fix: canonicalize release control identities

Author: rockyshi1993

changelogs/releases/v1.19.0.md

@@ -23,6 +23,7 @@ v1.19.0 修复真实工程任务在会话、Hook、工具调用和恢复过程
 
 - `MutationFootprintV2 → LayeredArtifactSlotRegistryV2 → ArtifactSlotDecisionV2 → TaskOwnedMutationLeaseV2 → TaskRecoveryStoreV5 prewrite → MutationObservationReceiptV1` 成为正式产物的单一写入决定链。
 - Hook、MCP 与宿主工具 mutation 统一进入观察适配层；unknown writer、跨 active-root、错误槽位、重复消费和未观察实际效果均不会被误报为成功。
+- `ArtifactSlotDecisionV2` 的根路径与摘要现在共用 canonical filesystem identity，Windows 短路径、大小写或规范路径别名不再把同一真实根误判为跨 active-root/project-root；不同真实根仍失败关闭。
 - `01-产品需求.md` 的产品提供型内容保持用户原始真相，AI 不得静默改写。
 
 ### TaskRecoveryStoreV5 与 generation 收敛
@@ -46,6 +47,7 @@ v1.19.0 修复真实工程任务在会话、Hook、工具调用和恢复过程
 
 - MCP capability/integrity 证据由 server-owned 响应提供，客户端不再自行构造缺字段 schema；HostIdentityV2 区分 CLI、Desktop 与其他宿主证据，禁止跨宿主继承 PASS。
 - 宿主专项测试显式固定 fixture 的 host variant 并清除 ambient markers，避免在 Codex、Claude 或普通 shell 中运行同一测试得到不同红绿；生产 Stop enforcement 不因测试环境而改变。
+- Host instruction projection 与 Auto 语义探针绑定同一 canonical source；默认 `safety-only` 提醒放行、`strict` 阻断的当前语义会被正向校验，旧硬阻断句被负向拒绝。
 - 根 `README.md`、`public-site/**/*.md` 与 `website/**/*.md` 退出 JavaScript 正文、章节、词句、计数和动态 marker 校验；站点代码、配置、组件、数据与显式 release build 仍按工程范围验证。
 - 语法级危险命令分类减少只读搜索和文档文本误拦，真实危险 sink 继续失败关闭。
 

hooks/_runtime/artifact-slot-decision.cjs

@@ -219,6 +219,15 @@ function canonicalizeTarget(target, activeRoot, options = {}) {
   }
 }
 
+function createArtifactRootIdentity(value, options = {}) {
+  const resolved = path.resolve(String(value || ''))
+  const canonical = canonicalizeTarget(resolved, resolved, options).activeRoot || resolved
+  return {
+    canonicalPath: canonical,
+    digest: digest(comparable(canonical))
+  }
+}
+
 function normalizeArtifactRoots(value, options = {}) {
   if (value && typeof value === 'object' && !Array.isArray(value)) {
     return {
@@ -459,14 +468,8 @@ function decideArtifactMutation(input = {}, options = {}) {
   const anyFormal = inspected.some(item => item.status === 'logical' || ['unknown-formal', 'ambiguous-slot'].includes(item.classified?.matchType) || item.classified?.slot)
   const formalIntent = input.formalIntent === true || anyFormal
   const errors = []
-  const activeRootIdentity = {
-    canonicalPath: canonicalizeTarget(activeRoot, activeRoot, options).activeRoot || activeRoot,
-    digest: digest(comparable(activeRoot))
-  }
-  const projectRootIdentity = {
-    canonicalPath: canonicalizeTarget(projectRoot, projectRoot, options).activeRoot || projectRoot,
-    digest: digest(comparable(projectRoot))
-  }
+  const activeRootIdentity = createArtifactRootIdentity(activeRoot, options)
+  const projectRootIdentity = createArtifactRootIdentity(projectRoot, options)
 
   if (!formalIntent) {
     const semantic = {
@@ -726,6 +729,7 @@ module.exports = {
   canonicalizeAgainstRoots,
   canonicalizeTarget,
   classifyRelativeTarget,
+  createArtifactRootIdentity,
   decideArtifactMutation,
   enumerateTaskArtifacts,
   hasTaskArtifact,

hooks/_runtime/lifecycle.cjs

@@ -95,6 +95,7 @@ const {
 } = require('./workflow-completion-contract.cjs')
 const {
   canonicalArtifactName,
+  createArtifactRootIdentity,
   decideArtifactMutation,
   hasTaskArtifact: registryHasTaskArtifact,
   readLayeredArtifactSlotRegistry,
@@ -2445,11 +2446,6 @@ function sameResolvedPath(left, right) {
   return process.platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b
 }
 
-function artifactRootIdentityDigest(value) {
-  const normalized = path.normalize(path.resolve(String(value || '')))
-  return stableDigest(process.platform === 'win32' ? normalized.toLowerCase() : normalized)
-}
-
 function isSha256(value) {
   return /^[a-f0-9]{64}$/i.test(String(value || ''))
 }
@@ -2582,14 +2578,16 @@ function validateMutationAuthorizationBundle(state, operation, options = {}) {
   }
   const currentActiveRoot = getActiveNamespaceRoot(state)
   const currentProjectRoot = state.stickyProject?.physicalRoot || CONTEXT_ROOT
+  const currentActiveRootIdentity = createArtifactRootIdentity(currentActiveRoot)
+  const currentProjectRootIdentity = createArtifactRootIdentity(currentProjectRoot)
   if ((decision?.activeRootIdentity?.canonicalPath &&
-       !sameResolvedPath(decision.activeRootIdentity.canonicalPath, currentActiveRoot)) ||
-      decision?.activeRootIdentity?.digest !== artifactRootIdentityDigest(currentActiveRoot)) {
+       !sameResolvedPath(decision.activeRootIdentity.canonicalPath, currentActiveRootIdentity.canonicalPath)) ||
+      decision?.activeRootIdentity?.digest !== currentActiveRootIdentity.digest) {
     errors.push('artifact-active-root-drift')
   }
   if ((decision?.projectRootIdentity?.canonicalPath &&
-       !sameResolvedPath(decision.projectRootIdentity.canonicalPath, currentProjectRoot)) ||
-      decision?.projectRootIdentity?.digest !== artifactRootIdentityDigest(currentProjectRoot)) {
+       !sameResolvedPath(decision.projectRootIdentity.canonicalPath, currentProjectRootIdentity.canonicalPath)) ||
+      decision?.projectRootIdentity?.digest !== currentProjectRootIdentity.digest) {
     errors.push('artifact-project-root-drift')
   }
   if (decision?.contextEpoch !== state.contextAcquisition?.contextEpoch ||

host-projections/AGENTS.md

@@ -1,7 +1,7 @@
 # DevCodex — Shared Host Kernel（generated）
 
 > Generated from the unified DevCodex instructions source. Do not edit this file directly.
-> sourceDigest: e38178889dd9209c6975b2384061119d9d4b06c15577b49a3c36476e5968b6bc
+> sourceDigest: 13baf292a6f512aedc45493cf9205afff02e4463335829cc35b013d8c8d037d9
 > configDigest: e2e2a4dde233366df758fb5fa1e9ac299a5f1dbd1b223390c4849e7d8ab9df3b
 > Full fallback: user://agents/devcodex/instructions.full.md
 > Host surface: Codex / Claude import / Gemini import / Grok native AGENTS.md

host-projections/copilot-instructions.md

@@ -1,7 +1,7 @@
 # DevCodex — Copilot Host Kernel（generated）
 
 > Generated from the unified DevCodex instructions source. Do not edit this file directly.
-> sourceDigest: e38178889dd9209c6975b2384061119d9d4b06c15577b49a3c36476e5968b6bc
+> sourceDigest: 13baf292a6f512aedc45493cf9205afff02e4463335829cc35b013d8c8d037d9
 > configDigest: e2e2a4dde233366df758fb5fa1e9ac299a5f1dbd1b223390c4849e7d8ab9df3b
 > Full fallback: user://agents/devcodex/instructions.full.md
 > Host surface: GitHub Copilot CLI user-global instructions; Hooks/MCP/Skills are deployed separately

host-projections/coverage.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": "HostInstructionCoverageReceiptV1",
   "sourceFile": "content/instructions.md",
-  "sourceDigest": "e38178889dd9209c6975b2384061119d9d4b06c15577b49a3c36476e5968b6bc",
+  "sourceDigest": "13baf292a6f512aedc45493cf9205afff02e4463335829cc35b013d8c8d037d9",
   "configDigest": "e2e2a4dde233366df758fb5fa1e9ac299a5f1dbd1b223390c4849e7d8ab9df3b",
   "mode": "kernel",
   "fallback": {
     "destination": "user://agents/devcodex/instructions.full.md",
-    "sourceDigest": "e38178889dd9209c6975b2384061119d9d4b06c15577b49a3c36476e5968b6bc",
+    "sourceDigest": "13baf292a6f512aedc45493cf9205afff02e4463335829cc35b013d8c8d037d9",
     "available": true
   },
   "budgets": {
@@ -307,12 +307,12 @@
     "host-projections/AGENTS.md": {
       "bytes": 11283,
       "lines": 91,
-      "digest": "17aaca66a65c309f875e30f577482e2b8e1820960c6fbfde09a1184ea7f1f732"
+      "digest": "73f73c120b839b043f7dd9f3ddd6a3065bdd3aeefee26865be7eadd0e8e11295"
     },
     "host-projections/copilot-instructions.md": {
       "bytes": 11308,
       "lines": 91,
-      "digest": "bcd4cfdb3542f9c59bdfc904c67e3c723d4f4593271bc20dd7f523f08db304f2"
+      "digest": "362fb188012c4866244335a68c375ca346f2ca5364f2305c8951235222fa83d5"
     },
     "host-projections/CLAUDE.md": {
       "bytes": 510,
@@ -330,5 +330,5 @@
     "valid": true,
     "errors": []
   },
-  "receiptId": "host-instruction-coverage-b46f8a363fea504778b7dbc5a77092add8880311f1ea89c0a103aa2bceac6b3f"
+  "receiptId": "host-instruction-coverage-49d2ea229fec7cb9d0320ad9a4a36c0d798209f2e45e22bf2f5f32971427622d"
 }

scripts/lib/validate-governance-prompts.js

@@ -346,14 +346,20 @@ function buildGovernancePromptChecks(ctx) {
     mustInclude('instructions/01-common.instructions.md', '全局默认 `@rocky`', '01-common default auto alias')
     mustInclude('instructions/01-common.instructions.md', '替换全局默认别名', '01-common auto alias replacement')
     mustInclude('instructions/01-common.instructions.md', '模糊提及', '01-common auto mode')
-    mustInclude('instructions/01-common.instructions.md', '非白名单路径默认切回确认模式', '01-common auto mode')
+    mustInclude('instructions/01-common.instructions.md', '非白名单路径在默认 `safety-only` 下提醒后继续已获正式授权的 mutation', '01-common auto safety-only mode')
+    mustInclude('instructions/01-common.instructions.md', '在 `strict` 下切回确认并拦截', '01-common auto strict mode')
+    mustNotInclude('instructions/01-common.instructions.md', '非白名单路径默认切回确认模式', '01-common legacy auto hard-block mode')
     mustInclude('skills/cp-gate/SKILL.md', '明确自然语言 auto 授权', 'cp-gate auto mode')
     mustInclude('skills/cp-gate/SKILL.md', 'extensions.devcodex.autoAliases', 'cp-gate auto alias')
     mustInclude('skills/cp-gate/SKILL.md', '全局默认 `@rocky`', 'cp-gate default auto alias')
     mustInclude('skills/cp-gate/SKILL.md', '替换全局默认别名', 'cp-gate auto alias replacement')
     mustInclude('skills/cp-gate/SKILL.md', '白名单路径', 'cp-gate auto mode')
+    mustInclude('skills/cp-gate/SKILL.md', '非白名单路径在默认 `safety-only` 下提醒后继续已获正式授权的 mutation', 'cp-gate auto safety-only mode')
+    mustInclude('skills/cp-gate/SKILL.md', '在 `strict` 模式下回确认并硬拦截', 'cp-gate auto strict mode')
     mustInclude('skills/cp-gate/SKILL.md', 'instruction-fallback', 'cp-gate auto mode')
     mustInclude('skills/compliance/SKILL.md', 'hook-enforced', 'compliance auto mode')
+    mustInclude('skills/compliance/SKILL.md', '非白名单路径在正式 workflow authority 已满足后输出提醒并放行', 'compliance auto safety-only mode')
+    mustInclude('skills/compliance/SKILL.md', '`strict` 模式下才按白名单执行 runtime 硬拦截', 'compliance auto strict mode')
     mustInclude('skills/compliance/SKILL.md', 'instruction-fallback', 'compliance auto mode')
     mustInclude('hooks/_runtime/lifecycle.cjs', 'AUTO_ALLOWED_PATH_PATTERNS', 'lifecycle runtime auto mode')
     mustInclude('hooks/_runtime/lifecycle.cjs', 'detectExecutionMode', 'lifecycle runtime auto mode')

scripts/test-artifact-mutation-authority.js

@@ -15,6 +15,7 @@ const {
 } = require('../hooks/_runtime/mutation-footprint.cjs')
 const {
   decideArtifactMutation,
+  createArtifactRootIdentity,
   enumerateTaskArtifacts,
   hasTaskArtifact,
   isAuthoritativeTaskArtifact,
@@ -65,6 +66,32 @@ function decisionFor(payload, overrides = {}) {
 }
 
 try {
+  const canonicalIdentityRoot = path.join(tempRoot, 'canonical-root-identity')
+  const aliasIdentityRoot = path.join(tempRoot, 'alias-root-identity')
+  fs.mkdirSync(canonicalIdentityRoot, { recursive: true })
+  const comparablePath = value => process.platform === 'win32'
+    ? path.resolve(value).toLowerCase()
+    : path.resolve(value)
+  const aliasFs = {
+    realpathSync(value) {
+      return comparablePath(value) === comparablePath(aliasIdentityRoot)
+        ? canonicalIdentityRoot
+        : fs.realpathSync(value)
+    }
+  }
+  assert.deepStrictEqual(
+    createArtifactRootIdentity(aliasIdentityRoot, { fs: aliasFs }),
+    createArtifactRootIdentity(canonicalIdentityRoot),
+    'artifact root identity must bind the canonical filesystem root rather than an alias spelling'
+  )
+  const distinctIdentityRoot = path.join(tempRoot, 'distinct-root-identity')
+  fs.mkdirSync(distinctIdentityRoot, { recursive: true })
+  assert.notStrictEqual(
+    createArtifactRootIdentity(distinctIdentityRoot).digest,
+    createArtifactRootIdentity(canonicalIdentityRoot).digest,
+    'different canonical filesystem roots must retain different identities'
+  )
+
   const overview = write('00-问题概况.md')
   const cp1 = write('01-问题确认.md')
   const cp2 = write('02-修复方案.md')
@@ -637,5 +664,9 @@ try {
   assert(fs.existsSync(overview) && fs.existsSync(cp1))
   process.stdout.write('test-artifact-mutation-authority: ok\n')
 } finally {
-  fs.rmSync(tempRoot, { recursive: true, force: true })
+  if (process.env.DEVCODEX_KEEP_TEST_ARTIFACTS === '1') {
+    process.stdout.write(`[test-artifact-mutation-authority] retained ${tempRoot}\n`)
+  } else {
+    fs.rmSync(tempRoot, { recursive: true, force: true })
+  }
 }