soloforge 1.3.9 → 1.4.0

package/dist/engine/release_readiness_gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release_readiness_gate.d.ts","sourceRoot":"","sources":["../../src/engine/release_readiness_gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAQH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpD,eAAe,EAAE,MAAM,CAAC;CACzB;AAwpHD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA8J9F"}
+{"version":3,"file":"release_readiness_gate.d.ts","sourceRoot":"","sources":["../../src/engine/release_readiness_gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAQH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpD,eAAe,EAAE,MAAM,CAAC;CACzB;AAwwHD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAmK9F"}

package/dist/engine/release_readiness_gate.js

@@ -25,6 +25,7 @@
  * 19. 历史问题长期机制化行为验证
  * 20. 诊断码集中治理检查
  * 21. 模板卫生与项目知识消费验证
+ * 22. MCP 控制面可信与受控生成链路验证
  */
 import fs from "node:fs";
 import os from "node:os";
@@ -1147,14 +1148,14 @@ async function checkBatchIssueFormatConsistency(rootDir, hardFail, _info) {
         hardFail("BATCH_ISSUE_FORMAT_INCONSISTENT", "共享解析脚本缺少 Batch 加载或 canonical ledger 校验导出", ["scripts/batch_issue_details.mjs"], "构建系统", "共享解析脚本导出不正确", "修复脚本");
         return;
     }
-    const expectedCounts = { 1: 19, 2: 12, 3: 9, 4: 14, 5: 6, 6: 5, 7: 2, 8: 4 };
+    const expectedCounts = { 1: 19, 2: 12, 3: 9, 4: 14, 5: 6, 6: 5, 7: 2, 8: 4, 9: 1 };
     const parsedBatches = [];
     const requiredPerProblemSections = [
         "问题背景", "用户反馈 / 触发场景", "根因分析", "解决方案", "方案细节",
         "硬规则", "非目标", "影响范围", "落地文件", "验收标准", "回归风险",
         "与其他问题的关联", "发布门禁要求",
     ];
-    for (let batch = 1; batch <= 8; batch++) {
+    for (let batch = 1; batch <= 9; batch++) {
         const details = loadBatchIssueDetails(batch, rootDir);
         parsedBatches.push(details);
         if (!details.loaded) {
@@ -1204,7 +1205,7 @@ async function checkBatchIssueFormatConsistency(rootDir, hardFail, _info) {
         const roadmapPath = path.join(rootDir, "dist", "engine", "implementation_roadmap_registry.js");
         const roadmap = await import(roadmapPath);
         const roadmapProblems = roadmap.listAllProblems();
-        const ledgerFindings = validateCanonicalIssueLedger(parsedBatches, roadmapProblems, 71);
+        const ledgerFindings = validateCanonicalIssueLedger(parsedBatches, roadmapProblems, 72);
         for (const finding of ledgerFindings) {
             hardFail("CANONICAL_ISSUE_LEDGER_INCONSISTENT", finding.message, ["scripts/batch_issue_details.mjs", "src/engine/implementation_roadmap_registry.ts"], finding.issue_label ?? finding.problem_id ?? "canonical-ledger", "旧 gate 只校验单份文档格式与数量，不校验 Batch 文档和 roadmap 的唯一身份映射", "修正 canonical issue ID、文档归属或 roadmap 登记");
         }
@@ -1214,7 +1215,7 @@ async function checkBatchIssueFormatConsistency(rootDir, hardFail, _info) {
             hardFail("CANONICAL_ISSUE_LEDGER_INCONSISTENT", finding.message, ["src/engine/implementation_roadmap_registry.ts"], finding.subject_id ?? "roadmap", "旧 gate 不执行 roadmap 内部双向引用校验", "修正 ProblemEntry 与 ImplementationBatch 的双向归属");
         }
         if (ledgerFindings.length === 0 && roadmapFindings.length === 0) {
-            _info("  canonical ledger: 问题文档与 roadmap 的 71 个问题身份、归属一致");
+            _info("  canonical ledger: 问题文档与 roadmap 的 72 个问题身份、归属一致");
         }
     }
     catch (e) {
@@ -2930,6 +2931,92 @@ async function checkDiagnosticCentralization(rootDir, hardFail) {
         hardFail("DIAGNOSTIC_CODE_REGISTRY_MISSING", `诊断码常量未在注册表登记: ${missing.join(", ")}`, ["src/engine/diagnostic_registry.ts"], "problem-36", "旧 gate 不检查诊断码注册完整性", "补齐 BUILTIN_DIAGNOSTICS");
     }
 }
+async function checkControlPlaneTrustBehavior(rootDir, hardFail) {
+    try {
+        const control = await import("./control_plane_contract.js");
+        const toolContracts = await import("./tool_invocation_contract_registry.js");
+        const matrix = control.CONTROL_PLANE_MATRIX ?? [];
+        const branchDetails = control.CONTROL_PLANE_BRANCH_DETAILS ?? [];
+        if (matrix.length !== 15) {
+            hardFail("CONTROL_PLANE_MATRIX_INCOMPLETE", `控制面矩阵数量应为 15，实际为 ${matrix.length}`, ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不覆盖 MCP 控制面可用性与旁路", "补齐控制面矩阵");
+        }
+        if (branchDetails.length < 30) {
+            hardFail("CONTROL_PLANE_BRANCH_DETAILS_INCOMPLETE", `控制面枝叶细节至少 30 条，实际为 ${branchDetails.length}`, ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不覆盖枝叶防回归细节", "补齐枝叶细节");
+        }
+        if (!control.isSoloforgeStateBypassCommand("rm -rf .soloforge/state/current-task.json")) {
+            hardFail("CONTROL_PLANE_BYPASS_GUARD_FALSE_NEGATIVE", "Bash 直接删除 .soloforge/state 未被识别为旁路", ["src/engine/control_plane_contract.ts", "src/bin/soloforge.ts"], "problem-72", "旧 gate 不验证 Bash/Edit/Write 旁路", "修复旁路拦截");
+        }
+        if (control.isSoloforgeStateBypassCommand("cat .soloforge/state/current-task.json")) {
+            hardFail("CONTROL_PLANE_BYPASS_GUARD_FALSE_POSITIVE", "只读查看 .soloforge/state 被误判为写旁路", ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不检查旁路误拦", "修复旁路判断");
+        }
+        const contractFindings = control.validateControlPlaneToolContracts(toolContracts.listToolInvocationContracts());
+        const hardContractFindings = contractFindings.filter((finding) => finding.severity === "hard_fail");
+        if (hardContractFindings.length > 0) {
+            hardFail("CONTROL_PLANE_TOOL_CONTRACT_INVALID", `工具控制面契约存在 ${hardContractFindings.length} 个 hard_fail: ${hardContractFindings.map((f) => f.code).join(", ")}`, ["src/engine/tool_invocation_contract_registry.ts"], "problem-72", "旧 gate 不检查工具错标和死链路", "修复工具契约");
+        }
+        const fakeContractFindings = control.validateControlPlaneToolContracts([{
+                tool_name: "sf_fake_readonly_writer",
+                category: "read_only_bypass",
+                side_effects: ["task_context_write"],
+                requires_authorization: false,
+                requires_workflow: false,
+                description: "错误契约",
+                default_next_tools: [],
+                forbidden_next_tools: [],
+            }]);
+        if (!fakeContractFindings.some((finding) => finding.code === "CONTROL_PLANE_READ_ONLY_HAS_SIDE_EFFECT")) {
+            hardFail("CONTROL_PLANE_TOOL_CONTRACT_FALSE_PASS", "read_only_bypass 写状态的假契约未被阻断", ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不验证契约错标 must-fail", "修复工具契约验证");
+        }
+        const bypassAssessment = control.assessControlledGenerationChain({
+            changed_files: ["src/Foo.java"],
+            verified_files: ["src/Foo.java"],
+            traces: [{ tool_name: "Bash", status: "passed", evidence_kind: "command_execution" }],
+            delivery_status: "delivered",
+        });
+        if (bypassAssessment.accepted || !bypassAssessment.findings.some((finding) => finding.code === "CONTROLLED_GENERATION_MISSING_MCP_PROVENANCE")) {
+            hardFail("CONTROLLED_GENERATION_BYPASS_FALSE_PASS", "非 MCP 生成代码被错误接受为完整可信交付", ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不验证来源归因", "修复受控生成链路");
+        }
+        const partialAssessment = control.assessControlledGenerationChain({
+            changed_files: ["src/Foo.java", "src/Bar.java"],
+            verified_files: ["src/Foo.java"],
+            traces: [
+                { tool_name: "sf_classify", task_id: "t1", status: "passed" },
+                { tool_name: "sf_expand", task_id: "t1", status: "passed" },
+                { tool_name: "sf_verify", task_id: "t1", status: "passed", evidence_kind: "command_execution" },
+            ],
+            delivery_status: "delivered",
+        });
+        if (partialAssessment.accepted || !partialAssessment.findings.some((finding) => finding.code === "CONTROLLED_GENERATION_CHANGED_FILE_UNVERIFIED")) {
+            hardFail("CONTROLLED_GENERATION_SCOPE_FALSE_PASS", "changed_files 子集验证被错误接受", ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不验证范围完整性", "修复验证范围对账");
+        }
+        const passAssessment = control.assessControlledGenerationChain({
+            changed_files: ["src/Foo.java"],
+            verified_files: ["src/Foo.java"],
+            traces: [
+                { tool_name: "sf_classify", task_id: "t1", status: "passed" },
+                { tool_name: "sf_expand", task_id: "t1", status: "passed" },
+                { tool_name: "sf_verify", task_id: "t1", status: "passed", evidence_kind: "command_execution" },
+                { tool_name: "sf_deliver", task_id: "t1", status: "passed" },
+            ],
+            delivery_status: "delivered",
+        });
+        if (!passAssessment.accepted || passAssessment.confidence !== "full") {
+            hardFail("CONTROLLED_GENERATION_VALID_CHAIN_BLOCKED", "完整 MCP 受控生成链路被误阻断", ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不验证 must-pass", "修复受控生成链路");
+        }
+        const cliText = safeRead(path.join(rootDir, "src", "bin", "soloforge.ts")) ?? "";
+        if (!cliText.includes("case \"doctor\"") || !cliText.includes("auditControlPlaneProject")) {
+            hardFail("CONTROL_PLANE_DOCTOR_MISSING", "CLI 未提供 soloforge doctor 控制面诊断入口", ["src/bin/soloforge.ts"], "problem-72", "旧 gate 没有 MCP 控制面恢复入口", "补 soloforge doctor");
+        }
+        if (!cliText.includes("仍处于 ${currentTask.status}") ||
+            !cliText.includes("缺少 design_artifact_pack") ||
+            !cliText.includes("没有受控 SoloForge 任务")) {
+            hardFail("CONTROLLED_IMPLEMENTATION_WRITE_GATE_MISSING", "check-write 未覆盖 expanding 卡死、设计产物存在但缺 design_artifact_pack、无受控任务三类直接编码旁路", ["src/bin/soloforge.ts"], "problem-72", "旧 gate 只在交付层发现非 MCP 来源，未在写入入口阻断真实用户项目旁路", "在 check-write 对业务实现文件增加受控任务与设计产物包前置门");
+        }
+    }
+    catch (e) {
+        hardFail("CONTROL_PLANE_BEHAVIOR_EXCEPTION", `控制面可信行为验证异常: ${e.message}`, ["src/engine/control_plane_contract.ts"], "problem-72", "旧 gate 不验证控制面可信", "修复控制面契约模块");
+    }
+}
 // ── 主入口 ──
 export async function runReleaseReadinessGate(rootDir) {
     const hardFails = [];
@@ -3044,6 +3131,10 @@ export async function runReleaseReadinessGate(rootDir) {
     beginPhase("模板卫生与项目知识消费验证");
     await checkTemplateAndProjectKnowledgeHygiene(rootDir, hardFail, _info);
     endPhase("模板卫生与项目知识消费验证");
+    // 22: MCP 控制面可信与受控生成链路验证
+    beginPhase("MCP 控制面可信与受控生成链路验证");
+    await checkControlPlaneTrustBehavior(rootDir, hardFail);
+    endPhase("MCP 控制面可信与受控生成链路验证");
     // 恢复 console.error 和日志器
     console.error = origConsoleError;
     resetLogger();