fix: 统一安装态模板验收并补齐入口规范示例

Author: rockyshi1993

changelogs/releases/v1.20.2.md

@@ -17,6 +17,7 @@
 - 记忆、报告和任务产物使用对应模板或明确的模板扩展，记录实际生成来源；避免同一产物槽重复生成。
 - 修复 MCP 链接工具公开状态与底层校验器不一致的问题；共享同一状态词表，未核实点击能力时保留可移植链接及真实证据状态。
 - 模板结构检查与用户意图满足度分别留证。历史产物对比新版模板得到诊断结果，不回填虚假的历史生成依据，也不批量改写历史报告。
+- 修复安装态准入测试读取源码专用模板路径的问题；普通安装回归与正式包资格检查均执行安装后的生产者及负向用例。
 - 检查优化任务目录，记录有界扫描未覆盖的范围；包含流程简称的正文不能让整个任务跳过检查。
 - 实际隔离 Codex CLI 探针核对工具调用、上下文重绑和业务文件；协议探针、自然语言业务结果、模型自述与外部宿主拒绝分别记录。
 - 发布说明文字可以使用任务要求的语言；Profile 生命周期校验采用结构化状态和实际发行证据，不再要求英文前缀。Windows 兼容检查按独立任务分组，保留原有完整检查范围。

content/instructions/17-compliance.instructions.md

@@ -38,14 +38,17 @@ version: 1.20.2
 
 | 项 | 内容（人话；禁止进度缩写 · 六宿主同源） |
 |----|----------------------------------------|
-| PC0 | 上下文：项目 · 语言 · ContextReadPlan [已形成/降级] · 必要来源回执 [verified/partial/missing] |
+| PC0 | 版本与上下文：installed package · 活动 runtime generation · 可选源码候选 · alignment；项目 · 语言 · ContextReadPlan [已形成/降级] · 必要来源回执 [verified/partial/missing] |
 | PC1 | 意图：语义初判 → 扩展后工作流（有修正须写明） |
 | PC2 | 会话：第 N 轮 · Token 防护 · 待跟进 ✅无 / ⚠️简述 |
 | PC3 | 执行准备：唯一项目 · 未完成任务 · 产物落点（禁止「写报告 02」式施工日志） |
 | PC4 | 规范雷达：dev 见 18-spec-radar；非 dev=`N/A` + skipReason |
 | PC5 | 宿主：名称 + Full/Partial · 用户级 adapter/receipt 或 legacy 父链诊断 |
 | PC6 | 工作区：git dirty 范围 · 任务目录 requirements/… 或 bugs/… |
 | PC7 | 续接：首条须 memory_status + 有界 query；非首条可 N/A |
+| PC8 | 流程与方案：WorkflowPlanDecisionV1 二次判断 · 合理性评估 · 已确认范围与自动继续边界 |
+| PC9 | 验证计划：适用检查 · 实际验证范围 · 预计耗时；未运行或受外部条件限制时明确标注 |
+| PC10 | 后续动作：当前阶段 · 下一阶段 · 自动继续或需要用户决策的具体事项 |
 
 下一步：[一句人话]
 ```

content/skills/portfolio.json

@@ -15,8 +15,8 @@
     "portfolioEvidenceDigest": "8364a73c66ed2ec9787cdb9300223278d128a45b689a2b8deda0d1f03189f42b",
     "consumerInventoryFileCount": 713,
     "consumerInventoryDigest": "424ec22febd792e124b514f3a668703849b8d4dee64719c8a7d670f49499c2ca",
-    "consumerProjectionDigest": "8aabeb2fab97a794d9466c147f9cd6e4e12c5fda6e00fb16f34a992e03672b60",
-    "portfolioInputDigest": "6995725b163c1867fe27b23ea3795b928b83530a1f3d4e6cb2e66447c220b15c"
+    "consumerProjectionDigest": "85b244ec1e17d08170852a48b07d174e2c451345c2a0b5178ed3ec5cc1eb9bee",
+    "portfolioInputDigest": "b6c0a807b09bed8ac8bcaf87fbc273502348c9e6181b1883bec87f73be39b5a2"
   },
   "ordering": "skills.id asc; graph edges from/to asc",
   "summary": {
@@ -16866,6 +16866,10 @@
           "path": "scripts/test-global-host-removal.js",
           "role": "current"
         },
+        {
+          "path": "scripts/test-global-install-smoke.js",
+          "role": "current"
+        },
         {
           "path": "scripts/test-global-runtime-continuity.js",
           "role": "current"
@@ -17030,6 +17034,7 @@
         "scripts/test-external-review-claim-verification.js",
         "scripts/test-git-execution-context.js",
         "scripts/test-global-host-removal.js",
+        "scripts/test-global-install-smoke.js",
         "scripts/test-global-runtime-continuity.js",
         "scripts/test-hooks-runtime.js",
         "scripts/test-host-adapters.js",
@@ -17131,6 +17136,7 @@
           "scripts/test-external-review-claim-verification.js",
           "scripts/test-git-execution-context.js",
           "scripts/test-global-host-removal.js",
+          "scripts/test-global-install-smoke.js",
           "scripts/test-global-runtime-continuity.js",
           "scripts/test-hooks-runtime.js",
           "scripts/test-host-adapters.js",

scripts/test-global-install-smoke.js

@@ -970,17 +970,17 @@ assert.strictEqual(
 )
 
 assert.strictEqual(fs.existsSync(path.join(installedPackageRoot, 'package.json')), true, 'installed package root missing')
-if (smokeOptions.tarball) {
-  const installedAdmissionSuite = runCommand(process.execPath, [
-    path.join(installedPackageRoot, 'scripts', 'test-task-admission-authority.js')
-  ], {
-    cwd: workspace,
-    env: installedEnv,
-    timeout: 300000
-  })
-  assert.match(installedAdmissionSuite.stdout, /"passed":true/)
-  installedAdmissionNegativesPassed = true
-}
+// Both locally packed and externally qualified artifacts must exercise the
+// installed producer and its negative cases before reporting installation pass.
+const installedAdmissionSuite = runCommand(process.execPath, [
+  path.join(installedPackageRoot, 'scripts', 'test-task-admission-authority.js')
+], {
+  cwd: workspace,
+  env: installedEnv,
+  timeout: 300000
+})
+assert.match(installedAdmissionSuite.stdout, /"passed":true/)
+installedAdmissionNegativesPassed = true
 
 if (smokeOptions.realCodex) {
   for (const relative of [

scripts/test-task-admission-authority.js

@@ -5,6 +5,7 @@ const crypto = require('crypto')
 const fs = require('fs')
 const os = require('os')
 const path = require('path')
+const { resolveControlAsset } = require('./lib/control-content-delivery')
 const {
   buildActualInstructionEnvelope,
   buildWorkItemSet,
@@ -725,7 +726,9 @@ try {
   const templateRoot = path.join(TEMP_ROOT, 'template-runtime')
   const templatePath = path.join(templateRoot, 'content', 'prompts', 'requirement-session.prompt.md')
   fs.mkdirSync(path.dirname(templatePath), { recursive: true })
-  const templateSource = fs.readFileSync(path.join(__dirname, '..', 'content', 'prompts', 'requirement-session.prompt.md'), 'utf8')
+  const templateSource = fs.readFileSync(resolveControlAsset(
+    path.resolve(__dirname, '..'), 'prompts/requirement-session.prompt.md'
+  ), 'utf8')
   const templateDelta = `模板变更传播 ${crypto.randomUUID()}`
   fs.writeFileSync(templatePath, templateSource.replace('{{cpTable}}', `{{cpTable}}\n\n${templateDelta}`))
   const templateInput = admissionInput(setupRoot('template-production'), 'template-production')