标记阻塞'/)
+  assert.match(cli, /'↩ 重投待办'/); assert.match(cli, /'✔ 验收通过'/); assert.match(cli, /'↩ 驳回重投'/)
+  // 迁移通道与拖拽 transition() 同 RPC 族（host 门禁不变）；失败原因 ⚠️ 回显 actionMsg 行
+  assert.match(cli, /function flowTo\(to\)/)
+  assert.match(cli, /p = rpc\('claim-task', \{ taskId: task\.id \}\)/)
+  assert.match(cli, /p = rpc\('update-task', \{ taskId: task\.id, resetToPending: true \}\)/)
+  assert.match(cli, /p = rpc\('resolve-task', \{ taskId: task\.id, status: 'verifying', resolution: res \}\)/)
+  assert.match(cli, /p = rpc\('verify-task', \{ taskId: task\.id, verdict: 'approved' \}\)/)
+  assert.match(cli, /setActionMsg\('⚠️ 流转失败：' \+ \(r\.error \|\| '未知错误'\)\)/)
+})
+
+// ===== no-root 刷屏根治（task-muuf0o7a）：poolCycle root 闸门 + 短 id 幻影板防线 =====
+// 事故链：幻影板 tasks-cc24eb5c.json（裸短 id 建出）滞留 pending 卡 → poolCycle 每 15s
+// pickDispatch 成功→占位 claim→spawnOneShot 才发现无活 root→console.error→占位超时回收
+// →下轮再来，永久 spam。根治 = ①poolCycle 入口 root 闸门（无 root 不派发不写盘零日志）
+// + ②touchSession/create-task 拒绝不完整短 id（import- 前缀放行）。
+
+test('isFullSessionId：裸短 id/空值/unknown 拒绝；完整 root id 与 import- 前缀放行', () => {
+  assert.equal(isFullSessionId('cc24eb5c'), false)           // 裸短 id（本次幻影板元凶）
+  assert.equal(isFullSessionId(''), false)
+  assert.equal(isFullSessionId(null), false)
+  assert.equal(isFullSessionId(undefined), false)
+  assert.equal(isFullSessionId('unknown'), false)
+  assert.equal(isFullSessionId('abcdefghij-k'), false)       // 长度 <20
+  assert.equal(isFullSessionId('abcdefghijklmno-pqrst'), false) // ≥20 但只有一个 '-'
+  assert.equal(isFullSessionId('-abcdefghij-klmnopqr'), false)  // 首字符即 '-' 不算结构
+  assert.equal(isFullSessionId('session-cc24eb5c-702c-4f7d-a1b2c3d4e5f6'), true)
+  assert.equal(isFullSessionId('import-sess_df0837fa-1'), true) // import- 前缀板合法放行
+})
+
+test('touchSession：不完整短 id 不注册进已知会话集合（幻影板不进心跳轮询）', () => {
+  const known = {}
+  const session = createSession({}, { knownSessions: known, feedbackCache: {}, activeRuns: {}, dispatchedEver: {} })
+  session.touchSession('cc24eb5c')     // 裸短 id → 拒绝
+  session.touchSession('unknown')      // 既有排除项不变
+  session.touchSession(null)
+  session.touchSession('session-cc24eb5c-702c-4f7d-a1b2c3d4e5f6') // 完整 id → 注册
+  session.touchSession('import-sess_df0837fa-1')                  // import- 前缀 → 放行
+  assert.deepEqual(Object.keys(known).sort(), ['import-sess_df0837fa-1', 'session-cc24eb5c-702c-4f7d-a1b2c3d4e5f6'].sort())
+})
+
+// poolCycle 直调 harness：ctx 不给 timer（15s 心跳 IIFE 跳过），deps 全 mock，计数读/写/日志
+function mkDispatch(board, over) {
+  const counters = { reads: 0, writes: 0, errs: [] }
+  const dispatch = createDispatch(
+    // 创建期无条件触达：effect（卸载清理注册）/ get('systemPrompt' 引导段)；不给 timer/agents/subagents
+    { fs: {}, effect: function () {}, get: function () { return null } },
+    { knownSessions: {}, dispatchedEver: {}, badModels: {}, packByChild: {}, pendingPacks: [], teamModeCache: {}, activeRuns: {} },
+    Object.assign({
+      rt: async () => { counters.reads++; return board },
+      wt: async () => { counters.writes++ },
+      mutateLocked: async (sid, fn) => { counters.writes++; return fn(board) },
+      kickCycle: () => {},
+      rootForSession: () => undefined, // 默认无活 root（幻影板/死会话场景）
+      sessionCwd: () => '', withTimeout: (p) => p, runsFor: () => ({}), feedbackOn: () => true,
+      pushSysNote: () => {}, maybeNotify: () => {}, notifyTaskDone: () => {},
+    }, over || {}))
+  return { dispatch, counters }
+}
+
+test('poolCycle root 闸门：无活 root → 直接返回 undefined，不读盘/不写盘/零日志（根治 15s 刷屏）', async () => {
+  const { dispatch, counters } = mkDispatch(mkBoard([mkTask()])) // 板上有 pending 卡也不进循环
+  const origErr = console.error
+  console.error = function () { counters.errs.push(Array.prototype.join.call(arguments, ' ')) }
+  try {
+    const r = await dispatch.poolCycle('cc24eb5c')
+    assert.equal(r, undefined) // 调用方（kickCycle/15s 心跳）忽略返回值，签名兼容
+    assert.equal(counters.reads, 0)  // rt 都没跑：零读盘
+    assert.equal(counters.writes, 0) // 零写盘
+    assert.deepEqual(counters.errs, []) // 零日志
+  } finally { console.error = origErr }
+})
+
+test('poolCycle root 闸门：有活 root → 正常进循环（空板走空闲快进返回 snap，不写盘）', async () => {
+  const board = mkBoard([])
+  const { dispatch, counters } = mkDispatch(board, { rootForSession: () => ({ id: FULL_SID }) })
+  const r = await dispatch.poolCycle(FULL_SID)
+  assert.ok(r && Array.isArray(r.tasks)) // 空闲快进返回 snap（闸门未误伤正常路径）
+  assert.equal(counters.reads, 1)
+  assert.equal(counters.writes, 0) // 空板无残留 poolStatus/dispatchInfo → 快进不写盘
+})
+
+test('create-task RPC：不完整短 id sessionId → 报错不建板；import- 前缀与正常路径放行', async () => {
+  // rpcSessionId 覆写为「尊重显式 sessionId 入参」（生产行为：args.sessionId 优先于 actor 归一）
+  const honorSid = { rpcSessionId: (args) => (args && args.sessionId) || FULL_SID }
+  // ① 裸短 id → 拒绝且不落任务（防幻影板）
+  const board = mkBoard([])
+  const r = await mkRpcHandlers(board, honorSid)['create-task']({ title: 'T', description: 'd', sessionId: 'cc24eb5c' })
+  assert.equal(r.ok, false)
+  assert.match(r.error, /sessionId 不完整/)
+  assert.equal(board.tasks.length, 0)
+  // ② import- 前缀板 → 放行（导入会话是合法板，别误伤）
+  const board2 = mkBoard([])
+  const r2 = await mkRpcHandlers(board2, honorSid)['create-task']({ title: 'T', description: 'd', sessionId: 'import-sess_df0837fa-1' })
+  assert.equal(r2.ok, true)
+  assert.equal(board2.tasks.length, 1)
+  // ③ 不传 sessionId（正常路径，归一为完整 root id）→ 放行，返回体形态不变
+  const board3 = mkBoard([])
+  const r3 = await mkRpcHandlers(board3, honorSid)['create-task']({ title: 'T', description: 'd' })
+  assert.equal(r3.ok, true)
+  assert.equal(board3.tasks.length, 1)
+})
+
+test('no-root 刷屏根治接线断言（源码级）：闸门/防线/兜底注释均在位', () => {
+  const dsp = readFileSync(new URL('../lib/dispatch.mjs', import.meta.url), 'utf8')
+  const ses = readFileSync(new URL('../lib/session.mjs', import.meta.url), 'utf8')
+  const rpc = readFileSync(new URL('../lib/rpc.mjs', import.meta.url), 'utf8')
+  // ① poolCycle 入口即 root 闸门（闸门必须在 rt 读盘之前——不读盘才谈得上零 IO）
+  assert.match(dsp, /async function poolCycle\(sid\) \{[\s\S]{0,900}if \(!rootForSession\(sid\)\) return undefined[\s\S]{0,200}var snap = await rt\(sid\)/)
+  // spawnOneShot 的 console.error 兜底保留 + 注释说明闸门在上游
+  assert.match(dsp, /console\.error\('\[task-board\] no root agent for session ' \+ sid \+ ', skip spawn'\)/)
+  assert.match(dsp, /poolCycle 入口已有 root 存活早闸门/)
+  // ② touchSession 注册口接入 isFullSessionId；纯函数出口 + rpc.mjs 直引
+  assert.match(ses, /export function isFullSessionId\(sid\)/)
+  assert.match(ses, /sid !== 'unknown' && isFullSessionId\(sid\)\) knownSessions\[sid\]/)
+  assert.match(rpc, /import \{ isFullSessionId \} from '\.\/session\.mjs'/)
+  // create-task handler 校验在 mutateLocked 之前（拒绝时不建板）
+  assert.match(rpc, /handle\('create-task', async function \(args\) \{ var sid = rpcSessionId\(args\);[\s\S]{0,400}if \(!isFullSessionId\(sid\)\) return \{ ok: false, error: 'sessionId 不完整[\s\S]{0,120}return mutateLocked/)
+})