sillyspec 3.20.0 → 3.20.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sillyspec",
-  "version": "3.20.0",
+  "version": "3.20.2",
   "description": "SillySpec CLI — 流程状态机，让 AI 严格按步骤来",
   "icon": "logo.jpg",
   "homepage": "https://sillyspec.ppdmq.top/",

package/src/brainstorm-postcheck.js

@@ -0,0 +1,158 @@
+/**
+ * brainstorm-postcheck.js — plan 阶段对 brainstorm 产物的校验
+ *
+ * 在 brainstorm → plan 之间执行，校验 brainstorm 产物完整性。
+ * PASS → 继续 plan
+ * WARN → 继续 plan，记录警告并分配补齐任务
+ * FAIL → 回退到 brainstorm 补齐（最多 2 次重试）
+ */
+
+import { existsSync, readFileSync } from 'fs'
+import { join } from 'path'
+
+/**
+ * 校验 brainstorm 产物完整性
+ * @param {string} changeDir - 变更目录路径（.sillyspec/changes/<change>）
+ * @returns {{ ok: boolean, level: 'PASS'|'WARN'|'FAIL', errors: string[], warnings: string[] }}
+ */
+export function checkBrainstormArtifacts(changeDir) {
+  const errors = []
+  const warnings = []
+  const brainstormDir = join(changeDir, 'brainstorm')
+
+  // ── 1. 产物完整性检查 ──
+  const requiredFiles = ['design.md', 'decisions.md', 'gaps.md', 'assumptions.md', 'next-action.json']
+  for (const file of requiredFiles) {
+    if (!existsSync(join(brainstormDir, file))) {
+      errors.push(`brainstorm/${file} 不存在`)
+    }
+  }
+
+  // ── 2. next-action.json 有效性检查 ──
+  const nextActionFile = join(brainstormDir, 'next-action.json')
+  if (existsSync(nextActionFile)) {
+    try {
+      const nextAction = JSON.parse(readFileSync(nextActionFile, 'utf8'))
+
+      // 必填字段
+      if (!['ready_for_plan', 'waiting_for_user'].includes(nextAction.status)) {
+        errors.push(`next-action.json.status 无效值: ${nextAction.status}`)
+      }
+      if (typeof nextAction.has_blocking_questions !== 'boolean') {
+        errors.push(`next-action.json.has_blocking_questions 不是布尔值`)
+      }
+      if (!['high', 'medium', 'low'].includes(nextAction.decision_level)) {
+        warnings.push(`next-action.json.decision_level 无效值: ${nextAction.decision_level}`)
+      }
+
+      // 状态一致性
+      if (nextAction.status === 'waiting_for_user' && nextAction.has_blocking_questions !== true) {
+        errors.push(`next-action.json status=waiting_for_user 但 has_blocking_questions !== true`)
+      }
+      if (nextAction.status === 'ready_for_plan' && nextAction.has_blocking_questions === true) {
+        errors.push(`next-action.json status=ready_for_plan 但 has_blocking_questions === true`)
+      }
+    } catch (e) {
+      errors.push(`next-action.json 解析失败: ${e.message}`)
+    }
+  }
+
+  // ── 3. design.md 覆盖度检查 ──
+  const designFile = join(brainstormDir, 'design.md')
+  if (existsSync(designFile)) {
+    const designContent = readFileSync(designFile, 'utf8')
+
+    // 必须覆盖的维度
+    if (!/(?:目标|goal|objective|背景|background|问题|problem)/i.test(designContent)) {
+      warnings.push('design.md 缺少设计目标/背景描述')
+    }
+    if (!/(?:范围|scope|总体方案|方案|approach)/i.test(designContent)) {
+      warnings.push('design.md 缺少总体方案描述')
+    }
+
+    // 弱覆盖检测
+    if (/影响模块.*TBD|文件变更.*TBD|待定/i.test(designContent)) {
+      warnings.push('design.md 包含 TBD/待定内容')
+    }
+    if (!/(?:验收|acceptance|完成标准)/i.test(designContent)) {
+      warnings.push('design.md 缺少验收标准')
+    }
+  }
+
+  // ── 4. gaps.md 覆盖度检查 ──
+  const gapsFile = join(brainstormDir, 'gaps.md')
+  if (existsSync(gapsFile)) {
+    const gapsContent = readFileSync(gapsFile, 'utf8')
+    const hasBlocker = /BLOCKER/i.test(gapsContent)
+    if (hasBlocker) {
+      errors.push('gaps.md 包含 BLOCKER 级缺口，需要先解决')
+    }
+    // 检查是否为空
+    const nonEmpty = gapsContent.split('\n').filter(l => l.trim() && !l.startsWith('#')).length
+    if (nonEmpty === 0) {
+      warnings.push('gaps.md 为空（brainstorm 可能遗漏了缺口分析）')
+    }
+  }
+
+  // ── 5. assumptions.md 风险检查 ──
+  const assumptionsFile = join(brainstormDir, 'assumptions.md')
+  if (existsSync(assumptionsFile)) {
+    const assumptionsContent = readFileSync(assumptionsFile, 'utf8')
+    if (/假设现有数据格式不变|假设.*API.*不变|假设.*性能.*可接受/i.test(assumptionsContent)) {
+      warnings.push('assumptions.md 包含高风险假设，需在 verify 阶段验证')
+    }
+  }
+
+  // ── 6. decisions.md 一致性检查 ──
+  const decisionsFile = join(brainstormDir, 'decisions.md')
+  if (existsSync(decisionsFile)) {
+    const decisionsContent = readFileSync(decisionsFile, 'utf8')
+    const autoDecided = (decisionsContent.match(/AUTO_DECIDED/g) || []).length
+    const autoDecidedWithReason = (decisionsContent.match(/AUTO_DECIDED[\s\S]*?checklist/i) || []).length
+    if (autoDecided > 0 && autoDecidedWithReason < autoDecided) {
+      errors.push(`${autoDecided - autoDecidedWithReason} 个 AUTO_DECIDED 决策缺少 checklist 依据`)
+    }
+  }
+
+  // ── 判定结果 ──
+  let level
+  if (errors.length > 0) {
+    level = 'FAIL'
+  } else if (warnings.length > 0) {
+    level = 'WARN'
+  } else {
+    level = 'PASS'
+  }
+
+  return { ok: level !== 'FAIL', level, errors, warnings }
+}
+
+/**
+ * 执行 brainstorm postcheck（供 run.js 调用）
+ */
+export async function executeBrainstormPostcheck(cwd, platformOpts, changeName) {
+  const specBase = platformOpts?.specRoot || join(cwd, '.sillyspec')
+  const changeDir = join(specBase, 'changes', changeName)
+  if (!existsSync(changeDir)) {
+    console.log('⚠️  brainstorm postcheck: 变更目录不存在，跳过')
+    return
+  }
+
+  const result = checkBrainstormArtifacts(changeDir)
+
+  if (result.level === 'PASS') {
+    console.log('✅ brainstorm postcheck: PASS')
+  } else if (result.level === 'WARN') {
+    console.log('⚠️  brainstorm postcheck: WARN')
+    for (const w of result.warnings) {
+      console.log(`   - ${w}`)
+    }
+  } else {
+    console.error('❌ brainstorm postcheck: FAIL')
+    for (const e of result.errors) {
+      console.error(`   - ${e}`)
+    }
+    console.error('\\n   请修复以上问题后重试，或使用 --skip-approval 跳过。')
+    process.exit(1)
+  }
+}

package/src/change-risk-profile.js

@@ -1,21 +1,63 @@
 /**
  * change-risk-profile.js — 变更风险分级检测
  *
- * 根据变更涉及的文件类型、关键词，自动判定 verify 所需的验收强度。
+ * 根据变更涉及的文件类型、关键词、git diff、brainstorm 产物，
+ * 自动判定 P0/P1/P2 风险等级，产出结构化 risk-profile.json。
+ *
+ * P0 = 阻塞确认（必须用户确认）
+ * P1 = 自动推进但记录
+ * P2 = 自动通过
  */
 
-/**
- * 触发 integration-critical 风险等级的关键词
- */
-const INTEGRATION_CRITICAL_PATTERNS = [
-  // 跨进程通信
+// ============ P0 触发规则 ============
+
+const P0_FILE_PATTERNS = [
+  { id: 'R-002', pattern: /(?:^|\/)(?:migrations?|migration)\/(?:.+)/i, desc: '数据库 migration' },
+  { id: 'R-002', pattern: /(?:^|\/)schema\.(?:sql|prisma|ts|js)$/i, desc: '数据库 schema' },
+  { id: 'R-003', pattern: /(?:^|\/)(?:auth|permission|role|login|token)\b/i, desc: '鉴权/权限' },
+  { id: 'R-004', pattern: /(?:^|\/)(?:payment|billing|stripe|paypal)\b/i, desc: '支付/资金' },
+  { id: 'R-005', pattern: /\.(?:env|env\.\w+)$/, desc: '环境配置' },
+  { id: 'R-005', pattern: /(?:^|\/)(?:Dockerfile|docker-compose\.\w+)$/i, desc: '部署配置' },
+  { id: 'R-005', pattern: /(?:^|\/)config\.(?:yaml|yml|json|toml)$/i, desc: '生产配置' },
+]
+
+const P0_CONTENT_PATTERNS = [
+  { id: 'R-001', pattern: /\b(?:DROP\s+TABLE|TRUNCATE\s+TABLE|DELETE\s+FROM\s+\w+\s+(?!WHERE\s+.+\s+LIMIT))/i, desc: '删除数据' },
+  { id: 'R-002', pattern: /\b(?:CREATE\s+TABLE|ALTER\s+TABLE|ADD\s+COLUMN|DROP\s+COLUMN|CREATE\s+INDEX)/i, desc: '数据库 migration' },
+]
+
+// ============ P1 触发规则 ============
+
+const P1_FILE_PATTERNS = [
+  { id: 'R-101', pattern: /(?:^|\/)(?:routes|controllers?|handlers?)\//i, desc: 'API 层' },
+  { id: 'R-102', pattern: /(?:^|\/)(?:models|entities)\//i, desc: '数据模型层' },
+  { id: 'R-104', pattern: /(?:^|\/)(?:services)\//i, desc: '业务逻辑层（跨模块）' },
+  { id: 'R-106', pattern: /(?:^|\/)index\.(?:ts|js)$/i, desc: 're-export 入口' },
+]
+
+const P1_CONTENT_PATTERNS = [
+  { id: 'R-101', pattern: /\b(?:daemon|backend|grpc|websocket|cross.?process|ipc|message.?queue)\b/i, desc: '跨进程通信' },
+  { id: 'R-101', pattern: /\b(?:session|lease|agent.?run|lifecycle|state.?transition|claim|heartbeat)\b/i, desc: '状态机/生命周期' },
+  { id: 'R-102', pattern: /\b(?:api|client|contract|dto)\b/i, desc: 'API contract' },
+  { id: 'R-105', pattern: /(?:^|\/)(?:workflow|daemon|session|lifecycle|state-machine)\b/i, desc: '核心模块' },
+]
+
+// ============ P0/P1 命中文件名关键词（用于 git diff 检测） ============
+
+const PROTECTED_FILE_NAMES = [
+  '.env', 'package.json', 'tsconfig.json', 'vite.config.ts', 'vite.config.js',
+  'prisma/schema.prisma', 'docker-compose.yml', 'docker-compose.yaml',
+]
+
+// ============ 向后兼容：旧的 INTEGRATION_CRITICAL_PATTERNS ============
+
+export const INTEGRATION_CRITICAL_PATTERNS = [
   /\bdaemon\b/i,
   /\bbackend\b/i,
   /\bclient.*api\b/i,
   /\bgrpc\b/i,
   /\bwebsocket\b/i,
   /\bhttp.*client\b/i,
-  // 状态机 / 生命周期
   /\bsession\b/i,
   /\blease\b/i,
   /\bagent.?run\b/i,
@@ -23,12 +65,10 @@ const INTEGRATION_CRITICAL_PATTERNS = [
   /\bstate.?transition\b/i,
   /\bclaim\b/i,
   /\bheartbeat\b/i,
-  // 跨进程协议
   /\bcross.?process\b/i,
   /\bipc\b/i,
   /\bmessage.?queue\b/i,
   /\bpub.?sub\b/i,
-  // 部署/启动路径
   /\bcli\.ts\b/i,
   /\bmain\.ts\b/i,
   /\bentrypoint\b/i,
@@ -38,10 +78,7 @@ const INTEGRATION_CRITICAL_PATTERNS = [
   /\bdocker.?compose\b/i,
 ]
 
-/**
- * 需要集成验证的文件路径关键词
- */
-const INTEGRATION_FILE_PATTERNS = [
+export const INTEGRATION_FILE_PATTERNS = [
   /daemon/i,
   /session.?manager/i,
   /agent.?run/i,
@@ -55,12 +92,163 @@ const INTEGRATION_FILE_PATTERNS = [
   /startup/i,
 ]
 
+// ============ 核心检测函数 ============
+
 /**
- * 检测变更风险等级
+ * 三级风险检测：P0 / P1 / P2
  * @param {object} opts
  * @param {string} [opts.designContent] - design.md 内容
  * @param {string} [opts.planContent] - plan.md 内容
  * @param {string[]} [opts.changedFiles] - 变更文件列表
+ * @param {string} [opts.diffContent] - git diff 内容（可选，用于更精确检测）
+ * @param {object} [opts.nextAction] - next-action.json 解析后的对象（可选）
+ * @param {string[]} [opts.protectedFiles] - 项目自定义 protected files 列表
+ * @returns {RiskProfile}
+ *
+ * @typedef {object} RiskProfile
+ * @property {string} level - 'P0' | 'P1' | 'P2'
+ * @property {string[]} triggers - 触发的规则 ID 列表
+ * @property {object[]} assessedFrom - 评估依据
+ * @property {string[]} applyBlockers - apply 阻塞原因
+ * @property {boolean} canAutoApply - 是否可自动 apply
+ * @property {string} applyReason - apply 决策原因
+ */
+export function detectRiskProfile({ designContent = '', planContent = '', changedFiles = [], diffContent = '', nextAction = null, protectedFiles = [] } = {}) {
+  const triggers = []
+  const assessedFrom = []
+
+  const combined = [designContent, planContent].join('\n')
+
+  // ── P0 检测（最高优先级）──
+
+  // 基于文件路径
+  for (const rule of P0_FILE_PATTERNS) {
+    for (const file of changedFiles) {
+      if (rule.pattern.test(file)) {
+        rule.pattern.lastIndex = 0
+        if (!triggers.includes(rule.id)) {
+          triggers.push(rule.id)
+          assessedFrom.push({ source: 'file_path', pattern: rule.desc, matchedFiles: [file] })
+        }
+      }
+    }
+  }
+
+  // 基于 diff 内容（P0 关键词）
+  const diffText = diffContent || combined
+  for (const rule of P0_CONTENT_PATTERNS) {
+    if (rule.pattern.test(diffText)) {
+      rule.pattern.lastIndex = 0
+      if (!triggers.includes(rule.id)) {
+        triggers.push(rule.id)
+        assessedFrom.push({ source: 'content', pattern: rule.desc })
+      }
+    }
+  }
+
+  // protected files
+  for (const file of changedFiles) {
+    if (PROTECTED_FILE_NAMES.some(p => file === p || file.endsWith('/' + p))) {
+      const id = 'R-005'
+      if (!triggers.includes(id)) {
+        triggers.push(id)
+        assessedFrom.push({ source: 'protected_file', pattern: file })
+      }
+    }
+    // 用户自定义 protected files
+    if (protectedFiles.includes(file)) {
+      const id = 'R-005'
+      if (!triggers.includes(id)) {
+        triggers.push(id)
+        assessedFrom.push({ source: 'protected_file', pattern: file })
+      }
+    }
+  }
+
+  // next-action.json 有 blocking questions
+  if (nextAction && nextAction.has_blocking_questions === true) {
+    const id = 'R-009'
+    if (!triggers.includes(id)) {
+      triggers.push(id)
+      assessedFrom.push({ source: 'brainstorm', pattern: 'has_blocking_questions === true' })
+    }
+  }
+
+  // ── P1 检测（只在无 P0 时检测）──
+  if (!triggers.some(t => t.startsWith('R-00'))) {
+    // 基于文件路径
+    for (const rule of P1_FILE_PATTERNS) {
+      for (const file of changedFiles) {
+        if (rule.pattern.test(file)) {
+          rule.pattern.lastIndex = 0
+          if (!triggers.includes(rule.id)) {
+            triggers.push(rule.id)
+            assessedFrom.push({ source: 'file_path', pattern: rule.desc, matchedFiles: [file] })
+          }
+        }
+      }
+    }
+
+    // 基于内容关键词
+    for (const rule of P1_CONTENT_PATTERNS) {
+      if (rule.pattern.test(combined)) {
+        rule.pattern.lastIndex = 0
+        if (!triggers.includes(rule.id)) {
+          triggers.push(rule.id)
+          assessedFrom.push({ source: 'content', pattern: rule.desc })
+        }
+      }
+    }
+
+    // 跨模块检测（> 3 个文件的变更）
+    if (changedFiles.length > 10) {
+      const id = 'R-101'
+      if (!triggers.includes(id)) {
+        triggers.push(id)
+        assessedFrom.push({ source: 'file_count', pattern: `${changedFiles.length} files changed` })
+      }
+    }
+
+    // next-action.json 有 NEEDS_REVIEW 决策
+    if (nextAction && Array.isArray(nextAction.auto_decisions)) {
+      for (const d of nextAction.auto_decisions) {
+        if (d.status === 'NEEDS_REVIEW') {
+          const id = 'R-102'
+          if (!triggers.includes(id)) {
+            triggers.push(id)
+            assessedFrom.push({ source: 'brainstorm', pattern: `NEEDS_REVIEW: ${d.decision}` })
+          }
+        }
+      }
+    }
+  }
+
+  // ── 判定等级 ──
+  let level = 'P2'
+  if (triggers.some(t => t.match(/^R-0\d+$/))) {
+    level = 'P0'
+  } else if (triggers.some(t => t.match(/^R-1\d+$/))) {
+    level = 'P1'
+  }
+
+  // ── apply 决策 ──
+  const applyBlockers = []
+  if (level === 'P0') {
+    applyBlockers.push('风险等级 P0：需要用户确认后才能 apply')
+  }
+
+  const canAutoApply = level !== 'P0' && applyBlockers.length === 0
+  const applyReason = canAutoApply
+    ? `风险等级 ${level}，无 P0 触发，无 protected files 修改`
+    : applyBlockers.join('; ')
+
+  return { level, triggers, assessedFrom, applyBlockers, canAutoApply, applyReason }
+}
+
+// ============ 向后兼容 ============
+
+/**
+ * 旧的 detectChangeRisk 接口保持向后兼容
  * @returns {{ level: string, triggers: string[], requiredVerification: string[] }}
  */
 export function detectChangeRisk({ designContent = '', planContent = '', changedFiles = [] } = {}) {
@@ -114,9 +302,6 @@ export function detectChangeRisk({ designContent = '', planContent = '', changed
 
 /**
  * 检查 verify-result.md 是否包含集成验证证据
- * @param {string} verifyContent
- * @param {string[]} requiredVerification
- * @returns {{ ok: boolean, errors: string[], warnings: string[] }}
  */
 export function checkIntegrationEvidence(verifyContent, requiredVerification) {
   const errors = []

package/src/classify-change.js

@@ -0,0 +1,73 @@
+/**
+ * classify-change.js — 变更规模分类器
+ *
+ * 将用户需求描述分类为 quick / auto / full，
+ * 供 auto 模式决定内部流程深度。
+ */
+
+/**
+ * 用户显式指定的关键词 → 强制模式
+ */
+const FORCE_FULL_PATTERNS = [
+  /数据库|database|schema/i,
+  /迁移|migration|migrate/i,
+  /鉴权|权限|auth|permission|rbac/i,
+  /支付|payment|billing/i,
+  /重构|refactor.*architectur/i,
+  /微服务|microserv/i,
+]
+
+const FORCE_QUICK_PATTERNS = [
+  /fix typo/i,
+  /更新文案|改文案|文案修改/i,
+  /样式调整|style.*tweak/i,
+  /修复.*\s*\bbug\b.*\bfix\b/i,
+]
+
+/**
+ * 分类变更规模
+ * @param {object} opts
+ * @param {string} opts.description - 用户需求描述
+ * @param {string} [opts.explicitMode] - 用户显式指定的模式（auto/quick/full）
+ * @param {object} [opts.localConfig] - local.yaml 中的 auto_mode 配置
+ * @returns {{ mode: 'quick'|'auto'|'full', reason: string }}
+ */
+export function classifyChange({ description = '', explicitMode, localConfig } = {}) {
+  // 1. 用户显式指定优先级最高
+  if (explicitMode && ['quick', 'auto', 'full'].includes(explicitMode)) {
+    return { mode: explicitMode, reason: '用户显式指定' }
+  }
+
+  // 2. local.yaml force patterns
+  if (localConfig) {
+    const forceFullPatterns = localConfig.force_full_patterns || []
+    const forceQuickPatterns = localConfig.force_quick_patterns || []
+
+    for (const pattern of forceFullPatterns) {
+      if (new RegExp(pattern, 'i').test(description)) {
+        return { mode: 'full', reason: `local.yaml force_full_pattern 匹配: ${pattern}` }
+      }
+    }
+    for (const pattern of forceQuickPatterns) {
+      if (new RegExp(pattern, 'i').test(description)) {
+        return { mode: 'quick', reason: `local.yaml force_quick_pattern 匹配: ${pattern}` }
+      }
+    }
+  }
+
+  // 3. 默认关键词匹配
+  for (const pattern of FORCE_QUICK_PATTERNS) {
+    if (pattern.test(description)) {
+      return { mode: 'quick', reason: `命中 quick 关键词: ${pattern.source}` }
+    }
+  }
+
+  for (const pattern of FORCE_FULL_PATTERNS) {
+    if (pattern.test(description)) {
+      return { mode: 'full', reason: `命中 full 关键词: ${pattern.source}` }
+    }
+  }
+
+  // 4. 默认 auto
+  return { mode: 'auto', reason: '默认模式' }
+}

package/src/index.js

@@ -189,7 +189,7 @@ async function main() {
       break;
     case 'progress': {
       const pm = new ProgressManager();
-      const progDir = resolveEffectiveDir(dir);
+      const progDir = specDir ? dir : resolveEffectiveDir(dir);
       const subCommand = filteredArgs[1];
       const stageIdx = filteredArgs.indexOf('--stage');
       const stage = stageIdx >= 0 && filteredArgs[stageIdx + 1] ? filteredArgs[stageIdx + 1] : null;
@@ -293,7 +293,9 @@ async function main() {
     }
     case 'run': {
       const { runCommand } = await import('./run.js')
-      await runCommand(filteredArgs.slice(1), resolveEffectiveDir(dir), specDir)
+      // 平台模式（--spec-dir 已指定）时，--dir 是明确的 source_root，不应被 resolveEffectiveDir 纠正
+      const effectiveDir = specDir ? dir : resolveEffectiveDir(dir)
+      await runCommand(filteredArgs.slice(1), effectiveDir, specDir)
       break
     }
     // task-10: 顶层命令别名，转发 runCommand，与 case 'run': 路径行为一致
@@ -308,12 +310,13 @@ async function main() {
     case 'explore': {
       const { runCommand } = await import('./run.js')
       const stageArgs = [command, ...filteredArgs.slice(1)]
-      await runCommand(stageArgs, resolveEffectiveDir(dir), specDir)
+      const effectiveDir = specDir ? dir : resolveEffectiveDir(dir)
+      await runCommand(stageArgs, effectiveDir, specDir)
       break
     }
     case 'knowledge': {
       const { cmdKnowledge } = await import('./stages/knowledge.js')
-      await cmdKnowledge(filteredArgs.slice(1), resolveEffectiveDir(dir), { specDir })
+      await cmdKnowledge(filteredArgs.slice(1), specDir ? dir : resolveEffectiveDir(dir), { specDir })
       break
     }
     case 'dashboard': {