🐛 fix(vscode): 移交终审修正：schema 墓碑、顶层兜底、前置复查、分支保护、清单校验

Claude-Session: https://claude.ai/code/session_011cEyL6k351U2BzX1Qmygph

vscode/src/cc/handoffManifest.test.ts

@@ -1,6 +1,8 @@
 import { describe, expect, it } from 'vitest'
 import { handoffAttachmentName, parseHandoffManifest } from './handoffManifest'
 
+const UUID = '11111111-1111-4111-8111-111111111111'
+
 const good = {
   version: 1,
   issue: 42,
@@ -9,7 +11,7 @@ const good = {
   branch: 'feature/x',
   sessions: { implementSessionId: 'a' },
   profiles: {},
-  claude: [{ id: 'a', kind: 'implement' }],
+  claude: [{ id: UUID, kind: 'implement' }],
   codex: [],
 }
 
@@ -30,7 +32,13 @@ describe('parseHandoffManifest', () => {
     expect(() => parseHandoffManifest(JSON.stringify({ ...good, version: 2 }), 42)).toThrow(/version/)
   })
   it('claude 条目 kind 非法 → 抛错', () => {
-    expect(() => parseHandoffManifest(JSON.stringify({ ...good, claude: [{ id: 'a', kind: 'x' }] }), 42)).toThrow(/claude/)
+    expect(() => parseHandoffManifest(JSON.stringify({ ...good, claude: [{ id: UUID, kind: 'x' }] }), 42)).toThrow(/claude/)
+  })
+  it('claude 条目 id 非 UUID（路径穿越）→ 抛错', () => {
+    expect(() => parseHandoffManifest(JSON.stringify({ ...good, claude: [{ id: '../x', kind: 'implement' }] }), 42)).toThrow(/claude/)
+  })
+  it('codex 条目 id 非 UUID → 抛错', () => {
+    expect(() => parseHandoffManifest(JSON.stringify({ ...good, codex: [{ id: 'not-a-uuid', relPath: '2026/08/26/rollout-x.jsonl' }] }), 42)).toThrow(/codex/)
   })
   it('不是 JSON → 抛错', () => {
     expect(() => parseHandoffManifest('nope', 42)).toThrow()