paseo-req-kit 1.14.0-beta.3 → 1.14.0-beta.5

package/engine/src/pipeline.ts

@@ -1,4 +1,6 @@
 import { judge as judgeScan } from "./scan-guard.js";
+import { dangerMessage, dangerOf } from "./danger-guard.js";
+import { describeFinding, scanChange, secretFollowUp } from "./secret-scan.js";
 import { execFileSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
@@ -29,6 +31,7 @@ import {
   verifyStartPrompt,
   milestoneMessage,
   permissionMessage,
+  dangerNotice,
   resultFollowUp,
 } from "./messages.js";
 import { KIT_ROOT, kitVersion } from "./locations.js";
@@ -38,7 +41,7 @@ import { describeExternal, type IntegrationEvent, renderArgs, resolveCommand, ty
 import { cardSlug, planAppendix, publishCard, readSource } from "./card.js";
 import { principlesSection, projectAdditions, type PromptLocations, readToolPrompt } from "./prompts.js";
 import type { AgentRuntime, ManagedService, ServiceTarget, StepAgent, WaitOutcome } from "./runtime.js";
-import { type CheckOutcome, type GateRun, type JointRepo, type PhaseName, type PipelineState, type Recovery, type RunPhases, type StepRecord, type StopKind, writeState } from "./state.js";
+import { type CheckOutcome, type GateRun, type JointRepo, type PhaseName, type PipelineState, type Recovery, type SecretScanRun, type RunPhases, type StepRecord, type StopKind, writeState } from "./state.js";
 import { type PanelStep, STEPS, type StepDef, type StepId, stepKey, validateResult, VERIFY_PHASE_STEPS } from "./steps.js";
 
 export interface PipelineContext {
@@ -518,6 +521,15 @@ function pushBranch(ctx: PipelineContext): void {
   const at = new Date().toISOString();
   for (const repo of repos) {
     let error: string | null = null;
+    // 1.14: nothing with a secret in it leaves the machine.
+    const target = (ctx.state.joint ?? []).map((j) => ({ joint: j, repo: j.repo })).find((t) => t.repo === repo);
+    const secrets = ctx.config.secretScan.enabled ? scanChange(repo, secretBase(ctx, target as StepTarget | undefined), ctx.config.secretScan) : [];
+    if (secrets && secrets.length > 0) {
+      error = `发现 ${secrets.length} 处疑似密钥，没有推送（例如 ${describeFinding(secrets[0])}）；去掉后继续开发会再推送`;
+      ctx.log(`推送 ${repo} 的分支：${error}`);
+      ctx.state.pushed = [...(ctx.state.pushed ?? []).filter((p) => p.repo !== repo), { repo, remote: push.remote, branch, at, error, mergeRequest: ctx.state.pushed?.find((p) => p.repo === repo)?.mergeRequest ?? null }];
+      continue;
+    }
     try {
       execFileSync("git", ["push", push.remote, `HEAD:refs/heads/${branch}`], { cwd: repo, stdio: ["ignore", "pipe", "pipe"], timeout: 180_000, windowsHide: true });
     } catch (e) {
@@ -661,9 +673,57 @@ async function guardScan(ctx: PipelineContext, agent: StepAgent, def: StepDef, k
   recover(ctx, key, "stop_scan", `「${def.title}」的命令${verdict.reason}，已打断并告诉 agent 改用别的办法：${tool.text.replace(/\s+/g, " ").slice(0, 120)}`);
 }
 
+/** How often the danger guard looks at the agent's commands (it waits in chunks this long). */
+const DANGER_CHECK_SECONDS = 15;
+/** At most this many danger interruptions per turn. */
+const DANGER_MAX_INTERRUPTS = 5;
+
+/**
+ * 1.14: looks at the commands the step agent ran or is running; a dangerous one is recorded, the
+ * person is told, and the agent is interrupted (while its turn runs) with what to do instead.
+ * Each tool call is handled once, also across turns and pipeline restarts.
+ */
+async function guardDanger(ctx: PipelineContext, agent: StepAgent, def: StepDef, agentTitle: string, key: string, turnRunning: boolean, memory: { count: number }): Promise<void> {
+  const settings = ctx.config.dangerGuard;
+  if (!settings.enabled || !ctx.runtime.toolCalls) return;
+  const calls = await ctx.runtime.toolCalls(agent.id).catch(() => null);
+  if (!calls) return;
+  const seen = new Set((ctx.state.dangers ?? []).filter((d) => d.agentId === agent.id).map((d) => d.callId));
+  for (const call of calls) {
+    if (seen.has(call.callId) || !["shell", "fetch", "unknown"].includes(call.kind)) continue;
+    const danger = dangerOf(call.text, settings, { repo: agentRepo(ctx, agent) });
+    if (!danger) continue;
+    const ran = call.status !== "running";
+    seen.add(call.callId);
+    ctx.state.dangers = [...(ctx.state.dangers ?? []), { at: new Date().toISOString(), key, stepTitle: def.title, command: call.text.slice(0, 500), label: danger.label, ran, agentId: agent.id, callId: call.callId }].slice(-50);
+    save(ctx);
+    ctx.log(`危险命令（${key}）：${danger.label}，${ran ? "已运行完" : "正在运行，打断"}：${call.text.replace(/\s+/g, " ").slice(0, 160)}`);
+    if (turnRunning && memory.count < DANGER_MAX_INTERRUPTS) {
+      memory.count += 1;
+      await ctx.runtime.interruptAgent(agent.id, dangerMessage(call.text, danger, ran)).catch((error: Error) => ctx.log(`打断「${def.title}」失败：${error.message}`));
+    }
+    await notifyOrigin(ctx, dangerNotice({ stepTitle: def.title, agentTitle, command: call.text, label: danger.label, ran }));
+    await notifyExternal(ctx, "alert", `「${def.title}」步骤的 agent ${ran ? "运行了" : "开始运行"}不允许的命令（${danger.label}）${ran ? "，请检查有没有造成影响" : "，已打断"}。`, {
+      kind: "danger",
+      stepTitle: def.title,
+      command: call.text.slice(0, 500),
+      label: danger.label,
+      ran,
+    });
+  }
+}
+
+/** The directory the agent works in: the joint repository's worktree when it is one of theirs. */
+function agentRepo(ctx: PipelineContext, agent: StepAgent): string {
+  const record = ctx.state.history.find((h) => h.agentId === agent.id);
+  const slug = record?.key.includes("@") ? record.key.split("@").pop() : null;
+  return (slug && ctx.state.joint?.find((j) => j.slug === slug)?.repo) || ctx.repo;
+}
+
 async function waitForTurn(ctx: PipelineContext, agent: StepAgent, def: StepDef, agentTitle: string, deadline: Deadline): Promise<AgentUsage | null> {
   const notifiedPermissions = new Set<string>();
   const guard: ScanGuardMemory = { interrupted: new Set(), count: 0 };
+  const danger = { count: 0 };
   let consecutiveErrors = 0;
   for (;;) {
     let remaining = deadline.at - Date.now();
@@ -686,7 +746,9 @@ async function waitForTurn(ctx: PipelineContext, agent: StepAgent, def: StepDef,
     let outcome;
     try {
       // 1.13: with the scan guard on, look at the running tool call about once a minute.
-      const chunk = ctx.config.scanGuard.enabled ? Math.min(ctx.config.waitChunkSeconds, SCAN_CHECK_SECONDS) : ctx.config.waitChunkSeconds;
+      // 1.14: with the danger guard on, look at its commands every 15 seconds.
+      const guardSeconds = ctx.config.dangerGuard.enabled ? DANGER_CHECK_SECONDS : ctx.config.scanGuard.enabled ? SCAN_CHECK_SECONDS : Infinity;
+      const chunk = Math.min(ctx.config.waitChunkSeconds, guardSeconds);
       outcome = await agent.wait(Math.min(chunk * 1000, remaining));
       consecutiveErrors = 0;
     } catch (error) {
@@ -706,8 +768,10 @@ async function waitForTurn(ctx: PipelineContext, agent: StepAgent, def: StepDef,
     }
     switch (outcome.status) {
       case "idle":
+        await guardDanger(ctx, agent, def, agentTitle, deadline.key, false, danger);
         return outcome.usage ?? null;
       case "timeout":
+        await guardDanger(ctx, agent, def, agentTitle, deadline.key, true, danger);
         await guardScan(ctx, agent, def, deadline.key, guard);
         continue;
       case "error":
@@ -924,12 +988,14 @@ async function runStepOnce(
 
     if (extras.gate) {
       // The same agent fixes what its own change broke: it still has the context.
-      await qualityGate(ctx, key, target, async (text) => {
+      const fix = async (text: string) => {
         await agent.followUp(text);
         record.usage = (await waitForTurn(ctx, agent, def, agentTitle, deadline)) ?? record.usage ?? null;
         const again = readResultFile(resultAbs, def);
         if (again.ok) validation = again;
-      });
+      };
+      await qualityGate(ctx, key, target, fix);
+      await secretGate(ctx, key, target, fix);
     }
 
     record.outcome = "completed";
@@ -1703,6 +1769,69 @@ async function qualityGate(ctx: PipelineContext, key: string, target: StepTarget
   }
 }
 
+/** The commit the secret scan starts from: the attempt's code base, else where the branch left the main line. */
+function secretBase(ctx: PipelineContext, target?: StepTarget): string | null {
+  const repo = target?.repo ?? ctx.repo;
+  const recorded = codeBaseCommit(ctx, target);
+  if (recorded) return recorded;
+  for (const ref of ["origin/HEAD", "origin/main", "origin/master", "main", "master"]) {
+    try {
+      const mb = execFileSync("git", ["merge-base", "HEAD", ref], { cwd: repo, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], windowsHide: true }).trim();
+      if (mb && mb !== headCommit(repo)) return mb;
+    } catch {
+      /* try the next */
+    }
+  }
+  return null;
+}
+
+/**
+ * 1.14: after a step that changed code, looks for secrets the requirement added (secret-scan.ts);
+ * what it finds goes back to the step's agent, like a failing check, up to qualityGate.fixAttempts
+ * times. The outcome is kept for the review, the report and the push.
+ */
+async function secretGate(ctx: PipelineContext, key: string, target: StepTarget | undefined, fix: (text: string) => Promise<void>): Promise<void> {
+  if (!ctx.config.secretScan.enabled) return;
+  const repo = target?.repo ?? ctx.repo;
+  const base = secretBase(ctx, target);
+  const max = ctx.config.qualityGate.fixAttempts;
+  for (let fixRounds = 0; ; fixRounds += 1) {
+    const findings = scanChange(repo, base, ctx.config.secretScan);
+    if (findings === null) {
+      ctx.log(`密钥扫描（${key} 之后）：找不到改动的起点，没有扫描`);
+      return;
+    }
+    if (findings.length === 0 || fixRounds >= max) {
+      const run: SecretScanRun = { key, attempt: ctx.state.attempt, at: new Date().toISOString(), findings, fixRounds, passed: findings.length === 0 };
+      ctx.state.secretScans = [...(ctx.state.secretScans ?? []).filter((r) => !(r.key === key && r.attempt === run.attempt)), run].slice(-30);
+      save(ctx);
+      ctx.log(`密钥扫描（${key} 之后）：${run.passed ? (fixRounds > 0 ? `要求处理 ${fixRounds} 次后没有发现` : "没有发现") : `要求处理 ${fixRounds} 次后仍有 ${findings.length} 处`}`);
+      if (!run.passed) {
+        await notifyOrigin(ctx, milestoneMessage(`「${key}」之后的密钥扫描仍发现 ${findings.length} 处疑似密钥（例如 ${describeFinding(findings[0])}）。这些提交不会被推送；请用户看一下是不是真实的密钥。`));
+      }
+      return;
+    }
+    ctx.log(`密钥扫描（${key} 之后）：发现 ${findings.length} 处疑似密钥，第 ${fixRounds + 1} 次要求处理`);
+    await fix(secretFollowUp({ findings, base: base!, round: fixRounds + 1, max }));
+  }
+}
+
+/** What the secret scan found in this attempt, for the code review and the report. */
+function secretLines(ctx: PipelineContext): string[] {
+  const runs = (ctx.state.secretScans ?? []).filter((r) => r.attempt === ctx.state.attempt);
+  const last = runs.at(-1);
+  if (!last) return [];
+  if (last.passed) return [`密钥扫描（${last.key} 之后，流水线运行）：没有发现疑似密钥${last.fixRounds > 0 ? `（要求处理 ${last.fixRounds} 次后）` : ""}`];
+  return [`密钥扫描（${last.key} 之后，流水线运行）：仍有 ${last.findings.length} 处疑似密钥，分支不会被推送：`, ...last.findings.slice(0, 10).map((f) => `- ${describeFinding(f)}`)];
+}
+
+/** Dangerous commands step agents ran in this run, for the report. */
+function dangerLines(ctx: PipelineContext): string[] {
+  const list = ctx.state.dangers ?? [];
+  if (list.length === 0) return [];
+  return [`流水线拦下的危险命令（${list.length} 次，已通知用户）：`, ...list.slice(-10).map((d) => `- 「${d.stepTitle}」${d.ran ? "运行了" : "开始运行（已打断）"}：${d.label}`)];
+}
+
 function describeGateRun(run: GateRun): string {
   const ran = run.checks.filter((c) => c.result !== "skipped");
   const skipped = run.checks.length - ran.length;
@@ -1963,7 +2092,7 @@ async function developPhase(ctx: PipelineContext): Promise<Record<string, unknow
 
   const reviewLoop = async (target?: StepTarget) => {
     for (let r = 1; r <= rounds.codeReview; r++) {
-      const lines = [...gateLines(ctx, target), ...(target ? [] : scopeLines(ctx)), ...acceptanceLines(ctx, target)];
+      const lines = [...gateLines(ctx, target), ...(target ? [] : [...secretLines(ctx), ...scopeLines(ctx)]), ...acceptanceLines(ctx, target)];
       const review = await runReview(ctx, "code_review", r, rounds.codeReview, lines, target);
       if (review.verdict === "pass") break;
       await runStep(ctx, "review_fix", r, rounds.codeReview, { gate: true, target });
@@ -2142,7 +2271,7 @@ function externalLines(ctx: PipelineContext): string[] {
 }
 
 function reportLines(ctx: PipelineContext): string[] {
-  const lines = [...usageLines(ctx), ...gateLines(ctx), ...scopeLines(ctx), ...acceptanceLines(ctx), ...jointLines(ctx), ...externalLines(ctx)];
+  const lines = [...usageLines(ctx), ...gateLines(ctx), ...secretLines(ctx), ...dangerLines(ctx), ...scopeLines(ctx), ...acceptanceLines(ctx), ...jointLines(ctx), ...externalLines(ctx)];
   if (ctx.config.checks.length === 0 && ctx.state.type !== "assessment") {
     lines.push("质量门：项目没有配置检查（checks），流水线没有自己运行检查，以各步骤记录的检查结果为准");
   }

package/engine/src/preflight.ts

@@ -1,3 +1,4 @@
+import { pendingHumanReview } from "./code-review.js";
 import { execFileSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
@@ -14,7 +15,7 @@ import {
 } from "./config.js";
 import { gitInfo } from "./git.js";
 import { samePath } from "./paths.js";
-import { currentLockHolder, type PipelineState, readState, statePath } from "./state.js";
+import { currentLockHolder, isAlive, type PipelineState, readState, statePath } from "./state.js";
 
 export interface LaunchArgs {
   repo: string;
@@ -33,6 +34,8 @@ export interface LaunchArgs {
   cardFields?: boolean;
   /** 1.14 --track: register a requirement being aligned, before the pipeline runs (shown in the plugin). */
   track?: boolean;
+  /** 1.14 --review-fix: a person's code review asked for changes; a new attempt handles them. */
+  reviewFix?: boolean;
   /** --spec-review: independent review of the draft spec, before confirmation. */
   specReview: boolean;
   /** --worktree: create a Paseo worktree workspace for this requirement and develop there. */
@@ -254,6 +257,12 @@ export function preflight(
         ? "这个需求的流水线已经完成。如需重新完整运行，请加 --restart。"
         : `这个需求已有运行记录（状态：${previous.status}）。从中断处继续请加 --resume，从头开始请加 --restart。`;
     throw new PreflightError(hint);
+  } else if (args.reviewFix) {
+    // 1.14: the person's code review (plugin) asked for changes; the spec itself did not change.
+    if (previous.status === "running" && isAlive(previous.pid)) throw new PreflightError("流水线正在运行，等它结束后再处理人工评审意见。");
+    const pending = pendingHumanReview(path.join(repo, featureDir));
+    if (!pending) throw new PreflightError("没有待处理的人工代码评审意见（在插件的代码审查页上提交\"退回修改\"后才有）。");
+    mode = { kind: "resume-from-design", previous, reason: `人工代码评审提出了 ${pending.items.length} 条修改意见（见 code-review.md 的"人工评审"一节和 changes.md），需求说明不变，从方案设计开始只处理这些意见` };
   } else if (args.approve && previous.status !== "waiting_for_approval") {
     throw new PreflightError(`这个需求没有等待确认的方案（状态：${previous.status}），不需要 --approve。继续开发请用 --resume。`);
   } else if (previous.status === "waiting_for_approval" && currentSpecHash(specPath) !== previous.specHash) {

package/engine/src/records.ts

@@ -6,6 +6,8 @@
 //                         on the machine. The overview itself is still read live (ADR 0010).
 //   usage/runs.jsonl      one line per pipeline run (a process from start to stop): steps,
 //                         time, usage, gate and review rounds. What `req stats` reports on.
+//                         1.14: also one line per event after the run: a person's code review,
+//                         the acceptance, the merge into the main line, a problem found after it.
 //
 // Recording never affects a run: every write is best effort. REQ_KIT_NO_RECORD=1 turns both
 // off (evaluation runs are not real requirements).
@@ -321,3 +323,72 @@ export function readRuns(file: string): RunRecord[] {
   }
   return out;
 }
+
+// ---------------------------------------------------------------------------
+// Events after the run (1.14)
+
+export type EventKind = "review" | "acceptance" | "merge" | "issue";
+
+/** Something that happened to a requirement outside its runs (contracts/usage-record.md). */
+export interface EventRecord {
+  schema: 1;
+  kind: EventKind;
+  machine: string;
+  kitVersion: string;
+  at: string;
+  requirement: { key: string; project: string; name: string; title: string };
+  /** A person's code review in the plugin. */
+  review?: { verdict: "approved" | "changes_requested"; reviewer: string; items: number; head: string | null };
+  /** The requester's acceptance on the checklist page. */
+  acceptance?: { verdict: "通过" | "不通过"; reviewer: string; total: number; passed: number; failed: number; unchecked: number };
+  /** The requirement's change reached the main line. how: found its files there ("files"), or a person said so ("manual"). */
+  merge?: { into: string; commit: string | null; mergedAt: string | null; how: "files" | "manual" };
+  /** A problem found after the merge: from a defect requirement that names this one, or a person's note. */
+  issue?: { text: string; by: string | null; id: string };
+}
+
+/** The requirement as events name it: the index entry when there is one (same key as its runs). */
+export function requirementRef(repo: string, featureDir: string, env: NodeJS.ProcessEnv = process.env): EventRecord["requirement"] {
+  const fd = featureDir.split(path.sep).join("/");
+  const r = real(repo);
+  const entry = readIndex(env).find((e) => e.featureDir === fd && (real(e.repo) === r || (e.sourceRepo && real(e.sourceRepo) === r)));
+  const source = entry?.sourceRepo ?? entry?.repo ?? repo;
+  let title = path.basename(fd);
+  try {
+    const m = /^#\s+(.+)$/m.exec(fs.readFileSync(path.join(entry?.repo ?? repo, fd, "spec.md"), "utf8"));
+    if (m) title = m[1].trim();
+  } catch {
+    /* no spec: the directory name */
+  }
+  return { key: entry?.key ?? requirementKey(source, fd), project: entry?.project ?? path.basename(real(source)), name: path.basename(fd), title };
+}
+
+/** Appends an event to the usage records. Never throws. */
+export function appendEvent(input: Omit<EventRecord, "schema" | "machine" | "kitVersion" | "at"> & { at?: string }, env: NodeJS.ProcessEnv = process.env): void {
+  if (recordingOff(env)) return;
+  const record: EventRecord = { schema: 1, machine: os.hostname(), kitVersion: kitVersion(), at: input.at ?? new Date().toISOString(), ...input } as EventRecord;
+  try {
+    fs.mkdirSync(usageDir(env), { recursive: true });
+    fs.appendFileSync(runsFile(env), `${JSON.stringify(record)}\n`);
+  } catch {
+    // Usage records are a convenience.
+  }
+}
+
+const EVENT_KINDS = new Set<string>(["review", "acceptance", "merge", "issue"]);
+
+/** Event records from a JSONL file (this machine's, or an export). */
+export function readEvents(file: string): EventRecord[] {
+  if (!fs.existsSync(file)) return [];
+  const out: EventRecord[] = [];
+  for (const line of fs.readFileSync(file, "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const r = JSON.parse(line) as EventRecord;
+      if (r && EVENT_KINDS.has(r.kind) && r.schema === RECORD_SCHEMA && r.requirement && typeof r.at === "string") out.push(r);
+    } catch {
+      // A torn line.
+    }
+  }
+  return out;
+}

package/engine/src/reply.ts

@@ -6,12 +6,15 @@ import { DEFAULT_CONFIG, loadConfig, type PipelineConfig } from "./config.js";
 import { defaultConfigPath } from "./locations.js";
 import { pluginReplyMessage } from "./messages.js";
 import { loadRuntimeFactory } from "./runtime-loader.js";
+import { readIndex } from "./records.js";
 import { readState, statePath } from "./state.js";
 
 async function main(argvIn: string[]): Promise<number> {
   // 1.14 --acceptance: the checklist page found problems; the text is the whole notice.
+  // 1.14 --notice: a notice of the background check (no run needed: the chat it was aligned in).
   const acceptance = argvIn.includes("--acceptance");
-  const argv = argvIn.filter((a) => a !== "--acceptance");
+  const notice = argvIn.includes("--notice");
+  const argv = argvIn.filter((a) => a !== "--acceptance" && a !== "--notice");
   const [feature, ...words] = argv;
   const text = words.join(" ").trim();
   if (!feature || !text) {
@@ -20,6 +23,14 @@ async function main(argvIn: string[]): Promise<number> {
   }
   const { repo, featureDir } = locate(process.cwd(), feature);
   const state = readState(statePath(repo, featureDir));
+  if (notice) {
+    const chat = state?.originAgentId ?? readIndex().find((e) => e.featureDir === featureDir && [e.repo, e.sourceRepo].includes(repo))?.chatAgentId ?? null;
+    if (!chat) {
+      console.error("这个需求没有登记过对话，没有可以转达的对话。");
+      return 1;
+    }
+    return deliver(repo, chat, text.slice(0, 8000), "已转给这个需求的对话。");
+  }
   if (!state || (!acceptance && state.status !== "waiting_for_business" && state.status !== "waiting_for_approval")) {
     console.error(`${featureDir} 现在没有在等待回答或确认，不用回复。`);
     return 1;
@@ -28,6 +39,22 @@ async function main(argvIn: string[]): Promise<number> {
     console.error("这个需求不是从 Paseo 对话中开始的，没有可以转达的对话。请在终端或卡片中处理。");
     return 1;
   }
+  return deliver(
+    repo,
+    state.originAgentId,
+    acceptance
+      ? text.slice(0, 8000)
+      : pluginReplyMessage({
+          featureDir,
+          waitingFor: state.status === "waiting_for_approval" ? "approval" : "business",
+          text: text.slice(0, 8000),
+          questions: state.pendingQuestions ?? [],
+        }),
+    acceptance ? "已转给这个需求的对话。" : "已转给这个需求的对话，它会按回复更新需求说明并继续开发。",
+  );
+}
+
+async function deliver(repo: string, chat: string, message: string, done: string): Promise<number> {
   let config: PipelineConfig;
   try {
     config = loadConfig(defaultConfigPath(), repo).config;
@@ -37,19 +64,11 @@ async function main(argvIn: string[]): Promise<number> {
   }
   const runtime = await (await loadRuntimeFactory())({ config, log: () => undefined });
   try {
-    await runtime.notifyAgent(
-      state.originAgentId,
-      acceptance ? text.slice(0, 8000) : pluginReplyMessage({
-        featureDir,
-        waitingFor: state.status === "waiting_for_approval" ? "approval" : "business",
-        text: text.slice(0, 8000),
-        questions: state.pendingQuestions ?? [],
-      }),
-    );
+    await runtime.notifyAgent(chat, message);
   } finally {
     await runtime.close().catch(() => undefined);
   }
-  console.log(acceptance ? "已转给这个需求的对话。" : "已转给这个需求的对话，它会按回复更新需求说明并继续开发。");
+  console.log(done);
   return 0;
 }
 

package/engine/src/review-assets/code.css

@@ -0,0 +1,93 @@
+:root {
+  --bg: #f6f7f9; --surface: #ffffff; --surface-2: #f1f3f6; --text: #1c2430; --muted: #5d6b7c; --border: #dfe3e9;
+  --accent: #2457d6; --accent-text: #ffffff; --ok: #15803d; --ok-soft: #e7f6ec; --danger: #b91c1c; --danger-soft: #fdecec; --warn: #b45309; --warn-soft: #fdf3e2;
+  --add: #e6f6ea; --del: #fdecec; --flash: #fff4c2;
+  color-scheme: light;
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    --bg: #12161c; --surface: #1a2029; --surface-2: #222a35; --text: #e6eaf0; --muted: #9aa7b8; --border: #2e3846;
+    --accent: #6f9bff; --accent-text: #0d1420; --ok: #4ade80; --ok-soft: #173322; --danger: #f87171; --danger-soft: #3a1c1c; --warn: #fbbf24; --warn-soft: #3a2c12;
+    --add: #15301f; --del: #3a1c1c; --flash: #4a3f12;
+    color-scheme: dark;
+  }
+}
+* { box-sizing: border-box; }
+[hidden] { display: none !important; }
+body { margin: 0; background: var(--bg); color: var(--text); font: 15px/1.6 system-ui, -apple-system, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif; padding-bottom: 110px; }
+.top { padding: 20px 24px 8px; }
+.eyebrow { font-size: 13px; color: var(--muted); }
+h1 { margin: 2px 0 4px; font-size: 22px; }
+h2 { font-size: 15px; margin: 0 0 6px; }
+.muted { color: var(--muted); }
+.small { font-size: 13px; }
+.pad { padding: 8px 12px; }
+.banner { margin: 8px 24px; padding: 10px 14px; border-radius: 10px; background: var(--surface-2); border: 1px solid var(--border); }
+.banner.ok { background: var(--ok-soft); border-color: var(--ok); }
+.banner.warn { background: var(--warn-soft); border-color: var(--warn); }
+.layout { display: grid; grid-template-columns: 260px minmax(0, 1fr); gap: 16px; padding: 0 24px; }
+.files { position: sticky; top: 8px; align-self: start; max-height: calc(100vh - 140px); overflow: auto; background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 10px; font-size: 13px; }
+.nav-title { font-weight: 600; margin-bottom: 6px; }
+.files a { display: flex; justify-content: space-between; gap: 6px; padding: 4px 6px; border-radius: 6px; color: var(--text); text-decoration: none; word-break: break-all; }
+.files a:hover { background: var(--surface-2); }
+.files a.doc { color: var(--muted); }
+main { min-width: 0; }
+.intro { margin: 8px 0 12px; }
+.card { background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 14px 16px; margin: 0 0 12px; }
+.badge { font-size: 12px; padding: 1px 8px; border-radius: 999px; background: var(--surface-2); color: var(--muted); white-space: nowrap; }
+.badge.danger { background: var(--danger-soft); color: var(--danger); }
+.badge.warn { background: var(--warn-soft); color: var(--warn); }
+.badge.ok { background: var(--ok-soft); color: var(--ok); }
+.file { background: var(--surface); border: 1px solid var(--border); border-radius: 12px; margin-bottom: 12px; overflow: hidden; }
+.file-head { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; padding: 8px 12px; background: var(--surface-2); cursor: pointer; border-bottom: 1px solid var(--border); }
+.file.folded .file-body { display: none; }
+.file.folded .file-head { border-bottom: 0; }
+.path { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 13px; font-weight: 600; word-break: break-all; }
+.plus { color: var(--ok); font-size: 13px; }
+.minus { color: var(--danger); font-size: 13px; }
+.file-body { overflow-x: auto; }
+table.diff { border-collapse: collapse; width: 100%; font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 12.5px; line-height: 1.5; }
+.diff td { padding: 0 8px; vertical-align: top; }
+.diff .num { width: 1%; min-width: 44px; text-align: right; color: var(--muted); user-select: none; }
+.diff .code { white-space: pre; }
+.diff .hunk td { color: var(--muted); background: var(--surface-2); padding: 2px 8px; }
+.diff .line { cursor: pointer; }
+.diff .line:hover td { outline: 1px solid var(--border); }
+.diff .add td { background: var(--add); }
+.diff .del td { background: var(--del); }
+.diff .flash td, .flash { background: var(--flash) !important; }
+.finding { border: 1px solid var(--border); border-left: 4px solid var(--border); border-radius: 8px; padding: 8px 10px; margin: 6px 0; background: var(--surface); font-family: system-ui, -apple-system, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif; font-size: 14px; white-space: normal; }
+.finding.danger { border-left-color: var(--danger); }
+.finding.warn { border-left-color: var(--warn); }
+.finding.decided-ok { opacity: 0.6; }
+.finding-row td, .comment-row td { padding: 4px 12px 8px; }
+.finding-head { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
+.finding-text { margin: 4px 0; }
+.where { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 12px; color: var(--accent); }
+.marks { display: flex; gap: 8px; margin-top: 6px; }
+.comment { border: 1px solid var(--accent); border-radius: 8px; padding: 8px 10px; background: var(--surface); font-family: system-ui, -apple-system, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif; display: flex; flex-direction: column; gap: 6px; align-items: flex-start; }
+textarea, input { font: inherit; color: inherit; background: var(--surface); border: 1px solid var(--border); border-radius: 8px; padding: 6px 8px; width: 100%; }
+.note-input { margin-top: 6px; }
+.btn { font: inherit; border: 1px solid var(--border); background: var(--surface); color: var(--text); border-radius: 8px; padding: 6px 14px; cursor: pointer; }
+.btn.small { padding: 2px 10px; font-size: 13px; }
+.btn.on-fix { background: var(--danger-soft); border-color: var(--danger); color: var(--danger); }
+.btn.on-ok { background: var(--ok-soft); border-color: var(--ok); color: var(--ok); }
+.btn.primary { background: var(--accent); border-color: var(--accent); color: var(--accent-text); }
+.btn.danger { border-color: var(--danger); color: var(--danger); }
+.btn:disabled { opacity: 0.5; cursor: default; }
+.bar { position: fixed; left: 0; right: 0; bottom: 0; display: flex; flex-wrap: wrap; gap: 10px 16px; align-items: center; padding: 10px 24px; background: var(--surface); border-top: 1px solid var(--border); }
+.bar .summary { flex: 1 1 240px; font-size: 13px; }
+.field { display: flex; align-items: center; gap: 6px; font-size: 13px; white-space: nowrap; }
+.field input { width: 200px; }
+.actions { display: flex; gap: 8px; }
+.toast { position: fixed; left: 50%; bottom: 90px; transform: translateX(-50%); max-width: min(640px, 92vw); background: var(--text); color: var(--bg); padding: 10px 14px; border-radius: 10px; box-shadow: 0 6px 24px rgba(0,0,0,.2); white-space: pre-line; }
+@media (max-width: 860px) {
+  .layout { grid-template-columns: minmax(0, 1fr); padding: 0 12px; }
+  .files { position: static; max-height: 220px; }
+  .top { padding: 16px 12px 6px; }
+  .banner { margin: 8px 12px; }
+  .bar { padding: 10px 12px; }
+  .field { flex: 1 1 100%; }
+  .field input { width: 100%; }
+  body { padding-bottom: 220px; }
+}

package/engine/src/review-assets/code.html

@@ -0,0 +1,43 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>代码审查</title>
+<link rel="stylesheet" href="code.css">
+</head>
+<body>
+<header class="top">
+  <div>
+    <div class="eyebrow" id="project"></div>
+    <h1 id="title">代码审查</h1>
+    <div class="muted" id="sub"></div>
+  </div>
+</header>
+<section id="status" class="banner" hidden></section>
+<div class="layout">
+  <nav class="files" id="files" aria-label="改动的文件"></nav>
+  <main>
+    <section id="summary" class="card" hidden></section>
+    <section id="ai" class="card" hidden></section>
+    <p class="muted intro">点代码行写意见（只对这一行）；AI 的意见可以标<b>要改</b>或<b>不用改</b>。看完在下面选择<b>退回修改</b>（流水线会按意见改，改完再评审、再验证）或<b>评审通过</b>。进度会自动保存。</p>
+    <div id="diffs"></div>
+    <section class="card">
+      <h2>总体意见（可不填）</h2>
+      <textarea id="note" rows="3" placeholder="例如：整体可以，但导出接口要加权限校验"></textarea>
+    </section>
+  </main>
+</div>
+<footer class="bar">
+  <div class="summary" id="count"></div>
+  <label class="field">审核人 <input id="reviewers" placeholder="@用户名，用逗号分开"></label>
+  <label class="field">评审人 <input id="reviewer" placeholder="你的名字" maxlength="60"></label>
+  <div class="actions">
+    <button id="changes" class="btn danger" disabled>退回修改</button>
+    <button id="approve" class="btn primary" disabled>评审通过</button>
+  </div>
+</footer>
+<div id="toast" class="toast" hidden></div>
+<script src="code.js"></script>
+</body>
+</html>