soloforge 1.4.3 → 1.4.4

package/dist/engine/release_readiness_gate.js

@@ -2101,6 +2101,16 @@ async function checkReleaseIssueDesignPath(rootDir, hardFail, _info) {
         !toolsText.includes("TOOL_DIAGNOSTIC_CODES.traceabilityVerifyFailed")) {
         hardFail("RELEASE_ISSUE_TRACEABILITY_MAINLINE_MISSING", "问题七十三追踪契约未接入 sf_expand/sf_verify 主链路", ["src/adapters/claude_code/tools.ts", "src/engine/traceability.ts"], "problem-73", "只审计设计产物不能保证编码来自需求、原型、架构、详细设计和切片", "在 sf_expand 编码前门和 sf_verify changed_files 门接入追踪契约");
     }
+    const traceabilityText = safeRead(path.join(rootDir, "src", "engine", "traceability.ts")) ?? "";
+    const nextPlannerText = safeRead(path.join(rootDir, "src", "engine", "next_action_planner.ts")) ?? "";
+    if (!traceabilityText.includes("DESIGN_IMPLEMENTATION_TRACEABILITY_TEMPLATE_PATH") ||
+        !traceabilityText.includes("recovery_command") ||
+        !traceabilityText.includes("recovery_zh") ||
+        !nextPlannerText.includes("DESIGN_IMPLEMENTATION_TRACEABILITY_TEMPLATE_PATH") ||
+        !cliText.includes("finding.template_path") ||
+        !cliText.includes("finding.recovery_command")) {
+        hardFail("RELEASE_ISSUE_TRACEABILITY_RECOVERY_PATH_MISSING", "问题七十三追踪矩阵强门禁缺少模板/引导/审计恢复路径", ["src/engine/traceability.ts", "src/engine/next_action_planner.ts", "src/bin/soloforge.ts"], "problem-73", "强门禁只阻断不给模板和恢复命令会导致用户无法闭环", "为追踪矩阵 finding、soloforge next 和 audit-design-artifacts 输出模板路径与恢复命令");
+    }
     const designPackText = safeRead(path.join(rootDir, "src", "engine", "design_artifact_pack.ts")) ?? "";
     if (!designPackText.includes("traceability_matrix") ||
         !designPackText.includes("auditDesignImplementationTraceability")) {
@@ -3066,8 +3076,24 @@ async function checkControlPlaneTrustBehavior(rootDir, hardFail) {
         }
         if (!cliText.includes("仍处于 ${currentTask.status}") ||
             !cliText.includes("缺少 design_artifact_pack") ||
-            !cliText.includes("没有受控 SoloForge 任务")) {
-            hardFail("CONTROLLED_IMPLEMENTATION_WRITE_GATE_MISSING", "check-write 未覆盖 expanding 卡死、设计产物存在但缺 design_artifact_pack、无受控任务三类直接编码旁路", ["src/bin/soloforge.ts"], "problem-72", "旧 gate 只在交付层发现非 MCP 来源，未在写入入口阻断真实用户项目旁路", "在 check-write 对业务实现文件增加受控任务与设计产物包前置门");
+            !cliText.includes("没有受控 SoloForge 任务") ||
+            !cliText.includes("不得取消/归档当前任务后改用 Bash/Edit/Write") ||
+            !cliText.includes("禁止通过 Bash 直接写业务实现文件")) {
+            hardFail("CONTROLLED_IMPLEMENTATION_WRITE_GATE_MISSING", "check-write/check-bash 未覆盖 expanding 卡死、设计产物存在但缺 design_artifact_pack、无受控任务和 Bash 直接编码旁路", ["src/bin/soloforge.ts"], "problem-72", "旧 gate 只在交付层发现非 MCP 来源，未在写入入口阻断真实用户项目旁路", "在 check-write/check-bash 对业务实现文件增加受控任务与设计产物包前置门");
+        }
+        const assetManifestText = safeRead(path.join(rootDir, "src", "engine", "asset_manifest.ts")) ?? "";
+        const workflowRuleText = safeRead(path.join(rootDir, "templates", "knowledge", "rules", "工作流导航契约规则.md")) ?? "";
+        const lifecycleProcedureText = safeRead(path.join(rootDir, "templates", "knowledge", "procedures", "全生命周期工作流导航.md")) ?? "";
+        const antiBypassNeedles = [
+            "不得建议取消任务后直接写",
+            "不得建议“先用 Bash 直接修改业务代码”",
+            "不得手动删除 `.soloforge/state`",
+            "归档后仍必须重新 `sf_classify -> sf_expand`",
+        ];
+        const antiBypassText = `${assetManifestText}\n${workflowRuleText}\n${lifecycleProcedureText}`;
+        const missingAntiBypassNeedles = antiBypassNeedles.filter((needle) => !antiBypassText.includes(needle));
+        if (missingAntiBypassNeedles.length > 0) {
+            hardFail("CONTROL_PLANE_BLOCKED_RECOVERY_PROMPT_MISSING", `适配器/知识规则缺少阻断恢复反旁路硬规则: ${missingAntiBypassNeedles.join(", ")}`, ["src/engine/asset_manifest.ts", "templates/knowledge/rules/工作流导航契约规则.md", "templates/knowledge/procedures/全生命周期工作流导航.md"], "problem-72", "运行时 hook 能拦截写入，但模型仍可能口头建议取消任务、Bash 直写或手动清状态", "把阻断恢复反旁路协议注入 adapter workflow 和工作流导航知识资产");
         }
     }
     catch (e) {