新增: 批次工作落地(推进链/评估闭环/事件总线/并发/加固) + 技术债清理 + 文档整理

后端:
- 工作流推进链(D-03):advance_task/状态机/闸门走 df-nodes Node trait,conditions 条件引擎扩展
- 想法评估闭环:启发式评分+对抗评估,df-ideas/scoring + df-storage/idea_eval_repo + idea 前端打通
- 全局事件数据总线:df-ai/context+context_helpers+augmentation 跨模块解耦
- AI planner/plan_hint/intent:aichat B 路线并行多轮基础
- patch_file 加固(TD-03/04):读改写整体锁防 lost update,expected_hash 合约闭环
- 压缩超时兜底(F-15 卡死根治)
- F-09 多会话并发:LlmConcurrency per-conv + streamingGuard 前端守护 + verify 脚本
- 知识注入 DRY/skills/audit 扩展

清理:
- aichat 技术债(误报 allow/死导入/过时注释 30 项)
- URGENT.md 删除(11 项加急全解决/迁 todo)
- 文档整理(todo/待决策/待审查/ARCHITECTURE/INDEX + 总线/技术债审查新文档)

crates/df-mcp/Cargo.toml

@@ -7,6 +7,10 @@ description = "DevFlow MCP Server — 对外暴露数据层工具(JSON-RPC 2.0 o
 [dependencies]
 df-storage = { path = "../df-storage" }
 df-types = { path = "../df-types" }
+# df-nodes: advance_task 复用推进链唯一 status 写入路径(advance_task_atomic,
+# 含 is_valid_state+can_transition+同态拒绝三层校验),避免 MCP 直调底层
+# advance_status_atomic 绕过状态机(防止外部客户端非法跳态 todo→done)。
+df-nodes = { path = "../df-nodes" }
 serde.workspace = true
 serde_json.workspace = true
 tokio.workspace = true

crates/df-mcp/src/tools.rs

@@ -108,7 +108,7 @@ pub fn all_tools() -> Vec<&'static ToolSpec> {
         spec("list_tasks", "列出所有未删除任务(可按 project_id/status 过滤)", object_schema(json!({"project_id": opt_str_field("按项目过滤(可空)"), "status": opt_str_field("按状态过滤(todo/in_progress/in_review/testing/blocked/done/cancelled,可空)")}), &[]), Low, list_tasks),
         spec("create_task", "创建任务(Medium 风险,默认允许+审计日志)", object_schema(json!({"project_id": str_field("项目 ID"), "title": str_field("标题"), "description": str_field("描述"), "priority": int_field("优先级(可空,默认 0)")}), &["project_id", "title", "description"]), Medium, create_task),
         spec("update_task", "更新任务(整体替换)", object_schema(json!({"id": str_field("任务 ID"), "project_id": str_field("项目 ID"), "title": str_field("标题"), "description": str_field("描述")}), &["id", "project_id", "title", "description"]), Medium, update_task),
-        spec("advance_task", "推进任务状态(需传当前 status 与目标 status,Medium 风险+审计日志)", object_schema(json!({"id": str_field("任务 ID"), "from": str_field("当前 status"), "to": str_field("目标 status")}), &["id", "from", "to"]), Medium, advance_task),
+        spec("advance_task", "推进任务状态(传目标 status,内部读当前态+状态机校验,Medium 风险+审计日志)", object_schema(json!({"id": str_field("任务 ID"), "to": str_field("目标 status(todo/in_progress/in_review/testing/blocked/done/cancelled)")}), &["id", "to"]), Medium, advance_task),
         spec("delete_task", "软删任务(进回收站)——High 风险,默认拒绝,请在 DevFlow 应用内执行", object_schema(json!({"id": str_field("任务 ID")}), &["id"]), High, delete_task),
         // ─── 灵感 ───
         spec("list_ideas", "列出所有想法/灵感", object_schema(json!({}), &[]), Low, list_ideas),
@@ -466,27 +466,22 @@ fn advance_task(ctx: &Ctx, args: Value) -> BoxFuture<'static, CallToolResult> {
         Ok(v) => v,
         Err(r) => return Box::pin(std::future::ready(r)),
     };
-    let from = match arg_str(&args, "from") {
-        Ok(v) => v,
-        Err(r) => return Box::pin(std::future::ready(r)),
-    };
+    // 不再接收 from:推进链内部读当前态 + 三层校验(is_valid_state / can_transition /
+    // 同态拒绝),避免外部客户端直调 advance_status_atomic 绕过状态机非法跳态(todo→done)。
     let to = match arg_str(&args, "to") {
         Ok(v) => v,
         Err(r) => return Box::pin(std::future::ready(r)),
     };
-    medium_audit("advance_task", &format!("{id}: {from} -> {to}"));
+    medium_audit("advance_task", &format!("{id} -> {to}"));
     Box::pin(async move {
-        // bump_rounds:退回转换(in_review->in_progress / testing->in_review)累计 review_rounds
-        let bump = matches!(
-            (from.as_str(), to.as_str()),
-            ("in_review", "in_progress") | ("testing", "in_review")
-        );
         let repo = TaskRepo::new(&db);
-        match repo.advance_status_atomic(&id, &from, &to, bump).await {
-            Ok(Some(updated)) => json_ok(json!({ "id": id, "task": updated })),
-            Ok(None) => CallToolResult::error(format!(
-                "推进失败(状态已变或任务不存在/回收站): 期望 {from},实际可能不同"
-            )),
+        // 复用推进链唯一 status 写入路径(与 IPC advance_task 同源):
+        //   - is_valid_state + can_transition + 同态拒绝三层校验
+        //   - CAS 防 TOCTOU
+        //   - is_regression 自动判定 bump review_rounds(取代旧内联 bump 副本)
+        //   - 错误类型(NotFound/Validation/InvalidState)由 thiserror Display 串化
+        match df_nodes::task_advance_node::advance_task_atomic(&repo, &id, &to).await {
+            Ok(updated) => json_ok(json!({ "id": id, "task": updated })),
             Err(e) => err_str(e),
         }
     })
@@ -536,6 +531,7 @@ fn create_idea(ctx: &Ctx, args: Value) -> BoxFuture<'static, CallToolResult> {
             promoted_to: None,
             ai_analysis: None,
             scores: None,
+            related_ids: None,
             created_at: now.clone(),
             updated_at: now,
         };
@@ -579,6 +575,7 @@ fn update_idea(ctx: &Ctx, args: Value) -> BoxFuture<'static, CallToolResult> {
             promoted_to: existing.promoted_to,
             ai_analysis: existing.ai_analysis,
             scores: existing.scores,
+            related_ids: existing.related_ids.clone(),
             created_at: existing.created_at,
             updated_at: now,
         };