opencode-wiki-historian 0.5.1 → 0.5.2

package/dist/lint.d.ts

@@ -9,9 +9,9 @@
  */
 import type { Locale } from './wiki/pages.read.js';
 /** Machine rule keys; the human report renders zh labels from these. */
-export type GateViolation = 'redirect-stub-no-exit' | 'active-with-unfinished-skeleton';
+export type GateViolation = 'redirect-stub-no-exit' | 'active-with-unfinished-skeleton' | 'status-token-conflict';
 export interface LintFinding {
-    readonly key: 'todo-markers' | 'empty-sections' | 'intro-empty' | 'no-related-pages' | 'no-state-block' | 'h1-mismatch' | 'zh-english-dominant' | 'claims-without-stamp';
+    readonly key: 'todo-markers' | 'empty-sections' | 'intro-empty' | 'no-related-pages' | 'no-state-block' | 'h1-mismatch' | 'zh-english-dominant' | 'claims-without-stamp' | 'status-token-conflict';
     readonly detail: string;
 }
 export interface PageLink {
@@ -32,6 +32,15 @@ export interface BodyLint {
     readonly stubHasLink: boolean;
     readonly hasStateBlock: boolean;
     readonly state: 'active' | 'draft' | 'superseded' | 'deprecated' | null;
+    /** First state token parsed from a `| Status | X |` metadata table row
+     *  (P1); null when the body carries no parseable table token. The colon
+     *  header in `state` stays the AUTHORITY — this is the view, never a fix. */
+    readonly tableState: 'active' | 'draft' | 'superseded' | 'deprecated' | null;
+    /** Every state token found in table rows, document order, deduped. */
+    readonly tableStates: readonly NonNullable<BodyLint['state']>[];
+    /** True when the header token and at least one table token disagree (P1:
+     *  the machine-induced contradiction of live ids 9/92). */
+    readonly statusTokenConflict: boolean;
     readonly todoMarkers: number;
     /** Heading text of sections whose body (before the next heading ≤ level) is empty. */
     readonly emptySections: readonly string[];
@@ -47,6 +56,14 @@ export interface BodyLint {
     /** CJK chars / non-whitespace chars, zh body only meaningful; 0..1. */
     readonly cjkRatio: number;
 }
+/** The one finding kind {@link statusTokenFindings} emits. */
+export type StatusTokenFinding = LintFinding & {
+    readonly key: 'status-token-conflict';
+};
+/** Finding-key emission for status-token integrity (P1): both tokens present
+ *  and disagreeing. The colon header remains the authority — this reports the
+ *  contradiction, it never resolves it. */
+export declare function statusTokenFindings(lint: BodyLint): readonly StatusTokenFinding[];
 export interface HeadingSpan {
     readonly level: number;
     readonly heading: string;

package/dist/lint.js

@@ -47,20 +47,58 @@ function hasClickableExit(visibleNoAnchors) {
 }
 // --- status block -----------------------------------------------------------------
 const STATE_LINE_RE = /(?:^|\n)\s*\*{0,2}\s*(?:状态\s*\/\s*Status|状态|Status)\s*\*{0,2}\s*[:：]\s*([A-Za-z\u4e00-\u9fff][^\n·|<]*)/i;
-function parseState(maskedNoComments) {
-    const m = STATE_LINE_RE.exec(maskedNoComments);
-    if (m === null)
-        return { has: false, state: null };
-    const v = m[1].trim().toLowerCase();
+/** `| Status | X |` metadata-table row (P1). Line-anchored so only the FIRST
+ *  cell is the label — column headers like `| Action | … | Status |` and
+ *  separator rows never match. CJK-tolerant label (状态 / Status / 状态/Status
+ *  in either order), optional bold. Run on fence-masked, comment-stripped
+ *  text, so an injected fake token inside a code fence or HTML comment is
+ *  inert. The value is only a token when classifyState() recognizes it —
+ *  `| Status | — |` and free-form cells carry no token. */
+const TABLE_STATE_RE = /^\s*\|\s*(?:\*\*)?\s*(?:状态|Status)(?:\s*\/\s*(?:状态|Status))?\s*(?:\*\*)?\s*\|\s*([^|\n]+?)\s*\|/i;
+function classifyState(raw) {
+    const v = raw.trim().toLowerCase();
     if (v.startsWith('active'))
-        return { has: true, state: 'active' };
+        return 'active';
     if (v.startsWith('draft'))
-        return { has: true, state: 'draft' };
+        return 'draft';
     if (v.startsWith('superseded'))
-        return { has: true, state: 'superseded' };
+        return 'superseded';
     if (v.startsWith('deprecated'))
-        return { has: true, state: 'deprecated' };
-    return { has: true, state: null };
+        return 'deprecated';
+    return null;
+}
+function parseState(maskedNoComments) {
+    const m = STATE_LINE_RE.exec(maskedNoComments);
+    if (m === null)
+        return { has: false, state: null };
+    return { has: true, state: classifyState(m[1]) };
+}
+/** Deduped state tokens of every `| Status | X |` row, in document order. */
+function parseTableStates(visible) {
+    const out = [];
+    for (const line of visible.split('\n')) {
+        const m = TABLE_STATE_RE.exec(line);
+        if (m === null)
+            continue;
+        const st = classifyState(m[1]);
+        if (st !== null && !out.includes(st))
+            out.push(st);
+    }
+    return out;
+}
+/** Finding-key emission for status-token integrity (P1): both tokens present
+ *  and disagreeing. The colon header remains the authority — this reports the
+ *  contradiction, it never resolves it. */
+export function statusTokenFindings(lint) {
+    if (!lint.statusTokenConflict || lint.state === null)
+        return [];
+    const table = lint.tableStates.filter((s) => s !== lint.state).join(', ');
+    return [
+        {
+            key: 'status-token-conflict',
+            detail: `colon header '${lint.state}' vs table row '${table}' on '${lint.h1 ?? '?'}'`,
+        },
+    ];
 }
 // --- markers, headings, intro -------------------------------------------------------
 const TODO_COMMENT_RE = /(TODO|TBD|PLACEHOLDER|占位)/i;
@@ -217,12 +255,17 @@ export function lintBody(body, opts) {
         commands: distinct(visible, CMD_RE),
     };
     const stateInfo = parseState(visible);
+    const tableStates = parseTableStates(visible);
+    const statusTokenConflict = stateInfo.state !== null && tableStates.some((s) => s !== stateInfo.state);
     return {
         isRedirectStub,
         redirectTarget: target,
         stubHasLink: !isRedirectStub || hasClickableExit(links.length),
         hasStateBlock: stateInfo.has,
         state: stateInfo.state,
+        tableState: tableStates.length > 0 ? tableStates[0] : null,
+        tableStates,
+        statusTokenConflict,
         todoMarkers: countTodoMarkers(masked),
         emptySections: emptySectionsOf(headings),
         introEmpty,
@@ -250,5 +293,8 @@ export function publishGateViolations(lint) {
     if (lint.state === 'active' && (lint.todoMarkers > 0 || lint.emptySections.length > 0)) {
         out.push('active-with-unfinished-skeleton');
     }
+    if (lint.state === 'active' && lint.statusTokenConflict) {
+        out.push('status-token-conflict');
+    }
     return out;
 }

package/dist/maintain.d.ts

@@ -64,6 +64,18 @@ export interface FreshnessScan {
     readonly missingLastVerified: readonly MissingStamp[];
     readonly expiredReviewBy: readonly ExpiredReview[];
 }
+/** One cadence-due page (advisory queue — maintain NEVER auto-writes the stamp). */
+export interface DueForReviewRow {
+    readonly path: string;
+    readonly locale: Locale;
+    /** Whole days from the newest honest stamp date to now (floored; confessional-only
+     *  stamps stamp their own date but never reset the clock — see dueForReviewOf). */
+    readonly stampAge: number;
+    /** Days: metadata 复核周期/Review cadence row when parseable, else genre default. */
+    readonly cadence: number;
+    /** Re-check commands parsed from the ledger's command column (empty when none). */
+    readonly verifyCommands: readonly string[];
+}
 export interface MaintainReport {
     readonly schema: typeof MAINTAIN_SCHEMA;
     readonly generatedAt: string;
@@ -113,10 +125,20 @@ export interface MaintainReport {
         rows: number;
     }[];
     readonly freshness: FreshnessScan | null;
+    /** Deep-only advisory queue (null in light, like freshness). */
+    readonly dueForReview: readonly DueForReviewRow[] | null;
 }
 export declare const MAINTAIN_SCHEMA = "historian.maintain.v2";
 /** Trigram-Jaccard bar for calling two (different-path) titles near-duplicates. */
 export declare const DUP_TITLE_THRESHOLD = 0.75;
+/** Stamp label incl. the 上次验证 variant (the set lint.ts STAMP_RE tests) — one
+ *  line-level source of truth for the honesty rule shared by surface + freshness. */
+export declare const STAMP_LINE_RE: RegExp;
+/** A stamp that confesses the review never executed (swarm-A P2 "stamp honesty"):
+ *  it must not exempt the claim ledger (surface) nor reset the cadence clock
+ *  (dueForReview). Matched per stamp line, never page-wide — "baseline" is a
+ *  common GPU-benchmark noun outside a stamp. */
+export declare const CONFESSIONAL_STAMP_RE: RegExp;
 export declare function buildMaintainReport(input: MaintainInput, opts?: MaintainOptions): Promise<MaintainReport>;
 /** Human report + (always) a fenced machine-readable JSON block at the END —
  *  the same MaintainReport object the tool envelope carries. */

package/dist/maintain.js

@@ -28,9 +28,34 @@ const DEFAULT_TOP_N = 10;
 // pre-emptively so the deep sweep lights up when the genre lane lands.
 const FRESHNESS_GENRES = ['G5', 'G6'];
 const STAMP_RE = /上次核实|last verified/i;
+/** Stamp label incl. the 上次验证 variant (the set lint.ts STAMP_RE tests) — one
+ *  line-level source of truth for the honesty rule shared by surface + freshness. */
+export const STAMP_LINE_RE = /上次核实|上次验证|last verified/i;
+/** A stamp that confesses the review never executed (swarm-A P2 "stamp honesty"):
+ *  it must not exempt the claim ledger (surface) nor reset the cadence clock
+ *  (dueForReview). Matched per stamp line, never page-wide — "baseline" is a
+ *  common GPU-benchmark noun outside a stamp. */
+export const CONFESSIONAL_STAMP_RE = /(not re-run|未复跑|未复核|baseline)/i;
 const REVIEW_LABEL_RE = /^(复核周期|复核期限|复核日期|review[-_ ]?by|review[-_ ]?due)$/i;
 const ISO_DATE_RE = /\d{4}-\d{2}-\d{2}/;
 const REDIRECT_RE = /^>\s*Redirect:/i;
+/** Table column headers that carry the per-row last-verified date (G5 ledger card). */
+const STAMP_COL_RE = /^(?:上次核实于?|上次验证于?|last verified)$/i;
+/** Metadata row naming the review cadence — its value is a DURATION, unlike the
+ *  ISO-date 复核期限/review-by row REVIEW_LABEL_RE owns. */
+const CADENCE_LABEL_RE = /^(?:复核周期|复核节奏|review[-_ ]?cadence|cadence)$/i;
+/** Ledger command-column headers: zh 复核命令/验证命令/命令/用法\/命令,
+ *  en Re-check command / Verify command(s) / Command(s) / Usage \/ Command. */
+const COMMAND_COL_RE = /^(?:命令|用法\s*\/\s*命令|复核命令|验证命令|commands?|usage\s*\/\s*commands?|re[-_ ]?check[-_ ]?commands?|verify[-_ ]?commands?)$/i;
+const DASH_CELL_RE = /^:?-{2,}:?$/;
+const NULLISH_CELL_RE = /^(?:—|–|-|n\/?a|待补充|todo|\?)$/i;
+/** Cadence floors when a stamped page carries no parseable metadata row:
+ *  G5 machine-state ledgers 7d (weekly re-run — the round-1 plan supersedes the
+ *  older 30d skeleton hint), G4 concepts and G6 how-tos 90d (the G6 skeleton's
+ *  own 复核周期 example "如每 90 天"); the remaining genres (G1/G2/G3) have no
+ *  cadence guidance anywhere, so the conservative quarterly 90d default applies. */
+const GENRE_CADENCE_DAYS = { G5: 7, G4: 90, G6: 90 };
+const DEFAULT_CADENCE_DAYS = 90;
 // --- Title similarity (trigram core copied from migrate-score.ts:289, where it
 // --- is private with a 0.95 roundtrip bar; maintain needs its own threshold) ---
 function titleGrams(s) {
@@ -204,6 +229,117 @@ function reviewByOf(body) {
     }
     return null;
 }
+// --- dueForReview (cadence × stamp join; advisory only) --------------------------
+function tableCells(line) {
+    const t = line.trim();
+    return t.startsWith('|') ? t.split('|').map((c) => c.trim()) : null;
+}
+const isSeparatorRow = (cells) => cells.some((c) => c !== '' && DASH_CELL_RE.test(c));
+/** Every (date, confesses-non-execution) attestation in a body, two real shapes:
+ *  a stamp LABEL line carrying its ISO date (metadata rows, quote stamps, struck
+ *  history — the cockpit / 09-08-sweep forms) and each date under a
+ *  上次核实于/Last verified table column (the G5 card's per-row ledger dates). */
+function stampEntriesOf(body) {
+    const out = [];
+    let dateCol = -1;
+    for (const line of body.split('\n')) {
+        const lineDate = STAMP_LINE_RE.test(line) ? line.match(ISO_DATE_RE) : null;
+        if (lineDate !== null)
+            out.push({ ms: Date.parse(lineDate[0]), confessional: CONFESSIONAL_STAMP_RE.test(line) });
+        const cells = tableCells(line);
+        if (cells === null) {
+            dateCol = -1;
+            continue;
+        }
+        if (isSeparatorRow(cells))
+            continue;
+        // A `| 上次核实 | 2026-01-01 |` label row carries its own date (line rule above
+        // owns it) — only a date-less header row arms the column extraction, else the
+        // next value row (any label!) would be mis-read as a ledger date.
+        const h = ISO_DATE_RE.test(line) ? -1 : cells.findIndex((c) => STAMP_COL_RE.test(c));
+        if (h >= 0) {
+            dateCol = h;
+            continue;
+        }
+        const cell = dateCol >= 0 ? cells[dateCol] : undefined;
+        if (cell !== undefined) {
+            const m = cell.match(ISO_DATE_RE);
+            if (m !== null)
+                out.push({ ms: Date.parse(m[0]), confessional: CONFESSIONAL_STAMP_RE.test(cell) });
+        }
+    }
+    return out.filter((e) => !Number.isNaN(e.ms));
+}
+/** '30天' / '每 30 天' / 'every 30 days' / '7d' / '2 weeks' / bare '14' → days.
+ *  Dates, TODOs and prose return null — no cadence is ever fabricated. */
+function parseDays(text) {
+    const t = text.trim();
+    const w = t.match(/(\d{1,3})\s*(?:weeks?|wks?|w\b|周)/i);
+    if (w !== null)
+        return Number(w[1]) * 7;
+    const d = t.match(/(\d{1,4})\s*(?:days?|d\b|天|日)/i);
+    if (d !== null)
+        return Number(d[1]);
+    return /^\d{1,3}$/.test(t) ? Number(t) : null;
+}
+function cadenceDaysOf(body) {
+    for (const line of body.split('\n')) {
+        const cells = tableCells(line);
+        if (cells === null || cells.length < 3 || !CADENCE_LABEL_RE.test(cells[1] ?? ''))
+            continue;
+        for (const cell of cells.slice(2)) {
+            const days = parseDays(cell);
+            if (days !== null)
+                return days;
+        }
+    }
+    return null;
+}
+/** Re-check commands from ledger verification tables (see COMMAND_COL_RE):
+ *  backticks stripped, empty/nullish cells skipped, order kept, duplicates dropped. */
+function verifyCommandsOf(body) {
+    const out = [];
+    let cmdCol = -1;
+    for (const line of body.split('\n')) {
+        const cells = tableCells(line);
+        if (cells === null) {
+            cmdCol = -1;
+            continue;
+        }
+        if (isSeparatorRow(cells))
+            continue;
+        const h = cells.findIndex((c) => COMMAND_COL_RE.test(c));
+        if (h >= 0) {
+            cmdCol = h;
+            continue;
+        }
+        const cell = cmdCol >= 0 ? cells[cmdCol] : undefined;
+        if (cell === undefined)
+            continue;
+        const cmd = cell.replace(/^`([\s\S]*)`$/, '$1').trim();
+        if (cmd !== '' && !NULLISH_CELL_RE.test(cmd) && !out.includes(cmd))
+            out.push(cmd);
+    }
+    return out;
+}
+/** The join (swarm-B P-dueForReview, stamp honesty as its immune system): due
+ *  when the newest HONEST stamp is at or past the cadence (a weekly card is due
+ *  again on day 7), or when every stamp confesses non-execution — a confession
+ *  records intent, not verification, so it never exempts the page. A struck old
+ *  confessional stamp beside a fresh honest one (supersede-keeping-struck-old)
+ *  runs on the honest clock. */
+function dueForReviewOf(body, genre, now) {
+    const entries = stampEntriesOf(body);
+    if (entries.length === 0)
+        return null;
+    const honest = entries.filter((e) => !e.confessional);
+    const clock = honest.length > 0 ? honest : entries;
+    const stampAge = Math.floor((now.getTime() - Math.max(...clock.map((e) => e.ms))) / DAY_MS);
+    const cadence = cadenceDaysOf(body) ?? GENRE_CADENCE_DAYS[genre] ?? DEFAULT_CADENCE_DAYS;
+    if (honest.length > 0 && stampAge < cadence)
+        return null;
+    return { stampAge, cadence, verifyCommands: verifyCommandsOf(body) };
+}
 // --- buildMaintainReport --------------------------------------------------------
 export async function buildMaintainReport(input, opts = {}) {
     const now = opts.now ?? new Date();
@@ -222,11 +358,13 @@ export async function buildMaintainReport(input, opts = {}) {
         localeCount.set(r.path, (localeCount.get(r.path) ?? 0) + 1);
     let redirects = { available: false, count: 0, stubs: [] };
     let freshness = null;
+    let dueForReview = null;
     if (deep && opts.readBody !== undefined) {
         const readBody = opts.readBody;
         const stubs = [];
         const missing = [];
         const expired = [];
+        const due = [];
         let scanned = 0;
         let unreadable = 0;
         for (const r of kept) {
@@ -242,6 +380,9 @@ export async function buildMaintainReport(input, opts = {}) {
                 continue; // stubs are pointers — exempt from the freshness-stamp rule
             }
             const genre = classifyGenre({ title: r.title, body }).genre;
+            const dfr = dueForReviewOf(body, genre, now);
+            if (dfr !== null)
+                due.push({ path: r.path, locale: r.locale, ...dfr });
             if (!FRESHNESS_GENRES.includes(genre))
                 continue;
             if (!STAMP_RE.test(body))
@@ -256,6 +397,7 @@ export async function buildMaintainReport(input, opts = {}) {
         }
         redirects = { available: true, count: stubs.length, stubs };
         freshness = { scanned, unreadable, missingLastVerified: missing, expiredReviewBy: expired };
+        dueForReview = due.sort((a, b) => b.stampAge - a.stampAge || cmpStr(a.path, b.path) || cmpStr(a.locale, b.locale));
     }
     return {
         schema: MAINTAIN_SCHEMA,
@@ -278,6 +420,7 @@ export async function buildMaintainReport(input, opts = {}) {
         redirects,
         sections: sectionDist(kept),
         freshness,
+        dueForReview,
     };
 }
 // --- renderMaintainMarkdown -----------------------------------------------------
@@ -350,6 +493,17 @@ export function renderMaintainMarkdown(r) {
         for (const e of r.freshness.expiredReviewBy)
             L.push(`  - review overdue: \`${e.path}\` (${e.locale}) since ${e.reviewBy} (${fmt(e.daysExpired)}d)`);
     }
+    if (r.dueForReview !== null) {
+        L.push('', `## 到期复核 Due for review（deep，advisory）`, '');
+        L.push(`- ${fmt(r.dueForReview.length)} 条 —仅提示，机器不代写；复核由人或复核协议执行`);
+        for (const d of r.dueForReview) {
+            const why = d.stampAge >= d.cadence
+                ? `戳龄 ${fmt(d.stampAge)}d ≥ 周期 ${fmt(d.cadence)}d`
+                : `confessional stamp（自称未复跑），周期 ${fmt(d.cadence)}d 未到亦列`;
+            const cmds = d.verifyCommands.length > 0 ? ` · ${d.verifyCommands.map((c) => '`' + c + '`').join(' ')}` : '';
+            L.push(`  - \`${d.locale}/${d.path}\` — ${why}${cmds}`);
+        }
+    }
     L.push('', '## Machine-readable JSON', '', '```json', JSON.stringify(r, null, 2), '```', '');
     return L.join('\n');
 }

package/dist/surface.d.ts

@@ -11,7 +11,7 @@
  * tier costs nothing beyond the map baseline, the deep tier reads every body
  * once (caller pools the reads).
  */
-import type { MaintainRow } from './maintain.js';
+import { type MaintainRow } from './maintain.js';
 import type { Locale } from './wiki/pages.read.js';
 import type { NavSnapshot } from './wiki/nav.js';
 export declare const SURFACE_SCHEMA: "historian.surface.v1";

package/dist/surface.js

@@ -14,6 +14,7 @@
 import { isInternalPath } from './tools/shared.js';
 import { lintBody } from './lint.js';
 import { classifyGenre } from './templates/genres.js';
+import { CONFESSIONAL_STAMP_RE, STAMP_LINE_RE } from './maintain.js';
 export const SURFACE_SCHEMA = 'historian.surface.v1';
 const MACHINE_SEG_RE = /^_/;
 // nav targets carry a leading slash and may pre-pend the locale segment
@@ -111,6 +112,13 @@ function resolveTargetPath(baseUrl, rawHref) {
         return { path: t.slice(3), locale: 'en' };
     return { path: t, locale: 'en' };
 }
+/** True when EVERY stamp-bearing line confesses non-execution — see the
+ *  ledgerClaims rule in buildDeep. Lines are the unit of judgement because a
+ *  struck old stamp beside a fresh honest one must keep the exemption. */
+function isConfessionalStamp(body) {
+    const stampLines = body.split('\n').filter((l) => STAMP_LINE_RE.test(l));
+    return stampLines.length > 0 && stampLines.every((l) => CONFESSIONAL_STAMP_RE.test(l));
+}
 async function scanBodies(input) {
     if (input.readBody === undefined)
         return [];
@@ -252,7 +260,13 @@ function buildDeep(input, scans) {
         .map((s) => ({ path: s.row.path, cjkRatio: Number(s.lint.cjkRatio.toFixed(3)) }));
     const ledgerClaims = [];
     for (const s of ok) {
-        if (s.lint.isRedirectStub || !isFrontPath(s.row.path) || s.lint.hasStamp)
+        // Stamp honesty (swarm-A P2): a stamp that only ever confesses the review
+        // never ran ("…(content not re-run)"/未复跑/未复核/baseline) is not evidence —
+        // claiming review without execution must not suppress the claim ledger.
+        // Any single non-confessional stamp line (incl. supersede-keeping-struck-old)
+        // exempts exactly as before.
+        const exempt = s.lint.hasStamp && !isConfessionalStamp(s.body);
+        if (s.lint.isRedirectStub || !isFrontPath(s.row.path) || exempt)
             continue;
         const genre = classifyGenre({ title: s.row.title, body: s.body }).genre;
         if (!(genre === 'G4' || genre === 'G5' || genre === 'G6'))

package/dist/templates/skeletons.js

@@ -599,7 +599,7 @@ export const G6_ZH = `# 如何做某事（占位：目标句式标题，须与
 
 | 元数据 | 值 |
 | --- | --- |
-| 状态 | <!-- Active / Superseded-by: <path> / Deprecated --> |
+| 状态 | draft <!-- 必须与顶部 状态/Status 头同 token；改状态时两处一起改 --> |
 | 上次核实 | <!-- YYYY-MM-DD，在哪套环境按本页步骤重跑过 --> |
 | 复核周期 | <!-- 如每 90 天，到期重跑本页步骤 --> |
 | 被取代于 | <!-- 新手册路径，无则填 — --> |
@@ -648,7 +648,7 @@ export const G6_EN = `# How to Do X (placeholder: goal-titled heading, must matc
 
 | Field | Value |
 | --- | --- |
-| Status | <!-- Active / Superseded-by: <path> / Deprecated --> |
+| Status | draft <!-- must carry the SAME token as the 状态/Status header above; change both together --> |
 | Last verified | <!-- YYYY-MM-DD and the environment the steps were re-run in --> |
 | Review by | <!-- e.g. every 90 days; re-run the steps when due --> |
 | Superseded by | <!-- path of the newer manual, or — --> |

package/dist/tools/local.js

@@ -10,10 +10,11 @@ import { buildChronology, filterRowsByPath } from '../chronology.js';
 import { getMap, refreshMapCache, CACHE_PATH } from '../map.js';
 import { buildMaintainReport, renderMaintainMarkdown } from '../maintain.js';
 import { buildSurfaceReport, renderSurfaceMarkdown } from '../surface.js';
+import { lintBody, statusTokenFindings } from '../lint.js';
 import { normalizeLocale, PathValidationError } from '../wiki/locale.js';
 import { listPages, readPage } from '../wiki/pages.read.js';
 import { readPrimaryNav } from '../wiki/nav.js';
-import { errEnvelope, okJson, reportUrls, URL_MANDATE } from './shared.js';
+import { errEnvelope, isInternalPath, okJson, reportUrls, URL_MANDATE } from './shared.js';
 const s = tool.schema;
 const TRANSLATE_ARGS = {
     text: s.string(),
@@ -64,6 +65,24 @@ const MAP_ARGS = {
     deep: s.boolean().optional().describe('maintain: additionally read every page body (freshness + stubs + broken/stacked links + twin parity + zh-first + unfinished skeletons + claim ledgers) — one bounded read per row, cached across both scans'),
 };
 const MapArgsSchema = s.object(MAP_ARGS);
+/** P1 surfacing: lint's status-token-conflict finding per scanned body,
+ *  reusing runMaintain's per-page body cache (zero extra wiki reads). Machine
+ *  rows carry the `status-token-conflict` key so harness graders can count it
+ *  without re-deriving the rule. */
+async function scanStatusTokenConflicts(rows, readBody, baseUrl) {
+    const out = [];
+    for (const r of rows) {
+        if (isInternalPath(r.path))
+            continue;
+        const body = await readBody(r.path, r.locale);
+        if (body === null || body === '')
+            continue;
+        const findings = statusTokenFindings(lintBody(body, { locale: r.locale, baseUrl, title: r.title }));
+        for (const f of findings)
+            out.push({ path: r.path, locale: r.locale, key: f.key, detail: f.detail });
+    }
+    return out;
+}
 /** maintain: light tier is map rows + ONE read-only pages.list pass per locale
  *  (the mirror's MapRow carries no tags; the list join restores the vocab view);
  *  deep additionally reads each body via readPage. Reserved-path pages (e.g.
@@ -113,15 +132,23 @@ async function runMaintain(deps, mapDeps, snapshot, deep) {
         deep,
         readBody,
     });
+    const statusTokenConflicts = deep && readBody !== undefined
+        ? await scanStatusTokenConflicts(rows, readBody, deps.options.baseUrl)
+        : [];
+    const conflictNote = statusTokenConflicts.length === 0
+        ? ''
+        : `\n\n## 状态令牌冲突 Status-token conflicts (${statusTokenConflicts.length})\n` +
+            statusTokenConflicts.map((c) => `- \`${c.locale}/${c.path}\` status-token-conflict: ${c.detail}`).join('\n') +
+            '\n';
     return {
         action: 'maintain',
         schema: 'historian.maintain.v3',
         deep: report.deep,
         generatedAt: report.generatedAt,
         rowCount: report.rowCount,
-        report,
+        report: { ...report, statusTokenConflicts },
         surface,
-        markdown: `${renderMaintainMarkdown(report)}\n\n${renderSurfaceMarkdown(surface)}`,
+        markdown: `${renderMaintainMarkdown(report)}${conflictNote}\n\n${renderSurfaceMarkdown(surface)}`,
         urls: reportUrls(deps.options.baseUrl, CACHE_PATH, 'en'),
     };
 }

package/dist/tools/shared.d.ts

@@ -129,9 +129,10 @@ export declare function sectionRefusalJson(path: string, allowedSections: readon
 export declare class PublishGateError extends Error {
     constructor(message: string);
 }
-/** Hard gate on front-tier writes: refuses the two shapes that shipped real
+/** Hard gate on front-tier writes: refuses the three shapes that shipped real
  *  incidents — a page claiming Active with TODO markers or empty skeleton
- *  sections, and a redirect stub whose body carries no clickable exit.
+ *  sections, a redirect stub whose body carries no clickable exit, and (R4/P1)
+ *  an Active write whose table-row 状态/Status token contradicts the header.
  *  `_sandbox/*` and internal namespaces are exempt; 状态:draft stays the
  *  sanctioned work-in-progress escape hatch. Null = proceed. */
 export declare function publishGateRefusalJson(content: string, locale: Locale, path: string, baseUrl: string): ToolResult | null;

package/dist/tools/shared.js

@@ -85,7 +85,7 @@ function hintFor(errorKind) {
         case 'GraphQLError':
             return 'The wiki answered a GraphQL error — check the path/locale arguments.';
         case 'PublishGateError':
-            return '消除 TODO/空节并把状态置 Active，或保留 状态:draft 待自检通过后发布；重定向存根正文必须带可点击的 [链接](目标URL)。';
+            return '消除 TODO/空节并把状态置 Active，或保留 状态:draft 待自检通过后发布；重定向存根正文必须带可点击的 [链接](目标URL)；Active 页的表格行 状态/Status 必须与顶部冒号状态头同 token（改状态两处一起改）。';
         default:
             return 'Inspect the message and retry.';
     }
@@ -314,9 +314,10 @@ export class PublishGateError extends Error {
         this.name = 'PublishGateError';
     }
 }
-/** Hard gate on front-tier writes: refuses the two shapes that shipped real
+/** Hard gate on front-tier writes: refuses the three shapes that shipped real
  *  incidents — a page claiming Active with TODO markers or empty skeleton
- *  sections, and a redirect stub whose body carries no clickable exit.
+ *  sections, a redirect stub whose body carries no clickable exit, and (R4/P1)
+ *  an Active write whose table-row 状态/Status token contradicts the header.
  *  `_sandbox/*` and internal namespaces are exempt; 状态:draft stays the
  *  sanctioned work-in-progress escape hatch. Null = proceed. */
 export function publishGateRefusalJson(content, locale, path, baseUrl) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-wiki-historian",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "opencode plugin that manages a wiki.js knowledge base with bilingual pages, genre templates, and migration tooling.",
   "type": "module",
   "license": "MIT",