sdd-flow-kit 1.0.25 → 1.1.0

package/README.md

@@ -11,6 +11,23 @@
 软件架构说明
 
 
+#### Node 版本（14.16 / 18 / 20 均可）
+
+| 组件 | 要求 |
+|------|------|
+| **sdd-flow-kit** CLI（`install` / `run` / `doctor` / `postinstall`） | **Node >= 14.16.0**（`engines` 已声明；兼容老 CI/内网机） |
+| **openspec** CLI、`opsx-workflow` | 以各自包文档为准；建议 **18+** |
+| 目标业务仓（如 adInsight `frontend`） | 按该仓 `package.json` engines，与 kit 独立 |
+
+安装后建议执行：
+
+```bash
+node -v   # 应 >= v14.16.0
+npx sdd-flow-kit doctor --agent cursor
+```
+
+若 `doctor` 报 `node-version` 失败，请升级到 14.16+，或在该仓使用 `.nvmrc` 锁定版本。
+
 #### 安装教程
 
 1.  进入你要开发的项目目录
@@ -56,14 +73,36 @@
 
 #### 使用说明
 
-##### 需求澄清：用户无需背提示词
+##### 脚本门禁（v1.1+，**不依赖自然语言**）
+
+`run` 会在 `openspec/PRD/<runId>/NEXT.md` 写入**必须按顺序执行的命令**。AI 与人都以 **exit code** 为准：失败则不得进入下一阶段、不得改 `src/`。
 
-`install` 会写入 `.cursor/rules/sdd-flow-kit-gates.mdc` 与触发 Skill。  
-澄清阶段你**直接粘贴确认点**（编号列表即可），AI 先进入文档模式更新 `openspec/PRD/**`。  
-**默认**：03 闭环并生成 01/02/04 后，**同一回合自动** `/opsx-propose`（01+02+UI）→ `/opsx-apply`，无需再说「继续」。  
-说「只提案」或「先别写代码」可停在提案阶段；设 `autoChainOpsx: false` 可恢复人工分步。
+```bash
+# 门禁（失败 exit 1）
+npx sdd-flow-kit gate --project-root . --run-id <runId> --expect prd-fetched
+npx sdd-flow-kit gate --project-root . --run-id <runId> --expect docs-closed      # 检测 git 是否误改 src
+npx sdd-flow-kit gate --project-root . --run-id <runId> --expect propose-ready --change <name>
+npx sdd-flow-kit gate --project-root . --run-id <runId> --expect impl-allowed --change <name>
+npx sdd-flow-kit gate --project-root . --run-id <runId> --expect shipped --change <name>
+
+# 阶段推进（更新 .session-state.json + NEXT.md）
+npx sdd-flow-kit phase advance --project-root . --run-id <runId> --to after-prd
+npx sdd-flow-kit phase advance --project-root . --run-id <runId> --to docs-done
+npx sdd-flow-kit phase advance --project-root . --run-id <runId> --to propose-done --change <name>
+npx sdd-flow-kit phase advance --project-root . --run-id <runId> --to impl --change <name>
+npx sdd-flow-kit phase advance --project-root . --run-id <runId> --to shipped --change <name>
+
+# 提案 / 交付
+npx sdd-flow-kit propose --project-root . --run-id <runId> --change <name>
+npx sdd-flow-kit deliver --project-root . --run-id <runId> --change <name>
+```
+
+`docs-closed` 会在 git 仓库中扫描 `src/`、`frontend/src/` 等路径；文档阶段若已有实现层改动，**gate 失败**。
+
+##### 需求澄清：用户无需背提示词
 
-阶段口语（可选，用于断点续跑）：`继续` / `做提案` / `开始 apply`。
+`install` 会写入 `.cursor/rules/sdd-flow-kit-gates.mdc` 与触发 Skill（已改为**脚本优先**）。  
+用户粘贴确认点后：先更新 01/02/03/04，再执行 `gate docs-closed` → `phase advance --to docs-done`；**禁止**跳过 gate 直接改代码。
 
 ##### `/opsx-apply` 与 TDD + Playwright 检查机制
 
@@ -88,9 +127,10 @@ npx sdd-flow-kit doctor --agent cursor --fix     # 检查并尝试修复
 
 #### 当前自动化边界
 
-- 已支持：跨工具统一目录结构、提示词、报告模板、执行清单
-- 已支持：环境检测与按工具自动执行 `npx @lixin5257xxx/opsx-workflow setup ...`
-- 自动化增强：`claude-code` adapter 支持 `claude -p` 自动执行并记录 `AUTO-RUN-LOG.md`（失败自动降级人工）
+- 已支持：跨工具统一目录结构、提示词、报告模板、**NEXT.md 脚本清单**
+- 已支持：**gate / phase / propose / deliver** 命令（exit code 机械门禁）
+- 已支持：`ensure-opsx` + `openspec status` 校验 apply-ready
+- 未支持：在 Cursor 内全自动跑完全流程（Cursor adapter 仍为 manual）；可选 `SDD_FLOW_KIT_ENABLE_CLAUDE_AUTORUN=1` 给 Claude Code
 
 #### npm 发包流程
 

package/dist/adapters/index.js

@@ -4,12 +4,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAdapter = getAdapter;
-const node_child_process_1 = require("node:child_process");
-const node_path_1 = __importDefault(require("node:path"));
-const node_process_1 = __importDefault(require("node:process"));
+const child_process_1 = require("child_process");
+const path_1 = __importDefault(require("path"));
+const process_1 = __importDefault(require("process"));
 const fs_1 = require("../core/fs");
 function hasCommand(cmd) {
-    const result = (0, node_child_process_1.spawnSync)("which", [cmd], { stdio: "ignore" });
+    const result = (0, child_process_1.spawnSync)("which", [cmd], { stdio: "ignore" });
     return result.status === 0;
 }
 function createManualAdapter(name, displayName, bins) {
@@ -25,15 +25,16 @@ function createManualAdapter(name, displayName, bins) {
     };
 }
 async function runClaudeFlow(args) {
+    var _a;
     // 默认关闭“二次调用 claude”自动执行，避免在 AI 会话内递归触发导致静默挂起。
     // 仅在显式开启时执行：SDD_FLOW_KIT_ENABLE_CLAUDE_AUTORUN=1
-    if (node_process_1.default.env.SDD_FLOW_KIT_ENABLE_CLAUDE_AUTORUN !== "1") {
+    if (process_1.default.env.SDD_FLOW_KIT_ENABLE_CLAUDE_AUTORUN !== "1") {
         return false;
     }
     const hasClaude = hasCommand("claude");
     if (!hasClaude)
         return false;
-    const sddPrompt = await (0, fs_1.readFileIfExists)(node_path_1.default.join(args.outputRoot, "02-需求分析提示词.md"));
+    const sddPrompt = await (0, fs_1.readFileIfExists)(path_1.default.join(args.outputRoot, "02-需求分析提示词.md"));
     if (!sddPrompt)
         return false;
     const prompt = [
@@ -49,16 +50,16 @@ async function runClaudeFlow(args) {
         "以下是第2步提示词：",
         sddPrompt,
     ].join("\n");
-    const commandResult = (0, node_child_process_1.spawnSync)("claude", ["-p", prompt], {
+    const commandResult = (0, child_process_1.spawnSync)("claude", ["-p", prompt], {
         cwd: args.outputRoot,
         encoding: "utf8",
-        env: node_process_1.default.env,
+        env: process_1.default.env,
     });
-    await (0, fs_1.writeTextFileEnsuredDir)(node_path_1.default.join(args.outputRoot, "AUTO-RUN-LOG.md"), [
+    await (0, fs_1.writeTextFileEnsuredDir)(path_1.default.join(args.outputRoot, "AUTO-RUN-LOG.md"), [
         "# AUTO-RUN-LOG",
         "",
         `agent: claude-code`,
-        `status: ${commandResult.status ?? "unknown"}`,
+        `status: ${(_a = commandResult.status) !== null && _a !== void 0 ? _a : "unknown"}`,
         "",
         "## stdout",
         commandResult.stdout || "",

package/dist/cli.js

@@ -4,20 +4,24 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const node_path_1 = __importDefault(require("node:path"));
-const node_process_1 = __importDefault(require("node:process"));
+const path_1 = __importDefault(require("path"));
+const process_1 = __importDefault(require("process"));
 const startFlow_1 = require("./steps/startFlow");
 const runFlow_1 = require("./steps/runFlow");
 const utils_1 = require("./core/utils");
 const setupProject_1 = require("./steps/setupProject");
 const doctor_1 = require("./steps/doctor");
 const invokeFlow_1 = require("./steps/invokeFlow");
+const runGate_1 = require("./steps/runGate");
+const runPhaseAdvance_1 = require("./steps/runPhaseAdvance");
+const runPropose_1 = require("./steps/runPropose");
+const runDeliver_1 = require("./steps/runDeliver");
 const ALLOWED_AGENTS = ["cursor", "claude-code", "codex", "openclaw", "custom"];
 function getArgValue(flag) {
-    const idx = node_process_1.default.argv.indexOf(flag);
+    const idx = process_1.default.argv.indexOf(flag);
     if (idx === -1)
         return null;
-    const v = node_process_1.default.argv[idx + 1];
+    const v = process_1.default.argv[idx + 1];
     if (!v)
         return null;
     return v;
@@ -45,7 +49,18 @@ function printHelp() {
         "",
         "6) Apply 前确保 OPSX+TDD+Playwright（/opsx-apply 前必须）：",
         "   npx sdd-flow-kit ensure-opsx --agent cursor -y",
-        "   （缺省时自动 npx @lixin5257xxx/opsx-workflow setup）",
+        "",
+        "7) 脚本门禁（失败 exit 1，不依赖自然语言）：",
+        "   npx sdd-flow-kit gate --project-root . --run-id <runId> --expect prd-fetched",
+        "   npx sdd-flow-kit gate --project-root . --run-id <runId> --expect docs-closed",
+        "   npx sdd-flow-kit gate --project-root . --run-id <runId> --expect impl-allowed --change <name>",
+        "",
+        "8) 阶段推进（更新 session + NEXT.md）：",
+        "   npx sdd-flow-kit phase advance --project-root . --run-id <runId> --to after-prd|docs-done|propose-done|impl|shipped",
+        "",
+        "9) 提案 / 交付：",
+        "   npx sdd-flow-kit propose --project-root . --run-id <runId> --change <name>",
+        "   npx sdd-flow-kit deliver --project-root . --run-id <runId> --change <name>",
         "",
         "可选参数：",
         "   --projectRoot <path>   目标项目根目录（默认当前目录）",
@@ -61,36 +76,58 @@ function printHelp() {
     ].join("\n"));
 }
 async function main() {
-    const cmd = node_process_1.default.argv[2];
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    const cmd = process_1.default.argv[2];
     if (!cmd || cmd === "--help" || cmd === "-h") {
         printHelp();
         return;
     }
+    const GATE_EXPECTS = [
+        "prd-fetched",
+        "questions-open",
+        "docs-closed",
+        "propose-ready",
+        "impl-allowed",
+        "shipped",
+    ];
+    const PHASE_TARGETS = [
+        "after-prd",
+        "docs-done",
+        "propose-done",
+        "impl",
+        "shipped",
+    ];
     if (cmd !== "start" &&
         cmd !== "run" &&
         cmd !== "setup" &&
         cmd !== "install" &&
         cmd !== "doctor" &&
         cmd !== "ensure-opsx" &&
-        cmd !== "invoke") {
+        cmd !== "invoke" &&
+        cmd !== "gate" &&
+        cmd !== "phase" &&
+        cmd !== "propose" &&
+        cmd !== "deliver") {
         printHelp();
-        node_process_1.default.exitCode = 1;
+        process_1.default.exitCode = 1;
         return;
     }
     const product = getArgValue("--product");
     const version = getArgValue("--version");
-    const projectRoot = getArgValue("--projectRoot") ?? node_process_1.default.cwd();
-    const branch = getArgValue("--branch") ?? undefined;
-    const yes = node_process_1.default.argv.includes("-y");
-    const dryRun = node_process_1.default.argv.includes("--dry-run");
-    const planJson = node_process_1.default.argv.includes("--plan-json");
-    const agentValue = getArgValue("--agent") ?? "claude-code";
-    const projectKind = (getArgValue("--project") ?? "OMS");
+    const projectRoot = path_1.default.resolve((_b = (_a = getArgValue("--project-root")) !== null && _a !== void 0 ? _a : getArgValue("--projectRoot")) !== null && _b !== void 0 ? _b : process_1.default.cwd());
+    const runId = (_d = (_c = getArgValue("--run-id")) !== null && _c !== void 0 ? _c : getArgValue("--runId")) !== null && _d !== void 0 ? _d : undefined;
+    const changeName = (_e = getArgValue("--change")) !== null && _e !== void 0 ? _e : undefined;
+    const branch = (_f = getArgValue("--branch")) !== null && _f !== void 0 ? _f : undefined;
+    const yes = process_1.default.argv.includes("-y");
+    const dryRun = process_1.default.argv.includes("--dry-run");
+    const planJson = process_1.default.argv.includes("--plan-json");
+    const agentValue = (_g = getArgValue("--agent")) !== null && _g !== void 0 ? _g : "claude-code";
+    const projectKind = ((_h = getArgValue("--project")) !== null && _h !== void 0 ? _h : "OMS");
     if (!ALLOWED_AGENTS.includes(agentValue)) {
         // eslint-disable-next-line no-console
         console.error(`不支持的 --agent: ${agentValue}`);
         printHelp();
-        node_process_1.default.exitCode = 1;
+        process_1.default.exitCode = 1;
         return;
     }
     const agent = agentValue;
@@ -98,13 +135,99 @@ async function main() {
     if (!allowedProjects.includes(projectKind)) {
         // eslint-disable-next-line no-console
         console.error(`不支持的 --project: ${projectKind}（可选：${allowedProjects.join(" / ")}）`);
-        node_process_1.default.exitCode = 1;
+        process_1.default.exitCode = 1;
+        return;
+    }
+    if (cmd === "gate") {
+        const expect = getArgValue("--expect");
+        if (!expect || !GATE_EXPECTS.includes(expect)) {
+            // eslint-disable-next-line no-console
+            console.error(`gate 需要 --expect ${GATE_EXPECTS.join("|")}`);
+            process_1.default.exitCode = 1;
+            return;
+        }
+        const result = await (0, runGate_1.runGate)({
+            projectRoot,
+            runId,
+            expect,
+            change: changeName,
+        });
+        (0, runGate_1.printGateResult)(result);
+        if (!result.ok)
+            process_1.default.exitCode = 1;
+        return;
+    }
+    if (cmd === "phase") {
+        const sub = process_1.default.argv[3];
+        if (sub !== "advance") {
+            // eslint-disable-next-line no-console
+            console.error("用法: sdd-flow-kit phase advance --to <target> ...");
+            process_1.default.exitCode = 1;
+            return;
+        }
+        const to = getArgValue("--to");
+        if (!to || !PHASE_TARGETS.includes(to)) {
+            // eslint-disable-next-line no-console
+            console.error(`需要 --to ${PHASE_TARGETS.join("|")}`);
+            process_1.default.exitCode = 1;
+            return;
+        }
+        const result = await (0, runPhaseAdvance_1.runPhaseAdvance)({
+            projectRoot,
+            runId,
+            to,
+            change: changeName,
+            dryRun,
+        });
+        // eslint-disable-next-line no-console
+        console.log(result.ok ? `✅ ${result.message}` : `❌ ${result.message}`);
+        if (!result.ok)
+            process_1.default.exitCode = 1;
+        return;
+    }
+    if (cmd === "propose") {
+        if (!changeName) {
+            // eslint-disable-next-line no-console
+            console.error("propose 需要 --change <kebab-name>");
+            process_1.default.exitCode = 1;
+            return;
+        }
+        const result = await (0, runPropose_1.runPropose)({
+            projectRoot,
+            runId,
+            change: changeName,
+            dryRun,
+        });
+        // eslint-disable-next-line no-console
+        console.log(result.ok ? `✅ ${result.detail}` : `❌ ${result.detail}`);
+        if (!result.ok)
+            process_1.default.exitCode = 1;
+        return;
+    }
+    if (cmd === "deliver") {
+        if (!changeName) {
+            // eslint-disable-next-line no-console
+            console.error("deliver 需要 --change <kebab-name>");
+            process_1.default.exitCode = 1;
+            return;
+        }
+        const result = await (0, runDeliver_1.runDeliver)({
+            projectRoot,
+            runId,
+            change: changeName,
+            agent,
+            dryRun,
+        });
+        // eslint-disable-next-line no-console
+        console.log(result.ok ? `✅ ${result.detail}` : `❌ ${result.detail}`);
+        if (!result.ok)
+            process_1.default.exitCode = 1;
         return;
     }
     if (cmd === "doctor" || cmd === "ensure-opsx") {
-        const fix = cmd === "ensure-opsx" || node_process_1.default.argv.includes("--fix");
+        const fix = cmd === "ensure-opsx" || process_1.default.argv.includes("--fix");
         const doctor = await (0, doctor_1.runDoctor)({
-            projectRoot: node_path_1.default.resolve(projectRoot),
+            projectRoot,
             agent,
             fix,
             dryRun,
@@ -117,11 +240,11 @@ async function main() {
         }
         if (planJson) {
             // eslint-disable-next-line no-console
-            console.log(JSON.stringify({ command: "doctor", projectRoot: node_path_1.default.resolve(projectRoot), result: doctor }, null, 2));
+            console.log(JSON.stringify({ command: "doctor", projectRoot: path_1.default.resolve(projectRoot), result: doctor }, null, 2));
         }
         if (cmd === "ensure-opsx" && !dryRun) {
             await (0, setupProject_1.setupProject)({
-                projectRoot: node_path_1.default.resolve(projectRoot),
+                projectRoot,
                 agent,
                 yes: true,
                 light: true,
@@ -129,12 +252,12 @@ async function main() {
             });
         }
         if (!doctor.ok)
-            node_process_1.default.exitCode = 1;
+            process_1.default.exitCode = 1;
         return;
     }
     if (cmd === "setup" || cmd === "install") {
         const result = await (0, setupProject_1.setupProject)({
-            projectRoot: node_path_1.default.resolve(projectRoot),
+            projectRoot,
             agent,
             branch,
             yes,
@@ -151,7 +274,7 @@ async function main() {
             // eslint-disable-next-line no-console
             console.log(JSON.stringify({
                 command: cmd,
-                projectRoot: node_path_1.default.resolve(projectRoot),
+                projectRoot: path_1.default.resolve(projectRoot),
                 dryRun,
                 result,
             }, null, 2));
@@ -160,21 +283,20 @@ async function main() {
     }
     if (!product || !version) {
         if (cmd === "invoke") {
-            const raw = node_process_1.default.argv
+            const raw = process_1.default.argv
                 .slice(3)
                 .filter((token) => !token.startsWith("--") && token !== "-y")
                 .join(" ")
                 .trim();
             const fromFlag = getArgValue("--text");
-            const text = (fromFlag ?? raw).trim();
+            const text = (fromFlag !== null && fromFlag !== void 0 ? fromFlag : raw).trim();
             const parsed = (0, invokeFlow_1.parseInvokeText)(text);
             if (!parsed) {
                 throw new Error("invoke 解析失败，请使用：开发 ADI 2.3.2 需求");
             }
-            const resolvedRoot = node_path_1.default.resolve(projectRoot);
             const options = (0, invokeFlow_1.toRunOptions)({
                 parsed,
-                projectRoot: resolvedRoot,
+                projectRoot,
                 branch,
                 yes,
                 dryRun,
@@ -190,25 +312,24 @@ async function main() {
             return;
         }
         printHelp();
-        node_process_1.default.exitCode = 1;
+        process_1.default.exitCode = 1;
         return;
     }
-    const resolvedRoot = node_path_1.default.resolve(projectRoot);
-    const runId = `${(0, utils_1.formatYYYYMMDD)(new Date())}-${product}-${version}`;
+    const scaffoldRunId = `${(0, utils_1.formatYYYYMMDD)(new Date())}-${product}-${version}`;
     if (cmd === "start") {
         await (0, startFlow_1.startFlowScaffold)({
             product,
             version,
-            projectRoot: resolvedRoot,
+            projectRoot,
         });
         // eslint-disable-next-line no-console
-        console.log(`已生成 SDD 流程产物骨架：openspec/PRD/${runId}/`);
+        console.log(`已生成 SDD 流程产物骨架：openspec/PRD/${scaffoldRunId}/`);
         return;
     }
     const result = await (0, runFlow_1.runFlow)({
         product,
         version,
-        projectRoot: resolvedRoot,
+        projectRoot,
         agent,
         branch,
         yes,
@@ -221,6 +342,8 @@ async function main() {
     // eslint-disable-next-line no-console
     console.log(`流程已初始化：openspec/PRD/${result.runId}/`);
     // eslint-disable-next-line no-console
+    console.log(`请打开 openspec/PRD/${result.runId}/NEXT.md，按脚本顺序执行 gate / phase / propose / deliver。`);
+    // eslint-disable-next-line no-console
     console.log(`agent=${result.adapterName}, cli=${result.adapterAvailable ? "detected" : "missing"}, autoExecute=${result.executed ? "yes" : "manual"}`);
     // eslint-disable-next-line no-console
     console.log(`branch=${result.branch}, envSetup=${result.setupExecuted ? "installed" : "already-ready"}`);
@@ -232,7 +355,7 @@ async function main() {
         // eslint-disable-next-line no-console
         console.log(JSON.stringify({
             command: "run",
-            projectRoot: resolvedRoot,
+            projectRoot,
             dryRun,
             product,
             version,
@@ -243,5 +366,5 @@ async function main() {
 main().catch((e) => {
     // eslint-disable-next-line no-console
     console.error(e);
-    node_process_1.default.exitCode = 1;
+    process_1.default.exitCode = 1;
 });

package/dist/core/fs.js

@@ -5,8 +5,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.readFileIfExists = readFileIfExists;
 exports.writeTextFileEnsuredDir = writeTextFileEnsuredDir;
-const promises_1 = __importDefault(require("node:fs/promises"));
-const node_path_1 = __importDefault(require("node:path"));
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
 async function readFileIfExists(filePath) {
     try {
         return await promises_1.default.readFile(filePath, "utf8");
@@ -22,6 +22,6 @@ async function readFileIfExists(filePath) {
     }
 }
 async function writeTextFileEnsuredDir(filePath, content) {
-    await promises_1.default.mkdir(node_path_1.default.dirname(filePath), { recursive: true });
+    await promises_1.default.mkdir(path_1.default.dirname(filePath), { recursive: true });
     await promises_1.default.writeFile(filePath, content, "utf8");
 }

package/dist/core/gitDiffGuard.js

@@ -0,0 +1,83 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gitDiffNameOnly = gitDiffNameOnly;
+exports.isImplPath = isImplPath;
+exports.isAllowedDocPath = isAllowedDocPath;
+exports.findImplChanges = findImplChanges;
+exports.resolveGitRoot = resolveGitRoot;
+const child_process_1 = require("child_process");
+const path_1 = __importDefault(require("path"));
+/**
+ * 在 projectRoot 执行 git 命令；非 git 仓库时 isRepo=false（不阻断文档阶段）。
+ */
+function gitDiffNameOnly(projectRoot) {
+    const rev = (0, child_process_1.spawnSync)("git", ["rev-parse", "HEAD"], {
+        cwd: projectRoot,
+        encoding: "utf8",
+    });
+    if (rev.status !== 0) {
+        return { ok: true, isRepo: false, changedFiles: [], head: null };
+    }
+    const head = (rev.stdout || "").trim();
+    const diff = (0, child_process_1.spawnSync)("git", ["diff", "--name-only", "HEAD"], {
+        cwd: projectRoot,
+        encoding: "utf8",
+    });
+    const untracked = (0, child_process_1.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
+        cwd: projectRoot,
+        encoding: "utf8",
+    });
+    const changed = [
+        ...(diff.stdout || "").split("\n").filter(Boolean),
+        ...(untracked.stdout || "").split("\n").filter(Boolean),
+    ];
+    const unique = Array.from(new Set(changed));
+    return { ok: true, isRepo: true, changedFiles: unique, head };
+}
+/** 业务实现路径：命中则视为「实现层改动」 */
+const IMPL_PATH_PATTERNS = [
+    /^src\//,
+    /^e2e\//,
+    /^frontend\/src\//,
+    /^frontend\/e2e\//,
+    /^app\//,
+    /^pages\//,
+    /^components\//,
+];
+function isImplPath(filePath) {
+    const p = filePath.replace(/\\/g, "/");
+    return IMPL_PATH_PATTERNS.some((re) => re.test(p));
+}
+/** 仅允许 PRD / openspec 文档路径（阶段 B/C） */
+const DOC_PATH_PATTERNS = [
+    /^openspec\/PRD\//,
+    /^openspec\/changes\//,
+    /^frontend\/openspec\/PRD\//,
+    /^frontend\/openspec\/changes\//,
+    /^\.opsx-active-change$/,
+    /^frontend\/\.opsx-active-change$/,
+];
+function isAllowedDocPath(filePath) {
+    const p = filePath.replace(/\\/g, "/");
+    if (DOC_PATH_PATTERNS.some((re) => re.test(p)))
+        return true;
+    if (p.endsWith("docs/") || /^docs\//.test(p))
+        return true;
+    return false;
+}
+function findImplChanges(changedFiles) {
+    return changedFiles.filter((f) => isImplPath(f) && !isAllowedDocPath(f));
+}
+function resolveGitRoot(projectRoot) {
+    const top = (0, child_process_1.spawnSync)("git", ["rev-parse", "--show-toplevel"], {
+        cwd: projectRoot,
+        encoding: "utf8",
+    });
+    if (top.status === 0 && top.stdout) {
+        return top.stdout.trim();
+    }
+    return path_1.default.resolve(projectRoot);
+}