dsh-issue2pr 0.1.0

package/lib/stages/p6-coder.js

@@ -0,0 +1,226 @@
+// lib/stages/p6-coder.js — 需求 5：多智能体协同代码优化
+// builtin：Planner 派单 → 并行 Coder（superpowers 纪律：TDD/最小 diff/verify-before-claim）→ Reviewer 门控
+// session：生成任务包，交给 DSH 会话（真 workflow + superpowers skills）
+// claude：生成任务包后自动委托 claude code CLI 无人值守执行；产物就绪进正常复核门，失败回退"等人工会话"
+import { spawn } from "node:child_process";
+import { existsSync, readdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { writeArtifact, readArtifact } from "../store.js";
+import { requireArtifact, readRepoFile, logEvent } from "./helpers.js";
+import { slugify, timestamp } from "../store.js";
+import { saveRun, sessionPatchesReady } from "../pipeline.js";
+import { sysOf, paramsOf } from "../stageConfig.js";
+
+// —— claude CLI 进程管理（stop/删除 Run 时杀进程树，避免孤儿 claude 继续写仓库） ——
+const activeExternals = new Map(); // runDir → ChildProcess
+
+export function killExternal(runDir) {
+  const child = activeExternals.get(runDir);
+  if (!child || child.exitCode != null) return false;
+  if (process.platform === "win32") {
+    // shell:true 的 child 是 cmd.exe，须按进程树杀，否则 claude（node 子进程）存活
+    spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { windowsHide: true });
+  } else {
+    try { child.kill("SIGTERM"); } catch { /* 已退出 */ }
+  }
+  return true;
+}
+
+// claude 可执行文件解析：阶段配置（params.claudeBin）> 环境变量 ISSUE2PR_CLAUDE_BIN > 常见安装位置探测。
+// 开源环境安装路径各异，UI「配置」可显式指定；PATH 里未必有 claude（如 npm 全局目录不在系统 PATH）。
+// preflight 端点复用本函数做健康探测（项目页显示 claude CLI 是否就绪）。
+export function resolveClaudeBin(cfgBin) {
+  if (cfgBin) return cfgBin;
+  if (process.env.ISSUE2PR_CLAUDE_BIN) return process.env.ISSUE2PR_CLAUDE_BIN;
+  const home = homedir();
+  const cands = process.platform === "win32"
+    ? [join(home, ".npm-global", "claude.cmd"), join(home, ".npm_global", "claude.cmd"), join(home, "AppData", "Roaming", "npm", "claude.cmd"), join(home, ".local", "bin", "claude.exe")]
+    : [join(home, ".local", "bin", "claude"), "/usr/local/bin/claude", "/opt/homebrew/bin/claude"];
+  return cands.find((p) => existsSync(p)) || "claude";
+}
+
+// 无人值守跑 claude：-p headless；skip-permissions 无交互放行；--add-dir 允许写 run 产物目录（cwd 是仓库）。
+// prompt 走 stdin（规避 shell:true 的参数转义）；输出各留档 2MB 上限。
+async function runClaude({ bin, repoDir, addDir, prompt, timeoutMs, onChild }) {
+  const args = ["-p", "--output-format", "json", "--dangerously-skip-permissions", "--add-dir", '"' + addDir + '"'];
+  return await new Promise((resolve) => {
+    let child;
+    try {
+      child = spawn(bin, args, { cwd: repoDir, shell: true, windowsHide: true });
+    } catch (e) { return resolve({ code: -1, error: String((e && e.message) || e) }); }
+    if (onChild) onChild(child);
+    let stdout = "", stderr = "", done = false;
+    const finish = (r) => { if (done) return; done = true; clearTimeout(timer); resolve(r); };
+    const timer = setTimeout(() => finish({ code: -2, timeout: true, stdout, stderr }), timeoutMs);
+    child.on("error", (e) => finish({ code: -1, error: String((e && e.message) || e), stdout, stderr }));
+    child.stdout?.on("data", (d) => { if (stdout.length < 2e6) stdout += d; });
+    child.stderr?.on("data", (d) => { if (stderr.length < 2e6) stderr += d; });
+    child.on("close", (code) => finish({ code: code == null ? -1 : code, stdout, stderr }));
+    try { child.stdin.write(prompt); child.stdin.end(); }
+    catch (e) { finish({ code: -1, error: "stdin 写入失败: " + String((e && e.message) || e) }); }
+  });
+}
+
+function countPatches(runDir) {
+  const dir = join(runDir, "06-implementation", "patches");
+  return existsSync(dir) ? readdirSync(dir).filter((f) => f.endsWith(".diff")).length : 0;
+}
+
+function buildSessionTask(graph) {
+  return [
+    "# P6 会话任务包（交外部编码会话执行：workflow + superpowers）", "",
+    "## TaskGraph", "```json", graph, "```", "",
+    "## 要求", "- 用 workflow 工具 fan-out：planner → 并行 coder → reviewer；",
+    "- 每节点产出 unified diff 到本目录 patches/；", "- 完成后写 coder-report.json 并通过人工复核门。",
+  ].join("\n");
+}
+
+// claude headless（--output-format json）统计摘要：耗时/轮次/费用（无统计返回空串）
+function statsSummary(s) {
+  if (!s) return "";
+  const parts = [];
+  if (s.durationMs != null) parts.push("耗时 " + Math.round(s.durationMs / 60000) + " 分钟");
+  if (s.turns != null) parts.push(s.turns + " 轮");
+  if (s.costUsd != null) parts.push("$" + Number(s.costUsd).toFixed(2));
+  return parts.length ? "（" + parts.join(" · ") + "）" : "";
+}
+
+// claude 模式主流程：委托 → 等待 → 按产物验收（patches/report 是硬标准，退出码仅参考）
+async function delegateClaude(rcx, graph) {
+  const { runDir, repoDir } = rcx;
+  const patchesAbs = join(runDir, "06-implementation", "patches");
+  const taskAbs = join(runDir, "06-implementation", "session-task.md");
+  const reportAbs = join(runDir, "06-implementation", "coder-report.json");
+  let total = null;
+  try { total = JSON.parse(graph).nodes.length; } catch { /* 任务总数仅用于进度展示 */ }
+  const prompt = [
+    "# 角色", "你是 issue2pr 流水线在 P6 阶段委托的外部编码会话（Claude Code）。按任务包完成代码修复并产出标准补丁。", "",
+    "# 输入", "- 目标仓库（当前工作目录）：" + repoDir,
+    "- 任务包：" + taskAbs + " —— 先完整阅读，严格按其中 TaskGraph 的节点与依赖执行", "",
+    "# 产物契约（流水线据此验收，缺一不可）",
+    "1. 按依赖顺序逐节点实施，直接修改目标仓库文件（最小 diff、不越权重构、不新增无关文件、禁止 git commit）；",
+    "2. 每完成一个节点，导出该节点补丁并恢复工作区：",
+    "   git add -A",
+    '   git diff --cached --binary > "' + patchesAbs + '\\0001-T1.diff"  ← 依次 0001/0002… 按节点编号',
+    "   git reset -q && git checkout -- . && git clean -fdq   ← 必须保持工作区干净（P7 会重新应用这些 diff）",
+    "3. 全部节点完成后写报告 " + reportAbs + "（patch 路径必须是相对 run 目录的全路径，与下方一致）：",
+    '   {"mode":"claude-code","patches":[{"node":"T1","patch":"06-implementation/patches/0001-T1.diff","note":"一句话"}],"summary":"总体说明"}', "",
+    "完成后只输出一行总结。",
+  ].join("\n");
+
+  const pm = paramsOf(rcx, "P6");
+  const bin = resolveClaudeBin(pm.claudeBin);
+  // 超时优先级：阶段配置（params.claudeTimeoutMin）> 环境变量 ISSUE2PR_CLAUDE_TIMEOUT_MS > 默认 2 小时
+  const claudeTimeoutMs = (Number(pm.claudeTimeoutMin) > 0 ? Number(pm.claudeTimeoutMin) * 60000 : 0)
+    || Number(process.env.ISSUE2PR_CLAUDE_TIMEOUT_MS) || 2 * 60 * 60 * 1000;
+  // 执行状态落盘 run.json（UI 3s 轮询可见；rcx.run 是驱动循环持有的活引用，advance 后续 saveRun 会保留该字段）
+  const setExec = (patch) => {
+    if (!rcx.run) return;
+    rcx.run.externalExec = Object.assign({ executor: "claude-code" }, rcx.run.externalExec, patch);
+    saveRun(runDir, rcx.run);
+  };
+  setExec({ status: "running", bin, startedAt: new Date().toISOString() });
+  logEvent(rcx, { kind: "tool", name: "委托 Claude Code 执行任务包", detail: "cwd=" + repoDir + " · bin=" + bin });
+
+  const runner = rcx.spawnExternal || runClaude; // 测试注入点
+  // 过程可见：等待期间周期采样 patch 数，变化即记过程事件（UI 阶段详情"过程"面板实时可看）
+  let lastN = 0;
+  const progressTimer = setInterval(() => {
+    const n = countPatches(runDir);
+    if (n !== lastN) {
+      lastN = n;
+      const latest = existsSync(patchesAbs) ? readdirSync(patchesAbs).filter((f) => f.endsWith(".diff")).sort().slice(-1)[0] : "";
+      logEvent(rcx, { kind: "tool", name: "Claude Code 进度 " + n + (total ? "/" + total : ""),
+        detail: latest ? "最新产出 " + latest : "" });
+    }
+  }, rcx.externalProgressIntervalMs || 30000);
+  let r;
+  try {
+    r = await runner({
+      bin, repoDir, addDir: runDir, prompt,
+      timeoutMs: claudeTimeoutMs,
+      onChild: (c) => activeExternals.set(runDir, c),
+    });
+  } finally {
+    clearInterval(progressTimer);
+    activeExternals.delete(runDir);
+  }
+
+  // stdout（--output-format json 的 result 对象）与 stderr 留档，供失败诊断
+  writeArtifact(runDir, "06-implementation/external-exec.log",
+    "bin=" + bin + "\nexit=" + r.code + (r.error ? "\nerror=" + r.error : "") + (r.timeout ? "\ntimeout=true" : "")
+    + "\n--- stdout ---\n" + (r.stdout || "") + "\n--- stderr ---\n" + (r.stderr || ""));
+
+  // 从 claude headless 的 JSON 输出提取统计（耗时/轮次/费用/总结），落盘 externalExec 供 UI 展示
+  let stats = null;
+  try {
+    const j = JSON.parse((r.stdout || "").trim());
+    if (j && typeof j === "object") {
+      stats = { turns: j.num_turns, costUsd: j.total_cost_usd, durationMs: j.duration_ms, result: String(j.result || "").slice(0, 1000) };
+    }
+  } catch { /* stdout 非 JSON（版本差异/异常输出）时无统计 */ }
+
+  if (sessionPatchesReady(runDir)) {
+    setExec({ status: "done", exitCode: r.code, stats, finishedAt: new Date().toISOString() });
+    logEvent(rcx, { kind: "tool", name: "Claude Code 执行完成",
+      detail: countPatches(runDir) + " 份 patch 已就绪（exit=" + r.code + "）" + statsSummary(stats) });
+    return { artifact: "06-implementation/", summary: "Claude Code 已执行任务包：" + countPatches(runDir) + " 份 patch + report，等待人工复核" + statsSummary(stats) };
+  }
+
+  const reason = r.error || (r.timeout ? "超时被终止" : "退出码 " + r.code + (r.stderr ? "：" + String(r.stderr).slice(0, 300) : ""));
+  setExec({ status: r.error ? "skipped" : "failed", exitCode: r.code, stats, error: String(reason).slice(0, 500), finishedAt: new Date().toISOString() });
+  logEvent(rcx, { kind: "tool", name: "Claude Code 执行未产出补丁", detail: String(reason).slice(0, 500), ok: false });
+  // 回退等人工：保持 external 语义（UI 显示"等外部执行"并拦截空产物 approve），人可接管 session-task.md
+  return { artifact: "06-implementation/session-task.md", summary: "Claude Code 执行未成功（" + String(reason).slice(0, 200) + "），回退等待人工会话", external: true };
+}
+
+export default async function execute(rcx) {
+  const graph = requireArtifact(rcx.runDir, "05-task-graph.json", readArtifact);
+
+  if (rcx.p6Mode === "session" || rcx.p6Mode === "claude") {
+    writeArtifact(rcx.runDir, "06-implementation/session-task.md", buildSessionTask(graph));
+    if (rcx.p6Mode === "session") {
+      logEvent(rcx, { kind: "info", name: "session 模式：任务包已生成",
+        detail: "06-implementation/session-task.md 已写入；等 DSH 会话产出 patches/ 后，在复核门通过再进 P7" });
+      // external：本阶段只产出任务包，实施由外部 DSH 会话完成（advance 据此显示"等外部执行"并拦截空 patches 的 approve）
+      return { artifact: "06-implementation/session-task.md", summary: "任务包已生成，等待外部 DSH 会话执行", external: true };
+    }
+    return await delegateClaude(rcx, graph);
+  }
+
+  // 1) Planner 派单
+  const plan = await rcx.llm.completeJson({
+    system: sysOf(rcx, "P6", "planner"),
+    user: `【TaskGraph】\n${graph}\n\n【输出契约】{"assignments":[{"node":"T1","file":"相对路径","note":"实现要点"}]}`,
+    required: ["assignments"],
+  });
+  logEvent(rcx, { kind: "info", name: "Planner 派单 " + plan.assignments.length + " 个任务",
+    detail: plan.assignments.map((a) => a.node + " → " + a.file).join("；") });
+
+  // 2) 并行 Coder
+  const patches = await Promise.all(plan.assignments.map(async (a, i) => {
+    const current = readRepoFile(rcx.repoDir, a.file);
+    const diff = await rcx.llm.complete({
+      system: sysOf(rcx, "P6", "coder"),
+      user: `【任务 ${a.node}】${a.note || ""}\n【当前文件 ${a.file}】\n\`\`\`\n${current}\n\`\`\`\n【打回意见】${rcx.reviewComment || "无"}\n只输出 unified diff。`,
+    });
+    const rel = `06-implementation/patches/${String(i + 1).padStart(4, "0")}-${slugify(a.node + "-" + a.file).slice(0, 40)}.diff`;
+    writeArtifact(rcx.runDir, rel, diff);
+    logEvent(rcx, { kind: "tool", name: "Coder " + a.node + " 产出 diff", detail: rel + "（" + diff.length + " 字）" });
+    return { node: a.node, file: a.file, patch: rel, content: diff };
+  }));
+
+  // 3) Reviewer 门控（附带 diff 文本，杜绝盲审——Task 7 修复）
+  const review = await rcx.llm.completeJson({
+    system: sysOf(rcx, "P6", "reviewer"),
+    user: `【diff 清单】\n${patches.map((p) => `### ${p.patch}\n\n${(p.content || "").slice(0, 4000)}\n`).join("\n")}\n【输出契约】{"verdict":"pass|fail","notes":"理由"}`,
+    required: ["verdict"],
+  });
+  logEvent(rcx, { kind: "info", name: "Reviewer 门控 " + review.verdict, detail: review.notes || "", ok: review.verdict === "pass" });
+  if (review.verdict !== "pass") throw new Error("P6 Reviewer 拒绝: " + (review.notes || "无理由"));
+
+  const report = { mode: "builtin", planner: plan, patches, reviewer: review, discipline: ["tdd", "minimal-diff", "verify-before-claim"], at: timestamp() };
+  writeArtifact(rcx.runDir, "06-implementation/coder-report.json", JSON.stringify(report, null, 2));
+  return { artifact: "06-implementation/", summary: `${patches.length} 份 diff，reviewer pass` };
+}

package/lib/stages/p7-patch.js

@@ -0,0 +1,73 @@
+// lib/stages/p7-patch.js — 调研 §8/§11：diff 为原子单位；回滚只反应用 Agent patch
+// git 一律走异步子进程：execFileSync 会阻塞 Node 事件循环，期间 stop/删除/轮询请求全部排队。
+import { readFileSync, existsSync, readdirSync } from "node:fs";
+import { execFile } from "node:child_process";
+import { join } from "node:path";
+import { appendArtifactLine } from "../store.js";
+import { logEvent } from "./helpers.js";
+
+// 带stdin输入的异步执行（git apply - 用 stdin 收 diff）
+function execStdin(cmd, args, opts, input) {
+  return new Promise((resolve, reject) => {
+    const child = execFile(cmd, args, { ...opts, stdio: ["pipe", "pipe", "pipe"], maxBuffer: 16 * 1024 * 1024 }, (err, stdout, stderr) => {
+      if (err) { err.stderr = String(stderr || err.message); reject(err); }
+      else resolve(String(stdout || ""));
+    });
+    child.stdin.on("error", () => {}); // 子进程异常退出时的 EPIPE 不掩盖主错误
+    child.stdin.end(input);
+  });
+}
+
+async function hashRepo(repoDir) {
+  try {
+    return (await execStdin("git", ["rev-parse", "HEAD"], { cwd: repoDir }, "")).trim();
+  } catch { return "nogit"; }
+}
+
+// patch 清单：优先 coder-report.json（builtin 写 patches 字段；claude 委托写 tasks 字段且
+// patch 路径相对 06-implementation/，这里统一归一化为相对 runDir 全路径）；
+// report 缺失时退化为扫描目录（文件名序 = 应用序）。
+function collectPatches(runDir) {
+  const normalize = (p) => !p ? null
+    : { patch: p.startsWith("06-implementation/") ? p : "06-implementation/" + p.replace(/^\/+/, "") };
+  const reportPath = join(runDir, "06-implementation", "coder-report.json");
+  if (existsSync(reportPath)) {
+    const report = JSON.parse(readFileSync(reportPath, "utf8"));
+    const list = Array.isArray(report.patches) ? report.patches
+      : Array.isArray(report.tasks) ? report.tasks.map((t) => ({ patch: t.patch }))
+      : [];
+    return list.map((p) => normalize(p && p.patch)).filter(Boolean);
+  }
+  const dir = join(runDir, "06-implementation", "patches");
+  if (!existsSync(dir)) return [];
+  return readdirSync(dir).filter((f) => f.endsWith(".diff")).sort()
+    .map((f) => ({ patch: "06-implementation/patches/" + f }));
+}
+
+export default async function execute(rcx) {
+  const patches = collectPatches(rcx.runDir);
+  if (!patches.length) throw new Error("P7 无 patch 可应用（06-implementation/patches/ 为空且无 coder-report.json）");
+  for (const p of patches) {
+    const diff = readFileSync(join(rcx.runDir, p.patch), "utf8");
+    const hashBefore = await hashRepo(rcx.repoDir);
+    const t0 = Date.now();
+    try {
+      await execStdin("git", ["apply", "--check", "-"], { cwd: rcx.repoDir }, diff);
+      await execStdin("git", ["apply", "-"], { cwd: rcx.repoDir }, diff);
+    } catch (e) {
+      logEvent(rcx, { kind: "git", name: "git apply " + p.patch, detail: String(e.stderr || e.message), ms: Date.now() - t0, ok: false });
+      throw new Error("Patch 应用失败(" + p.patch + "): " + String(e.stderr || e.message));
+    }
+    logEvent(rcx, { kind: "git", name: "git apply " + p.patch, detail: diff.length + " 字 diff · 基线 " + hashBefore.slice(0, 8), ms: Date.now() - t0 });
+    appendArtifactLine(rcx.runDir, "ledger/patch-ledger.jsonl", { patch: p.patch, hashBefore, appliedAt: new Date().toISOString() });
+  }
+  return { artifact: "ledger/patch-ledger.jsonl", summary: `应用 ${patches.length} 份 patch` };
+}
+
+export async function rollbackLedger(runDir, repoDir, lineNo) {
+  const lines = readFileSync(join(runDir, "ledger", "patch-ledger.jsonl"), "utf8").trim().split("\n");
+  const entry = JSON.parse(lines[lineNo]);
+  const diff = readFileSync(join(runDir, entry.patch), "utf8");
+  await execStdin("git", ["apply", "-R", "-"], { cwd: repoDir }, diff);
+  appendArtifactLine(runDir, "ledger/patch-ledger.jsonl", { rollbackOf: lineNo, at: new Date().toISOString() });
+}

package/lib/stages/p8-test-runner.js

@@ -0,0 +1,44 @@
+// lib/stages/p8-test-runner.js — 调研 §9 铁律：结果必须来自真实工具执行
+// exec 用异步版本：execSync 最长可阻塞事件循环 5 分钟，期间 stop/删除/轮询请求全部排队无响应。
+import { exec } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { writeArtifact } from "../store.js";
+import { logEvent } from "./helpers.js";
+import { DEFAULT_TEST_TIMEOUT_MS } from "../stageConfig.js";
+
+function detectCommand(repoDir) {
+  const pkg = join(repoDir, "package.json");
+  if (existsSync(pkg) && JSON.parse(readFileSync(pkg, "utf8")).scripts?.test) return "npm test";
+  throw new Error("未配置测试命令（project.testCommand 为空且无法自动探测）");
+}
+
+export default async function execute(rcx) {
+  // 超时可配（配置页 P8；0/未配置 = 默认 5 分钟）
+  const p8cfg = typeof rcx.stageCfgOf === "function" ? rcx.stageCfgOf("P8") : null; // 裸 rcx（单测）回落默认
+  const timeoutMs = (p8cfg && p8cfg.timeoutMs) || DEFAULT_TEST_TIMEOUT_MS;
+  const runCommand = (command, cwd) => new Promise((resolve) => {
+    const t0 = Date.now();
+    exec(command, { cwd, encoding: "utf8", timeout: timeoutMs, maxBuffer: 32 * 1024 * 1024,
+      windowsHide: true }, (err, stdout, stderr) => {
+      if (err) {
+        const killed = err.killed || err.signal === "SIGTERM";
+        resolve({ code: err.code ?? 1, ms: Date.now() - t0,
+          out: String(stdout || "") + String(stderr || "") + (killed ? "\n（超时被终止）" : "") });
+      } else {
+        // 与旧 execSync 语义一致：成功路径只保留 stdout
+        resolve({ code: 0, ms: Date.now() - t0, out: String(stdout || "") });
+      }
+    });
+  });
+  const command = rcx.project?.testCommand || detectCommand(rcx.repoDir);
+  logEvent(rcx, { kind: "test", name: command, detail: `开始执行（最长 ${Math.round(timeoutMs / 60000)} 分钟）` });
+  const { code, ms, out } = await runCommand(command, rcx.repoDir);
+  // 完整输出持久化（成功与失败路径均落盘、不截断），排障可回溯；07-test-report.json 只留末尾 4000 字
+  writeArtifact(rcx.runDir, "08-test-output.txt", out);
+  const report = { command, exitCode: code, tail: out.slice(-4000), passed: code === 0, ranAt: new Date().toISOString() };
+  writeArtifact(rcx.runDir, "07-test-report.json", JSON.stringify(report, null, 2));
+  logEvent(rcx, { kind: "test", name: command, detail: out.slice(-1200) || "（无输出）", ms, ok: code === 0 });
+  if (!report.passed) throw new Error("测试失败(exitCode=" + code + ")，详见 07-test-report.json");
+  return { artifact: "07-test-report.json", summary: `exitCode=0` };
+}

package/lib/stages/p9-reviewer.js

@@ -0,0 +1,41 @@
+// lib/stages/p9-reviewer.js — 调研 §9：Review 是 PRBuilder 的前置门控
+import { writeArtifact, readArtifact } from "../store.js";
+import { requireArtifact, maybeDelegate } from "./helpers.js";
+import { sysOf, paramsOf } from "../stageConfig.js";
+
+export default async function execute(rcx) {
+  const delegated = await maybeDelegate(rcx, "P9");
+  if (delegated) return delegated;
+  const coderReportRaw = readArtifact(rcx.runDir, "06-implementation/coder-report.json") || "{}";
+  const tests = requireArtifact(rcx.runDir, "07-test-report.json", readArtifact);
+  const diffChars = paramsOf(rcx, "P9").diffChars;
+
+  // 读盘取 diff 全文（修复轮：Diff 范围裁决必须看到真实 patch，而非 coder 自评）
+  // coder-report 无可用清单或 diff 文件读不到 → 降级为空清单，不抛错
+  let coderReport = {};
+  try { coderReport = JSON.parse(coderReportRaw); } catch { coderReport = {}; }
+  // builtin 写 patches 字段；claude 委托写 tasks 字段——两者都认，取到清单为止
+  const patchList = Array.isArray(coderReport.patches) ? coderReport.patches
+    : Array.isArray(coderReport.tasks) ? coderReport.tasks : [];
+  const diffs = patchList
+    .map((p) => {
+      const name = p && typeof p.patch === "string" ? p.patch.split(/[\\/]+/).pop() : "";
+      if (!name) return null;
+      const rel = `06-implementation/patches/${name}`;
+      const text = readArtifact(rcx.runDir, rel);
+      // 每份只取头部 diffChars 字（文件路径 + hunk 概览足够范围裁决）：
+      // 15 份 × 4000 字曾让 prompt 达 45K 字，实测 LLM 直接空响应（上限可在「配置」调整）
+      return text == null ? null : `### ${rel}\n\n${text.slice(0, diffChars)}\n`;
+    })
+    .filter((s) => s != null)
+    .join("\n");
+
+  const out = await rcx.llm.completeJson({
+    system: sysOf(rcx, "P9"),
+    user: `【coder-report】\n${coderReportRaw}\n【Diff 全文】\n${diffs || "（无 diff 文件）"}\n【test-report】\n${tests}\n【输出契约】{"diff_scope":"结论","api_security":"结论","tests":"结论","verdict":"pass|fail"}\n【打回意见】${rcx.reviewComment || "无"}`,
+    required: ["diff_scope", "api_security", "tests", "verdict"],
+  });
+  writeArtifact(rcx.runDir, "08-review-report.json", JSON.stringify(out, null, 2));
+  if (out.verdict !== "pass") throw new Error("Reviewer 门控未过: " + (out.diff_scope || ""));
+  return { artifact: "08-review-report.json", summary: "三维门控 pass" };
+}

package/lib/store.js

@@ -0,0 +1,153 @@
+// lib/store.js — 目录与命名规则（唯一允许写盘的地方）
+import { appendFileSync, chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync, renameSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, normalize, sep } from "node:path";
+import { validateStageConfig } from "./stageConfig.js";
+
+export function defaultDataRoot() { return join(homedir(), ".dsh", "issue2pr"); }
+
+export function slugify(text) {
+  const s = String(text).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return s || "run";
+}
+
+export function timestamp(d = new Date()) {
+  const p = (n) => String(n).padStart(2, "0");
+  return `${d.getFullYear()}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}${p(d.getSeconds())}`;
+}
+
+export function validateProject(p) {
+  if (!p || typeof p.name !== "string" || !p.name.trim()) return [false, "缺少项目名称"];
+  if (!/^[a-z0-9-]+$/.test(p.slug || "")) return [false, "slug 只允许小写字母/数字/连字符"];
+  if (!Array.isArray(p.repos) || p.repos.length === 0) return [false, "至少一个 git 仓库"];
+  for (const r of p.repos) {
+    const uri = typeof r === "string" ? r : r?.uri;
+    if (typeof uri !== "string" || !uri.trim()) return [false, "仓库条目必须是 uri 字符串或 { uri }"];
+  }
+  if (!Array.isArray(p.triggers)) return [false, "triggers 必须是数组"];
+  for (const t of p.triggers) {
+    if (!t || (t.kind !== "requirement" && t.kind !== "issue") || typeof t.uri !== "string" || !t.uri.trim())
+      return [false, "触发源 kind 仅允许 requirement|issue 且 uri 必填"];
+  }
+  if (!["every", "key-only", "auto"].includes(p.reviewMode)) return [false, "reviewMode 仅允许 every|key-only|auto"];
+  if (!["builtin", "session", "claude"].includes(p.p6Mode)) return [false, "p6Mode 仅允许 builtin|session|claude"];
+  const [scOk, scMsg] = validateStageConfig(p.stageConfig);
+  if (!scOk) return [false, scMsg];
+  return [true, "ok"];
+}
+
+const projectDir = (root, slug) => join(root, "projects", slug);
+const projectFile = (root, slug) => join(projectDir(root, slug), "project.json");
+
+export function saveProject(root, p) {
+  const [ok, msg] = validateProject(p);
+  if (!ok) throw new Error(msg);
+  // 规范化：repos 允许传字符串或 { uri }，落盘统一为 { uri }，下游（clone 等）不用再做双形态判断
+  const norm = { ...p, repos: p.repos.map((r) => (typeof r === "string" ? { uri: r.trim() } : { uri: String(r.uri).trim() })) };
+  mkdirSync(projectDir(root, norm.slug), { recursive: true });
+  const tmp = projectFile(root, norm.slug) + ".tmp";
+  writeFileSync(tmp, JSON.stringify({ ...norm, updatedAt: new Date().toISOString() }, null, 2));
+  renameSync(tmp, projectFile(root, norm.slug));
+}
+
+export function loadProject(root, slug) {
+  if (!existsSync(projectFile(root, slug))) return null;
+  return JSON.parse(readFileSync(projectFile(root, slug), "utf8"));
+}
+
+export function listProjects(root) {
+  const dir = join(root, "projects");
+  if (!existsSync(dir)) return [];
+  return readdirSync(dir).flatMap((slug) => {
+    const p = loadProject(root, slug);
+    return p ? [p] : [];
+  });
+}
+
+// —— UI 偏好（当前仅 lastProject）：宿主 webview 的 localStorage 不跨软件重启持久，
+// 选中记忆以此文件为兜底；localStorage 命中时零延迟、不请求。
+export function loadUiState(root) {
+  const file = join(root, "ui-state.json");
+  if (!existsSync(file)) return {};
+  try { return JSON.parse(readFileSync(file, "utf8")) || {}; }
+  catch { return {}; }
+}
+
+export function saveUiState(root, state) {
+  const tmp = join(root, "ui-state.json.tmp");
+  writeFileSync(tmp, JSON.stringify(state, null, 2));
+  renameSync(tmp, join(root, "ui-state.json"));
+}
+
+export function newRunId(triggerUri, now = new Date()) {
+  const base = String(triggerUri).split(/[\\/]/).pop().slice(0, 24);
+  return `${timestamp(now)}-${slugify(base)}`;
+}
+
+export function runDirOf(root, slug, runId) {
+  if (!/^\d{8}-\d{6}-[a-z0-9-]+$/.test(runId)) throw new Error("非法 runId: " + runId);
+  return join(projectDir(root, slug), "runs", runId);
+}
+
+export function createRun(root, slug, trigger) {
+  const runId = newRunId(trigger.uri);
+  const runDir = runDirOf(root, slug, runId);
+  if (existsSync(runDir)) throw new Error("Run 已存在: " + runId);
+  for (const sub of ["", "ledger", "trace", "reviews", "spec-changes"])
+    mkdirSync(join(runDir, sub), { recursive: true });
+  return { runId, runDir };
+}
+
+function safeJoin(runDir, rel) {
+  const full = normalize(join(runDir, rel));
+  if (full !== runDir && !full.startsWith(runDir + sep)) throw new Error("非法路径: " + rel);
+  return full;
+}
+
+export function writeArtifact(runDir, rel, content) {
+  const full = safeJoin(runDir, rel);
+  mkdirSync(join(full, ".."), { recursive: true });
+  writeFileSync(full, content);
+}
+
+export function readArtifact(runDir, rel) {
+  const full = safeJoin(runDir, rel);
+  return existsSync(full) ? readFileSync(full, "utf8") : null;
+}
+
+// 追加一行 JSONL（trace 事件流等）；目录不存在自动建
+export function appendArtifactLine(runDir, rel, obj) {
+  const full = safeJoin(runDir, rel);
+  mkdirSync(join(full, ".."), { recursive: true });
+  appendFileSync(full, JSON.stringify(obj) + "\n");
+}
+
+// 删除整棵目录（项目 / Run）。Windows 下 git 克隆的 .git/objects 文件是只读的，
+// 直接 rmSync 会 EPERM；先递归清只读位，再带重试删除（杀毒/索引器短暂占用）。
+export function rmTree(dir) {
+  if (!existsSync(dir)) return;
+  try {
+    (function clearReadOnly(d) {
+      for (const name of readdirSync(d)) {
+        const full = join(d, name);
+        const st = statSync(full);
+        if (st.isDirectory()) clearReadOnly(full);
+        else if (!(st.mode & 0o200)) chmodSync(full, 0o666);
+      }
+    })(dir);
+  } catch { /* 清位尽力而为，失败仍尝试删除 */ }
+  rmSync(dir, { recursive: true, force: true, maxRetries: 5, retryDelay: 120 });
+}
+
+export function listRunTree(runDir) {
+  const out = [];
+  (function walk(dir) {
+    for (const name of readdirSync(dir)) {
+      const full = join(dir, name);
+      const st = statSync(full);
+      if (st.isDirectory()) walk(full);
+      else out.push({ path: full.slice(runDir.length + 1).split(sep).join("/"), size: st.size, mtimeMs: st.mtimeMs });
+    }
+  })(runDir);
+  return out.sort((a, b) => a.path.localeCompare(b.path));
+}

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "dsh-issue2pr",
+  "version": "0.1.0",
+  "description": "Issue-to-PR 可验证交付链：项目配置 → 11 阶段流水线 → 人工复核 → PR 说明（DSH 全局插件）",
+  "type": "module",
+  "main": "./index.js",
+  "exports": { ".": "./index.js", "./client": "./client.js", "./package.json": "./package.json" },
+  "scripts": { "test": "node --test \"tests/**/*.test.js\"" },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/LONGSASASASASA/dsh-issue2pr.git"
+  },
+  "keywords": ["dsh", "dsh-plugin", "deepseek-harness", "issue", "pull-request", "pipeline", "code-review", "cordis"],
+  "author": "LONGSASASASASA",
+  "license": "MIT",
+  "files": ["index.js", "client.js", "lib/", "cordis.patch.yml", "docs/assets/"],
+  "publishConfig": { "registry": "https://registry.npmjs.org/" },
+  "dsh": {
+    "bundle": { "patch": "./cordis.patch.yml" },
+    "client": {
+      "platform": "web",
+      "inject": ["@deepseek-ai/dsh-client-runtime", "@deepseek-ai/dsh-client-locale", "@deepseek-ai/dsh-client-ui-settings"]
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-client-runtime": ">=0.1.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.0-rc.2"
+  }
+}