plan-governance-cli 0.3.0 → 0.3.2

package/scripts/check_plan_governance.py

@@ -2,7 +2,9 @@
 import argparse
 import hashlib
 import json
+import posixpath
 import re
+import secrets
 import subprocess
 import sys
 from datetime import date, datetime, timezone
@@ -26,6 +28,9 @@ ACTIVE = {"待实施", "实施中"}
 WARNING_ACTIVE = {"候选", "设计中", "待实施", "实施中"}
 IMPLEMENTING = {"实施中"}
 INACTIVE = {"已替代", "已合并", "已废弃"}
+ATTESTATION_PURPOSES = {"phase_completion", "release_gate", "compliance"}
+ATTESTATION_REVIEW_STATUSES = {"current", "superseded", "needs_review"}
+ATTESTATION_SNAPSHOT_RE = re.compile(r"^\d{8}T\d{6}Z-[0-9a-f]{8}$")
 
 
 def fail(errors, message):
@@ -83,6 +88,8 @@ def mask_fenced_code(text):
 
 
 def markdown_section(text, heading_names):
+    if not text:
+        return None
     heading_pattern = "|".join(re.escape(name) for name in heading_names)
     pattern = re.compile(rf"^#+\s+({heading_pattern})\b.*$", re.MULTILINE)
     match = pattern.search(mask_fenced_code(text))
@@ -183,6 +190,9 @@ def check_phase_readiness(plan_map_text, plan_name, data, plan_text, strict, war
         return
 
     current_phase = data["phase"]
+    current_section = top_level_section(plan_text, "当前阶段")
+    summary_section = markdown_section(current_section, ["阶段准入摘要"])
+    summary = key_value_table(summary_section)
     roadmap = phase_roadmap_rows(plan_text)
     matching_rows = [row for row in roadmap if row and row[0] == current_phase]
     if not matching_rows:
@@ -195,20 +205,20 @@ def check_phase_readiness(plan_map_text, plan_name, data, plan_text, strict, war
         )
     else:
         roadmap_status = matching_rows[-1][4] if len(matching_rows[-1]) > 4 else ""
-        if roadmap_status and roadmap_status != data["status"]:
+        phase_status = summary.get("阶段状态", "").strip()
+        expected_roadmap_status = phase_status or data["status"]
+        if roadmap_status and roadmap_status != expected_roadmap_status:
             readiness_issue(
                 warnings,
                 errors,
                 strict,
-                f"{plan_name}: 当前阶段 {current_phase} 的路线图状态 {roadmap_status} 与 PLAN_MAP 状态 {data['status']} 不一致",
+                f"{plan_name}: 当前阶段 {current_phase} 的路线图状态 {roadmap_status} 与阶段状态 {expected_roadmap_status} 不一致",
             )
 
     if markdown_section(plan_text, ["当前阶段"]) is None:
         section_hint = structural_heading_hint(plan_text, "当前阶段")
         readiness_issue(warnings, errors, strict, f"{plan_name}: 缺少 `## 当前阶段` 章节{section_hint}")
 
-    summary_section = markdown_section(plan_text, ["阶段准入摘要"])
-    summary = key_value_table(summary_section)
     missing_fields = sorted(READINESS_FIELDS - set(summary))
     if missing_fields:
         title_hint = ""
@@ -274,7 +284,18 @@ def check_phase_readiness(plan_map_text, plan_name, data, plan_text, strict, war
             f"{plan_name}: 最新独立准入复核结论不是通过：{review['结论']}",
         )
 
-    history = [row for row in review_history_rows(plan_text) if len(row) >= 4 and row[2] == current_phase]
+    history = [
+        row
+        for row in review_history_rows(plan_text)
+        if len(row) >= 4
+        and row[2] == current_phase
+        and (
+            "准入" in row[1]
+            or ("完成验收" in row[1] and row[3].startswith("通过"))
+            or ("完成复核" in row[1] and row[3].startswith("通过"))
+            or "readiness" in row[1].lower()
+        )
+    ]
     if not history:
         history_hint = structural_heading_hint(plan_text, "独立复核记录")
         readiness_issue(
@@ -360,6 +381,34 @@ def extract_affected_targets(plan_text):
     return targets
 
 
+def extract_phase_evidence_targets(plan_text):
+    """读取当前阶段显式声明的证据路径，并返回合法路径和非法原文。"""
+    current = top_level_section(plan_text, "当前阶段")
+    section = markdown_section(current, ["阶段证据"])
+    valid = []
+    invalid = []
+    for item in markdown_list_items(section):
+        backtick = re.search(r"`([^`]+)`", item)
+        token = backtick.group(1).strip() if backtick else (item.strip().split(None, 1)[0] if item.strip() else "")
+        if not token or token in PLACEHOLDER_VALUES:
+            continue
+        raw = token.replace("\\", "/")
+        if (
+            raw.startswith("/")
+            or re.match(r"^[A-Za-z]:/", raw)
+            or any(part == ".." for part in raw.split("/"))
+            or any(char in raw for char in "*?[]{}")
+        ):
+            invalid.append(token)
+            continue
+        normalized = normalize_scope_path(raw)
+        if not normalized or normalized == ".":
+            invalid.append(token)
+            continue
+        valid.append(normalized)
+    return valid, invalid
+
+
 def extract_plan_references(plan_text, known_plans, current_name):
     references = set()
     for match in re.finditer(r"\[\[([^\]]+)\]\]", plan_text):
@@ -505,16 +554,112 @@ def changed_files(root, staged=False):
     return files
 
 
-def warn_uncovered_changes(warnings, mode, files, active_plan_targets):
+def changed_plan_map_lines(root, staged=False):
+    """返回 PLAN_MAP diff 中实际变更的行；无法读取时由调用方按未知归属处理。"""
+    args = ["diff"]
+    if staged:
+        args.append("--cached")
+    args.extend(["--unified=0", "--", "docs/PLAN_MAP.md"])
+    result = subprocess.run(
+        ["git", *args],
+        cwd=root,
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    lines = []
+    for line in result.stdout.splitlines():
+        if line.startswith(("+++", "---", "@@")):
+            continue
+        if line.startswith(("+", "-")):
+            content = line[1:].strip()
+            if content:
+                lines.append(content)
+    return lines
+
+
+def plan_map_line_candidates(line, known_plans):
+    linked_plans = sorted(
+        {
+            name
+            for name in re.findall(r"plans/([A-Za-z0-9\u4e00-\u9fff._-]+)\.md", line)
+            if name in known_plans
+        }
+    )
+    if linked_plans:
+        return linked_plans
+    candidates = []
+    for name in known_plans:
+        if re.search(rf"(?<![A-Za-z0-9_-]){re.escape(name)}(?![A-Za-z0-9_-])", line):
+            candidates.append(name)
+    return sorted(set(candidates))
+
+
+def plan_map_change_owners(root, staged, known_plans):
+    try:
+        lines = changed_plan_map_lines(root, staged=staged)
+    except (subprocess.CalledProcessError, FileNotFoundError):
+        return None
+    return [plan_map_line_candidates(line, known_plans) for line in lines]
+
+
+def plan_map_change_is_covered(plan_map_owners, active_plan_names):
+    if plan_map_owners is None or not plan_map_owners:
+        return False
+    return all(len(candidates) == 1 and candidates[0] in active_plan_names for candidates in plan_map_owners)
+
+
+def warn_uncovered_changes(
+    warnings,
+    mode,
+    files,
+    plan_targets,
+    root=None,
+    known_plans=None,
+    covering_plan_names=None,
+):
     if not files:
         return
-    if not active_plan_targets:
+    if not plan_targets:
         warn(warnings, f"{mode}: 存在变更文件，但没有活跃计划声明影响范围")
         return
-    for changed_file in uncovered_changed_files(files, active_plan_targets):
+    covering_plan_names = set(covering_plan_names or plan_targets)
+    map_owners = plan_map_change_owners(root, mode == "--pre-commit", known_plans or set()) if root else None
+    uncovered = []
+    for changed_file in sorted(files):
+        normalized_file = normalize_scope_path(changed_file)
+        if normalized_file == "docs/PLAN_MAP.md":
+            if plan_map_change_is_covered(map_owners, covering_plan_names):
+                continue
+            warn(warnings, f"{mode}: PLAN_MAP.md 变更无法唯一归属到活跃计划索引行")
+            continue
+        if any(target_matches_path(target, normalized_file) for targets in plan_targets.values() for target in targets):
+            continue
+        uncovered.append(changed_file)
+    for changed_file in uncovered:
         warn(warnings, f"{mode}: 变更文件未被活跃计划影响范围覆盖：{changed_file}")
 
 
+def completed_plan_drift_targets(plans, plan_texts, root, files):
+    """关闭窗口内只覆盖已完成计划的自身和显式阶段证据。
+
+    已完成计划不再属于活跃计划，但关闭阶段时通常还要原子地同步计划、地图和
+    验收证据。只有当该计划文件本身也在本次变更中时，才开启这个窄窗口；不会
+    复用已完成计划的完整影响范围，从而避免历史计划吞掉新的未声明变更。
+    """
+    changed = {normalize_scope_path(path) for path in files}
+    targets = {}
+    for name, data in plans.items():
+        if data["status"] not in COMPLETED:
+            continue
+        plan_relative = data["path"].relative_to(root).as_posix()
+        if plan_relative not in changed:
+            continue
+        phase_evidence, _ = extract_phase_evidence_targets(plan_texts.get(name, ""))
+        targets[name] = [plan_relative, *phase_evidence]
+    return targets
+
+
 def warn_stale_plans(warnings, plans, stale_days, today=None):
     today = today or date.today()
     for name, data in plans.items():
@@ -540,7 +685,27 @@ def relative_to_root(path, root):
     return path.relative_to(root).as_posix()
 
 
-def create_attestation(root, plan_map, plans, plan_name, errors):
+def safe_relative_path(value):
+    raw = str(value or "").strip().replace("\\", "/")
+    if not raw or raw.startswith("/") or re.match(r"^[A-Za-z]:/", raw):
+        return None
+    parts = [part for part in raw.split("/") if part not in {"", "."}]
+    if ".." in parts:
+        return None
+    normalized = posixpath.normpath("/".join(parts))
+    return normalized if normalized not in {"", ".", "/"} else None
+
+
+def create_attestation(
+    root,
+    plan_map,
+    plans,
+    plan_name,
+    errors,
+    purpose=None,
+    supersedes="",
+    review_status="current",
+):
     data = plans.get(plan_name)
     if data is None:
         fail(errors, f"{plan_name}: 未登记计划，无法创建完成快照")
@@ -561,17 +726,51 @@ def create_attestation(root, plan_map, plans, plan_name, errors):
         "created_by": "plan-governance",
         "reason": "阶段完成快照",
     }
-    target = root / "docs" / "attestations" / f"{plan_name}.json"
+    if purpose is not None:
+        if purpose not in ATTESTATION_PURPOSES:
+            fail(errors, f"{plan_name}: attestation purpose 非法：{purpose}")
+            return None
+        if review_status not in ATTESTATION_REVIEW_STATUSES:
+            fail(errors, f"{plan_name}: attestation review_status 非法：{review_status}")
+            return None
+        normalized_supersedes = ""
+        if supersedes:
+            normalized_supersedes = safe_relative_path(supersedes)
+            if normalized_supersedes is None:
+                fail(errors, f"{plan_name}: attestation supersedes 必须是仓库内相对路径：{supersedes}")
+                return None
+        snapshot_id = datetime.now(timezone.utc).strftime("%Y%m%dT%H%M%SZ") + f"-{secrets.token_hex(4)}"
+        attestation.update(
+            {
+                "purpose": purpose,
+                "snapshot_id": snapshot_id,
+                "supersedes": normalized_supersedes,
+                "review_status": review_status,
+            }
+        )
+        filename = f"{plan_name}--{purpose}--{snapshot_id}.json"
+    else:
+        filename = f"{plan_name}.json"
+    target = root / "docs" / "attestations" / filename
     target.parent.mkdir(parents=True, exist_ok=True)
     target.write_text(json.dumps(attestation, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
     return target
 
 
-def warn_attestation_drift(warnings, root, plans):
+def attestation_issue(warnings, errors, strict, message):
+    if strict:
+        fail(errors, message)
+    else:
+        warn(warnings, message)
+
+
+def warn_attestation_drift(warnings, root, plans, errors=None, strict=False, reports=None):
+    errors = errors if errors is not None else []
     attestations_dir = root / "docs" / "attestations"
     if not attestations_dir.exists():
         return
 
+    records = []
     for path in sorted(attestations_dir.glob("*.json")):
         try:
             attestation = json.loads(path.read_text(encoding="utf-8"))
@@ -584,8 +783,52 @@ def warn_attestation_drift(warnings, root, plans):
             warn(warnings, f"{path}: 快照引用了未登记计划：{plan_name or '<missing>'}")
             continue
 
-        plan_path = root / str(attestation.get("plan_path", ""))
-        plan_map_path = root / str(attestation.get("plan_map_path", "docs/PLAN_MAP.md"))
+        legacy = "purpose" not in attestation
+        purpose = str(attestation.get("purpose", "phase_completion")).strip()
+        if purpose not in ATTESTATION_PURPOSES:
+            attestation_issue(warnings, errors, strict, f"{path}: attestation purpose 非法：{purpose or '<missing>'}")
+            continue
+        snapshot_id = str(attestation.get("snapshot_id", "")).strip()
+        review_status = str(attestation.get("review_status", "current")).strip()
+        supersedes = attestation.get("supersedes", "")
+        invalid_structure = False
+        if not legacy:
+            for field in ["snapshot_id", "supersedes", "review_status"]:
+                if field not in attestation:
+                    attestation_issue(warnings, errors, strict, f"{path}: 新 attestation 缺少字段：{field}")
+                    invalid_structure = True
+            if not ATTESTATION_SNAPSHOT_RE.fullmatch(snapshot_id):
+                attestation_issue(warnings, errors, strict, f"{path}: snapshot_id 格式非法：{snapshot_id or '<missing>'}")
+                invalid_structure = True
+            expected_name = f"{plan_name}--{purpose}--{snapshot_id}.json"
+            if path.name != expected_name:
+                attestation_issue(warnings, errors, strict, f"{path}: 文件名应为 {expected_name}")
+                invalid_structure = True
+        if review_status not in ATTESTATION_REVIEW_STATUSES:
+            attestation_issue(warnings, errors, strict, f"{path}: review_status 非法：{review_status or '<missing>'}")
+            invalid_structure = True
+        if not isinstance(supersedes, str):
+            attestation_issue(warnings, errors, strict, f"{path}: supersedes 必须是相对路径字符串")
+            supersedes = ""
+            invalid_structure = True
+        normalized_supersedes = safe_relative_path(supersedes) if supersedes else ""
+        if supersedes and normalized_supersedes is None:
+            attestation_issue(warnings, errors, strict, f"{path}: supersedes 必须是仓库内相对路径：{supersedes}")
+            normalized_supersedes = ""
+            invalid_structure = True
+
+        plan_path_value = attestation.get("plan_path", "")
+        plan_map_path_value = attestation.get("plan_map_path", "docs/PLAN_MAP.md")
+        plan_path_rel = safe_relative_path(plan_path_value)
+        plan_map_path_rel = safe_relative_path(plan_map_path_value)
+        if plan_path_rel is None:
+            warn(warnings, f"{path}: 快照引用的计划路径非法：{plan_path_value}")
+            continue
+        if plan_map_path_rel is None:
+            warn(warnings, f"{path}: 快照引用的 PLAN_MAP 路径非法：{plan_map_path_value}")
+            continue
+        plan_path = root / plan_path_rel
+        plan_map_path = root / plan_map_path_rel
         if not plan_path.exists():
             warn(warnings, f"{path}: 快照引用的计划文件不存在：{plan_path}")
             continue
@@ -593,10 +836,93 @@ def warn_attestation_drift(warnings, root, plans):
             warn(warnings, f"{path}: 快照引用的 PLAN_MAP.md 不存在：{plan_map_path}")
             continue
 
+        drifted = False
         if sha256_file(plan_path) != attestation.get("plan_sha256"):
             warn(warnings, f"{path}: {plan_name} 计划文件 hash 已变化，需要人工复核")
+            drifted = True
         if sha256_file(plan_map_path) != attestation.get("plan_map_sha256"):
             warn(warnings, f"{path}: PLAN_MAP.md hash 已变化，需要人工复核")
+            drifted = True
+        records.append(
+            {
+                "path": path,
+                "relative_path": path.relative_to(root).as_posix(),
+                "plan": plan_name,
+                "purpose": purpose,
+                "review_status": review_status,
+                "supersedes": normalized_supersedes,
+                "drifted": drifted,
+                "legacy": legacy,
+                "invalid_structure": invalid_structure,
+            }
+        )
+
+    by_path = {record["relative_path"]: record for record in records}
+    incoming = {}
+    edges = {}
+    for record in records:
+        target = record["supersedes"]
+        if not target:
+            continue
+        target_record = by_path.get(target)
+        if target_record is None:
+            attestation_issue(warnings, errors, strict, f"{record['path']}: supersedes 目标不存在：{target}")
+            record["invalid_structure"] = True
+            continue
+        if target_record["purpose"] != record["purpose"] or target_record["plan"] != record["plan"]:
+            attestation_issue(
+                warnings,
+                errors,
+                strict,
+                f"{record['path']}: supersedes 目标必须与当前快照属于同一计划和 purpose：{target}",
+            )
+            record["invalid_structure"] = True
+            continue
+        if target == record["relative_path"]:
+            attestation_issue(warnings, errors, strict, f"{record['path']}: supersedes 不能指向自身")
+            record["invalid_structure"] = True
+            continue
+        incoming.setdefault(target, []).append(record["relative_path"])
+        edges.setdefault(record["relative_path"], []).append(target)
+
+    cycles = detect_dependency_cycles(edges)
+    for cycle in cycles:
+        attestation_issue(warnings, errors, strict, f"attestation supersedes 存在环：{cycle}")
+        for node in cycle.split(" -> "):
+            if node in by_path:
+                by_path[node]["invalid_structure"] = True
+
+    current_by_key = {}
+    for record in records:
+        effective = record["review_status"]
+        if record["invalid_structure"]:
+            effective = "needs_review"
+        elif incoming.get(record["relative_path"]):
+            effective = "superseded"
+        elif record["drifted"] or record["review_status"] == "needs_review":
+            effective = "needs_review"
+        if effective == "current":
+            key = (record["plan"], record["purpose"])
+            current_by_key.setdefault(key, []).append(record["relative_path"])
+        record["effective_status"] = effective
+
+    for key, paths in current_by_key.items():
+        if len(paths) > 1:
+            attestation_issue(
+                warnings,
+                errors,
+                strict,
+                f"attestation 同一计划/purpose 存在多个 current：{key[0]}/{key[1]}：{', '.join(paths)}",
+            )
+            for record in records:
+                if record["relative_path"] in paths:
+                    record["effective_status"] = "needs_review"
+
+    if reports is not None:
+        for record in records:
+            reports.append(
+                f"{record['relative_path']} | plan={record['plan']} | purpose={record['purpose']} | status={record['effective_status']}"
+            )
 
 
 def detect_dependency_cycles(edges):
@@ -621,9 +947,968 @@ def detect_dependency_cycles(edges):
     return cycles
 
 
+def load_plan_records(root, errors):
+    """读取计划索引，供只读工作集和步骤校验入口复用。"""
+    docs = root / "docs"
+    plan_map = docs / "PLAN_MAP.md"
+    if not plan_map.exists():
+        fail(errors, "未找到 docs/PLAN_MAP.md；当前仓库尚未初始化计划治理")
+        return "", plan_map, {}
+
+    plan_map_text = read_utf8(plan_map, errors)
+    plans = {}
+    for row in table_rows(plan_map_text, "计划索引"):
+        if len(row) < 6:
+            continue
+        link = extract_plan_link(row[0])
+        if not link:
+            continue
+        name = Path(link).stem
+        plans[name] = {
+            "path": docs / link,
+            "status": row[1].strip("` "),
+            "phase": row[2].strip("` "),
+            "depends": row[4],
+        }
+    if not plans:
+        fail(errors, "docs/PLAN_MAP.md: 缺少可读取的计划索引")
+    return plan_map_text, plan_map, plans
+
+
+def plan_index_issues(plan_map_text):
+    """检查工作集入口依赖的计划索引结构，不改变既有基础检查语义。"""
+    issues = []
+    seen = set()
+    for row_index, row in enumerate(table_rows(plan_map_text, "计划索引"), start=1):
+        if len(row) < 6:
+            issues.append(f"计划索引第 {row_index} 行字段不足，无法安全派生工作集")
+            continue
+        link = extract_plan_link(row[0])
+        if not link:
+            issues.append(f"计划索引第 {row_index} 行缺少计划链接，无法安全派生工作集")
+            continue
+        name = Path(link).stem
+        if name in seen:
+            issues.append(f"计划索引存在重复计划 ID：{name}")
+        seen.add(name)
+        status = row[1].strip("` ")
+        if status not in VALID_STATUSES:
+            issues.append(f"{name}: 计划状态非法：{status}")
+    return issues
+
+
+def unresolved_current_blockers(plan_text):
+    blockers = []
+    for row in table_rows(plan_text, "未决问题"):
+        if len(row) < 4 or not re.search(r"\b(Yes|是)\b", row[2]):
+            continue
+        state = row[3].strip()
+        if state in {"已决定", "已收敛", "已完成", "无"}:
+            continue
+        blockers.append(row[0].strip() or "未命名阻塞项")
+    return blockers
+
+
+def top_level_section(text, heading):
+    pattern = re.compile(rf"^##\s+{re.escape(heading)}\s*$", re.MULTILINE)
+    match = pattern.search(text)
+    if not match:
+        return None
+    tail = text[match.end():]
+    next_heading = re.search(r"^##\s+", tail, re.MULTILINE)
+    return tail[: next_heading.start()] if next_heading else tail
+
+
+def current_summary(plan_text):
+    return key_value_table(markdown_section(top_level_section(plan_text, "当前阶段"), ["阶段准入摘要"]))
+
+
+def current_review_passes(plan_text, phase):
+    review = key_value_table(markdown_section(plan_text, ["最新独立准入复核"]))
+    return review.get("阶段") == phase and review.get("结论", "").startswith("通过")
+
+
+def structured_next_action(plan_text):
+    section = top_level_section(plan_text, "当前阶段") or ""
+    values = key_value_table(section)
+    value = values.get("下一动作", "").strip()
+    if not value:
+        match = re.search(r"(?:^|\n)\s*下一动作\s*[：:]\s*([^\n]+)", section)
+        value = match.group(1).strip() if match else ""
+    mapping = {
+        "验证": "verify",
+        "verify": "verify",
+        "同步": "sync",
+        "sync": "sync",
+        "实施": "implement",
+        "implement": "implement",
+        "无": "none",
+        "none": "none",
+    }
+    if not value:
+        return {"state": "unknown", "kind": "unknown", "reason": "缺少结构化下一动作"}
+    kind = mapping.get(value.lower(), "unknown")
+    if kind == "unknown":
+        return {"state": "unknown", "kind": "unknown", "reason": f"下一动作值无法识别：{value}"}
+    return {"state": "known", "kind": kind, "reason": "来自当前阶段结构化下一动作"}
+
+
+def parallel_summary(plan_map_text, plan_name, relation_valid=True):
+    if not relation_valid:
+        return {
+            "state": "unknown",
+            "peers": [],
+            "reason": "阶段关系存在结构错误，不能派生确定并行关系",
+        }
+    rows = table_rows(plan_map_text, "阶段关系")
+    peers = []
+    evidence = []
+    for row in rows:
+        if len(row) < 7 or row[0] == "来源计划":
+            continue
+        source, target = row[0].strip("` "), row[2].strip("` ")
+        if plan_name not in {source, target}:
+            continue
+        peer = target if source == plan_name else source
+        if peer and peer != plan_name and peer not in peers:
+            peers.append(peer)
+        if row[6] and row[6] not in evidence:
+            evidence.append(row[6])
+    if not rows or not peers:
+        return {"state": "unknown", "peers": [], "reason": "缺少当前计划的直接阶段关系证据"}
+    return {
+        "state": "known",
+        "peers": peers,
+        "reason": "只读透传阶段关系表中的直接关系；完整关系校验由后续阶段负责",
+        "evidence": evidence,
+    }
+
+
+RELATION_COLUMNS = ["来源计划", "来源阶段", "目标计划", "目标阶段", "关系类型", "解除条件", "证据"]
+RELATION_TYPES = {"hard_gate", "evidence", "soft_context"}
+SHARED_WRITE_COLUMNS = [
+    "来源计划",
+    "来源阶段",
+    "目标计划",
+    "目标阶段",
+    "约束类型",
+    "共享目标",
+    "串行顺序",
+    "解除条件",
+    "证据",
+]
+
+
+def relation_rows(plan_map_text):
+    section = markdown_section(plan_map_text, ["阶段关系"])
+    if section is None:
+        return None, []
+    rows = markdown_table_rows(section)
+    header_index = next((index for index, row in enumerate(rows) if row[: len(RELATION_COLUMNS)] == RELATION_COLUMNS), None)
+    if header_index is None:
+        return [], []
+    return RELATION_COLUMNS, rows[header_index + 1 :]
+
+
+def shared_write_rows(plan_map_text):
+    section = markdown_section(plan_map_text, ["机器可检查共享写入约束"])
+    if section is None:
+        return None, []
+    rows = markdown_table_rows(section)
+    header_index = next(
+        (index for index, row in enumerate(rows) if row[: len(SHARED_WRITE_COLUMNS)] == SHARED_WRITE_COLUMNS),
+        None,
+    )
+    if header_index is None:
+        return [], []
+    return SHARED_WRITE_COLUMNS, rows[header_index + 1 :]
+
+
+def clean_relation_value(value):
+    return (value or "").strip().strip("`").strip()
+
+
+def valid_phase_name(value):
+    return bool(re.fullmatch(r"阶段\s*[0-9][0-9]*", clean_relation_value(value)))
+
+
+def declared_plan_phases(plan_data):
+    path = plan_data.get("path") if plan_data else None
+    if not path or not path.exists():
+        return set()
+    try:
+        text = path.read_text(encoding="utf-8")
+    except (OSError, UnicodeDecodeError):
+        return set()
+    return {
+        clean_relation_value(row[0])
+        for row in phase_roadmap_rows(text)
+        if row and clean_relation_value(row[0])
+    }
+
+
+def validate_relation_evidence(evidence, plans, row_label):
+    """仅校验 Markdown 链接形式的相对证据路径；纯文本运行记录保持兼容。"""
+    if not evidence or not plans:
+        return []
+    docs_root = next(iter(plans.values()))["path"].parent.parent
+    errors = []
+    for match in re.finditer(r"\]\(([^)#]+)(?:#[^)]+)?\)", evidence):
+        target = match.group(1).strip()
+        if not target or re.match(r"^[a-zA-Z][a-zA-Z0-9+.-]*://", target):
+            continue
+        candidate = (docs_root / target).resolve()
+        if not candidate.exists():
+            errors.append(f"PLAN_MAP.md: {row_label} 证据链接不存在：{target}")
+    return errors
+
+
+def validate_relation_graph(plan_map_text, plans):
+    """校验阶段关系和可选机器共享写入约束；不校验业务完成结论。"""
+    errors = []
+    warnings = []
+    headers, rows = relation_rows(plan_map_text)
+    if headers is None:
+        relation_defined = False
+    elif not headers:
+        errors.append("PLAN_MAP.md: `阶段关系` 缺少固定七列表头")
+        relation_defined = True
+    else:
+        relation_defined = True
+
+    gate_pairs = set()
+    relation_graph = {}
+    phase_cache = {name: declared_plan_phases(data) for name, data in plans.items()}
+    if headers:
+        for row_index, row in enumerate(rows, start=1):
+            if not any(clean_relation_value(cell) for cell in row):
+                continue
+            if len(row) != len(RELATION_COLUMNS):
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行字段数应为 {len(RELATION_COLUMNS)}")
+                continue
+            values = [clean_relation_value(cell) for cell in row]
+            source, source_phase, target, target_phase, relation_type, unlock, evidence = values
+            for label, value in [
+                ("来源计划", source),
+                ("来源阶段", source_phase),
+                ("目标计划", target),
+                ("目标阶段", target_phase),
+                ("关系类型", relation_type),
+                ("证据", evidence),
+            ]:
+                if not value or is_placeholder(value):
+                    errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行缺少有效{label}")
+            if source not in plans:
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行来源计划不存在：{source}")
+            if target not in plans:
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行目标计划不存在：{target}")
+            if not valid_phase_name(source_phase):
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行来源阶段格式非法：{source_phase}")
+            if not valid_phase_name(target_phase):
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行目标阶段格式非法：{target_phase}")
+            if source in plans and valid_phase_name(source_phase):
+                declared = phase_cache.get(source, set())
+                if declared and source_phase not in declared:
+                    errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行来源阶段不存在于计划路线图：{source_phase}")
+            if target in plans and valid_phase_name(target_phase):
+                declared = phase_cache.get(target, set())
+                if declared and target_phase not in declared:
+                    errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行目标阶段不存在于计划路线图：{target_phase}")
+            if relation_type not in RELATION_TYPES:
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行关系类型非法：{relation_type}")
+            elif relation_type != "soft_context" and (not unlock or is_placeholder(unlock)):
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行缺少有效解除条件")
+            errors.extend(validate_relation_evidence(evidence, plans, f"阶段关系第 {row_index} 行"))
+            if source == target and source_phase == target_phase:
+                errors.append(f"PLAN_MAP.md: 阶段关系第 {row_index} 行不能引用自身同一阶段：{source}")
+            if source not in plans or target not in plans or relation_type not in RELATION_TYPES:
+                continue
+            source_node = f"{source}@{source_phase}"
+            target_node = f"{target}@{target_phase}"
+            relation_graph.setdefault(source_node, [])
+            relation_graph.setdefault(target_node, [])
+            if relation_type in {"hard_gate", "evidence"}:
+                relation_graph[source_node].append(target_node)
+            if relation_type == "hard_gate":
+                gate_pairs.add((source, target))
+
+        for cycle in detect_dependency_cycles(relation_graph):
+            errors.append(f"PLAN_MAP.md: 阶段关系存在 hard_gate/evidence 环依赖：{cycle}")
+
+        for source, target in sorted(gate_pairs):
+            declared = extract_declared_dependencies(plans[target].get("depends", ""))
+            if source not in declared:
+                warnings.append(
+                    f"PLAN_MAP.md: 阶段关系 {source} -> {target} 为 hard_gate，但计划索引依赖列未包含 {source}；以阶段关系为准"
+                )
+
+    shared_headers, shared_rows = shared_write_rows(plan_map_text)
+    if shared_headers == []:
+        errors.append("PLAN_MAP.md: `机器可检查共享写入约束` 缺少固定九列表头")
+    elif shared_headers:
+        for row_index, row in enumerate(shared_rows, start=1):
+            if not any(clean_relation_value(cell) for cell in row):
+                continue
+            if len(row) != len(SHARED_WRITE_COLUMNS):
+                errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行字段数应为 {len(SHARED_WRITE_COLUMNS)}")
+                continue
+            values = [clean_relation_value(cell) for cell in row]
+            source, source_phase, target, target_phase, constraint, target_paths, order, unlock, evidence = values
+            for label, value in [
+                ("来源计划", source),
+                ("来源阶段", source_phase),
+                ("目标计划", target),
+                ("目标阶段", target_phase),
+                ("约束类型", constraint),
+                ("共享目标", target_paths),
+                ("串行顺序", order),
+                ("解除条件", unlock),
+                ("证据", evidence),
+            ]:
+                if not value or is_placeholder(value):
+                    errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行缺少有效{label}")
+            if source not in plans:
+                errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行来源计划不存在：{source}")
+            if target not in plans:
+                errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行目标计划不存在：{target}")
+            if not valid_phase_name(source_phase):
+                errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行来源阶段格式非法：{source_phase}")
+            if not valid_phase_name(target_phase):
+                errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行目标阶段格式非法：{target_phase}")
+            if constraint != "shared_write_risk":
+                errors.append(f"PLAN_MAP.md: 共享写入约束第 {row_index} 行约束类型非法：{constraint}")
+            errors.extend(validate_relation_evidence(evidence, plans, f"共享写入约束第 {row_index} 行"))
+            expected_order = f"{source}-before-{target}"
+            if source and target and order != expected_order:
+                errors.append(
+                    f"PLAN_MAP.md: 共享写入约束第 {row_index} 行串行顺序应为 {expected_order}：{order}"
+                )
+
+    return errors, warnings
+
+
+def recent_evidence(plan_text):
+    current = top_level_section(plan_text, "当前阶段") or ""
+    section = markdown_section(current, ["最近实施/验证记录"])
+    rows = markdown_table_rows(section)
+    return [row for row in rows if len(row) >= 2 and row[0] not in {"日期", "字段", "类型"}]
+
+
+def workset_payload(root, include_history=False, strict=False):
+    errors = []
+    strict_failures = []
+    plan_map_text, _, plans = load_plan_records(root, errors)
+    output = {
+        "schema_version": 1,
+        "source": "derived",
+        "plans": [],
+        "warnings": [],
+    }
+    if errors:
+        output["warnings"] = errors
+        return output, 1
+
+    index_issues = plan_index_issues(plan_map_text)
+    relation_errors, relation_warnings = validate_relation_graph(plan_map_text, plans)
+    output["warnings"].extend(relation_warnings)
+    if relation_errors:
+        output["warnings"].extend(relation_errors)
+        strict_failures.extend(relation_errors)
+
+    for name, data in plans.items():
+        if not include_history and data["status"] not in WARNING_ACTIVE:
+            continue
+        path = data["path"]
+        if not path.exists():
+            message = f"{name}: 计划文件不存在：{path}"
+            output["warnings"].append(message)
+            strict_failures.append(message)
+            continue
+        plan_text = read_utf8(path, errors)
+        summary = current_summary(plan_text)
+        blockers = unresolved_current_blockers(plan_text)
+        if blockers:
+            readiness = "blocked"
+            action = {
+                "state": "known",
+                "kind": "resolve_blocker",
+                "reason": "当前阶段存在未解决阻塞项",
+            }
+        elif data["status"] == "待实施":
+            readiness = "ready"
+            action = {"state": "known", "kind": "implement", "reason": "计划状态为待实施"}
+        elif data["status"] == "实施中":
+            readiness = "in_progress"
+            action = structured_next_action(plan_text)
+        elif data["status"] in {"候选", "设计中"}:
+            missing = [
+                field for field in ["Step 0", "样本矩阵", "验证方式", "失败/回滚边界"]
+                if not summary.get(field) or is_placeholder(summary.get(field))
+            ]
+            if missing:
+                readiness = "design"
+                action = {
+                    "state": "known",
+                    "kind": "complete_step0",
+                    "reason": f"阶段准入摘要缺少或占位字段：{', '.join(missing)}",
+                }
+            elif not current_review_passes(plan_text, data["phase"]):
+                readiness = "design"
+                action = {
+                    "state": "known",
+                    "kind": "independent_review",
+                    "reason": "当前阶段尚无通过的最新独立准入复核",
+                }
+            else:
+                readiness = "design"
+                action = {"state": "unknown", "kind": "unknown", "reason": "缺少结构化下一动作"}
+        else:
+            readiness = "unknown"
+            action = {"state": "unknown", "kind": "unknown", "reason": "计划状态不在工作集派生范围"}
+
+        output["plans"].append(
+            {
+                "plan": name,
+                "status": data["status"],
+                "phase": data["phase"],
+                "readiness": readiness,
+                "blockers": blockers,
+                "next_action": action,
+                "parallel": parallel_summary(plan_map_text, name, relation_valid=not relation_errors),
+                "recent_evidence": recent_evidence(plan_text),
+            }
+        )
+
+    if errors:
+        output["warnings"].extend(errors)
+        strict_failures.extend(errors)
+    if index_issues:
+        output["plans"] = []
+        output["warnings"].extend(index_issues)
+        strict_failures.extend(index_issues)
+    return output, 1 if strict and strict_failures else 0
+
+
+def print_workset_text(payload, strict=False):
+    print("工作集（只读派生）")
+    for item in payload["plans"]:
+        action = item["next_action"]
+        parallel = item["parallel"]
+        print(
+            f"- {item['plan']} | {item['status']} | {item['phase']} | "
+            f"{item['readiness']} | next={action['kind']} | "
+            f"parallel={parallel['state']}"
+        )
+        if item["blockers"]:
+            print(f"  blockers: {'；'.join(item['blockers'])}")
+    for warning in payload["warnings"]:
+        print(f"{'ERROR' if strict else 'WARNING'}: {warning}")
+
+
+STEP_COLUMNS = ["步骤 ID", "前置步骤", "动作", "证据", "完成条件", "状态", "分支记录"]
+STEP_STATES = {"未开始", "执行中", "已完成", "阻塞", "不适用"}
+CONSTRAINT_COLUMNS = ["约束 ID", "类型", "步骤", "共享目标", "建议顺序", "说明"]
+
+
+def split_prerequisites(value):
+    if not value or value.strip("` -") == "":
+        return []
+    return [item for item in re.split(r"[,，、\s]+", value.strip("` ")) if item and item != "-"]
+
+
+def branch_record_has_value(branch_record, marker):
+    match = re.search(rf"{re.escape(marker)}\s*[：:]\s*([^；;,，\n]+)", branch_record)
+    return bool(match and not is_placeholder(match.group(1).strip()))
+
+
+def find_execution_rows(plan_text):
+    section = markdown_section(plan_text, ["执行清单"])
+    if section is None:
+        return None, []
+    rows = markdown_table_rows(section)
+    header_index = next((index for index, row in enumerate(rows) if row[: len(STEP_COLUMNS)] == STEP_COLUMNS), None)
+    if header_index is None:
+        return [], []
+    return STEP_COLUMNS, rows[header_index + 1 :]
+
+
+def validate_step_plan(root, plan_name, strict=False):
+    errors = []
+    _, _, plans = load_plan_records(root, errors)
+    if errors:
+        payload = {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": "",
+            "enabled": False,
+            "status": "invalid",
+            "steps": [],
+            "errors": errors,
+            "warnings": [],
+        }
+        return payload, 1
+
+    data = plans.get(plan_name)
+    if data is None or not data["path"].exists():
+        payload = {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"] if data else "",
+            "enabled": False,
+            "status": "invalid",
+            "steps": [],
+            "errors": [f"{plan_name}: 未登记计划或计划文件不存在"],
+            "warnings": [],
+        }
+        return payload, 1
+
+    plan_errors = []
+    plan_text = read_utf8(data["path"], plan_errors)
+    if plan_errors:
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"],
+            "enabled": False,
+            "status": "invalid",
+            "steps": [],
+            "errors": plan_errors,
+            "warnings": [],
+        }, 1
+    parse_text = mask_fenced_code(plan_text)
+    if not re.search(r"^\s*execution_mode\s*:\s*autonomous-continuous\s*$", parse_text, re.MULTILINE):
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"],
+            "enabled": False,
+            "status": "not_enabled",
+            "steps": [],
+            "errors": [],
+            "warnings": [],
+        }, 0
+
+    errors = []
+    policy_match = re.search(r"^\s*execution_policy\s*:\s*(\S+)\s*$", parse_text, re.MULTILINE)
+    policy = policy_match.group(1).strip("`") if policy_match else "serial"
+    if policy not in {"serial", "parallel"}:
+        errors.append(f"{plan_name}: 字段 execution_policy 值非法：{policy}")
+
+    headers, rows = find_execution_rows(plan_text)
+    if headers is None:
+        errors.append(f"{plan_name}: 缺少 `### 执行清单` 章节")
+        rows = []
+    elif not headers:
+        errors.append(f"{plan_name}: 执行清单缺少固定七列表头")
+    elif not rows:
+        errors.append(f"{plan_name}: 执行清单至少需要一个步骤")
+
+    steps = []
+    ids = set()
+    dependencies = {}
+    for row_index, row in enumerate(rows, start=1):
+        if len(row) < len(STEP_COLUMNS):
+            errors.append(f"{plan_name}: 执行清单第 {row_index} 行字段不足")
+            continue
+        step = dict(zip(STEP_COLUMNS, row[: len(STEP_COLUMNS)]))
+        step_id = step["步骤 ID"].strip("` ")
+        if not step_id:
+            errors.append(f"{plan_name}: 执行清单第 {row_index} 行缺少步骤 ID")
+            continue
+        if step_id in ids:
+            errors.append(f"{plan_name}: 步骤 {step_id} 重复")
+        ids.add(step_id)
+        dependencies[step_id] = split_prerequisites(step["前置步骤"])
+        for field in ["动作", "证据", "完成条件"]:
+            if not step[field].strip("` ") or is_placeholder(step[field]):
+                errors.append(f"{plan_name}: 步骤 {step_id} 缺少字段 {field}")
+        state = step["状态"].strip("` ")
+        if state not in STEP_STATES:
+            errors.append(f"{plan_name}: 步骤 {step_id} 状态非法：{state}")
+        if state == "不适用":
+            branch_record = step["分支记录"].strip("` ")
+            if is_placeholder(branch_record):
+                errors.append(f"{plan_name}: 步骤 {step_id} 为不适用但缺少分支记录")
+            else:
+                for marker in ["触发条件", "理由", "替代证据"]:
+                    if not branch_record_has_value(branch_record, marker):
+                        errors.append(f"{plan_name}: 步骤 {step_id} 的不适用分支记录缺少有效{marker}")
+        if state in {"已完成", "不适用"} and is_placeholder(step["证据"]):
+            errors.append(f"{plan_name}: 步骤 {step_id} 为 {state} 但缺少证据")
+        steps.append(
+            {
+                "id": step_id,
+                "preconditions": dependencies[step_id],
+                "action": step["动作"],
+                "evidence": step["证据"],
+                "completion": step["完成条件"],
+                "state": state,
+                "branch_record": step["分支记录"],
+            }
+        )
+
+    for step_id, prerequisites in dependencies.items():
+        for prerequisite in prerequisites:
+            if prerequisite not in ids:
+                errors.append(f"{plan_name}: 步骤 {step_id} 引用了未知前置步骤 {prerequisite}")
+
+    graph = {step_id: [item for item in prerequisites if item in ids] for step_id, prerequisites in dependencies.items()}
+    errors.extend(f"{plan_name}: 执行清单存在环依赖：{cycle}" for cycle in detect_dependency_cycles(graph))
+    status = "invalid" if errors else "valid"
+    warnings = list(errors) if errors and not strict else []
+    return {
+        "schema_version": 1,
+        "plan": plan_name,
+        "phase": data["phase"],
+        "enabled": True,
+        "status": status,
+        "execution_policy": policy,
+        "steps": steps if not errors else [],
+        "errors": errors,
+        "warnings": warnings,
+    }, 1 if errors and strict else 0
+
+
+def run_workset(root, as_json=False, include_history=False, strict=False):
+    payload, status = workset_payload(root, include_history=include_history, strict=strict)
+    if as_json:
+        print(json.dumps(payload, ensure_ascii=False, indent=2))
+    else:
+        print_workset_text(payload, strict=strict)
+    return status
+
+
+def run_validate_steps(root, plan_name, as_json=False, strict=False):
+    payload, status = validate_step_plan(root, plan_name, strict=strict)
+    if as_json:
+        print(json.dumps(payload, ensure_ascii=False, indent=2))
+    else:
+        print(f"步骤校验：{payload['plan']} | {payload['phase']} | {payload['status']}")
+        for error in payload["errors"]:
+            print(f"{'ERROR' if strict else 'WARNING'}: {error}")
+        for warning in payload["warnings"]:
+            if warning not in payload["errors"]:
+                print(f"WARNING: {warning}")
+    return status
+
+
+def split_constraint_values(value):
+    if not value or value.strip("` -") == "":
+        return []
+    return [
+        item.strip("` ")
+        for item in re.split(r"\s*->\s*|[,，、\s]+", value.strip("` "))
+        if item and item != "-"
+    ]
+
+
+def parse_execution_constraints(plan_text, step_ids):
+    section = markdown_section(plan_text, ["执行约束"])
+    if section is None:
+        return [], []
+    rows = markdown_table_rows(section)
+    header_index = next(
+        (index for index, row in enumerate(rows) if row[: len(CONSTRAINT_COLUMNS)] == CONSTRAINT_COLUMNS),
+        None,
+    )
+    if header_index is None:
+        return [], ["执行约束缺少固定六列表头"]
+
+    constraints = []
+    errors = []
+    seen = set()
+    for row_index, row in enumerate(rows[header_index + 1 :], start=1):
+        if len(row) < len(CONSTRAINT_COLUMNS):
+            errors.append(f"执行约束第 {row_index} 行字段不足")
+            continue
+        constraint = dict(zip(CONSTRAINT_COLUMNS, row[: len(CONSTRAINT_COLUMNS)]))
+        constraint_id = constraint["约束 ID"].strip("` ")
+        kind = constraint["类型"].strip("` ")
+        step_values = split_constraint_values(constraint["步骤"])
+        targets = split_constraint_values(constraint["共享目标"])
+        recommended_order = split_constraint_values(constraint["建议顺序"])
+        if not constraint_id or constraint_id in seen:
+            errors.append(f"执行约束第 {row_index} 行约束 ID 缺失或重复：{constraint_id or '-'}")
+        seen.add(constraint_id)
+        if kind != "shared_write_risk":
+            errors.append(f"执行约束 {constraint_id or row_index} 类型非法：{kind}")
+        if not step_values:
+            errors.append(f"执行约束 {constraint_id or row_index} 缺少步骤")
+        unknown_steps = [item for item in step_values if item not in step_ids]
+        if unknown_steps:
+            errors.append(
+                f"执行约束 {constraint_id or row_index} 引用了未知步骤：{', '.join(unknown_steps)}"
+            )
+        if not targets:
+            errors.append(f"执行约束 {constraint_id or row_index} 缺少共享目标")
+        if recommended_order and any(item not in step_values for item in recommended_order):
+            errors.append(f"执行约束 {constraint_id or row_index} 建议顺序引用了约束外步骤")
+        constraints.append(
+            {
+                "id": constraint_id,
+                "kind": kind,
+                "step_ids": step_values,
+                "targets": targets,
+                "recommended_order": recommended_order,
+                "description": constraint["说明"],
+            }
+        )
+    return constraints, errors
+
+
+def phase_gate_is_blocked(plan_text, current_phase):
+    roadmap = phase_roadmap_rows(plan_text)
+    current_index = next(
+        (index for index, row in enumerate(roadmap) if row and row[0] == current_phase),
+        None,
+    )
+    if current_index is None:
+        return False
+    current_row = roadmap[current_index]
+    current_status = current_row[4].strip() if len(current_row) > 4 else ""
+    if current_status != "已完成":
+        return False
+    following = roadmap[current_index + 1 :]
+    if not following:
+        return False
+    next_status = following[0][4].strip() if len(following[0]) > 4 else ""
+    return next_status not in {"待实施", "实施中", "已完成"}
+
+
+def plan_next_payload(root, plan_name):
+    errors = []
+    _, _, plans = load_plan_records(root, errors)
+    data = plans.get(plan_name)
+    if errors or data is None or not data["path"].exists():
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"] if data else "",
+            "execution_mode": None,
+            "status": "blocked",
+            "ready_steps": [],
+            "blocked_steps": [
+                {
+                    "id": "__plan__",
+                    "reasons": [{"kind": "plan_not_found", "detail": f"未登记计划或计划文件不存在：{plan_name}"}],
+                }
+            ],
+            "constraints": [],
+            "next_action": {"kind": "resolve_blocked", "reason": "plan_not_found"},
+        }, 2
+
+    plan_errors = []
+    plan_text = read_utf8(data["path"], plan_errors)
+    if plan_errors:
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"],
+            "execution_mode": None,
+            "status": "blocked",
+            "ready_steps": [],
+            "blocked_steps": [
+                {"id": "__plan__", "reasons": [{"kind": "invalid_structure", "detail": item} for item in plan_errors]},
+            ],
+            "constraints": [],
+            "next_action": {"kind": "resolve_blocked", "reason": "invalid_structure"},
+        }, 1
+
+    validated, validation_status = validate_step_plan(root, plan_name, strict=True)
+    if validated["status"] == "not_enabled":
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"],
+            "execution_mode": None,
+            "status": "not_enabled",
+            "ready_steps": [],
+            "blocked_steps": [],
+            "constraints": [],
+            "next_action": {"kind": "none", "reason": "plan_not_enabled"},
+        }, 0
+
+    if validated["status"] != "valid":
+        evidence_errors = [
+            error
+            for error in validated.get("errors", [])
+            if "缺少证据" in error or "缺少字段 证据" in error
+        ]
+        other_errors = [
+            error
+            for error in validated.get("errors", [])
+            if "缺少证据" not in error and "缺少字段 证据" not in error
+        ]
+        if evidence_errors and not other_errors:
+            blocked_steps = []
+            for error in evidence_errors:
+                match = re.search(r"步骤\s+([^： ]+)", error)
+                step_id = match.group(1).strip("` ") if match else "__plan__"
+                blocked_steps.append(
+                    {
+                        "id": step_id,
+                        "reasons": [{"kind": "missing_evidence", "detail": error}],
+                    }
+                )
+            return {
+                "schema_version": 1,
+                "plan": plan_name,
+                "phase": data["phase"],
+                "execution_mode": "autonomous-continuous",
+                "execution_policy": validated.get("execution_policy", "serial"),
+                "status": "blocked",
+                "ready_steps": [],
+                "blocked_steps": blocked_steps,
+                "constraints": [],
+                "next_action": {"kind": "resolve_blocked", "reason": "missing_evidence"},
+            }, 0
+        reasons = [
+            {"kind": "invalid_structure", "detail": error}
+            for error in validated.get("errors", [])
+        ] or [{"kind": "invalid_structure", "detail": "步骤表无法安全解析"}]
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"],
+            "execution_mode": "autonomous-continuous",
+            "execution_policy": validated.get("execution_policy", "serial"),
+            "status": "blocked",
+            "ready_steps": [],
+            "blocked_steps": [{"id": "__plan__", "reasons": reasons}],
+            "constraints": [],
+            "next_action": {"kind": "resolve_blocked", "reason": "invalid_structure"},
+        }, 1
+
+    steps = validated["steps"]
+    step_ids = {step["id"] for step in steps}
+    constraints, constraint_errors = parse_execution_constraints(plan_text, step_ids)
+    if constraint_errors:
+        return {
+            "schema_version": 1,
+            "plan": plan_name,
+            "phase": data["phase"],
+            "execution_mode": "autonomous-continuous",
+            "execution_policy": validated.get("execution_policy", "serial"),
+            "status": "blocked",
+            "ready_steps": [],
+            "blocked_steps": [
+                {
+                    "id": "__plan__",
+                    "reasons": [{"kind": "invalid_structure", "detail": error} for error in constraint_errors],
+                }
+            ],
+            "constraints": constraints,
+            "next_action": {"kind": "resolve_blocked", "reason": "invalid_structure"},
+        }, 1
+
+    terminal_states = {"已完成", "不适用"}
+    terminal_ids = {step["id"] for step in steps if step["state"] in terminal_states}
+    ready = []
+    blocked = []
+    for step in steps:
+        if step["state"] in terminal_states:
+            continue
+        if step["state"] == "阻塞":
+            blocked.append(
+                {"id": step["id"], "reasons": [{"kind": "failed_step", "detail": "步骤处于阻塞状态"}]}
+            )
+            continue
+        if step["state"] == "执行中":
+            blocked.append(
+                {"id": step["id"], "reasons": [{"kind": "step_in_progress", "detail": "步骤已处于执行中"}]}
+            )
+            continue
+        missing = [item for item in step["preconditions"] if item not in terminal_ids]
+        if missing:
+            blocked.append(
+                {
+                    "id": step["id"],
+                    "reasons": [
+                        {
+                            "kind": "missing_predecessor",
+                            "step_ids": missing,
+                        }
+                    ],
+                }
+            )
+            continue
+        ready.append(
+            {
+                "id": step["id"],
+                "reason": {"kind": "dependencies_satisfied"},
+            }
+        )
+
+    policy = validated.get("execution_policy", "serial")
+    if policy == "serial" and ready:
+        ready = ready[:1]
+
+    all_terminal = all(step["state"] in terminal_states for step in steps)
+    if ready:
+        status = "ready"
+        action_kind = "review_shared_write_order" if constraints else "run_ready_steps"
+        action_reason = "shared_write_risk_present" if constraints else "steps_ready"
+        exit_status = 0
+    elif all_terminal and phase_gate_is_blocked(plan_text, data["phase"]):
+        status = "phase_gate"
+        action_kind = "await_phase_gate"
+        action_reason = "next_phase_not_admitted"
+        exit_status = 0
+    elif all_terminal:
+        status = "complete"
+        action_kind = "await_independent_acceptance"
+        action_reason = "implementation_complete_acceptance_pending"
+        exit_status = 0
+    else:
+        status = "blocked"
+        action_kind = "resolve_blocked"
+        action_reason = blocked[0]["reasons"][0]["kind"] if blocked else "no_ready_steps"
+        exit_status = 0
+
+    return {
+        "schema_version": 1,
+        "plan": plan_name,
+        "phase": data["phase"],
+        "execution_mode": "autonomous-continuous",
+        "execution_policy": policy,
+        "status": status,
+        "ready_steps": ready,
+        "blocked_steps": blocked,
+        "constraints": constraints,
+        "next_action": {"kind": action_kind, "reason": action_reason},
+    }, exit_status
+
+
+def print_plan_next_text(payload):
+    print(f"下一步骤：{payload['plan']} | {payload['phase']} | {payload['status']}")
+    if payload.get("ready_steps"):
+        print("  ready: " + ", ".join(item["id"] for item in payload["ready_steps"]))
+    if payload.get("blocked_steps"):
+        print("  blocked: " + ", ".join(item["id"] for item in payload["blocked_steps"]))
+    if payload.get("constraints"):
+        print("  constraints: " + ", ".join(item["id"] for item in payload["constraints"]))
+    action = payload["next_action"]
+    print(f"  next: {action['kind']} ({action['reason']})")
+
+
+def run_plan_next(root, plan_name, as_json=False):
+    payload, status = plan_next_payload(root, plan_name)
+    if as_json:
+        print(json.dumps(payload, ensure_ascii=False, indent=2))
+    else:
+        print_plan_next_text(payload)
+    return status
+
+
 def parse_args(argv):
     parser = argparse.ArgumentParser(description="检查计划治理文档的一致性。")
     parser.add_argument("root", nargs="?", default=".", help="仓库根目录，默认当前目录。")
+    parser.add_argument("--workset", action="store_true", help="输出只读当前工作集。")
+    parser.add_argument("--validate-steps", action="store_true", help="只读校验指定计划的自主执行步骤表。")
+    parser.add_argument("--next-plan", metavar="PLAN", help="只读查询指定计划的下一步骤集合。")
+    parser.add_argument("--json", action="store_true", help="以 JSON 输出工作集或步骤校验结果。")
+    parser.add_argument("--include-history", action="store_true", help="工作集包含历史计划。")
+    parser.add_argument("--root", dest="mode_root", help="工作集/步骤校验的仓库根目录。")
     parser.add_argument("--drift", action="store_true", help="检查工作区变更是否被活跃计划影响范围覆盖。")
     parser.add_argument("--pre-commit", action="store_true", help="检查 staged 变更是否被活跃计划影响范围覆盖。")
     parser.add_argument(
@@ -632,6 +1917,18 @@ def parse_args(argv):
         help="将待实施/实施中计划的阶段准入结构缺陷从 WARNING 提升为 ERROR。",
     )
     parser.add_argument("--attest", metavar="PLAN", help="为已登记计划创建或覆盖完成快照。")
+    parser.add_argument(
+        "--attest-purpose",
+        choices=sorted(ATTESTATION_PURPOSES),
+        help="创建带 purpose/snapshot_id 关系的完成快照；不传时保持旧 <plan>.json 格式。",
+    )
+    parser.add_argument("--supersedes", help="新 attestation 要替代的仓库内相对快照路径。")
+    parser.add_argument(
+        "--review-status",
+        choices=sorted(ATTESTATION_REVIEW_STATUSES),
+        default="current",
+        help="新 attestation 的初始复核状态，默认 current。",
+    )
     parser.add_argument("--check-attestations", action="store_true", help="检查完成快照 hash 是否漂移。")
     parser.add_argument(
         "--stale-days",
@@ -646,6 +1943,22 @@ def parse_args(argv):
 
 def main(argv=None):
     args = parse_args(sys.argv[1:] if argv is None else argv)
+    if args.workset:
+        return run_workset(
+            Path(args.mode_root or args.root),
+            as_json=args.json,
+            include_history=args.include_history,
+            strict=args.strict_readiness,
+        )
+    if args.validate_steps:
+        return run_validate_steps(
+            Path(args.mode_root or "."),
+            args.root,
+            as_json=args.json,
+            strict=args.strict_readiness,
+        )
+    if args.next_plan:
+        return run_plan_next(Path(args.mode_root or "."), args.next_plan, as_json=args.json)
     root = Path(args.root)
     docs = root / "docs"
     plan_map = docs / "PLAN_MAP.md"
@@ -693,6 +2006,13 @@ def main(argv=None):
         else:
             fail(errors, f"docs/PLAN_MAP.md: 计划行缺少 docs/plans 链接：{row[0]}")
 
+    relation_errors, relation_warnings = validate_relation_graph(text, plans)
+    warnings.extend(relation_warnings)
+    if args.strict_readiness:
+        errors.extend(relation_errors)
+    else:
+        warnings.extend(relation_errors)
+
     edges = {}
     inactive = {name for name, data in plans.items() if data["status"] in INACTIVE}
     for name, data in plans.items():
@@ -721,7 +2041,20 @@ def main(argv=None):
         if data["status"] in ACTIVE and has_current_blocker(plan_text):
             fail(errors, f"{data['path']}: 活跃计划仍有未解决的当前阶段阻塞项")
         if data["status"] in WARNING_ACTIVE:
-            active_plan_targets[name] = extract_affected_targets(plan_text)
+            targets = extract_affected_targets(plan_text)
+            plan_relative = data["path"].relative_to(root).as_posix()
+            if plan_relative not in targets:
+                targets.append(plan_relative)
+            phase_evidence, invalid_evidence = extract_phase_evidence_targets(plan_text)
+            for evidence in phase_evidence:
+                if evidence not in targets:
+                    targets.append(evidence)
+            for invalid in invalid_evidence:
+                warn(
+                    warnings,
+                    f"{data['path']}: 阶段证据路径非法，未纳入 drift 覆盖：{invalid}",
+                )
+            active_plan_targets[name] = targets
 
         check_phase_readiness(
             text,
@@ -748,10 +2081,37 @@ def main(argv=None):
             warn(warnings, f"{name}: PLAN_MAP.md 声明依赖 {unreferenced}，但计划正文未引用")
 
     try:
+        drift_files = changed_files(root) if args.drift else set()
+        pre_commit_files = changed_files(root, staged=True) if args.pre_commit else set()
+        completion_window_targets = completed_plan_drift_targets(
+            plans,
+            plan_texts,
+            root,
+            drift_files | pre_commit_files,
+        )
+        drift_plan_targets = dict(active_plan_targets)
+        drift_plan_targets.update(completion_window_targets)
+        drift_covering_plan_names = set(active_plan_targets) | set(completion_window_targets)
         if args.drift:
-            warn_uncovered_changes(warnings, "--drift", changed_files(root), active_plan_targets)
+            warn_uncovered_changes(
+                warnings,
+                "--drift",
+                drift_files,
+                drift_plan_targets,
+                root=root,
+                known_plans=set(plans),
+                covering_plan_names=drift_covering_plan_names,
+            )
         if args.pre_commit:
-            warn_uncovered_changes(warnings, "--pre-commit", changed_files(root, staged=True), active_plan_targets)
+            warn_uncovered_changes(
+                warnings,
+                "--pre-commit",
+                pre_commit_files,
+                drift_plan_targets,
+                root=root,
+                known_plans=set(plans),
+                covering_plan_names=drift_covering_plan_names,
+            )
     except (subprocess.CalledProcessError, FileNotFoundError) as exc:
         warn(warnings, f"Git 变更检查不可用：{exc}")
 
@@ -762,15 +2122,39 @@ def main(argv=None):
             warn_stale_plans(warnings, plans, args.stale_days)
 
     if args.check_attestations:
-        warn_attestation_drift(warnings, root, plans)
+        attestation_reports = []
+        warn_attestation_drift(
+            warnings,
+            root,
+            plans,
+            errors=errors,
+            strict=args.strict_readiness,
+            reports=attestation_reports,
+        )
+    else:
+        attestation_reports = []
 
     attested_path = None
+    if (args.attest_purpose or args.supersedes) and not args.attest:
+        fail(errors, "--attest-purpose/--supersedes 必须与 --attest 一起使用")
     if args.attest:
-        attested_path = create_attestation(root, plan_map, plans, args.attest, errors)
+        attested_path = create_attestation(
+            root,
+            plan_map,
+            plans,
+            args.attest,
+            errors,
+            purpose=args.attest_purpose,
+            supersedes=args.supersedes or "",
+            review_status=args.review_status,
+        )
 
     for warning in warnings:
         print(f"WARNING: {warning}")
 
+    for report in attestation_reports:
+        print(f"ATTESTATION: {report}")
+
     if errors:
         for error in errors:
             print(f"ERROR: {error}")