soloforge 1.2.2 → 1.2.3

package/dist/engine/runtime_safety.js

@@ -0,0 +1,195 @@
+/**
+ * 运行安全包 — 证据 hash chain、命令副作用分级、供应链治理、迁移回滚契约。
+ * advisory: 不 hard block（除 destructive 命令需人工确认）。
+ */
+import crypto from "node:crypto";
+/**
+ * 构建证据链 — 每个步骤产出带 hash 的证据块，与前一个块链式连接。
+ */
+export function buildEvidenceChain(steps) {
+    const chain = [];
+    let prevHash = null;
+    for (const s of steps) {
+        const timestamp = s.timestamp ?? new Date().toISOString();
+        const dataHash = crypto
+            .createHash("sha256")
+            .update(s.payload)
+            .digest("hex")
+            .slice(0, 16);
+        const chainInput = `${s.step}:${timestamp}:${dataHash}:${prevHash ?? "genesis"}`;
+        const chainHash = crypto
+            .createHash("sha256")
+            .update(chainInput)
+            .digest("hex")
+            .slice(0, 16);
+        const block = {
+            step: s.step,
+            timestamp,
+            data_hash: dataHash,
+            prev_hash: prevHash,
+            chain_hash: chainHash,
+            payload: s.payload,
+        };
+        chain.push(block);
+        prevHash = chainHash;
+    }
+    return chain;
+}
+/**
+ * 验证证据链完整性 — 检查每个块的 chain_hash 是否与重算结果一致。
+ */
+export function verifyEvidenceChain(chain) {
+    if (chain.length === 0) {
+        return { valid: true, broken_at: null, advisory: "empty chain" };
+    }
+    for (let i = 0; i < chain.length; i++) {
+        const block = chain[i];
+        const expectedPrev = i === 0 ? null : chain[i - 1].chain_hash;
+        if (block.prev_hash !== expectedPrev) {
+            return {
+                valid: false,
+                broken_at: i,
+                advisory: `chain broken at step ${i}: prev_hash mismatch`,
+            };
+        }
+        // Recompute data_hash from payload to detect tampering
+        const expectedDataHash = crypto
+            .createHash("sha256")
+            .update(block.payload)
+            .digest("hex")
+            .slice(0, 16);
+        if (block.data_hash !== expectedDataHash) {
+            return {
+                valid: false,
+                broken_at: i,
+                advisory: `chain broken at step ${i}: data_hash mismatch (payload tampered)`,
+            };
+        }
+        const chainInput = `${block.step}:${block.timestamp}:${block.data_hash}:${block.prev_hash ?? "genesis"}`;
+        const expectedHash = crypto
+            .createHash("sha256")
+            .update(chainInput)
+            .digest("hex")
+            .slice(0, 16);
+        if (block.chain_hash !== expectedHash) {
+            return {
+                valid: false,
+                broken_at: i,
+                advisory: `chain broken at step ${i}: chain_hash mismatch`,
+            };
+        }
+    }
+    return {
+        valid: true,
+        broken_at: null,
+        advisory: `chain intact: ${chain.length} blocks verified`,
+    };
+}
+const DESTRUCTIVE_PATTERNS = [
+    { pattern: /\brm\s+(-[rf]+\s+|--no-preserve-root)/, example: "rm -rf" },
+    { pattern: /\bgit\s+(push\s+--force|reset\s+--hard|clean\s+-fd)/, example: "git push --force" },
+    { pattern: /\bdd\s+if=/, example: "dd" },
+    { pattern: /\b(format|mkfs)\b/, example: "format" },
+    { pattern: /\bdrop\s+(table|database|schema)\b/i, example: "DROP TABLE" },
+    { pattern: /\bTRUNCATE\b/i, example: "TRUNCATE" },
+    { pattern: /\bDELETE\s+FROM\b/i, example: "DELETE FROM" },
+    { pattern: /\b(npm\s+publish|yarn\s+publish|pnpm\s+publish)\b/, example: "npm publish" },
+];
+const MUTATING_PATTERNS = [
+    { pattern: /\bgit\s+(add|commit|push|merge|rebase|checkout)\b/, example: "git commit" },
+    { pattern: /\b(npm\s+install|yarn\s+add|pnpm\s+add)\b/, example: "npm install" },
+    { pattern: /\bmv\s+/, example: "mv" },
+    { pattern: /\bcp\s+/, example: "cp" },
+    { pattern: /\bmkdir\s+/, example: "mkdir" },
+    { pattern: /\bdocker\s+(run|build|push|rmi|rm)\b/, example: "docker run" },
+    { pattern: /\b(INSERT|UPDATE|ALTER|CREATE)\b/i, example: "INSERT" },
+];
+/**
+ * 分类命令的副作用级别。
+ */
+export function classifyCommand(command) {
+    for (const dp of DESTRUCTIVE_PATTERNS) {
+        if (dp.pattern.test(command)) {
+            return {
+                command,
+                risk: "destructive",
+                advisory: `destructive command detected: ${dp.example} — requires human confirmation`,
+                requires_human_confirm: true,
+            };
+        }
+    }
+    for (const mp of MUTATING_PATTERNS) {
+        if (mp.pattern.test(command)) {
+            return {
+                command,
+                risk: "mutating",
+                advisory: `mutating command: ${mp.example}`,
+                requires_human_confirm: false,
+            };
+        }
+    }
+    return {
+        command,
+        risk: "read_only",
+        advisory: "read-only command",
+        requires_human_confirm: false,
+    };
+}
+/**
+ * 检查迁移契约 — 确保 schema 变更有回滚路径。
+ */
+export function checkMigrationContract(migration) {
+    const forwardClassified = classifyCommand(migration.forward_command);
+    const rollbackClassified = classifyCommand(migration.rollback_command);
+    if (!migration.rollback_command || migration.rollback_command.trim().length === 0) {
+        return {
+            migration_id: migration.migration_id,
+            has_rollback: false,
+            rollback_valid: false,
+            advisory: `advisory: migration "${migration.migration_id}" has no rollback command — manual recovery required if it fails`,
+        };
+    }
+    // Rollback should be the inverse operation
+    const rollbackValid = migration.rollback_command.length > 0;
+    return {
+        migration_id: migration.migration_id,
+        has_rollback: true,
+        rollback_valid: rollbackValid,
+        advisory: `migration "${migration.migration_id}": forward=${forwardClassified.risk}, rollback=${rollbackClassified.risk}`,
+    };
+}
+const LOCKFILE_NAMES = [
+    "package-lock.json",
+    "pnpm-lock.yaml",
+    "yarn.lock",
+    "go.sum",
+    "Cargo.lock",
+];
+/**
+ * 检查供应链安全 — 验证依赖有 lockfile 和完整性 hash。
+ * 此为轻量级检查，不读取实际文件内容。
+ */
+export function checkSupplyChain(rootDirFiles, dependencies) {
+    const hasLockfile = LOCKFILE_NAMES.some((lf) => rootDirFiles.includes(lf));
+    const checks = dependencies.map((dep) => ({
+        package_name: dep.name,
+        version: dep.version,
+        has_lockfile: hasLockfile,
+        has_integrity_hash: hasLockfile, // lockfile implies integrity hashes
+        advisory: hasLockfile
+            ? "locked with integrity hash"
+            : `advisory: ${dep.name}@${dep.version} not locked — supply chain risk`,
+    }));
+    const locked = checks.filter((c) => c.has_lockfile).length;
+    const unlocked = checks.length - locked;
+    return {
+        total_dependencies: dependencies.length,
+        locked_dependencies: locked,
+        unlocked_dependencies: unlocked,
+        checks,
+        advisory: unlocked > 0
+            ? `advisory: ${unlocked}/${dependencies.length} dependencies not locked — recommend adding lockfile`
+            : `all ${dependencies.length} dependencies locked`,
+    };
+}
+//# sourceMappingURL=runtime_safety.js.map

package/dist/engine/runtime_safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime_safety.js","sourceRoot":"","sources":["../../src/engine/runtime_safety.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAajC;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAmE;IAEnE,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM;aACpB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;aACjB,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,MAAM,UAAU,GAAW,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,IAAI,QAAQ,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QACzF,MAAM,SAAS,GAAW,MAAM;aAC7B,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,UAAU,CAAC;aAClB,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS;YACT,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IAKxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9D,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,CAAC;gBACZ,QAAQ,EAAE,wBAAwB,CAAC,sBAAsB;aAC1D,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,MAAM;aAC5B,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;aACrB,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,CAAC;gBACZ,QAAQ,EAAE,wBAAwB,CAAC,yCAAyC;aAC7E,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QACzG,MAAM,YAAY,GAAG,MAAM;aACxB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,UAAU,CAAC;aAClB,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,CAAC;gBACZ,QAAQ,EAAE,wBAAwB,CAAC,uBAAuB;aAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,iBAAiB,KAAK,CAAC,MAAM,kBAAkB;KAC1D,CAAC;AACJ,CAAC;AAaD,MAAM,oBAAoB,GAAgD;IACxE,EAAE,OAAO,EAAE,uCAAuC,EAAE,OAAO,EAAE,QAAQ,EAAE;IACvE,EAAE,OAAO,EAAE,qDAAqD,EAAE,OAAO,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IACxC,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,EAAE,OAAO,EAAE,qCAAqC,EAAE,OAAO,EAAE,YAAY,EAAE;IACzE,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE;IACjD,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,EAAE;IACzD,EAAE,OAAO,EAAE,mDAAmD,EAAE,OAAO,EAAE,aAAa,EAAE;CACzF,CAAC;AAEF,MAAM,iBAAiB,GAAgD;IACrE,EAAE,OAAO,EAAE,mDAAmD,EAAE,OAAO,EAAE,YAAY,EAAE;IACvF,EAAE,OAAO,EAAE,2CAA2C,EAAE,OAAO,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;IACrC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;IACrC,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE;IAC3C,EAAE,OAAO,EAAE,sCAAsC,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1E,EAAE,OAAO,EAAE,mCAAmC,EAAE,OAAO,EAAE,QAAQ,EAAE;CACpE,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,iCAAiC,EAAE,CAAC,OAAO,gCAAgC;gBACrF,sBAAsB,EAAE,IAAI;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,qBAAqB,EAAE,CAAC,OAAO,EAAE;gBAC3C,sBAAsB,EAAE,KAAK;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,mBAAmB;QAC7B,sBAAsB,EAAE,KAAK;KAC9B,CAAC;AACJ,CAAC;AAoBD;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAA4B;IAE5B,MAAM,iBAAiB,GAAG,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACrE,MAAM,kBAAkB,GAAG,eAAe,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAEvE,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,wBAAwB,SAAS,CAAC,YAAY,kEAAkE;SAC3H,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5D,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,aAAa;QAC7B,QAAQ,EAAE,cAAc,SAAS,CAAC,YAAY,cAAc,iBAAiB,CAAC,IAAI,cAAc,kBAAkB,CAAC,IAAI,EAAE;KAC1H,CAAC;AACJ,CAAC;AAoBD,MAAM,cAAc,GAAG;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAsB,EACtB,YAAsD;IAEtD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3E,MAAM,MAAM,GAAsB,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3D,YAAY,EAAE,GAAG,CAAC,IAAI;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,YAAY,EAAE,WAAW;QACzB,kBAAkB,EAAE,WAAW,EAAE,oCAAoC;QACrE,QAAQ,EAAE,WAAW;YACnB,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,iCAAiC;KAC1E,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAExC,OAAO;QACL,kBAAkB,EAAE,YAAY,CAAC,MAAM;QACvC,mBAAmB,EAAE,MAAM;QAC3B,qBAAqB,EAAE,QAAQ;QAC/B,MAAM;QACN,QAAQ,EACN,QAAQ,GAAG,CAAC;YACV,CAAC,CAAC,aAAa,QAAQ,IAAI,YAAY,CAAC,MAAM,sDAAsD;YACpG,CAAC,CAAC,OAAO,YAAY,CAAC,MAAM,sBAAsB;KACvD,CAAC;AACJ,CAAC"}

package/dist/engine/scope_lease.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Scope Lease — 追踪任务对文件的 advisory 租约。
+ *
+ * CAP-011 实验性: advisory only, 不 hard block, 不阻止写入。
+ * 职责: 记录哪个任务正在操作哪些文件，供其他任务查询冲突。
+ *
+ * 生命周期:
+ * - 任务进入 executing 时 acquire
+ * - 任务完成/失败/取消时 release
+ * - 其他任务写前可 queryLease 查询 advisory 冲突
+ */
+export interface LeaseEntry {
+    task_id: string;
+    file_paths: string[];
+    acquired_at: string;
+    released_at: string | null;
+}
+export interface LeaseConflict {
+    file_path: string;
+    leased_by: string;
+    lease_acquired_at: string;
+    severity: "advisory";
+    message: string;
+}
+export interface LeaseSummary {
+    active_leases: number;
+    total_files_leased: number;
+    leased_by_task: Record<string, string[]>;
+}
+export declare class ScopeLeaseStore {
+    private filePath;
+    private leases;
+    private loaded;
+    constructor(stateDir: string);
+    private ensureLoaded;
+    private persist;
+    acquire(taskId: string, filePaths: string[]): LeaseEntry;
+    release(taskId: string): LeaseEntry | null;
+    queryLease(taskId: string, filePath: string): LeaseConflict | null;
+    getActiveLeases(): LeaseEntry[];
+    getLeaseForTask(taskId: string): LeaseEntry | null;
+    getSummary(): LeaseSummary;
+    clear(): void;
+}
+//# sourceMappingURL=scope_lease.d.ts.map

package/dist/engine/scope_lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope_lease.d.ts","sourceRoot":"","sources":["../../src/engine/scope_lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,MAAM,CAAS;gBAEX,QAAQ,EAAE,MAAM;IAO5B,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,UAAU;IAcxD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAU1C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAoBlE,eAAe,IAAI,UAAU,EAAE;IAK/B,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAKlD,UAAU,IAAI,YAAY;IAe1B,KAAK,IAAI,IAAI;CAKd"}

package/dist/engine/scope_lease.js

@@ -0,0 +1,122 @@
+/**
+ * Scope Lease — 追踪任务对文件的 advisory 租约。
+ *
+ * CAP-011 实验性: advisory only, 不 hard block, 不阻止写入。
+ * 职责: 记录哪个任务正在操作哪些文件，供其他任务查询冲突。
+ *
+ * 生命周期:
+ * - 任务进入 executing 时 acquire
+ * - 任务完成/失败/取消时 release
+ * - 其他任务写前可 queryLease 查询 advisory 冲突
+ */
+import fs from "node:fs";
+import path from "node:path";
+export class ScopeLeaseStore {
+    filePath;
+    leases = new Map();
+    loaded = false;
+    constructor(stateDir) {
+        this.filePath = path.join(stateDir, "scope-leases.json");
+        if (!fs.existsSync(stateDir)) {
+            fs.mkdirSync(stateDir, { recursive: true });
+        }
+    }
+    ensureLoaded() {
+        if (this.loaded)
+            return;
+        this.loaded = true;
+        try {
+            const data = fs.readFileSync(this.filePath, "utf-8");
+            const entries = JSON.parse(data);
+            for (const e of entries) {
+                if (e.released_at === null) {
+                    this.leases.set(e.task_id, e);
+                }
+            }
+        }
+        catch {
+            this.leases = new Map();
+        }
+    }
+    persist() {
+        const entries = [...this.leases.values()];
+        const tmpPath = `${this.filePath}.tmp`;
+        fs.writeFileSync(tmpPath, JSON.stringify(entries, null, 2));
+        fs.renameSync(tmpPath, this.filePath);
+    }
+    acquire(taskId, filePaths) {
+        this.ensureLoaded();
+        const resolved = filePaths.map(f => path.resolve(f));
+        const entry = {
+            task_id: taskId,
+            file_paths: resolved,
+            acquired_at: new Date().toISOString(),
+            released_at: null,
+        };
+        this.leases.set(taskId, entry);
+        this.persist();
+        return entry;
+    }
+    release(taskId) {
+        this.ensureLoaded();
+        const entry = this.leases.get(taskId);
+        if (!entry)
+            return null;
+        entry.released_at = new Date().toISOString();
+        this.leases.delete(taskId);
+        this.persist();
+        return entry;
+    }
+    queryLease(taskId, filePath) {
+        this.ensureLoaded();
+        const resolved = path.resolve(filePath);
+        for (const [ownerId, entry] of this.leases) {
+            if (ownerId === taskId)
+                continue;
+            for (const leased of entry.file_paths) {
+                if (leased === resolved || isParentPath(leased, resolved)) {
+                    return {
+                        file_path: resolved,
+                        leased_by: ownerId,
+                        lease_acquired_at: entry.acquired_at,
+                        severity: "advisory",
+                        message: `advisory: file is in scope of task ${ownerId} (leased since ${entry.acquired_at})`,
+                    };
+                }
+            }
+        }
+        return null;
+    }
+    getActiveLeases() {
+        this.ensureLoaded();
+        return [...this.leases.values()];
+    }
+    getLeaseForTask(taskId) {
+        this.ensureLoaded();
+        return this.leases.get(taskId) ?? null;
+    }
+    getSummary() {
+        this.ensureLoaded();
+        const leasedByTask = {};
+        let totalFiles = 0;
+        for (const [taskId, entry] of this.leases) {
+            leasedByTask[taskId] = [...entry.file_paths];
+            totalFiles += entry.file_paths.length;
+        }
+        return {
+            active_leases: this.leases.size,
+            total_files_leased: totalFiles,
+            leased_by_task: leasedByTask,
+        };
+    }
+    clear() {
+        this.leases.clear();
+        this.loaded = true;
+        this.persist();
+    }
+}
+function isParentPath(parent, child) {
+    const rel = path.relative(parent, child);
+    return rel.length > 0 && !rel.startsWith("..");
+}
+//# sourceMappingURL=scope_lease.js.map

package/dist/engine/scope_lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope_lease.js","sourceRoot":"","sources":["../../src/engine/scope_lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAuB7B,MAAM,OAAO,eAAe;IAClB,QAAQ,CAAS;IACjB,MAAM,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC5C,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,OAAO,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,OAAO;QACb,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,SAAmB;QACzC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,GAAe;YACxB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,IAAI;SAClB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,QAAgB;QACzC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,IAAI,OAAO,KAAK,MAAM;gBAAE,SAAS;YACjC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACtC,IAAI,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC1D,OAAO;wBACL,SAAS,EAAE,QAAQ;wBACnB,SAAS,EAAE,OAAO;wBAClB,iBAAiB,EAAE,KAAK,CAAC,WAAW;wBACpC,QAAQ,EAAE,UAAU;wBACpB,OAAO,EAAE,sCAAsC,OAAO,kBAAkB,KAAK,CAAC,WAAW,GAAG;qBAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;QACb,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,MAAc;QAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,UAAU;QACR,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,YAAY,GAA6B,EAAE,CAAC;QAClD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7C,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACxC,CAAC;QACD,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YAC/B,kBAAkB,EAAE,UAAU;YAC9B,cAAc,EAAE,YAAY;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,KAAa;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/engine/semantic_evidence.d.ts

@@ -0,0 +1,23 @@
+/**
+ * 语义交付证据 — R9 需求→语义 diff→断言→变异证据链。
+ * CAP-011 advisory: 不 hard block，只产出 advisory 报告。
+ *
+ * 职责:
+ * - computeSemanticEvidence: 从变更文件 + 需求点计算语义证据
+ * - buildDeliveryEvidenceChain: 从任务上下文构建完整交付证据链
+ */
+import type { TaskContext, RequirementPoint, SemanticEvidence, DeliveryEvidenceChain } from "../types.js";
+/**
+ * 从任务上下文计算语义证据。
+ * 基于变更文件和需求点，推断变更行为和需求覆盖状态。
+ */
+export declare function computeSemanticEvidence(changedFiles: string[], requirementPoints: RequirementPoint[], acceptanceResults?: Array<{
+    id: string;
+    passed: boolean;
+}>): SemanticEvidence;
+/**
+ * 从任务上下文构建完整交付证据链。
+ * 聚合 expand 的需求点、verify 的语义证据、execution 的变更文件。
+ */
+export declare function buildDeliveryEvidenceChain(taskContext: TaskContext): DeliveryEvidenceChain | null;
+//# sourceMappingURL=semantic_evidence.d.ts.map

package/dist/engine/semantic_evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic_evidence.d.ts","sourceRoot":"","sources":["../../src/engine/semantic_evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAErB;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EAAE,EACtB,iBAAiB,EAAE,gBAAgB,EAAE,EACrC,iBAAiB,CAAC,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,GACzD,gBAAgB,CA0ClB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,WAAW,GACvB,qBAAqB,GAAG,IAAI,CA8C9B"}

package/dist/engine/semantic_evidence.js

@@ -0,0 +1,81 @@
+/**
+ * 语义交付证据 — R9 需求→语义 diff→断言→变异证据链。
+ * CAP-011 advisory: 不 hard block，只产出 advisory 报告。
+ *
+ * 职责:
+ * - computeSemanticEvidence: 从变更文件 + 需求点计算语义证据
+ * - buildDeliveryEvidenceChain: 从任务上下文构建完整交付证据链
+ */
+/**
+ * 从任务上下文计算语义证据。
+ * 基于变更文件和需求点，推断变更行为和需求覆盖状态。
+ */
+export function computeSemanticEvidence(changedFiles, requirementPoints, acceptanceResults) {
+    const changedBehaviors = changedFiles.map((f) => {
+        const matchedReq = requirementPoints.find((rp) => rp.acceptance_test_ids?.some((tid) => f.toLowerCase().includes(tid.toLowerCase().replace(/[^a-z0-9]/g, ""))));
+        return {
+            file_path: f,
+            description: `modified: ${f}`,
+            requirement_point_id: matchedReq?.id,
+        };
+    });
+    const requirementCoverage = requirementPoints.map((rp) => {
+        const hasMatchingFile = changedBehaviors.some((cb) => cb.requirement_point_id === rp.id);
+        const acceptancePassed = acceptanceResults?.filter((ar) => rp.acceptance_test_ids?.includes(ar.id));
+        const allAcceptancePassed = acceptancePassed
+            ? acceptancePassed.length > 0 && acceptancePassed.every((a) => a.passed)
+            : false;
+        const covered = hasMatchingFile || allAcceptancePassed;
+        return {
+            requirement_point_id: rp.id,
+            covered,
+            evidence: covered
+                ? hasMatchingFile
+                    ? "file change matched"
+                    : "acceptance tests passed"
+                : "no matching evidence",
+        };
+    });
+    return {
+        changed_behaviors: changedBehaviors,
+        unchanged_assertions: [],
+        requirement_coverage: requirementCoverage,
+    };
+}
+/**
+ * 从任务上下文构建完整交付证据链。
+ * 聚合 expand 的需求点、verify 的语义证据、execution 的变更文件。
+ */
+export function buildDeliveryEvidenceChain(taskContext) {
+    const requirementPoints = taskContext.expansion?.requirement_points ?? [];
+    const semanticEvidence = taskContext.verification?.semantic_evidence;
+    const changedFiles = taskContext.execution?.changed_files ?? [];
+    if (requirementPoints.length === 0 && changedFiles.length === 0) {
+        return null;
+    }
+    const fileToRequirements = changedFiles.map((f) => ({
+        file_path: f,
+        requirement_point_ids: requirementPoints
+            .filter((rp) => semanticEvidence?.changed_behaviors.some((cb) => cb.file_path === f && cb.requirement_point_id === rp.id))
+            .map((rp) => rp.id),
+    }));
+    const uncoveredPoints = requirementPoints
+        .filter((rp) => {
+        const coverage = semanticEvidence?.requirement_coverage?.find((rc) => rc.requirement_point_id === rp.id);
+        return !coverage?.covered;
+    })
+        .map((rp) => rp.id);
+    return {
+        requirement_points: requirementPoints,
+        semantic_evidence: semanticEvidence ?? undefined,
+        file_to_requirements: fileToRequirements,
+        completeness: {
+            all_requirements_covered: uncoveredPoints.length === 0,
+            uncovered_points: uncoveredPoints,
+            advisory: uncoveredPoints.length > 0
+                ? `advisory: ${uncoveredPoints.length} requirement point(s) not covered by evidence: ${uncoveredPoints.join(", ")}`
+                : "all requirement points covered",
+        },
+    };
+}
+//# sourceMappingURL=semantic_evidence.js.map

package/dist/engine/semantic_evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic_evidence.js","sourceRoot":"","sources":["../../src/engine/semantic_evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAsB,EACtB,iBAAqC,EACrC,iBAA0D;IAE1D,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/C,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CACtE,CACF,CAAC;QACF,OAAO;YACL,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,aAAa,CAAC,EAAE;YAC7B,oBAAoB,EAAE,UAAU,EAAE,EAAE;SACrC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACvD,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAC3C,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,oBAAoB,KAAK,EAAE,CAAC,EAAE,CAC1C,CAAC;QACF,MAAM,gBAAgB,GAAG,iBAAiB,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CACxD,EAAE,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CACxC,CAAC;QACF,MAAM,mBAAmB,GAAG,gBAAgB;YAC1C,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YACxE,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,OAAO,GAAG,eAAe,IAAI,mBAAmB,CAAC;QACvD,OAAO;YACL,oBAAoB,EAAE,EAAE,CAAC,EAAE;YAC3B,OAAO;YACP,QAAQ,EAAE,OAAO;gBACf,CAAC,CAAC,eAAe;oBACf,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,yBAAyB;gBAC7B,CAAC,CAAC,sBAAsB;SAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,iBAAiB,EAAE,gBAAgB;QACnC,oBAAoB,EAAE,EAAE;QACxB,oBAAoB,EAAE,mBAAmB;KAC1C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAwB;IAExB,MAAM,iBAAiB,GACrB,WAAW,CAAC,SAAS,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAClD,MAAM,gBAAgB,GACpB,WAAW,CAAC,YAAY,EAAE,iBAAiB,CAAC;IAC9C,MAAM,YAAY,GAChB,WAAW,CAAC,SAAS,EAAE,aAAa,IAAI,EAAE,CAAC;IAE7C,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,SAAS,EAAE,CAAC;QACZ,qBAAqB,EAAE,iBAAiB;aACrC,MAAM,CACL,CAAC,EAAE,EAAE,EAAE,CACL,gBAAgB,EAAE,iBAAiB,CAAC,IAAI,CACtC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,oBAAoB,KAAK,EAAE,CAAC,EAAE,CAChE,CACJ;aACA,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KACtB,CAAC,CAAC,CAAC;IAEJ,MAAM,eAAe,GAAG,iBAAiB;SACtC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACb,MAAM,QAAQ,GAAG,gBAAgB,EAAE,oBAAoB,EAAE,IAAI,CAC3D,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,oBAAoB,KAAK,EAAE,CAAC,EAAE,CAC1C,CAAC;QACF,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC5B,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAEtB,OAAO;QACL,kBAAkB,EAAE,iBAAiB;QACrC,iBAAiB,EAAE,gBAAgB,IAAI,SAAS;QAChD,oBAAoB,EAAE,kBAAkB;QACxC,YAAY,EAAE;YACZ,wBAAwB,EAAE,eAAe,CAAC,MAAM,KAAK,CAAC;YACtD,gBAAgB,EAAE,eAAe;YACjC,QAAQ,EACN,eAAe,CAAC,MAAM,GAAG,CAAC;gBACxB,CAAC,CAAC,aAAa,eAAe,CAAC,MAAM,kDAAkD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACnH,CAAC,CAAC,gCAAgC;SACvC;KACF,CAAC;AACJ,CAAC"}

package/dist/engine/task_context.d.ts

@@ -1,4 +1,8 @@
 import type { TaskContext, ClassifyResult, ExpandResult, VerifyResult, FailureRecord, PlanResult, CodeReviewResult, DeliveryResult } from "../types.js";
+import { AuditPool } from "./audit_pool.js";
+import { DiffOwnershipStore } from "./diff_ownership_store.js";
+import { ScopeLeaseStore } from "./scope_lease.js";
+import { ConflictGate } from "./conflict_gate.js";
 /**
  * 任务上下文管理器 — 负责任务状态的创建、持久化、查询和生命周期管理。
  * 状态文件存储在 stateDir 目录下，每个任务一个 JSON 文件。
@@ -6,9 +10,21 @@ import type { TaskContext, ClassifyResult, ExpandResult, VerifyResult, FailureRe
  */
 export declare class TaskContextManager {
     private stateDir;
+    private auditPool;
+    private diffOwnership;
+    private scopeLease;
+    private conflictGate;
     constructor(stateDir: string);
     /** 获取状态存储目录路径 */
     getStateDir(): string;
+    /** 获取审计池实例 */
+    getAuditPool(): AuditPool;
+    /** 获取 Diff 归属追踪实例 */
+    getDiffOwnership(): DiffOwnershipStore;
+    /** 获取 Scope Lease 实例 */
+    getScopeLease(): ScopeLeaseStore;
+    /** 获取冲突合并门实例 */
+    getConflictGate(): ConflictGate;
     /**
      * 创建新任务上下文，生成唯一 ID 并持久化到磁盘。
      * @param intent - 用户意图文本

package/dist/engine/task_context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task_context.d.ts","sourceRoot":"","sources":["../../src/engine/task_context.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAkD,cAAc,EAAE,MAAM,aAAa,CAAC;AAiCxM;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAS;gBAEb,QAAQ,EAAE,MAAM;IAK5B,iBAAiB;IACjB,WAAW,IAAI,MAAM;IAIrB;;;;;OAKG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAc1E;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUvD;;;OAGG;IACG,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3C;;;;;;OAMG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAa9F;;;;;OAKG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQ5F;;;;;OAKG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQrF;;;;;;;OAOG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA0B9B;;;;;OAKG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQxF;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUnD;;;;OAIG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU9C;;;;OAIG;IACH,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO;IAItC;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM;IAYvC;;;;OAIG;IACG,UAAU,CAAC,KAAK,SAAK,GAAG,OAAO,CACnC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAC/E;IAwBD;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IA0DhC;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQlF;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAY1F;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUtF;;;;;;;;OAQG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA+B7I;;;;;;;;OAQG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA2BnH,oBAAoB;IACpB,OAAO,CAAC,YAAY;IAIpB,iBAAiB;IACjB,OAAO,KAAK,WAAW,GAEtB;IAED;;;OAGG;YACW,mBAAmB;CAGlC"}
+{"version":3,"file":"task_context.d.ts","sourceRoot":"","sources":["../../src/engine/task_context.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAkD,cAAc,EAAE,MAAM,aAAa,CAAC;AACxM,OAAO,EAAE,SAAS,EAAkB,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAuB,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAiClD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,YAAY,CAAe;gBAEvB,QAAQ,EAAE,MAAM;IAS5B,iBAAiB;IACjB,WAAW,IAAI,MAAM;IAIrB,cAAc;IACd,YAAY,IAAI,SAAS;IAIzB,qBAAqB;IACrB,gBAAgB,IAAI,kBAAkB;IAItC,wBAAwB;IACxB,aAAa,IAAI,eAAe;IAIhC,gBAAgB;IAChB,eAAe,IAAI,YAAY;IAI/B;;;;;OAKG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAc1E;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUvD;;;OAGG;IACG,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3C;;;;;;OAMG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAuC9F;;;;;OAKG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQ5F;;;;;OAKG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQrF;;;;;;;OAOG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA+B9B;;;;;OAKG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQxF;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUnD;;;;OAIG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa9C;;;;OAIG;IACH,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO;IAItC;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM;IAYvC;;;;OAIG;IACG,UAAU,CAAC,KAAK,SAAK,GAAG,OAAO,CACnC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAC/E;IAwBD;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IA0DhC;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQlF;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAY1F;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUtF;;;;;;;;OAQG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA+B7I;;;;;;;;OAQG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA2BnH,oBAAoB;IACpB,OAAO,CAAC,YAAY;IAIpB,iBAAiB;IACjB,OAAO,KAAK,WAAW,GAEtB;IAED;;;OAGG;YACW,mBAAmB;CAGlC"}

package/dist/engine/task_context.js

@@ -2,6 +2,10 @@ import fs from "node:fs/promises";
 import fss from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
+import { AuditPool } from "./audit_pool.js";
+import { DiffOwnershipStore } from "./diff_ownership_store.js";
+import { ScopeLeaseStore } from "./scope_lease.js";
+import { ConflictGate } from "./conflict_gate.js";
 /**
  * 任务上下文管理器 — 管理任务的完整生命周期状态持久化。
  *
@@ -37,14 +41,38 @@ const VALID_TRANSITIONS = {
  */
 export class TaskContextManager {
     stateDir;
+    auditPool;
+    diffOwnership;
+    scopeLease;
+    conflictGate;
     constructor(stateDir) {
         this.stateDir = stateDir;
         fss.mkdirSync(stateDir, { recursive: true });
+        this.auditPool = new AuditPool(stateDir);
+        this.diffOwnership = new DiffOwnershipStore(stateDir);
+        this.scopeLease = new ScopeLeaseStore(stateDir);
+        this.conflictGate = new ConflictGate(this.diffOwnership, this.scopeLease);
     }
     /** 获取状态存储目录路径 */
     getStateDir() {
         return this.stateDir;
     }
+    /** 获取审计池实例 */
+    getAuditPool() {
+        return this.auditPool;
+    }
+    /** 获取 Diff 归属追踪实例 */
+    getDiffOwnership() {
+        return this.diffOwnership;
+    }
+    /** 获取 Scope Lease 实例 */
+    getScopeLease() {
+        return this.scopeLease;
+    }
+    /** 获取冲突合并门实例 */
+    getConflictGate() {
+        return this.conflictGate;
+    }
     /**
      * 创建新任务上下文，生成唯一 ID 并持久化到磁盘。
      * @param intent - 用户意图文本
@@ -106,6 +134,29 @@ export class TaskContextManager {
         }
         ctx.status = status;
         await this.save(ctx);
+        if (status === "executing") {
+            // CAP-011: Auto-capture baseline from expansion scope when entering executing
+            const scopePaths = ctx.expansion?.scope?.allowed_paths;
+            if (scopePaths && scopePaths.length > 0) {
+                this.diffOwnership.captureBaselineFromScope(taskId, scopePaths);
+                this.scopeLease.acquire(taskId, scopePaths);
+            }
+        }
+        if (status === "done" || status === "failed") {
+            if (status === "done") {
+                this.auditPool.append({
+                    task_id: ctx.task_id,
+                    risk: (ctx.classification?.risk ?? "low"),
+                    changed_files: ctx.execution?.changed_files ?? [],
+                    evidence: ctx.classification?.strategy ?? "",
+                    capability_refs: [],
+                    created_at: new Date().toISOString(),
+                });
+            }
+            // CAP-011: Clean up diff ownership + scope lease for terminal states
+            this.diffOwnership.clearTask(taskId);
+            this.scopeLease.release(taskId);
+        }
         return ctx;
     }
     /**
@@ -163,6 +214,10 @@ export class TaskContextManager {
             ctx.execution.attempt_count++;
             ctx.execution.failure_history.push(failure);
         }
+        // CAP-011: Record task-owned writes for diff ownership tracking (advisory)
+        for (const f of changedFiles) {
+            this.diffOwnership.recordWrite(taskId, f);
+        }
         await this.save(ctx);
         return ctx;
     }
@@ -207,6 +262,9 @@ export class TaskContextManager {
             return false;
         ctx.status = "failed";
         await this.save(ctx);
+        // CAP-011: Clean up diff ownership + scope lease for cancelled task
+        this.diffOwnership.clearTask(taskId);
+        this.scopeLease.release(taskId);
         return true;
     }
     /**