soloforge 1.3.10 → 1.4.1

package/dist/adapters/codex/codex_config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex_config.d.ts","sourceRoot":"","sources":["../../../src/adapters/codex/codex_config.ts"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAgBlE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CA8BjD"}
+{"version":3,"file":"codex_config.d.ts","sourceRoot":"","sources":["../../../src/adapters/codex/codex_config.ts"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAgBlE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAwCjD"}

package/dist/adapters/codex/codex_config.js

@@ -53,6 +53,16 @@ export function generateCodexHooksConfig() {
                         },
                     ],
                 },
+                {
+                    matcher: "^Bash$",
+                    hooks: [
+                        {
+                            type: "command",
+                            command: hookCommand("check-bash"),
+                            timeout: 15,
+                        },
+                    ],
+                },
             ],
             PostToolUse: [
                 {

package/dist/adapters/codex/codex_config.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex_config.js","sourceRoot":"","sources":["../../../src/adapters/codex/codex_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAE/C,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACnC,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,UAAkB,EAAE,EAAE,CACzC,6EAA6E,UAAU,EAAE,CAAC;AAE5F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC7C,OAAO;;SAEA,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC;;;uBAGN,gBAAgB,CAAC,WAAW,CAAC;;;;SAI3C,WAAW,CAAC,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;;;;CAI7D,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV;oBACE,OAAO,EAAE,4BAA4B;oBACrC,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC;4BACnC,OAAO,EAAE,EAAE;yBACZ;qBACF;iBACF;aACF;YACD,WAAW,EAAE;gBACX;oBACE,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,WAAW,CAAC,WAAW,CAAC;4BACjC,OAAO,EAAE,EAAE;yBACZ;qBACF;iBACF;aACF;SACF;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC"}
+{"version":3,"file":"codex_config.js","sourceRoot":"","sources":["../../../src/adapters/codex/codex_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAE/C,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACnC,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,UAAkB,EAAE,EAAE,CACzC,6EAA6E,UAAU,EAAE,CAAC;AAE5F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC7C,OAAO;;SAEA,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC;;;uBAGN,gBAAgB,CAAC,WAAW,CAAC;;;;SAI3C,WAAW,CAAC,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;;;;CAI7D,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV;oBACE,OAAO,EAAE,4BAA4B;oBACrC,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC;4BACnC,OAAO,EAAE,EAAE;yBACZ;qBACF;iBACF;gBACD;oBACE,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;4BAClC,OAAO,EAAE,EAAE;yBACZ;qBACF;iBACF;aACF;YACD,WAAW,EAAE;gBACX;oBACE,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,WAAW,CAAC,WAAW,CAAC;4BACjC,OAAO,EAAE,EAAE;yBACZ;qBACF;iBACF;aACF;SACF;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC"}

package/dist/bin/soloforge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"soloforge.d.ts","sourceRoot":"","sources":["../../src/bin/soloforge.ts"],"names":[],"mappings":";AA+zBA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC"}
+{"version":3,"file":"soloforge.d.ts","sourceRoot":"","sources":["../../src/bin/soloforge.ts"],"names":[],"mappings":";AA87BA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC"}

package/dist/bin/soloforge.js

@@ -17,6 +17,7 @@ import { resolveCurrentProjectConfigReports, validateConfigPrecedence, } from ".
 import { isReadForbidden } from "../engine/privacy_secret_contract.js";
 import { routeIntent } from "../engine/intent_router.js";
 import { debugLog, debug, userInfo, userWarn, userError, internalWarn, jsonSafeError, initLoggerFromEnv } from "../engine/logger.js";
+import { auditControlPlaneProject, isSoloforgeStateBypassCommand } from "../engine/control_plane_contract.js";
 const command = process.argv[2];
 const args = process.argv.slice(3);
 async function main() {
@@ -45,6 +46,9 @@ async function main() {
         case "check-write":
             await cmdCheckWrite();
             break;
+        case "check-bash":
+            await cmdCheckBash();
+            break;
         case "post-bash":
             await cmdPostBash();
             break;
@@ -81,6 +85,9 @@ async function main() {
         case "validate-release":
             await cmdValidateReleaseGate();
             break;
+        case "doctor":
+            await cmdDoctor();
+            break;
         case "audit-template-visibility":
             await cmdAuditTemplateVisibility();
             break;
@@ -167,6 +174,8 @@ async function main() {
   generate-trae       生成 .trae/mcp.json 和 .trae/rules/project_rules.md
   generate-codex      生成 .codex/ 配置和 AGENTS.md
   check-write         PreToolUse hook，用于范围检查（读取 stdin JSON）
+  check-bash          PreToolUse hook，阻止 Bash 直接篡改 .soloforge/state
+  doctor              审计 MCP 控制面、适配器 hook、状态可信和恢复路径
   post-bash           PostToolUse hook，用于跟踪 Bash 执行结果
   validate            验证项目配置和知识文件（config.yaml 可选，缺失时自动推断）
   validate-mechanisms 验证双层机制承载模型完整性（模板层 + 机制层）
@@ -194,6 +203,7 @@ async function main() {
   stage                 显示当前项目阶段和任务阶段
   stage --explain       详细解释当前阶段（判断依据、必要条件、下一阶段）
   cleanup               清理过期任务和 evidence（默认 dry-run，--apply 执行实际清理）
+  cleanup --stale       检测陈旧 current-task 指针（--apply 时受控归档）
 `);
     }
 }
@@ -697,10 +707,41 @@ async function cmdCheckWrite() {
         if (!isDesignArtifactFile) {
             const { TaskContextManager } = await import("../engine/task_context.js");
             const stateDir = path.join(projectPath, ".soloforge", "state");
+            const implementationSource = isImplementationSourcePath(relativeFilePath);
             if (fss.existsSync(stateDir)) {
                 const manager = new TaskContextManager(stateDir);
                 const currentTask = await manager.getCurrentTask();
                 const designPack = currentTask?.design_artifact_pack;
+                if (implementationSource && currentTask && ["classifying", "clarifying", "expanding"].includes(currentTask.status)) {
+                    process.stdout.write(JSON.stringify({
+                        hookSpecificOutput: {
+                            hookEventName: "PreToolUse",
+                            permissionDecision: "deny",
+                            permissionDecisionReason: `当前 SoloForge 任务仍处于 ${currentTask.status}，说明分类、澄清或意图膨胀未闭合。不得绕过 sf_expand 直接写业务实现；请先运行 soloforge next 或 sf_status action=archive_stale confirm=true 处理任务状态。`,
+                        },
+                    }));
+                    process.exit(0);
+                }
+                if (implementationSource && !currentTask && hasDesignArtifacts(projectPath)) {
+                    process.stdout.write(JSON.stringify({
+                        hookSpecificOutput: {
+                            hookEventName: "PreToolUse",
+                            permissionDecision: "deny",
+                            permissionDecisionReason: "检测到项目已有架构/详细/API/数据库设计产物，但当前没有受控 SoloForge 任务。不得绕过 sf_classify/sf_expand 直接写业务实现；请先运行 soloforge next 或通过 MCP 建立编码任务。",
+                        },
+                    }));
+                    process.exit(0);
+                }
+                if (implementationSource && currentTask && !designPack && hasDesignArtifacts(projectPath)) {
+                    process.stdout.write(JSON.stringify({
+                        hookSpecificOutput: {
+                            hookEventName: "PreToolUse",
+                            permissionDecision: "deny",
+                            permissionDecisionReason: "检测到项目已有设计产物，但当前任务缺少 design_artifact_pack 复验状态。不得直接写业务实现；请先运行 soloforge audit-design-artifacts，并通过 sf_expand/sf_verify 绑定设计产物包。",
+                        },
+                    }));
+                    process.exit(0);
+                }
                 if (designPack && designPack.status !== "implementation_ready") {
                     process.stdout.write(JSON.stringify({
                         hookSpecificOutput: {
@@ -742,12 +783,95 @@ function resolveProjectPath() {
     }
     return process.cwd();
 }
+function isImplementationSourcePath(relativeFilePath) {
+    if (/^(?:docs|templates|\.soloforge|\.claude|\.codex|\.trae)\//.test(relativeFilePath))
+        return false;
+    if (/(^|\/)(?:package-lock|pnpm-lock|yarn.lock)$/.test(relativeFilePath))
+        return false;
+    return /\.(?:java|kt|kts|scala|ts|tsx|js|jsx|mjs|cjs|py|go|rs|php|rb|cs|swift|vue|svelte|sql|xml|yml|yaml|properties)$/.test(relativeFilePath);
+}
+function hasDesignArtifacts(projectPath) {
+    const candidates = [
+        path.join(projectPath, "docs", "architecture", "00-架构决策记录.md"),
+        path.join(projectPath, "docs", "architecture", "01-架构设计文档.md"),
+        path.join(projectPath, "docs", "architecture", "02-数据库设计文档.md"),
+        path.join(projectPath, "docs", "architecture", "03-API接口规格文档.md"),
+        path.join(projectPath, "docs", "architecture", "04-详细设计文档.md"),
+        path.join(projectPath, "docs", "architecture", "99-设计一致性验收报告.md"),
+        path.join(projectPath, "docs", "api", "openapi.yaml"),
+        path.join(projectPath, "docs", "api", "openapi.yml"),
+        path.join(projectPath, "db", "migrations"),
+        path.join(projectPath, "db", "migration"),
+    ];
+    return candidates.some((candidate) => fss.existsSync(candidate));
+}
 async function cmdPostBash() {
     debugLog("CLI: 执行 cmdPostBash");
     // Bash 的 PostToolUse hook — 目前为空操作占位符
     // 未来: 跟踪命令结果，检测构建/测试失败
     process.exit(0);
 }
+function extractBashCommand(rawInput) {
+    const trimmed = rawInput.trim();
+    if (!trimmed)
+        return "";
+    try {
+        const parsed = JSON.parse(trimmed);
+        const input = parsed.tool_input || parsed.toolInput || parsed.input || parsed;
+        return String(input.command || input.cmd || parsed.command || "");
+    }
+    catch {
+        return trimmed;
+    }
+}
+async function cmdCheckBash() {
+    debugLog("CLI: 执行 cmdCheckBash");
+    try {
+        const chunks = [];
+        for await (const chunk of process.stdin) {
+            chunks.push(chunk);
+        }
+        const stdin = Buffer.concat(chunks).toString();
+        const commandText = extractBashCommand(stdin || args.join(" "));
+        if (isSoloforgeStateBypassCommand(commandText)) {
+            process.stdout.write(JSON.stringify({
+                hookSpecificOutput: {
+                    hookEventName: "PreToolUse",
+                    permissionDecision: "deny",
+                    permissionDecisionReason: "禁止通过 Bash 直接修改 .soloforge/state；请使用 SoloForge MCP 工具，例如 sf_status action=archive_stale confirm=true。",
+                },
+            }));
+        }
+        process.exit(0);
+    }
+    catch (e) {
+        userError(`SoloForge Bash 检查错误: ${e instanceof Error ? e.message : String(e)}`);
+        process.exit(1);
+    }
+}
+async function cmdDoctor() {
+    debugLog("CLI: 执行 cmdDoctor");
+    const isJson = args.includes("--json");
+    const projectPath = process.cwd();
+    const report = auditControlPlaneProject(projectPath);
+    if (isJson) {
+        process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+        return;
+    }
+    userInfo(`SoloForge 控制面诊断: ${projectPath}`);
+    userInfo(`  状态: ${report.passed ? "通过" : "需修复"}`);
+    userInfo(`  控制面矩阵: ${report.matrix_count} 类`);
+    userInfo(`  枝叶细节: ${report.branch_detail_count} 条`);
+    if (report.findings.length === 0) {
+        userInfo("  finding: 0");
+        return;
+    }
+    for (const finding of report.findings) {
+        const marker = finding.severity === "hard_fail" ? "❌" : finding.severity === "warning" ? "⚠️" : "ℹ️";
+        userInfo(`  ${marker} [${finding.code}] ${finding.message}`);
+        userInfo(`     恢复: ${finding.recovery}`);
+    }
+}
 export { buildHookAdditionalContext } from "../adapters/claude_code/pre_prompt_contract.js";
 async function cmdPrePrompt() {
     debugLog("CLI: 执行 cmdPrePrompt");
@@ -2458,11 +2582,41 @@ async function cmdStage() {
 async function cmdCleanup() {
     debug("CLI", "执行 cmdCleanup");
     const dryRun = !args.includes("--apply");
+    const staleOnly = args.includes("--stale");
     const projectPath = process.cwd();
     const stateDir = path.join(projectPath, ".soloforge", "state");
     let hasError = false;
     userInfo(`SoloForge 清理: ${projectPath}`);
     userInfo(`  模式: ${dryRun ? "dry-run（仅评估）" : "⚠️ 实际清理"}`);
+    if (staleOnly) {
+        try {
+            const { detectStaleCurrentTask, archiveStaleCurrentPointer } = await import("../engine/stale_current_task_detector.js");
+            const stale = await detectStaleCurrentTask(stateDir);
+            userInfo("");
+            userInfo("  陈旧 current-task 检测:");
+            if (!stale.is_stale || !stale.task_id) {
+                userInfo("    未发现陈旧指针");
+                return;
+            }
+            userInfo(`    陈旧任务: ${stale.task_id}`);
+            userInfo(`    原因: ${stale.reason_zh}`);
+            if (dryRun) {
+                userInfo("    处理: dry-run，仅提示；使用 --apply 归档指针");
+                return;
+            }
+            const archived = await archiveStaleCurrentPointer(stateDir, stale.task_id);
+            if (!archived) {
+                userError("  ❌ 陈旧指针归档失败");
+                process.exit(1);
+            }
+            userInfo("    处理: 已归档 current-task 指针，任务文件未删除");
+            return;
+        }
+        catch (e) {
+            userError(`  ❌ 陈旧 current-task 检测失败: ${e.message}`);
+            process.exit(1);
+        }
+    }
     // 收集所有 evidence 引用来源：task-*.json 中的 evidence 文件名 / evidence id
     const referencedEvidenceIds = new Set();
     // 扫描 task context 文件中的 evidence 引用