duaer-spec 0.27.0 → 0.27.2

package/CHANGELOG.md

@@ -2,6 +2,75 @@
 
 ## Unreleased
 
+## 0.27.2 — 2026-09-23
+
+### Fix: bottom-via edge labels stay under the floor
+
+- Bottom/top via labels use `labelAt` on the via corridor instead of
+  `labelDy: -36`, which pulled「改稿」up onto mid-row boxes like `artifact`
+
+### Fix: architecture corridor detour when edges cross stacked nodes
+
+- Auto-routing validates candidate corridors (bottom/top wrap, side, gutter)
+  so detours stay clear of unrelated boxes — not only avoid bottom exits
+- Vertical edge labels use `labelAt` in the inter-box gap
+- Fixes Archify `clean-flow/edge-through-node` and label-overlap failures on stacked layouts
+
+### Fix: create project uses a unique short name under the parent only
+
+- Create form no longer accepts absolute paths; folder name is a short name under the product parent
+- Duplicate on-disk folders and duplicate project titles are refused
+- Open existing projects from the list or Browse to open; create and open are separate
+
+### Fix: creating a project no longer reuses an existing directory
+
+- Create mode refuses when the target folder already exists on disk
+- Open an existing project from the list or browse; do not create over it
+- Hint copy tells the operator to rename or open the existing project
+
+### Feat: FDE-08 performance budget before confirm
+
+- Feature confirm must name LCP, INP, bundle size, virtualized long lists, a weak-network check, and a large-data check
+- A vague speed line such as "pretty fast" fails local validate
+- Modules with no page performance requirement may write that opt-out
+- Kickoff schedules the budget before implement, after the environment probe, data precheck, and external-dependency board when those exist
+- The desk records the budget; it does not run a customer performance lab
+
+## 0.27.1 — 2026-09-21
+
+### Feat: FDE-05 external dependency board before kickoff
+
+- Feature confirm requires a blocker, SLA, backup mock, and parallel path,
+  or an explicit no-dependency opt-out
+- Kickoff adds that board before implement when a third party, ERP, or SSO
+  is declared
+
+### Feat: FDE-06 import precheck before kickoff
+
+- Feature confirm requires a field mapping, an import failure list, and an
+  export for cleanup, or an explicit no-import opt-out
+- Kickoff adds a data-precheck task before implement when an import is
+  declared
+
+### Feat: FDE-03 environment checklist before kickoff
+
+- Feature confirm requires DNS, TLS, CORS, auth, and third-party reachability
+  recorded as passed, or an explicit no-customer opt-out
+- A failed probe blocks confirm
+- Kickoff adds an environment-probe task before implement when a customer
+  environment is declared
+
+### Feat: FDE-04 browser matrix must include evidence
+
+- Device matrix needs two named browsers or domestic clients, screenshot or
+  cloud evidence, and a polyfill or fallback
+- Kickoff adds a compat-evidence task per confirmed module
+
+### Docs: fast iteration uses patch versions
+
+- Default ship bump is the last number (`0.27.1`, `0.27.2`, …)
+- Next release after `0.27.0` is `0.27.1`; do not jump the minor on every ship
+
 ## 0.27.0 — 2026-09-21
 
 ### Feat: FDE-07 UAT pack on confirm

package/bin/duaer-live.mjs

@@ -54,13 +54,33 @@ import {
 } from "../web/live-dev/baseline.mjs";
 import { apiContractIsFilled, apiContractDeclaresNoHttp } from "../web/live-dev/api-contract.mjs";
 import { missingUatCases, uatMentionsErrorCode } from "../web/live-dev/uat-pack.mjs";
+import { missingCompatMatrix } from "../web/live-dev/compat-matrix.mjs";
+import {
+  envChecklistDeclaresNoCustomer,
+  missingEnvChecklist,
+} from "../web/live-dev/env-check.mjs";
+import {
+  dataPrecheckDeclaresNoImport,
+  missingDataPrecheck,
+} from "../web/live-dev/data-precheck.mjs";
+import {
+  externalDepsDeclaresNone,
+  missingExternalDeps,
+} from "../web/live-dev/external-deps.mjs";
+import {
+  missingPerfBudget,
+  perfBudgetDeclaresNone,
+} from "../web/live-dev/perf-budget.mjs";
 import { allocateUniqueBranch } from "./live-worktree-name.mjs";
 import {
   ensureGitInstalled,
   CURSOR_INSTALL_CMD as TOOLING_CURSOR_INSTALL,
 } from "./live-tooling.mjs";
 import {
+  assertProductDirFreeForCreate,
+  assertProjectIdentityFreeForCreate,
   ensureProductDir,
+  resolveCreateProductRepoPath,
   resolveProductRepoPath,
 } from "./live-repo-path.mjs";
 import {
@@ -738,10 +758,14 @@ const SYSTEM_PROMPT = `你是「Duaer-spec FDE」需求助手。通过多轮对
 1. 缺关键可执行信息时，每次只问 1 个卡点问题；信息够时不要用「请从多种风格/方向里选一个」代替可执行的验收标准。
 2. 系统可能很大：边聊边发现模块清单 modules（id/title/status）。对话可以乱跳模块；把内容写进对应模块的确认卡字段，不要强迫用户按顺序说完。
 3. 每个功能模块维护确认卡字段：goal、outOfScope、acceptance、assumptions，以及 FDE-01 基线三块与 FDE-02 契约：
-   - deviceMatrix = 浏览器/设备矩阵（具体版本，如「Chrome 最近两版、手机 Safari」；禁止只写「主流浏览器」）
+   - deviceMatrix = 浏览器/设备矩阵：至少两个具体目标（如 Chrome 最近两版、手机 Safari、统信 UOS）；禁止只写「主流浏览器」。必须写证据位置（截图/录屏或云测）和降级或 Polyfill。
    - criticalPaths = 联调必须覆盖的主路径（短列表）
    - exceptionCases = UAT 包，必须同时覆盖空态、失败、权限不足、超时、重试；有接口契约时写出对应错误码或 HTTP status（禁止只写一类）
    - apiContract = 接口契约路径（如 openapi/openapi.yaml 或 src/types/api.ts），或明确写「本模块无 HTTP API」
+   - envChecklist = 环境检查：DNS、TLS、CORS、鉴权、第三方可达须全部写明且通过；无客户联调则写「无客户联调环境」。任一未通过不得开工
+   - dataPrecheck = 数据预检：字段映射、导入预检失败清单、可导出给业务清洗；无导入则写「本模块无导入」
+   - externalDeps = 外部依赖：阻塞项、SLA、备用 Mock、并行路径；无第三方/ERP/SSO 则写「本模块无外部依赖」
+   - perfBudget = 性能预算：LCP、INP、包体、长列表虚拟滚动、弱网、大数据压测；写「挺快的」不合格；无页面则写「本模块无页面性能要求」
    用户没提时：先根据产品形态填合理默认并写进 JSON，再在正文用一句话请用户改；不要长期留空。小项目可只有一个模块（id=main）。
 4. acceptance 必须可客观检查（打开何处、看到什么、哪条命令通过）；禁止只写「更好用/更好看」。
 5. ready=true 只表示**当前 active 模块**可确认，且上述字段都已非空、验收可检查。不是整系统开工。不要催用户立刻派工。
@@ -751,7 +775,7 @@ const SYSTEM_PROMPT = `你是「Duaer-spec FDE」需求助手。通过多轮对
    - 先写对用户说的纯文本（可多行，不要 JSON；正文里不要再列一遍选项清单）
    - 然后单独一行：<<<JSON>>>
    - 再输出一个 JSON 对象（不要 markdown 围栏）：
-{"modules":[{"id":"auth","title":"登录","status":"draft","goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"..."}],"activeModuleId":"auth","goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","ready":false,"options":["可选A","可选B"]}
+{"modules":[{"id":"auth","title":"登录","status":"draft","goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","envChecklist":"...","dataPrecheck":"...","externalDeps":"...","perfBudget":"..."}],"activeModuleId":"auth","goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","envChecklist":"...","dataPrecheck":"...","externalDeps":"...","perfBudget":"...","ready":false,"options":["可选A","可选B"]}
 说明：顶层字段与 ready 对应 activeModuleId 那一模块；modules 为完整清单（可增删改名）。`;
 
 const BUG_CHAT_PROMPT = `你是「Duaer-spec FDE」缺陷助手。用户要修 bug，不是做新功能。通过多轮对话整理成一张可派工的缺陷卡，使数字员工能复现、修复并回归。
@@ -786,6 +810,10 @@ const REVISE_CHAT_PROMPT = `你是「Duaer-spec FDE」改进对话助手。用
    - assumptions = 用户不满意的原因 / 背景摘要
    - deviceMatrix / criticalPaths / exceptionCases = 若本轮改动触及联调范围则更新；否则可沿用或写「同基线」
    - apiContract = 若触及接口则更新路径，或写「本模块无 HTTP API」/「同基线」
+   - envChecklist = 若触及客户环境则更新探测结果，或写「无客户联调环境」/「同基线」
+   - dataPrecheck = 若触及导入则更新映射与失败清单，或写「本模块无导入」/「同基线」
+   - externalDeps = 若触及第三方/ERP/SSO 则更新阻塞项、SLA、备用 Mock、并行路径，或写「本模块无外部依赖」/「同基线」
+   - perfBudget = 若有页面则更新 LCP、INP、包体、长列表虚拟滚动、弱网、大数据压测，或写「本模块无页面性能要求」/「同基线」
 3. 字段够清楚且可执行时 ready=true（确认前系统会自动校验）。缺基线/契约字段时先填合理默认或用 options 点选。
 4. 不要写代码。不要立刻派工。不要假设仓库路径。
 5. 只要问题是让用户做选择，必须在 options 填 2～5 个短选项（≤20字）；界面可点选发送。禁止只让用户手打或「请回复数字」。
@@ -793,7 +821,7 @@ const REVISE_CHAT_PROMPT = `你是「Duaer-spec FDE」改进对话助手。用
    - 先写对用户说的纯文本（正文不要再列选项清单）
    - 然后单独一行：<<<JSON>>>
    - 再输出 JSON（不要 markdown 围栏）：
-{"goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","ready":false,"options":["可选A","可选B"]}`;
+{"goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","envChecklist":"...","dataPrecheck":"...","externalDeps":"...","perfBudget":"...","ready":false,"options":["可选A","可选B"]}`;
 
 const ARCHITECTURE_CHAT_PROMPT = `你是「Duaer-spec FDE」架构助手。需求已确认。通过多轮对话设计系统架构图，供数字员工按图开发。系统会把 JSON 自动渲染成图，用户看不到原始 JSON。
 
@@ -819,25 +847,29 @@ const ACCEPT_PROMPT = `你是「Duaer-spec FDE」需求验收官。用户即将
 2. acceptance 是否可客观检查：必须写清「打开/看到/点击/返回/命令通过/接口返回」等可核对结果；禁止仅「更好用 / 更好看 / nicer / looks better」这类空话
 3. outOfScope 是否划清边界（可简短）
 4. assumptions 是否合理、不偷换目标
-5. deviceMatrix / criticalPaths / exceptionCases 是否已填且具体（禁止空；deviceMatrix 禁止只写「主流浏览器」；exceptionCases 必须覆盖空态、失败、权限不足、超时、重试；有接口时还要错误码或 HTTP status）
+5. deviceMatrix / criticalPaths / exceptionCases 是否已填且具体（禁止空；deviceMatrix 至少两个具体浏览器或国产终端，并写截图/云测证据和降级或 Polyfill，禁止只写「主流浏览器」；exceptionCases 必须覆盖空态、失败、权限不足、超时、重试；有接口时还要错误码或 HTTP status）
 6. apiContract 是否已填：OpenAPI/类型等路径，或明确「本模块无 HTTP API」（禁止空）
-7. 按该验收标准做完后，用户是否有理由满意（成品可核对，而非过程叙事）
+7. envChecklist 是否已填：DNS、TLS、CORS、鉴权、第三方可达全部通过，或明确「无客户联调环境」；存在未通过项则 passed=false
+8. dataPrecheck 是否已填：字段映射、导入预检失败清单、可导出，或明确「本模块无导入」
+9. externalDeps 是否已填：阻塞项、SLA、备用 Mock、并行路径，或明确「本模块无外部依赖」
+10. perfBudget 是否已填：LCP、INP、包体、长列表虚拟滚动、弱网、大数据压测，或明确「本模块无页面性能要求」；禁止只写「挺快的」
+11. 按该验收标准做完后，用户是否有理由满意（成品可核对，而非过程叙事）
 
 规则：
 - 若小改即可通过：修订确认卡字段（尤其把 acceptance 改成可检查句子，并补全基线与契约），passed=true
 - 若缺关键信息：passed=false，issues 列出缺什么（中文，短句）
 - 不要写代码。不要假设仓库路径。不要催派工。
 - 只输出一个 JSON，不要 markdown 围栏：
-{"passed":false,"summary":"一句话结论","issues":["问题1"],"goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"..."}`;
+{"passed":false,"summary":"一句话结论","issues":["问题1"],"goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","envChecklist":"...","dataPrecheck":"...","externalDeps":"...","perfBudget":"..."}`;
 
-const FIX_ACCEPT_PROMPT = `你是「Duaer-spec FDE」需求修正助手。自动验收未通过，请根据 issues 修订确认卡。优先把 acceptance 改成可客观检查的句子（打开何处、看到什么、哪条命令通过），并补全 deviceMatrix / criticalPaths / exceptionCases / apiContract；不要编造用户没提过的大功能。
+const FIX_ACCEPT_PROMPT = `你是「Duaer-spec FDE」需求修正助手。自动验收未通过，请根据 issues 修订确认卡。优先把 acceptance 改成可客观检查的句子（打开何处、看到什么、哪条命令通过），并补全 deviceMatrix / criticalPaths / exceptionCases / apiContract / envChecklist / dataPrecheck / externalDeps / perfBudget；不要编造用户没提过的大功能。
 
 规则：
-1. 针对每条 issue 修改 goal / outOfScope / acceptance / assumptions / deviceMatrix / criticalPaths / exceptionCases / apiContract
-2. 保持用户原意；缺信息时写合理、可检查的默认（如 Chrome 最近两版；主路径对齐 goal；异常态须同时写上空态、失败、权限不足、超时、重试，有接口则补错误码；无接口则写「本模块无 HTTP API」），并写进 assumptions
+1. 针对每条 issue 修改 goal / outOfScope / acceptance / assumptions / deviceMatrix / criticalPaths / exceptionCases / apiContract / envChecklist / dataPrecheck / externalDeps / perfBudget
+2. 保持用户原意；缺信息时写合理、可检查的默认（如 Chrome 最近两版、手机 Safari，云测截图放 compat/，旧壳降级提示升级；主路径对齐 goal；异常态须同时写上空态、失败、权限不足、超时、重试，有接口则补错误码；无接口则写「本模块无 HTTP API」；无客户联调则 envChecklist 写「无客户联调环境」，否则 DNS、TLS、CORS、鉴权、第三方可达全部写通过；无导入则 dataPrecheck 写「本模块无导入」，否则写字段映射、导入预检失败清单、可导出；无外部依赖则 externalDeps 写「本模块无外部依赖」，否则写阻塞项、SLA、备用 Mock、并行路径；无页面则 perfBudget 写「本模块无页面性能要求」，否则写 LCP、INP、包体、长列表虚拟滚动、弱网、大数据压测，禁止只写「挺快的」），并写进 assumptions
 3. 不要写代码。不要假设仓库路径。
 4. 只输出一个 JSON，不要 markdown 围栏：
-{"summary":"一句话说明改了什么","goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"..."}`;
+{"summary":"一句话说明改了什么","goal":"...","outOfScope":"...","acceptance":"...","assumptions":"...","deviceMatrix":"...","criticalPaths":"...","exceptionCases":"...","apiContract":"...","envChecklist":"...","dataPrecheck":"...","externalDeps":"...","perfBudget":"..."}`;
 
 const BUG_ACCEPT_PROMPT = `你是「Duaer-spec FDE」缺陷验收官。用户即将锁定缺陷卡（尚未派工）。目标是：规范缺陷描述，使数字员工能复现、修复并回归。
 
@@ -1113,6 +1145,10 @@ function parseChatResult(content) {
               criticalPaths: flat(m.criticalPaths ?? m.card?.criticalPaths),
               exceptionCases: flat(m.exceptionCases ?? m.card?.exceptionCases),
               apiContract: flat(m.apiContract ?? m.card?.apiContract),
+              envChecklist: flat(m.envChecklist ?? m.card?.envChecklist),
+              dataPrecheck: flat(m.dataPrecheck ?? m.card?.dataPrecheck),
+              externalDeps: flat(m.externalDeps ?? m.card?.externalDeps),
+              perfBudget: flat(m.perfBudget ?? m.card?.perfBudget),
               dependsOn: Array.isArray(m.dependsOn)
                 ? m.dependsOn.map((x) => flat(x)).filter(Boolean).slice(0, 20)
                 : [],
@@ -1131,6 +1167,10 @@ function parseChatResult(content) {
       criticalPaths: flat(obj.criticalPaths),
       exceptionCases: flat(obj.exceptionCases),
       apiContract: flat(obj.apiContract),
+      envChecklist: flat(obj.envChecklist),
+      dataPrecheck: flat(obj.dataPrecheck),
+      externalDeps: flat(obj.externalDeps),
+      perfBudget: flat(obj.perfBudget),
       ready: Boolean(obj.ready),
       activeModuleId: flat(obj.activeModuleId) || undefined,
       modules,
@@ -1153,6 +1193,10 @@ function parseChatResult(content) {
       criticalPaths: "",
       exceptionCases: "",
       apiContract: "",
+      envChecklist: "",
+      dataPrecheck: "",
+      externalDeps: "",
+      perfBudget: "",
       ready: false,
       options: [],
     };
@@ -1172,6 +1216,10 @@ function chatDoneSsePayload(parsed, { includeJsonBlock = true } = {}) {
     criticalPaths: String(parsed?.criticalPaths || ""),
     exceptionCases: String(parsed?.exceptionCases || ""),
     apiContract: String(parsed?.apiContract || ""),
+    envChecklist: String(parsed?.envChecklist || ""),
+    dataPrecheck: String(parsed?.dataPrecheck || ""),
+    externalDeps: String(parsed?.externalDeps || ""),
+    perfBudget: String(parsed?.perfBudget || ""),
     ready: Boolean(parsed?.ready),
     activeModuleId: parsed?.activeModuleId
       ? String(parsed.activeModuleId).slice(0, 80)
@@ -1189,6 +1237,10 @@ function chatDoneSsePayload(parsed, { includeJsonBlock = true } = {}) {
           criticalPaths: String(m.criticalPaths || "").slice(0, 4000),
           exceptionCases: String(m.exceptionCases || "").slice(0, 4000),
           apiContract: String(m.apiContract || "").slice(0, 4000),
+          envChecklist: String(m.envChecklist || "").slice(0, 4000),
+          dataPrecheck: String(m.dataPrecheck || "").slice(0, 4000),
+          externalDeps: String(m.externalDeps || "").slice(0, 4000),
+          perfBudget: String(m.perfBudget || "").slice(0, 4000),
           dependsOn: Array.isArray(m.dependsOn)
             ? m.dependsOn.map(String).slice(0, 20)
             : [],
@@ -1352,6 +1404,10 @@ function parseAcceptResult(content, fallback) {
     criticalPaths: pick("criticalPaths"),
     exceptionCases: pick("exceptionCases"),
     apiContract: pick("apiContract"),
+    envChecklist: pick("envChecklist"),
+    dataPrecheck: pick("dataPrecheck"),
+    externalDeps: pick("externalDeps"),
+    perfBudget: pick("perfBudget"),
   };
 }
 
@@ -1396,8 +1452,13 @@ function localAcceptCheck(card, { kind = "feature" } = {}) {
     const deviceMatrix = String(card.deviceMatrix || "").trim();
     const criticalPaths = String(card.criticalPaths || "").trim();
     const exceptionCases = String(card.exceptionCases || "").trim();
-    if (deviceMatrix.length < 4) {
-      issues.push("「浏览器/设备矩阵」必填（如 Chrome 最近两版 / 手机 Safari）");
+    if (deviceMatrix.length < 4 || missingCompatMatrix(deviceMatrix).length) {
+      const missing = missingCompatMatrix(deviceMatrix);
+      issues.push(
+        missing.length
+          ? `「浏览器/设备矩阵」未写成可核对兼容包：${missing.join("、")}`
+          : "「浏览器/设备矩阵」必填（至少两个具体浏览器或国产终端，并写证据与降级）",
+      );
     }
     if (criticalPaths.length < 4) {
       issues.push("「关键路径」必填（联调必须覆盖的主路径）");
@@ -1423,6 +1484,54 @@ function localAcceptCheck(card, { kind = "feature" } = {}) {
         "「接口契约」必填（OpenAPI/类型路径，或写「本模块无 HTTP API」）",
       );
     }
+    const envChecklist = String(card.envChecklist || "").trim();
+    if (
+      !envChecklistDeclaresNoCustomer(envChecklist) &&
+      (envChecklist.length < 4 || missingEnvChecklist(envChecklist).length)
+    ) {
+      const missing = missingEnvChecklist(envChecklist);
+      issues.push(
+        missing.length
+          ? `「环境检查」未通过：${missing.join("、")}（须探测 DNS、TLS、CORS、鉴权、第三方可达且全部通过，或写「无客户联调环境」）`
+          : "「环境检查」必填（DNS、TLS、CORS、鉴权、第三方可达均通过，或写「无客户联调环境」）",
+      );
+    }
+    const dataPrecheck = String(card.dataPrecheck || "").trim();
+    if (
+      !dataPrecheckDeclaresNoImport(dataPrecheck) &&
+      (dataPrecheck.length < 4 || missingDataPrecheck(dataPrecheck).length)
+    ) {
+      const missing = missingDataPrecheck(dataPrecheck);
+      issues.push(
+        missing.length
+          ? `「数据预检」未写清：${missing.join("、")}（须含字段映射、导入预检失败清单、可导出，或写「本模块无导入」）`
+          : "「数据预检」必填（字段映射、导入预检失败清单、可导出，或写「本模块无导入」）",
+      );
+    }
+    const externalDeps = String(card.externalDeps || "").trim();
+    if (
+      !externalDepsDeclaresNone(externalDeps) &&
+      (externalDeps.length < 4 || missingExternalDeps(externalDeps).length)
+    ) {
+      const missing = missingExternalDeps(externalDeps);
+      issues.push(
+        missing.length
+          ? `「外部依赖」未写清：${missing.join("、")}（须含阻塞项、SLA、备用 Mock、并行路径，或写「本模块无外部依赖」）`
+          : "「外部依赖」必填（阻塞项、SLA、备用 Mock、并行路径，或写「本模块无外部依赖」）",
+      );
+    }
+    const perfBudget = String(card.perfBudget || "").trim();
+    if (
+      !perfBudgetDeclaresNone(perfBudget) &&
+      (perfBudget.length < 4 || missingPerfBudget(perfBudget).length)
+    ) {
+      const missing = missingPerfBudget(perfBudget);
+      issues.push(
+        missing.length
+          ? `「性能预算」未写清：${missing.join("、")}（须含 LCP、INP、包体、长列表、弱网、大数据压测，或写「本模块无页面性能要求」）`
+          : "「性能预算」必填（LCP、INP、包体、长列表、弱网、大数据压测，或写「本模块无页面性能要求」）",
+      );
+    }
   }
   return issues;
 }
@@ -1442,6 +1551,10 @@ async function autoAcceptCard(cfg, card, { kind = "feature", projectContext = nu
       criticalPaths: card.criticalPaths,
       exceptionCases: card.exceptionCases,
       apiContract: card.apiContract,
+      envChecklist: card.envChecklist,
+      dataPrecheck: card.dataPrecheck,
+      externalDeps: card.externalDeps,
+      perfBudget: card.perfBudget,
     };
   }
   const ctxNote =
@@ -1472,6 +1585,10 @@ async function validateCardOnly(cfg, card, { kind = "feature", projectContext =
     criticalPaths: String(card.criticalPaths || "").trim(),
     exceptionCases: String(card.exceptionCases || "").trim(),
     apiContract: String(card.apiContract || "").trim(),
+    envChecklist: String(card.envChecklist || "").trim(),
+    dataPrecheck: String(card.dataPrecheck || "").trim(),
+    externalDeps: String(card.externalDeps || "").trim(),
+    perfBudget: String(card.perfBudget || "").trim(),
   };
   if (kind === "bug" && projectContext) {
     normalized = {
@@ -1530,6 +1647,10 @@ async function validateCardOnly(cfg, card, { kind = "feature", projectContext =
     criticalPaths: review.criticalPaths || normalized.criticalPaths,
     exceptionCases: review.exceptionCases || normalized.exceptionCases,
     apiContract: review.apiContract || normalized.apiContract,
+    envChecklist: review.envChecklist || normalized.envChecklist,
+    dataPrecheck: review.dataPrecheck || normalized.dataPrecheck,
+    externalDeps: review.externalDeps || normalized.externalDeps,
+    perfBudget: review.perfBudget || normalized.perfBudget,
   };
 }
 
@@ -1577,6 +1698,10 @@ async function autoFixConfirmCard(cfg, card, issues, { kind = "feature", project
     criticalPaths: String(obj.criticalPaths || card.criticalPaths || "").trim(),
     exceptionCases: String(obj.exceptionCases || card.exceptionCases || "").trim(),
     apiContract: String(obj.apiContract || card.apiContract || "").trim(),
+    envChecklist: String(obj.envChecklist || card.envChecklist || "").trim(),
+    dataPrecheck: String(obj.dataPrecheck || card.dataPrecheck || "").trim(),
+    externalDeps: String(obj.externalDeps || card.externalDeps || "").trim(),
+    perfBudget: String(obj.perfBudget || card.perfBudget || "").trim(),
   };
 }
 
@@ -2423,20 +2548,53 @@ function activateProject(body = {}) {
   const cfg = readConfig();
   let raw = String(body.path || body.name || "").trim();
   if (!raw) {
-    const e = new Error("请填写目录名或绝对路径");
+    const e = new Error(
+      body.create === true || body.mode === "create"
+        ? "请填写要新建的目录短名"
+        : "请填写目录名或绝对路径",
+    );
     e.code = "EMPTY_PATH";
     throw e;
   }
   const titleIn = String(body.title || "").trim();
   const descriptionIn = String(body.description || "").trim();
-  const abs = resolveProductRepoPath(raw, {
-    projectsRoot: cfg.projectsRoot,
-  });
+  const create = body.create === true || body.mode === "create";
+  if (create) {
+    if (!titleIn) {
+      const e = new Error("请填写项目名称");
+      e.code = "NEED_TITLE";
+      throw e;
+    }
+    if (!descriptionIn) {
+      const e = new Error("请填写简单的背景描述");
+      e.code = "NEED_DESCRIPTION";
+      throw e;
+    }
+  }
+  const abs = create
+    ? resolveCreateProductRepoPath(raw, {
+        projectsRoot: cfg.projectsRoot,
+      })
+    : resolveProductRepoPath(raw, {
+        projectsRoot: cfg.projectsRoot,
+      });
+  if (create) {
+    assertProductDirFreeForCreate(abs);
+    assertProjectIdentityFreeForCreate(
+      { path: abs, title: titleIn },
+      readRepos(),
+    );
+  } else if (!fs.existsSync(abs)) {
+    const e = new Error(`项目目录不存在：${abs}`);
+    e.code = "PATH_MISSING";
+    e.path = abs;
+    throw e;
+  }
   const ensured = ensureProductDir(abs);
   const existing = readRepos().find(
     (r) => normalizeRepoPath(r.path) === normalizeRepoPath(abs),
   );
-  const isNew = Boolean(ensured.created) || !existing;
+  const isNew = Boolean(ensured.created) || (create && !existing);
   const needMeta = Boolean(body.requireMeta) || isNew;
   if (needMeta && !titleIn) {
     const e = new Error("请填写项目名称");
@@ -2453,12 +2611,17 @@ function activateProject(body = {}) {
     exact: true,
     ensureDuaer: false,
   });
-  const savedTitle =
-    titleIn ||
-    existing?.title ||
-    existing?.name ||
-    path.basename(probe.path);
-  const savedDesc = descriptionIn || existing?.description || "";
+  // Opening an existing project keeps prior title/description unless the
+  // caller sends non-empty replacements. Create always writes the new meta.
+  const savedTitle = create
+    ? titleIn || path.basename(probe.path)
+    : titleIn ||
+      existing?.title ||
+      existing?.name ||
+      path.basename(probe.path);
+  const savedDesc = create
+    ? descriptionIn
+    : descriptionIn || existing?.description || "";
   rememberRepo(probe.path, {
     title: savedTitle,
     name: savedTitle,
@@ -6389,6 +6552,10 @@ async function handleApi(req, res) {
         criticalPaths: body.criticalPaths,
         exceptionCases: body.exceptionCases,
         apiContract: body.apiContract,
+        envChecklist: body.envChecklist,
+        dataPrecheck: body.dataPrecheck,
+        externalDeps: body.externalDeps,
+        perfBudget: body.perfBudget,
       });
       const deskKind =
         String(body.deskKind || body.kind || "").trim() === "bug"
@@ -6442,6 +6609,10 @@ async function handleApi(req, res) {
         criticalPaths: body.criticalPaths,
         exceptionCases: body.exceptionCases,
         apiContract: body.apiContract,
+        envChecklist: body.envChecklist,
+        dataPrecheck: body.dataPrecheck,
+        externalDeps: body.externalDeps,
+        perfBudget: body.perfBudget,
       });
       const issues = Array.isArray(body.issues) ? body.issues : [];
       const deskKind =
@@ -6503,6 +6674,10 @@ async function handleApi(req, res) {
         criticalPaths: body.criticalPaths,
         exceptionCases: body.exceptionCases,
         apiContract: body.apiContract,
+        envChecklist: body.envChecklist,
+        dataPrecheck: body.dataPrecheck,
+        externalDeps: body.externalDeps,
+        perfBudget: body.perfBudget,
       });
       if (!card.goal || !card.acceptance) {
         send(res, 400, { error: "goal and acceptance are required" });
@@ -6612,6 +6787,10 @@ async function handleApi(req, res) {
         criticalPaths: body.criticalPaths,
         exceptionCases: body.exceptionCases,
         apiContract: body.apiContract,
+        envChecklist: body.envChecklist,
+        dataPrecheck: body.dataPrecheck,
+        externalDeps: body.externalDeps,
+        perfBudget: body.perfBudget,
       });
       const issues = Array.isArray(body.issues) ? body.issues : [];
       if (!card.goal && !card.acceptance) {