cs-audit

csAudit :: AuditRequest -> AuditOutcome
csAudit req | attentionMissing req = NeedsHuman "route to cs-onboard"
            | otherwise = either Blocked (\s -> selectAuditStep s req) (applyAuditResume req.resumeInput (restoreAuditState req.repoFacts))

data AuditRequest = AuditRequest
  { scopeHint  : Maybe ScopeHint    -- 关键词 / 模块目录 / 一段话；缺则先 Phase 1 收敛
  , dimensions : [Dimension]        -- 用户圈定；空则全扫 5 维
  , selectedFinding : Maybe Path    -- 用户从已完成 audit 中选中的 finding
  , resumeInput : Maybe AuditResume
  , repoFacts  : RepoFacts          -- .codestable/audits/ + adrs/，优先于聊天历史
  , attention  : Maybe Attention    -- .codestable/attention.md；缺则 route to cs-onboard
  }

data ScopeHint = Keyword Text | ModulePath Path | FreeText Text
data Dimension = Bug | Security | Performance | Maintainability | ArchDrift

data AuditState = AuditState        -- 从 .codestable/audits/YYYY-MM-DD-{slug}/ 恢复
  { auditDir       : Maybe Path
  , scope          : Maybe ScopeHint
  , dimensions     : [Dimension]
  , scopeConfirmed : Bool           -- Phase 1 已与用户确认范围（read-only，不改代码）
  , hasIndex       : Bool           -- index.md 是否已写（先 index 后 finding）
  , findingCount   : Int            -- 已产出 finding 数（每维 ≤ 5）
  , adrsPresent    : Bool           -- .codestable/requirements/adrs/ 是否存在（arch-drift 对照源）
  , pendingCheckpoint : Maybe CheckpointReason
  }

data AuditOutcome
  = Scanning AuditState             -- 只读扫描 + 落 index/finding，不产生代码改动
  | RoutedTo SkillName              -- 已选 finding：按建议动作同轮加载 issue/refactor
  | HumanCheckpoint CheckpointReason
  | Completed AuditSummary          -- index 交叉表 + 每条 finding 齐备（含零发现结论）
  | NeedsHuman Reason
  | Blocked Reason

data CheckpointReason
  = ConfirmScope        -- Phase 1 收敛后请用户确认扫描范围与维度
  | WholeRepoRefused    -- 用户要求全仓库盲扫：推回去，先收敛到最常改 / 最近出问题的区域
  | ArchDriftNoAdr      -- 需判架构偏离但 adrs/ 缺失：不得凭记忆，请用户补 ADR 或缩范围
data AuditResume
  = ConfirmAuditScope ScopeHint [Dimension] | NarrowAuditScope ScopeHint [Dimension]
  | ProvideArchitectureAdr Path | ContinueWithoutArchDrift [Dimension]

resumeReason :: AuditResume -> CheckpointReason
resumeReason (ConfirmAuditScope _ _)         = ConfirmScope
resumeReason (NarrowAuditScope _ _)          = WholeRepoRefused
resumeReason (ProvideArchitectureAdr _)      = ArchDriftNoAdr
resumeReason (ContinueWithoutArchDrift _)    = ArchDriftNoAdr

validAuditResume :: AuditResume -> Bool
validAuditResume (ConfirmAuditScope scope dims)      = executableScope scope && validDimensions dims
validAuditResume (NarrowAuditScope scope dims)       = executableScope scope && not (wholeRepoScope scope) && validDimensions dims
validAuditResume (ProvideArchitectureAdr path)       = validAdrPath path
validAuditResume (ContinueWithoutArchDrift dims)     = ArchDrift `notElem` dims && validDimensions dims

applyAuditResume :: Maybe AuditResume -> AuditState -> Either Reason AuditState
applyAuditResume Nothing s = Right s
applyAuditResume (Just resume) s
  | s.pendingCheckpoint == Just (resumeReason resume) && validAuditResume resume = Right (persistAuditResume resume s)
  | otherwise = Left InvalidAuditResume

selectAuditStep :: AuditState -> AuditRequest -> AuditOutcome
selectAuditStep(s, req)
  | attentionMissing req                               -> NeedsHuman "route to cs-onboard"
  | Just reason <- s.pendingCheckpoint                 -> HumanCheckpoint reason
  | hasSelectedFinding(req)                            -> RoutedTo (recommendedAction req.selectedFinding)
  | wholeRepoBlindScan(s)                              -> HumanCheckpoint WholeRepoRefused
  | not s.scopeConfirmed                                -> HumanCheckpoint ConfirmScope
  | archDriftRequested(s) && not s.adrsPresent          -> HumanCheckpoint ArchDriftNoAdr
  | s.scopeConfirmed && not scanExitCriteriaMet(s)      -> Scanning (nextDimensionScan s)
  | scanExitCriteriaMet(s)                              -> Completed (summary s)  -- 含零发现结论

.codestable/audits/{YYYY-MM-DD}-{slug}/
├── index.md           # 速览：范围、总评、发现清单交叉矩阵
├── finding-01.md
├── finding-02.md
└── ...