sillyspec 3.33.3 → 3.33.5

package/src/progress/stage-machine.js

@@ -9,6 +9,9 @@ import { writeAtomicSync } from '../fs-atomic.js';
 import { timeAgo } from '../datetime.js';
 import { runValidators } from '../stage-contract.js';
 import { QUICK_SID_RE } from '../run/shared.js';
+// thin 出身投影读 flow-state（2026-10-21-overview-thin-stage）：叶子模块，与 progress.js
+// 2026-10-13-thin-sync-stage 同款 import 先例，零新依赖链。
+import { readFlowState } from '../flow-state.js';
 import { VALID_STAGES, STAGE_LABELS, STAGE_ORDER, MAIN_FLOW_ORDER, SPEC_DIR_NAME, CURRENT_VERSION, STALL_WARN_DAYS, emptyStage } from './shared.js';
 
 // quick 会话行（quick-<8hex>）按设计无实体 changes/ 目录（progress.js initChange 跳过建目录），
@@ -314,12 +317,22 @@ export class StageMachine {
     for (const cn of changes) {
       const data = this.pm.read(cwd, cn);
       const dirMissing = _isGhostChange(changesRoot, cn);
+      // thin 出身投影（2026-10-21-overview-thin-stage，对齐 2026-10-13-thin-sync-stage
+      // 平台上行同款覆写）：本地行出生恒 'brainstorm'（thin 不走阶段机），总览按
+      // flow-state tier 覆写展示值——否则面板把轻量变更渲染成 brainstorm 主管线。仅覆写
+      // envelope 载荷，DB 行不动；listChanges 恒回 active 行（归档不进循环，sync 侧的
+      // status 守卫在此天然满足）；flow-state 缺失/损坏 readFlowState→null、tier=thick
+      // 一律按行值（fail-open 同 sync 口径）。
+      let currentStage = data?.currentStage || null;
+      if (currentStage && readFlowState(this.pm._changePath(cwd, cn))?.tier === 'thin') {
+        currentStage = 'thin';
+      }
       const entry = {
         name: cn,
         readable: !!data,
         ghost: dirMissing,
-        current_stage: data?.currentStage || null,
-        stage_label: data ? (STAGE_LABELS[data.currentStage] || data.currentStage || null) : null,
+        current_stage: currentStage,
+        stage_label: currentStage ? (STAGE_LABELS[currentStage] || currentStage) : null,
         last_active: this.pm._dumpIso(data?.lastActive) || null,
       };
       if (data) {

package/src/progress.js

@@ -12,6 +12,7 @@
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync, unlinkSync, appendFileSync, copyFileSync, readdirSync, statSync, realpathSync } from 'fs';
 import { RUNTIME_TEMP_DIRNAME, runtimeTempPath } from './runtime-paths.js'
+import { timedSync } from './timing.js';
 import { join, basename, dirname, resolve, sep } from 'path';
 import { tmpdir, hostname } from 'os';
 import { writeAtomicSync } from './fs-atomic.js';
@@ -959,6 +960,10 @@ export class ProgressManager {
   }
 
   _write(cwd, data, changeName = null) {
+    return timedSync('state-write', () => this._writeImpl(cwd, data, changeName))
+  }
+
+  _writeImpl(cwd, data, changeName = null) {
     const cn = changeName || data.currentChange;
     if (!cn) {
       console.warn('⚠️  _write: 无变更名，跳过写入');

package/src/redomain-unmapped.js

@@ -0,0 +1,204 @@
+/**
+ * redomain-unmapped.js — unmapped 停车场存量批量清偿驱动（FR-04，2026-10-21-knowledge-tier-denoise）
+ *
+ * 决策/FR 条目落 unmapped 是域路由失败的兜底——源头匹配器已修（2026-10-15-module-path-glob-match），
+ * 存量需机器通道清偿（decision-redomain.js 头注：迁移原语已在，缺批量推断与编排）。本模块即编排：
+ *   - decisions 条目：文件锚（「文件：」字段行）逐文件 matchedModuleIds 投票 → 目标真模块域
+ *   - fr 条目：来源变更覆盖面（frCoverageFiles 三源：归档 design 交付表 ∪ change-patch ∪ git）→ 同款投票
+ *   - 投票零命中/无锚 → 留 unmapped 并在报告列明残量原因（宁漏勿错，不裸删）
+ * 迁移原语复用 redomainDecisionEntries / redomainFrEntries：段字节整体搬运、迁域不换号、
+ * 目标域同 id 同变更冲突跳过、幂等；INDEX 路由行随原语内 sync 维护（FR-02 泛词已退役）。
+ * 只动 knowledge 活库，不回写归档件（D-unmapped-152 死路：归档是冻结审计面）。
+ */
+import { existsSync, readFileSync } from 'fs'
+import { join } from 'path'
+import { splitKnowledgeSections, discoverModuleIndex } from './decision-distill.js'
+import { matchedModuleIds, frCoverageFiles, FR_SECTION_RE } from './fr-index.js'
+import { anchorFilePaths } from './knowledge-match.js'
+import { redomainDecisionEntries, sectionMeta } from './decision-redomain.js'
+import { redomainFrEntries } from './redomain.js'
+
+const DECISION_FILE_LINE_RE = /^文件[：:]\s*(.+)$/
+const DECISION_ANCHOR_LINE_RE = /^锚点[：:]\s*(.*)$/
+const FR_HEADER_RE = /^## (FR-[\w.-]+-\d+|FR-\d+)\s*(.*)$/
+
+/** 决策段 → 路径数组：双源——「文件：」行集（显式字段）∪「锚点：」行 anchorFilePaths 路径
+ *  提取（本仓实证 443 条全走锚点源：distill 的 文件： 字段极少发射，锚点是标准兜底
+ *  命中源——与 knowledge-match/knowledge-graph 的 anchors 边同判法）。 */
+function filesFromDecisionSection(lines) {
+  const out = []
+  for (const l of lines) {
+    const line = String(l || '')
+    const m = line.match(DECISION_FILE_LINE_RE)
+    if (m) out.push(...String(m[1]).split(/[,，、\s]+/).map((s) => s.replace(/\\/g, '/')).filter(Boolean))
+    const a = line.match(DECISION_ANCHOR_LINE_RE)
+    if (a) out.push(...anchorFilePaths(a[1]))
+  }
+  return out
+}
+
+/** FR 段「变更：」行（source change 迁移过滤键同款判法）。 */
+function changeFromSection(lines) {
+  for (const l of lines) {
+    const m = String(l || '').match(/^变更[：:]\s*(\S+)/)
+    if (m) return m[1]
+  }
+  return null
+}
+
+/** 文件集 → 目标域投票：逐文件 matchedModuleIds（修复后的 glob 匹配器，多命中并计），
+ *  最高票为域；平票字典序（确定性）。零命中 → null（留停车场）。 */
+function voteDomain(files, moduleIndex) {
+  const tally = new Map()
+  for (const f of files) {
+    for (const mid of matchedModuleIds(moduleIndex, f)) tally.set(mid, (tally.get(mid) || 0) + 1)
+  }
+  if (tally.size === 0) return null
+  return [...tally.entries()].sort((a, b) => (b[1] - a[1]) || (a[0] < b[0] ? -1 : 1))[0][0]
+}
+
+function planDecisionsFace(knowledgeRoot, archiveRoot, moduleIndex) {
+  const fromPath = join(knowledgeRoot, 'decisions', 'unmapped.md')
+  if (!existsSync(fromPath)) return { absent: true, groups: [], leftover: [] }
+  const parsed = splitKnowledgeSections(readFileSync(fromPath, 'utf8'))
+  const groups = new Map()
+  const leftover = []
+  for (const s of parsed.sections) {
+    const meta = sectionMeta(s)
+    if (!meta) continue
+    // 三源：文件： 行 ∪ 锚点路径（显式锚优先）→ 都不中再走来源变更覆盖面（fr 面同款——
+    // 本仓实证 417/443 锚点「未记录」，436/443 有「变更：」行，覆盖面是主力推断源）
+    const files = filesFromDecisionSection(s.lines)
+    const change = changeFromSection(s.lines)
+    let domain = files.length > 0 ? voteDomain(files, moduleIndex) : null
+    if (!domain && change) {
+      const cov = [...frCoverageFiles({ archiveRoot, changeName: change })]
+      if (cov.length > 0) domain = voteDomain(cov, moduleIndex)
+    }
+    if (!domain) {
+      const reason = files.length === 0
+        ? (change ? '锚点无路径且来源覆盖面不命中任何模块' : '无文件锚/锚点路径且无来源变更')
+        : '锚不命中任何模块'
+      leftover.push({ id: meta.id, title: meta.title, reason })
+      continue
+    }
+    if (!groups.has(domain)) groups.set(domain, [])
+    groups.get(domain).push(meta.id)
+  }
+  return {
+    groups: [...groups.entries()].map(([domain, ids]) => ({ domain, ids })),
+    leftover,
+    total: parsed.sections.filter((s) => sectionMeta(s)).length,
+  }
+}
+
+function planFrFace(knowledgeRoot, archiveRoot, moduleIndex) {
+  const fromPath = join(knowledgeRoot, 'fr', 'unmapped.md')
+  if (!existsSync(fromPath)) return { absent: true, groups: [], leftover: [] }
+  const parsed = splitKnowledgeSections(readFileSync(fromPath, 'utf8'), { sectionRegex: FR_SECTION_RE, buildId: (n) => n })
+  const groups = new Map()
+  const leftover = []
+  for (const s of parsed.sections) {
+    const h = FR_HEADER_RE.exec(s.lines[0] || '')
+    if (!h) continue
+    const id = h[1]
+    const title = (h[2] || '').trim()
+    const change = changeFromSection(s.lines)
+    const files = change ? [...frCoverageFiles({ archiveRoot, changeName: change })] : []
+    const domain = files.length > 0 ? voteDomain(files, moduleIndex) : null
+    if (!domain) {
+      leftover.push({ id, title, reason: !change ? '无来源变更' : '来源变更覆盖面不命中任何模块' })
+      continue
+    }
+    if (!groups.has(domain)) groups.set(domain, [])
+    groups.get(domain).push(id)
+  }
+  return {
+    groups: [...groups.entries()].map(([domain, ids]) => ({ domain, ids })),
+    leftover,
+    total: parsed.sections.filter((s) => FR_HEADER_RE.exec(s.lines[0] || '')).length,
+  }
+}
+
+/**
+ * 干跑计划：各面分组（目标域 → 条目 id 集）与残量（id/标题/不可推断原因）。
+ * @param {{knowledgeRoot: string, archiveRoot: string}} opts
+ * @returns {{decisions: object, fr: object}} 各面 {absent?, groups, leftover, total?}
+ */
+export function planUnmappedRedomain({ knowledgeRoot, archiveRoot }) {
+  const moduleIndex = discoverModuleIndex(knowledgeRoot) || { modules: {} }
+  return {
+    decisions: planDecisionsFace(knowledgeRoot, archiveRoot, moduleIndex),
+    fr: planFrFace(knowledgeRoot, archiveRoot, moduleIndex),
+  }
+}
+
+/**
+ * 执行清偿（先内部重算计划——apply 自带干跑等价性；幂等：重跑同批 0 迁移）。
+ * 单组失败不拦其余组（逐组收集结果与错误如实上报）。
+ * @param {{knowledgeRoot: string, archiveRoot: string, faces?: string[]}} opts faces 缺省双面
+ * @returns {{results: object, plan: object}} results 各面 {moved, movedByDomain, skippedConflicts, errors}
+ */
+export function applyUnmappedRedomain({ knowledgeRoot, archiveRoot, faces = ['decisions', 'fr'] }) {
+  const plan = planUnmappedRedomain({ knowledgeRoot, archiveRoot })
+  const empty = { moved: 0, movedByDomain: {}, skippedConflicts: [], errors: [] }
+  const results = {}
+  const run = (groups, migrate) => {
+    const acc = { moved: 0, movedByDomain: {}, skippedConflicts: [], errors: [] }
+    for (const g of groups) {
+      try {
+        const res = migrate(g)
+        acc.moved += res.moved.length
+        acc.movedByDomain[g.domain] = res.moved.length
+        if (Array.isArray(res.skippedConflicts)) acc.skippedConflicts.push(...res.skippedConflicts.map((id) => `${g.domain}:${id}`))
+      } catch (e) {
+        acc.errors.push({ domain: g.domain, error: e && e.message ? e.message : String(e) })
+      }
+    }
+    return acc
+  }
+  results.decisions = faces.includes('decisions')
+    ? run(plan.decisions.groups,
+        (g) => redomainDecisionEntries({ knowledgeRoot, from: 'unmapped', to: g.domain, anchors: g.ids }))
+    : { ...empty }
+  results.fr = faces.includes('fr')
+    ? run(plan.fr.groups,
+        (g) => redomainFrEntries({ knowledgeRoot, from: 'unmapped', to: g.domain, anchors: g.ids }))
+    : { ...empty }
+  return { results, plan }
+}
+
+/**
+ * CLI 子命令（stages/knowledge.js 经 tryImportSubcommandImpl 装载）：
+ * sillyspec knowledge redomain-unmapped [--face decisions|fr] [--apply]
+ * 缺省 dry-run 只出报告（JSON 出口与 search/graph 同族）；--apply 幂等落盘。
+ */
+export async function cmdRedomainUnmapped(dir, args, opts = {}) {
+  const specBase = opts.specDir || join(dir, '.sillyspec')
+  const knowledgeRoot = join(specBase, 'knowledge')
+  const archiveRoot = join(specBase, 'changes', 'archive')
+  const face = args.includes('--face')
+    ? (args[args.indexOf('--face') + 1] === 'decisions' ? 'decisions' : args[args.indexOf('--face') + 1] === 'fr' ? 'fr' : 'all')
+    : 'all'
+  const apply = args.includes('--apply')
+  const emit = (ok, data, error) => console.log(JSON.stringify({ ok, ...data, ...(error ? { error } : {}) }, null, 2))
+
+  if (!existsSync(join(knowledgeRoot, 'INDEX.md'))) {
+    emit(false, {}, { code: 'knowledge_dir_missing', path: knowledgeRoot })
+    return
+  }
+  if (apply) {
+    const faces = face === 'all' ? ['decisions', 'fr'] : [face]
+    const { results, plan } = applyUnmappedRedomain({ knowledgeRoot, archiveRoot, faces })
+    const leftoverFace = (name) => (faces.includes(name) ? plan[name].leftover : [])
+    emit(true, {
+      mode: 'apply', face,
+      decisions: results.decisions,
+      fr: results.fr,
+      leftover: { decisions: leftoverFace('decisions'), fr: leftoverFace('fr') },
+    })
+    return
+  }
+  const plan = planUnmappedRedomain({ knowledgeRoot, archiveRoot })
+  emit(true, { mode: 'dry-run', face, decisions: plan.decisions, fr: plan.fr })
+}

package/src/redomain.js

@@ -14,7 +14,7 @@
  */
 import { existsSync, readFileSync, writeFileSync, unlinkSync } from 'fs'
 import { join } from 'path'
-import { splitKnowledgeSections, joinKnowledgeFile, syncIndexRoutingLines } from './decision-distill.js'
+import { splitKnowledgeSections, joinKnowledgeFile, syncIndexRoutingLines, FR_ROUTE_STRIP_TOKENS } from './decision-distill.js'
 import { FR_SECTION_RE } from './fr-index.js'
 import { writeAtomicSync } from './fs-atomic.js'
 
@@ -141,9 +141,11 @@ export function redomainFrEntries({ knowledgeRoot, from, to, anchors = null, byC
     syncIndexRoutingLines(knowledgeRoot, {
       section: 'FR 需求索引',
       subdir: 'fr',
+      // 泛词退役（FR-02，2026-10-21-knowledge-tier-denoise）：与 fr-index.js 蒸馏侧同款模板
+      stripTokens: FR_ROUTE_STRIP_TOKENS,
       makeLine: (d) => d.startsWith('auto-')
-        ? `- ${d}|${d.slice(5)}|FR|需求|承接 → [fr/${d}.md](fr/${d}.md)`
-        : `- ${d}|FR|需求|承接 → [fr/${d}.md](fr/${d}.md)`,
+        ? `- ${d}|${d.slice(5)} → [fr/${d}.md](fr/${d}.md)`
+        : `- ${d} → [fr/${d}.md](fr/${d}.md)`,
     })
   } catch { /* INDEX 缺席/同步失败不拦迁移（主手术已成） */ }
   const after = existsSync(indexPath) ? readFileSync(indexPath, 'utf8') : ''

package/src/review-dispatch.js

@@ -110,50 +110,65 @@ export function detectStall(record, nowMs, stallMs) {
 }
 
 /**
- * 从 artifacts 提取 review JSON（双通道容错，design 风险登记「平台 artifacts 形态演进」）：
+ * 首个平衡 JSON 对象扫描（通道②/③共用）：从文本首个 { 起括号配对扫描（字符串字面量内的
+ * } 不计数），命中即 JSON.parse 返回对象；无 {} / 首个平衡段解析失败 → null。
+ */
+function scanFirstBalancedJson(text) {
+  const t = String(text)
+  const start = t.indexOf('{')
+  if (start === -1) return null
+  let depth = 0, inStr = false, esc = false
+  for (let i = start; i < t.length; i++) {
+    const ch = t[i]
+    if (esc) { esc = false; continue }
+    if (ch === '\\') { esc = true; continue }
+    if (ch === '"') { inStr = !inStr; continue }
+    if (inStr) continue
+    if (ch === '{') depth++
+    else if (ch === '}') {
+      depth--
+      if (depth === 0) {
+        try {
+          const obj = JSON.parse(t.slice(start, i + 1))
+          if (obj && typeof obj === 'object') return obj
+        } catch { return null }
+      }
+    }
+  }
+  return null
+}
+
+/**
+ * 从 artifacts / answer 提取 review JSON（三通道容错，design 风险登记「平台 artifacts 形态演进」）：
  * ① kind 含 review/review_json 的 artifact，content/content_ref/text 字段 JSON.parse 优先；
- * ② 兜底任一 artifact 文本字段提取首个平衡 {} 对象。全失败 → null（调用方给人工 get_worker_result 指引）。
+ * ② 兜底任一 artifact 文本字段提取首个平衡 {} 对象；
+ * ③ answer 正文扫描（2026-10-21-review-dispatch-answer-salvage / dsh 会话实证：worker 把完整
+ *   review JSON 放回答正文而非 artifacts——任务书已明示该兜底形态）。
+ * 第二参可缺省——只传 artifacts 时行为与改前逐字一致（向后兼容）。全失败 → null（调用方给 --salvage 兜底指引）。
  */
-export function extractReviewFromArtifacts(artifacts) {
-  if (!Array.isArray(artifacts)) return null
+export function extractReviewFromArtifacts(artifacts, answer) {
   const texts = []
-  for (const a of artifacts) {
-    if (!a || typeof a !== 'object') continue
-    const kind = String(a.kind || '')
-    const text = typeof a.content === 'string' ? a.content
-      : typeof a.content_ref === 'string' ? a.content_ref
-      : typeof a.text === 'string' ? a.text : null
-    if (text === null) continue
-    if (/review/i.test(kind)) {
-      try {
-        const obj = JSON.parse(text)
-        if (obj && typeof obj === 'object') return obj
-      } catch { /* 该条不是合法 JSON，落兜底通道 */ }
+  if (Array.isArray(artifacts)) {
+    for (const a of artifacts) {
+      if (!a || typeof a !== 'object') continue
+      const kind = String(a.kind || '')
+      const text = typeof a.content === 'string' ? a.content
+        : typeof a.content_ref === 'string' ? a.content_ref
+        : typeof a.text === 'string' ? a.text : null
+      if (text === null) continue
+      if (/review/i.test(kind)) {
+        try {
+          const obj = JSON.parse(text)
+          if (obj && typeof obj === 'object') return obj
+        } catch { /* 该条不是合法 JSON，落兜底通道 */ }
+      }
+      texts.push(text)
     }
-    texts.push(text)
   }
+  if (typeof answer === 'string' && answer) texts.push(answer)
   for (const t of texts) {
-    const start = t.indexOf('{')
-    if (start === -1) continue
-    // 首个平衡对象：括号配对扫描（字符串字面量内的 } 不计数）
-    let depth = 0, inStr = false, esc = false
-    for (let i = start; i < t.length; i++) {
-      const ch = t[i]
-      if (esc) { esc = false; continue }
-      if (ch === '\\') { esc = true; continue }
-      if (ch === '"') { inStr = !inStr; continue }
-      if (inStr) continue
-      if (ch === '{') depth++
-      else if (ch === '}') {
-        depth--
-        if (depth === 0) {
-          try {
-            const obj = JSON.parse(t.slice(start, i + 1))
-            if (obj && typeof obj === 'object') return obj
-          } catch { break }
-        }
-      }
-    }
+    const obj = scanFirstBalancedJson(t)
+    if (obj) return obj
   }
   return null
 }
@@ -161,7 +176,8 @@ export function extractReviewFromArtifacts(artifacts) {
 /**
  * 组装 reviewer 任务书（FR-01 派发质量的核心）：四要素——①单源清单（前缀按 checklist
  * docblock 规则）②review.json 契约（与 gate 同源）③期望产出方式（read_only worker：
- * 结论经 artifacts 返回，**不写任何文件**——落盘归 CLI）④铁律段（禁改文件/禁 git commit）。
+ * 结论经 artifacts 返回，**不写任何文件**——落盘归 CLI；宿主不支持 artifacts 时放回答正文
+ * 首个 ```json 块，回收链第三通道兜底）④铁律段（禁改文件/禁 git commit）。
  */
 export function buildReviewerTaskBook({ stage, changeDir, reviewRunId, channelPriority, probeLines = null }) {
   const mainDoc = STAGE_MAIN_DOC[stage] || 'design.md'
@@ -183,6 +199,7 @@ export function buildReviewerTaskBook({ stage, changeDir, reviewRunId, channelPr
     '## 产出方式（read_only 约束）',
     '- **禁止修改任何文件、禁止 git commit、禁止写盘**——你只读文档与必要的源码佐证。',
     '- 把**完整 review.json 文本**（按上方契约 schema，含 reviewer: {"channel":"platform"}）作为产出返回（artifacts 里的 content 字段放纯 JSON 文本）。',
+    '- 宿主/平台不支持 artifacts 回传时，把**完整 review.json 文本**放进回答正文的**首个 ```json 代码块**（CLI 回收链会从回答正文扫描兜底）。',
     '- docHash 可占位（调度方 CLI 会按主文档机械重算），其余字段照实填写。',
   ].join('\n')
   return {
@@ -219,6 +236,32 @@ export function persistStageReview({ runtimeRoot, stage, changeName, reviewRunId
   return { ok: true, reviewPath }
 }
 
+/**
+ * worker 终态原文落盘（2026-10-21-review-dispatch-answer-salvage FR-04 证据链）：completed
+ * 回收路径统一调用——answer 原文优先，缺省序列化 artifacts 原文；两者皆空返回 null（无原文
+ * 可落，调用方走「确无结果」口径）。与 review.json 同 run 目录（结构化结论 + 原文证据并存，
+ * dsh 事故里人工只能靠平台 UI 贴回原文——原文必须本地在场）。best-effort：写失败 warn 不抛。
+ * @returns {string|null} 落盘绝对路径；无内容/写失败 null
+ */
+function writeWorkerAnswer({ runtimeRoot, stage, reviewRunId, gr }) {
+  try {
+    const answer = gr && typeof gr.answer === 'string' && gr.answer
+      ? gr.answer
+      : gr && Array.isArray(gr.artifacts) && gr.artifacts.length > 0
+        ? JSON.stringify(gr.artifacts, null, 2) + '\n'
+        : null
+    if (!answer) return null
+    const dir = join(runtimeRoot, 'stage-reviews', `${stage}-${reviewRunId}`)
+    mkdirSync(dir, { recursive: true })
+    const p = join(dir, 'worker-answer.md')
+    writeAtomicSync(p, answer.endsWith('\n') ? answer : answer + '\n')
+    return p
+  } catch (e) {
+    console.warn(`[sillyspec] worker-answer.md 落盘失败（不阻断回收）: ${e && e.message ? e.message : String(e)}`)
+    return null
+  }
+}
+
 /** 降级指引（channel_priority 去 platform 的剩余序渲染；probe 失败 / worker 失败共用）。 */
 export function renderFallbackGuidance(cwd) {
   const rest = readReviewChannelPriority(cwd).filter((c) => c !== 'platform')
@@ -235,13 +278,15 @@ export function renderFallbackGuidance(cwd) {
  * @param {object} opts
  *   mode: 'create'|'status'|'kill'；cwd/specBase/changeName 必填；stage（create 必填）；
  *   client: SillyHubMcpClient 实例（create/status 用）；probe: 可注入（默认真 probeSillyHub）；
- *   budgetUsd（默认 1.0）；stallMs（默认 900000）；reviewRunId（status 回收时缺省读 marker）。
+ *   budgetUsd（默认 1.0）；stallMs（默认 900000）；reviewRunId（status 回收时缺省读 marker）；
+ *   salvage（status 专用，默认 false——completed 提取失败时返回 salvagePath + --from 回收指引，
+ *   在途记录不清可重试；CLI 形态 `--status --salvage`）。
  * @returns {Promise<{ok: boolean, ...}>} 永不抛——所有异常转 {ok:false, reason}
  */
 export async function runReviewDispatch(opts = {}) {
   const {
     mode = 'create', cwd = process.cwd(), specBase, changeName,
-    stage, client, probe, budgetUsd = 1.0, stallMs = 900_000, reviewRunId,
+    stage, client, probe, budgetUsd = 1.0, stallMs = 900_000, reviewRunId, salvage = false,
   } = opts
   if (!specBase || !changeName) return { ok: false, reason: '缺少 specBase/changeName' }
 
@@ -340,21 +385,37 @@ export async function runReviewDispatch(opts = {}) {
       }
       if (st === 'completed') {
         const gr = await client.getWorkerResult({ missionId: rec.missionId, workerId: rec.workerId })
-        const review = extractReviewFromArtifacts(gr && gr.artifacts)
+        const runtimeRoot = join(specBase, '.runtime')
+        // 终态原文先落盘再提取（FR-04：无论提取成败，原文证据与 review.json 同 run 目录在场）
+        const answerPath = writeWorkerAnswer({ runtimeRoot, stage: rec.stage, reviewRunId: rec.reviewRunId, gr })
+        const review = extractReviewFromArtifacts(gr && gr.artifacts, gr && gr.answer)
         if (!review) {
-          return { ok: false, state: 'completed-no-artifact', statusLine, reason: 'worker completed 但 artifacts 提取不到 review JSON', guidance: `人工核对：平台 get_worker_result（mission ${rec.missionId} / worker ${rec.workerId}）；确认无法回收再 --kill 降级。` }
+          // 两步出口（dsh 事故复盘：旧文案「--kill 降级」混写处置与降级，误导 agent 跳过回收直接自审）：
+          // ① --salvage 兜底回收（落盘原文 + --from 指引）② 确认平台确无结果才降级
+          const reason = 'worker completed 但三通道（artifacts kind / artifacts 文本 / answer 正文）均提取不到 review JSON'
+          if (salvage) {
+            return {
+              ok: false, state: 'completed-no-artifact', statusLine, salvagePath: answerPath, reason,
+              guidance: answerPath
+                ? `① worker 终态原文已落盘 ${answerPath}——人工核对/修整出 review.json 后运行 sillyspec register-stage-review --change ${changeName} --stage ${rec.stage} --from <修整后的review.json> 回收\n② 确认平台确无结果（UI 核对 mission ${rec.missionId}）才按通道优先序降级：\n${renderFallbackGuidance(cwd)}`
+                : `① 平台未回传任何终态原文（answer 与 artifacts 均空）——在平台 UI 核对 mission ${rec.missionId} / worker ${rec.workerId}\n② 确认确无结果才按通道优先序降级：\n${renderFallbackGuidance(cwd)}`,
+            }
+          }
+          return {
+            ok: false, state: 'completed-no-artifact', statusLine, reason,
+            guidance: `① 回收兜底：sillyspec review-dispatch --status --salvage --change ${changeName}（自动落盘 worker-answer.md 并提示 register-stage-review --from 回收；平台 UI 可先核对 mission ${rec.missionId}）\n② 确认平台确无结果才按通道优先序降级：\n${renderFallbackGuidance(cwd)}`,
+          }
         }
-        const runtimeRoot = join(specBase, '.runtime')
         const mainDocPath = join(specBase, 'changes', changeName, STAGE_MAIN_DOC[rec.stage] || 'design.md')
         const p = persistStageReview({
           runtimeRoot, stage: rec.stage, changeName, reviewRunId: rec.reviewRunId,
           reviewObj: review, missionId: rec.missionId, mainDocPath,
         })
         if (!p.ok) {
-          return { ok: false, state: 'bad-review', statusLine, errors: p.errors, guidance: 'artifacts 里的 review 不符 schema——--kill 后降级，或人工按契约修 review.json（mission 证据保留）。' }
+          return { ok: false, state: 'bad-review', statusLine, errors: p.errors, guidance: `① 提取到的 review 不符 schema——按契约修整（终态原文参考：${answerPath || '同目录 worker-answer.md'}）后运行 sillyspec register-stage-review --change ${changeName} --stage ${rec.stage} --from <修整后的review.json> 回收\n② 确认平台确无结果才按通道优先序降级：\n${renderFallbackGuidance(cwd)}` }
         }
         clearDispatchRecord(specBase, changeName)
-        return { ok: true, state: 'completed', statusLine, reviewPath: p.reviewPath, verdict: `${review.specVerdict}/${review.qualityVerdict}` }
+        return { ok: true, state: 'completed', statusLine, reviewPath: p.reviewPath, verdict: `${review.specVerdict}/${review.qualityVerdict}`, nextStep: answerPath ? `终态原文已留存 ${answerPath}` : undefined }
       }
       if (st === 'failed' || st === 'killed') {
         clearDispatchRecord(specBase, changeName)
@@ -375,6 +436,105 @@ export async function runReviewDispatch(opts = {}) {
   }
 }
 
+// ════════ 薄道评审平台单调用派发（2026-10-23-review-inline-dispatch）════════
+/**
+ * 薄道（thin flow）review 子步的平台单调用通道：flow done 评审缺席分支经 local.yaml
+ * review_inline_wait 键门控调用——薄道任务书（renderReviewerTaskbook 产物+平台产出方式
+ * 尾注，任务书生产权仍在 CLI）派发平台 readOnly worker，有界轮询至完成/超时，三通道
+ * 提取复用厚道 extractReviewFromArtifacts（JSON 对象提取与 schema 无关）+ 薄道
+ * validateReviewJson 同一源校验，通过才落 changeDir/review.json（reviewer=platform-inline
+ * 如实标注）——成功后调用方同调用继续登记子步，missing→PASS 往返消灭。
+ * 任何失败返回 {ok:false, reason}——调用方回退现状任务书面（零治理损失）。
+ * 不写 dispatch record（那是厚道跨命令异步形态；单调用在途态只随返回值与输出留痕）。
+ */
+export async function runThinReviewInline(opts = {}) {
+  const {
+    cwd = process.cwd(), specBase, change, changeDir, taskbookText,
+    waitMs = 60_000, pollIntervalMs = 5_000, budgetUsd = 1.0,
+    client = null, probe = null, log = null,
+  } = opts
+  const say = typeof log === 'function' ? log : () => {}
+  if (!specBase || !change || !changeDir || typeof taskbookText !== 'string' || !taskbookText.trim()) {
+    return { ok: false, reason: '缺少 specBase/change/changeDir/taskbookText' }
+  }
+  let cl = client
+  if (!cl) {
+    try {
+      const { SillyHubMcpClient } = await import('./sillyhub-mcp/client.js')
+      cl = new SillyHubMcpClient({ cwd })
+    } catch (e) {
+      return { ok: false, reason: `client 构建失败（${(e && e.message) || e}）` }
+    }
+  }
+  if (!cl || typeof cl.createMission !== 'function' || typeof cl.dispatchWorker !== 'function'
+    || typeof cl.listWorkers !== 'function' || typeof cl.getWorkerResult !== 'function') {
+    return { ok: false, reason: 'client 不具备平台派发接口（create/dispatch/list/result）' }
+  }
+  try {
+    const probeFn = probe || (await import('./dispatch/probe.js')).probeSillyHub
+    const pr = await probeFn({ client: cl, worktreePath: null, cwd })
+    if (!pr || pr.available !== true) {
+      return { ok: false, reason: `平台通道不可用（${pr && pr.reason ? pr.reason : 'probe 异常'}）` }
+    }
+    const objective = `轻量变更独立评审（${change}）——按任务书产出 review.json 结论`
+    const workerPrompt = taskbookText + '\n' + [
+      '',
+      '【平台通道产出方式（read_only 约束——覆盖上方「写到文件」指引）】',
+      '- 平台 worker 禁止写任何文件、禁止 git 操作：把完整 review.json 文本（上方 schema）作为产出返回。',
+      '- 优先放 artifacts（kind 含 review，content 字段放纯 JSON 文本）；宿主不支持 artifacts 时放回答正文首个 ```json 代码块（CLI 回收链三通道兜底）。',
+    ].join('\n')
+    const mission = await cl.createMission({ objective, orchestrationMode: 'external', budgetUsd })
+    const missionId = mission && mission.missionId
+    if (!missionId) return { ok: false, reason: 'create_mission 未返回 missionId' }
+    say(`🛰️ 平台评审已派发（mission ${String(missionId).slice(0, 8)}）——有界等待 ${Math.round(waitMs / 1000)}s（review_inline_wait）`)
+    let worker = null
+    try {
+      worker = await cl.dispatchWorker({ missionId, objective, readOnly: true, worktreePath: cwd, workerPrompt })
+    } catch (e) {
+      return { ok: false, reason: `dispatch_worker 异常（${(e && e.message) || e}）`, missionId }
+    }
+    const workerId = worker && worker.workerId
+    if (!workerId) return { ok: false, reason: 'dispatch_worker 未返回 workerId', missionId }
+    const deadline = Date.now() + Math.max(1000, waitMs)
+    let lastState = ''
+    while (Date.now() < deadline) {
+      await new Promise((r) => setTimeout(r, Math.max(200, Math.min(pollIntervalMs, deadline - Date.now()))))
+      let w = null
+      try {
+        const workers = await cl.listWorkers(missionId)
+        w = Array.isArray(workers) ? workers.find((x) => x && (x.id === workerId || x.worker_id === workerId)) : null
+      } catch { /* 单次轮询抖动按在途继续（下轮重试） */ }
+      const st = w ? String(w.status || '') : 'unknown'
+      if (st !== lastState) {
+        say(`🛰️ 平台评审状态：${st}（剩 ${Math.max(0, Math.ceil((deadline - Date.now()) / 1000))}s）`)
+        lastState = st
+      }
+      if (st === 'failed' || st === 'killed') return { ok: false, reason: `worker 终态 ${st}`, missionId, workerId }
+      if (st === 'completed') {
+        const gr = await cl.getWorkerResult({ missionId, workerId })
+        const extracted = extractReviewFromArtifacts(gr && gr.artifacts, gr && gr.answer)
+        if (!extracted || typeof extracted !== 'object') {
+          return { ok: false, reason: 'worker completed 但三通道提取不到 review JSON（artifacts kind/文本、answer 正文）——平台 UI 可回看 mission', missionId, workerId }
+        }
+        // reviewer 如实标注（覆盖 worker 任意填法）；change 对齐本变更；其余字段产物原样不改写
+        const candidate = { ...extracted, change, reviewer: 'platform-inline' }
+        const reviewPath = join(changeDir, 'review.json')
+        writeAtomicSync(reviewPath, JSON.stringify(candidate, null, 2) + '\n')
+        const { validateReviewJson } = await import('./flow-review.js')
+        const v = validateReviewJson(reviewPath)
+        if (!v.ok) {
+          try { rmSync(reviewPath, { force: true }) } catch { /* 删件失败由下轮覆盖兜底 */ }
+          return { ok: false, reason: `提取的 review 不符薄道 schema（${v.errors.join('；')}）——原文可参考平台 mission UI`, missionId, workerId }
+        }
+        return { ok: true, missionId, workerId, reviewPath }
+      }
+    }
+    return { ok: false, reason: `等待 ${Math.round(waitMs / 1000)}s 未完成（在途 mission ${missionId} 可在平台 UI 回看；本轮回退任务书面）`, missionId, workerId }
+  } catch (e) {
+    return { ok: false, reason: `inline 派发异常（${(e && e.message) || String(e)}）` }
+  }
+}
+
 // ════════ 影子期派发（2026-09-18-ceremony-risk-pricing task-06 / FR-04 / D-007@v1 / R-04 / R-06）════════
 // 依据：design.md「总体方案 Phase 3」+「风险登记 R-04/R-06」+ plan.md「Wave 4」+ 全局硬约束 2。
 // 定位：S0/S1 轻档变更在明面轻仪主线外，后台静默派发重仪式独立评审**只记账不阻断**——
@@ -774,7 +934,8 @@ export async function dispatchShadowReview(opts = {}) {
       }
       if (st === 'completed') {
         const gr = await client.getWorkerResult({ missionId: rec.missionId, workerId: rec.workerId })
-        const review = extractReviewFromArtifacts(gr && gr.artifacts)
+        // 通道③同步受益（answer 正文——主线同款；影子 accounting-only 不加 salvage 交互面）
+        const review = extractReviewFromArtifacts(gr && gr.artifacts, gr && gr.answer)
         if (!review) {
           await mutateShadowLedger(runtimeRoot, (ledger) => {
             const e = ledger.entries.find((x) => x && x.shadowRunId === rec.shadowRunId)

package/src/run/bg-sync.js

@@ -182,6 +182,10 @@ export async function spawnBackgroundSync(cwd, changeName, platformOpts = {}, op
       env,
     });
     child.unref?.();
+    // 孵化稳定化（FR-08 / dsh 实证 libuv 退出断言）：等 spawn 事件落定（≤150ms 兜底）再放行，
+    // 压掉「父进程在子进程句柄建立中途退出」的崩溃竞态窗口。
+    const { awaitSpawnSettled } = await import('../spawn-settle.js');
+    await awaitSpawnSettled(child);
   } finally {
     if (logFd !== null) {
       try { closeSync(logFd); } catch { /* 父侧 fd 副本关闭；子进程持有继承副本 */ }

package/src/run/code-face-key.js

@@ -24,7 +24,10 @@ import { createHash } from 'node:crypto';
 
 function safeGit(cwd, args) {
   try {
-    return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 60000, windowsHide: true });
+    // maxBuffer：execFileSync 默认 1MB，ls-tree -r -z 大仓输出必超（multi-agent-platform 1.95MB /
+    // 本仓 1.76MB，dsh 0ff6f1c8 取证）——ENOBUFS 被 catch 吞成 null 曾让指纹/dedupKey/passedKey
+    // 全链失效、verify 同码态全量实测 6×10~13.5min。256MB 对齐 git-helper GIT_MAX_BUFFER 口径。
+    return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 60000, maxBuffer: 256 * 1024 * 1024, windowsHide: true });
   } catch {
     return null;
   }