soloforge 1.1.36 → 1.1.38

package/dist/engine/contracts/tool_invocation_contract_registry.js

@@ -6,10 +6,25 @@
  * 副作用、授权要求、允许/禁止后续工具。
  * 适配器必须遵守 Adapter Workflow Policy。
  * 治理检查防止 8 类退化。
+ *
+ * Phase 2 状态机驱动路由：旧工具契约已迁移到状态机等价工具。
  */
 import { debug } from "../core/logger.js";
 // ── 类型定义（保留本地别名供运行时使用） ──
 // 注意: 以下类型已移至 types/pipeline.ts，此处通过 import 获取
+// ── 状态机驱动工具名称（用于治理规则豁免判断） ──
+const STATE_MACHINE_TOOLS = new Set([
+    "sf_pipeline_init",
+    "sf_stage_execute",
+    "sf_stage_advance",
+    "sf_stage_rollback",
+    "sf_gate_check",
+    "sf_command",
+    "sf_next",
+    "sf_pipeline_status",
+    "sf_direct_answer",
+    "sf_single_artifact",
+]);
 // ── 适配器工作流策略 ──
 /** 适配器工作流策略规则集 */
 export const ADAPTER_WORKFLOW_POLICY = [
@@ -52,37 +67,108 @@ export const ADAPTER_WORKFLOW_POLICY = [
 ];
 // ── MCP 工具契约 ──
 const TOOL_INVOCATION_CONTRACTS = [
-    // ── read_only_bypass（20 个工具） ──
+    // ── 状态机驱动路由（10 个工具） ──
     {
-        tool_name: "sf_classify",
-        category: "normal_controlled",
+        tool_name: "sf_pipeline_init",
+        category: "strict_controlled",
         side_effects: ["task_context_write"],
         requires_authorization: false,
         requires_workflow: false,
-        description: "意图分类，确定任务类型、风险、复杂度和执行策略",
-        default_next_tools: ["sf_expand", "sf_plan", "sf_explore", "sf_analyze", "sf_status", "sf_debug", "sf_feasibility_check"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold", "sf_verify", "sf_learn", "sf_knowledge_add", "sf_knowledge_update", "sf_capability_update"],
+        description: "初始化状态机驱动的管线（新系统或老系统）",
+        default_next_tools: ["sf_stage_execute", "sf_gate_check", "sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
     },
     {
-        tool_name: "sf_status",
-        category: "normal_controlled",
+        tool_name: "sf_stage_execute",
+        category: "strict_controlled",
+        side_effects: ["task_context_write"],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "执行当前或指定阶段的工作",
+        default_next_tools: ["sf_stage_execute", "sf_stage_advance", "sf_gate_check", "sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_stage_advance",
+        category: "strict_controlled",
+        side_effects: ["task_context_write", "knowledge_write"],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "推进到下一阶段（运行门禁后推进）",
+        default_next_tools: ["sf_stage_execute", "sf_gate_check", "sf_stage_rollback", "sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_stage_rollback",
+        category: "strict_controlled",
         side_effects: ["task_context_write"],
         requires_authorization: false,
         requires_workflow: false,
-        description: "查询任务/系统状态",
-        default_next_tools: ["sf_classify", "sf_plan", "sf_explore", "sf_debug", "sf_knowledge_audit", "sf_governance_report", "sf_observability", "sf_team_status"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        description: "回退到指定阶段（标记后续阶段为 skipped）",
+        default_next_tools: ["sf_stage_execute", "sf_gate_check", "sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_gate_check",
+        category: "strict_controlled",
+        side_effects: [],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "显式运行三级确定性门禁检查",
+        default_next_tools: ["sf_stage_execute", "sf_stage_advance", "sf_stage_rollback", "sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_command",
+        category: "normal_controlled",
+        side_effects: [],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "[sf] 命令统一入口：解析命令文本并分发到对应工具",
+        default_next_tools: ["sf_stage_execute", "sf_stage_advance", "sf_stage_rollback", "sf_gate_check", "sf_pipeline_init", "sf_next", "sf_pipeline_status", "sf_direct_answer", "sf_single_artifact"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_next",
+        category: "read_only_bypass",
+        side_effects: [],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "查询下一步导航：管线状态、当前阶段、可用动作、阻断项",
+        default_next_tools: ["sf_stage_execute", "sf_stage_advance", "sf_gate_check", "sf_command", "sf_pipeline_status"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_pipeline_status",
+        category: "read_only_bypass",
+        side_effects: [],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "查询管线全貌：所有阶段状态、进度百分比、回退历史",
+        default_next_tools: ["sf_stage_execute", "sf_gate_check", "sf_command", "sf_next"],
+        forbidden_next_tools: [],
     },
     {
-        tool_name: "sf_plan",
+        tool_name: "sf_direct_answer",
         category: "normal_controlled",
+        side_effects: [],
+        requires_authorization: false,
+        requires_workflow: false,
+        description: "快捷路径：纯对话/回答，不触发管线流程",
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
+    },
+    {
+        tool_name: "sf_single_artifact",
+        category: "strict_controlled",
         side_effects: ["task_context_write"],
         requires_authorization: false,
         requires_workflow: false,
-        description: "任务规划，拆解子任务和执行顺序",
-        default_next_tools: ["sf_plan_advance", "sf_expand", "sf_status", "sf_explore", "sf_debug", "sf_classify"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        description: "快捷路径：单产物交付，直接执行并验证单一产出",
+        default_next_tools: ["sf_stage_advance", "sf_gate_check", "sf_command", "sf_next", "sf_pipeline_status"],
+        forbidden_next_tools: [],
     },
+    // ── read_only_bypass 工具（只读分析类） ──
     {
         tool_name: "sf_analyze",
         category: "read_only_bypass",
@@ -90,8 +176,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "影响分析，评估变更范围和风险",
-        default_next_tools: ["sf_plan", "sf_expand", "sf_status", "sf_explore", "sf_debug", "sf_classify"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_explore", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_explore",
@@ -100,8 +186,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "方案探索，只读分析可选方案",
-        default_next_tools: ["sf_plan", "sf_expand", "sf_status", "sf_analyze", "sf_debug", "sf_classify"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_analyze", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_feasibility_check",
@@ -110,18 +196,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "可行性预判",
-        default_next_tools: ["sf_plan", "sf_status", "sf_debug", "sf_classify"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
-    },
-    {
-        tool_name: "sf_review",
-        category: "normal_controlled",
-        side_effects: ["task_context_write"],
-        requires_authorization: false,
-        requires_workflow: false,
-        description: "代码审查，只读分析代码质量、安全和风险",
-        default_next_tools: ["sf_verify", "sf_status", "sf_debug", "sf_contract_check", "sf_deliver"],
-        forbidden_next_tools: ["sf_scaffold"],
+        default_next_tools: ["sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_test_guide",
@@ -130,8 +206,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "测试生成指南",
-        default_next_tools: ["sf_verify", "sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_gate_check", "sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_test_quality",
@@ -140,8 +216,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "测试质量报告",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_dependency_scan",
@@ -150,8 +226,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "依赖漏洞扫描",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_debt_report",
@@ -160,8 +236,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "技术债务报告",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_coord_check",
@@ -170,8 +246,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "变更协调检查，冲突风险和跨仓库关联",
-        default_next_tools: ["sf_verify", "sf_status", "sf_debug", "sf_review", "sf_contract_check"],
-        forbidden_next_tools: ["sf_scaffold"],
+        default_next_tools: ["sf_gate_check", "sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_contract_check",
@@ -180,18 +256,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "契约变更检查",
-        default_next_tools: ["sf_verify", "sf_status", "sf_debug", "sf_review"],
-        forbidden_next_tools: ["sf_scaffold"],
-    },
-    {
-        tool_name: "sf_onboard",
-        category: "read_only_bypass",
-        side_effects: ["none"],
-        requires_authorization: false,
-        requires_workflow: false,
-        description: "新人引导",
-        default_next_tools: ["sf_status", "sf_plan", "sf_explore", "sf_debug", "sf_classify"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_gate_check", "sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_team_status",
@@ -200,8 +266,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "团队状态查询",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_debug",
@@ -210,8 +276,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "智能排障，只读诊断",
-        default_next_tools: ["sf_status", "sf_classify", "sf_explore", "sf_analyze", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_explore", "sf_analyze", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_observability",
@@ -220,8 +286,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "系统可观测性报告",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_migration_check",
@@ -230,8 +296,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "数据库迁移安全检查",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_knowledge_audit",
@@ -240,8 +306,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "知识审计，只读检查知识状态",
-        default_next_tools: ["sf_status", "sf_debug", "sf_knowledge_update", "sf_knowledge_add"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug", "sf_knowledge_update", "sf_knowledge_add"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_governance_report",
@@ -250,8 +316,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "治理报告",
-        default_next_tools: ["sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_audit_integration",
@@ -260,51 +326,31 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: false,
         requires_workflow: false,
         description: "主链路集成审计，检测孤岛模块（只读分析）",
-        default_next_tools: ["sf_status", "sf_debug", "sf_governance_report"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug", "sf_governance_report"],
+        forbidden_next_tools: [],
     },
     {
-        tool_name: "sf_navigation",
+        tool_name: "sf_audit_sample",
         category: "read_only_bypass",
         side_effects: ["none"],
         requires_authorization: false,
         requires_workflow: false,
-        description: "工作流导航：查询当前项目阶段、任务阶段、下一步操作和禁止操作",
-        default_next_tools: ["sf_classify", "sf_expand", "sf_verify", "sf_deliver"],
+        description: "审计抽样，从审计池按风险加权抽样生成抽检清单（只读）",
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug", "sf_governance_report"],
         forbidden_next_tools: [],
     },
-    // ── normal_controlled（2 个工具） ──
+    // ── normal_controlled 工具（有状态写入但无破坏性操作） ──
     {
-        tool_name: "sf_expand",
-        category: "normal_controlled",
-        side_effects: ["task_context_write"],
-        requires_authorization: false,
-        requires_workflow: true,
-        description: "意图扩展，生成执行 prompt、scope、验收条件",
-        default_next_tools: ["sf_verify", "sf_review", "sf_deliver", "sf_status", "sf_plan", "sf_debug", "sf_scaffold", "sf_coord_check"],
-        forbidden_next_tools: ["sf_classify", "sf_expand"],
-    },
-    {
-        tool_name: "sf_plan_advance",
+        tool_name: "sf_escape_report",
         category: "normal_controlled",
         side_effects: ["task_context_write"],
         requires_authorization: false,
-        requires_workflow: true,
-        description: "推进规划到下一步",
-        default_next_tools: ["sf_expand", "sf_plan", "sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_verify", "sf_scaffold", "sf_deliver"],
-    },
-    // ── strict_controlled（10 个工具） ──
-    {
-        tool_name: "sf_verify",
-        category: "strict_controlled",
-        side_effects: ["command_execution", "task_context_write"],
-        requires_authorization: true,
-        requires_workflow: true,
-        description: "验证，执行构建/测试命令，生成验证报告（含只读计划模式）",
-        default_next_tools: ["sf_record_verification_execution", "sf_learn", "sf_review", "sf_status", "sf_debug", "sf_deliver"],
-        forbidden_next_tools: ["sf_classify", "sf_expand"],
+        requires_workflow: false,
+        description: "逃逸报告，记录逃逸/误伤/工具故障",
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_debug", "sf_governance_report"],
+        forbidden_next_tools: [],
     },
+    // ── strict_controlled 工具（破坏性/高风险操作） ──
     {
         tool_name: "sf_record_verification_execution",
         category: "strict_controlled",
@@ -312,38 +358,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: true,
         requires_workflow: true,
         description: "录入真实验证执行结果，VerificationResult passed 的唯一合法入口",
-        default_next_tools: ["sf_accept", "sf_verify", "sf_learn", "sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_classify", "sf_expand"],
-    },
-    {
-        tool_name: "sf_learn",
-        category: "strict_controlled",
-        side_effects: ["knowledge_write", "task_context_write"],
-        requires_authorization: true,
-        requires_workflow: true,
-        description: "学习，从任务结果提取新知识",
-        default_next_tools: ["sf_verify", "sf_deliver", "sf_status", "sf_knowledge_audit", "sf_knowledge_update"],
-        forbidden_next_tools: ["sf_classify", "sf_expand"],
-    },
-    {
-        tool_name: "sf_accept",
-        category: "strict_controlled",
-        side_effects: ["task_context_write"],
-        requires_authorization: true,
-        requires_workflow: true,
-        description: "记录任务验收证据（本地验收 + 产物确认），解除 sf_deliver 的本地验收门和产物状态门",
-        default_next_tools: ["sf_deliver", "sf_status", "sf_verify", "sf_learn"],
-        forbidden_next_tools: ["sf_classify", "sf_expand", "sf_scaffold"],
-    },
-    {
-        tool_name: "sf_deliver",
-        category: "strict_controlled",
-        side_effects: ["git_commit", "git_push", "pr_create", "task_context_write"],
-        requires_authorization: true,
-        requires_workflow: true,
-        description: "交付，执行 git commit/push/PR，需要显式用户授权",
-        default_next_tools: ["sf_status", "sf_knowledge_audit", "sf_knowledge_update", "sf_governance_report"],
-        forbidden_next_tools: ["sf_verify", "sf_scaffold", "sf_classify", "sf_expand", "sf_deliver"],
+        default_next_tools: ["sf_stage_advance", "sf_gate_check", "sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_scaffold",
@@ -352,8 +368,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: true,
         requires_workflow: true,
         description: "脚手架生成，写入新文件到项目",
-        default_next_tools: ["sf_verify", "sf_status", "sf_debug"],
-        forbidden_next_tools: ["sf_scaffold", "sf_deliver"],
+        default_next_tools: ["sf_gate_check", "sf_stage_execute", "sf_command", "sf_next", "sf_pipeline_status", "sf_debug"],
+        forbidden_next_tools: ["sf_scaffold"],
     },
     {
         tool_name: "sf_knowledge_add",
@@ -362,8 +378,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: true,
         requires_workflow: false,
         description: "添加知识条目到知识库",
-        default_next_tools: ["sf_status", "sf_knowledge_audit", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_knowledge_audit", "sf_debug"],
+        forbidden_next_tools: [],
     },
     {
         tool_name: "sf_knowledge_update",
@@ -372,48 +388,8 @@ const TOOL_INVOCATION_CONTRACTS = [
         requires_authorization: true,
         requires_workflow: false,
         description: "更新知识条目",
-        default_next_tools: ["sf_status", "sf_knowledge_audit", "sf_debug"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
-    },
-    {
-        tool_name: "sf_audit_sample",
-        category: "read_only_bypass",
-        side_effects: ["none"],
-        requires_authorization: false,
-        requires_workflow: false,
-        description: "审计抽样，从审计池按风险加权抽样生成抽检清单（只读）",
-        default_next_tools: ["sf_status", "sf_debug", "sf_governance_report"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
-    },
-    {
-        tool_name: "sf_escape_report",
-        category: "normal_controlled",
-        side_effects: ["task_context_write"],
-        requires_authorization: false,
-        requires_workflow: false,
-        description: "逃逸报告，记录逃逸/误伤/工具故障",
-        default_next_tools: ["sf_status", "sf_debug", "sf_governance_report"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
-    },
-    {
-        tool_name: "sf_capability_update",
-        category: "normal_controlled",
-        side_effects: ["task_context_write", "config_write"],
-        requires_authorization: true,
-        requires_workflow: false,
-        description: "能力状态更新，需要 confirm=true、confirmed_by 非空、evidence_ids 匹配 escape report。支持 dry_run 校验",
-        default_next_tools: ["sf_status", "sf_debug", "sf_governance_report"],
-        forbidden_next_tools: ["sf_deliver", "sf_scaffold"],
-    },
-    {
-        tool_name: "sf_resume_workspace",
-        category: "normal_controlled",
-        side_effects: ["task_context_write"],
-        requires_authorization: false,
-        requires_workflow: false,
-        description: "恢复工作区，扫描中断工单并播报当前进度",
-        default_next_tools: ["sf_status", "sf_classify", "sf_debug"],
-        forbidden_next_tools: ["sf_verify", "sf_scaffold", "sf_deliver", "sf_learn"],
+        default_next_tools: ["sf_command", "sf_next", "sf_pipeline_status", "sf_knowledge_audit", "sf_debug"],
+        forbidden_next_tools: [],
     },
 ];
 // ── 查询函数 ──
@@ -471,8 +447,6 @@ export function createToolTrace(params) {
         invocation_id: params.invocation_id,
         task_id: params.task_id,
         workflow_id: params.workflow_id,
-        route: params.route,
-        execution_shape: params.execution_shape,
         contract_ids: params.contract_ids ?? [],
         capability_ids: params.capability_ids ?? [],
         guard_report_id: params.guard_report_id,
@@ -613,16 +587,19 @@ export function validateToolInvocation(params) {
             }));
         }
     }
-    // 6. 严格受控工具必须要求工作流
+    // 6. 严格受控工具必须要求工作流（状态机工具豁免）
     debug("工具调用契约", "检查严格受控工具工作流要求");
-    if (contract?.category === "strict_controlled" && contract.requires_workflow && !params.workflow_id) {
+    if (contract?.category === "strict_controlled" &&
+        contract.requires_workflow &&
+        !STATE_MACHINE_TOOLS.has(contract.tool_name) &&
+        !params.workflow_id) {
         debug("工具调用契约", "严格受控工具缺少工作流ID ", params.tool_name);
         violations.push(createViolation({
             invocation_id: iid,
             tool_name: params.tool_name,
             violation_type: "contract_state_mismatch",
             reason: `strict controlled 工具 ${params.tool_name} 需要 workflow 但未提供 workflow_id`,
-            recovery: "先完成 classify/expand 流程再调用此工具",
+            recovery: "先完成状态机管线初始化再调用此工具",
         }));
     }
     if (violations.length > 0) {
@@ -640,6 +617,7 @@ export function validateToolInvocationContracts(contracts = TOOL_INVOCATION_CONT
     const findings = [];
     const allNames = new Set(contracts.map((c) => c.tool_name));
     for (const tc of contracts) {
+        const isStateMachine = STATE_MACHINE_TOOLS.has(tc.tool_name);
         // 规则 1: every tool must have default_next_tools (trace requirement implies this)
         if (tc.default_next_tools.length === 0 && tc.category !== "read_only_bypass") {
             findings.push({
@@ -649,8 +627,8 @@ export function validateToolInvocationContracts(contracts = TOOL_INVOCATION_CONT
                 message: `工具 ${tc.tool_name} 没有声明 default_next_tools`,
             });
         }
-        // 规则 2: strict controlled must require authorization
-        if (tc.category === "strict_controlled" && !tc.requires_authorization) {
+        // 规则 2: strict controlled 必须要求授权（状态机工具豁免，通过内部门禁校验）
+        if (tc.category === "strict_controlled" && !tc.requires_authorization && !isStateMachine) {
             findings.push({
                 severity: "hard_fail",
                 tool_name: tc.tool_name,
@@ -667,8 +645,8 @@ export function validateToolInvocationContracts(contracts = TOOL_INVOCATION_CONT
                 message: `read-only bypass 工具 ${tc.tool_name} 有写入副作用: ${tc.side_effects.join(", ")}`,
             });
         }
-        // 规则 4: strict controlled must either be workflow-bound or explicitly authorized as a standalone write.
-        if (tc.category === "strict_controlled" && !tc.requires_workflow && !tc.requires_authorization) {
+        // 规则 4: strict controlled 必须要么要求 workflow，要么要求显式授权（状态机工具豁免）
+        if (tc.category === "strict_controlled" && !tc.requires_workflow && !tc.requires_authorization && !isStateMachine) {
             findings.push({
                 severity: "hard_fail",
                 tool_name: tc.tool_name,
@@ -676,9 +654,8 @@ export function validateToolInvocationContracts(contracts = TOOL_INVOCATION_CONT
                 message: `standalone strict controlled 工具 ${tc.tool_name} 未声明 requires_authorization`,
             });
         }
-        // 规则 5: side_effects must match category (sf_status exempt: dynamic cancel)
+        // 规则 5: read_only_bypass 工具的 side_effects 必须为空或仅 none
         if (tc.category === "read_only_bypass" &&
-            tc.tool_name !== "sf_status" &&
             tc.side_effects.length > 0 &&
             !tc.side_effects.every((e) => e === "none")) {
             findings.push({