soloforge 1.5.0 → 2.0.0

package/dist/engine/pipeline/slice_executor.js

@@ -0,0 +1,103 @@
+/**
+ * 切片执行器 — 管理开发切片的调度、隔离和单切片审查。
+ *
+ * 核心职责:
+ * - 切片调度：按优先级串行或并行执行
+ * - 切片隔离：后续切片不能影响已通过校验的切片
+ * - 单切片审查：支持对任一切片单独进行代码审查
+ */
+import { debug } from "../core/logger.js";
+/**
+ * 创建切片执行器上下文。
+ * @param slices - 开发切片列表
+ * @param description - 可选的任务描述，用于切片执行日志和追踪
+ */
+export function createSliceContext(slices, description) {
+    return {
+        slices: slices.sort((a, b) => a.priority - b.priority),
+        results: new Map(),
+        protected_files: new Set(),
+        ...(description ? { description } : {}),
+    };
+}
+/**
+ * 获取下一个待执行的切片。
+ * 考虑依赖关系：依赖切片必须已通过。
+ */
+export function getNextSlice(ctx) {
+    for (const slice of ctx.slices) {
+        const result = ctx.results.get(slice.id);
+        if (result && result.status !== "pending")
+            continue;
+        // 检查依赖是否已通过
+        const depsMet = slice.depends_on.every((depId) => {
+            const dep = ctx.results.get(depId);
+            return dep?.status === "passed";
+        });
+        if (!depsMet)
+            continue;
+        return slice;
+    }
+    return null;
+}
+/**
+ * 获取所有可并行执行的切片（无互相依赖且依赖都已通过）。
+ */
+export function getParallelSlices(ctx) {
+    const available = [];
+    const runningIds = new Set([...ctx.results.values()]
+        .filter((r) => r.status === "in_progress")
+        .map((r) => r.slice_id));
+    for (const slice of ctx.slices) {
+        if (ctx.results.has(slice.id))
+            continue;
+        if (runningIds.has(slice.id))
+            continue;
+        const depsMet = slice.depends_on.every((depId) => {
+            const dep = ctx.results.get(depId);
+            return dep?.status === "passed";
+        });
+        if (depsMet)
+            available.push(slice);
+    }
+    return available;
+}
+/**
+ * 检查切片隔离：新切片不能触碰已通过切片的受保护文件。
+ */
+export function checkSliceIsolation(ctx, slice) {
+    const conflicts = slice.affected_files.filter((f) => ctx.protected_files.has(f));
+    return {
+        isolated: conflicts.length === 0,
+        conflicts,
+    };
+}
+/**
+ * 标记切片执行结果。
+ * 通过时将其文件加入受保护集合。
+ */
+export function markSliceResult(ctx, result) {
+    ctx.results.set(result.slice_id, result);
+    if (result.status === "passed") {
+        const slice = ctx.slices.find((s) => s.id === result.slice_id);
+        if (slice) {
+            for (const f of slice.affected_files) {
+                ctx.protected_files.add(f);
+            }
+        }
+        debug("切片执行器", "切片通过, id=%s, 受保护文件数=%d", result.slice_id, ctx.protected_files.size);
+    }
+}
+/**
+ * 审查指定切片。
+ */
+export function reviewSlice(sliceId, findings) {
+    const result = {
+        slice_id: sliceId,
+        passed: !findings.some((f) => f.severity === "critical"),
+        findings,
+    };
+    debug("切片执行器", "切片审查, id=%s, 通过=%s, 发现数=%d", sliceId, result.passed, findings.length);
+    return result;
+}
+//# sourceMappingURL=slice_executor.js.map

package/dist/engine/pipeline/slice_executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slice_executor.js","sourceRoot":"","sources":["../../../src/engine/pipeline/slice_executor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAkD1C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,WAAoB;IACzE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACtD,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,eAAe,EAAE,IAAI,GAAG,EAAE;QAC1B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAA0B;IACrD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAEpD,YAAY;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA0B;IAC1D,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC1B,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QACxC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QAEvC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAA0B,EAC1B,KAAe;IAEf,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;QAChC,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,GAA0B,EAC1B,MAA4B;IAE5B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEzC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACrC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,QAAuC;IAEvC,MAAM,MAAM,GAAsB;QAChC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;QACxD,QAAQ;KACT,CAAC;IAEF,KAAK,CACH,OAAO,EACP,4BAA4B,EAC5B,OAAO,EACP,MAAM,CAAC,MAAM,EACb,QAAQ,CAAC,MAAM,CAChB,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/engine/pipeline/stale_current_task_detector.d.ts

@@ -0,0 +1,30 @@
+/**
+ * 陈旧任务检测器 — 问题六十五。
+ *
+ * 解决真实项目暴露的问题：旧 current-task 误阻塞新任务。
+ *
+ * 核心规则:
+ * - stale current task 不得误阻塞新任务分类
+ * - 不得让 AI 说"无需 SoloForge 状态"然后直接分析
+ * - 必须输出 resume/archive/start_new 选择
+ * - 旧任务不得静默删除，只能提示归档或在用户确认后归档指针
+ * - task 文件保留审计痕迹，默认只处理 current-task 指针
+ */
+import type { StaleCurrentTaskResult } from "../workflow/workflow_navigation_contract.js";
+/**
+ * 检测当前任务的陈旧状态。
+ *
+ * 识别条件:
+ * 1. current-task.json 指向不存在的任务文件
+ * 2. 任务处于 classifying 但已有 classification 且长期未推进
+ * 3. 任务含 missing_authorization / hard_fail invocation_violations
+ * 4. 任务处于 done/failed 但指针仍存在
+ * 5. 任务长时间未更新（> STALE_AGE_MS）
+ */
+export declare function detectStaleCurrentTask(stateDir: string): Promise<StaleCurrentTaskResult>;
+/**
+ * 归档陈旧任务的 current-task 指针（不删除任务文件）。
+ * 必须在用户确认后调用。
+ */
+export declare function archiveStaleCurrentPointer(stateDir: string, taskId: string): Promise<boolean>;
+//# sourceMappingURL=stale_current_task_detector.d.ts.map

package/dist/engine/pipeline/stale_current_task_detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale_current_task_detector.d.ts","sourceRoot":"","sources":["../../../src/engine/pipeline/stale_current_task_detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,OAAO,KAAK,EAAE,sBAAsB,EAAmB,MAAM,6CAA6C,CAAC;AAgC3G;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA0G9F;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBnG"}

package/dist/engine/pipeline/stale_current_task_detector.js

@@ -0,0 +1,171 @@
+/**
+ * 陈旧任务检测器 — 问题六十五。
+ *
+ * 解决真实项目暴露的问题：旧 current-task 误阻塞新任务。
+ *
+ * 核心规则:
+ * - stale current task 不得误阻塞新任务分类
+ * - 不得让 AI 说"无需 SoloForge 状态"然后直接分析
+ * - 必须输出 resume/archive/start_new 选择
+ * - 旧任务不得静默删除，只能提示归档或在用户确认后归档指针
+ * - task 文件保留审计痕迹，默认只处理 current-task 指针
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { debug } from "../core/logger.js";
+import { safeJsonParse } from "../core/helpers.js";
+/** 旧任务判定阈值（毫秒）: 30 分钟未推进视为陈旧 */
+const STALE_AGE_MS = 30 * 60 * 1000;
+/**
+ * 读取 current-task 指针指向的原始任务（不过滤终态）。
+ * 与 TaskContextManager.getCurrentTask() 的区别在于：
+ * - getCurrentTask 过滤 done/failed 任务
+ * - 本函数读取指针并加载原始任务用于陈旧分析
+ */
+async function loadRawCurrentTask(stateDir) {
+    const pointerPath = path.join(stateDir, "current-task.json");
+    try {
+        const data = fs.readFileSync(pointerPath, "utf-8");
+        const { task_id } = safeJsonParse(data) ?? {};
+        if (!task_id)
+            return null;
+        const taskPath = path.join(stateDir, `${task_id}.json`);
+        if (!fs.existsSync(taskPath)) {
+            // 指针指向不存在的任务文件
+            return { pointerTaskId: task_id, ctx: null };
+        }
+        const ctx = safeJsonParse(fs.readFileSync(taskPath, "utf-8"));
+        if (!ctx)
+            return null;
+        return { pointerTaskId: task_id, ctx };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * 检测当前任务的陈旧状态。
+ *
+ * 识别条件:
+ * 1. current-task.json 指向不存在的任务文件
+ * 2. 任务处于 classifying 但已有 classification 且长期未推进
+ * 3. 任务含 missing_authorization / hard_fail invocation_violations
+ * 4. 任务处于 done/failed 但指针仍存在
+ * 5. 任务长时间未更新（> STALE_AGE_MS）
+ */
+export async function detectStaleCurrentTask(stateDir) {
+    debug("陈旧检测", "开始检测", stateDir);
+    const empty = {
+        is_stale: false,
+        task_id: null,
+        reason_zh: "",
+        stale_indicators: [],
+        suggested_resolutions: [],
+    };
+    if (!fs.existsSync(stateDir)) {
+        return empty;
+    }
+    const raw = await loadRawCurrentTask(stateDir);
+    if (!raw) {
+        return empty;
+    }
+    const { pointerTaskId, ctx } = raw;
+    // 情况 1: 指针指向不存在的任务文件
+    if (!ctx) {
+        return {
+            is_stale: true,
+            task_id: pointerTaskId,
+            reason_zh: `current-task.json 指向的任务文件 ${pointerTaskId}.json 不存在`,
+            stale_indicators: ["pointer_target_missing"],
+            suggested_resolutions: ["archive"],
+        };
+    }
+    const indicators = [];
+    const reasons = [];
+    // 情况 2: 任务处于终态但指针仍存在
+    if (ctx.status === "done" || ctx.status === "failed") {
+        indicators.push("terminal_status_with_pointer");
+        reasons.push(`任务状态为 ${ctx.status}（终态），但 current-task 指针仍指向该任务`);
+    }
+    // 情况 3: 任务处于 classifying 且有 classification 但长期未推进
+    if (ctx.status === "classifying" && ctx.classification) {
+        const updatedAt = new Date(ctx.updated_at ?? ctx.created_at).getTime();
+        const age = Date.now() - updatedAt;
+        if (age > STALE_AGE_MS) {
+            indicators.push("classifying_with_classification_stale");
+            reasons.push(`任务处于 classifying 但已有分类结果，且超过 ${Math.round(STALE_AGE_MS / 60000)} 分钟未推进`);
+        }
+    }
+    // 情况 4: 任务含 missing_authorization / hard_fail invocation_violations
+    const violations = ctx.invocation_violations ?? [];
+    const hardFailViolations = violations.filter((v) => v.severity === "hard_fail" || v.violation_type === "missing_authorization");
+    if (hardFailViolations.length > 0) {
+        indicators.push("hard_fail_violations");
+        reasons.push(`任务包含 ${hardFailViolations.length} 个 hard_fail 级别的调用违规（如 missing_authorization）`);
+    }
+    // 情况 5: 长时间未更新
+    const idleMs = Date.now() - new Date(ctx.updated_at ?? ctx.created_at).getTime();
+    if (idleMs > STALE_AGE_MS && !["done", "failed"].includes(ctx.status)) {
+        indicators.push("long_idle");
+        reasons.push(`任务超过 ${Math.round(idleMs / 60000)} 分钟未更新`);
+    }
+    if (indicators.length === 0) {
+        return {
+            ...empty,
+            task_id: pointerTaskId,
+            current_task_context: ctx,
+        };
+    }
+    // 计算建议操作
+    const resolutions = [];
+    // 如果任务处于非终态且有实质进展，建议恢复
+    if (!["done", "failed"].includes(ctx.status) && (ctx.classification || ctx.expansion || ctx.execution)) {
+        resolutions.push("resume");
+    }
+    // 总是可以归档
+    resolutions.push("archive");
+    // 如果有严重违规或长期未推进，也建议开始新任务
+    if (hardFailViolations.length > 0 || indicators.includes("classifying_with_classification_stale")) {
+        resolutions.push("start_new");
+    }
+    // 确保至少有一个选项
+    if (resolutions.length === 0) {
+        resolutions.push("archive", "start_new");
+    }
+    return {
+        is_stale: true,
+        task_id: pointerTaskId,
+        reason_zh: reasons.join("；"),
+        stale_indicators: indicators,
+        suggested_resolutions: resolutions,
+        current_task_context: ctx,
+    };
+}
+/**
+ * 归档陈旧任务的 current-task 指针（不删除任务文件）。
+ * 必须在用户确认后调用。
+ */
+export async function archiveStaleCurrentPointer(stateDir, taskId) {
+    const pointerPath = path.join(stateDir, "current-task.json");
+    try {
+        const data = safeJsonParse(fs.readFileSync(pointerPath, "utf-8"));
+        if (data?.task_id === taskId) {
+            // 将指针文件重命名为归档标记，保留审计痕迹
+            const archivePath = path.join(stateDir, `archived-pointer-${taskId}.json`);
+            fs.writeFileSync(archivePath, JSON.stringify({
+                ...data,
+                archived_at: new Date().toISOString(),
+                archive_reason: "stale_task_cleanup",
+            }, null, 2));
+            fs.unlinkSync(pointerPath);
+            debug("陈旧检测", `已归档 current-task 指针: ${taskId}`);
+            return true;
+        }
+        return false;
+    }
+    catch (e) {
+        debug("陈旧检测", "归档指针失败", e);
+        return false;
+    }
+}
+//# sourceMappingURL=stale_current_task_detector.js.map

package/dist/engine/pipeline/stale_current_task_detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale_current_task_detector.js","sourceRoot":"","sources":["../../../src/engine/pipeline/stale_current_task_detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAInD,gCAAgC;AAChC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAsB,IAAI,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,eAAe;YACf,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,IAA8B,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAc,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAgB;IAC3D,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEhC,MAAM,KAAK,GAA2B;QACpC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,EAAE;QACpB,qBAAqB,EAAE,EAAE;KAC1B,CAAC;IAEF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEnC,qBAAqB;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,6BAA6B,aAAa,WAAW;YAChE,gBAAgB,EAAE,CAAC,wBAAwB,CAAC;YAC5C,qBAAqB,EAAE,CAAC,SAAS,CAAC;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,qBAAqB;IACrB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrD,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,MAAM,8BAA8B,CAAC,CAAC;IAClE,CAAC;IAED,kDAAkD;IAClD,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACnC,IAAI,GAAG,GAAG,YAAY,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACnD,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAC1C,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,cAAc,KAAK,uBAAuB,CAC3G,CAAC;IACF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,MAAM,+CAA+C,CAAC,CAAC;IACjG,CAAC;IAED,eAAe;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACjF,IAAI,MAAM,GAAG,YAAY,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE,aAAa;YACtB,oBAAoB,EAAE,GAAG;SAC1B,CAAC;IACJ,CAAC;IAED,SAAS;IACT,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,uBAAuB;IACvB,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACvG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,SAAS;IACT,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE5B,yBAAyB;IACzB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;QAClG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAED,YAAY;IACZ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5B,gBAAgB,EAAE,UAAU;QAC5B,qBAAqB,EAAE,WAAW;QAClC,oBAAoB,EAAE,GAAG;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAgB,EAAE,MAAc;IAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAA0B,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3F,IAAI,IAAI,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;YAC7B,uBAAuB;YACvB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,MAAM,OAAO,CAAC,CAAC;YAC3E,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3C,GAAG,IAAI;gBACP,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,cAAc,EAAE,oBAAoB;aACrC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC3B,KAAK,CAAC,MAAM,EAAE,wBAAwB,MAAM,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/engine/pipeline/state_machine/audit_logger.d.ts

@@ -0,0 +1,42 @@
+/**
+ * 审计日志 — 管线操作的持久化审计追踪。
+ *
+ * 操作前保存快照，操作后追加审计条目。
+ * 写入 .soloforge/state/audit.log（JSONL 格式）。
+ */
+import type { PipelineState } from "../../../types/state_machine.js";
+/**
+ * 追加审计日志条目到 audit.log 文件。
+ *
+ * @param stateDir - 状态目录路径
+ * @param entry - 审计日志条目
+ */
+export declare function appendAuditLog(stateDir: string, entry: {
+    timestamp: string;
+    operation: string;
+    from_stage?: string;
+    to_stage?: string;
+    user_confirmation?: string;
+    previous_snapshot_path?: string;
+    reason?: string;
+}): Promise<void>;
+/**
+ * 操作前保存快照。
+ *
+ * 将当前管线状态序列化为 YAML 快照文件。
+ *
+ * @param stateDir - 状态目录路径
+ * @param pipelineId - 管线 ID
+ * @param state - 当前管线状态
+ * @returns 快照文件路径
+ */
+export declare function saveSnapshot(stateDir: string, pipelineId: string, state: PipelineState): Promise<string>;
+/**
+ * 读取审计日志。
+ *
+ * @param stateDir - 状态目录路径
+ * @param limit - 最大条目数（默认 100）
+ * @returns 审计日志条目列表（最新在前）
+ */
+export declare function readAuditLog(stateDir: string, limit?: number): Promise<Array<Record<string, unknown>>>;
+//# sourceMappingURL=audit_logger.d.ts.map

package/dist/engine/pipeline/state_machine/audit_logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit_logger.d.ts","sourceRoot":"","sources":["../../../../src/engine/pipeline/state_machine/audit_logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAMrE;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAM,GACV,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAczC"}

package/dist/engine/pipeline/state_machine/audit_logger.js

@@ -0,0 +1,71 @@
+/**
+ * 审计日志 — 管线操作的持久化审计追踪。
+ *
+ * 操作前保存快照，操作后追加审计条目。
+ * 写入 .soloforge/state/audit.log（JSONL 格式）。
+ */
+import fs from "node:fs/promises";
+import path from "node:path";
+import YAML from "yaml";
+// ═══════════════════════════════════════════
+// 公共接口
+// ═══════════════════════════════════════════
+/**
+ * 追加审计日志条目到 audit.log 文件。
+ *
+ * @param stateDir - 状态目录路径
+ * @param entry - 审计日志条目
+ */
+export async function appendAuditLog(stateDir, entry) {
+    const auditPath = path.join(stateDir, "audit.log");
+    const line = JSON.stringify(entry) + "\n";
+    await fs.appendFile(auditPath, line, "utf-8");
+}
+/**
+ * 操作前保存快照。
+ *
+ * 将当前管线状态序列化为 YAML 快照文件。
+ *
+ * @param stateDir - 状态目录路径
+ * @param pipelineId - 管线 ID
+ * @param state - 当前管线状态
+ * @returns 快照文件路径
+ */
+export async function saveSnapshot(stateDir, pipelineId, state) {
+    const snapshotDir = path.join(stateDir, "snapshots");
+    await fs.mkdir(snapshotDir, { recursive: true });
+    const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
+    const snapshotPath = path.join(snapshotDir, `${pipelineId}-${timestamp}.yaml`);
+    const content = YAML.stringify(state);
+    await fs.writeFile(snapshotPath, content, "utf-8");
+    return snapshotPath;
+}
+/**
+ * 读取审计日志。
+ *
+ * @param stateDir - 状态目录路径
+ * @param limit - 最大条目数（默认 100）
+ * @returns 审计日志条目列表（最新在前）
+ */
+export async function readAuditLog(stateDir, limit = 100) {
+    const auditPath = path.join(stateDir, "audit.log");
+    try {
+        const content = await fs.readFile(auditPath, "utf-8");
+        const lines = content.trim().split("\n").filter(Boolean);
+        // 最新在前
+        return lines
+            .map((line) => { try {
+            return JSON.parse(line);
+        }
+        catch {
+            return null;
+        } })
+            .filter((entry) => entry !== null)
+            .reverse()
+            .slice(0, limit);
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=audit_logger.js.map

package/dist/engine/pipeline/state_machine/audit_logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit_logger.js","sourceRoot":"","sources":["../../../../src/engine/pipeline/state_machine/audit_logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,8CAA8C;AAC9C,OAAO;AACP,8CAA8C;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,KAQC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,UAAkB,EAClB,KAAoB;IAEpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,UAAU,IAAI,SAAS,OAAO,CAAC,CAAC;IAE/E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAEnD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,KAAK,GAAG,GAAG;IAEX,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO;QACP,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;aAC1E,MAAM,CAAC,CAAC,KAAK,EAAsC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;aACrE,OAAO,EAAE;aACT,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/engine/pipeline/state_machine/capability_safety_valve.d.ts

@@ -0,0 +1,51 @@
+/**
+ * 能力状态安全阀 — 防止 experimental 能力硬阻断管线推进。
+ * 当门禁检查触发 experimental 能力约束时，安全阀评估是否可降级。
+ */
+import type { TaskStage } from "../../workflow/workflow_navigation_contract.js";
+/** 能力等级 */
+export type CapabilityLevel = "stable" | "experimental" | "deprecated";
+/** 能力状态条目 */
+export interface CapabilityStateEntry {
+    capability_id: string;
+    level: CapabilityLevel;
+    min_gate_level: "stable" | "experimental";
+    downgrade_count: number;
+    last_downgrade_reason?: string;
+}
+/** 安全阀输入 */
+export interface SafetyValveInput {
+    capability: CapabilityStateEntry;
+    current_stage: TaskStage;
+    gate_result: "passed" | "warning" | "blocked";
+}
+/** 安全阀输出 */
+export interface SafetyValveResult {
+    action: "allow" | "downgrade" | "block";
+    original_level: CapabilityLevel;
+    effective_level: CapabilityLevel;
+    reason_zh: string;
+    audit_event?: {
+        event_type: "GATE_DOWNGRADED" | "GATE_BLOCKED" | "GATE_PASSED";
+        capability_id: string;
+        from_level: CapabilityLevel;
+        to_level: CapabilityLevel;
+        stage: TaskStage;
+        timestamp: string;
+    };
+}
+/** 门禁到能力等级映射 */
+export declare const GATE_CHECK_TO_CAPABILITY: Record<string, CapabilityLevel>;
+/**
+ * 评估能力安全阀 — 当门禁检查结果与能力等级冲突时决定降级策略。
+ *
+ * 规则：
+ * 1. stable 能力不会被降级
+ * 2. experimental 能力在设计阶段可降级为 advisory
+ * 3. 编码/审查/验证阶段不允许降级
+ * 4. 降级次数超过阈值时硬阻断
+ */
+export declare function applyCapabilitySafetyValve(input: SafetyValveInput): SafetyValveResult;
+/** 获取门禁对应的能力等级 */
+export declare function getRequiredCapabilityLevel(gateId: string): CapabilityLevel;
+//# sourceMappingURL=capability_safety_valve.d.ts.map

package/dist/engine/pipeline/state_machine/capability_safety_valve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_safety_valve.d.ts","sourceRoot":"","sources":["../../../../src/engine/pipeline/state_machine/capability_safety_valve.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAGhF,WAAW;AACX,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,cAAc,GAAG,YAAY,CAAC;AAEvE,aAAa;AACb,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,eAAe,CAAC;IACvB,cAAc,EAAE,QAAQ,GAAG,cAAc,CAAC;IAC1C,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,YAAY;AACZ,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,oBAAoB,CAAC;IACjC,aAAa,EAAE,SAAS,CAAC;IACzB,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CAC/C;AAED,YAAY;AACZ,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,OAAO,CAAC;IACxC,cAAc,EAAE,eAAe,CAAC;IAChC,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,UAAU,EAAE,iBAAiB,GAAG,cAAc,GAAG,aAAa,CAAC;QAC/D,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,eAAe,CAAC;QAC5B,QAAQ,EAAE,eAAe,CAAC;QAC1B,KAAK,EAAE,SAAS,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,gBAAgB;AAChB,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CASpE,CAAC;AAQF;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAwGrF;AAED,kBAAkB;AAClB,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAE1E"}

package/dist/engine/pipeline/state_machine/capability_safety_valve.js

@@ -0,0 +1,131 @@
+/**
+ * 能力状态安全阀 — 防止 experimental 能力硬阻断管线推进。
+ * 当门禁检查触发 experimental 能力约束时，安全阀评估是否可降级。
+ */
+import { debug } from "../../core/logger.js";
+/** 门禁到能力等级映射 */
+export const GATE_CHECK_TO_CAPABILITY = {
+    "gate-需求分析-knowledge-coverage": "stable",
+    "gate-架构设计-knowledge-coverage": "stable",
+    "gate-架构设计-risk-patterns": "stable",
+    "gate-架构设计-confirmation-level": "stable",
+    "gate-详细设计-knowledge-coverage": "stable",
+    "gate-详细设计-required-inputs": "stable",
+    "gate-现有系统分析-knowledge-coverage": "experimental",
+    "gate-现有系统分析-crash-risk": "experimental",
+};
+/** 允许降级的阶段（设计阶段允许 experimental 降级） */
+const DOWNGRADE_ALLOWED_STAGES = ["需求分析", "架构设计", "详细设计", "任务规划"];
+/** 最大降级次数 */
+const MAX_DOWNGRADE_COUNT = 3;
+/**
+ * 评估能力安全阀 — 当门禁检查结果与能力等级冲突时决定降级策略。
+ *
+ * 规则：
+ * 1. stable 能力不会被降级
+ * 2. experimental 能力在设计阶段可降级为 advisory
+ * 3. 编码/审查/验证阶段不允许降级
+ * 4. 降级次数超过阈值时硬阻断
+ */
+export function applyCapabilitySafetyValve(input) {
+    const { capability, current_stage, gate_result } = input;
+    // 门禁通过 → 直接放行
+    if (gate_result === "passed") {
+        return {
+            action: "allow",
+            original_level: capability.level,
+            effective_level: capability.level,
+            reason_zh: "门禁检查通过",
+        };
+    }
+    // stable 能力不降级
+    if (capability.level === "stable") {
+        return {
+            action: gate_result === "blocked" ? "block" : "allow",
+            original_level: capability.level,
+            effective_level: capability.level,
+            reason_zh: gate_result === "blocked" ? "stable 能力要求必须满足" : "stable 能力检查通过",
+            audit_event: gate_result === "blocked" ? {
+                event_type: "GATE_BLOCKED",
+                capability_id: capability.capability_id,
+                from_level: capability.level,
+                to_level: capability.level,
+                stage: current_stage,
+                timestamp: new Date().toISOString(),
+            } : undefined,
+        };
+    }
+    // deprecated 能力直接阻断
+    if (capability.level === "deprecated") {
+        return {
+            action: "block",
+            original_level: capability.level,
+            effective_level: capability.level,
+            reason_zh: `已废弃能力 ${capability.capability_id}，请迁移到替代方案`,
+            audit_event: {
+                event_type: "GATE_BLOCKED",
+                capability_id: capability.capability_id,
+                from_level: capability.level,
+                to_level: capability.level,
+                stage: current_stage,
+                timestamp: new Date().toISOString(),
+            },
+        };
+    }
+    // experimental 能力降级逻辑
+    if (!DOWNGRADE_ALLOWED_STAGES.includes(current_stage)) {
+        // 编码/审查/验证阶段不允许降级
+        return {
+            action: "block",
+            original_level: capability.level,
+            effective_level: capability.level,
+            reason_zh: `experimental 能力在 ${current_stage} 阶段不可降级`,
+            audit_event: {
+                event_type: "GATE_BLOCKED",
+                capability_id: capability.capability_id,
+                from_level: capability.level,
+                to_level: capability.level,
+                stage: current_stage,
+                timestamp: new Date().toISOString(),
+            },
+        };
+    }
+    // 超过降级次数阈值
+    if (capability.downgrade_count >= MAX_DOWNGRADE_COUNT) {
+        return {
+            action: "block",
+            original_level: capability.level,
+            effective_level: capability.level,
+            reason_zh: `能力 ${capability.capability_id} 降级次数已达上限 (${MAX_DOWNGRADE_COUNT})`,
+            audit_event: {
+                event_type: "GATE_BLOCKED",
+                capability_id: capability.capability_id,
+                from_level: capability.level,
+                to_level: capability.level,
+                stage: current_stage,
+                timestamp: new Date().toISOString(),
+            },
+        };
+    }
+    // 允许降级
+    debug("能力安全阀", "降级 %s: experimental → advisory (阶段=%s, 第%d次)", capability.capability_id, current_stage, capability.downgrade_count + 1);
+    return {
+        action: "downgrade",
+        original_level: "experimental",
+        effective_level: "stable", // 降级后按 stable 处理
+        reason_zh: `experimental 能力在 ${current_stage} 阶段降级为 advisory（第 ${capability.downgrade_count + 1} 次降级）`,
+        audit_event: {
+            event_type: "GATE_DOWNGRADED",
+            capability_id: capability.capability_id,
+            from_level: "experimental",
+            to_level: "stable",
+            stage: current_stage,
+            timestamp: new Date().toISOString(),
+        },
+    };
+}
+/** 获取门禁对应的能力等级 */
+export function getRequiredCapabilityLevel(gateId) {
+    return GATE_CHECK_TO_CAPABILITY[gateId] ?? "stable";
+}
+//# sourceMappingURL=capability_safety_valve.js.map

package/dist/engine/pipeline/state_machine/capability_safety_valve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_safety_valve.js","sourceRoot":"","sources":["../../../../src/engine/pipeline/state_machine/capability_safety_valve.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAqC7C,gBAAgB;AAChB,MAAM,CAAC,MAAM,wBAAwB,GAAoC;IACvE,8BAA8B,EAAE,QAAQ;IACxC,8BAA8B,EAAE,QAAQ;IACxC,yBAAyB,EAAE,QAAQ;IACnC,8BAA8B,EAAE,QAAQ;IACxC,8BAA8B,EAAE,QAAQ;IACxC,2BAA2B,EAAE,QAAQ;IACrC,gCAAgC,EAAE,cAAc;IAChD,wBAAwB,EAAE,cAAc;CACzC,CAAC;AAEF,sCAAsC;AACtC,MAAM,wBAAwB,GAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/E,aAAa;AACb,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAuB;IAChE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAEzD,cAAc;IACd,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,UAAU,CAAC,KAAK;YAChC,eAAe,EAAE,UAAU,CAAC,KAAK;YACjC,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;YACrD,cAAc,EAAE,UAAU,CAAC,KAAK;YAChC,eAAe,EAAE,UAAU,CAAC,KAAK;YACjC,SAAS,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;YAC1E,WAAW,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC;gBACvC,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,UAAU,EAAE,UAAU,CAAC,KAAK;gBAC5B,QAAQ,EAAE,UAAU,CAAC,KAAK;gBAC1B,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,UAAU,CAAC,KAAK;YAChC,eAAe,EAAE,UAAU,CAAC,KAAK;YACjC,SAAS,EAAE,SAAS,UAAU,CAAC,aAAa,WAAW;YACvD,WAAW,EAAE;gBACX,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,UAAU,EAAE,UAAU,CAAC,KAAK;gBAC5B,QAAQ,EAAE,UAAU,CAAC,KAAK;gBAC1B,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,kBAAkB;QAClB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,UAAU,CAAC,KAAK;YAChC,eAAe,EAAE,UAAU,CAAC,KAAK;YACjC,SAAS,EAAE,oBAAoB,aAAa,SAAS;YACrD,WAAW,EAAE;gBACX,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,UAAU,EAAE,UAAU,CAAC,KAAK;gBAC5B,QAAQ,EAAE,UAAU,CAAC,KAAK;gBAC1B,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC;IACJ,CAAC;IAED,WAAW;IACX,IAAI,UAAU,CAAC,eAAe,IAAI,mBAAmB,EAAE,CAAC;QACtD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,UAAU,CAAC,KAAK;YAChC,eAAe,EAAE,UAAU,CAAC,KAAK;YACjC,SAAS,EAAE,MAAM,UAAU,CAAC,aAAa,cAAc,mBAAmB,GAAG;YAC7E,WAAW,EAAE;gBACX,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,UAAU,EAAE,UAAU,CAAC,KAAK;gBAC5B,QAAQ,EAAE,UAAU,CAAC,KAAK;gBAC1B,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC;IACJ,CAAC;IAED,OAAO;IACP,KAAK,CAAC,OAAO,EAAE,8CAA8C,EAC3D,UAAU,CAAC,aAAa,EAAE,aAAa,EAAE,UAAU,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IAE3E,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,cAAc,EAAE,cAAc;QAC9B,eAAe,EAAE,QAAQ,EAAE,iBAAiB;QAC5C,SAAS,EAAE,oBAAoB,aAAa,qBAAqB,UAAU,CAAC,eAAe,GAAG,CAAC,OAAO;QACtG,WAAW,EAAE;YACX,UAAU,EAAE,iBAAiB;YAC7B,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC;KACF,CAAC;AACJ,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,OAAO,wBAAwB,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;AACtD,CAAC"}