phasegate 0.315.0 → 0.335.0

package/scripts/harness/agent-integration/domain/services/bash-write-target-extractor.ts

@@ -9,7 +9,8 @@
  *
  * 副作用なし・純粋関数相当。対応パターンは以下:
  *   - リダイレクト `>` / `>>` / `>|` (clobber)
- *   - heredoc (`<<EOF > path`)
+ *   - heredoc (`<<EOF > path`) — ヒアドキュメント**本文**はシェル構文解析の対象外
+ *     (本文中の `<...>` をリダイレクトと誤認しないため。WI-362)
  *   - `tee` / `tee -a`
  *   - `sed -i` / `sed -i ''` (BSD)
  *   - `cp` / `mv` (宛先のみ)
@@ -111,6 +112,191 @@ function tokenize(input: string): Token[] {
   return tokens;
 }
 
+/** ヒアドキュメント開始演算子で宣言された終端デリミタ */
+type HeredocDelimiter = {
+  /** クォート・エスケープを解除した終端語 */
+  readonly word: string;
+  /** `<<-` 形式か (終端行の先頭タブを無視する) */
+  readonly allowIndent: boolean;
+};
+
+/** デリミタ語の終端となる文字 (空白およびシェル演算子) */
+const DELIMITER_TERMINATORS = new Set([' ', '\t', ';', '&', '|', '<', '>', '(', ')']);
+
+/**
+ * 1 行から ヒアドキュメント開始演算子 (`<<WORD` / `<<-WORD` / `<<'WORD'`) を検出し、
+ * 宣言順に終端デリミタを返す。
+ *
+ * クォート状態を追跡し、クォート内の `<<` は演算子として扱わない
+ * (例: `echo "a << b" > out.txt` の `<<` はヒアドキュメントではない)。
+ * `$( ... )` コマンド置換の内側ではクォート文脈がリセットされるため、
+ * `git commit -m "$(cat <<'EOF'` のような入れ子も検出できる。
+ * ヒアストリング `<<<` は本文を持たないため対象外。
+ */
+function findHeredocDelimiters(line: string): HeredocDelimiter[] {
+  const found: HeredocDelimiter[] = [];
+  const substitutionStack: ('none' | 'single' | 'double')[] = [];
+  let quote: 'none' | 'single' | 'double' = 'none';
+  let i = 0;
+
+  while (i < line.length) {
+    const ch = line[i];
+
+    if (quote === 'single') {
+      if (ch === "'") quote = 'none';
+      i += 1;
+      continue;
+    }
+
+    if (ch === '\\') {
+      i += 2;
+      continue;
+    }
+
+    if (ch === '$' && line[i + 1] === '(') {
+      substitutionStack.push(quote);
+      quote = 'none';
+      i += 2;
+      continue;
+    }
+
+    if (quote === 'double') {
+      if (ch === '"') quote = 'none';
+      i += 1;
+      continue;
+    }
+
+    if (ch === "'") {
+      quote = 'single';
+      i += 1;
+      continue;
+    }
+
+    if (ch === '"') {
+      quote = 'double';
+      i += 1;
+      continue;
+    }
+
+    if (ch === ')' && substitutionStack.length > 0) {
+      quote = substitutionStack.pop() ?? 'none';
+      i += 1;
+      continue;
+    }
+
+    if (ch === '<' && line[i + 1] === '<') {
+      if (line[i + 2] === '<') {
+        // ヒアストリング `<<<` は本文行を持たない
+        i += 3;
+        continue;
+      }
+      i += 2;
+      let allowIndent = false;
+      if (line[i] === '-') {
+        allowIndent = true;
+        i += 1;
+      }
+      while (i < line.length && (line[i] === ' ' || line[i] === '\t')) i += 1;
+      const word = readHeredocDelimiterWord(line, i);
+      i = word.nextIndex;
+      if (word.value.length > 0) {
+        found.push({ word: word.value, allowIndent });
+      }
+      continue;
+    }
+
+    i += 1;
+  }
+
+  return found;
+}
+
+/** `<<` 直後のデリミタ語を読む。クォート/バックスラッシュを解除した値を返す。 */
+function readHeredocDelimiterWord(line: string, start: number): { value: string; nextIndex: number } {
+  let value = '';
+  let i = start;
+
+  while (i < line.length) {
+    const ch = line[i];
+
+    if (ch === "'") {
+      i += 1;
+      while (i < line.length && line[i] !== "'") {
+        value += line[i];
+        i += 1;
+      }
+      i += 1;
+      continue;
+    }
+
+    if (ch === '"') {
+      i += 1;
+      while (i < line.length && line[i] !== '"') {
+        if (line[i] === '\\' && i + 1 < line.length) {
+          value += line[i + 1];
+          i += 2;
+          continue;
+        }
+        value += line[i];
+        i += 1;
+      }
+      i += 1;
+      continue;
+    }
+
+    if (ch === '\\' && i + 1 < line.length) {
+      value += line[i + 1];
+      i += 2;
+      continue;
+    }
+
+    if (DELIMITER_TERMINATORS.has(ch)) break;
+
+    value += ch;
+    i += 1;
+  }
+
+  return { value, nextIndex: i };
+}
+
+/** 終端行判定 (`<<-` は先頭タブを無視し、行末の空白・CR は許容する) */
+function isHeredocTerminator(line: string, delimiter: HeredocDelimiter): boolean {
+  const candidate = delimiter.allowIndent ? line.replace(/^\t+/, '') : line;
+  return candidate.trimEnd() === delimiter.word;
+}
+
+/**
+ * ヒアドキュメント本文行を除去する。
+ *
+ * 本文はシェル構文ではなくデータであり、`Co-Authored-By: Claude <noreply@example.com>`
+ * のような `<...>` をリダイレクトと誤解釈すると無関係なコマンドが誤ブロックされる (WI-362)。
+ * 除去対象は**本文行と終端行のみ**で、開始演算子のある行はそのまま残すため
+ * `cat <<EOF > path` の `> path` は従来どおり検出される (fail-closed 維持)。
+ */
+function stripHeredocBodies(command: string): string {
+  if (!command.includes('<<')) return command;
+
+  const lines = command.split('\n');
+  const kept: string[] = [];
+  const pending: HeredocDelimiter[] = [];
+
+  for (const line of lines) {
+    if (pending.length > 0) {
+      // 本文行 / 終端行はいずれも構文解析対象から外す
+      if (isHeredocTerminator(line, pending[0])) {
+        pending.shift();
+      }
+      continue;
+    }
+    kept.push(line);
+    for (const delimiter of findHeredocDelimiters(line)) {
+      pending.push(delimiter);
+    }
+  }
+
+  return kept.join('\n');
+}
+
 const OPERATOR_SEPARATORS = new Set(['&&', '||', ';', '|']);
 
 /** トークン列を複合・パイプ境界で分割 */
@@ -311,7 +497,9 @@ function collectPositionals(tokens: Token[]): Token[] {
 
 /** コマンド文字列を token 化 → 演算子分割 → 各コマンドから書き込み先を抽出する内部関数。 */
 function extractFromCommandString(command: string): string[] {
-  const tokens = tokenize(command);
+  // ヒアドキュメント本文はデータなのでシェル構文解析の対象外にする (WI-362)。
+  // apply_patch 抽出は元の command 文字列を直接走査するため影響を受けない。
+  const tokens = tokenize(stripHeredocBodies(command));
   const groups = splitByOperators(tokens);
   const collected: string[] = [];
   for (const group of groups) {

package/scripts/harness/agent-integration/domain/value-objects/protected-file-list.ts

@@ -25,6 +25,11 @@ const DEFAULT_PATTERNS = [
   // grandfather bypass を防ぐため、書き込み自体を保護対象とする。
   '.phasegate/baseline.json',
   '**/.phasegate/baseline.json',
+  // WI-363: .husky/ 配下は L0 runtime の実施点（pre-commit / commit-msg / pre-push）。
+  // WI-352 で config カテゴリに分類されるようになり Quick Mode の書き込み許可対象に
+  // 入ったため、防御機構そのものの書き換えを protected file として明示的に止める。
+  '.husky/**',
+  '**/.husky/**',
 ];
 
 /**

package/scripts/harness/agent-integration/infrastructure/adapters/quick-mode-full-mode-requirement-adapter.ts

@@ -1,5 +1,6 @@
 // @unit agent-integration
 // @layer infrastructure
+// @work-item-id WI-373
 
 import type {
   FullModeRequirementQueryPort,
@@ -7,6 +8,7 @@ import type {
   FullModeTargetChange,
 } from '../../domain/ports/full-mode-requirement-query-port.js';
 import type { ClassifyChangeCategoryUseCase } from '../../../quick-mode/application/usecases/classify-change-category-usecase.js';
+import { QuickModeConfigError } from '../../../quick-mode/domain/errors/quick-mode-config-error.js';
 
 export interface QuickModeFullModeRequirementAdapterDeps {
   classifyUseCaseFactory: () => ClassifyChangeCategoryUseCase;
@@ -45,7 +47,19 @@ export class QuickModeFullModeRequirementAdapter implements FullModeRequirementQ
         rejectionReason: contract.rejectionReason,
         dominantCategory: contract.dominantCategory ?? undefined,
       };
-    } catch {
+    } catch (error) {
+      // WI-373: quickMode 設定そのものが不正な場合は fail-closed。
+      // allowedCategories / categoryOverrides の enum 検証が入ったことで
+      // config の typo が例外になるため、ここで一律 fail-open のままだと
+      // 「設定を壊すと全書き込みが素通りする」という最悪の穴になる。
+      // config 不在・IO エラー等その他の例外は WI-333 の fail-open を維持する。
+      if (error instanceof QuickModeConfigError) {
+        return {
+          requiresFullMode: true,
+          rejectionRule: 'MIXED_CHANGES',
+          rejectionReason: `quickMode 設定が不正なため Quick Mode 判定を実行できません: ${error.message}`,
+        };
+      }
       return { requiresFullMode: false };
     }
   }

package/scripts/harness/agent-integration/presentation/pre-tool-use-hook.ts

@@ -6,6 +6,7 @@
  * @work-item-id WI-208
  * @work-item-id WI-345
  * @work-item-id WI-347
+ * @work-item-id WI-376
  *
  * PreToolUse Hook Adapter
  * Claude Code の PreToolUse Hook エントリポイント
@@ -25,10 +26,14 @@ import { createQuickModeCompositionRoot } from '../../quick-mode/composition-roo
 import * as path from 'node:path';
 import * as fs from 'node:fs/promises';
 
+/**
+ * WI-376 (ADR-039): 呼び出し元 skill 名を受け取るフィールド（caller_skill）は持たない。
+ * Claude Code の PreToolUse payload に skill 情報は無く、エージェントの自己申告値は
+ * authorization / guidance の入力にしない。未知キーが来ても単に無視される。
+ */
 interface PreToolUseHookInput {
   cwd?: string;
   tool_name?: string;
-  caller_skill?: string;
   tool_input?: {
     path?: string;
     file_path?: string;
@@ -199,11 +204,9 @@ async function main(): Promise<void> {
       fullModeSessionQueryPort,
     });
 
-    const callerSkill = input.caller_skill ?? process.env.PHASEGATE_CALLER_SKILL;
     const output = await useCase.execute({
       toolName: effectiveToolName,
       targetFilePaths: projectTargetFilePaths,
-      callerSkill,
       targetChanges: projectTargetChanges,
     });
 

package/scripts/harness/ci-governance/application/dto/scaffold-inception-input.ts

@@ -0,0 +1,9 @@
+// @unit ci-governance
+// @layer application
+// @work-item-id WI-368
+
+export interface ScaffoldInceptionInput {
+  readonly kind: string;
+  readonly dryRun?: boolean;
+  readonly force?: boolean;
+}

package/scripts/harness/ci-governance/application/dto/scaffold-inception-output.ts

@@ -0,0 +1,13 @@
+// @unit ci-governance
+// @layer application
+// @work-item-id WI-368
+
+export interface ScaffoldInceptionOutput {
+  readonly targetPath: string;
+  readonly templatePath: string;
+  readonly kind: string;
+  readonly dryRun: boolean;
+  readonly written: boolean;
+  readonly alreadyExists: boolean;
+  readonly overwritten: boolean;
+}

package/scripts/harness/ci-governance/application/usecases/list-templates-usecase.ts

@@ -0,0 +1,30 @@
+// @unit ci-governance
+// @layer application
+// @work-item-id WI-367
+
+import type { TemplateCatalogPort } from "../../domain/ports/template-catalog-port.js";
+
+export interface ListTemplatesOutputEntry {
+  readonly name: string;
+  readonly fileName: string;
+}
+
+export interface ListTemplatesOutput {
+  readonly directoryPath: string;
+  readonly templates: readonly ListTemplatesOutputEntry[];
+}
+
+export class ListTemplatesUseCase {
+  constructor(private readonly catalog: TemplateCatalogPort) {}
+
+  async execute(): Promise<ListTemplatesOutput> {
+    const entries = await this.catalog.list();
+    return {
+      directoryPath: this.catalog.directoryPath(),
+      templates: entries.map((entry) => ({
+        name: entry.name.value,
+        fileName: entry.fileName,
+      })),
+    };
+  }
+}

package/scripts/harness/ci-governance/application/usecases/scaffold-inception-usecase.ts

@@ -0,0 +1,63 @@
+// @unit ci-governance
+// @layer application
+// @work-item-id WI-368
+
+import type { InceptionDocWriterPort } from "../../domain/ports/inception-doc-writer-port.js";
+import type { InceptionTemplateRepositoryPort } from "../../domain/ports/inception-template-repository-port.js";
+import { InceptionDocKind } from "../../domain/value-objects/inception-doc-kind.js";
+import type { ScaffoldInceptionInput } from "../dto/scaffold-inception-input.js";
+import type { ScaffoldInceptionOutput } from "../dto/scaffold-inception-output.js";
+
+export class ScaffoldInceptionUseCase {
+  constructor(
+    private readonly templates: InceptionTemplateRepositoryPort,
+    private readonly writer: InceptionDocWriterPort,
+  ) {}
+
+  async execute(input: ScaffoldInceptionInput): Promise<ScaffoldInceptionOutput> {
+    const kind = InceptionDocKind.create(input.kind);
+    const dryRun = input.dryRun === true;
+    const force = input.force === true;
+
+    const templatePath = this.templates.resolvePath(kind);
+    const targetPath = this.writer.resolvePath(kind);
+    const alreadyExists = await this.writer.exists(kind);
+
+    if (dryRun) {
+      return {
+        targetPath,
+        templatePath,
+        kind: kind.value,
+        dryRun: true,
+        written: false,
+        alreadyExists,
+        overwritten: false,
+      };
+    }
+
+    if (alreadyExists && !force) {
+      return {
+        targetPath,
+        templatePath,
+        kind: kind.value,
+        dryRun: false,
+        written: false,
+        alreadyExists: true,
+        overwritten: false,
+      };
+    }
+
+    const raw = await this.templates.read(kind);
+    await this.writer.write(kind, raw);
+
+    return {
+      targetPath,
+      templatePath,
+      kind: kind.value,
+      dryRun: false,
+      written: true,
+      alreadyExists,
+      overwritten: alreadyExists && force,
+    };
+  }
+}

package/scripts/harness/ci-governance/application/usecases/show-template-usecase.ts

@@ -0,0 +1,39 @@
+// @unit ci-governance
+// @layer application
+// @work-item-id WI-367
+
+import type { TemplateCatalogPort } from "../../domain/ports/template-catalog-port.js";
+import { TemplateName } from "../../domain/value-objects/template-name.js";
+
+export type ShowTemplateOutput =
+  | { readonly found: true; readonly name: string; readonly content: string }
+  | {
+      readonly found: false;
+      readonly reason: "invalid-name" | "not-found";
+      readonly availableNames: readonly string[];
+    };
+
+export class ShowTemplateUseCase {
+  constructor(private readonly catalog: TemplateCatalogPort) {}
+
+  async execute(rawName: string): Promise<ShowTemplateOutput> {
+    if (!TemplateName.isValid(rawName)) {
+      // 不正名では catalog を引かない。パス由来の情報を一切露出させない。
+      return { found: false, reason: "invalid-name", availableNames: [] };
+    }
+
+    const name = TemplateName.create(rawName);
+    const content = await this.catalog.read(name);
+
+    if (content === null) {
+      const entries = await this.catalog.list();
+      return {
+        found: false,
+        reason: "not-found",
+        availableNames: entries.map((entry) => entry.name.value),
+      };
+    }
+
+    return { found: true, name: name.value, content };
+  }
+}

package/scripts/harness/ci-governance/composition-root.ts

@@ -1,6 +1,7 @@
 /**
  * @layer infrastructure
  * @unit ci-governance
+ * @work-item-id WI-367, WI-368, WI-369
  *
  * Composition Root - 依存性の組み立て
  */
@@ -10,6 +11,7 @@ import { CheckAgentContextUseCase } from "./application/usecases/check-agent-con
 import { CheckEscalationUseCase } from "./application/usecases/check-escalation-usecase.js";
 import { CreateBaselineUseCase } from "./application/usecases/create-baseline-usecase.js";
 import { GenerateCiTemplateUseCase } from "./application/usecases/generate-ci-template-usecase.js";
+import { ListTemplatesUseCase } from "./application/usecases/list-templates-usecase.js";
 import { MigrateAgentsMdUseCase } from "./application/usecases/migrate-agents-md-usecase.js";
 import { PinIntegrityUseCase } from "./application/usecases/pin-integrity-usecase.js";
 import { RecordErrorOccurrenceUseCase } from "./application/usecases/record-error-occurrence-usecase.js";
@@ -18,6 +20,8 @@ import { RefreshClaudeMdUseCase } from "./application/usecases/refresh-claude-md
 import { RenderCiTemplateUseCase } from "./application/usecases/render-ci-template-usecase.js";
 import { ResetRepetitionUseCase } from "./application/usecases/reset-repetition-usecase.js";
 import { ScaffoldDesignUseCase } from "./application/usecases/scaffold-design-usecase.js";
+import { ScaffoldInceptionUseCase } from "./application/usecases/scaffold-inception-usecase.js";
+import { ShowTemplateUseCase } from "./application/usecases/show-template-usecase.js";
 import { ValidatePointersUseCase } from "./application/usecases/validate-pointers-usecase.js";
 import { VerifyIntegrityUseCase } from "./application/usecases/verify-integrity-usecase.js";
 import { ClaudeMdComposer } from "./domain/services/claude-md-composer.js";
@@ -34,8 +38,11 @@ import { ErrorRepetitionJsonRepository } from "./infrastructure/adapters/error-r
 import { EscalationLogExecutorAdapter } from "./infrastructure/adapters/escalation-log-executor-adapter.js";
 import { FileSystemDesignDocWriterAdapter } from "./infrastructure/adapters/file-system-design-doc-writer-adapter.js";
 import { FileSystemExistenceAdapter } from "./infrastructure/adapters/file-system-existence-adapter.js";
+import { FileSystemInceptionDocWriterAdapter } from "./infrastructure/adapters/file-system-inception-doc-writer-adapter.js";
+import { FileSystemInceptionTemplateRepositoryAdapter } from "./infrastructure/adapters/file-system-inception-template-repository-adapter.js";
 import { FileSystemSha1HasherAdapter } from "./infrastructure/adapters/file-system-sha1-hasher-adapter.js";
 import { FileSystemSha256HasherAdapter } from "./infrastructure/adapters/file-system-sha256-hasher-adapter.js";
+import { FileSystemTemplateCatalogAdapter } from "./infrastructure/adapters/file-system-template-catalog-adapter.js";
 import { FileSystemTemplateRepositoryAdapter } from "./infrastructure/adapters/file-system-template-repository-adapter.js";
 import { GlobFileScannerAdapter } from "./infrastructure/adapters/glob-file-scanner-adapter.js";
 import { HarnessApiCommandExistenceAdapter } from "./infrastructure/adapters/harness-api-command-existence-adapter.js";
@@ -53,6 +60,8 @@ import { MigrateAgentsMdHandler } from "./presentation/handlers/migrate-agents-m
 import { RefreshAgentContextHandler } from "./presentation/handlers/refresh-agent-context-handler.js";
 import { RefreshClaudeMdHandler } from "./presentation/handlers/refresh-claude-md-handler.js";
 import { ScaffoldDesignHandler } from "./presentation/handlers/scaffold-design-handler.js";
+import { ScaffoldInceptionHandler } from "./presentation/handlers/scaffold-inception-handler.js";
+import { TemplatesHandler } from "./presentation/handlers/templates-handler.js";
 
 export interface CiGovernanceCompositionRoot {
   generateCiTemplateHandler: GenerateCiTemplateHandler;
@@ -63,6 +72,8 @@ export interface CiGovernanceCompositionRoot {
   checkRepetitionHandler: CheckRepetitionHandler;
   createBaselineHandler: CreateBaselineHandler;
   scaffoldDesignHandler: ScaffoldDesignHandler;
+  scaffoldInceptionHandler: ScaffoldInceptionHandler;
+  templatesHandler: TemplatesHandler;
   // Use cases exposed for direct access
   recordErrorOccurrenceUseCase: RecordErrorOccurrenceUseCase;
   checkEscalationUseCase: CheckEscalationUseCase;
@@ -71,10 +82,33 @@ export interface CiGovernanceCompositionRoot {
   validatePointersUseCase: ValidatePointersUseCase;
   createBaselineUseCase: CreateBaselineUseCase;
   scaffoldDesignUseCase: ScaffoldDesignUseCase;
+  scaffoldInceptionUseCase: ScaffoldInceptionUseCase;
   integrityHandler: IntegrityHandler;
 }
 
-export function buildCiGovernance(baseDir: string, harnessRoot: string = baseDir): CiGovernanceCompositionRoot {
+/**
+ * 解決済みの設計文書ルート（`phasegate.config.json` の `paths`）。
+ * 省略時は従来どおり `docs/product/construction` / `docs/inception` を使う。
+ *
+ * WI-369: これを渡さないと `scaffold-design` の書き込み先が
+ * `docs/product/construction` に固定され、`paths.designDocs` を移設した PJ で
+ * scaffold 先とフェーズゲートの検査先がズレる。
+ */
+export interface CiGovernanceDocPaths {
+  readonly designDocs?: string;
+  readonly inceptionDocs?: string;
+}
+
+const DEFAULT_DESIGN_DOCS_ROOT = "docs/product/construction";
+const DEFAULT_INCEPTION_DOCS_ROOT = "docs/inception";
+
+export function buildCiGovernance(
+  baseDir: string,
+  harnessRoot: string = baseDir,
+  docPaths: CiGovernanceDocPaths = {},
+): CiGovernanceCompositionRoot {
+  const designDocsRoot = docPaths.designDocs ?? DEFAULT_DESIGN_DOCS_ROOT;
+  const inceptionDocsRoot = docPaths.inceptionDocs ?? DEFAULT_INCEPTION_DOCS_ROOT;
   // Infrastructure adapters
   const validatorIdRegistryAdapter = new ValidatorIdRegistryAdapter();
   const presetConfigAdapter = new PresetConfigAdapter();
@@ -119,11 +153,24 @@ export function buildCiGovernance(baseDir: string, harnessRoot: string = baseDir
   const baselineRepository = new BaselineJsonRepositoryAdapter(baseDir);
   const createBaselineUseCase = new CreateBaselineUseCase(fileScanner, fileHasher, baselineRepository);
 
-  // Scaffold design adapters & use case (ISSUE-007 Wave 4)
+  // Scaffold design adapters & use case (ISSUE-007 Wave 4 / WI-369 paths 追従)
   const templateRepository = new FileSystemTemplateRepositoryAdapter(harnessRoot);
-  const designDocWriter = new FileSystemDesignDocWriterAdapter(baseDir);
+  const designDocWriter = new FileSystemDesignDocWriterAdapter(baseDir, designDocsRoot);
   const scaffoldDesignUseCase = new ScaffoldDesignUseCase(templateRepository, designDocWriter);
 
+  // Scaffold inception adapters & use case (WI-368)
+  const inceptionTemplateRepository = new FileSystemInceptionTemplateRepositoryAdapter(harnessRoot);
+  const inceptionDocWriter = new FileSystemInceptionDocWriterAdapter(baseDir, {
+    designDocsRoot,
+    inceptionDocsRoot,
+  });
+  const scaffoldInceptionUseCase = new ScaffoldInceptionUseCase(inceptionTemplateRepository, inceptionDocWriter);
+
+  // Template catalog adapters & use cases (WI-367)
+  const templateCatalog = new FileSystemTemplateCatalogAdapter(harnessRoot);
+  const listTemplatesUseCase = new ListTemplatesUseCase(templateCatalog);
+  const showTemplateUseCase = new ShowTemplateUseCase(templateCatalog);
+
   // Handlers
   const generateCiTemplateHandler = new GenerateCiTemplateHandler(generateCiTemplateUseCase, renderCiTemplateUseCase);
   const migrateAgentsMdHandler = new MigrateAgentsMdHandler(migrateAgentsMdUseCase, validatePointersUseCase);
@@ -133,6 +180,8 @@ export function buildCiGovernance(baseDir: string, harnessRoot: string = baseDir
   const checkRepetitionHandler = new CheckRepetitionHandler(checkEscalationUseCase, resetRepetitionUseCase);
   const createBaselineHandler = new CreateBaselineHandler(createBaselineUseCase);
   const scaffoldDesignHandler = new ScaffoldDesignHandler(scaffoldDesignUseCase);
+  const scaffoldInceptionHandler = new ScaffoldInceptionHandler(scaffoldInceptionUseCase);
+  const templatesHandler = new TemplatesHandler(listTemplatesUseCase, showTemplateUseCase);
 
   // Integrity pin adapters & handler (WI-254 / ADR-030 §Decision.3.①)
   const integrityChecker = new IntegrityChecker();
@@ -156,6 +205,8 @@ export function buildCiGovernance(baseDir: string, harnessRoot: string = baseDir
     checkRepetitionHandler,
     createBaselineHandler,
     scaffoldDesignHandler,
+    scaffoldInceptionHandler,
+    templatesHandler,
     recordErrorOccurrenceUseCase,
     checkEscalationUseCase,
     resetRepetitionUseCase,
@@ -163,6 +214,7 @@ export function buildCiGovernance(baseDir: string, harnessRoot: string = baseDir
     validatePointersUseCase,
     createBaselineUseCase,
     scaffoldDesignUseCase,
+    scaffoldInceptionUseCase,
     integrityHandler,
   };
 }

package/scripts/harness/ci-governance/domain/ports/inception-doc-writer-port.ts

@@ -0,0 +1,19 @@
+// @unit ci-governance
+// @layer domain
+// @work-item-id WI-368
+
+import type { InceptionDocKind } from "../value-objects/inception-doc-kind.js";
+
+export interface InceptionDocWriterPort {
+  /** 書き込み先の絶対パスを返す（副作用なし） */
+  resolvePath(kind: InceptionDocKind): string;
+
+  /** 書き込み先が既に存在するか */
+  exists(kind: InceptionDocKind): Promise<boolean>;
+
+  /**
+   * inception / product 文書を書き込む（親ディレクトリが無ければ作成）。
+   * 書き込んだ絶対パスを返す。
+   */
+  write(kind: InceptionDocKind, content: string): Promise<string>;
+}

package/scripts/harness/ci-governance/domain/ports/inception-template-repository-port.ts

@@ -0,0 +1,16 @@
+// @unit ci-governance
+// @layer domain
+// @work-item-id WI-368
+
+import type { InceptionDocKind } from "../value-objects/inception-doc-kind.js";
+
+export interface InceptionTemplateRepositoryPort {
+  /** テンプレートの絶対パスを返す（UI 出力用） */
+  resolvePath(kind: InceptionDocKind): string;
+
+  /**
+   * kind に対応するテンプレートファイルを読み込む。
+   * 存在しない場合は例外を投げる。
+   */
+  read(kind: InceptionDocKind): Promise<string>;
+}

package/scripts/harness/ci-governance/domain/ports/template-catalog-port.ts

@@ -0,0 +1,23 @@
+// @unit ci-governance
+// @layer domain
+// @work-item-id WI-367
+
+import type { TemplateCatalogEntry } from "../value-objects/template-catalog-entry.js";
+import type { TemplateName } from "../value-objects/template-name.js";
+
+export interface TemplateCatalogPort {
+  /** テンプレートディレクトリの絶対パス（案内表示用） */
+  directoryPath(): string;
+
+  /**
+   * 実在するテンプレートを name 昇順で列挙する。
+   * ディレクトリが存在しない場合は空配列を返す（例外にしない）。
+   */
+  list(): Promise<readonly TemplateCatalogEntry[]>;
+
+  /**
+   * catalog に name 完全一致するテンプレート本文を読む。
+   * 一致するエントリが無い場合は null を返す。
+   */
+  read(name: TemplateName): Promise<string | null>;
+}