soloforge 1.1.40 → 1.1.43

package/dist/gate/contracts/control_plane_contract.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Control Plane Contract — 契约层模块。
+ *
+ * 职责边界：
+ * - 负责：ControlPlaneCategory 等 契约层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：契约验证、注册表查询
+ * 调用谁：node:fs、node:path、yaml、tool_invocation_contract_registry、helpers
+ *
+ * 数据流：契约定义 → 验证逻辑 → 通过/拒绝结果
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+import type { ToolInvocationContract, SideEffect } from "./tool_invocation_contract_registry.js";
+export type ControlPlaneCategory = "mcp_availability" | "tool_callability" | "contract_mislabel" | "dead_chain" | "bypass" | "provenance" | "state_trust" | "evidence_truth" | "scope_completeness" | "invisible_degradation" | "fake_delivery_closure" | "adapter_drift" | "version_drift" | "concurrency_race" | "recovery_path";
+export interface ControlPlaneMatrixItem {
+    id: ControlPlaneCategory;
+    title: string;
+    invariant: string;
+    must_fail: string;
+    recovery: string;
+}
+export interface ControlPlaneBranchDetail {
+    id: string;
+    category: ControlPlaneCategory;
+    detail: string;
+    gate: string;
+}
+export interface ControlPlaneFinding {
+    severity: "hard_fail" | "warning" | "advisory";
+    category: ControlPlaneCategory;
+    code: string;
+    message: string;
+    recovery: string;
+}
+export interface ControlPlaneAuditReport {
+    passed: boolean;
+    matrix_count: number;
+    branch_detail_count: number;
+    findings: ControlPlaneFinding[];
+}
+export interface GenerationTrace {
+    tool_name: string;
+    task_id?: string;
+    side_effects?: SideEffect[];
+    status?: "passed" | "failed" | "blocked" | "degraded";
+    evidence_kind?: "plan" | "result" | "command_execution" | "user_confirmation";
+}
+export interface GenerationChainInput {
+    changed_files: string[];
+    verified_files: string[];
+    traces: GenerationTrace[];
+    delivery_status?: "delivered" | "blocked" | "manual_required";
+}
+export interface GenerationChainAssessment {
+    accepted: boolean;
+    confidence: "full" | "limited" | "blocked";
+    findings: ControlPlaneFinding[];
+}
+export declare const CONTROL_PLANE_MATRIX: ControlPlaneMatrixItem[];
+export declare const CONTROL_PLANE_BRANCH_DETAILS: ControlPlaneBranchDetail[];
+export declare function isSoloforgeStateBypassCommand(commandText: string): boolean;
+export declare function validateControlPlaneToolContracts(contracts: readonly ToolInvocationContract[]): ControlPlaneFinding[];
+export declare function assessControlledGenerationChain(input: GenerationChainInput): GenerationChainAssessment;
+export declare function auditControlPlaneProject(projectPath: string): ControlPlaneAuditReport;
+//# sourceMappingURL=control_plane_contract.d.ts.map

package/dist/gate/contracts/control_plane_contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control_plane_contract.d.ts","sourceRoot":"","sources":["../../../src/gate/contracts/control_plane_contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAIjG,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,YAAY,GACZ,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,oBAAoB,GACpB,uBAAuB,GACvB,uBAAuB,GACvB,eAAe,GACf,eAAe,GACf,kBAAkB,GAClB,eAAe,CAAC;AAEpB,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,oBAAoB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;IAC/C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACtD,aAAa,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;CAC/E;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAC;CAC/D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAmBD,eAAO,MAAM,oBAAoB,EAAE,sBAAsB,EAgBxD,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,wBAAwB,EAqClE,CAAC;AAEF,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAU1E;AAYD,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,SAAS,sBAAsB,EAAE,GAAG,mBAAmB,EAAE,CAoDrH;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,GAAG,yBAAyB,CA0DtG;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,CAoHrF"}

package/dist/gate/contracts/control_plane_contract.js

@@ -0,0 +1,320 @@
+/**
+ * Control Plane Contract — 契约层模块。
+ *
+ * 职责边界：
+ * - 负责：ControlPlaneCategory 等 契约层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：契约验证、注册表查询
+ * 调用谁：node:fs、node:path、yaml、tool_invocation_contract_registry、helpers
+ *
+ * 数据流：契约定义 → 验证逻辑 → 通过/拒绝结果
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { safeJsonParse } from "../../shared/helpers.js";
+import { parse as parseYaml } from "yaml";
+const WRITE_SIDE_EFFECTS = [
+    "file_write",
+    "knowledge_write",
+    "config_write",
+    "command_execution",
+    "git_commit",
+    "git_push",
+    "pr_create",
+    "external_write",
+];
+/** read_only_bypass 工具不得声明任何非 none 的副作用（含 task_context_write） */
+const READ_ONLY_FORBIDDEN_EFFECTS = new Set([
+    ...WRITE_SIDE_EFFECTS,
+    "task_context_write",
+]);
+export const CONTROL_PLANE_MATRIX = [
+    { id: "mcp_availability", title: "MCP 可用性", invariant: "MCP 服务、工具注册、依赖、PATH 和版本必须可用且可诊断。", must_fail: "工具未注册或服务不可启动仍允许进入实现。", recovery: "运行 soloforge doctor 并按诊断修复 MCP 配置或版本。" },
+    { id: "tool_callability", title: "工具可调用性", invariant: "工具 schema 必须能被适配器合法调用，参数不能形成永远不可达的死链路。", must_fail: "工具需要 task_id 但入口无法产生 task_id。", recovery: "修复 schema 或入口链路，先 sf_task 再进入受控工具。" },
+    { id: "contract_mislabel", title: "契约错标", invariant: "会写状态、文件、知识或外部系统的工具不得标成 read_only_bypass。", must_fail: "read_only_bypass 声明非 none 副作用。", recovery: "重标为 normal_controlled 或 strict_controlled 并补授权。" },
+    { id: "dead_chain", title: "死链路", invariant: "工具前置条件必须能由上游工具或显式授权满足。", must_fail: "strict 工具既要求 workflow 又无 task_id 路径。", recovery: "补 task_id、confirm 或专用恢复 action。" },
+    { id: "bypass", title: "旁路", invariant: "Bash/Edit/Write/脚本不得直接改 .soloforge/state 或绕过受控工具改业务代码后自证。", must_fail: "Bash 写 .soloforge/state。", recovery: "使用 sf_task action=archive_stale 或相应 MCP 工具恢复。" },
+    { id: "provenance", title: "来源归因", invariant: "代码变更必须能说明来自哪个任务、工具链和工作包。", must_fail: "非 MCP 计划内变更被当成完整验证通过。", recovery: "重新分类并建立 task_id，或把验证标记为 limited。" },
+    { id: "state_trust", title: "状态可信", invariant: "current-task、任务终态和状态文件必须可校验，陈旧指针不得阻塞正常任务。", must_fail: "陈旧 current-task 无合法恢复动作。", recovery: "sf_task action=archive_stale confirm=true。" },
+    { id: "evidence_truth", title: "证据真实性", invariant: "验证计划不得冒充验证结果，命令必须有真实执行证据。", must_fail: "validation_plan 被标记为 passed。", recovery: "执行真实命令并记录 command_execution 证据。" },
+    { id: "scope_completeness", title: "范围完整性", invariant: "changed_files 必须覆盖实际改动，验证不得只看子集。", must_fail: "未验证文件仍允许 deliver。", recovery: "补齐 changed_files 或声明 limited_verification 并阻断交付。" },
+    { id: "invisible_degradation", title: "降级可见", invariant: "工具失败、跳过或降级必须用户可见，不得静默 advisory 化。", must_fail: "degraded trace 仍 delivered 且无说明。", recovery: "输出降级原因、影响范围和恢复命令。" },
+    { id: "fake_delivery_closure", title: "交付假闭环", invariant: "交付必须闭合设计、验证、本地验收、用户确认和 PR 前检查的适用条件。", must_fail: "仅 build/test 通过即 delivered。", recovery: "补齐适用验收或进入 manual_required。" },
+    { id: "adapter_drift", title: "适配器漂移", invariant: "Claude/Codex/Trae 的 hook、prompt、MCP 配置必须共享同一控制面边界。", must_fail: "某适配器缺少 check-bash 或 MCP 配置。", recovery: "重新 soloforge init 接入配置（适配器同步已下线，init 时自动完成）。" },
+    { id: "version_drift", title: "版本漂移", invariant: "用户项目调用的全局 soloforge 必须与发布能力兼容。", must_fail: "repo 已修复但全局命令仍旧版。", recovery: "npm update -g soloforge 后运行 soloforge doctor。" },
+    { id: "concurrency_race", title: "并发竞态", invariant: "多会话写状态和代码必须有租约或冲突检测。", must_fail: "两个会话同时覆盖 current-task。", recovery: "检查 active lease，必要时人工确认归档。" },
+    { id: "recovery_path", title: "恢复路径", invariant: "每个 hard_fail 都必须给合法恢复动作，不得引导手动清理状态。", must_fail: "错误只提示手动删除 .soloforge/state。", recovery: "返回 MCP/CLI 恢复命令和确认条件。" },
+];
+export const CONTROL_PLANE_BRANCH_DETAILS = [
+    { id: "mcp-process-health", category: "mcp_availability", detail: "MCP 进程启动失败必须可诊断。", gate: "CONTROL_PLANE_MATRIX" },
+    { id: "tool-registry-complete", category: "mcp_availability", detail: "注册工具必须与契约一一对应。", gate: "CONTROL_PLANE_TOOL_CONTRACT" },
+    { id: "path-and-bin", category: "mcp_availability", detail: "PATH 与 bin 指向错误必须暴露版本漂移。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "dependency-load", category: "mcp_availability", detail: "依赖缺失不得降级成普通建议。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "schema-required-fields", category: "tool_callability", detail: "schema required 字段必须可由上游满足。", gate: "CONTROL_PLANE_SCHEMA_REACHABILITY" },
+    { id: "sdk-compatible-shape", category: "tool_callability", detail: "工具参数结构必须兼容 MCP SDK。", gate: "CONTROL_PLANE_SCHEMA_REACHABILITY" },
+    { id: "confirm-field", category: "tool_callability", detail: "需要确认的工具必须有 confirm 或 authorized。", gate: "CONTROL_PLANE_TOOL_CONTRACT" },
+    { id: "read-only-side-effect", category: "contract_mislabel", detail: "read_only_bypass 不得声明写副作用。", gate: "CONTROL_PLANE_TOOL_CONTRACT" },
+    { id: "state-write-label", category: "contract_mislabel", detail: "写 task_context 的工具不得伪装只读。", gate: "CONTROL_PLANE_TOOL_CONTRACT" },
+    { id: "workflow-taskid", category: "dead_chain", detail: "requires_workflow 工具必须有 task_id 路径。", gate: "CONTROL_PLANE_SCHEMA_REACHABILITY" },
+    { id: "strict-standalone-auth", category: "dead_chain", detail: "独立 strict 工具必须显式授权。", gate: "CONTROL_PLANE_TOOL_CONTRACT" },
+    { id: "bash-state-write", category: "bypass", detail: "Bash 不得写 .soloforge/state。", gate: "CONTROL_PLANE_BYPASS_GUARD" },
+    { id: "bash-implementation-write", category: "bypass", detail: "Bash 不得绕过 sf_task/sf_work 直接写业务实现文件。", gate: "CONTROL_PLANE_BYPASS_GUARD" },
+    { id: "edit-state-write", category: "bypass", detail: "Edit/Write 不得直接篡改状态。", gate: "CONTROL_PLANE_BYPASS_GUARD" },
+    { id: "business-code-without-task", category: "provenance", detail: "业务代码变更缺少任务来源只能 limited。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "tool-trace-taskid", category: "provenance", detail: "写入 trace 必须带 task_id 或显式授权。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "stale-current-task", category: "state_trust", detail: "陈旧 current-task 必须可受控归档。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "terminal-task-blocking", category: "state_trust", detail: "终态任务不得继续阻塞新任务。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "manual-state-tamper", category: "state_trust", detail: "手工改状态必须降级可信度。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "plan-vs-result", category: "evidence_truth", detail: "计划证据不得等同执行结果。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "command-execution-proof", category: "evidence_truth", detail: "测试通过必须有真实命令执行证据。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "changed-files-subset", category: "scope_completeness", detail: "未覆盖 changed_files 的验证不得交付。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "git-diff-crosscheck", category: "scope_completeness", detail: "验证范围需可与实际变更交叉检查。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "degraded-user-visible", category: "invisible_degradation", detail: "degraded 必须进入用户可见输出。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "advisory-not-pass", category: "invisible_degradation", detail: "advisory 不得伪装 enforced pass。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "local-acceptance", category: "fake_delivery_closure", detail: "适用场景必须有本地验收闭环。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "user-confirmation", category: "fake_delivery_closure", detail: "需要用户确认的交付不得自动完成。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "claude-hook", category: "adapter_drift", detail: "Claude Code hook 必须包含状态旁路拦截。", gate: "CONTROL_PLANE_ADAPTER_DRIFT" },
+    { id: "codex-hook", category: "adapter_drift", detail: "Codex hook 必须包含状态旁路拦截。", gate: "CONTROL_PLANE_ADAPTER_DRIFT" },
+    { id: "trae-config", category: "adapter_drift", detail: "Trae 配置不得绕过 MCP 主链路。", gate: "CONTROL_PLANE_ADAPTER_DRIFT" },
+    { id: "global-version", category: "version_drift", detail: "全局安装旧版必须提示升级。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "package-dist-version", category: "version_drift", detail: "dist 与 package 版本能力必须一致。", gate: "CONTROL_PLANE_DOCTOR" },
+    { id: "workspace-lease", category: "concurrency_race", detail: "写操作必须尊重工作区租约。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "parallel-session", category: "concurrency_race", detail: "并发会话冲突必须人工确认。", gate: "CONTROLLED_GENERATION_CHAIN" },
+    { id: "legal-recovery-command", category: "recovery_path", detail: "每类阻断必须提供合法恢复命令。", gate: "CONTROL_PLANE_MATRIX" },
+    { id: "no-manual-rm-state", category: "recovery_path", detail: "恢复建议不得要求手动 rm 状态文件。", gate: "CONTROL_PLANE_BYPASS_GUARD" },
+];
+export function isSoloforgeStateBypassCommand(commandText) {
+    const command = commandText.replace(/\s+/g, " ").trim();
+    if (!/\.soloforge[/\\]state(?:[/\\]|\b)/.test(command))
+        return false;
+    const writeCommandPattern = /(^|[\s;&|()])(?:rm|mv|cp|mkdir|touch|tee|chmod|chown|python3?|node|ruby|perl)\b/i;
+    const inPlaceEditPattern = /(^|[\s;&|()])(?:sed|gsed)\s+[^;&|]*\s-i\b/i;
+    const redirectionPattern = /(^|[^<])>>?\s*(?:"[^"]*\.soloforge[/\\]state|'[^']*\.soloforge[/\\]state|[^\s;&|]*\.soloforge[/\\]state)/i;
+    return writeCommandPattern.test(command) || inPlaceEditPattern.test(command) || redirectionPattern.test(command);
+}
+/**
+ * 自管理状态机工具 — strict_controlled 但自管理任务状态，由域引擎驱动。
+ * 治本：双系统统一（TaskStore 下线）后，内部通过 TaskContextManager 校验任务存在性，
+ * 清理 legacy 死工具名与 Set 内重复项，仅留当前 strict_controlled 域工具。
+ */
+const SELF_MANAGED_STATE_MACHINE_TOOLS = new Set([
+    "sf_work",
+    "sf_scaffold",
+]);
+export function validateControlPlaneToolContracts(contracts) {
+    const findings = [];
+    const names = new Set();
+    for (const contract of contracts) {
+        if (names.has(contract.tool_name)) {
+            findings.push({
+                severity: "hard_fail",
+                category: "mcp_availability",
+                code: "CONTROL_PLANE_DUPLICATE_TOOL_CONTRACT",
+                message: `工具契约重复: ${contract.tool_name}`,
+                recovery: "删除重复契约并保持工具注册一一对应。",
+            });
+        }
+        names.add(contract.tool_name);
+        const hasWrite = contract.side_effects.some((effect) => READ_ONLY_FORBIDDEN_EFFECTS.has(effect));
+        if (contract.category === "read_only_bypass" && hasWrite) {
+            findings.push({
+                severity: "hard_fail",
+                category: "contract_mislabel",
+                code: "CONTROL_PLANE_READ_ONLY_HAS_SIDE_EFFECT",
+                message: `${contract.tool_name} 标记为 read_only_bypass 但声明写副作用: ${contract.side_effects.join(", ")}`,
+                recovery: "把工具重标为 normal_controlled/strict_controlled，或移除写副作用。",
+            });
+        }
+        if (contract.category === "strict_controlled" &&
+            !contract.requires_workflow &&
+            !contract.requires_authorization &&
+            !SELF_MANAGED_STATE_MACHINE_TOOLS.has(contract.tool_name)) {
+            findings.push({
+                severity: "hard_fail",
+                category: "dead_chain",
+                code: "CONTROL_PLANE_STRICT_WITHOUT_AUTH_OR_WORKFLOW",
+                message: `${contract.tool_name} 是 strict_controlled，但既无 workflow 约束也无显式授权。`,
+                recovery: "补 requires_workflow 或 requires_authorization，并在 schema 中暴露 task_id/confirm。",
+            });
+        }
+        if (hasWrite && contract.requires_authorization && !/确认|授权|confirm|authorized/i.test(contract.description)) {
+            findings.push({
+                severity: "warning",
+                category: "tool_callability",
+                code: "CONTROL_PLANE_AUTH_DESCRIPTION_WEAK",
+                message: `${contract.tool_name} 需要授权，但描述未说明确认语义。`,
+                recovery: "在工具说明和 schema 中明确 confirm/authorized 的含义。",
+            });
+        }
+    }
+    return findings;
+}
+export function assessControlledGenerationChain(input) {
+    const findings = [];
+    const toolNames = new Set(input.traces.map((trace) => trace.tool_name));
+    const changed = new Set(input.changed_files);
+    const verified = new Set(input.verified_files);
+    const hasClassify = toolNames.has("sf_work") || toolNames.has("sf_work");
+    const hasExpand = toolNames.has("sf_work");
+    if (input.changed_files.length > 0 && (!hasClassify || !hasExpand)) {
+        findings.push({
+            severity: "hard_fail",
+            category: "provenance",
+            code: "CONTROLLED_GENERATION_MISSING_MCP_PROVENANCE",
+            message: "存在代码变更，但缺少受控生成来源（sf_work 或 sf_task）。",
+            recovery: "重新通过 SoloForge 状态机执行任务，或把后续验证标记为 limited 并阻断交付。",
+        });
+    }
+    const unverified = [...changed].filter((file) => !verified.has(file));
+    if (unverified.length > 0) {
+        findings.push({
+            severity: "hard_fail",
+            category: "scope_completeness",
+            code: "CONTROLLED_GENERATION_CHANGED_FILE_UNVERIFIED",
+            message: `存在未验证变更文件: ${unverified.join(", ")}`,
+            recovery: "把所有实际变更加入 changed_files 并重新执行确定性门禁复验。",
+        });
+    }
+    const fakeEvidence = input.traces.find((trace) => trace.tool_name === "sf_work" && trace.evidence_kind === "plan" && trace.status === "passed");
+    if (fakeEvidence) {
+        findings.push({
+            severity: "hard_fail",
+            category: "evidence_truth",
+            code: "CONTROLLED_GENERATION_PLAN_AS_RESULT",
+            message: "验证阶段把验证计划当成验证结果。",
+            recovery: "执行真实测试命令并记录 command_execution 证据。",
+        });
+    }
+    const degraded = input.traces.find((trace) => trace.status === "degraded");
+    if (degraded && input.delivery_status === "delivered") {
+        findings.push({
+            severity: "hard_fail",
+            category: "invisible_degradation",
+            code: "CONTROLLED_GENERATION_DEGRADED_DELIVERED",
+            message: "存在 degraded 工具 trace，但交付仍标记 delivered。",
+            recovery: "向用户暴露降级原因，恢复后重新验证，或进入 manual_required。",
+        });
+    }
+    const hasHardFail = findings.some((finding) => finding.severity === "hard_fail");
+    return {
+        accepted: !hasHardFail,
+        confidence: hasHardFail ? "blocked" : "full",
+        findings,
+    };
+}
+export function auditControlPlaneProject(projectPath) {
+    const findings = [];
+    const mcpPath = path.join(projectPath, ".mcp.json");
+    const claudeSettings = path.join(projectPath, ".claude", "settings.json");
+    const codexHooks = path.join(projectPath, ".codex", "hooks.json");
+    if (!fs.existsSync(mcpPath)) {
+        findings.push({
+            severity: "warning",
+            category: "mcp_availability",
+            code: "CONTROL_PLANE_MCP_CONFIG_MISSING",
+            message: ".mcp.json 不存在，AI 可能无法看到 SoloForge MCP 工具。",
+            recovery: "运行 soloforge init 生成 .mcp.json（sync-adapters 已下线，init 时自动同步适配器）。",
+        });
+    }
+    const claudeText = fs.existsSync(claudeSettings) ? fs.readFileSync(claudeSettings, "utf-8") : "";
+    if (claudeText && !claudeText.includes("check-bash")) {
+        findings.push({
+            severity: "hard_fail",
+            category: "adapter_drift",
+            code: "CONTROL_PLANE_CLAUDE_HOOK_MISSING_BYPASS_GUARD",
+            message: "Claude Code hooks 未包含 check-bash，可能绕过状态保护。",
+            recovery: "Hooks 机制已下线，状态保护由 MCP 工具内化（generate-hooks 已移除）；本检查为遗留项。",
+        });
+    }
+    const codexText = fs.existsSync(codexHooks) ? fs.readFileSync(codexHooks, "utf-8") : "";
+    if (codexText && !codexText.includes("check-bash")) {
+        findings.push({
+            severity: "hard_fail",
+            category: "adapter_drift",
+            code: "CONTROL_PLANE_CODEX_HOOK_MISSING_BYPASS_GUARD",
+            message: "Codex hooks 未包含 check-bash，可能绕过状态保护。",
+            recovery: "Codex hooks 检查为遗留项，状态保护由 MCP 工具内化（generate-codex 已移除）。",
+        });
+    }
+    const stateDir = path.join(projectPath, ".soloforge", "state");
+    const currentPath = path.join(stateDir, "current-task.json");
+    if (fs.existsSync(currentPath)) {
+        try {
+            const current = safeJsonParse(fs.readFileSync(currentPath, "utf-8"));
+            const taskId = current?.task_id ?? current?.current_task_id;
+            if (taskId) {
+                const taskFilePath = path.join(stateDir, `${taskId}.json`);
+                if (!fs.existsSync(taskFilePath)) {
+                    // 陈旧指针：指向不存在任务（原有检查，recovery 改指 MCP 工具，去死 CLI）
+                    findings.push({
+                        severity: "warning",
+                        category: "state_trust",
+                        code: "CONTROL_PLANE_STALE_CURRENT_TASK",
+                        message: `current-task 指向不存在任务: ${taskId}`,
+                        recovery: "调用 sf_task action=archive_stale confirm=true 清理陈旧指针。",
+                    });
+                }
+                else {
+                    // #37-3：陈旧指针指向已终态任务（done/failed）— 运行时态指针污染
+                    const task = safeJsonParse(fs.readFileSync(taskFilePath, "utf-8"));
+                    if (task?.status === "done" || task?.status === "failed") {
+                        findings.push({
+                            severity: "warning",
+                            category: "state_trust",
+                            code: "CONTROL_PLANE_CURRENT_TASK_TERMINATED",
+                            message: `current-task 指向已终态任务（status=${task.status}）: ${taskId}，运行时态指针陈旧。`,
+                            recovery: "调用 sf_task action=archive_stale confirm=true 归档陈旧指针，运行时态从健康磁盘态重算。",
+                        });
+                    }
+                    // #37-2：decision_workshop 确认态 — 未完全确认时架构设计推进被门禁拦截
+                    if (task?.decision_workshop?.status && task.decision_workshop.status !== "confirmed") {
+                        findings.push({
+                            severity: "advisory",
+                            category: "state_trust",
+                            code: "CONTROL_PLANE_DECISION_WORKSHOP_UNCONFIRMED",
+                            message: `decision_workshop 未完全确认（status=${task.decision_workshop.status}），架构设计（design 域）推进可能被门禁拦截。`,
+                            recovery: "调用 sf_task confirm_decisions 逐域补确认，或 sf_task start 重置到需求分析。",
+                        });
+                    }
+                }
+                // #37-1：current_slice 存在性（A4a 权威字段）— 空则 B15 门禁走正则回退推断切片 ID
+                const pipelinePath = path.join(stateDir, `pipeline-${taskId}.yaml`);
+                if (fs.existsSync(pipelinePath)) {
+                    try {
+                        const pipeline = parseYaml(fs.readFileSync(pipelinePath, "utf-8"));
+                        if (pipeline && !pipeline.current_slice) {
+                            findings.push({
+                                severity: "advisory",
+                                category: "state_trust",
+                                code: "CONTROL_PLANE_CURRENT_SLICE_EMPTY",
+                                message: "当前管线 current_slice 为空，B15 门禁将走正则回退推断切片 ID，可能 ODA 投影失败。",
+                                recovery: "调用 sf_task verify_slice 或 start_slice 派生权威 current_slice。",
+                            });
+                        }
+                    }
+                    catch {
+                        // pipeline yaml 解析失败不阻断其他检查（仅跳过 current_slice 诊断）
+                    }
+                }
+            }
+        }
+        catch {
+            findings.push({
+                severity: "hard_fail",
+                category: "state_trust",
+                code: "CONTROL_PLANE_STATE_JSON_INVALID",
+                message: "current-task.json 不是合法 JSON。",
+                recovery: "使用 sf_task 受控恢复，不要手动删除状态目录。",
+            });
+        }
+    }
+    return {
+        passed: findings.every((finding) => finding.severity !== "hard_fail"),
+        matrix_count: CONTROL_PLANE_MATRIX.length,
+        branch_detail_count: CONTROL_PLANE_BRANCH_DETAILS.length,
+        findings,
+    };
+}
+//# sourceMappingURL=control_plane_contract.js.map

package/dist/gate/contracts/control_plane_contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control_plane_contract.js","sourceRoot":"","sources":["../../../src/gate/contracts/control_plane_contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAsE1C,MAAM,kBAAkB,GAAiB;IACvC,YAAY;IACZ,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,YAAY;IACZ,UAAU;IACV,WAAW;IACX,gBAAgB;CACjB,CAAC;AAEF,iEAAiE;AACjE,MAAM,2BAA2B,GAAgB,IAAI,GAAG,CAAC;IACvD,GAAG,kBAAkB;IACrB,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAA6B;IAC5D,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,kCAAkC,EAAE,SAAS,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uCAAuC,EAAE;IACjL,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,wCAAwC,EAAE,SAAS,EAAE,+BAA+B,EAAE,QAAQ,EAAE,oCAAoC,EAAE;IAC5L,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,0CAA0C,EAAE,SAAS,EAAE,gCAAgC,EAAE,QAAQ,EAAE,iDAAiD,EAAE;IAC3M,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,wBAAwB,EAAE,SAAS,EAAE,sCAAsC,EAAE,QAAQ,EAAE,iCAAiC,EAAE;IACvK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,2DAA2D,EAAE,SAAS,EAAE,0BAA0B,EAAE,QAAQ,EAAE,+CAA+C,EAAE;IACvM,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,kCAAkC,EAAE;IAC5J,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,2CAA2C,EAAE,SAAS,EAAE,0BAA0B,EAAE,QAAQ,EAAE,4CAA4C,EAAE;IAC3L,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,SAAS,EAAE,8BAA8B,EAAE,QAAQ,EAAE,iCAAiC,EAAE;IACxK,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,kCAAkC,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,kDAAkD,EAAE;IACzL,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,mCAAmC,EAAE,SAAS,EAAE,kCAAkC,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC5K,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,qCAAqC,EAAE,SAAS,EAAE,6BAA6B,EAAE,QAAQ,EAAE,4BAA4B,EAAE;IACnL,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,oDAAoD,EAAE,SAAS,EAAE,6BAA6B,EAAE,QAAQ,EAAE,8CAA8C,EAAE;IAC5M,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,gCAAgC,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,+CAA+C,EAAE;IAC9K,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,EAAE,4BAA4B,EAAE;IACzJ,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,qCAAqC,EAAE,SAAS,EAAE,6BAA6B,EAAE,QAAQ,EAAE,uBAAuB,EAAE;CACtK,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAA+B;IACtE,EAAE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACpH,EAAE,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC7H,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACtH,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC/G,EAAE,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,mCAAmC,EAAE;IAChJ,EAAE,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,mCAAmC,EAAE;IACtI,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,kCAAkC,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACtI,EAAE,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACzI,EAAE,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,2BAA2B,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACpI,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,qCAAqC,EAAE,IAAI,EAAE,mCAAmC,EAAE;IAC3I,EAAE,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC5H,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAA4B,EAAE;IACxH,EAAE,EAAE,EAAE,2BAA2B,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,sCAAsC,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC3I,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAClH,EAAE,EAAE,EAAE,4BAA4B,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACpI,EAAE,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC/H,EAAE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvH,EAAE,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACjH,EAAE,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC7G,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAClH,EAAE,EAAE,EAAE,yBAAyB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC9H,EAAE,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACzI,EAAE,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC9H,EAAE,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACvI,EAAE,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC3I,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC5H,EAAE,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC/H,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC7H,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACtH,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACrH,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC1G,EAAE,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC3H,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACrH,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACtH,EAAE,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACpH,EAAE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,4BAA4B,EAAE;CAC3H,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAErE,MAAM,mBAAmB,GACvB,kFAAkF,CAAC;IACrF,MAAM,kBAAkB,GAAG,4CAA4C,CAAC;IACxE,MAAM,kBAAkB,GAAG,2GAA2G,CAAC;IAEvI,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnH,CAAC;AAED;;;;GAIG;AACH,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAC;IAC/C,SAAS;IACT,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,iCAAiC,CAAC,SAA4C;IAC5F,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,uCAAuC;gBAC7C,OAAO,EAAE,WAAW,QAAQ,CAAC,SAAS,EAAE;gBACxC,QAAQ,EAAE,oBAAoB;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,mBAAmB;gBAC7B,IAAI,EAAE,yCAAyC;gBAC/C,OAAO,EAAE,GAAG,QAAQ,CAAC,SAAS,kCAAkC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClG,QAAQ,EAAE,qDAAqD;aAChE,CAAC,CAAC;QACL,CAAC;QACD,IACE,QAAQ,CAAC,QAAQ,KAAK,mBAAmB;YACzC,CAAC,QAAQ,CAAC,iBAAiB;YAC3B,CAAC,QAAQ,CAAC,sBAAsB;YAChC,CAAC,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACzD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,+CAA+C;gBACrD,OAAO,EAAE,GAAG,QAAQ,CAAC,SAAS,6CAA6C;gBAC3E,QAAQ,EAAE,6EAA6E;aACxF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,sBAAsB,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3G,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,qCAAqC;gBAC3C,OAAO,EAAE,GAAG,QAAQ,CAAC,SAAS,mBAAmB;gBACjD,QAAQ,EAAE,2CAA2C;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAA2B;IACzE,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE/C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE3C,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,8CAA8C;YACpD,OAAO,EAAE,sCAAsC;YAC/C,QAAQ,EAAE,iDAAiD;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,oBAAoB;YAC9B,IAAI,EAAE,+CAA+C;YACrD,OAAO,EAAE,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC9C,QAAQ,EAAE,uCAAuC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAChJ,IAAI,YAAY,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,mCAAmC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAC3E,IAAI,QAAQ,IAAI,KAAK,CAAC,eAAe,KAAK,WAAW,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,uBAAuB;YACjC,IAAI,EAAE,0CAA0C;YAChD,OAAO,EAAE,wCAAwC;YACjD,QAAQ,EAAE,wCAAwC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IACjF,OAAO;QACL,QAAQ,EAAE,CAAC,WAAW;QACtB,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAC5C,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,2CAA2C;YACpD,QAAQ,EAAE,kEAAkE;SAC7E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE,gDAAgD;YACtD,OAAO,EAAE,4CAA4C;YACrD,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE,+CAA+C;YACrD,OAAO,EAAE,sCAAsC;YAC/C,QAAQ,EAAE,wDAAwD;SACnE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAiD,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACrH,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,eAAe,CAAC;YAC5D,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBACjC,+CAA+C;oBAC/C,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,aAAa;wBACvB,IAAI,EAAE,kCAAkC;wBACxC,OAAO,EAAE,yBAAyB,MAAM,EAAE;wBAC1C,QAAQ,EAAE,sDAAsD;qBACjE,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,2CAA2C;oBAC3C,MAAM,IAAI,GAAG,aAAa,CACxB,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CACvC,CAAC;oBACF,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;wBACzD,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,SAAS;4BACnB,QAAQ,EAAE,aAAa;4BACvB,IAAI,EAAE,uCAAuC;4BAC7C,OAAO,EAAE,+BAA+B,IAAI,CAAC,MAAM,MAAM,MAAM,YAAY;4BAC3E,QAAQ,EAAE,mEAAmE;yBAC9E,CAAC,CAAC;oBACL,CAAC;oBACD,kDAAkD;oBAClD,IAAI,IAAI,EAAE,iBAAiB,EAAE,MAAM,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBACrF,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,UAAU;4BACpB,QAAQ,EAAE,aAAa;4BACvB,IAAI,EAAE,6CAA6C;4BACnD,OAAO,EAAE,kCAAkC,IAAI,CAAC,iBAAiB,CAAC,MAAM,4BAA4B;4BACpG,QAAQ,EAAE,6DAA6D;yBACxE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,2DAA2D;gBAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,MAAM,OAAO,CAAC,CAAC;gBACpE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAsC,CAAC;wBACxG,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;4BACxC,QAAQ,CAAC,IAAI,CAAC;gCACZ,QAAQ,EAAE,UAAU;gCACpB,QAAQ,EAAE,aAAa;gCACvB,IAAI,EAAE,mCAAmC;gCACzC,OAAO,EAAE,wDAAwD;gCACjE,QAAQ,EAAE,2DAA2D;6BACtE,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,kDAAkD;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,aAAa;gBACvB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,8BAA8B;gBACvC,QAAQ,EAAE,6BAA6B;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC;QACrE,YAAY,EAAE,oBAAoB,CAAC,MAAM;QACzC,mBAAmB,EAAE,4BAA4B,CAAC,MAAM;QACxD,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/gate/contracts/escape_report.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Escape Report — 契约层模块。
+ *
+ * 职责边界：
+ * - 负责：EscapeType 等 契约层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：契约验证、注册表查询
+ * 调用谁：node:fs、node:path、logger、helpers
+ *
+ * 数据流：契约定义 → 验证逻辑 → 通过/拒绝结果
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+/** 逃逸类型 */
+export type EscapeType = "rule_gap" | "weak_test" | "bad_evidence" | "ai_escape" | "human_miss" | "tool_bug" | "false_positive";
+/** 能力处置动作 */
+export type CapabilityAction = "keep" | "downgrade" | "disable" | "promote_blocked";
+/** 逃逸报告 */
+export interface EscapeReport {
+    /** 逃逸 ID */
+    escape_id: string;
+    /** 关联的任务 ID */
+    task_id: string;
+    /** 关联的策略 ID */
+    policy_id: string;
+    /** 失败类型 */
+    failure_type: EscapeType;
+    /** 预期守卫行为 */
+    expected_guard: string;
+    /** 实际逃逸行为 */
+    actual_escape: string;
+    /** 证据描述 */
+    evidence: string;
+    /** 根本原因 */
+    root_cause: string;
+    /** 所需修复措施 */
+    fix_required: string;
+    /** 负责人 */
+    owner: string;
+    /** 截止日期 */
+    due_date: string;
+    /** 能力处置动作 */
+    capability_action: CapabilityAction;
+    /** 创建时间 */
+    created_at: string;
+}
+/** 逃逸报告统计信息 */
+export interface EscapeReportStats {
+    /** 总报告数 */
+    total: number;
+    /** 按失败类型分布 */
+    by_type: Record<EscapeType, number>;
+    /** 按处置动作分布 */
+    by_action: Record<CapabilityAction, number>;
+}
+/** 逃逸报告存储 — 管理逃逸报告的持久化和查询 */
+export declare class EscapeReportStore {
+    private filePath;
+    private reports;
+    private loaded;
+    /**
+     * 创建逃逸报告存储实例。
+     * @param stateDir - 状态目录路径，报告数据将存储在此目录下
+     */
+    constructor(stateDir: string);
+    /** 确保数据已从磁盘加载 */
+    private ensureLoaded;
+    /** 持久化当前数据到磁盘（原子写入） */
+    private persist;
+    /**
+     * 追加逃逸报告并持久化。
+     * @param report - 要追加的逃逸报告
+     */
+    append(report: EscapeReport): void;
+    /**
+     * 查询逃逸报告列表，支持按失败类型、策略 ID 和任务 ID 过滤。
+     * @param filter - 可选过滤条件
+     * @param filter.failure_type - 按失败类型过滤
+     * @param filter.policy_id - 按策略 ID 过滤
+     * @param filter.task_id - 按任务 ID 过滤
+     * @returns 匹配的逃逸报告列表（深拷贝）
+     */
+    list(filter?: {
+        failure_type?: EscapeType;
+        policy_id?: string;
+        task_id?: string;
+    }): EscapeReport[];
+    /**
+     * 获取逃逸报告统计信息。
+     * @returns 包含总数和按类型/动作分布的统计信息
+     */
+    stats(): EscapeReportStats;
+    /**
+     * 清空所有逃逸报告并持久化。
+     */
+    clear(): void;
+    /**
+     * 获取逃逸报告数据文件路径。
+     * @returns 数据文件的绝对路径
+     */
+    getFilePath(): string;
+}
+//# sourceMappingURL=escape_report.d.ts.map

package/dist/gate/contracts/escape_report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape_report.d.ts","sourceRoot":"","sources":["../../../src/gate/contracts/escape_report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,WAAW;AACX,MAAM,MAAM,UAAU,GAClB,UAAU,GACV,WAAW,GACX,cAAc,GACd,WAAW,GACX,YAAY,GACZ,UAAU,GACV,gBAAgB,CAAC;AAErB,aAAa;AACb,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,WAAW,GACX,SAAS,GACT,iBAAiB,CAAC;AAEtB,WAAW;AACX,MAAM,WAAW,YAAY;IAC3B,YAAY;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW;IACX,YAAY,EAAE,UAAU,CAAC;IACzB,aAAa;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU;IACV,KAAK,EAAE,MAAM,CAAC;IACd,WAAW;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa;IACb,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,WAAW;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAe;AACf,MAAM,WAAW,iBAAiB;IAChC,WAAW;IACX,KAAK,EAAE,MAAM,CAAC;IACd,cAAc;IACd,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpC,cAAc;IACd,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;CAC7C;AAoCD,6BAA6B;AAC7B,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,MAAM,CAAS;IAEvB;;;OAGG;gBACS,QAAQ,EAAE,MAAM;IAQ5B,iBAAiB;IACjB,OAAO,CAAC,YAAY;IAWpB,uBAAuB;IACvB,OAAO,CAAC,OAAO;IAMf;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAOlC;;;;;;;OAOG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,UAAU,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY,EAAE;IAelG;;;OAGG;IACH,KAAK,IAAI,iBAAiB;IAW1B;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb;;;OAGG;IACH,WAAW,IAAI,MAAM;CAGtB"}