spec-manager 0.3.0 → 0.4.0

package/dist/core/verify.js

@@ -0,0 +1,138 @@
+/**
+ * @verify 规则解析与执行。
+ * 从 L3 spec 的 ## 验收标准 段中解析 @verify: 标记，自动执行校验。
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { execSync } from 'node:child_process';
+import path from 'node:path';
+/** 匹配 @verify 行，支持有序列表(1. )和无序列表(- )前缀 */
+export const VERIFY_RE = /^(?:\d+\.\s+|- )?@verify:\s*(\w[\w-]*)\((.+)\)\s*$/;
+const COMMAND_TIMEOUT_MS = 30_000;
+/** @verify 类型 → 参数数量 */
+export const VERIFY_TYPE_ARITY = {
+    'file-exists': 1,
+    'export-exists': 2,
+    'command': 1,
+};
+/**
+ * 从 spec markdown 的指定段中解析 @verify 规则。
+ * 仅解析 ## sectionName 段内的 @verify: 行。
+ */
+export function parseVerifyRules(content, sectionName) {
+    const rules = [];
+    const lines = content.split('\n');
+    let inSection = false;
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (/^##\s+/.test(trimmed)) {
+            inSection = trimmed.includes(sectionName);
+            continue;
+        }
+        if (!inSection)
+            continue;
+        const m = VERIFY_RE.exec(trimmed);
+        if (!m)
+            continue;
+        const [, type, argsStr] = m;
+        const args = splitArgs(argsStr);
+        if (type === 'file-exists' && args.length === 1) {
+            rules.push({ type: 'file-exists', path: args[0] });
+        }
+        else if (type === 'export-exists' && args.length === 2) {
+            rules.push({ type: 'export-exists', file: args[0], symbol: args[1] });
+        }
+        else if (type === 'command' && args.length === 1) {
+            rules.push({ type: 'command', cmd: args[0] });
+        }
+    }
+    return rules;
+}
+/**
+ * 执行一组 @verify 规则，返回每条规则的结果。
+ * projectRoot 用于解析相对路径。
+ */
+export function executeVerifyRules(rules, projectRoot) {
+    return rules.map(rule => executeOne(rule, projectRoot));
+}
+function executeOne(rule, projectRoot) {
+    switch (rule.type) {
+        case 'file-exists': {
+            const abs = path.resolve(projectRoot, rule.path);
+            const exists = existsSync(abs);
+            return {
+                rule,
+                passed: exists,
+                message: exists ? `${rule.path} exists` : `${rule.path} not found`,
+            };
+        }
+        case 'export-exists': {
+            const abs = path.resolve(projectRoot, rule.file);
+            if (!existsSync(abs)) {
+                return { rule, passed: false, message: `${rule.file} not found` };
+            }
+            const content = readFileSync(abs, 'utf8');
+            const re = new RegExp(`export\\s+(?:default\\s+)?(?:function|const|let|var|class|type|interface|enum)\\s+${escapeRegExp(rule.symbol)}\\b`);
+            const alsoNamed = new RegExp(`export\\s*\\{[^}]*\\b${escapeRegExp(rule.symbol)}\\b[^}]*\\}`);
+            const found = re.test(content) || alsoNamed.test(content);
+            return {
+                rule,
+                passed: found,
+                message: found
+                    ? `${rule.symbol} exported from ${rule.file}`
+                    : `${rule.symbol} not found in exports of ${rule.file}`,
+            };
+        }
+        case 'command': {
+            const result = runCommand(rule.cmd, projectRoot);
+            return {
+                rule,
+                passed: result.exitCode === 0,
+                message: result.exitCode === 0
+                    ? `${rule.cmd} → exit 0`
+                    : `${rule.cmd} → exit ${result.exitCode}${result.output ? ': ' + result.output : ''}`,
+            };
+        }
+    }
+}
+export function runCommand(cmd, cwd) {
+    try {
+        execSync(cmd, { cwd, timeout: COMMAND_TIMEOUT_MS, stdio: 'pipe', encoding: 'utf8' });
+        return { exitCode: 0, output: '' };
+    }
+    catch (err) {
+        const e = err;
+        const exitCode = e.status ?? 1;
+        const output = (e.stderr ?? e.stdout ?? '').toString().slice(0, 500);
+        return { exitCode, output };
+    }
+}
+/** 拆分括号内逗号分隔参数，处理嵌套括号 */
+export function splitArgs(raw) {
+    const args = [];
+    let depth = 0;
+    let current = '';
+    for (const ch of raw) {
+        if (ch === '(') {
+            depth++;
+            current += ch;
+        }
+        else if (ch === ')') {
+            depth--;
+            current += ch;
+        }
+        else if (ch === ',' && depth === 0) {
+            args.push(current.trim());
+            current = '';
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (current.trim())
+        args.push(current.trim());
+    return args;
+}
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+//# sourceMappingURL=verify.js.map

package/dist/core/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/core/verify.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAe7B,0CAA0C;AAC1C,MAAM,CAAC,MAAM,SAAS,GAAG,oDAAoD,CAAC;AAC9E,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,wBAAwB;AACxB,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACvD,aAAa,EAAE,CAAC;IAChB,eAAe,EAAE,CAAC;IAClB,SAAS,EAAE,CAAC;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,WAAmB;IACnE,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC;YAAE,SAAS;QAEjB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAmB,EAAE,WAAmB;IACzE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,WAAmB;IACvD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,YAAY;aACnE,CAAC;QACJ,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;YACpE,CAAC;YACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,qFAAqF,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CACpH,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B,wBAAwB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC/D,CAAC;YACF,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,KAAK;oBACZ,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,kBAAkB,IAAI,CAAC,IAAI,EAAE;oBAC7C,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,4BAA4B,IAAI,CAAC,IAAI,EAAE;aAC1D,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAC7B,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;oBAC5B,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,WAAW;oBACxB,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,WAAW,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;aACxF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,GAAW;IACjD,IAAI,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA4D,CAAC;QACvE,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/index.d.ts

@@ -8,6 +8,8 @@ export * from './core/audit-events.js';
 export * from './core/repository.js';
 export * from './core/usability.js';
 export * from './core/invariants.js';
+export * from './core/verify.js';
+export * from './core/spec-sections.js';
 export * from './core/integrity.js';
 export * from './core/integrity-exemptions.js';
 export * from './core/remediation.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -9,6 +9,8 @@ export * from './core/audit-events.js';
 export * from './core/repository.js';
 export * from './core/usability.js';
 export * from './core/invariants.js';
+export * from './core/verify.js';
+export * from './core/spec-sections.js';
 export * from './core/integrity.js';
 export * from './core/integrity-exemptions.js';
 export * from './core/remediation.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spec-manager",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "spec-manager: local-first spec-driven development platform. Pure markdown storage, no network, no MCP. Portable CLI + multi-agent instructions.",
   "type": "module",
   "license": "MIT",
@@ -14,6 +14,7 @@
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
+    "scripts",
     "skill",
     "templates",
     "rules",
@@ -27,7 +28,8 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "dev": "tsc --watch",
-    "lint": "tsc --noEmit"
+    "lint": "tsc --noEmit",
+    "verify:installed-cli": "node scripts/verify-installed-cli.mjs"
   },
   "keywords": [
     "spec-driven",

package/rules/quality-gate.md

@@ -64,12 +64,12 @@ added: 0.1.0
 applies_to: [L1_implemented]
 ---
 
-L1 spec 状态推进到 `implemented`（通常通过 L3 cascade）后，**必须**至少创建 1 张决策卡片：
+L1 spec 状态推进到 `implemented`（通常通过 L3 cascade）后，**必须**至少存在 1 张 active 决策卡片；superseded 或 partial 卡片不满足 R18。为避免最后一个 Task 与 R18 形成循环依赖，正常流程应在 L1 已 `confirmed`、最后一个 Task 完成前预建卡片：
 
 ```bash
 spec-manager decision create <L1 code> --topic <topic> --what "..." --why "..." --criteria AC-1,AC-2
 ```
 
-**执行机制**：`task complete` 在 cascade 到 L1 implemented 后自动检查决策卡片存在性，缺失则抛出 R18 错误拒绝完成。`--force` 可跳过检查（用于历史补建场景）。R18 已纳入合规基线（`audit show` 检查）。
+**执行机制**：`decision create` 允许关联 `confirmed` 或 `implemented` L1，拒绝 draft L1。`task complete` 在 cascade 到 L1 implemented 后自动检查 active 决策卡片，缺失则抛出 R18 错误并回滚完成事务。异常或历史恢复只能使用独立的 `--skip-r18`、`--skip-verification`、`--skip-verify`，且必须提供 `--reason`；旧 `--force` 被拒绝。R18 已纳入合规基线（`audit show` 检查）。
 
 新 L1 创建前（PRE-WRITE Q4）必须 `spec-manager decision list --topic <topic>` 查询历史决策。

package/scripts/verify-installed-cli.mjs

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+
+import { execFileSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, readdirSync, realpathSync, statSync } from 'node:fs';
+import { dirname, join, relative, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const installedRootOverride = process.env.SPEC_MANAGER_INSTALLED_ROOT;
+const installedBin = installedRootOverride ? null : findInstalledBin();
+const installedRoot = installedRootOverride ? resolve(installedRootOverride) : findPackageRoot(realpathSync(installedBin));
+const localDist = join(repoRoot, 'dist');
+const installedDist = join(installedRoot, 'dist');
+const localFiles = listFiles(localDist);
+const installedFiles = existsSync(installedDist) ? listFiles(installedDist) : [];
+const allFiles = [...new Set([...localFiles, ...installedFiles])].sort();
+const mismatches = allFiles.filter((file) => {
+  const local = join(localDist, file);
+  const installed = join(installedDist, file);
+  return !existsSync(local) || !existsSync(installed) || digest(local) !== digest(installed);
+});
+
+if (mismatches.length > 0) {
+  console.error(`INSTALLED_CLI_DRIFT: ${installedBin ?? installedRoot} differs from the current build`);
+  for (const file of mismatches) console.error(`  - ${file}`);
+  process.exit(1);
+}
+
+console.log(`Installed CLI matches current build: ${installedBin ?? installedRoot}`);
+
+function findInstalledBin() {
+  try {
+    return execFileSync('sh', ['-c', 'command -v spec-manager'], { encoding: 'utf8' }).trim();
+  } catch {
+    console.error('INSTALLED_CLI_MISSING: spec-manager is not available on PATH');
+    process.exit(1);
+  }
+}
+
+function digest(file) {
+  return createHash('sha256').update(readFileSync(file)).digest('hex');
+}
+
+function listFiles(root, base = root) {
+  const files = [];
+  for (const entry of readdirSync(root, { withFileTypes: true })) {
+    const path = join(root, entry.name);
+    if (entry.isDirectory()) files.push(...listFiles(path, base));
+    else if (entry.isFile() && statSync(path).isFile()) files.push(relative(base, path));
+  }
+  return files.sort();
+}
+
+function findPackageRoot(start) {
+  let current = dirname(start);
+  while (dirname(current) !== current) {
+    if (existsSync(join(current, 'package.json'))) return current;
+    current = dirname(current);
+  }
+  console.error(`INSTALLED_CLI_PACKAGE_MISSING: cannot locate package root for ${start}`);
+  process.exit(1);
+}

package/skill/subskills/impl.md

@@ -63,17 +63,21 @@
     - step_report 必须在工作完成后才报（R15）
     > ☑ **R5** — `task complete` 时仍有 pending/running 步会拒绝并报错
     > ☑ **R15** — outputJson 缺 summary 时 warning 落 warn 数组
-12. `spec-manager task complete <task-id>`
-    > 完成后看 `cascadedL1Specs`,对每个 L1 用 `decision list --doc-code <L1>` 查是否已建决策卡
+12. 最后一个子 Task 完成前，对即将级联的 confirmed L1 检查并预建 R18 决策卡片：
+    ```bash
+    spec-manager decision list --doc-code <L1-code>
+    spec-manager decision create <L1-code> --topic <topic> --what "..." --why "..."
+    ```
+13. `spec-manager task complete <task-id>`
     > ☑ **R6** — 流程规则:确认 cascade 后再标 implemented
-    > ☑ **R18** — L1 cascade 到 implemented 后自动校验决策卡片，缺失则拒绝完成
-13. 若仍 frozen,手动 `spec-manager spec implement <L3 code>`
-14. R18 决策卡片：task complete 会自动检查。若因历史原因缺少决策卡，用 `--force` 跳过检查后补建：
+    > ☑ **R18** — L1 cascade 到 implemented 后自动校验预建决策卡片，缺失则拒绝完成并回滚
+14. 若仍 frozen,手动 `spec-manager spec implement <L3 code>`
+15. 异常或历史恢复必须使用独立跳过参数并提供原因，跳过 R18 后必须立即补建 active 决策卡：
     ```bash
-    spec-manager task complete <task-id> --force  # 跳过 R18
-    spec-manager decision create --doc-code <L1-code> --topic <topic> --what "..." --why "..."
+    spec-manager task complete <task-id> --skip-r18 --reason "历史仓库恢复"
+    spec-manager decision create <L1-code> --topic <topic> --what "..." --why "..."
     ```
-15. 规则审计合规检查：
+16. 规则审计合规检查：
     ```bash
     spec-manager audit show
     ```