intentdna 1.5.12 → 1.5.13

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "intentdna",
       "description": "DNA template compilation + runtime enforcement",
-      "version": "1.5.12",
+      "version": "1.5.13",
       "source": "./"
     }
   ]

package/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "intentdna",
-  "version": "1.5.12",
+  "version": "1.5.13",
   "description": "Declarative policy layer for AI agent governance"
 }

package/dist/templates/flutter-rewrite.dna.yaml

@@ -201,6 +201,7 @@ roles:
       read: ["**/*"]
       write: ["lib/**", "v2/**", "test/**"]
     instructions:
+      - "REQUIRED FIRST: Read context files — CLAUDE.md, docs/refactoring-workflow-v2.md, v2/docs/PROVIDER_DESIGN.md, and the diagnosis spec (.omc/specs/diagnosis-$ARGUMENTS.md). Then read v1 corresponding file before any Edit. Hook will block Edit if context files are not read."
       - Fix only the identified breakpoint or missing implementation
       - Read v1 to understand intent, rewrite in v2 framework style
       - Do not copy v1 code verbatim — adapt to v2 architecture
@@ -316,13 +317,7 @@ workflows:
           Scenario 2 (re-run/incremental):
           - Read the incremental diff from behavior doc
           - Update existing tests incrementally — do NOT rewrite all tests (preserves rescue progress)
-          - Run ALL tests for this module (do NOT skip previously green tests)
-          - Compare with last baseline:
-            GREEN→RED = REGRESSION (mark HIGH_PRIORITY)
-            RED→GREEN = FIXED
-            NEW tests = new coverage
-            REMOVED tests = coverage shrunk
-          - Update baseline with full result
+          - Run ALL tests (do NOT skip previously green tests). Compare with previous baseline: GREEN→RED = REGRESSION (mark HIGH_PRIORITY), RED→GREEN = FIXED, NEW = new coverage. Update baseline with complete results.
           - Git commit: "behavior-lock($ARGUMENTS): N tests (X green, Y red from behavior change)"
 
           BANNED patterns:
@@ -573,6 +568,8 @@ workflows:
         blocked_items_path: "docs/behavior/blocked_items.md"
         description: "Fix issues according to diagnosis spec classifications"
         prompt: |
+          Read .dna/state/workflow/experience.md first if it exists. It contains previous failed approaches — do NOT repeat them.
+
           Read context + diagnosis spec first.
 
           Process issues in priority order: INFRA → BUG → TEST_BUG

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "intentdna",
-  "version": "1.5.12",
+  "version": "1.5.13",
   "description": "Intent DNA — Declarative policy layer for AI agent behavior",
   "type": "module",
   "main": "dist/index.js",

package/spec/hooks-infra-harness-hardening.md

@@ -0,0 +1,695 @@
+# Hooks 基础设施优化 + Harness 加固 — 整合实施方案
+
+## Metadata
+- Generated: 2026-04-18
+- Status: APPROVED
+- 预计测试增量: +100
+- 预计工期: 1 周
+- 前置版本: v1.5.12
+
+## 背景
+
+两个独立方案的合并：
+1. **Hooks 基础设施优化**（上次三方评审通过）— Schema validation, EnforceResult, StateManager, Integration tests
+2. **Harness 加固**（本次 deep interview 产出）— Context gate, Reflection gate, Stop hook 智能编排, Workflow boundary
+
+上层（Harness 加固）依赖底层（Hooks 基础设施）。合并后减少重复工作。
+
+## 依赖图
+
+```
+Phase 0 (模板修复) ← 立即可做，无依赖
+  
+Phase 1A (Schema) ──→ Phase 1B (EnforceResult) ──→ Phase 2B (Gates)
+                                                       ↓
+Phase 2A (StateManager) ────────────────────────→ Phase 2B (Gates)
+                                                       ↓
+                                                  Phase 3 (Stop hook + Integration)
+                                                       ↓
+                                                  Phase 4 (Dogfood)
+
+可并行：1A + 2A
+必须串行：1B 依赖 1A；2B 依赖 1B + 2A；3 依赖 2B；4 依赖 3
+```
+
+---
+
+## Phase 0: 模板即时修复
+
+**目标**: 修复当前模板的 3 个已知缺陷，零风险
+**文件**: `src/templates/flutter-rewrite.dna.yaml`
+**测试**: +0（模板内容变更不影响单测，dna validate 验证）
+**破坏性**: 无
+
+### 0.1 Surgeon instructions 加必读清单
+
+找到 `roles.surgeon.instructions`，在现有 instructions 列表**最前面**插入一行：
+
+```yaml
+instructions:
+  - "REQUIRED FIRST: Read context files — CLAUDE.md, docs/refactoring-workflow-v2.md, v2/docs/PROVIDER_DESIGN.md, and the diagnosis spec (.omc/specs/diagnosis-$ARGUMENTS.md). Then read v1 corresponding file before any Edit. Hook will block Edit if context files are not read."
+  # ... 保留所有现有 instructions
+```
+
+### 0.2 Fix workflow experience chain 自读
+
+找到 `workflows.fix.steps` 中 `id: fix_bugs` 的 step，在 prompt 最前面加：
+
+```
+Read .dna/state/workflow/experience.md first if it exists.
+It contains previous failed approaches — do NOT repeat them.
+```
+
+### 0.3 Behavior-lock 全量回归
+
+找到 `workflows.behavior-lock.steps` 中 `id: write_tests` 的 step prompt，场景 2 (re-run) 部分，替换测试执行逻辑为：
+
+```
+Scenario 2 (re-run/incremental):
+- Read the incremental diff from behavior doc
+- Update existing tests incrementally — do NOT rewrite all tests
+- Run ALL tests (do NOT skip previously green tests)
+- Compare with previous baseline:
+  GREEN→RED = REGRESSION (mark HIGH_PRIORITY — v2 broke something)
+  RED→GREEN = FIXED
+  NEW = new coverage
+  REMOVED = coverage shrunk (verify intentional)
+- Update baseline with complete results
+- Git commit includes regression count if any
+```
+
+### 0.4 验证
+
+```bash
+dna validate src/templates/flutter-rewrite.dna.yaml
+npm test
+```
+
+---
+
+## Phase 1A: Boundary Schema + Contract Tests
+
+**目标**: CC ↔ dna-hook 边界的显式 schema 验证，防止 session_id 类 boundary bug
+**测试**: +20
+**破坏性**: 无（纯增量）
+
+### 1A.1 新建 src/hooks/schema.ts
+
+```typescript
+/**
+ * Hook input validation — CC protocol boundary.
+ * Zero external dependencies. Hand-written validators.
+ * Fail-open: invalid input → log warning + return { valid: false, ... }
+ */
+
+export interface ValidationResult {
+  valid: boolean;
+  errors: string[];
+  normalized?: Record<string, unknown>;  // camelCase 归一化后的输入
+}
+
+export function validateHookInput(event: string, raw: unknown): ValidationResult
+// 对每种 event 类型验证必填字段：
+// PreToolUse: tool_name, tool_input 必须存在
+// PostToolUse: tool_name, tool_output 必须存在
+// SessionStart: session_id (camelCase 归一化)
+// SubagentStop: agent_type
+// UserPromptSubmit: (minimal)
+// Notification: title, message
+// PreCompact: (minimal)
+// Stop: (minimal)
+
+export function normalizeSessionId(input: Record<string, unknown>): string | undefined
+// 处理 session_id / sessionId / CLAUDE_SESSION_ID 的归一化
+```
+
+### 1A.2 修复 enforce.ts:38-42 snake_case bug
+
+找到 `SessionStartInput` 接口定义（enforce.ts 约 38 行），确认字段用 camelCase（和其他 Input 类型一致）。如果有 `session_id`（snake_case），改为 `sessionId`。
+
+### 1A.3 新建 test/fixtures/cc-hook-inputs/
+
+从 lwk_flutter_v2-rewrite 的 `.dna/state/trace/trace-2026-04-17.jsonl` 中提取 8 个真实 CC hook input fixture：
+
+```
+pre-tool-use-edit.json         — Edit 工具调用
+pre-tool-use-bash.json         — Bash 工具调用
+pre-tool-use-read.json         — Read 工具调用
+post-tool-use-bash-test.json   — Bash 跑 flutter test 的输出
+session-start.json             — SessionStart 事件
+subagent-stop-surgeon.json     — surgeon subagent 停止
+subagent-stop-investigator.json — investigator subagent 停止
+stop-event.json                — Stop 事件
+```
+
+### 1A.4 新建 test/contract/hook-contract.test.ts
+
+对每个 fixture：`fixture → validateHookInput() → enforce*() → 验证输出格式`
+
+全链路 contract test：确保真实 CC 输入能正确通过验证 + enforce 链。
+
+### 1A.5 验证
+
+```bash
+npm test  # 全绿，+20 新测试
+```
+
+---
+
+## Phase 1B: EnforceResult 类型
+
+**目标**: enforce 函数返回结构化结果，消除 cli.ts 的 decision 猜测逻辑
+**测试**: +15（改约 30 处现有断言）
+**破坏性**: 是（限定在此 phase）
+**依赖**: Phase 1A
+
+### 1B.1 protocol.ts 新增类型
+
+```typescript
+export interface TraceMetadata {
+  matched_rule: MatchedRule;
+  gene_id?: string;
+  step_id?: string;
+  role?: string;
+}
+
+export type MatchedRule =
+  | "scope"
+  | "filter"
+  | "gate"
+  | "schema"
+  | "handoff"
+  | "step_rule"
+  | "output_schema"
+  // Phase 2B 新增（先定义，后实现）：
+  | "context_gate"
+  | "reflection_gate"
+  | "workflow_boundary";
+
+export interface EnforceResult {
+  output: HookOutput;
+  trace?: TraceMetadata;
+}
+```
+
+### 1B.2 更新 enforce.ts 的 8 个函数
+
+每个 enforce* 函数的返回类型从 `HookOutput | null` 改为 `EnforceResult | null`。
+
+```typescript
+// 之前
+export function enforcePreToolUse(...): HookOutput | null {
+  return { decision: "block", reason: "..." };
+}
+
+// 之后
+export function enforcePreToolUse(...): EnforceResult | null {
+  return {
+    output: { decision: "block", reason: "..." },
+    trace: { matched_rule: "scope", gene_id: "scan_read_only", role: "scanner" }
+  };
+}
+```
+
+**注意**: trace metadata 不进入 HookOutput（CC 协议边界不该混入内部 metadata）。trace 由 cli.ts 读取后写入 trace log，不返回给 CC。
+
+### 1B.3 新增 3 个 enforce 纯函数
+
+```typescript
+// 已在 v1.5.12 实现 checkReflectionLimit，确认返回 EnforceResult
+export function checkReflectionLimit(
+  failCount: number, maxAttempts: number,
+  handoffCount: number, maxHandoffs: number
+): EnforceResult
+
+// 已在 v1.5.12 实现 checkContextReadiness，确认返回 EnforceResult
+export function checkContextReadiness(
+  sessionReads: string[], required: string[]
+): EnforceResult
+
+// 新增
+export function checkWorkflowBoundary(
+  workflowCompleted: boolean, targetSkill: string
+): EnforceResult
+```
+
+### 1B.4 更新 cli.ts
+
+cli.ts 从 enforce 结果中提取 trace metadata，写入 trace log：
+
+```typescript
+const result = enforcePreToolUse(ir, input, state);
+if (result) {
+  // 返回 HookOutput 给 CC
+  writeOutput(result.output);
+  // trace metadata 写 trace log（不返回给 CC）
+  if (result.trace) appendTrace({ ...result.trace, timestamp: now() });
+}
+```
+
+### 1B.5 更新 src/mcp/tools-enforce.ts
+
+检查 MCP enforce 工具是否调用 enforce 函数。如果调用了，同步更新返回类型处理。
+
+### 1B.6 更新测试
+
+约 30 处现有断言需要从 `expect(result).toEqual({ decision: "block", ... })` 改为 `expect(result.output).toEqual({ decision: "block", ... })`。
+
+```bash
+npm test  # 全绿，+15 新测试
+```
+
+---
+
+## Phase 2A: DNAStateManager
+
+**目标**: 统一所有 state 操作，支持 session reads + surgeon attempts + experience chain
+**测试**: +20
+**破坏性**: 无（旧函数 @deprecated 保留）
+**可与 Phase 1A 并行**
+
+### 2A.1 新建 src/hooks/state-manager.ts
+
+```typescript
+export class DNAStateManager {
+  constructor(private stateDir: string, private sessionId?: string) {}
+
+  // ── 现有 state 操作封装 ──
+  readWorkflowState(): WorkflowState | null
+  writeWorkflowState(state: WorkflowState): void
+  readAuditLog(): AuditEntry[]
+  appendAudit(entry: AuditEntry): void
+
+  // ── 新增: Session reads 追踪 ──
+  appendSessionRead(filePath: string): void
+  getSessionReads(): string[]
+  // 路径: .dna/state/workflow/session-reads.json
+
+  // ── 新增: Surgeon attempts 追踪 ──
+  readSurgeonAttempts(): SurgeonAttemptState
+  writeSurgeonAttempts(state: SurgeonAttemptState): void
+  // 路径: .dna/state/workflow/surgeon-attempts.json
+
+  // ── 新增: Experience chain ──
+  appendExperience(entry: ExperienceEntry): void
+  readExperienceChain(): ExperienceEntry[]
+  writeExperienceChain(chain: ExperienceEntry[]): void
+  // 路径: .dna/state/workflow/experience.md (markdown) 
+  //    + .dna/state/workflow/experience.json (structured)
+
+  // ── 生命周期 ──
+  init(): void          // 创建 session 目录结构
+  cleanup(): void       // 先算 summary（读 trace），再 rotate/clean
+  isStale(): boolean    // >2h 判定为 stale
+}
+
+export interface SurgeonAttemptState {
+  round: number;
+  edit_count: number;
+  bash_test_count: number;
+  last_green_count: number;
+  current_green_count: number;
+  fail_count: number;
+  handoff_count: number;
+  baseline_established: boolean;
+}
+
+export interface ExperienceEntry {
+  round: number;
+  analysis: string;
+  attempt: string;
+  result: string;
+  lesson: string;
+  timestamp: string;
+}
+```
+
+### 2A.2 保留 state.ts 向后兼容
+
+在现有 state.ts 函数上加 `@deprecated` 注释，内部改为调用 StateManager：
+
+```typescript
+/** @deprecated Use DNAStateManager instead */
+export function readWorkflowState(stateDir: string): WorkflowState | null {
+  return new DNAStateManager(stateDir).readWorkflowState();
+}
+```
+
+### 2A.3 测试
+
+```bash
+npm test  # 全绿，+20 新测试
+```
+
+---
+
+## Phase 2B: Context Gate + Reflection Gate + Workflow Boundary
+
+**目标**: 3 个核心 Harness 加固机制
+**测试**: +15
+**破坏性**: 无
+**依赖**: Phase 1B (EnforceResult) + Phase 2A (StateManager)
+
+### 2B.1 Context Gate — src/hooks/cli.ts
+
+在 PreToolUse 处理中新增：
+
+```typescript
+function handleContextGate(
+  input: PreToolUseInput,
+  ir: ConstraintIR,
+  stateManager: DNAStateManager,
+): EnforceResult | null {
+  // 只对 Edit/Write/Bash 触发
+  if (!["Edit", "Write", "Bash"].includes(input.tool_name)) return null;
+  
+  // 获取当前角色的必读文件列表
+  const role = getCurrentRole(ir, input);
+  if (!role) return null;
+  
+  const required = getRoleContextFiles(ir, role);
+  if (required.length === 0) return null;
+  
+  // 检查 session reads
+  const reads = stateManager.getSessionReads();
+  const result = checkContextReadiness(reads, required);
+  
+  if (!result.output.decision || result.output.decision === "allow") return null;
+  
+  // Block — 返回缺失文件清单
+  return result;
+}
+```
+
+**注意：直接 block，不是 warn。** 之前讨论的 Phase 1 warn 已取消，直接上 block。
+
+### 2B.2 Reflection Gate — src/hooks/cli.ts
+
+在 PostToolUse 处理中新增：
+
+```typescript
+function handleSurgeonReflection(
+  input: PostToolUseInput,
+  stepDef: WorkflowStepDef | null,
+  stateManager: DNAStateManager,
+): EnforceResult | null {
+  if (!stepDef?.max_attempts) return null;
+  
+  const attempts = stateManager.readSurgeonAttempts();
+  
+  // 追踪 Edit/Bash 调用
+  if (input.tool_name === "Edit") {
+    attempts.edit_count++;
+  }
+  
+  if (input.tool_name === "Bash" && looksLikeTestOutput(input.tool_output)) {
+    attempts.bash_test_count++;
+    const greenCount = parseGreenCount(input.tool_output);
+    if (greenCount !== null) {
+      attempts.current_green_count = greenCount;
+      if (!attempts.baseline_established) {
+        attempts.baseline_established = true;
+        attempts.last_green_count = greenCount;
+      }
+    }
+  }
+  
+  // 判定进展（只在有 baseline 后）
+  if (attempts.baseline_established && 
+      attempts.edit_count >= 2 && 
+      attempts.bash_test_count >= 1) {
+    if (attempts.current_green_count <= attempts.last_green_count) {
+      // 无进展
+      const result = checkReflectionLimit(
+        attempts.fail_count + 1, stepDef.max_attempts,
+        attempts.handoff_count, stepDef.max_handoffs ?? 3
+      );
+      attempts.fail_count++;
+      stateManager.writeSurgeonAttempts(attempts);
+      
+      if (result.output.decision !== "allow") {
+        return result;  // warn / handoff / skip
+      }
+    } else {
+      // 有进展，重置计数
+      attempts.last_green_count = attempts.current_green_count;
+      attempts.edit_count = 0;
+      attempts.bash_test_count = 0;
+    }
+  }
+  
+  stateManager.writeSurgeonAttempts(attempts);
+  return null;
+}
+
+function parseGreenCount(output: string): number | null {
+  // 匹配 flutter test 输出格式
+  // "00:05 +23: All tests passed!" → 23
+  // "00:05 +23 -5: Some tests failed." → 23
+  // "5 passed, 3 failed" → 5
+  const patterns = [
+    /\+(\d+)(?:\s|:)/,           // flutter test format: +N
+    /(\d+)\s+passed/i,           // generic: N passed
+    /(\d+)\s+tests?\s+passed/i,  // verbose: N tests passed
+  ];
+  for (const p of patterns) {
+    const m = output.match(p);
+    if (m) return parseInt(m[1], 10);
+  }
+  return null;  // 解析失败 → fail-open
+}
+```
+
+### 2B.3 Workflow Boundary — src/hooks/cli.ts
+
+在 PreToolUse 处理中新增：
+
+```typescript
+function handleWorkflowBoundary(
+  input: PreToolUseInput,
+  stateManager: DNAStateManager,
+): EnforceResult | null {
+  // 只检测 Skill 工具调用
+  if (input.tool_name !== "Skill") return null;
+  
+  const wfState = stateManager.readWorkflowState();
+  if (!wfState?.completed) return null;
+  
+  return checkWorkflowBoundary(true, input.tool_input?.skill ?? "unknown");
+}
+```
+
+### 2B.4 PostToolUse 追踪
+
+```typescript
+// 在 PostToolUse 处理中，所有 Read 调用记录到 session reads
+if (input.tool_name === "Read" && input.tool_input?.file_path) {
+  stateManager.appendSessionRead(input.tool_input.file_path);
+}
+```
+
+### 2B.5 测试
+
+```
+test/hooks-harness.test.ts 新增：
+- context gate: 未读必需文件 + Edit → block
+- context gate: 已读必需文件 + Edit → allow
+- reflection gate: 3 次无进展 → warn(handoff)
+- reflection gate: 有进展 → 不触发
+- reflection gate: parseGreenCount 解析 3 种格式
+- workflow boundary: completed + Skill → block
+- workflow boundary: not completed + Skill → allow
+- session reads 追踪正确
+```
+
+```bash
+npm test  # 全绿，+15 新测试
+```
+
+---
+
+## Phase 3: Stop Hook 智能编排 + Integration Tests
+
+**目标**: Stop hook 从"继续工作"升级为"输出下一步 Agent 调用"；全链路集成测试
+**测试**: +25
+**破坏性**: 无
+**依赖**: Phase 2B
+
+### 3.1 Stop Hook 智能编排 — src/hooks/cli.ts
+
+在 enforceStop 中，读 workflow state 后输出明确的下一步指令：
+
+```typescript
+function buildWorkflowGuidance(
+  ir: ConstraintIR,
+  stateManager: DNAStateManager,
+): string | null {
+  const wfState = stateManager.readWorkflowState();
+  if (!wfState) return null;
+  
+  const attempts = stateManager.readSurgeonAttempts();
+  const stepDef = getStepDef(ir, wfState.current_step);
+  
+  // 情况 1: surgeon 无进展，需要重新分析
+  if (wfState.current_step === "fix_bugs" && 
+      stepDef?.max_attempts && 
+      attempts.fail_count >= stepDef.max_attempts) {
+    const experience = stateManager.readExperienceChain();
+    return `[DNA WORKFLOW] Surgeon 已无进展 ${attempts.fail_count} 次。
+下一步: 重新分析。执行:
+Agent(subagent_type="dna-frw-analyzer", prompt="重新分析 module，
+读 .dna/state/workflow/experience.md 了解 ${experience.length} 次历史失败")`;
+  }
+  
+  // 情况 2: workflow 完成
+  if (wfState.completed) {
+    return `[DNA WORKFLOW] Workflow "${wfState.workflow}" 完成。
+输出最终报告并停止。不要启动其他 workflow。`;
+  }
+  
+  // 情况 3: 正常继续
+  return null;
+}
+```
+
+在 enforceStop 的 reason 中追加 workflow guidance（如果有）。
+
+### 3.2 Integration Tests — test/integration/
+
+新建 test/integration/hook-lifecycle.test.ts：
+
+```typescript
+// spawn 真实 dna-hook 进程，通过 stdin/stdout 模拟完整 workflow
+
+describe("hook lifecycle integration", () => {
+  it("context gate blocks Edit before reading context files", async () => {
+    // stdin: PreToolUse Edit event (surgeon, no prior reads)
+    // expected stdout: { decision: "block", reason: "...Missing: CLAUDE.md..." }
+  });
+
+  it("context gate allows Edit after reading required files", async () => {
+    // stdin: PostToolUse Read CLAUDE.md → PostToolUse Read workflow.md → PreToolUse Edit
+    // expected stdout: (no block)
+  });
+
+  it("reflection gate triggers after 3 no-progress cycles", async () => {
+    // stdin: sequence of Edit + Bash(test, same green count) × 3
+    // expected: warn with handoff message
+  });
+
+  it("stop hook injects workflow guidance", async () => {
+    // setup workflow state with fail_count >= max
+    // stdin: Stop event
+    // expected: reason contains "[DNA WORKFLOW]" + Agent() call
+  });
+});
+```
+
+### 3.3 Property Tests — test/property/
+
+新建 test/property/enforce-invariants.test.ts（使用 fast-check）：
+
+```typescript
+import fc from "fast-check";
+
+// 不变量 1: fail-open — 任何无效输入都不 throw
+// 不变量 2: scope 一致性 — deny 的 tool 永远 block
+// 不变量 3: context gate 幂等 — 同一输入多次调用结果相同
+// 不变量 4: reflection limit 单调 — fail_count 只增不减（除非 reset）
+// 不变量 5: parseGreenCount null 安全 — 任意字符串不 throw
+// 不变量 6: checkReflectionLimit 边界 — maxAttempts=0 时总是 handoff
+// 不变量 7: workflow boundary 完成判定 — completed=false 时总是 allow
+```
+
+### 3.4 验证
+
+```bash
+npm test  # 全绿，+25 新测试
+```
+
+---
+
+## Phase 4: Dogfood + Cleanup
+
+**目标**: 真实项目验证 + 清理
+**测试**: +5
+**依赖**: Phase 3
+
+### 4.1 intentdna 项目验证
+
+```bash
+dna verify --health  # 7 项检查全通过
+dna sync             # 无报错
+npm test             # 全绿
+```
+
+### 4.2 lwk_flutter_v2-rewrite 验证
+
+```bash
+cd /Users/samuel/lawark/lwk_flutter_v2-rewrite
+dna sync                        # 新 agent/skill 生成
+/dna-frw-diagnosis home          # 验证: analyzer 不跑 Bash, 输出 diagnosis spec
+                                 # 验证: context gate block 生效
+                                 # 验证: analysis_reviewer 审查
+/dna-frw-fix home                # 验证: surgeon 先读 context 再 Edit
+                                 # 验证: reflection gate 触发
+                                 # 验证: workflow boundary 阻止跨 workflow
+```
+
+### 4.3 清理
+
+如果 StateManager 稳定，考虑移除 state.ts 中 @deprecated 函数。
+
+### 4.4 发版
+
+```bash
+/dna-release patch "hooks infra + harness hardening — schema validation, EnforceResult, StateManager, context/reflection/boundary gates"
+```
+
+---
+
+## 验收清单
+
+### Phase 0
+- [ ] surgeon instructions 第一行是 REQUIRED FIRST
+- [ ] fix_bugs prompt 包含读 experience.md
+- [ ] behavior-lock 场景 2 全量回归
+
+### Phase 1A
+- [ ] schema.ts validateHookInput() 实现
+- [ ] 8 个真实 CC fixture 文件
+- [ ] contract tests 全链路通过
+- [ ] SessionStartInput snake_case bug 已修
+
+### Phase 1B
+- [ ] EnforceResult + TraceMetadata 类型定义
+- [ ] matched_rule 包含 context_gate / reflection_gate / workflow_boundary
+- [ ] 8 个 enforce 函数返回 EnforceResult
+- [ ] cli.ts 不再猜 decision
+- [ ] trace metadata 不进入 HookOutput（CC 协议边界）
+- [ ] mcp/tools-enforce.ts 同步更新
+
+### Phase 2A
+- [ ] DNAStateManager class 实现
+- [ ] Session reads 追踪
+- [ ] Surgeon attempts 追踪
+- [ ] Experience chain 读写
+- [ ] init/cleanup 生命周期
+- [ ] state.ts 旧函数 @deprecated 保留
+
+### Phase 2B
+- [ ] Context gate: block Edit/Bash/Write if context files not read
+- [ ] Reflection gate: detect no-progress, warn/handoff/skip
+- [ ] Workflow boundary: block Skill() after workflow completed
+- [ ] PostToolUse Read → appendSessionRead
+- [ ] parseGreenCount 支持 3 种格式 + null 安全
+
+### Phase 3
+- [ ] Stop hook 读 workflow state 输出 Agent() 调用指令
+- [ ] Integration tests: spawn dna-hook 全链路
+- [ ] Property tests: 7 个不变量
+
+### Phase 4
+- [ ] dna verify --health 通过
+- [ ] lwk_flutter diagnosis → fix 流程验证
+- [ ] 发版