sillyspec 3.17.15 → 3.18.1

package/test/platform-artifacts.test.mjs

@@ -0,0 +1,190 @@
+/**
+ * 平台 scan 产物协议测试
+ *
+ * 验证：
+ * 1. saveWorkflowRun 传入 runtimeRoot + scanRunId 时写到正确路径
+ * 2. manifest.json 结构包含产物指针（postcheck_result_path, workflow_runs_dir）
+ * 3. 非平台模式下 workflow-runs 写入 cwd/.sillyspec/.runtime/
+ *
+ * 跑法: node test/platform-artifacts.test.mjs
+ */
+
+import { join, dirname } from 'path'
+import { existsSync, mkdirSync, rmSync, readFileSync, readdirSync, writeFileSync } from 'fs'
+import { fileURLToPath } from 'url'
+import { randomUUID } from 'crypto'
+import { tmpdir } from 'os'
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+const passed = []
+const failed = []
+
+function assert(label, condition, detail) {
+  if (condition) {
+    passed.push(label)
+    console.log(`  ✅ PASS: ${label}`)
+  } else {
+    failed.push({ label, detail })
+    console.log(`  ❌ FAIL: ${label}`)
+    if (detail) console.log(`     ${detail}`)
+  }
+}
+
+function cleanup(dir) {
+  try { rmSync(dir, { recursive: true, force: true }) } catch {}
+}
+
+function hasPathSegments(value, segments) {
+  const parts = value.split(/[\\/]+/)
+  for (let i = 0; i <= parts.length - segments.length; i++) {
+    if (segments.every((segment, offset) => parts[i + offset] === segment)) return true
+  }
+  return false
+}
+
+// ── 测试 1：saveWorkflowRun 平台模式路径正确 ──
+console.log('\n=== Test 1: saveWorkflowRun 平台模式写入路径 ===')
+{
+  const { saveWorkflowRun } = await import('../src/workflow.js')
+  const tmpRoot = join(tmpdir(), `test-artifacts-${randomUUID().slice(0, 8)}`)
+  const runtimeRoot = join(tmpRoot, 'runtime')
+  const scanRunId = 'scan-20260614-test-001'
+
+  const result = {
+    workflow: 'scan-docs',
+    project: 'test-project',
+    status: 'pass',
+    spec_version: 1,
+    roles: [],
+    workflow_checks: [],
+    failures: [],
+  }
+
+  const saved = saveWorkflowRun(result, {
+    cwd: '/fake/cwd',
+    source: 'test',
+    stage: 'scan',
+    runtimeRoot,
+    scanRunId,
+  })
+
+  const expectedDir = join(runtimeRoot, 'scan-runs', scanRunId, 'workflow-runs')
+  assert('workflow-runs 目录存在', existsSync(expectedDir))
+  assert('workflow-runs 文件存在', existsSync(saved), `路径: ${saved}`)
+  assert('路径在 runtime-root 下', saved.startsWith(runtimeRoot), `路径: ${saved}`)
+  assert('路径包含 scan-runs', hasPathSegments(saved, ['scan-runs', scanRunId, 'workflow-runs']), `路径: ${saved}`)
+  assert('路径包含 scanRunId', hasPathSegments(saved, [scanRunId]), `路径: ${saved}`)
+
+  // 验证 JSON 内容
+  const content = JSON.parse(readFileSync(saved, 'utf8'))
+  assert('JSON 有 run_id', !!content.run_id)
+  assert('JSON 有 created_at', !!content.created_at)
+  assert('JSON source = test', content.source === 'test')
+  assert('JSON stage = scan', content.stage === 'scan')
+  assert('JSON workflow = scan-docs', content.workflow === 'scan-docs')
+
+  cleanup(tmpRoot)
+}
+
+// ── 测试 2：saveWorkflowRun 本地模式路径正确 ──
+console.log('\n=== Test 2: saveWorkflowRun 本地模式写入路径 ===')
+{
+  const { saveWorkflowRun } = await import('../src/workflow.js')
+  const tmpCwd = join(tmpdir(), `test-artifacts-local-${randomUUID().slice(0, 8)}`)
+  const sillyspecDir = join(tmpCwd, '.sillyspec', '.runtime', 'workflow-runs')
+
+  const result = {
+    workflow: 'test-wf',
+    project: 'default',
+    status: 'fail',
+    spec_version: 1,
+    roles: [],
+    workflow_checks: [],
+    failures: ['check-1 failed'],
+  }
+
+  const saved = saveWorkflowRun(result, {
+    cwd: tmpCwd,
+    source: 'test',
+    stage: 'scan',
+    // 不传 runtimeRoot 和 scanRunId
+  })
+
+  assert('本地模式文件存在', existsSync(saved))
+  assert('本地路径在 .sillyspec/.runtime 下', hasPathSegments(saved, ['.sillyspec', '.runtime', 'workflow-runs']), `路径: ${saved}`)
+
+  const content = JSON.parse(readFileSync(saved, 'utf8'))
+  assert('本地 JSON status = fail', content.status === 'fail')
+  assert('本地 JSON 有 failures', Array.isArray(content.failures))
+
+  cleanup(tmpCwd)
+}
+
+// ── 测试 3：manifest 结构验证（从 run.js 源码静态检查） ──
+console.log('\n=== Test 3: manifest.json 结构字段 ===')
+{
+  const { readFile } = await import('fs/promises')
+  const runSrc = await readFile(join(__dirname, '..', 'src', 'run.js'), 'utf8')
+
+  // 平台模式 manifest 初始化
+  assert('manifest 包含 workspace_id', runSrc.includes('workspace_id:'))
+  assert('manifest 包含 scan_run_id', runSrc.includes('scan_run_id:'))
+  assert('manifest 包含 source_commit', runSrc.includes('source_commit:'))
+  assert('manifest 包含 source_commit_error', runSrc.includes('source_commit_error:'))
+  assert('manifest 包含 generated_at', runSrc.includes('generated_at:'))
+  assert('manifest 包含 schema_version', runSrc.includes('schema_version:'))
+  assert('manifest 包含 postcheck_result_path', runSrc.includes('postcheck_result_path:'))
+  assert('manifest 包含 workflow_runs_dir', runSrc.includes('workflow_runs_dir:'))
+
+  // postcheck_result_path 在 postcheck 写入后填充
+  assert('manifest.postcheck_result_path 下游填充', runSrc.includes('manifest.postcheck_result_path = postcheckJsonPath'))
+
+  // workflow_runs_dir 使用 runtimeRoot + scanRunId
+  assert('workflow_runs_dir 基于 runtimeRoot', runSrc.includes("join(platformOpts.runtimeRoot, 'scan-runs'"))
+}
+
+// ── 测试 4：平台指针状态更新（源码检查） ──
+console.log('\n=== Test 4: 平台指针 scan 完成后状态更新 ===')
+{
+  const { readFile } = await import('fs/promises')
+  const runSrc = await readFile(join(__dirname, '..', 'src', 'run.js'), 'utf8')
+
+  assert('scan 完成后读取 pointer 文件', runSrc.includes('pointerPath'))
+  assert('pointer status 使用 POINTER_STATUS 枚举', runSrc.includes('POINTER_STATUS'))
+  assert('pointer 记录 completedAt', runSrc.includes('pointer.completedAt'))
+  assert('pointer 记录 scanStatus', runSrc.includes('pointer.scanStatus'))
+}
+
+// ── 测试 5：saveWorkflowRun 调用点传入 runtimeRoot（源码检查） ──
+console.log('\n=== Test 5: run.js 调用 saveWorkflowRun 传入平台参数 ===')
+{
+  const { readFile } = await import('fs/promises')
+  const runSrc = await readFile(join(__dirname, '..', 'src', 'run.js'), 'utf8')
+
+  // 找到 saveWorkflowRun 调用
+  const calls = runSrc.match(/saveWorkflowRun\([^)]+\{[^}]+\}/gs)
+  assert('至少有 2 处 saveWorkflowRun 调用', calls && calls.length >= 2, `实际: ${calls?.length}`)
+
+  // 检查调用是否包含 runtimeRoot 传递
+  const hasRuntimeRoot = runSrc.includes('platformOpts.runtimeRoot ? { runtimeRoot: platformOpts.runtimeRoot }')
+  assert('saveWorkflowRun 调用传入 runtimeRoot', hasRuntimeRoot, '未发现 runtimeRoot 传递')
+
+  const hasScanRunId = runSrc.includes('platformOpts.scanRunId ? { scanRunId: platformOpts.scanRunId }')
+  assert('saveWorkflowRun 调用传入 scanRunId', hasScanRunId, '未发现 scanRunId 传递')
+}
+
+// ── 结果 ──
+console.log(`\n${'='.repeat(50)}`)
+console.log(`✅ 通过: ${passed.length}  ❌ 失败: ${failed.length}`)
+console.log(`${'='.repeat(50)}`)
+
+if (failed.length > 0) {
+  console.log('\n失败详情:')
+  for (const f of failed) {
+    console.log(`  ❌ ${f.label}`)
+    if (f.detail) console.log(`     ${f.detail}`)
+  }
+  throw new Error('platform-artifacts test failed')
+} else {
+  console.log('\n🎉 平台产物协议测试全部通过!')
+}

package/test/platform-failure-samples.test.mjs

@@ -0,0 +1,195 @@
+/**
+ * 平台 scan 失败样本测试
+ *
+ * 验证失败场景下 postcheck + manifest 能稳定表达失败：
+ * 1. source_root 污染 → postcheck status = failed_post_check + source_root_leak check
+ * 2. spec 缺文档 → postcheck status = failed_post_check + all_docs_missing check
+ * 3. 混合场景 → 多个 check，failed 优先
+ * 4. postcheck-result.json 结构可被 SillyHub 稳定解析
+ *
+ * 跑法: node test/platform-failure-samples.test.mjs
+ */
+
+import { join, basename } from 'path'
+import { existsSync, mkdirSync, rmSync, writeFileSync } from 'fs'
+import { randomUUID } from 'crypto'
+import { tmpdir } from 'os'
+import { SCAN_STATUS, CHECK_SEVERITY } from '../src/constants.js'
+
+const passed = []
+const failed = []
+
+function assert(label, condition, detail) {
+  if (condition) {
+    passed.push(label)
+    console.log(`  ✅ PASS: ${label}`)
+  } else {
+    failed.push({ label, detail })
+    console.log(`  ❌ FAIL: ${label}`)
+    if (detail) console.log(`     ${detail}`)
+  }
+}
+
+function cleanup(dir) {
+  try { rmSync(dir, { recursive: true, force: true }) } catch {}
+}
+
+function setup(name) {
+  const base = join(tmpdir(), `failure-test-${name}-${randomUUID().slice(0, 8)}`)
+  const spec = join(tmpdir(), `failure-test-spec-${name}-${randomUUID().slice(0, 8)}`)
+  mkdirSync(base, { recursive: true })
+  mkdirSync(spec, { recursive: true })
+  writeFileSync(join(base, 'package.json'), '{}')
+  return { cwd: base, specDir: spec }
+}
+
+// ── Test 1: source_root 污染 → failed_post_check ──
+console.log('\n=== Test 1: source_root docs 污染 ===')
+{
+  const { cwd, specDir } = setup('leak')
+  const proj = basename(cwd)
+  try {
+    // 在 source_root/.sillyspec/docs/ 下创建泄漏文件
+    mkdirSync(join(cwd, '.sillyspec', 'docs', proj, 'scan'), { recursive: true })
+    writeFileSync(join(cwd, '.sillyspec', 'docs', proj, 'scan', 'ARCHITECTURE.md'), '# leak')
+
+    const { runScanPostCheck } = await import('../src/scan-postcheck.js')
+    const result = runScanPostCheck({ cwd, specDir })
+
+    assert('status = failed_post_check', result.status === SCAN_STATUS.FAILED_POST_CHECK, `实际: ${result.status}`)
+    assert('有 source_root_docs_leak check', result.checks.some(c => c.name === 'source_root_docs_leak'))
+    assert('source_root_docs_leak severity = failed',
+      result.checks.find(c => c.name === 'source_root_docs_leak')?.severity === CHECK_SEVERITY.FAILED)
+
+    // 验证结构化输出
+    const { formatStructuredResult } = await import('../src/scan-postcheck.js')
+    const structured = formatStructuredResult(result, { source_root: cwd })
+    assert('结构化输出有 overall_status', !!structured.overall_status)
+    assert('结构化输出有 checks', Array.isArray(structured.checks))
+    assert('结构化输出 path_pollution 非空', structured.failure_categories.path_pollution.length > 0)
+  } finally {
+    cleanup(cwd)
+    cleanup(specDir)
+  }
+}
+
+// ── Test 2: spec 缺文档 → failed_post_check ──
+console.log('\n=== Test 2: spec 无文档 ===')
+{
+  const { cwd, specDir } = setup('missing')
+  const proj = basename(cwd)
+  try {
+    const { runScanPostCheck } = await import('../src/scan-postcheck.js')
+    const result = runScanPostCheck({ cwd, specDir })
+
+    assert('status = failed_post_check', result.status === SCAN_STATUS.FAILED_POST_CHECK, `实际: ${result.status}`)
+    assert('有 all_docs_missing check', result.checks.some(c => c.name === 'all_docs_missing'))
+
+    const { formatStructuredResult } = await import('../src/scan-postcheck.js')
+    const structured = formatStructuredResult(result, { source_root: cwd })
+    assert('结构化输出 missing_outputs 非空', structured.failure_categories.missing_outputs.length > 0)
+  } finally {
+    cleanup(cwd)
+    cleanup(specDir)
+  }
+}
+
+// ── Test 3: 混合场景（污染 + 缺文档）→ failed 优先 ──
+console.log('\n=== Test 3: 混合失败场景 ===')
+{
+  const { cwd, specDir } = setup('mixed')
+  const proj = basename(cwd)
+  try {
+    // source_root 污染
+    mkdirSync(join(cwd, '.sillyspec', 'docs', proj, 'scan'), { recursive: true })
+    writeFileSync(join(cwd, '.sillyspec', 'docs', proj, 'scan', 'CONVENTIONS.md'), '# leak')
+    // spec 不写文档（缺文档）
+
+    const { runScanPostCheck } = await import('../src/scan-postcheck.js')
+    const result = runScanPostCheck({ cwd, specDir })
+
+    assert('混合场景 status = failed_post_check', result.status === SCAN_STATUS.FAILED_POST_CHECK, `实际: ${result.status}`)
+    assert('混合场景有多个 check', result.checks.length >= 2, `实际: ${result.checks.length}`)
+    assert('混合场景包含 source_root_docs_leak', result.checks.some(c => c.name === 'source_root_docs_leak'))
+    assert('混合场景包含 all_docs_missing', result.checks.some(c => c.name === 'all_docs_missing'))
+
+    // 所有 failed check 的 name 列出，确保 SillyHub 能定位问题
+    const failedChecks = result.checks.filter(c => c.severity === CHECK_SEVERITY.FAILED)
+    assert('混合场景至少 2 个 failed check', failedChecks.length >= 2, `实际: ${failedChecks.length}`)
+    for (const fc of failedChecks) {
+      assert(`failed check "${fc.name}" 有 detail`, !!fc.detail, `check: ${fc.name}`)
+    }
+  } finally {
+    cleanup(cwd)
+    cleanup(specDir)
+  }
+}
+
+// ── Test 4: 警告场景（文档缺 header）→ completed_with_warnings ──
+console.log('\n=== Test 4: 文档缺 header → 警告 ===')
+{
+  const { cwd, specDir } = setup('warn')
+  const proj = basename(cwd)
+  try {
+    // 写文档但缺少 frontmatter header
+    const docs = ['ARCHITECTURE.md', 'CONVENTIONS.md', 'PROJECT.md', 'STRUCTURE.md', 'INTEGRATIONS.md', 'TESTING.md', 'CONCERNS.md']
+    for (const doc of docs) {
+      mkdirSync(join(specDir, 'docs', proj, 'scan'), { recursive: true })
+      writeFileSync(join(specDir, 'docs', proj, 'scan', doc), `# ${doc.replace('.md', '')}\nno header`)
+    }
+
+    const { runScanPostCheck } = await import('../src/scan-postcheck.js')
+    const result = runScanPostCheck({ cwd, specDir })
+
+    assert('警告场景 status = completed_with_warnings', result.status === SCAN_STATUS.COMPLETED_WITH_WARNINGS, `实际: ${result.status}`)
+    assert('警告场景有 docs_missing_header check', result.checks.some(c => c.name === 'docs_missing_header'))
+  } finally {
+    cleanup(cwd)
+    cleanup(specDir)
+  }
+}
+
+// ── Test 5: 正常成功场景 → success ──
+console.log('\n=== Test 5: 正常成功场景 ===')
+{
+  const { cwd, specDir } = setup('success')
+  const proj = basename(cwd)
+  try {
+    // 写所有 7 份文档，带正确 header
+    const docs = ['ARCHITECTURE.md', 'CONVENTIONS.md', 'PROJECT.md', 'STRUCTURE.md', 'INTEGRATIONS.md', 'TESTING.md', 'CONCERNS.md']
+    const now = new Date().toISOString().replace('T', ' ').slice(0, 19)
+    for (const doc of docs) {
+      mkdirSync(join(specDir, 'docs', proj, 'scan'), { recursive: true })
+      writeFileSync(join(specDir, 'docs', proj, 'scan', doc),
+        `author: bot\ncreated_at: ${now}\n# ${doc.replace('.md', '')}\n`)
+    }
+
+    // 在 specDir 写 local.yaml
+    writeFileSync(join(specDir, 'local.yaml'), 'build: echo ok\ntest: echo ok\n')
+
+    const { runScanPostCheck } = await import('../src/scan-postcheck.js')
+    const result = runScanPostCheck({ cwd, specDir })
+
+    assert('成功场景 status = success', result.status === SCAN_STATUS.SUCCESS, `实际: ${result.status}`)
+    assert('成功场景 checks 全部 passed 或空', result.checks.every(c => c.severity === CHECK_SEVERITY.PASSED) || result.checks.length === 0)
+  } finally {
+    cleanup(cwd)
+    cleanup(specDir)
+  }
+}
+
+// ── 结果 ──
+console.log(`\n${'='.repeat(50)}`)
+console.log(`✅ 通过: ${passed.length}  ❌ 失败: ${failed.length}`)
+console.log(`${'='.repeat(50)}`)
+
+if (failed.length > 0) {
+  console.log('\n失败详情:')
+  for (const f of failed) {
+    console.log(`  ❌ ${f.label}`)
+    if (f.detail) console.log(`     ${f.detail}`)
+  }
+  throw new Error('platform-failure-samples test failed')
+} else {
+  console.log('\n🎉 平台失败样本测试全部通过!')
+}

package/test/platform-recovery-chain.test.mjs

@@ -0,0 +1,179 @@
+/**
+ * 平台 scan 恢复链路测试
+ *
+ * 验证：
+ * 1. 首次带 --spec-dir 跑 scan，pointer 文件被创建
+ * 2. 后续 --done 不带参数能从 pointer 恢复平台参数
+ * 3. scan 完成后 pointer 状态标记为 scan_completed
+ * 4. pointer 异常残留能被检测
+ *
+ * 跑法: node test/platform-recovery-chain.test.mjs
+ */
+
+import { join, basename } from 'path'
+import { existsSync, mkdirSync, rmSync, readFileSync, writeFileSync } from 'fs'
+import { execSync } from 'child_process'
+import { fileURLToPath } from 'url'
+import { dirname } from 'path'
+import { randomUUID } from 'crypto'
+import { tmpdir } from 'os'
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+const binCLI = join(__dirname, '..', 'src', 'index.js')
+const passed = []
+const failed = []
+
+function assert(label, condition, detail) {
+  if (condition) {
+    passed.push(label)
+    console.log(`  ✅ PASS: ${label}`)
+  } else {
+    failed.push({ label, detail })
+    console.log(`  ❌ FAIL: ${label}`)
+    if (detail) console.log(`     ${detail}`)
+  }
+}
+
+function cleanup(dir) {
+  try { rmSync(dir, { recursive: true, force: true }) } catch {}
+}
+
+function run(cmd, opts = {}) {
+  try {
+    return execSync(cmd, { encoding: 'utf8', timeout: 15_000, ...opts })
+  } catch (e) {
+    return e.stdout || e.message
+  }
+}
+
+// ── 测试 1：pointer 文件创建和内容 ──
+console.log('\n=== Test 1: pointer 文件创建 ===')
+{
+  const tmpCwd = join(tmpdir(), `recovery-test-${randomUUID().slice(0, 8)}`)
+  const tmpSpec = join(tmpdir(), `recovery-test-spec-${randomUUID().slice(0, 8)}`)
+  const tmpRuntime = join(tmpdir(), `recovery-test-rt-${randomUUID().slice(0, 8)}`)
+
+  try {
+    mkdirSync(tmpCwd, { recursive: true })
+    writeFileSync(join(tmpCwd, 'package.json'), '{}')
+
+    // init 项目（使用外部 specDir）
+    const initOut = run(`node "${binCLI}" init "${tmpCwd}" --spec-root "${tmpSpec}"`)
+    assert('init 成功', !initOut.includes('❌'))
+
+    // run scan 会触发参数持久化
+    run(`node "${binCLI}" --dir "${tmpCwd}" run scan --spec-root "${tmpSpec}" 2>&1 || true`)
+
+    const pointerPath = join(tmpCwd, '.sillyspec-platform.json')
+    assert('pointer 文件存在', existsSync(pointerPath))
+
+    const pointer = JSON.parse(readFileSync(pointerPath, 'utf8'))
+    assert('pointer 有 specRoot', !!pointer.specRoot)
+    assert('pointer 有 savedAt', !!pointer.savedAt)
+    assert('pointer specRoot 指向外部', pointer.specRoot === tmpSpec)
+
+    // pointer 不应包含 status（初始创建时）
+    assert('初始 pointer 无 status 字段', !('status' in pointer))
+  } finally {
+    cleanup(tmpCwd)
+    cleanup(tmpSpec)
+  }
+}
+
+// ── 测试 2：--done 不带参数能恢复 ──
+console.log('\n=== Test 2: --done 恢复平台参数 ===')
+{
+  const tmpCwd = join(tmpdir(), `recovery-test2-${randomUUID().slice(0, 8)}`)
+  const tmpSpec = join(tmpdir(), `recovery-test2-spec-${randomUUID().slice(0, 8)}`)
+  const tmpRuntime = join(tmpdir(), `recovery-test2-rt-${randomUUID().slice(0, 8)}`)
+  const scanRunId = `scan-${Date.now()}`
+
+  try {
+    mkdirSync(tmpCwd, { recursive: true })
+    writeFileSync(join(tmpCwd, 'package.json'), '{}')
+
+    // init + 触发 run 写入 pointer
+    run(`node "${binCLI}" init "${tmpCwd}" --spec-root "${tmpSpec}"`)
+    run(`node "${binCLI}" --dir "${tmpCwd}" run scan --spec-root "${tmpSpec}" 2>&1 || true`)
+
+    // 手动模拟一个"scan 第一步 --done"（不带 --spec-root）
+    // 关键验证：--done 时能从 pointer 恢复参数
+    const doneOut = run(`node "${binCLI}" --dir "${tmpCwd}" run scan --done --input "test" --output "test output" 2>&1`, { cwd: tmpCwd })
+
+    // --done 应该能找到平台参数，不应该报"需要 --spec-root"
+    assert('--done 恢复成功', !doneOut.includes('需要 --spec-root') && !doneOut.includes('缺少 specRoot'))
+  } finally {
+    cleanup(tmpCwd)
+    cleanup(tmpSpec)
+    cleanup(tmpRuntime)
+  }
+}
+
+// ── 测试 3：manifest 包含路径和 pointer 信息 ──
+console.log('\n=== Test 3: manifest 路径字段 ===')
+{
+  const { readFile } = await import('fs/promises')
+  const runSrc = await readFile(join(__dirname, '..', 'src', 'run.js'), 'utf8')
+
+  // manifest 初始化中包含三路径
+  assert('manifest 有 source_root: cwd', runSrc.includes('source_root: cwd'))
+  assert('manifest 有 spec_root', runSrc.includes('spec_root: platformOpts'))
+  assert('manifest 有 runtime_root', runSrc.includes('runtime_root: platformOpts'))
+  assert('manifest 有 platform_pointer_path', runSrc.includes('platform_pointer_path:'))
+  assert('manifest platform_pointer_status 使用枚举', runSrc.includes('POINTER_STATUS') || runSrc.includes('POINTER_STATUS.ACTIVE'))
+}
+
+// ── 测试 4：异常 pointer 检测 ──
+console.log('\n=== Test 4: 异常 pointer 残留检测 ===')
+{
+  const tmpCwd = join(tmpdir(), `recovery-test4-${randomUUID().slice(0, 8)}`)
+  const tmpSpec = join(tmpdir(), `recovery-test4-spec-${randomUUID().slice(0, 8)}`)
+
+  try {
+    mkdirSync(tmpCwd, { recursive: true })
+    writeFileSync(join(tmpCwd, 'package.json'), '{}')
+
+    // init + 触发 run 写入 pointer
+    run(`node "${binCLI}" init "${tmpCwd}" --spec-root "${tmpSpec}"`)
+    run(`node "${binCLI}" --dir "${tmpCwd}" run scan --spec-root "${tmpSpec}" 2>&1 || true`)
+
+    const pointerPath = join(tmpCwd, '.sillyspec-platform.json')
+    assert('pointer 文件存在', existsSync(pointerPath))
+
+    // 模拟损坏的 pointer（缺少 specRoot）
+    writeFileSync(pointerPath, JSON.stringify({ workspaceId: 'fake', savedAt: new Date().toISOString() }))
+    const badOut = run(`node "${binCLI}" --dir "${tmpCwd}" run scan 2>&1`)
+    assert('损坏 pointer 报错', badOut.includes('缺少 specRoot') || badOut.includes('❌'))
+
+    // 模拟有效 pointer（手动修复）
+    writeFileSync(pointerPath, JSON.stringify({
+      specRoot: tmpSpec,
+      runtimeRoot: join(tmpdir(), 'fake-rt'),
+      workspaceId: 'test',
+      scanRunId: 'scan-test',
+      savedAt: new Date().toISOString(),
+    }))
+    // init 不应报错
+    const goodOut = run(`node "${binCLI}" --dir "${tmpCwd}" run scan --help 2>&1`)
+    assert('有效 pointer 不报错', !goodOut.includes('缺少 specRoot'))
+  } finally {
+    cleanup(tmpCwd)
+    cleanup(tmpSpec)
+  }
+}
+
+// ── 结果 ──
+console.log(`\n${'='.repeat(50)}`)
+console.log(`✅ 通过: ${passed.length}  ❌ 失败: ${failed.length}`)
+console.log(`${'='.repeat(50)}`)
+
+if (failed.length > 0) {
+  console.log('\n失败详情:')
+  for (const f of failed) {
+    console.log(`  ❌ ${f.label}`)
+    if (f.detail) console.log(`     ${f.detail}`)
+  }
+  throw new Error('platform-recovery-chain test failed')
+} else {
+  console.log('\n🎉 平台恢复链路测试全部通过!')
+}

package/test/platform-recovery.test.mjs

@@ -6,6 +6,7 @@ import { join, resolve, dirname, basename } from 'path'
 import { existsSync, mkdirSync, writeFileSync, rmSync, readFileSync } from 'fs'
 import { fileURLToPath, pathToFileURL } from 'url'
 import { execSync } from 'child_process'
+import { tmpdir } from 'os'
 
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = dirname(__filename)
@@ -21,16 +22,23 @@ function assert(cond, msg) {
 
 const P = 'recover'
 function setup(name) {
-  const d = join('/tmp', `${P}-${name}`)
+  const d = join(tmpdir(), `${P}-${name}`)
   mkdirSync(d, { recursive: true })
   return d
 }
 function spec(name) {
-  const d = join('/tmp', `${P}-${name}-spec`)
+  const d = join(tmpdir(), `${P}-${name}-spec`)
   mkdirSync(d, { recursive: true })
   return d
 }
 function clean(...dirs) { for (const d of dirs) try { rmSync(d, { recursive: true, force: true }) } catch {} }
+function hasPathSegments(value, segments) {
+  const parts = value.split(/[\\/]+/)
+  for (let i = 0; i <= parts.length - segments.length; i++) {
+    if (segments.every((segment, offset) => parts[i + offset] === segment)) return true
+  }
+  return false
+}
 
 function run(cmd) {
   return execSync(cmd, { encoding: 'utf8', timeout: 15000, stdio: ['pipe', 'pipe', 'pipe'] })
@@ -127,8 +135,8 @@ console.log('\n=== Test 5: specDir 缺文档 → 校验失败，路径不含 .si
   assert(!result.ok, `specDir 缺文档: ok=${result.ok}`)
   assert(result.errors.length > 0, `有 errors`)
   const errMsg = result.errors[0]
-  assert(!errMsg.includes('.sillyspec/docs'), `路径不含 .sillyspec: ${errMsg}`)
-  assert(errMsg.includes('/docs/'), `路径含 /docs/: ${errMsg}`)
+  assert(!hasPathSegments(errMsg, ['.sillyspec', 'docs']), `路径不含 .sillyspec: ${errMsg}`)
+  assert(hasPathSegments(errMsg, ['docs', proj, 'scan']), `路径含 docs/${proj}/scan: ${errMsg}`)
   clean(cwd, sd)
 }
 
@@ -149,11 +157,11 @@ console.log('\n=== Test 7: 非平台模式缺文档 → 路径含 .sillyspec ===
   const result = runValidators('scan', cwd, 'default', { projectName: proj })
   assert(!result.ok, `非平台缺文档: ok=${result.ok}`)
   const errMsg = result.errors[0]
-  assert(errMsg.includes('.sillyspec/docs'), `路径含 .sillyspec/docs/: ${errMsg}`)
+  assert(hasPathSegments(errMsg, ['.sillyspec', 'docs']), `路径含 .sillyspec/docs: ${errMsg}`)
   clean(cwd)
 }
 
 console.log(`\n${'='.repeat(50)}`)
 console.log(`✅ 通过: ${passed}  ❌ 失败: ${failed}`)
 console.log(`${'='.repeat(50)}`)
-process.exit(failed > 0 ? 1 : 0)
+if (failed > 0) throw new Error(`${failed} test(s) failed`)

package/test/platform-scan-p0.test.mjs

@@ -119,7 +119,7 @@ function assert(label, condition, detail) {
 
   assert('postcheck 检查 manifest.json', postcheckSrc.includes('manifest.json'))
   assert('postcheck 检查 local.yaml', postcheckSrc.includes('local.yaml'))
-  assert('污染 severity 为 failed', postcheckSrc.includes("severity: 'failed'"))
+  assert('污染 severity 使用枚举', postcheckSrc.includes('CHECK_SEVERITY'))
 }
 
 // ── 测试 5：run.js 占位符替换补齐 ──
@@ -142,11 +142,14 @@ function assert(label, condition, detail) {
 {
   const { definition } = await import('../src/stages/quick.js')
   const step1Prompt = definition.steps[0].prompt
+  const step3Prompt = definition.steps[2].prompt
 
   assert('quick step 1 包含 ⛔ 标记', step1Prompt.includes('⛔'))
   assert('quick step 1 包含「不能跳过」', step1Prompt.includes('不能跳过'))
   assert('quick step 1 包含 quicklog 未创建 warning', step1Prompt.includes('quicklog 未创建'))
   assert('quick step 1 输出要求 quicklog 第一行', step1Prompt.includes('第一行确认'))
+  assert('quick step 3 禁止 git add -A', step3Prompt.includes('禁止使用 `git add -A`'))
+  assert('quick step 3 使用 scoped git add', step3Prompt.includes('git add -- <file...>'))
 
   // run.js 审计包含 quicklog 检查
   const runSrc = await readFile(join(__dirname, '..', 'src', 'run.js'), 'utf8')
@@ -166,7 +169,7 @@ if (failed.length > 0) {
     console.log(`  ❌ ${f.label}`)
     if (f.detail) console.log(`     ${f.detail}`)
   }
-  process.exit(1)
+  throw new Error("test failed")
 } else {
   console.log('\n🎉 全部 P0 测试通过!')
 }