docs(openspec): add architecture audit and ten change proposals

Publish shared 66-file documentation and specification pack.
Record restored coverage tests and current manifest snapshot separately
from the original audit baseline. Keep all 84 implementation tasks pending.
No product Java code, existing tests, POM, or workflow changes.

Author: loong10k

README-OPENCLI-SPEC-PACK.md

@@ -0,0 +1,60 @@
+# OpenCLI Java SDK 复核文档与 OpenSpec 提案包
+
+日期：2026-09-21。交付类型：**文档 / 规范草案，不含 Java 实现**。
+
+## 阅读入口
+
+1. [三分支复核报告](docs/architecture/opencli-java-sdk-reverification.md)：已确认问题、上一轮纠正、证据边界。
+2. [目标架构](docs/architecture/opencli-java-sdk-target-architecture.md)：现有调用链、演进边界、资源/错误/远程模型。
+3. [能力矩阵](docs/architecture/opencli-java-sdk-capability-matrix.md)：已有、待优化、暂缓项。
+4. [OpenSpec 路线图](openspec/README.md)：十个 Change、依赖、评审与实施顺序。
+5. [证据索引](docs/architecture/opencli-java-sdk-evidence.md) 与 [锁定信息](docs/architecture/opencli-java-sdk-sources.lock.json)。
+6. [文档验证报告](docs/architecture/opencli-java-sdk-validation.md)：实际执行的格式检查与未执行项。
+
+## 保存与状态
+
+本包最初在对话工作容器生成；原始生成阶段未提交/推送。当前提交版在用户授权后，通过 GitHub 连接器追加到三个 feature 分支，不改动既有 Java/POM/CI，不改 main，也不表示用户 Mac 工作区已同步。提交前发现的分支前移、coverage 补回和快照计数变化，见 [提交前复核补记](docs/architecture/opencli-java-sdk-publish-check.md)。具体提交与推送结果以远端分支和提交回读为准。
+
+所有 Change 的状态为 DRAFT / REVIEW_REQUIRED。`openspec/specs/` 暂不放“已生效规格”；待变更评审、实现、验收后再由 OpenSpec archive 流程合入。当前使用 `ADDED Requirements` 表示首次将行为写入正式规格，不代表所有底层能力都是首次实现。
+
+## 安全应用到仓库
+
+完整 ZIP 保持仓库相对目录结构；配套 patch 是仅新增文档/规范的补丁。先在目标 checkout 确认分支、已有改动和同名文件，再检查补丁。以下命令是用户本地待执行步骤，不是本轮执行记录：
+
+```bash
+# 在 opencli-java-sdk 目标 checkout 内执行；PATCH 指向本次下载的 .patch。
+git status --short --branch
+git apply --stat "$PATCH"
+git apply --check "$PATCH"
+# 上一步通过并确认路径内容后再应用。
+git apply "$PATCH"
+git diff --check
+```
+
+如果目标已有 `openspec/config.yaml` 或同名文档导致冲突，不要覆盖或强制应用；将现有规则与本包上下文人工合并。新增未跟踪文件不会自动出现在普通 `git diff` 中，应结合 `git status` 检查；提交、推送、创建 PR 不由本包自动执行。
+
+## 官方 OpenSpec 复验
+
+在具备可用 OpenSpec CLI 的环境、目标仓库根目录执行：
+
+```bash
+openspec --version
+openspec list --json
+openspec validate --all --strict --no-interactive
+# 或逐个验证；以实际安装版本的 --help 为准。
+openspec validate harden-opencli-argv-contract --strict --no-interactive
+```
+
+保留工具版本、命令、退出码与完整报告。本轮安装失败，**官方 strict 校验未执行**；本包通过的自定义结构检查不能替代它，也不能替代需求评审或代码测试。
+
+## CodeGraph 后续证据
+
+在三个独立 checkout/worktree 中固定本包记录的 HEAD，确认 CodeGraph 安装后分别建立索引，查询 Executor、SubprocessExecutionSupport、ArgvToCollectParser、ReverseAgentClient 的调用者/被调用者和影响范围。记录工具版本、ref、索引结果和查询输出。无需先注册 MCP 才能使用 CLI。本轮没有产生 CodeGraph 结果，不能声称该步骤完成。
+
+## 实现前门禁
+
+先评审规范，确认兼容迁移和默认资源预算；再按 Change 任务做 TDD。不得因为任务文件已经生成就勾选实现完成。不得通过批量执行真实站点 publish/delete/send 来刷覆盖数量。
+
+## 交付校验
+
+`SHA256SUMS`包含其余全部文件的SHA-256。配套ZIP和patch的大小、hash与临时目录应用校验见独立交付收据。包内只有提案文档、规格、合成测试向量和文档检查器，没有产品实现。

SHA256SUMS

@@ -0,0 +1,65 @@
+96ed85773f23d25cd7f6100e593d8757d36c29072dc5f7961176e078d17876b0  README-OPENCLI-SPEC-PACK.md
+bdfe3b6f20468ed8188056dec53dcd63553a152d4562873a8a5f238e0b14cdb9  docs/architecture/opencli-java-sdk-acceptance-matrix.csv
+9d37ad40be762b0b4921366c37ca7ed293fe6e8da682043cf66dde49496d6ccc  docs/architecture/opencli-java-sdk-capability-matrix.md
+3357af0819ba3e58d8caaaad5a8a448805ccaff9708b8e35a2ad5b8bbaa2d274  docs/architecture/opencli-java-sdk-contract-vectors.json
+75d2f8701b11a013923842d7324bb3f26735bc7bafb1d0824a9f87eed6d4f98d  docs/architecture/opencli-java-sdk-evidence.md
+13f32b77a9feca9dfb95fcce350345379bb6e31197aa3a0e27e0955bff325174  docs/architecture/opencli-java-sdk-publish-check.md
+693c9e6a4b93e1f17c2c9032c26bfeaa19ba91d379d7fd892714b12a03d64cbc  docs/architecture/opencli-java-sdk-reverification.md
+31f120525bcec4d840183603415820f86464f71d557a156a8b1341cab29a12ce  docs/architecture/opencli-java-sdk-sources.lock.json
+29c31dd7478c39dd6af4defb459ac2c6d72d1fd3eeb913db58e0902ec8205483  docs/architecture/opencli-java-sdk-target-architecture.md
+5f1e10928f80e7e8263a0bf11f488859d49878a4c9e03eacec3867b3d8bd738c  docs/architecture/opencli-java-sdk-validation.json
+2bd580254a98d83ba5fbcb4415fcea2a63e13afff96d820dc1f167569f490ca7  docs/architecture/opencli-java-sdk-validation.md
+041978791909e48cf2f1b59babb79d2fda609d2c9c5a8982e089140e4741834c  docs/architecture/tools/validate-spec-pack.py
+08df8aa0da22e50e868fced669e34dc6678276c55aa83581a78be8e319ac5ddf  openspec/README.md
+1d243485a0c9c520dd75a3d91719fcbc07d3586ad42716b2378d66168971eb70  openspec/change-index.json
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/add-opencli-browser-result-models/.openspec.yaml
+adac6fb7cd71db001bdffbc6bfe2e57b64b45b14da8d11b9888bbee73360449d  openspec/changes/add-opencli-browser-result-models/design.md
+2d63b0bb3f50754ede4347ba785799109077f08f99dad13383e9f776d34df543  openspec/changes/add-opencli-browser-result-models/proposal.md
+d08be74ac191dd3c756f34e3defdd3f0f2cca23dd0f93ec4d9308cebabd67e4c  openspec/changes/add-opencli-browser-result-models/specs/opencli-browser-result-models/spec.md
+19337e6e5591ae08f5724432f634a6a95552a15da8692eaaa3acb72e0d0b1529  openspec/changes/add-opencli-browser-result-models/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/add-opencli-capability-discovery/.openspec.yaml
+fe9313ce95894ebc24ea2036adc1b9a73270ffabb36d80208f3e8052644c7962  openspec/changes/add-opencli-capability-discovery/design.md
+fde5062f7a96f964a690f939cd5bb85c855f7b6e1f4e7f2ee1e11b83e342fd96  openspec/changes/add-opencli-capability-discovery/proposal.md
+9105b2db1abf2d1968f5a2a967afa02105cd7d403e7425127c20a920e57ecf93  openspec/changes/add-opencli-capability-discovery/specs/opencli-capability-discovery/spec.md
+12fe7961bde90201f55ccdce3eda4beccb671fad0303fb8b9a6ab7e0aafeb125  openspec/changes/add-opencli-capability-discovery/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/add-opencli-context-and-diagnostics/.openspec.yaml
+c0c3ac30a3b6450fe4e065113b77e74d74f531886fc8df5e157fc52f2cfc2b6d  openspec/changes/add-opencli-context-and-diagnostics/design.md
+9cca72d936e94f8fe3ecf344e0fa7bcb51a687b42a5e03a219fe151cae34b912  openspec/changes/add-opencli-context-and-diagnostics/proposal.md
+ce15f31efa0537142f0eb5c735878db0d9ce4b703cccd63112be6d223c6aeac2  openspec/changes/add-opencli-context-and-diagnostics/specs/opencli-context-diagnostics/spec.md
+497b17caa1b1d393eb086186f3879838b6cdfd592eca055ee3a506157dccb70d  openspec/changes/add-opencli-context-and-diagnostics/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/enforce-opencli-branch-contract-parity/.openspec.yaml
+d3583774d90312a84116ee8165d760fc902d3ae423bb12ab6d2220a89e267011  openspec/changes/enforce-opencli-branch-contract-parity/design.md
+9faf838a514e6e95f14003dfad605f9b752d4cfb528d13140a5b982e5350462f  openspec/changes/enforce-opencli-branch-contract-parity/proposal.md
+081b4a57a9ab49cb0294d68ee61d5177a83ab713a3ed8b39278ef1a56954868e  openspec/changes/enforce-opencli-branch-contract-parity/specs/opencli-branch-contract-parity/spec.md
+0a2b061b76747517fc54b998f3b88b5dfd591c2d388c9ee56628223e8cb264d0  openspec/changes/enforce-opencli-branch-contract-parity/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/harden-opencli-argv-contract/.openspec.yaml
+3f798c60568f99521831fb9120a0310217f1134d91d4ddf11abcbd83206750c8  openspec/changes/harden-opencli-argv-contract/design.md
+9c857b0ef9cc0602f5b28cd6e6cd3699b84d9fd8b8f8ffe0b76c761c43fbe501  openspec/changes/harden-opencli-argv-contract/proposal.md
+b2ff14c6fb92e5502120507cadc69348fc95f58af046aa9c8e2f4e459ed47b78  openspec/changes/harden-opencli-argv-contract/specs/opencli-argv-contract/spec.md
+9fcb7a1e4ed00a825b1b3bda837c9cbb13c65bbb51befd5060a2b2bddf43c748  openspec/changes/harden-opencli-argv-contract/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/harden-opencli-diagnostics-privacy/.openspec.yaml
+066cd383e1824e51ae33db691ea9afd7d5573889d263d43a3f4c95bf182546e7  openspec/changes/harden-opencli-diagnostics-privacy/design.md
+1eaf6065022a27abd29177b634f6be789e0a37cd55dc95c7550697abf1937103  openspec/changes/harden-opencli-diagnostics-privacy/proposal.md
+3cb6beba0588a2e0bb134b9b1e2fc451d4c1f374e1c2175526341e67407bc080  openspec/changes/harden-opencli-diagnostics-privacy/specs/opencli-diagnostics-privacy/spec.md
+fcc4baa26c372f6a1a9303187d0a185f2a443ef5586b26af9cbe5c950dcfe38e  openspec/changes/harden-opencli-diagnostics-privacy/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/harden-opencli-process-lifecycle/.openspec.yaml
+f7a2613dd5bce5801d79eef1f51b4253c8d2958ed8154e71af837a80e8c01ea8  openspec/changes/harden-opencli-process-lifecycle/design.md
+1280a025a33a850a6cde6d6c94f315ff7cc7a2a6dd24d703ab8edb952dd39d81  openspec/changes/harden-opencli-process-lifecycle/proposal.md
+27590502844a0a793f8b591ee5c1669be3619526cb551167d3b01edc64127771  openspec/changes/harden-opencli-process-lifecycle/specs/opencli-process-lifecycle/spec.md
+99727e71b8fea929f1150a898355956dc89db6a63469a14169d21dd90771675d  openspec/changes/harden-opencli-process-lifecycle/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/harden-opencli-remote-collect/.openspec.yaml
+76a967167edc3bef50ac843255453fe4de90fa0facfe03318b95a52c7256d4c1  openspec/changes/harden-opencli-remote-collect/design.md
+336982acddf4542bbb7a94f4acd924acf906abea2b91cad36fd4b78483cea867  openspec/changes/harden-opencli-remote-collect/proposal.md
+431cc302190feda4bc312745e951ceed40fb371941e13ffb601914d12c86a3aa  openspec/changes/harden-opencli-remote-collect/specs/opencli-remote-collect/spec.md
+54e30fcc3dc2aae478cd36555b309beb07602393b4deb173f83e03e345799c34  openspec/changes/harden-opencli-remote-collect/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/harden-opencli-reverse-agent/.openspec.yaml
+9ccd9739c5b195acf92e87c2568055c493e20965f9f8aebfe5e3cc2137510e37  openspec/changes/harden-opencli-reverse-agent/design.md
+b1deab0fc8104d52f0c6827cc827ba7bb166f0fd11bd24f80c30cf5283a13f88  openspec/changes/harden-opencli-reverse-agent/proposal.md
+99a99ca92041c625c530c2b94a481ee248e49ebd3c0ad0840b79f6997db35898  openspec/changes/harden-opencli-reverse-agent/specs/opencli-reverse-agent/spec.md
+388ba4e6794ba301e847c901ac59cdb8d316980edf1f363adcf85bdc2bf894aa  openspec/changes/harden-opencli-reverse-agent/tasks.md
+d7ebc9ea6ef2ecb020b4cbbfd6104bdf10118b6cda5eaa8a27e4b861439af5ff  openspec/changes/preserve-opencli-error-envelope/.openspec.yaml
+b999085ea0a3fa1764c4d81506527313e1890d102cfe98efbbfc3cfefca3e99c  openspec/changes/preserve-opencli-error-envelope/design.md
+083b040e0ef937cdfd208a0e8a4562df6b0c7d2006ee9dfb0962b7a190c987af  openspec/changes/preserve-opencli-error-envelope/proposal.md
+7c3c6a6a844c9c274bb449a01446b327a03c2912f4fdf3b23634c1f11f408d39  openspec/changes/preserve-opencli-error-envelope/specs/opencli-error-envelope/spec.md
+76f226257e514a5b58f25639b65580717f028dfe5cbdf41edc925cb7f7cef5ab  openspec/changes/preserve-opencli-error-envelope/tasks.md
+3113b6f8e7d088943ce5987fe90dffbfa3466d00fc03322d633c36f7060439ac  openspec/config.yaml