sillyspec 3.29.3 → 3.29.5

package/asset-audit-2026-09-20/platform-troubleshooting-candidates.csv

@@ -0,0 +1,88 @@
+"ql_id","timestamp","title","root_cause_excerpt","mentions_test"
+"ql-20260920-004-f580","2026-09-20 14:24:15","claude 会话 one_m 勾选未作用于主模型——1M 供应商 ~160k 提前触发引擎自动压缩","one_m 的 [1m] 后缀只落 ANTHROPIC_DEFAULT_{ROLE}_MODEL；主模型两条路径都拿裸名——injector 规则 3 ANTHROPIC_MODEL 取 default_fallback_model/model 无 one_m 信号，daemon 又把 backend payload.","true"
+"ql-20260920-001-1bf6","2026-09-20 12:45:00","db.sqlite token 可得性实证（2026-09-20-agent-log-session-replay task-04 前置）","（无缺陷——设计期实证任务，防「盲实现透传」或「盲缺省」两错）","true"
+"ql-20260917-006-1380","2026-09-17 15:57:08","会话对话区隐藏上下文压缩续接摘要，压缩中实时提示","CLI 自动 compaction 后把续接摘要当 assistant 文本块注入新窗口，被前端 classifySessionLog 归 reply 渲染成大段气泡刷屏（线上会话 6e213eb3 两天 16 次实证）；SDK system/status 压缩帧被 daemon 归一化器静默丢弃，前端无任何压缩过程信","true"
+"ql-20260916-013-c032","2026-09-16 12:36:56","翻页游标块序错位根治 + 跳转空壳命中 + rAF 后台卡死（32 轮空壳三连修）","线上浏览器实测复现三问题：①进入会话 20ms 内 36+ 条 /runs 并发（fetch 堆栈定位 onTurnCompleted——日志窗口播种只覆盖窗口内轮次，缺口同步对快照全部终态轮合成事件，6e213eb3 会话 44 轮 1.1 万条日志 37 轮未播种全通过门控；测试夹具 3 轮全在窗口内未暴露）；②滚","true"
+"ql-20260916-012-b5b2","2026-09-16 12:08:32","全路由 force-dynamic 根治部署后旧 HTML 壳一年缓存坑","Next 默认把客户端页面 static 预渲染打 s-maxage=31536000（实测全站含 /login），重新部署后浏览器/代理继续用旧壳引用旧 chunk，新代码永不生效——用户实证 /sessions 部署后无变化、后端日志 11:58 仍见旧版 200ms 内 6 条 /runs 扇出；公网 chunk","true"
+"ql-20260916-011-06b3","2026-09-16 10:31:56","失败卡 unknown 根治（失败轮补可读 failure_summary）","交互轮失败（agent 执行报错）时 daemon 未回传执行摘要（result_summary 空），后端不落任何可读原因，前端 buildSystemFailureItem 无 summary 无映射 → 错误卡只剩「运行失败 · unknown」光秃展示（用户实证 6e213eb3 会话 09-15 11:00 ","true"
+"ql-20260916-009-ac60","2026-09-16 10:15:15","历史翻页空壳修复（翻「加载更早」不再只显示配置行）","「加载更早」装配块 runId 保留 #e 伪 id → enrichDisplayTurns 按 realRunId ?? runId 查快照双 miss → 同 run 被孤儿轮补建成只有 whoLine 配置行的空壳占位块（runsMeta 全量快照 vs 日志 100 条窗口，未加载轮次内容缺失）；叠加 dis","true"
+"ql-20260916-003-63ee","2026-09-16 05:59:33","daemon 码页探测解码器 GBK 流式回退死代码修复——StringDecoder.write 从不抛错致切换分支不可达","0b05fc0f5 的 CodepageDetectorDecoder 依赖 StringDecoder.write 抛错切 GBK，但 Node StringDecoder 对非法/GBK 字节从不抛错（直接替换 U+FFFD 返回，v24.15.0 本机实证 D6D0CEC4→乱码），catch 死代码；task-","true"
+"ql-20260915-012-860e","2026-09-15 22:42:31","定时消息终态条目支持删除清空（DELETE 放开终态+前端清空已结束入口）","终态行永久留档、列表全状态返回且前端全展示、无删除/清空历史 API——已结束条目在会话页永久残留无法去除（线上会话 6e213eb3 实证，只能删库清理）","true"
+"ql-20260915-010-2876","2026-09-15 20:35:16","fix(policy): shell 写路径提取器剥尾部命令分隔符——修 c:/dev/null 审计一会放行一会拒绝","重定向目标正则 (?:>>|>)\s*(\S+) 的 \S+ 贪婪吞掉后续命令分隔符（;/&&/||）： 提取出 /dev/null; 匹配不上 SILLYSPEC_TEMP_ROOTS 白名单 → 策略审计同目录抖动（线上 runtime 2f0467a6 policy_audit_log 实证 + node 复现）","true"
+"ql-20260915-001-8312","2026-09-15 05:03:35","codex driver JSON-RPC 撞号修复——compact 等回执请求 id 并入 nextRpcId 单计数器","24h 审查发现双计数器缺陷：nextRpcId（turn/start·interrupt，≥3 无上界）与 nextJsonRpcId（compact，seed 100）共享 id 空间，长会话约 97 轮后交叉撞号，同 id 并发时 _maybeResolveJsonRpcResponse 按先到回执错配唤醒 pe","true"
+"ql-20260915-002-3fa","2026-09-15 04:15:00","思考级别真机三引擎实证（2026-09-14-session-thinking-level task-04 spike + task-07）","","false"
+"ql-20260914-008-7c2e","2026-09-14 17:55:00","spike-01/02/R-01 压缩通道真机实证（2026-09-14-session-ctx-compact task-07）","","false"
+"ql-20260914-004-0be7","2026-09-14 09:14:32","登记 sillyspec CLI 第四坑（ql-ID 预留/分配竞态）+ 修 QUICKLOG 旧 ID 引用","quick 会话启动预留 ql-ID 无查重，同一 ID 可双发放（实证 007-1351）；file-notes/模块文档在最终 ID 分配前引用预留值会指向他者条目","true"
+"ql-20260914-003-aafe","2026-09-14 09:11:37","修复 pi 交互会话 ctx_tokens 被 driver 轮累计覆盖丢失","pi-rpc-driver 轮累计覆盖块（ql-20260909-028）用 turnUsageSum 整体替换 turn_end usage 事件的 ev.usage，抹掉归一化器派生的 ctx_tokens；且现行 pi 版本 turn_end 定格常为零值，正确数据源是末次 message_end 原始帧（202","true"
+"ql-20260913-004-dd9c","2026-09-13 08:38:34","sillyspec CLI 三个工具负面点按规则 15 落 docs/sillyspec/ 活跃坑登记","上一批修复会话实证：quick 启动被平台同步阻塞 126s 超时会话却已建立；--file-notes step2 传完才被告知仅 step3 生效；QUICKLOG 共享文件提交必夹带并行会话条目","true"
+"ql-20260913-003-4ee3","2026-09-13 07:25:02","24h 审查风险修复批第三轮收尾：群共识收尾事务+auto_resume 重放链上限+junction 脚本护栏+迁移方言兼容+alembic 单头守护","①get_session 成功路径不 commit，gather 后共识变更只 flush 即回滚；②同型守卫拦不住交替错误类型；③statSync 跟随 junction 致幂等护栏失效、回滚 catch{} 吞错误报成功；④now() 是 PG-only 函数；⑤双头两周两次复发且 CI 拦不住","true"
+"ql-20260913-002-a71d","2026-09-13 02:10:00","spike-01 codex tokenUsage.last 字段真机实证（2026-09-13-ctx-usage-all-providers task-08）","","false"
+"ql-20260911-029-5571","2026-09-11 21:33:04","pi 切智谱断流修复：models.json api 按 api_format 映射","writePiDir 把 api 写死 openai-completions（上一变更按 OpenAI 兼容端点 golden 设计），anthropic 形态无映射——pi 拿 OpenAI 协议打智谱 anthropic 端点必断流（线上会话 d4c29d95 首切实证，pi 四次重试全秒断）","true"
+"ql-20260911-028-8736","2026-09-11 19:01:43","代报需要延迟兜底——活体 mission c4731a06/worker 4ca98b77 实证 claude_code 分身（mcp=true 自报路径）未调…","立即代报只覆盖 mcp=false（claude 自报无兜底）；pi 空白 result（override 晚到）无补报机会；叠加 workspace b97f8231 default_agent=NULL 使派发白跑 claude（已补 pi）。","true"
+"ql-20260911-027-13b6","2026-09-11 16:48:56","pi 会话 AskUser 弹窗缺失修复——vendored ask-user 扩展补发起端","2026-09-09-askuser-pi-cursor 只做了 pi 弹窗链路的接收半（extension_ui_request→平台弹窗桥接），但 pi 本体无任何模型可调的提问工具、daemon 只挂 subagent 扩展，发起端缺失——pi 会话模型只能文字罗列问题（会话 d4c29d95 实证 sessio","true"
+"ql-20260911-004-70fc","2026-09-11 09:32:22","get_daemon_status.effective_quota_pool 空值不可判——消费方无法预判本地配额耗尽时平台兜底是否成立（活体回执…","远端 llm_providers 全为 claude 且无一 is_default=true（DB 实证），属主未配 pi 平台凭证时 probe 按设计返回 null，但 null 无法区分「同池（预期坏态）」与「未实现」。","true"
+"ql-20260910-016-e8e0","2026-09-10 22:43:49","user_input 日志行 5000 截断放宽到 50000 单一常量，会话页长输入不再截断","后端 9 个写点硬编码 content[:5000] 落 AgentRunLog(channel=user_input)，长输入的展示与「重新发送」都吃截断副本（生产库多条 user_input 行 len=5000 实证）；agent 实收的 SESSION_INJECT prompt 本就是全文，纯展示层截断","true"
+"ql-20260910-012-392f","2026-09-10 15:14:09","平台同步区串台修复——变更中心改读工作区级 sillyspec 快照","platform-sync-section.tsx 仍读机器级 sillyspec_status 单槽位；daemon 工作区级化后每轮采集逐目标覆盖单槽位，多工作区绑定时变更中心显示别区数据（总览卡 14a50351d 已改 map 优先，本组件漏改），用户实证总览卡 3 条冲突而变更中心不可见、无法在平台裁决","true"
+"ql-20260909-028-2582","2026-09-09 22:25:43","修复 pi 用量严重低报——逐调用累加替代 turn_end 定格值 replace","pi 每条 message.usage 是单次调用量（jsonl ground truth 实证），turn_end 只定格最后一次调用，driver replace 语义丢轮内工具循环中间调用——实测全会话只记到真实 in 5.7%/out 8.5%/cacheRead 1.9%","true"
+"ql-20260909-027-4b26","2026-09-09 22:17:13","修复 codex 用量全漏——thread/tokenUsage/updated 才是用量真源，driver 差值记账","codex 0.147 的 turn/completed 不带 usage，适配器旧提取点恒空；用量在每次 API 调用后的 thread/tokenUsage/updated 通知（total 线程累计），生产 3 个 codex run token 全 NULL 实证","true"
+"ql-20260909-026-ff18","2026-09-09 21:26:48","修复 codex 交互会话必现卡死——早到 inject 竞态下 turn/start 未等 threadId 就绪被静默跳过","backend 建会话即派发首句，inject 走 inject_wait parked 路径在 create 完成后立即入队，consume 循环握手写完即取到输入，此刻 codex thread/start 响应未到（h.threadId=null），_writeTurnStart 静默 return 后死等 cu","true"
+"ql-20260909-022-a42b","2026-09-09 20:33:36","会话用量条零用量判据修正——pi/cursor 等无请求计数上报引擎的用量条误隐藏","ql-20260909-005 零用量隐藏选了 api_requests 单指标判据，而 daemon 仅 Claude SDK 驱动上报 modelUsage（才附带 model_usage/api_requests），pi/cursor 驱动只报四维 token，后端聚合「未记录」桶请求次数恒按 0 计，有真实 t","true"
+"ql-20260909-016-fa10","2026-09-09 13:39:40","init lease 凭据静默断链补日志 + daemon 心跳工作区键 UUID 守卫","三层静默断链与心跳 422 两坑的代码修复（对应当日两份缺陷文档的修复建议）：降级/跳过合法但零提示使 local.yaml platform 段缺失无从发现；心跳协议字段由目录名/学习键宽松填充无校验，任一非 UUID 值整心跳被拒","true"
+"ql-20260908-014-3909","2026-09-08 22:39:47","daemon 日志时间戳","2026-09-08 temp 投毒排障实证：daemon.log 行无时间戳，跨小时排障只能靠事件计数反推时间线；裸 console 散布 8+ 文件 100+ 处，逐点改格式不现实","true"
+"ql-20260908-014-3909","2026-09-08 22:39:47","daemon 日志时间戳","2026-09-08 temp 投毒排障实证：daemon.log 行无时间戳，跨小时排障只能靠事件计数反推时间线；裸 console 散布 8+ 文件 100+ 处，逐点改格式不现实","true"
+"ql-20260907-011-14e0","2026-09-07 20:35:12","zcode SQLite 分派存在性门功能回归修复——换 rollout 目录门","ql-20260911-003-355a 安全批的 lstat 存在性门以文件存在为授权凭证，而 rollout 文件被 zcode 分钟级清理，历史会话（文件没了）全被门拦回落 not_found——恒读 SQLite 救活死会话的 D-001@v1 核心场景被误杀（生产实证：5706f6cb 会话在库 44 条消息","true"
+"ql-20260907-002-b595","2026-09-07 09:34:56","修复 pi driver pendingTurnError 轮内粘滞：pi 自动重试恢复后 turn 仍误报失败","pendingTurnError 是 consume 内会话级闭包变量，轮内只在下一轮 inject 前清一次（pi-rpc-driver.ts:896）；pi 对 API 失败自动重试，前 2 次 attempt 超时的 ame.error 已写值，第 3 次成功出完整答案后旧值粘滞，agent_settled 后 ","true"
+"ql-20260906-001-9232","2026-09-06 22:13:35","修复审计两中危项：quick-chat SQLite hex 未归一化派发必败 + isAssistantApiErrorText 全文正则误吞正常回复","raw text() 结果 SQLite 返回 CHAR(32) hex 字符串不经类型回转，placement 内 .hex 对 str 抛 AttributeError 被 except 吞掉误报无在线 runtime；错误词正则全文任意位置匹配，成功 run 正文提到 API Error 等词即被整条丢弃且无失败","true"
+"ql-20260904-027-25f6","2026-09-04 22:12:48","修三件部署遗留——daemon 服务器轮询自更新+runtime 归属自愈+entrypoint chown 守卫","①运行中自更新只有平台 WS 指令与磁盘旁路探测两触发源，无服务器轮询，部署新 bundle 后运行中 daemon 永不自发现（等 11 分钟零触发实事故）②register runtime 更新分支从不写 rt.user_id，实例归属改绑后 runtime 永挂旧用户致 pending-controls 等端点恒","true"
+"ql-20260904-026-ad9b","2026-09-04 20:53:22","daemon register 拒绝时终端中文提示+后台进程日志 tee 落 daemon.log","换账号 API Key 复用机器身份被 403 ownership mismatch 拒绝时 daemon 只在内部日志静默重试，且自更新 respawn（stdio=ignore）与 VBS 隐藏自启的 console 输出凭空丢失，用户看到启动命令退出即误判启动不了且零提示（2026-09-04 实事故）","true"
+"ql-20260904-022-ab52","2026-09-04 14:44:52","修 WS 送达控制指令 ack 无冲刷触发点（daemon 消费后立即回执）","ack 冲刷只在 pullAndConsume（触发=心跳 pending_controls>0 或重连对账），而 pending_controls 只统计 pending 行、WS 送达即 delivered 的指令永不触发——ack 永远留队，10 分钟后 backend GC 按 delivered-未-ack ","true"
+"ql-20260904-017-28be","2026-09-04 10:27:17","daemon 会话创建凭证持久化——修复重启后 SDK 裸起 Not logged in","claim 下发的 provider_config 只进 spawn env（内存），state.providerConfig 唯一赋值点是切换供应商——首次创建的会话凭证从不落盘 sessions.json（18 会话实证全无 providerConfig 键），daemon 重启后恢复链无凭证 + claude 隔","true"
+"ql-20260904-013-6fd8","2026-09-04 08:58:40","会话页失败卡两缺口修复——错误原文不进回复气泡+影子直聊 prompt 提取","会话 2f08b5da 实证：CLI 把远端 401 误报的 Not logged in 行在会话页装配器被当 agent 回复渲染成气泡（09-03 修复只盖 normalize 日志管线）；影子直聊仅一条带前导 user_input 被 logsToTurns 整条跳过，prompt 收空致无用户气泡且失败卡无重发","true"
+"ql-20260904-007-141f","2026-09-04 03:13:09","@全体并行触发 gather 收口注释与实现对齐（24h 审计 M2","注释宣称非 AppError 意外异常「照旧 fail-loud 整条抛」暗示串行版中断语义，与并行实现（收口时全部成员已触发）不一致——规则 18 注释与实现不一致须修正","false"
+"ql-20260903-020-fdf4","2026-09-03 22:17:36","end_group 解散容错分层——意外异常不再留半死群","_end_member_shadow 只捕 AppError：DB 抖动等非 AppError 会带着此前成员影子已逐个 commit 的半途状态把整个解散请求打 500，群行 ended_at 未写、部分成员影子已终止——群在列表里活着但成员全没反应","true"
+"ql-20260903-016-ea8a","2026-09-03 19:44:21","派发失败收链——run 判死后取消 pending 指令（消息复活修复）","inject/interrupt 推送失败（daemon 离线）时 run 已收敛 failed 并向用户报 504「未能发送」，但 enqueue_and_push 落库的 pending 指令行保留——daemon 在 TTL 内重连补拉会照常执行：界面报错后消息复活，用户重发则同一条消息执行两遍；interrup","true"
+"ql-20260903-011-1b58","2026-09-03 14:56:33","CLI 鉴权瞬时失败自动重投加前端中文错误卡片（远端 401 误报 Not logged in 修复）","claude CLI 把模型网关 401 统一合成 Not logged in Please run login 误导文案注入对话且 retryable 为 false，用户只能手动重发；实证 2026-09-03 会话 cb56fabf 同一进程同密钥 13 秒后重发即成功，纯远端瞬时抖动，与部署与供应商配置无关","true"
+"ql-20260903-003-3e1a","2026-09-03 10:07:22","团队任务分身终态失败后主控30分钟不被唤醒且巡逻resume死循环修复","分身 run 被 429 限流打死（error_code=interactive_failed，resume_token=NULL）后：①agent 已死不会再调 worker_done，会话 active+未 done 使 workers_all_terminal_with_stats 恒判未全完成，lease 完成","true"
+"ql-20260902-018-7203","2026-09-02 19:32:56","backend-ci 两过时测试断言补同步（孙逐级回叫/影子详情读放行）","两用例滞后于有意行为变更（非实现回归）：04d8be3e（quick-33956fb8）引入孙完成逐级回叫直接父，grandchild pending 用例仍断 injected==[]；8dcc562f4（quick-d4a8140d）放行影子详情读（allow_shadow_member_read=True，防成员","true"
+"ql-20260902-008-3723","2026-09-02 15:41:49","团队分身会话查看器「加载更早消息」点击无反应——单 run 跨游标整段丢弃修复","分身会话整段执行是单个长 run，handleLoadEarlier 的 run 级去重把与当前窗口同 run 的更早日志整 turn 丢弃（原作者注释视作可接受降级，但对分身单 run 会话是 100% 丢弃——按钮永远无反应，ee24ba15 分身 c479dbc6 用户实证）","true"
+"ql-20260902-007-1b07","2026-09-02 14:32:20","团队任务嵌套分身死锁根治——孙层完成逐级回叫父会话+僵尸等待态强收兜底","生产 ee24ba15 实证三层互等：孙 worker_done 唤醒只有「全树完成→通知根」无回叫直接父，中间层分身派完孙结束轮次后永不被唤醒不上报 done；_virtual_status 把首 run 成功+会话空闲+未上报映射 running；patrol 职责⑦只扫 ended/failed 终态，activ","true"
+"ql-20260831-011-2d44","2026-08-31 13:09:15","daemon message_delta 差分补读 input_tokens 轮内输入实时化","GLM 兼容端点 message_start 不带 input（实证轮内↑0 终态才有值），daemon 只从 message_start 取输入、delta 只读 output/cache——若 GLM 在 delta 携带 cumulative input 也被丢弃，轮内输入无法实时显示","true"
+"ql-20260831-006-6d67","2026-08-31 11:14:57","会话卡排队双修复：inject 发送 30s 超时兜底 + suspended 会话随 daemon 回线自动恢复","2026-08-31 会话卡排队事故两个实锤缺陷：①前端 apiFetch 无超时——后端劣化时 inject POST 无限挂起，占位轮永远「排队中/正在思考…」无错误提示，刷新后消息彻底消失（从未到后端）；②backend 重启窗口 daemon WS 断开被 10s 降级 offline，offline swee","true"
+"ql-20260831-002-f683","2026-08-31 02:51:04","会话上下文窗口用量修复——分母可编辑默认1M兜底+daemon轮末usage补发","本地模型（本机默认/未绑平台供应商）会话前端拿不到provider记录且本地端点协议不暴露窗口大小，分母派生为空显示「—」；daemon轮边界清零pendingUsage把最后一个500ms flush窗口内的usage（含ctx_tokens）静默丢弃，DB实证短轮大量NULL致环分子滞后","false"
+"ql-20260830-006-5639","2026-08-30 16:15:27","删除被 23 天前孤儿 claimed lease 永久 409——删除路径前置收敛死 lease","interactive lease 恒 NULL 过期时间（daemon 设计），会话终态后若 daemon 死亡 lease 行无收敛通道，永久停在 claimed；删除守卫盲数 pending/claimed 把死行当在途工作，生产 26 行实证把 delete_runtime 永久 409","true"
+"ql-20260828-014-bfef","2026-08-28 13:35:22","list_workers MCP 工具分身状态不收敛（主控拒派）","ql-013 修了两处状态源，第三处镜像 _list_workers_core（MCP list_workers，主控唯一状态查询源）漏改首 run 终态兜底——run d72943d7 日志实证：主控查到 killed 分身显示 running，结论「没有全失败」拒绝用户重新分析请求","true"
+"ql-20260828-013-a55b","2026-08-28 13:03:17","团队任务状态永不收敛——分身失败/被杀后任务卡进行中","树内会话的 run 从 derive 输入剔除（防双计），run 终态信息完全丢失：_virtual_status 仅看会话侧——run killed 后会话 ended 无强收标记、run failed 后会话未收敛 active，两种形态虚拟 run 都卡 running（DB 实证 mission 1eae4f7","true"
+"ql-20260828-013-1a7d","2026-08-28 12:24:35","CI 红灯清偿：backend-ci mypy 拦门两处 + frontend-ci 九测试文件（machineCandidates mock 债与 Sessi…","backend-ci 被 3d8432d9 两处 mypy 错误拦在 pytest 之前；frontend-ci 失败一半是组件改读 useDaemonMachines 融合候选后测试 mock 未跟、一半是 604c32fa ＋功能菜单收敛未适配旧断言；本地 captcha 两用例红是 .env 开关环境敏感（CI ","true"
+"ql-20260828-009-4a13","2026-08-28 10:35:15","派团队状态标签四问题修复（不显示/删除不生效/不可更新/图标色）","DB 实证用户会话首 run 与 mission 创建差 36s——useSessionTeamMissions 仅 hasActive 时轮询，mission 迟到后无刷新机制 chip 永不出现；×仅收起提示不取消（mission 仍在→再派 409）；chip 无更新入口；入口图标品牌色与附件/技能灰黑不一致","true"
+"ql-20260828-010-d154","2026-08-28 10:13:48","工作区守护状态徽标误报离线——aggregateDaemonStatus 实例源仅自有，共享绑定 daemon 查不到判离线（列表卡/切换器/移动端三消费方同错）","","false"
+"ql-20260828-006-739b","2026-08-28 09:06:24","共享机器会话创建 404 修复——D-012 早退误伤双授权场景","v1 platform 早退在 workspace 授权前 return None，门户无档案直传被一刀切封堵","false"
+"ql-20260828-002-f314","2026-08-28 00:13:39","pre-commit hook deny 文案补「整条命令未执行（含 git add）」提示","PreToolUse deny 是工具调用级拦截，复合命令整条未执行，但 deny 理由只说「commit was blocked」——重试只重跑 commit 导致链上 git add 的文件静默漏提交（2026-08-27 QUICKLOG 漏提交实证）","false"
+"ql-20260827-019-156b","2026-08-27 22:38:35","后端安全与稳定性缺陷修复批次（重置密码支配权/角色提权链/release 审批门/排队重试 500/弱引用 task/docstring）","多角度缺陷排查实证：重置密码接口把新明文口令回传调用者却不校验支配权，配合 require_permission_any 的任一 workspace 权限放行语义构成超管账号接管链；角色权限改写端无 platform:admin 守卫形成先绑后改的自我提权链；release 审批只数 approve 票且 min_ap","true"
+"ql-20260827-016-c3ea","2026-08-27 20:42:39","移动端第三轮UX打磨：禁意外缩放+触摸基线+输入16px+悬浮胶囊底栏+卡片图标容器","用户反馈移动端莫名容易缩放且手感差并给参考效果图；根因是根layout无viewport导出、无触摸基线CSS、输入框字号<16px触发iOS聚焦自动放大，底栏/卡片观感与参考图差距大","true"
+"ql-20260827-015-3875","2026-08-27 17:07:21","修复后台任务通知排队刷屏——同会话合并为一条","inject 端点恒 queue_when_busy=True，daemon 后台任务终态唤醒（2s debounce 只盖 2 秒窗）在长轮期间每任务终态入队一条通知，计数只增不减且每条派发后都是一轮完整模型汇报（会话 17f10040 实证）","true"
+"ql-20260827-014-d438","2026-08-27 15:56:10","修复 reopen 会话丢供应商凭证致秒回 ended","reopen_session 建 lease 漏写 session_llm_provider_id 且 SESSION_RESUME payload 不带解密 provider_config，daemon 恢复的 SDK 子进程无任何凭证（隔离 CLAUDE_CONFIG_DIR 无本机 OAuth 兜底）Not lo","true"
+"ql-20260827-008-3952","2026-08-27 13:33:50","后台子代理完成后自动唤醒主代理汇报","task_notification 只落库+发 UI 事件，不唤醒已结束的主代理 turn——用户必须手动发消息才能拿到汇报（实证会话 2fe664d9：05:30:50 主代理回复已派出后 turn 结束，05:31:22 两条 NOTIFICATION 无人消费）","true"
+"ql-20260826-011-6e0f","2026-08-26 18:35:00","Word 预览换 LibreOffice→PDF 管线——OnlyOffice 不支持 docGrid 行网格（公文目录/封面分页漂移根治）","OnlyOffice 编辑器引擎不支持中文文档行网格 docGrid（sdk-all.js 28MB 源码 linePitch/docGrid 零命中实证）——公文封面空段撑页/行高吸附全部失效；字体度量放大补丁实验证明其行高不读 hhea/OS/2 表（1.5x em 零布局变化），字体侧无杠杆。对照实验：Libre","false"
+"ql-20260824-017-a6ef","2026-08-24 13:22:21","会话面板技能装载内容不再误入对话正文","Claude Code 装载技能时 SKILL.md 全文以 assistant 文本块注入（[ASSISTANT] Base directory for this skill: 前缀，DB run d01bd6d2 实证），前端 classifySessionLog 把它归 reply，整份技能说明直接刷进对话气泡","true"
+"ql-20260822-009-95bc","2026-08-22 22:01:24","修复已结束会话重新打开后被立刻打回 ended 无法续聊（transcript 目录两侧不对称）","create 仅配供应商时隔离 CLAUDE_CONFIG_DIR（未配供应商 transcript 写宿主机 ~/.claude），resume/reload 却无条件强制隔离目录，找不到 jsonl → claude 报错退出 → fail → 会话记回 ended，inject 全 409（部署日志实证 reop","true"
+"ql-20260820-009-ee9d","2026-08-20 11:15:11","/sessions 会话直播视图断连后永久卡死（缺内容/卡运行中","SSE 链路三层缺口叠加——backend Redis Pub/Sub 无补发、fetch-sse 有意不自动重连、streamSession onerror 为空且调用方无兜底","true"
+"ql-20260819-004-695a","2026-08-19 13:20:49","修复 spec-sync 增量同步的软删行复活缺陷","apply_ops 把 rename 目标路径的 exists=false 软删墓碑当占用判 conflict（2026-08-19 quick 误归档事故卡死主因），add 落软删行走同内容豁免 no-op 留僵尸行。","true"
+"ql-20260818-009-c287","2026-08-18 13:25:18","修 spec-sync 增量同步超时（事件循环被阻塞 + 无谓全量 reparse）","① apply_ops 的 write_bytes/mkdir/utime/move 在事件循环上同步执行，Windows bind mount 连写卡死循环数十秒，被卡请求的连接撞 120s idle-in-transaction 超时（db.py:40 ql-20260728-008 前科）；② _compute_","true"
+"ql-20260818-001-fc28","2026-08-18 08:38:30","切换供应商/档案 toast 成功但实际没生效（会话 259635ca）","静默切换发空 prompt，daemon 路由三要素校验仍要求 prompt 非空→消息被丢弃（日志实证），DB 切了 daemon 没 reload。","false"
+"ql-20260817-008-9043","2026-08-17 15:10:24","会话 3693ae25 选 Kimi 供应商","SESSION_SWITCH_CONFIG 的 providerConfig 构造条件误用 provider_row（仅切供应商时非空）→ 切档案轮发 null → daemon reload 重建 driver 丢供应商 env 回落机器默认网关。DB 全是 Kimi 仅运行态 env 丢（daemon 日志 has","false"
+"ql-20260816-003-7e05","2026-08-16 15:40:18","修 daemon 全量测试预存失败 B1 + daemon/服务端中断场景健壮性","B1 固定 sleep(60) 满载误判 + pullPromise 永不 resolve 致 stop 挂死；pending_push 标记只读不写=死代码；19 测试文件 test:8000 DNS 2.3s×2 fetch 致全量 hook 超时。","true"
+"ql-20260813-006-f3f0","2026-08-13 22:41:18","排查智能体执行日志 ef9f8b55 已执行完但前端状态没变","close_interactive_run 对所有 change_id 非空+completed 的 run 无差别 enqueue verify gate，quick stage run 被拉跑 sillyspec gate verify，对非 verify 变更（quick 独立 quicklog、change_k","true"
+"ql-20260813-007-5fb2","2026-08-13 21:11:34","工作区配置页「同步到服务器」恒失败","后端 docker logs 实证——daemon 把本地 spec 缓存整树打包回灌，后端 apply_sync 解包后把 tar 成员无差别写进 scan_documents.content（PG 文本列）；其中 .runtime/sillyspec.db（SQLite 二进制）含 NUL 字节 0x00，asyn","true"
+"ql-20260812-007-d086","2026-08-12 20:43:59","修 daemon preflight Win execSync timeout 杀不掉 npm 孙进程致启动卡死","runCmd/runCmdBoolean execSync+timeout，Win timeout 只杀 npm.cmd 不杀孙 node.exe，npm view 国内慢时卡死 daemon。","true"
+"ql-20260728-008-375b","2026-07-28 22:48:06","修阿里云全站周期性卡 17s（idle_in_transaction 超时 10s 误伤长事务）","不是 HTTP/2 也不是 bcrypt（那两个此前已修）。真实链路——`backend/app/core/db.py:40` 给每条 PG 连接下发 `idle_in_transaction_session_timeout=10000`(10s，7-22 性能审计引入，本意防泄漏事务占满连接池)。某些请求开启事务后中","false"
+"ql-20260728-001-c979","2026-07-28 01:02:00","修复 main 上 5 个预存后端测试失败（alembic head 快照过期 / provider_config 漏 settings_config 常量 / workbench","(1) test_alembic_single_head 锁死 head==202607270900，auth 变更迁移 202607271700 合法叠在其上致 head 移位误伤；(2) _PROVIDER_CONFIG_FIELDS frozenset 漏 settings_config——llm_provide","true"
+"ql-20260713-004-7e2a","2026-07-13 20:44:51","WSL 下 install.sh INSTALL_DIR 用 WSL $USER(=root) 拼 /mnt/c/Users/root/ 不存在 → mkdir Permissio","install.sh WSL 分支（L36-43）`INSTALL_DIR=""/mnt/c/Users/${USER}/.sillyhub/daemon""`，注释假设""WSL $USER = Windows 用户名""——错。WSL 的 $USER 是 Linux 用户名（用户 WSL 默认 root，whoami=ro","true"
+"ql-20260713-003-b3d7","2026-07-13 16:37:50","WSL 下 install.sh 1c/1d 盘符转换 bug——Windows 路径只转 /e/（Git Bash 风格），WSL（/mnt/e/）下 -f 失败 → CMD→b","用户系统装了 WSL（Ubuntu+docker-desktop），CMD 敲 `bash` 解析到 WSL bash.exe（不是 Git Bash），install.sh 在 WSL 跑（IS_WSL=1）。1c（cmd.exe where node）+ 1d（powershell 注册表 PATH）都成功找到 W","false"
+"ql-20260708-002-9f3a","2026-07-08 16:36:00","browse-folder 点浏览不弹窗（FolderBrowserDialog 卡死）→ 改 Shell.BrowseForFolder","daemon 端 browse_folder RPC 用 System.Windows.Forms.FolderBrowserDialog.ShowDialog。该 API 在 PowerShell 子进程（node exec 启动）里缺 WinForms 消息循环，ShowDialog 卡死不弹窗（实测 12s/20","true"
+"ql-20260701-002-b3e4","2026-07-01 09:43:51","spec-workspace import 卡死 500（daemon get_spec_bundle 打包 2G .runtime/worktrees）","","true"
+"ql-20260701-001-7a1c","2026-07-01 09:10:18","spec-workspace import 错误码语义透传（daemon 离线不再误报 502）","","true"
+"ql-20260630-001-b9ce","2026-06-30 09:00:46","修复 install.sh 生成 Windows .cmd wrapper 的 bash heredoc 转义 bug（\${BUNDLE_NAME} 不展开 + WSL node","install.sh:234-242 用无引号 heredoc <<CMDEOF 生成 .cmd，""${win_bin_dir}\${BUNDLE_NAME}"" 的 \$ 被 bash 当转义输出字面 $，${BUNDLE_NAME} 不展开，生成的 .cmd 含字面量 ${BUNDLE_NAME} → cmd 执行报","true"
+"ql-20260626-001-4a8e","2026-06-26 01:25:09","修复 agent 实时日志展示：thinking 多行渲染裸露成 INFO（bug1）+ 实现""对话视图""为默认 tab（恢复 ql-20260625-003 丢失的诉求）+ 放宽","- bug1（thinking 多行渲染）：normalize isThinkingOnly（normalize.ts:594）只看首行 [THINKING] 即设 mergedThinkingContent；渲染 isThinkingContent（agent-log-viewer.tsx:572-582）要求每一行","true"
+"ql-20260624-007-a9e3","2026-06-24 21:49:07","修复 codex interactive turn 卡死（parseTurnCompleted 吞 turn/completed 收尾信号致 AgentRun 永不收敛→injec","","true"
+"ql-20260622-001-a169","2026-06-22 09:03:56","修复 frontend Docker healthcheck 误报 unhealthy（base image alpine→slim 后 wget 缺失，HEALTHCHECK 改","","false"
+"ql-20260605-005-d4a2","2026-06-05 13:22:23","前端获取 verify_result 文档 404","卡死 run 期间 verify-result.md 未 reparse 到 DB，导致前端请求 404。kill run + reparse 后自动修复","false"

package/asset-audit-2026-09-20/platform-troubleshooting.csv

@@ -0,0 +1 @@
+"file","seq","title"

package/asset-audit-2026-09-20/sillyspec-archive.csv

@@ -0,0 +1,108 @@
+"change","proposal.md","requirements.md","design.md","tasks.md","verify-result.md","verify-facts.json","doc_count"
+"2026-04-08-derive-state","1","1","1","1","1","0","5"
+"2026-05-13-cli-subagent-enforce","1","1","1","1","0","0","4"
+"2026-05-13-dashboard","1","1","1","1","0","0","4"
+"2026-05-28-module-docs-sync-on-archive","1","1","1","1","1","0","5"
+"2026-05-29-worktree-isolation","1","1","1","1","0","0","4"
+"2026-05-31-sqlite-migration","1","1","1","1","0","0","4"
+"2026-06-02-module-doc-redesign","1","1","1","1","1","0","5"
+"2026-06-09-waiting-state-machine","0","0","1","0","0","0","1"
+"2026-06-28-worktree-deps-provision","1","1","1","1","1","0","5"
+"2026-07-06-execute-deps-gate-deadlock","1","1","1","1","1","0","5"
+"2026-07-06-kanban-better-board","1","1","1","1","0","0","4"
+"2026-07-09-machine-interface-v1","1","1","1","1","1","0","5"
+"2026-07-10-quick-session-isolation","1","1","1","1","0","0","4"
+"2026-07-10-tooling-followups","0","0","1","0","0","0","1"
+"2026-07-11-execute-worktree-platform-gaps","1","1","1","1","1","0","5"
+"2026-08-02-init-claude-md","1","1","1","1","0","0","4"
+"2026-08-05-tooling-feedback-fixes","1","1","1","1","1","0","5"
+"2026-08-06-execute-runs-isolation","1","1","1","1","1","0","5"
+"2026-08-06-sillyspec-self-tooling-fixes","1","1","1","1","1","0","5"
+"2026-08-07-sillyhub-mcp-dispatch","1","1","1","1","1","0","5"
+"2026-08-08-concurrent-write-preflight","1","1","1","1","1","0","5"
+"2026-08-08-noai-completion-gate","1","1","1","1","1","0","5"
+"2026-08-08-progress-db-concurrency","1","1","1","1","1","0","5"
+"2026-08-09-complete-gate-atomicity","1","1","1","1","1","0","5"
+"2026-08-09-worktree-git-injection","1","1","1","1","1","0","5"
+"2026-08-09-worktree-junction-fail-loud","1","1","1","1","1","0","5"
+"2026-08-10-local-yaml-generation","1","1","1","1","1","0","5"
+"2026-08-10-platform-progress-sync","1","1","1","1","1","0","5"
+"2026-08-10-review-json-scaffold","1","1","1","1","1","0","5"
+"2026-08-10-worktree-apply-dirty-resilient","1","1","1","1","1","0","5"
+"2026-08-11-cross-repo-task-support","1","1","1","1","1","0","5"
+"2026-08-11-node-sqlite-migration","1","1","1","1","1","0","5"
+"2026-08-13-module-impact-living-doc","1","1","1","1","1","0","5"
+"2026-08-13-quick-hunk-separation","1","1","1","1","1","0","5"
+"2026-08-13-worktree-execute-loss-guard","1","1","1","1","1","0","5"
+"2026-08-14-doc-ref-check","1","1","1","1","0","0","4"
+"2026-08-15-docs-check-productize","1","1","1","1","1","0","5"
+"2026-08-15-docs-debt-inject","1","1","1","1","1","0","5"
+"2026-08-15-docs-signals-o12","1","1","1","1","1","0","5"
+"2026-08-15-platform-takeover-declaration","1","1","1","1","1","0","5"
+"2026-08-16-scan-diff-command","1","1","1","1","1","0","5"
+"2026-08-16-scan-docs-reconcile","1","1","1","1","1","0","5"
+"2026-08-16-state-machine-fail-open","1","1","1","1","1","0","5"
+"2026-08-16-state-split-fixes","1","1","1","1","1","0","5"
+"2026-08-17-execute-batch-dispatch","1","1","1","1","1","0","5"
+"2026-08-17-quick-close-linked-changes","1","1","1","1","1","0","5"
+"2026-08-18-platform-map-auto-anchors","1","1","1","1","1","0","5"
+"2026-08-19-reopen-and-execute-batch-guard","1","1","1","1","1","0","5"
+"2026-08-20-task-truth-unify","1","1","1","1","1","0","5"
+"2026-08-23-adopt-harness-practices","1","1","1","1","1","0","5"
+"2026-08-24-decision-touch-cli-drift","0","0","1","1","1","0","3"
+"2026-09-06-ir-stage-p3a","1","1","1","1","1","0","5"
+"2026-09-07-endpoint-baseline","1","1","1","1","1","1","6"
+"2026-09-07-ir-hardening","1","1","1","1","1","1","6"
+"2026-09-07-ir-stage-p3b","1","1","1","1","1","1","6"
+"2026-09-07-ir-stage-p3c","1","1","1","1","1","1","6"
+"2026-09-07-ir-stage-p3d","1","1","1","1","1","1","6"
+"2026-09-08-auto-driver","1","1","1","1","1","1","6"
+"2026-09-08-docs-fix-capability","1","1","1","1","1","1","6"
+"2026-09-08-ir-verify-facts","1","1","1","1","1","1","6"
+"2026-09-09-doctor-noai","1","1","1","1","1","1","6"
+"2026-09-09-plan-derived","1","1","1","1","1","1","6"
+"2026-09-10-change-scope-audit","1","1","1","1","1","1","6"
+"2026-09-10-review-dispatch","1","1","1","1","1","1","6"
+"2026-09-11-cross-change-decision-guard","1","1","1","1","1","1","6"
+"2026-09-11-friction-signal-hint","1","1","1","1","1","1","6"
+"2026-09-14-acceptance-test-matrix","1","1","1","1","1","1","6"
+"2026-09-14-apply-conflict-hardening","1","1","1","1","1","1","6"
+"2026-09-14-change-ownership-guards","1","1","1","1","1","1","6"
+"2026-09-14-knowledge-loop-close","1","1","1","1","1","1","6"
+"2026-09-14-quick-exit-tiered-gates","1","1","1","1","1","1","6"
+"2026-09-14-scan-incremental-refresh","1","1","1","1","1","1","6"
+"2026-09-15-tax-governance","1","1","1","1","1","1","6"
+"2026-09-15-worktree-dual-truth-gates","1","1","1","1","1","1","6"
+"2026-09-16-cross-layer-contract-probe","1","1","1","1","1","1","6"
+"2026-09-16-friction5-hardening","1","1","1","1","1","1","6"
+"2026-09-16-guard-consistency-probe","1","1","1","1","1","1","6"
+"2026-09-17-api-coverage-smoke","1","1","1","1","1","1","6"
+"2026-09-17-docs-bracket-reanchor","1","1","1","1","1","1","6"
+"2026-09-17-feedback-hardening","1","1","1","1","1","1","6"
+"2026-09-17-mi-diagnostic-codes","1","1","1","1","1","1","6"
+"2026-09-17-pass-cap-semantics","1","1","1","1","1","1","6"
+"2026-09-18-artifact-prefill","1","1","1","1","1","1","6"
+"2026-09-18-ceremony-risk-pricing","1","1","1","1","1","1","6"
+"2026-09-18-fr-index-l1","1","1","1","1","1","1","6"
+"2026-09-18-preflight-slimming","1","1","1","1","1","1","6"
+"2026-09-18-probe8-direct-compare","1","1","1","1","1","1","6"
+"2026-09-19-api-matrix-service-coverage","1","1","1","1","1","1","6"
+"2026-09-19-ceremony-pricing-five-cuts","1","1","1","1","1","1","6"
+"2026-09-19-review-material-cli-wiring","1","1","1","1","1","1","6"
+"2026-09-19-review-material-pack","1","1","1","1","1","1","6"
+"2026-09-19-span-risk-pattern-migration","1","1","1","1","1","1","6"
+"2026-09-20-fr-index-l2","1","1","1","1","1","1","6"
+"2026-09-20-redline-machine-check","1","1","1","1","1","1","6"
+"2026-09-20-scope-audit-cross-repo","1","1","1","1","1","1","6"
+"archive-impact-validation","0","0","0","0","0","0","0"
+"auto-flow-optimization","0","0","1","1","0","0","2"
+"auto-mode","1","1","1","1","0","0","4"
+"brainstorm-archive","0","0","0","0","0","0","0"
+"modules-as-development-context","1","1","1","1","0","0","4"
+"run-command-design","0","0","1","0","0","0","1"
+"scan-knowledge-producer-v1","1","1","1","1","0","0","4"
+"test-quick-2026-06-02","0","0","0","0","0","0","0"
+"unified-docs-design","0","0","1","0","0","0","1"
+"workflow-spec","0","0","1","1","0","0","2"
+"workflow-system-archive","0","0","0","0","0","0","0"
+"worktree-isolation-harding","0","0","0","0","0","0","0"

package/asset-audit-2026-09-20/sillyspec-fr.csv

@@ -0,0 +1,51 @@
+"fr_id","source_change","status","last_confirm_commit","commit_exists_in_git"
+"FR-bin-001 blast 轴项目化——声明面解析 + 词表退役 + evidence 位独立","2026-09-19-ceremony-pricing-five-cuts","active","7438d34","true"
+"FR-bin-002 完成门声明追赶重定价（无摩擦可降、摩擦地板不退）","2026-09-19-ceremony-pricing-five-cuts","active","7438d34","true"
+"FR-bin-003 span 解析认「## 文件变更清单」标题","2026-09-19-ceremony-pricing-five-cuts","active","7438d34","true"
+"FR-bin-004 双跑高报 warn 只记账不阻断","2026-09-19-ceremony-pricing-five-cuts","active","7438d34","true"
+"FR-bin-005 删除面收敛与本变更自指走位","2026-09-19-ceremony-pricing-five-cuts","active","7438d34","true"
+"FR-core-engine-001 稳定 FR id 发号与幂等索引","2026-09-18-fr-index-l1","active","aae25a4","true"
+"FR-core-engine-002 承接取代链与写作期注入","2026-09-18-fr-index-l1","active","aae25a4","true"
+"FR-core-engine-003 四类观察指标事件流","2026-09-18-fr-index-l1","active","aae25a4","true"
+"FR-core-engine-004 D14 第四检查与覆盖面边界","2026-09-18-fr-index-l1","active","aae25a4","true"
+"FR-core-engine-005 三轴客观定价引擎","2026-09-18-ceremony-risk-pricing","active","7c7a85c","true"
+"FR-core-engine-006 接管 review-tier 与 plan_level 降级编排化","2026-09-18-ceremony-risk-pricing","active","7c7a85c","true"
+"FR-core-engine-007 收口双跑对账（预价信声明，结算信事实）","2026-09-18-ceremony-risk-pricing","active","7c7a85c","true"
+"FR-core-engine-008 friction 阶段门升档与影子期","2026-09-18-ceremony-risk-pricing","active","7c7a85c","true"
+"FR-core-engine-009 probe8 diff 源替换","2026-09-18-probe8-direct-compare","active","","(无确认哈希)"
+"FR-core-engine-010 代码级字段直比","2026-09-18-probe8-direct-compare","active","","(无确认哈希)"
+"FR-core-engine-011 骨架渲染与 advisory 档","2026-09-18-probe8-direct-compare","active","","(无确认哈希)"
+"FR-core-engine-012 三槽预填引擎","2026-09-18-artifact-prefill","active","6786025","true"
+"FR-core-engine-013 refresh 重放与已确认保护","2026-09-18-artifact-prefill","active","6786025","true"
+"FR-core-engine-014 门禁梯度与对表","2026-09-18-artifact-prefill","active","6786025","true"
+"FR-core-engine-015 covered-service 判定形态满足覆盖等式","2026-09-19-api-matrix-service-coverage","active","7438d34","true"
+"FR-core-engine-016 测试锚点硬约束与八面文案同源","2026-09-19-api-matrix-service-coverage","active","7438d34","true"
+"FR-core-engine-017 四阶段评审材料包契约","2026-09-19-review-material-pack","active","7438d34","true"
+"FR-core-engine-018 再审唯一材料化＋基准面语义","2026-09-19-review-material-pack","active","7438d34","true"
+"FR-core-engine-019 机械验收钉","2026-09-19-review-material-pack","active","7438d34","true"
+"FR-core-engine-020 CLI 机械注入接线","2026-09-19-review-material-cli-wiring","active","33fca7f","true"
+"FR-core-engine-021 混合组包边界","2026-09-19-review-material-cli-wiring","active","33fca7f","true"
+"FR-core-engine-022 验收钉","2026-09-19-review-material-cli-wiring","active","33fca7f","true"
+"FR-core-engine-023 span_risk 声明段与装载器","2026-09-19-span-risk-pattern-migration","active","c796534","true"
+"FR-core-engine-024 定价消费面切换（ceremony span 轴）","2026-09-19-span-risk-pattern-migration","active","c796534","true"
+"FR-core-engine-025 quick 画像消费面切换","2026-09-19-span-risk-pattern-migration","active","c796534","true"
+"FR-core-engine-026 硬退役与自举","2026-09-19-span-risk-pattern-migration","active","c796534","true"
+"FR-core-engine-027 回归钉","2026-09-19-span-risk-pattern-migration","active","c796534","true"
+"FR-core-engine-028 依据决策机读链","2026-09-20-fr-index-l2","active","4222a90b","true"
+"FR-core-engine-029 模块卡指针显式化","2026-09-20-fr-index-l2","active","4222a90b","true"
+"FR-core-engine-030 GWT 场景正文入库","2026-09-20-fr-index-l2","active","4222a90b","true"
+"FR-core-engine-031 存量回填","2026-09-20-fr-index-l2","active","4222a90b","true"
+"FR-core-engine-032 跨仓条目按仓真实对账","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-core-engine-033 锚点分级","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-core-engine-034 --json 契约仓库维度（第一交付物，additive）","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-core-engine-035 预执行与降级形态","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-core-engine-036 文本表与 --file","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-core-engine-037 快照与冻结语义","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-core-engine-038 共享内核单一真相源","2026-09-20-scope-audit-cross-repo","active","50c29406","true"
+"FR-redlines-001 红线断言评估","2026-09-20-redline-machine-check","active","a17fcab","true"
+"FR-redlines-002 机制与内容分离","2026-09-20-redline-machine-check","active","a17fcab","true"
+"FR-redlines-003 探针挂载与健壮性","2026-09-20-redline-machine-check","active","a17fcab","true"
+"FR-runtime-001 门禁前置失败清单注入","2026-09-18-preflight-slimming","active","29aa686","true"
+"FR-runtime-002 阶段感知注入瘦身","2026-09-18-preflight-slimming","active","29aa686","true"
+"FR-runtime-003 wait 继承盖章","2026-09-18-preflight-slimming","active","29aa686","true"
+"FR-runtime-004 测选路引导与守恒验收","2026-09-18-preflight-slimming","active","29aa686","true"

package/asset-audit-2026-09-20/sillyspec-gotchas.csv

@@ -0,0 +1,4 @@
+"file","lines","entries"
+"knowledge/conventions.md","86","13"
+"knowledge/patterns.md","60","10"
+"knowledge/uncategorized.md","12","1"

package/asset-audit-2026-09-20/sillyspec-knownissues.csv

@@ -0,0 +1,34 @@
+"title","status"
+"sqljs-wasm-only","(未标)"
+"Sub Package Isolation","(未标)"
+"Hook Import Restriction","(未标)"
+"Propose 死代码","(未标)"
+"平台审核占位","(未标)"
+"无 Build/Lint 框架","(未标)"
+"Worktree Apply 三道坎（多会话归档实战，2026-09-11 cross-change-decision-guard 三连撞）","(未标)"
+"ql-ID 双占用（分配竞态，坑 ql-id-double-occupancy）","(未标)"
+"quick 单活跃变更无条件自动关联（坑 quick-single-change-auto-link）","(未标)"
+"default 空目录物化 + explore --done 拒绝提示缺自身出口（坑 default-empty-dir-materialized / explore-done-change-default-hint，2026-09-14 用户反馈）","(未标)"
+"hook 依赖必须显式存在","(未标)"
+"parseSimpleYaml 缩进判断必须用原始 line 而非 trimmed","(未标)"
+"Windows 下 process.exit 触发 UV_HANDLE_CLOSING assertion 覆盖退出码","(未标)"
+"progress.quickGuard 在 db 零持久化，quick --done 跨进程收尾失效","(未标)"
+"quick 的 --change 被复用为 linkedChanges，非 changeName","(未标)"
+"_resolveMainRepoRoot 用 existsSync('git rev-parse --git-common-dir') 该命令返回相对 .git","(未标)"
+"spec-dir.test.mjs 全量套件 Windows 罕见进程级崩溃（flaky）","(未标)"
+"task 卡 frontmatter 列表项含半角「冒号+空格」会炸 jsYaml 静默吞掉契约字段","(未标)"
+"JS 正则转义全角括号会静默失配（V8 行为）","(未标)"
+"2026-09-10 平台通道活体发现的两个平台侧缺口（待平台仓修复，sillyspec 侧兜底已就绪）","(未标)"
+"2026-09-11 平台侧 artifacts 代报竞态（真变更场景实测暴露，短任务躲过）","(未标)"
+"bash-heredoc-truncation（2026-09-12 双会话实证）","(未标)"
+"execute prompt 指引的 wt-commit 是幽灵命令（runWtCommit 未接线 dispatch）","(未标)"
+"worktree 隔离期跨仓命令锚定错位（guard 无路径感知，待立项）","(未标)"
+"QUICKLOG 多会话条目交织（提交需手工剥离并行条目，待立项）","(未标)"
+"probe5 跨仓前端调用面不纳入扫描（parity 扫描根单仓）——**已兑现更正**","(未标)"
+"archive 对账表跨仓文件恒标「计划未动」（live worktree 形态缺 per-repo advisory，待立项）","(未标)"
+"能力域撞车无预警（quick 无声明面，文件冲突预警不触发，待立项）","(未标)"
+"test_strategy: skip 只短路主仓、跨仓无条件跑（口径分裂，待立项）","(未标)"
+"worktree 内直跑全量测试的环境性失败族（stash 基线对照成本，待立项）","(未标)"
+"quick-gate-required-evidence-flake（2026-09-19，未解）","(未标)"
+"blast 自举声明表未落 main（2026-09-19-ceremony-pricing-five-cuts 归档 --skip-apply 遗留）","(未标)"
+"span 六域通用路径表已退役为项目声明（无声明项目维度关闭）","(未标)"

package/asset-audit-2026-09-20/sillyspec-modules.csv

@@ -0,0 +1,30 @@
+"file","lines"
+".sillyspec/docs/dashboard/modules/components.md","90"
+".sillyspec/docs/dashboard/modules/composables.md","73"
+".sillyspec/docs/dashboard/modules/server-executor.md","55"
+".sillyspec/docs/dashboard/modules/server-index.md","67"
+".sillyspec/docs/dashboard/modules/server-parser.md","58"
+".sillyspec/docs/dashboard/modules/server-watcher.md","60"
+".sillyspec/docs/sillyspec/modules/bin.md","52"
+".sillyspec/docs/sillyspec/modules/change-management.md","73"
+".sillyspec/docs/sillyspec/modules/cli-entry.md","101"
+".sillyspec/docs/sillyspec/modules/core-engine.md","191"
+".sillyspec/docs/sillyspec/modules/dashboard-components.md","84"
+".sillyspec/docs/sillyspec/modules/dashboard-composables.md","103"
+".sillyspec/docs/sillyspec/modules/dashboard-frontend.md","94"
+".sillyspec/docs/sillyspec/modules/dashboard-server.md","119"
+".sillyspec/docs/sillyspec/modules/dashboard.md","61"
+".sillyspec/docs/sillyspec/modules/dispatch.md","59"
+".sillyspec/docs/sillyspec/modules/docs-consistency.md","47"
+".sillyspec/docs/sillyspec/modules/hooks.md","71"
+".sillyspec/docs/sillyspec/modules/machine-interface.md","50"
+".sillyspec/docs/sillyspec/modules/migration.md","65"
+".sillyspec/docs/sillyspec/modules/progress.md","63"
+".sillyspec/docs/sillyspec/modules/redlines.md","34"
+".sillyspec/docs/sillyspec/modules/runtime.md","125"
+".sillyspec/docs/sillyspec/modules/setup.md","87"
+".sillyspec/docs/sillyspec/modules/sillyhub-mcp.md","62"
+".sillyspec/docs/sillyspec/modules/stages.md","94"
+".sillyspec/docs/sillyspec/modules/sync.md","99"
+".sillyspec/docs/sillyspec/modules/workflow.md","194"
+".sillyspec/docs/sillyspec/modules/worktree.md","124"