sillyspec 3.29.4 → 3.31.0

package/src/contract-matrix.js

@@ -542,11 +542,16 @@ export function verifyApiParity(specBase, scanRoot, runtimeRoot, changeName = nu
   // worktree，scanRoot（主仓 cwd）里是旧版本——读旧版会漏新调用/多已删调用。
   let frontendCalls = []
   let frontendScope = 'full-repo'
+  // 变更文件面一次解析两用（quick-C，2026-09-20 报告问题 C）：前端调用收窄 + unused 分层的
+  // change-relevant 判定共消费；解析失败 → null（前端回退全仓、分层回退 artifact 口径）
+  const parityChanged = changeName
+    ? (() => { try { return _resolveDiffFilesForParity(specBase, scanRoot, changeName, runtimeRoot) } catch { return null } })()
+    : null
   const frontendRoot = (wt && wt.gitDir !== scanRoot) ? wt.gitDir : scanRoot
   const frontendRootLabel = frontendRoot === scanRoot ? 'scan-root' : 'worktree'
   if (changeName) {
     try {
-      const changed = _resolveDiffFilesForParity(specBase, scanRoot, changeName, runtimeRoot)
+      const changed = parityChanged
       if (changed && changed.length > 0) {
         const changedSet = new Set(changed.map(f => f.replace(/\\/g, '/')))
         frontendCalls = scanFrontendApiCalls(frontendRoot).filter(c => {
@@ -647,12 +652,28 @@ export function verifyApiParity(specBase, scanRoot, runtimeRoot, changeName = nu
     return liveKeys.has(key) || liveEndpoints.length === 0
   })
   // unused 分层（坑 probe5-unused-stock-noise，2026-09-15 EHS 生产实证：490 个 unused 全是
-  // urgent 等他模块存量端点——全仓 live 扫描 × 本变更对账的口径噪音刷屏）。本变更相关 =
-  // contract artifact 端点集内（本变更换的端点漏配才是真信号）；存量其余折叠计数。无
-  // artifact（非契约流）回退全列零回归。
+  // urgent 等他模块存量端点——全仓 live 扫描 × 本变更对账的口径噪音刷屏）。本变更相关判定
+  // 两级（quick-C，2026-09-20 报告问题 C：artifact 集口径被整仓 baseline 击穿——execute 起点
+  // 拍的全仓端点基线让 artifactKeys ⊇ 全仓、418 存量端点全误标「本变更端点前端未调用」）：
+  // ①有变更文件面（_resolveDiffFilesForParity 同款链，前端收窄复用同一次解析）→ 判「端点定义
+  //   源文件 ∈ 本变更 diff 面」（源串反斜杠归一 + artifact 任务目录前缀形态，双向 endsWith——
+  //   与前端调用收窄同款匹配）；
+  // ②面不可得（CLI contractScan 无 changeName / diff 兜底链全空）→ 回退 artifact 端点集口径；
+  // ③无 artifact（非契约流）→ 回退全列零回归。
   const artifactKeys = new Set(allProviderEndpoints.map(e => `${e.method} ${e.path}`))
   const hasArtifacts = allProviderEndpoints.length > 0
-  const unusedChangeRelevant = hasArtifacts ? narrowedUnused.filter(u => artifactKeys.has(`${u.method} ${u.path}`)) : narrowedUnused
+  const unusedChangeRelevant = parityChanged && parityChanged.length > 0
+    ? narrowedUnused.filter(u => {
+        // diffApiParity 的 unused 项定义源字段是 providerFile（endpoint-extractor.js:492），
+        // 兼容直调方可能给的 source 形态
+        const src = String(u.providerFile || u.source || '').replace(/\\/g, '/')
+        if (!src) return false
+        return parityChanged.some(cf => {
+          const c = String(cf).replace(/\\/g, '/')
+          return src === c || src.endsWith('/' + c) || c.endsWith('/' + src) || src.endsWith(c) || c.endsWith(src)
+        })
+      })
+    : (hasArtifacts ? narrowedUnused.filter(u => artifactKeys.has(`${u.method} ${u.path}`)) : narrowedUnused)
   const unusedStockCount = narrowedUnused.length - unusedChangeRelevant.length
 
   const ok = missingBackend.length === 0

package/src/db.js

@@ -7,7 +7,7 @@ import { dirname } from 'path';
 // 每次 new ProgressManager 都过 init，靠版本戳跳过建表省开销）。
 // node:sqlite（DatabaseSync）是原生 SQLite 引擎，打开即持久化（不像 sql.js 纯内存需整库 export 落盘），
 // _createSchema 内 DDL 直接落盘，无需额外 _save。
-const DB_SCHEMA_VERSION = 6;
+const DB_SCHEMA_VERSION = 8;
 
 // SQLITE_BUSY 应用层有限重试（R-08 / NFR-03）：WAL 单写者模型，并发写第二者在
 // busy_timeout=5000（init PRAGMA）后抛 SQLITE_BUSY。busy_timeout 已在引擎层处理大部分等待；
@@ -252,7 +252,7 @@ export class DB {
       CREATE TABLE IF NOT EXISTS project (
         id INTEGER PRIMARY KEY DEFAULT 1,
         name TEXT NOT NULL,
-        schema_version INTEGER DEFAULT 6,
+        schema_version INTEGER DEFAULT 8,
         created_at TEXT NOT NULL,
         updated_at TEXT NOT NULL
       )
@@ -263,7 +263,7 @@ export class DB {
       CREATE TABLE IF NOT EXISTS changes (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         name TEXT UNIQUE NOT NULL,
-        current_stage TEXT DEFAULT 'scan',
+        current_stage TEXT DEFAULT 'brainstorm',
         status TEXT DEFAULT 'active',
         no_worktree INTEGER DEFAULT 0,
         created_at TEXT NOT NULL,
@@ -285,6 +285,8 @@ export class DB {
         status TEXT DEFAULT 'pending',
         started_at TEXT,
         completed_at TEXT,
+        authority TEXT NOT NULL DEFAULT 'cli',
+        preview_evidence TEXT,
         UNIQUE(change_id, stage)
       )
     `);
@@ -298,7 +300,8 @@ export class DB {
         status TEXT DEFAULT 'pending',
         output TEXT,
         completed_at TEXT,
-        ordering INTEGER NOT NULL DEFAULT 0
+        ordering INTEGER NOT NULL DEFAULT 0,
+        authority TEXT NOT NULL DEFAULT 'cli'
       )
     `);
 
@@ -335,6 +338,13 @@ export class DB {
     this.db.exec('CREATE INDEX IF NOT EXISTS idx_stages_change ON stages(change_id)');
     this.db.exec('CREATE INDEX IF NOT EXISTS idx_steps_stage ON steps(stage_id)');
 
+    // Migration: authority 双轨列（watcher 预览账本，幂等——ADD COLUMN NOT NULL DEFAULT 存量即盖章）
+    this._migrateAddColumn('stages', 'authority', "TEXT NOT NULL DEFAULT 'cli'");
+    this._migrateAddColumn('stages', 'preview_evidence', 'TEXT');
+    this._migrateAddColumn('steps', 'authority', "TEXT NOT NULL DEFAULT 'cli'");
+    // 预览账本（2026-09-23-watcher-preview-progress）：authority 探测与 GC 走此复合索引
+    this.db.exec('CREATE INDEX IF NOT EXISTS idx_stages_authority ON stages(change_id, stage, authority)');
+
     // Migration: add isolation columns to changes table (idempotent)
     this._migrateAddColumn('changes', 'isolation_status', 'TEXT');
     this._migrateAddColumn('changes', 'isolation_mode', 'TEXT');
@@ -378,6 +388,27 @@ export class DB {
     // change-registry 首建/claimChangeOwner（task-02 接线会话标识）；消费方=assertChangeOwnership
     // （task-02）+ serializeForSync 平台同步投影。幂等 ALTER（列存在跳过，v5 先例同款）。
     this._migrateAddColumn('changes', 'owner_session', 'TEXT');
+
+    // v8（2026-09-27-change-birth-stage-brainstorm）：出生阶段 'scan'→'brainstorm' 的存量数据迁移。
+    // 旧版 changes 行出生 current_stage='scan'（db.js DDL 默认值 + progress.js 两处 INSERT），
+    // thin/quick 等不进主流程的变更全生命周期显示「🔍 代码扫描」误导（scan 是 auxiliary，
+    // shared.js MAIN_FLOW_ORDER 从不含它）。只改写「出生默认未被真跑过」的行：active 且
+    // （stages.scan='pending' 或根本没有 stages.scan 行——registerChange 出生的行不带 stages 行，
+    // 评审 P3-2 缺口）——setStage('scan') 置 in-progress，真在跑/已跑完 scan 的行不受影响。
+    // 同步刷 last_local_modified_ts（与 pm._touchLocalModified 同语义）：否则平台 pull 见本地
+    // 无脏度会静默 import，把平台的旧 'scan' 导回来（platform-sync-pull 冲突保留本地现状）。
+    // 幂等：改写后条件不再命中，重跑零效果。strftime 对齐 toISOString 形态（T 分隔 + ms + Z）。
+    this.db.exec(`
+      UPDATE changes
+      SET current_stage = 'brainstorm',
+          last_local_modified_ts = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+      WHERE current_stage = 'scan'
+        AND status = 'active'
+        AND (
+          id IN (SELECT change_id FROM stages WHERE stage = 'scan' AND status = 'pending')
+          OR NOT EXISTS (SELECT 1 FROM stages WHERE change_id = changes.id AND stage = 'scan')
+        )
+    `);
   }
 
   /**

package/src/decision-distill.js

@@ -186,8 +186,11 @@ function normalizeModules(moduleIndex) {
   return moduleIndex.modules ? moduleIndex.modules : moduleIndex
 }
 
-/** _module-map.yaml 子集解析（仅模块 id → paths/core_files；不复用 modules.js 以保零依赖纯函数） */
-function parseModulePathsSubset(content) {
+/** _module-map.yaml 子集解析（仅模块 id → paths/core_files/doc；不复用 modules.js 以保零依赖纯函数）。
+ *  2026-09-23 资产三小件③：增 doc 标量捕获（`    doc: modules/<id>.md`——模块卡路径，归档文档
+ *  认领 advisory 消费）+ 导出（complete-handlers 复用同解析源，跨项目扫描需项目归属故不走
+ *  discoverModuleIndex 的合并口径）。既有消费方只读 paths/core_files，增字段零行为差。 */
+export function parseModulePathsSubset(content) {
   const modules = {}
   let cur = null
   let key = null
@@ -202,6 +205,8 @@ function parseModulePathsSubset(content) {
     }
     const block = line.match(/^    (paths|core_files):$/)
     if (block) { key = block[1]; modules[cur][key] = modules[cur][key] || []; continue }
+    const doc = line.match(/^    doc: (.+)$/)
+    if (doc) { modules[cur].doc = doc[1].trim().replace(/^['"]|['"]$/g, ''); key = null; continue }
     const item = line.match(/^      - (.+)$/)
     if (item && key) modules[cur][key].push(item[1].trim().replace(/^['"]|['"]$/g, ''))
   }
@@ -224,10 +229,11 @@ export function discoverModuleIndex(knowledgeRoot) {
       if (!existsSync(mapPath)) continue
       const sub = parseModulePathsSubset(readFileSync(mapPath, 'utf8'))
       for (const [id, m] of Object.entries(sub)) {
-        if (!merged[id]) merged[id] = { paths: m.paths || [], core_files: m.core_files || [] }
+        if (!merged[id]) merged[id] = { paths: m.paths || [], core_files: m.core_files || [], ...(m.doc ? { doc: m.doc } : {}) }
         else {
           merged[id].paths = [...new Set([...(merged[id].paths || []), ...(m.paths || [])])]
           merged[id].core_files = [...new Set([...(merged[id].core_files || []), ...(m.core_files || [])])]
+          if (!merged[id].doc && m.doc) merged[id].doc = m.doc
         }
       }
     }

package/src/diagnostic-codes.js

@@ -76,7 +76,7 @@ export const DIAGNOSTIC_CODES = Object.freeze({
   },
 });
 
-/** gate check id → 失败码（六 check 全覆盖；表外 id 返回 undefined，调用方不挂键）。 */
+/** gate check id → 失败码（七 check 全覆盖；表外 id 返回 undefined，调用方不挂键）。 */
 const CHECK_ID_TO_CODE = Object.freeze({
   artifacts: 'artifacts_invalid',
   'design-file-list': 'design_file_ref_invalid',
@@ -84,6 +84,7 @@ const CHECK_ID_TO_CODE = Object.freeze({
   'execute-evidence': 'execute_evidence_unchanged',
   'task-reviews': 'task_reviews_invalid',
   'verify-test': 'verify_test_failed',
+  'verify-lint': 'verify_lint_failed',
 });
 
 /**

package/src/docs-check.js

@@ -60,7 +60,7 @@ function _rdExists(absPath) {
 export function createHeadReader(projectRoot, ref = 'HEAD') {
   const root = pathResolve(projectRoot)
   const git = (args) => execFileSync('git', ['-C', root, ...args], {
-    encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'],
+    encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true,
   })
   let toplevel
   try { toplevel = git(['rev-parse', '--show-toplevel']).trim() } catch { return null }

package/src/doctor-diagnostics.js

@@ -31,6 +31,7 @@ import { gitQuiet } from './git-helper.js'
 import jsYaml from 'js-yaml';
 import { pruneTimestampedEntries } from './runtime-hygiene.js';
 import { CHECK_SEVERITY } from './constants.js';
+import { readGateSnapshotLedger, selectStaleSnapshots } from './run/gate-snapshot-ledger.js'
 import { checkPlatformManaged, isSelfReferentialSpecRoot, PLATFORM_MANAGED_FILENAME, QUICK_SID_RE, resolveRuntimeRoot } from './run/shared.js';
 import { readFrictionLedger } from './friction-ledger.js';
 // FR 索引消费（2026-09-18-fr-index-l1 L1，D-007）：D14 第四检查——epoch 后归档的索引在场+取代完整。
@@ -1430,6 +1431,34 @@ export function renderDoctorSummary(diagnostics) {
 import * as _wtm from './worktree.js'
 function require_wtm() { return _wtm }
 
+/**
+ * 门禁快照泄漏探测（task-04，2026-09-24-gate-snapshot-lifecycle / FR-03 / D-007@v1）：
+ * 账本内「守卫通过 ∧ 超 TTL（env/24h 单源）∧ pid 明确死」的条目即失活残留——门禁快照
+ * （%TEMP%/sillyspec-gate-*）在进程被杀/Windows 删除失败时必然泄漏且此前零可见面。
+ * 只读：只报不修（零修复），warning 级不阻断（doctor --json 的 overall_status 与退出码
+ * 沿用现行全局口径）。runtimeRoot 缺失/账本损坏→ok（fail-open 零误报）。
+ */
+export function detectGateSnapshotLeak({ runtimeRoot = null, now = Date.now(), staleHours, isProcessAlive } = {}) {
+  if (!runtimeRoot) {
+    return { name: 'gate_snapshot_leak', label: '门禁快照泄漏', pass: true, severity: null, findings: [], safe_actions: [] }
+  }
+  let leaked = []
+  try {
+    const { stale } = selectStaleSnapshots(readGateSnapshotLedger(runtimeRoot), { now, staleHours, isProcessAlive })
+    leaked = stale.map((e) => ({ root: e.snapshotRoot, ageHours: Math.max(0, Math.round((now - e.createdAt) / 3600000)) }))
+  } catch { leaked = [] }
+  return {
+    name: 'gate_snapshot_leak',
+    label: '门禁快照泄漏',
+    pass: leaked.length === 0,
+    severity: leaked.length > 0 ? CHECK_SEVERITY.WARNING : null,
+    findings: leaked.length > 0
+      ? leaked.map((x) => `残留快照 ${x.root}（账龄约 ${x.ageHours}h，超 TTL 且登记进程已失活——下个门禁建快照时自动回收，也可 rm -rf 后 git worktree prune）`)
+      : [],
+    safe_actions: [],
+  }
+}
+
 export async function runDoctorDiagnostics({ cwd }) {
   const pointer = resolvePointer(cwd);
   const multiDb = detectMultiDb(cwd, pointer);
@@ -1464,7 +1493,20 @@ export async function runDoctorDiagnostics({ cwd }) {
   // task-06（2026-09-18-ceremony-risk-pricing / FR-04 / R-04）：影子对照——轻/重 catch 差异报告 +
   // 转正判据计数（纯增量挂载，只读不阻断；无影子数据跳过不误报）
   const ceremonyShadow = detectCeremonyShadowComparison(cwd, authoritySpecDir)
-  const dimensions = [multiDb, pointerHealth, changesSplit, changeDb, executeMismatch, docBloat, repoNativeChain, lifecycleDoc, worktreeHealth, buildEnv, mcpEndpoints, applyManifestDrift, selfMaintenanceTax, archiveIntegrity, ceremonyShadow];
+  // task-04（2026-09-24-gate-snapshot-lifecycle / FR-03 / D-007@v1）：门禁快照泄漏
+  // （%TEMP%/sillyspec-gate-* 崩溃残留——warning 级只读可见面；阈值与 create 前扫共用
+  // env SILLYSPEC_GATE_SNAPSHOT_STALE_HOURS/24h 单源，顶层 doctor 无 --stale-hours 参数面）。
+  // runtimeRoot 与 quick/verify 落账本处同源：平台指针 runtimeRoot 优先（否则 specBase/.runtime），
+  // 否则平台模式下账本写别处、doctor 恒读空（独立审查 P1-3）
+  let gateLeakRuntimeRoot = null
+  try {
+    gateLeakRuntimeRoot = resolveRuntimeRoot(
+      { runtimeRoot: pointer.present && pointer.runtimeRoot && existsSync(pointer.runtimeRoot) ? pointer.runtimeRoot : null },
+      authoritySpecDir || join(cwd, '.sillyspec'),
+    )
+  } catch { gateLeakRuntimeRoot = null }
+  const gateSnapshotLeak = detectGateSnapshotLeak({ runtimeRoot: gateLeakRuntimeRoot })
+  const dimensions = [multiDb, pointerHealth, changesSplit, changeDb, executeMismatch, docBloat, repoNativeChain, lifecycleDoc, worktreeHealth, buildEnv, mcpEndpoints, applyManifestDrift, selfMaintenanceTax, archiveIntegrity, ceremonyShadow, gateSnapshotLeak];
 
   return {
     dimensions,
@@ -1697,7 +1739,7 @@ export async function dumpDb({ dbPath, cwd }) {
     const schemaVersion = sv.length ? sv[0].schema_version : null;
     const changes = rows('SELECT name, current_stage, status, created_at, last_active FROM changes ORDER BY last_active DESC')
       .map((r) => ({ name: r.name, current_stage: r.current_stage, status: r.status, created_at: r.created_at, last_active: r.last_active }));
-    const stages = rows('SELECT c.name, s.stage, s.status, s.started_at, s.completed_at FROM stages s JOIN changes c ON s.change_id = c.id ORDER BY c.name, s.stage')
+    const stages = rows(`SELECT c.name, s.stage, s.status, s.started_at, s.completed_at FROM stages s JOIN changes c ON s.change_id = c.id WHERE (s.authority = 'cli' OR s.authority IS NULL) ORDER BY c.name, s.stage`)
       .map((r) => ({ change: r.name, stage: r.stage, status: r.status, started_at: r.started_at, completed_at: r.completed_at }));
     return writeDump({ ok: true, meta, schema_version: schemaVersion, changes, stages }, authoritySpecDir);
   } catch (e) {