sillyspec 3.32.0 → 3.32.2

package/.claude/skills/sillyspec-explore/SKILL.md

@@ -50,7 +50,12 @@ sillyspec run explore --status                     # 查看阶段状态
 
 **探索问题空间**：问澄清问题、挑战假设、重新定义问题
 
-**调查代码库**：映射相关架构、找集成点、识别已有模式、暴露隐藏复杂性
+**调查兵器（话题→兵器映射，全只读）**：按话题选兵器，别只用 rg 词面考古——
+
+- 词面考古（"这段代码在哪/怎么写的"）→ `rg` / `ls` / `cat`
+- 坑史检索（"这话题以前踩过什么坑"）→ `sillyspec knowledge search --query "<关键词>"`（四层召回）
+- 关系面（影响面/历史决策/需求谱系）→ `sillyspec knowledge graph impact <文件|模块|变更名>`（多跳闭包 + 防复潮可达的已否决方案）、`neighbors <锚点>` / `path <A> <B>`（推理链："这条 FR 被谁取代""决策钉在哪个文件"）、`summary`（知识面健康度）——**比较方案前先查 impact 里的 rejected/⚰️死路条目，已否决的路不重新兜售**（除非复潮条件明确满足）；全部支持 `--json`
+- 在途面（出方向建议前）→ `sillyspec status` 活跃变更一览——结论别跟在途工作撞车
 
 **比较选项**：头脑风暴多种方案、建对比表、画权衡分析
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sillyspec",
-  "version": "3.32.0",
+  "version": "3.32.2",
   "description": "SillySpec CLI — 流程状态机，让 AI 严格按步骤来",
   "icon": "logo.jpg",
   "homepage": "https://sillyspec.ppdmq.top/",
@@ -24,7 +24,7 @@
   ],
   "license": "MIT",
   "scripts": {
-    "test:core": "node --test test/preview-migration.test.mjs test/preview-progress.test.mjs test/preview-outlet.test.mjs test/preview-gc.test.mjs test/preview-gate-isolation.test.mjs test/db-engine.test.mjs test/db-concurrency.test.mjs test/db-atomic-write.test.mjs test/platform-sync-schema.test.mjs test/platform-sync-serialization.test.mjs test/change-ownership-guards.test.mjs test/watcher.test.mjs test/watcher-alerts.test.mjs test/watcher-timeline.test.mjs test/sentinel-rules.test.mjs test/handoff.test.mjs test/execution-mode-render.test.mjs test/knowledge-inbox.test.mjs test/knowledge-baseline.test.mjs test/quick-laststep-fourfields-preview.test.mjs test/doctor-align-execute-progress.test.mjs test/test-ledger.test.mjs test/test-bindings.test.mjs test/flow-draft-binding-extract.test.mjs test/gate-snapshot-lifecycle.test.mjs test/gate-snapshot-cleanup.test.mjs test/verify-trace-residual.test.mjs test/platform-creds-fallback.test.mjs test/archive-timeline-bake.test.mjs test/doc-ref-check.test.mjs test/flow-status-json.test.mjs test/flow-status-title.test.mjs test/flow-resume-title.test.mjs test/datetime-timeago.test.mjs test/resume-domain-flip.test.mjs test/fr-regress-cap-drop.test.mjs test/fr-priority-overlap.test.mjs test/archive-commit-suggest-race.test.mjs test/flow-done-fail-brief.test.mjs test/verify-probes-refresh-backup.test.mjs test/taskcard-yaml-triage-validate.test.mjs test/gate-last-reader.test.mjs test/status-multi-active-list.test.mjs test/gate-docs-only.test.mjs test/probe7-fr-prefill.test.mjs test/plan-fill-batch-config.test.mjs test/step-guide-prune.test.mjs test/gate-stage-review-hint.test.mjs test/design-ref-suggest.test.mjs test/flow-friction-batch3.test.mjs test/wave-auto-adopt.test.mjs test/test-incremental-rerun.test.mjs",
+    "test:core": "node --test test/preview-migration.test.mjs test/preview-progress.test.mjs test/preview-outlet.test.mjs test/preview-gc.test.mjs test/preview-gate-isolation.test.mjs test/db-engine.test.mjs test/db-concurrency.test.mjs test/db-atomic-write.test.mjs test/platform-sync-schema.test.mjs test/platform-sync-serialization.test.mjs test/change-ownership-guards.test.mjs test/watcher.test.mjs test/watcher-alerts.test.mjs test/watcher-timeline.test.mjs test/sentinel-rules.test.mjs test/handoff.test.mjs test/execution-mode-render.test.mjs test/knowledge-inbox.test.mjs test/knowledge-baseline.test.mjs test/quick-laststep-fourfields-preview.test.mjs test/doctor-align-execute-progress.test.mjs test/test-ledger.test.mjs test/test-bindings.test.mjs test/flow-draft-binding-extract.test.mjs test/gate-snapshot-lifecycle.test.mjs test/gate-snapshot-cleanup.test.mjs test/verify-trace-residual.test.mjs test/platform-creds-fallback.test.mjs test/archive-timeline-bake.test.mjs test/doc-ref-check.test.mjs test/flow-status-json.test.mjs test/flow-status-title.test.mjs test/flow-resume-title.test.mjs test/datetime-timeago.test.mjs test/resume-domain-flip.test.mjs test/fr-regress-cap-drop.test.mjs test/fr-priority-overlap.test.mjs test/archive-commit-suggest-race.test.mjs test/flow-done-fail-brief.test.mjs test/verify-probes-refresh-backup.test.mjs test/taskcard-yaml-triage-validate.test.mjs test/gate-last-reader.test.mjs test/status-multi-active-list.test.mjs test/gate-docs-only.test.mjs test/probe7-fr-prefill.test.mjs test/plan-fill-batch-config.test.mjs test/step-guide-prune.test.mjs test/gate-stage-review-hint.test.mjs test/design-ref-suggest.test.mjs test/flow-friction-batch3.test.mjs test/wave-auto-adopt.test.mjs test/test-incremental-rerun.test.mjs test/knowledge-graph.test.mjs test/explore-graph-guidance.test.mjs",
     "test": "node test/run-tests.mjs",
     "lint": "node test/check-syntax.mjs",
     "eval:dry": "node eval/run.mjs --dry-run",

package/src/doctor-diagnostics.js

@@ -1177,10 +1177,20 @@ function detectArchiveIntegrity(cwd, authoritySpecDir) {
   for (const name of names) {
     const dir = join(archiveDir, name);
     const reasons = [];
-    // ② plan.md 在场性
+    // ② plan.md 在场性——thin 协议归档豁免（2026-10-09-archive-integrity-thin-aware）：
+    //    flow-state.yaml 在场 = flow 轻量道归档，plan.md 非其契约面（厚道五阶段 plan 阶段产物）；
+    //    2026-09-29 thin-default 后轻量道成默认路径，一刀切要求 plan.md 把 172 份正常 thin 归档
+    //    全判欠账（检查模型漂移，非真欠账）。任务未勾检查不豁免——thin 也要全勾。
+    const isThinArchive = existsSync(join(dir, 'flow-state.yaml'));
+    // thin 勾选契约 epoch（2026-10-09-archive-integrity-thin-aware）：2026-10-07-thin-tasks-v3 起
+    // tasks.md checkbox 才是进度状态机/完成契约；此前 thin 归档的 tasks.md 是机器占位稿（0 勾为
+    // 当时常态，完成证据=flow done 六子步——change.patch/verify-result 在场性），勾选检查豁免。
+    // 实证：2026-09-25 thin 试验批 17 份 + 09-22/24/27/10-03 共 36 份 0-N 勾归档全属此形态。
+    const THIN_TASKS_EPOCH = '2026-10-07';
+    const isPreEpochThin = isThinArchive && String(name) < THIN_TASKS_EPOCH;
     const planPath = join(dir, 'plan.md');
     const hasPlan = existsSync(planPath);
-    if (!hasPlan) reasons.push('plan.md 缺失（归档自愈基准文件）');
+    if (!hasPlan && !isThinArchive) reasons.push('plan.md 缺失（归档自愈基准文件）');
     // ①③ 任务注册表：tasks.md 优先回退 plan.md；存在但不可读必须显式报（区分「缺席」与「读不了」）。
     // 2026-08-20-task-truth-unify 之前的旧归档完成态勾在 plan.md（tasks.md 是留给后人的未勾任务清单）——
     // tasks.md 有 checkbox 行但 0 勾、而 plan.md 有 ≥1 勾时，完成证据在 plan.md，切 plan.md 为完成源
@@ -1200,7 +1210,9 @@ function detectArchiveIntegrity(cwd, authoritySpecDir) {
       return { total: t, checked: c };
     };
     const regPath = existsSync(tasksPath) ? tasksPath : hasPlan ? planPath : null;
-    if (regPath) {
+    if (regPath && !isPreEpochThin) {
+      // ^ pre-epoch thin 跳过勾选检查（占位稿形态，见 THIN_TASKS_EPOCH 注释）；
+      //   注册表「存在但不可读」显式报的语义对 pre-epoch thin 同样不适用（其不可读非欠账面）
       try {
         let stat = readRegistry(regPath);
         if (regPath === tasksPath && stat.total > 0 && stat.checked === 0 && hasPlan) {
@@ -1506,7 +1518,8 @@ export async function runDoctorDiagnostics({ cwd }) {
     )
   } catch { gateLeakRuntimeRoot = null }
   const gateSnapshotLeak = detectGateSnapshotLeak({ runtimeRoot: gateLeakRuntimeRoot })
-  const dimensions = [multiDb, pointerHealth, changesSplit, changeDb, executeMismatch, docBloat, repoNativeChain, lifecycleDoc, worktreeHealth, buildEnv, mcpEndpoints, applyManifestDrift, selfMaintenanceTax, archiveIntegrity, ceremonyShadow, gateSnapshotLeak];
+  const knowledgeGraphIntegrity = detectKnowledgeGraphIntegrity(cwd, authoritySpecDir || join(cwd, '.sillyspec'))
+  const dimensions = [multiDb, pointerHealth, changesSplit, changeDb, executeMismatch, docBloat, repoNativeChain, lifecycleDoc, worktreeHealth, buildEnv, mcpEndpoints, applyManifestDrift, selfMaintenanceTax, archiveIntegrity, ceremonyShadow, gateSnapshotLeak, knowledgeGraphIntegrity];
 
   return {
     dimensions,
@@ -2168,3 +2181,70 @@ export async function gcUnstampedExecuteRuns({ cwd, specDir = null, confirm = fa
     count: candidates.length,
   }
 }
+
+// ══ 2026-10-08-knowledge-graph（task-05，FR-03）：知识图完整性面 knowledge_graph_integrity ══
+// 六检查项（design §4）：graph-dangling-route / graph-doc-dangling-ref / graph-dangling-anchor /
+// graph-orphan-entry / graph-module-doc-gap / graph-changelog-dangling——全 warning 不阻断
+// （沿 apply_manifest_drift advisory 先例）。图=解析时内存派生（D-003：不落盘不刷新）。
+// 悬空目标可能活在跨仓（local.yaml repos 注册的其他仓）——聚合计数+样本，不逐条刷屏。
+export function detectKnowledgeGraphIntegrity(cwd, specDir) {
+  const base = { name: 'knowledge_graph_integrity', label: '知识图完整性', safe_actions: [] }
+  try {
+    if (!specDir || !existsSync(join(specDir, 'knowledge'))) {
+      return { ...base, findings: ['无 knowledge/ 目录——skipped'], pass: true, severity: null, skipped: true }
+    }
+    // 动态 import 防加载面放大（doctor 主路径不触发图构建成本）
+    const { graphOrphans, graphDangling, buildKnowledgeGraph } = requireKnowledgeGraph()
+    const graph = buildKnowledgeGraph(specDir)
+    const findings = []
+    const sample = (arr, n = 3) => arr.slice(0, n).map(String)
+
+    // ① route 悬空（弱边）：INDEX 路由行指向不存在锚点——条目节点存在性由建图保证，
+    //    此处查目标手册文件本体（file 属性）是否在场
+    const routeTargets = new Set()
+    for (const e of (graph.byEdgeType.get('route') || [])) routeTargets.add(graph.nodes.get(e.t)?.attrs?.file || '')
+    const danglingRoute = [...routeTargets].filter((f) => f && !existsSync(join(specDir, 'knowledge', f)))
+    if (danglingRoute.length > 0) findings.push(`graph-dangling-route：${danglingRoute.length} 条 INDEX 路由指向不存在文件（${sample(danglingRoute).join('、')}）`)
+
+    // ②③ 引用/锚点悬空（中/强边）：文件系统存在性（跨仓目标聚合计数不展开）
+    const dangling = graphDangling(graph)
+    // 跨仓分流（2026-10-09-graph-docrefs-noise）：crossRepo 目标活在独立仓（backend/frontend 等），
+    // 计数注记不点名；本仓悬空点名样本。文档引用面的裸名短引用与跨仓引用在 graphDangling 已豁免。
+    const byStrength = { strong: [], medium: [], weak: [] }
+    let crossRepoCount = 0
+    for (const d of dangling) {
+      if (d.crossRepo) { crossRepoCount++; continue }
+      byStrength[d.strength]?.push(`${d.edge.type}→${d.missing}`)
+    }
+    if (byStrength.strong.length > 0) findings.push(`graph-dangling-anchor：${byStrength.strong.length} 条强边锚点指向本仓不存在文件${crossRepoCount > 0 ? `（另有 ${crossRepoCount} 条跨仓目标不点名——平台代码在独立仓）` : ''}（样本 ${sample(byStrength.strong).join('、')}）`)
+    if (byStrength.medium.length > 0) findings.push(`graph-doc-dangling-ref：${byStrength.medium.length} 条文档引用悬空（样本 ${sample(byStrength.medium).join('、')}）`)
+
+    // ④ 孤儿条目
+    const orphans = graphOrphans(graph)
+    if (orphans.length > 0) findings.push(`graph-orphan-entry：${orphans.length} 个零关联节点（样本 ${sample(orphans.map((o) => o.node.label)).join('、')}）`)
+
+    // ⑤ 模块文档缺口 / ⑥ changelog 行悬空：单一源判定（2026-10-08-graph-summary-consistency）
+    // ——graphModuleDocGaps/graphChangelogDanglings 只在 knowledge-graph.js 定义，summary 四计数
+    // 消费同一函数（口径一处定义两处消费，doctor↔summary 交叉断言钉死，防手抄副本漂移）
+    const { graphModuleDocGaps, graphChangelogDanglings } = requireKnowledgeGraph()
+    const docGap = graphModuleDocGaps(graph)
+    if (docGap.length > 0) findings.push(`graph-module-doc-gap：${docGap.length} 个模块缺卡片或 changelog（样本 ${sample(docGap.map((n) => n.id.replace(/^module:/, ''))).join('、')}）`)
+
+    const chlogDangling = graphChangelogDanglings(graph)
+    if (chlogDangling.length > 0) findings.push(`graph-changelog-dangling：${chlogDangling.length} 条 changelog 行指向不存在变更/ql（样本 ${sample(chlogDangling).join('、')}）`)
+
+    if (findings.length === 0) {
+      return { ...base, findings: [`图完整性六检查通过（${graph.stats.nodeCount} 节点 / ${graph.stats.edgeCount} 边）`], pass: true, severity: null }
+    }
+    return { ...base, findings, pass: false, severity: CHECK_SEVERITY.WARNING }
+  } catch (e) {
+    return { ...base, findings: [`图构建降级（${e?.message || e}）——skipped`], pass: true, severity: null, skipped: true }
+  }
+}
+
+// ESM 同步 require 桥：doctor 主体是同步管线，图模块按需加载（失败走上方 catch 的 skipped 分支）
+import { createRequire as _kgCreateRequire } from 'module'
+const _kgRequire = _kgCreateRequire(import.meta.url)
+function requireKnowledgeGraph() {
+  return _kgRequire('./knowledge-graph.js')
+}

package/src/flow-parity.js

@@ -10,15 +10,21 @@
  *    厚道有轻量变更缺的审计资产；机器合成勿手改。
  * ③ harvestSlot4Decision：design 槽4（风险与死路）实质作答收割合成 decisions.md——轻量变更决策
  *    产出为零的补口（死路与风险取舍正是 decisions.md 该记的内容；已有文件不覆盖）。
+ * ④ writeCloseTraceArtifacts / buildThinSnapshotRows：双通道收尾留痕统一写
+ *    （2026-10-07-unify-close-trace）——thin flow done 与 heavy execute --done 共用一处一次
+ *    写齐四件（沉淀资产面 + 对账快照面，sha256 双套同锚），新变更两通道留痕对称。
  */
 import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs'
 import { join, relative } from 'node:path'
+import { createHash } from 'node:crypto'
 import { execFileSync } from 'node:child_process'
 import { splitOwnVsForeignDiffFiles, commitAttributionForChange, isForeignByCommit, parseChangeNamesFromSubject } from './foreign-declared.js'
 import { collectModuleMaps, normalizeMapPath } from './module-resolve.js'
 import { writeAtomicSync } from './fs-atomic.js'
 import { readV2SectionAnswer } from './flow-review.js'
 import { DESIGN_QUESTIONS } from './flow-draft.js'
+import { pathMatches } from './change-list.js'
+import { classifyToolScaffold, filterDeliverableFiles } from './worktree-apply.js'
 
 /**
  * 模块文档对账（advisory）+ 结构化落盘面（2026-09-27-thin-module-scope-persist）。
@@ -252,7 +258,11 @@ export function collectFreezeFiles({ cwd, specBase, change, committed, exclusive
   const deliverable = (f) => !String(f).replace(/\\/g, '/').startsWith('.sillyspec/')
   let dirty = []
   try {
-    const out = execFileSync('git', ['status', '--porcelain'], { cwd, encoding: 'utf8', timeout: 30000, windowsHide: true })
+    // -uall（2026-10-08-thin-done-dirty-gate-and-paren-attribution）：全新目录会折叠成
+    // `dir/` token（porcelain 缺省形态）——readFileSync(目录) 静默 skip，--freeze-dirty
+    // 声称并入却漏目录内交付文件（dg-freeze 夹具实证 src/ 折叠）。逐文件展开与
+    // scope-audit/flow.js 状态采集口径对齐。
+    const out = execFileSync('git', ['status', '--porcelain', '--untracked-files=all'], { cwd, encoding: 'utf8', timeout: 30000, windowsHide: true })
     for (const line of String(out).split('\n')) {
       if (!line || line.length < 4) continue
       const p = line.slice(3).trim().replace(/^"|"$/g, '')
@@ -272,6 +282,132 @@ export function collectFreezeFiles({ cwd, specBase, change, committed, exclusive
   return { files: [...committed], dirtyAdded: [], dirtyWarned: ownDirty }
 }
 
+/**
+ * thin 通道三态行构造（writeCloseTraceArtifacts 的 snapObj.rows 数据源，纯函数）：
+ * ownFiles 过 filterDeliverableFiles（与 scope-audit actual 侧同口径——治理工件目录不进
+ * 快照行）× design 清单 pathMatches 判三态（planned/unplanned；与主链路三态判定同款）；
+ * stats（collectNumstatByPath 产物 Map）缺档落 null 行数（不出伪数据）；planEntries 空/缺省
+ * → 实际侧 only 行（无 verdict，与主链路计划侧降级同语义）。清单条目未命中冻结面 →
+ * untouched 0/0 补行（跨仓条目带 crossRepo 保持 ⊘ 形态，主链路补行同语义）。
+ * @returns {{ rows: Array<object>, totals: { files: number, additions: number, deletions: number } }}
+ */
+export function buildThinSnapshotRows({ ownFiles, stats, planEntries }) {
+  const plan = Array.isArray(planEntries) ? planEntries : []
+  const statMap = stats instanceof Map ? stats : new Map()
+  const rowFiles = filterDeliverableFiles([...new Set((Array.isArray(ownFiles) ? ownFiles : [])
+    .map((f) => String(f).replace(/\\/g, '/')).filter(Boolean))]).sort()
+  const rows = []
+  const matched = new Set()
+  for (const f of rowFiles) {
+    const st = statMap.get(f) || {}
+    const row = {
+      path: f,
+      additions: Number.isFinite(st.additions) ? st.additions : null,
+      deletions: Number.isFinite(st.deletions) ? st.deletions : null,
+      kind: st.kind || 'modified',
+    }
+    if (plan.length > 0) {
+      const entry = plan.find((e) => e && pathMatches(f, e.path))
+      if (entry) {
+        matched.add(entry.path)
+        row.planned = entry.operation || null
+        row.verdict = 'planned'
+      } else {
+        row.planned = null
+        row.verdict = 'unplanned'
+        const facility = classifyToolScaffold(f)
+        if (facility) row.facility = facility
+      }
+    }
+    rows.push(row)
+  }
+  for (const e of plan) {
+    if (!e || matched.has(e.path)) continue
+    rows.push({
+      path: e.path, planned: e.operation || null, additions: 0, deletions: 0,
+      kind: 'modified', verdict: 'untouched',
+      ...(e.repo ? { crossRepo: e.repo } : {}),
+    })
+  }
+  let additions = 0
+  let deletions = 0
+  for (const r of rows) {
+    if (Number.isFinite(r.additions)) additions += r.additions
+    if (Number.isFinite(r.deletions)) deletions += r.deletions
+  }
+  return { rows, totals: { files: rows.length, additions, deletions } }
+}
+
+/**
+ * heavy 通道沉淀资产面投影（writeCloseTraceArtifacts 的 files/totals 数据源，纯函数；
+ * 2026-10-07-unify-close-trace，评审 P3 覆盖清偿抽纯函数）：rows → 主仓实改行——
+ * untouched 0/0 是声明不是改动、crossRepo 行 patch 不在主仓，均不入；verdict 缺失行
+ * （计划侧降级形态）按实改保留；null 行数不计合计（不出伪数据）。
+ * @returns {{ rows: object[], files: string[], totals: { files: number, additions: number, deletions: number } }}
+ */
+export function projectTraceFaceRows(rows) {
+  const face = (Array.isArray(rows) ? rows : [])
+    .filter((r) => r && typeof r === 'object' && !r.crossRepo && r.verdict !== 'untouched')
+  let additions = 0
+  let deletions = 0
+  for (const r of face) {
+    if (Number.isFinite(r.additions)) additions += r.additions
+    if (Number.isFinite(r.deletions)) deletions += r.deletions
+  }
+  return { rows: face, files: face.map((r) => r.path), totals: { files: face.length, additions, deletions } }
+}
+
+/**
+ * 双通道收尾留痕统一写（2026-10-07-unify-close-trace，缺陷 thin-flow-done-no-scope-
+ * audit-snapshot 修复方向③）：thin（flow done）与 heavy（execute --done）此前各写各的
+ * 留痕（沉淀资产面 change.patch/change-patch.json vs 对账快照面 scope-audit.patch/
+ * scope-audit.json），消费方各认一份致每类变更恰好一张卡失真——本函数一处写齐四件，
+ * sha256/patchStatus 双套同锚（同一 patchText 一次计算：change.patch ≡ scope-audit.patch
+ * 字节一致、两 json 同 hash，两套留痕不可能漂移）。patchText 空/null → 双套同标 failed、
+ * 不落 patch 文件（heavy 旧「空串当 ok」形态收口）。读侧兼容链（快照 > change-patch
+ * 回放 > 实时区间，2026-10-07-scope-audit-thin-patch-replay）不动——本函数让新变更两套
+ * 齐备，回退退化为存量归档兜底。
+ *
+ * @param {string} changeDir 变更目录（活跃或归档侧——归档竞态由调用方解析）
+ * @param {object} snapObj scope-audit.json 主体（mode/ok/degradedReason/baseAnchor/totals/
+ *   rows/excluded/note[/repos]；closedBy 由调用方携带标收尾通道——读侧回放按它标注，
+ *   缺省 'execute --done' 兼容旧快照）
+ * @param {object} meta change-patch.json 增量键（note/moduleScope 等，展开在 totals 后）
+ * @returns {{ patchStatus: 'ok'|'failed', patchSha256: string|null }}
+ */
+export function writeCloseTraceArtifacts({ changeDir, change, baseline, head, files, metaTotals, patchText, savedAt, snapObj, meta = {} }) {
+  const fileList = Array.isArray(files) ? files : []
+  const patchOk = typeof patchText === 'string' && patchText.length > 0
+  const patchBody = patchOk ? (patchText.endsWith('\n') ? patchText : patchText + '\n') : null
+  const patchSha256 = patchBody
+    ? createHash('sha256').update(patchBody.replace(/\r\n/g, '\n'), 'utf8').digest('hex')
+    : null
+  if (patchOk) {
+    writeFileSync(join(changeDir, 'change.patch'), patchBody)
+    writeFileSync(join(changeDir, 'scope-audit.patch'), patchBody)
+  }
+  writeFileSync(join(changeDir, 'change-patch.json'), JSON.stringify({
+    change,
+    baseline: baseline ?? null,
+    head: head ?? null,
+    files: fileList,
+    totals: metaTotals && typeof metaTotals === 'object'
+      ? metaTotals
+      : { files: fileList.length, additions: 0, deletions: 0 },
+    savedAt,
+    ...meta,
+    ...(patchSha256 ? { patchSha256 } : {}),
+    patchStatus: patchOk ? 'ok' : 'failed',
+  }, null, 2) + '\n')
+  writeFileSync(join(changeDir, 'scope-audit.json'), JSON.stringify({
+    ...snapObj,
+    ...(patchSha256 ? { patchSha256 } : {}),
+    patchStatus: patchOk ? 'ok' : 'failed',
+    savedAt,
+  }, null, 2) + '\n')
+  return { patchStatus: patchOk ? 'ok' : 'failed', patchSha256 }
+}
+
 /**
  * 实测面回填（修复③：ledger 子步断点续跑 skip 后回执不失忆）——从 verify-runs 最近
  * test-result.json（带 change 键）重建摘要；无匹配返回 null。

package/src/flow-review.js

@@ -244,6 +244,10 @@ export function renderReviewerTaskbook({ change, changeDir, head = null }) {
     `  5. 生成物同步（如涉及）：类型/契约文件与实现对齐？`,
     ``,
     `【纪律】只读——禁止修改任何文件、禁止 git 操作；唯一产物是 review.json。`,
+    // 代行惯例（坑 flow-done-sentinel-token-split ②，2026-10-08 实证）：宿主无已注册子代理
+    // 通道时无法照做「起子代理」——主会话按检查单代行自审可接受，reviewer 字段如实标注
+    // 降级（如 inline-self（环境无已注册子代理）），独立性承诺的折扣显式留痕。
+    `【无子代理通道时】宿主 agents 目录为空 → 主会话可按检查单代行自审，reviewer 字段如实标注（如 "inline-self（环境无已注册子代理，主会话代行）"）——降级留痕，勿伪装 subagent。`,
     ``,
     `【产物 schema（写到 ${join(changeDir, 'review.json')}，UTF-8 JSON）】`,
     `{`,

package/src/flow.js

@@ -26,7 +26,6 @@
  * 幂等循 task-done 先例：子步各查自身完成标记，中断半态重入断点续，中段失败精确报告。
  */
 import { existsSync, readFileSync, writeFileSync, readdirSync, appendFileSync, renameSync, statSync } from 'node:fs'
-import { createHash } from 'node:crypto'
 import { join, relative, dirname } from 'node:path'
 import yaml from 'js-yaml'
 import { git, gitQuiet } from './git-helper.js'
@@ -287,7 +286,9 @@ export async function flowKnowledgeDigest({ specBase, change, changeDir, input,
     }
     const { matchKnowledgeHybrid } = await import('./knowledge-vector.js')
     const { deathPathNote } = await import('./knowledge-match.js')
-    const km = await matchKnowledgeHybrid(knowledgeRoot, `${change}\n${input || ''}`, { cwd: dirname(specBase) })
+    // scope 遍历召回（2026-10-08-knowledge-graph，FR-04）：touched=机器算的图查询键
+    // （filesOverride ∪ design 交付表——上方既有变量），词面三层零命中时沿强边保底防复潮
+    const km = await matchKnowledgeHybrid(knowledgeRoot, `${change}\n${input || ''}`, { cwd: dirname(specBase), scopeFiles: touched })
     // 防复潮面 = 死路注记 ∪ 有主题重叠的 rejected（2026-09-28-knowledge-inject-ranking 起 rejected∪死路；
     // 2026-09-28-knowledge-gate-denoise 收紧：score 零的 rejected 与查询零主题重叠——空标题条目靠状态
     // 蹭进回显是行为实测三例的噪音源，不再注入）
@@ -863,7 +864,7 @@ export function remainingSubstepsAtFail({ snapshotSubsteps = {}, doneList = [],
   return SUBSTEPS.filter((k) => k !== failed && snapshotSubsteps?.[k] !== 'done' && !doneNow.has(k))
 }
 
-export async function cmdFlowDone({ change, cwd, specBase, runtimeRootOpt = null, confirmArchive = true, freezeDirty = false, allowBatchTick = false }) {
+export async function cmdFlowDone({ change, cwd, specBase, runtimeRootOpt = null, confirmArchive = true, freezeDirty = false, acceptDirtyGap = false, allowBatchTick = false }) {
   const changeDir = join(specBase, 'changes', change)
   const st = readFlowState(changeDir)
   if (!st) {
@@ -994,7 +995,10 @@ export async function cmdFlowDone({ change, cwd, specBase, runtimeRootOpt = null
         if (_tickLog) {
           const _commitTexts = String(_tickLog).split('\x1e').map(x => x.trim()).filter(Boolean).join('\n')
           const _evidencedTasks = new Set()
-          for (const m of _commitTexts.matchAll(/task-(\d{1,2})/gi)) _evidencedTasks.add(String(Number(m[1])).padStart(2, '0'))
+          // 连写组展开（坑 flow-done-sentinel-token-split）：task-01/02/03 的 02/03 缩写不带
+          // task- 前缀、裸正则提取不到——与哨兵判定同口径先展开再提。
+          const { expandTaskShorthand } = await import('./sentinel-assertions.js')
+          for (const m of expandTaskShorthand([_commitTexts])[0].matchAll(/task-(\d{1,2})/gi)) _evidencedTasks.add(String(Number(m[1])).padStart(2, '0'))
           if (_evidencedTasks.size > 0) {
             let _tasksMd = readFileSync(_tasksMdPath, 'utf8')
             let _autoTicked = 0
@@ -1396,11 +1400,30 @@ export async function cmdFlowDone({ change, cwd, specBase, runtimeRootOpt = null
         }
         if (freeze.dirtyWarned.length > 0) {
           console.warn(`⚠️ ${freeze.dirtyWarned.length} 个未提交交付文件未入冻结面（共享主仓无法归属）——三选一：`)
-          console.warn(`   ① 本次接受缺口（审计面少这些文件）② 确认全部归属本变更：重跑 flow done --freeze-dirty 并入冻结 ③ 下次用会话专属 worktree。Git 中间提交可归档后压扁（见收口指引）`)
+          console.warn(`   ① 先提交这些文件（信息尾缀带变更名）后重跑 ② 确认全部归属本变更：重跑 flow done --freeze-dirty 并入冻结 ③ 确认接受审计缺口：重跑 flow done --accept-dirty-gap（缺口数随 change-patch.json 留痕）。Git 中间提交可归档后压扁（见收口指引）`)
           console.warn(`   ${freeze.dirtyWarned.slice(0, 3).join('、')}${freeze.dirtyWarned.length > 3 ? ' 等' : ''}`)
+          // 收口阻断门（2026-10-08-thin-done-dirty-gate-and-paren-attribution，坑①修复：
+          // multi-agent-platform docs/sillyspec/thin-done-src-commit-order-and-attribution-paren.md）
+          // ——旧行为警告后继续归档，autopilot 单跑到底把三选一变成不可达选项（归档即拒收重入）。
+          // 缺口在场且未显式处置 → 停在 patch 子步标记之前（半态可重入，与 review 中断同款
+          // exit 语义）：处置后重跑，patch 全量重建自动并入已提交 src。
+          if (!freezeDirty && !acceptDirtyGap) {
+            console.error('⛔ 未提交交付缺口未显式处置——收口阻断（不归档；处置后重跑同一条命令从断点续）：')
+            console.error(`   ① git commit 这些文件（信息尾缀带 (${change}) 或 （${change}），重跑本命令——冻结面自动并入`)
+            console.error(`   ② 全部归属本变更：flow done --change ${change} --freeze-dirty`)
+            console.error(`   ③ 接受审计缺口：flow done --change ${change} --accept-dirty-gap`)
+            reportMidFail('patch')
+            process.exit(1)
+          }
+          if (acceptDirtyGap) {
+            // 双 flag 同给时 --freeze-dirty 优先（exclusive 路径 dirtyWarned 恒空，本分支不进
+            // ——设计接口契约已披露；无告警代码即无死代码，二轮评审 P3 清偿）
+            console.warn(`⚠️ --accept-dirty-gap：显式接受 ${freeze.dirtyWarned.length} 个未提交交付文件不进冻结面（缺口数随 change-patch.json acceptedDirtyGap 留痕）`)
+          }
         }
         const ownFiles = [...new Set([...freeze.files, ...changeDirFiles])]
-          .filter((f) => f && !f.endsWith('change.patch') && !f.endsWith('change-patch.json'))
+          .filter((f) => f && !f.endsWith('change.patch') && !f.endsWith('change-patch.json')
+            && !f.endsWith('scope-audit.json') && !f.endsWith('scope-audit.patch'))
         if (ownFiles.length === 0) {
           console.log('📦 patch 留档跳过：本变更可归属文件面为空')
           patchOk = true
@@ -1416,7 +1439,8 @@ export async function cmdFlowDone({ change, cwd, specBase, runtimeRootOpt = null
           // diff 能捕捉提交后编辑）∪ 独占树未提交交付（dirtyAdded）；其余交付面走提交区间。
           // 排除项与 ownFiles 同款（change.patch/change-patch.json）——否则上一轮冻结件作为
           // untracked 新文件被全文自嵌入（自引用循环：旧 patch 内容混进新 patch，三评 P1 根因）。
-          const dirFilesForPatch = changeDirFiles.filter((f) => !f.endsWith('change.patch') && !f.endsWith('change-patch.json'))
+          const dirFilesForPatch = changeDirFiles.filter((f) => !f.endsWith('change.patch') && !f.endsWith('change-patch.json')
+            && !f.endsWith('scope-audit.json') && !f.endsWith('scope-audit.patch'))
           const worktreeSet = new Set([...dirFilesForPatch, ...((freeze.dirtyAdded) || [])].map(toPosix))
           const committedFace = freeze.files.map(toPosix).filter((f) => !worktreeSet.has(f))
           const frozenCommitted = buildFrozenPatch(cwd, committedFace, { baseRef: st.baseline_commit, headRef: headCommit })
@@ -1445,28 +1469,46 @@ export async function cmdFlowDone({ change, cwd, specBase, runtimeRootOpt = null
             if (rec.lines.length > 0) for (const l of rec.lines) console.log(l)
             moduleScope = { modules: rec.modules, uncoveredDirs: rec.uncoveredDirs, moduleMaps: rec.moduleMaps }
           } catch { /* 对账 best-effort（三键空数组兜底） */ }
-          const meta = {
+          // 双通道收尾留痕统一（2026-10-07-unify-close-trace）：共用 writeCloseTraceArtifacts
+          // 一次写齐四件——沉淀资产面（change.patch + change-patch.json，键结构/口径不变）+
+          // 对账快照面（scope-audit.json + scope-audit.patch，thin 通道新增）：同点同锚
+          // （同一 patchText 一次 sha256），新变更两条通道留痕对称，读侧回退退化为存量兜底。
+          let planEntries = []
+          try {
+            const { parseFileChangeListDetailed } = await import('./change-list.js')
+            planEntries = parseFileChangeListDetailed(join(changeDir, 'design.md'), { keepSillyspecDocs: true })
+          } catch { /* 清单缺失/不可解析 → 实际侧 only 快照行（无 verdict，与主链路降级同语义） */ }
+          const { buildThinSnapshotRows, writeCloseTraceArtifacts } = await import('./flow-parity.js')
+          const { rows: snapRows, totals: snapTotals } = buildThinSnapshotRows({ ownFiles, stats, planEntries })
+          const closeTrace = writeCloseTraceArtifacts({
+            changeDir,
             change,
             baseline: st.baseline_commit,
             head: typeof head === 'string' ? head.trim() : null,
             files: ownFiles,
-            totals: { files: ownFiles.length, additions, deletions },
+            metaTotals: { files: ownFiles.length, additions, deletions },
+            patchText: typeof frozen === 'string' && frozen ? frozen : null,
             savedAt: new Date().toISOString(),
-            note: 'flow done 时点冻结（本变更可归属面：baseline..HEAD 提交面过滤 .sillyspec/ 非本变更目录但保留 .sillyspec/docs/ 交付文档 + 本变更目录工作树件；含未提交与 untracked，排除 flow-state.yaml 运行态）',
-            // 模块对账结构化面（2026-09-27-thin-module-scope-persist）：done 时点口径（与 files[]
-            // 同时点语义，不随模块图后续变更回写）；modules[] 空≠无影响（可能未登记——看 uncoveredDirs）
-            ...moduleScope,
-          }
-          if (typeof frozen === 'string' && frozen) {
-            const patchText = frozen.endsWith('\n') ? frozen : frozen + '\n'
-            writeFileSync(join(changeDir, 'change.patch'), patchText)
-            meta.patchSha256 = createHash('sha256').update(patchText.replace(/\r\n/g, '\n'), 'utf8').digest('hex')
-            meta.patchStatus = 'ok'
-          } else {
-            meta.patchStatus = 'failed'
-          }
-          writeFileSync(join(changeDir, 'change-patch.json'), JSON.stringify(meta, null, 2) + '\n')
-          console.log(`📦 变更 patch 留档：change.patch + change-patch.json（${ownFiles.length} 文件，+${additions}/-${deletions}${meta.patchStatus === 'ok' ? '，sha256 已锚' : '——patch 采集失败已留痕'}）`)
+            snapObj: {
+              mode: 'full-flow', ok: true, degradedReason: null,
+              baseAnchor: st.baseline_commit || null,
+              totals: snapTotals,
+              rows: snapRows,
+              excluded: { foreignDeclared: [] },
+              note: 'flow done 时点冻结（本文件落盘时采集）',
+              closedBy: 'flow done',
+            },
+            meta: {
+              note: 'flow done 时点冻结（本变更可归属面：baseline..HEAD 提交面过滤 .sillyspec/ 非本变更目录但保留 .sillyspec/docs/ 交付文档 + 本变更目录工作树件；含未提交与 untracked，排除 flow-state.yaml 运行态）',
+              // 模块对账结构化面（2026-09-27-thin-module-scope-persist）：done 时点口径
+              // （与 files[] 同时点语义，不随模块图后续变更回写）；modules[] 空≠无影响
+              ...moduleScope,
+              // dirty 缺口显式接受留痕（2026-10-08-thin-done-dirty-gate-and-paren-attribution）：
+              // --accept-dirty-gap 放行时缺口数入档（审计面可见，非只 console）
+              ...(acceptDirtyGap && freeze.dirtyWarned.length > 0 ? { acceptedDirtyGap: freeze.dirtyWarned.length } : {}),
+            },
+          })
+          console.log(`📦 变更 patch 留档（双轨统一）：change.patch + change-patch.json（${ownFiles.length} 文件，+${additions}/-${deletions}）+ scope-audit.json + scope-audit.patch（对账快照同点冻结）${closeTrace.patchStatus === 'ok' ? '，sha256 已锚' : '——patch 采集失败已留痕'}`)
           // design 声明面自证（2026-09-25-platform-feedback-batch2 E）：design.md 文件变更清单
           // 声明的交付文件是否都在冻结面——不在=承诺改了但没交付（承诺未兑现面，advisory 不
           // 阻断——可能是范围裁剪了但 design 没同步更新）
@@ -2051,7 +2093,7 @@ export async function cmdFlow(args, cwd, specDir = null, opts = {}) {
         console.log('🔄 --refreeze：patch 子步标记已重置，本次 done 将重新冻结（change.patch 按 baseline..HEAD 最新面重建）')
       }
     }
-    return cmdFlowDone({ change, cwd, specBase, runtimeRootOpt, freezeDirty: hasFlag('--freeze-dirty'), allowBatchTick: hasFlag('--allow-batch-tick') })
+    return cmdFlowDone({ change, cwd, specBase, runtimeRootOpt, freezeDirty: hasFlag('--freeze-dirty'), acceptDirtyGap: hasFlag('--accept-dirty-gap'), allowBatchTick: hasFlag('--allow-batch-tick') })
   }
   if (sub === 'amend-draft') {
     // 机器稿唯一留痕修改通道（R7 切片三 / FR-08）：重锚哈希 + ledger amendment 审计；

package/src/foreign-declared.js

@@ -204,12 +204,16 @@ function loadOwnDeclaredSet(specBase, runtimeRoot, currentChangeName) {
 
 /**
  * 提交标题 → 变更名数组（2026-10-05-diff-commit-attribution）：项目提交惯例 message 尾部
- * 携带 "(2026-MM-DD-名)" 后缀（多变更并列各自提取；归档提交 chore(archive): <名> 的标题
- * 首部同名形态不提取——归档提交触碰的是治理面移动，交付文件归属看交付提交）。
+ * 携带变更名括号后缀（多变更并列各自提取；归档提交 chore(archive): <名> 的标题首部同名
+ * 形态不提取——归档提交触碰的是治理面移动，交付文件归属看交付提交）。
+ * 括号形态双收（2026-10-08-thin-done-dirty-gate-and-paren-attribution，坑
+ * thin-done-src-commit-order-and-attribution-paren：中文输入法惯例写全角
+ * `（thin <名>；…）`，旧正则只认半角 → drift 归因静默失灵）：开/闭括号半全角任意组合，
+ * 括号内允许 `thin ` 前缀与名字后附注文本；变更名本体模式（日期前缀 + 白名单字符）不放宽。
  */
 export function parseChangeNamesFromSubject(subject) {
   const out = []
-  const re = /\((\d{4}-\d{2}-\d{2}-[A-Za-z0-9._-]+)\)/g
+  const re = /[（(]\s*(?:thin\s+)?(\d{4}-\d{2}-\d{2}-[A-Za-z0-9._-]+)[^()（）]*[)）]/g
   let m
   while ((m = re.exec(String(subject || '')))) out.push(m[1])
   return out

package/src/init.js

@@ -270,11 +270,12 @@ export function injectClaudePointer(projectDir) {
 
 // ── 检测工具 ──
 
-function detectTools(projectDir) {
+export function detectTools(projectDir) {
   const found = [];
   if (existsSync(join(projectDir, '.claude'))) found.push('claude');
   if (existsSync(join(projectDir, '.cursor'))) found.push('cursor');
   if (existsSync(join(projectDir, '.openclaw'))) found.push('openclaw');
+  if (existsSync(join(projectDir, '.zcode'))) found.push('zcode');
   if (existsSync(join(projectDir, 'AGENTS.md'))) found.push('codex');
   if (existsSync(join(projectDir, 'GEMINI.md'))) found.push('gemini');
   if (existsSync(join(projectDir, 'INSTRUCTIONS.md'))) found.push('opencode');
@@ -480,6 +481,9 @@ async function doInstall(projectDir, tools, subprojects = [], specDir = null, op
     codex: '.codex/skills',
     openclaw: '.openclaw/skills',
     opencode: '.opencode/skills',
+    // zcode（坑 init-skills-sync-no-zcode，2026-10-08 实证：命令卡面有落点、技能复制面漏——
+    // .zcode/skills 已在场时 detectTools 不发现 + 显式 --tool zcode 也拿不到技能，双层缺口）
+    zcode: '.zcode/skills',
   }
   const skillsSource = join(__dirname, '..', '.claude', 'skills');
   if (existsSync(skillsSource)) {