朱子纯 / erp-workflow-plugin

Replaces the phase-level read-only behavior-gate with a per-FE acceptance dimension: each FE is approved only when the code-reviewer approves AND runtime behavior verification is green. Behavior defects (dead control / sentinel text mismatch) become fixable must-fix that drive verify->fix->re-verify, not halts.

- reviewWithFixLoop (frontend only, via if(fe)): at the approve gate, behaviorSubGate boots this FE's full stack + seeds sentinels, enumerates this FE's routes, two-tier asserts. Hard issues with a locator -> fixPrompt -> functional reverify -> next behaviorRound; soft text (i18n/literal/semantic) -> adjudicate(continue); behaviorRound bounded by BEHAVIOR_FE_MAX=3, env race by BEHAVIOR_ATTEMPT_MAX=2. Backend featureLoop branch unchanged.

- New runFrontendSkeleton stage (before featureLoop(frontend)): App shell + full lazy router + FeStub placeholders + shared nav, so the app is buildable at every mid-phase point; tdd swaps FeStub->real component per FE. Idempotent via fe-skeleton-done tag.

- BEHAVIOR_GATE_SCHEMA gains build-failed envError kind (sibling-FE-unimpl short-circuit, not a bug) + locator-not-resolvable coverage reason; deriveSpec emits a per-FE route-scope section, reviewer validates it.

- Removed phase-level runBehaviorGate + 'Behavior' phase; kept phase-level testGate (regression). REVIEW_HARD_ROUNDS 8->10.

- Safety: test-DB naming guard pushed into scripts-setup-test-db.mjs template (fail-closed unless name contains test/_dev/_local or ALLOW_NONTEST_DROP=1) + 3 tests.

- agentType stays erp-workflow:code-reviewer. v1 design doc marked SUPERSEDED; v2 design at docs/design/2026-06-02-frontend-behavior-in-review-loop.md.

Verified: wrapped syntax check SYNTAX_OK, 87/87 lib tests pass, no orphan refs, no time/random builtins, top-level return intact. Not yet run end-to-end against a real ERP project.

validate-ddl now recognizes the db-init A.1 DDL form (CREATE TABLE →
CREATE INDEX → ALTER TABLE ADD FK), so schemas with out-of-body indexes/
FKs no longer report false-positive index/FK diffs. Adds a second parse
pass (mergeStandaloneIndexes / mergeStandaloneForeignKeys), string-literal
blanking so DEFAULT/COMMENT text isn't mistaken for real DDL, backtick
non-ASCII identifier support across all matchers (H3), and shared index-
column normalization (strip backtick / prefix-length / ASC|DESC) on both
docs and DDL sides. Chinese 主键/唯一 index labels map to PRIMARY/UNIQUE.

apply-ddl resolves mysql2 from the target project dir (not the plugin),
rejects 【人工填写】 credential placeholders before connecting, and exits 2
on missing config/DDL paths. setup-test-db template validates schema as an
ASCII identifier before interpolating it into DROP/CREATE. db-init gains a
B.1 toolchain precheck (mysql2 module + mysql client) before any DROP.