@agile-team/wl-skills-gate 0.11.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (97) hide show
  1. package/CHANGELOG.md +12 -0
  2. package/README.md +5 -4
  3. package/assets/java-reference.lock.json +1485 -0
  4. package/assets/quality-preset-0.11.json +201 -0
  5. package/bin/wl-quality-setup.js +4 -4
  6. package/bin/wl-skills-gate.js +14 -0
  7. package/docs/01-quick-start.md +1 -1
  8. package/docs/02-config.md +1 -1
  9. package/docs/05-adapters.md +25 -3
  10. package/docs/06-gitlab.md +1 -1
  11. package/docs/13-quality-cost-and-isolation.md +1 -1
  12. package/docs/16-project-ci-integration.md +1 -1
  13. package/docs/17-onboarding.md +15 -1
  14. package/docs/README.md +2 -2
  15. package/fixtures/cases/05-waived/expected.json +10 -1
  16. package/fixtures/cases/07-baseline-pass/expected.json +10 -1
  17. package/fixtures/cases/08-baseline-new/expected.json +9 -1
  18. package/lib/adapters/eslint.js +2 -1
  19. package/lib/adapters/frontend.js +647 -0
  20. package/lib/adapters/java-scan.js +252 -0
  21. package/lib/adapters/java-xml.js +5 -1
  22. package/lib/adapters/project.js +153 -0
  23. package/lib/branch-setup.js +274 -0
  24. package/lib/ci-source.js +1 -1
  25. package/lib/collect.js +3 -2
  26. package/lib/config.js +14 -3
  27. package/lib/control-service.js +18 -9
  28. package/lib/delivery-report.js +167 -0
  29. package/lib/deployment-delivery.js +8 -1
  30. package/lib/doctor.js +8 -1
  31. package/lib/evidence.js +15 -1
  32. package/lib/finding-input.js +6 -0
  33. package/lib/fix.js +3 -3
  34. package/lib/frontend-config.js +96 -0
  35. package/lib/frontend-worker.js +12 -0
  36. package/lib/gate.js +1 -1
  37. package/lib/governance-notifications.js +24 -1
  38. package/lib/governance.js +19 -0
  39. package/lib/java-distribution.js +53 -0
  40. package/lib/onboard-complete.js +9 -0
  41. package/lib/onboard-config.js +787 -207
  42. package/lib/onboard-environment.js +2 -1
  43. package/lib/release-review.js +17 -4
  44. package/lib/release-set.js +2 -0
  45. package/lib/report-catalog.js +52 -0
  46. package/lib/report-details.js +74 -0
  47. package/lib/report-input.js +1 -1
  48. package/lib/report.js +20 -6
  49. package/lib/review-ci.js +3 -1
  50. package/lib/review-collectors.js +44 -0
  51. package/lib/review-facts.js +2 -1
  52. package/lib/review-publish.js +12 -3
  53. package/lib/review-responsibility.js +16 -0
  54. package/lib/risk.js +5 -1
  55. package/lib/rules/organization-secrets.js +21 -0
  56. package/lib/run-trace.js +53 -0
  57. package/lib/run.js +20 -3
  58. package/lib/setup-central.js +17 -10
  59. package/lib/setup-modes.js +10 -0
  60. package/lib/setup.js +2 -1
  61. package/npm-shrinkwrap.json +3097 -0
  62. package/package.json +21 -3
  63. package/scripts/java-distribution.py +116 -0
  64. package/scripts/lib-tests/branch-setup.test.mjs +177 -0
  65. package/scripts/lib-tests/collect.test.mjs +10 -5
  66. package/scripts/lib-tests/control-review.test.mjs +14 -0
  67. package/scripts/lib-tests/deployment.test.mjs +15 -0
  68. package/scripts/lib-tests/inspect.test.mjs +4 -4
  69. package/scripts/lib-tests/multiple-branch-review.test.mjs +174 -0
  70. package/scripts/lib-tests/native-coverage.test.mjs +211 -0
  71. package/scripts/lib-tests/onboard-complete.test.mjs +7 -1
  72. package/scripts/lib-tests/prevention-project-chain.test.mjs +2 -0
  73. package/scripts/lib-tests/project-native-v12.test.mjs +135 -0
  74. package/scripts/lib-tests/report-notification-v12.test.mjs +160 -0
  75. package/scripts/lib-tests/review-publish.test.mjs +4 -0
  76. package/scripts/lib-tests/shared-adapters.test.mjs +1 -1
  77. package/scripts/test-support/control-review-fixture.mjs +7 -1
  78. package/scripts/test-support/review-collect-fixture.mjs +7 -7
  79. package/templates/launchers/setup.cmd +1 -1
  80. package/templates/launchers/setup.command +1 -1
  81. package/templates/launchers/setup.sh +1 -1
  82. package/templates/onboarding/automation/project-actions.mjs +1 -0
  83. package/templates/onboarding/automation/workspace-setup.mjs +1 -1
  84. package/templates/onboarding/backend/policy.yml +15 -19
  85. package/templates/onboarding/backend/quality-tools.package.json +2 -2
  86. package/templates/onboarding/frontend/policy.yml +36 -1
  87. package/templates/platform/README.md +1 -1
  88. package/templates/platform/automation-config.json +4 -2
  89. package/templates/platform/branch-setup.json +13 -0
  90. package/templates/platform/control-config.json +2 -1
  91. package/templates/platform/governance-config.json +148 -4
  92. package/templates/platform/release-review-trust.json +10 -4
  93. package/templates/platform/review-collector.backend.json +2 -1
  94. package/templates/platform/review-collector.frontend.json +2 -1
  95. package/templates/platform/review-publish-config.json +10 -4
  96. package/templates/quality/java-reference.plan.json +7 -0
  97. package/templates/quality/rules.lock.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,3 +1,15 @@
1
+ # 变更记录
2
+
3
+ ## [0.12.0] — 2026-10-19
4
+
5
+ - 完整接入固定code-scan-kit 1.1.0六引擎，提供离线分发打包、自动缓存与逐文件完整性核验；保留BD组织规则、原生HTML/CSV和统一指标。
6
+ - 前端增加类型感知、安全/凭据、重复代码、依赖图、漏洞与许可证；固定专业分析器，隔离超时，规则抑制注释不能绕过，复用业务工具版本。
7
+ - 既有生产前端业务脚本和Node必测自动登记；本轮真实JUnit、命名用例、必测计划及脚本摘要校验；批准升级0.11预设并保留自定义检查。
8
+ - blocker/error不接受历史基线或豁免；批准机械修复仍可执行并复扫。增强目录文件详情、行区间/筛选、提交追溯、阶段标识和不可覆盖归档。
9
+ - 飞书阻断卡片支持技术经理与执行人真实ID映射和去重，缺强制映射停止投递并由故障渠道处理；人员/群/SSO/CI现场验收仍需真实环境。
10
+ - 中央认证、独立签发和构建前重验共同执行技术经理确认策略；经理为执行人仍需非作者复核。UAT独立smoke回流后自动生成固定版本HTML/JSON客户Review报告，恢复补报与防篡改有原件约束。
11
+ - Node范围更新为22.13+或24+。新增依赖固定版本；新增同项目多个批准采集器及六分支接线助手，目标scope隔离、发布按scope选报告；动态MR采集与现场权限/送达仍独立验收。
12
+
1
13
  ## [0.11.0] — 2026-10-16
2
14
 
3
15
  - 修复早期warning摘要未被常驻任务消费、首次来源失联/回流异常静默及旧环境复验可复用的断链，增加可靠执行异常与恢复提醒。
package/README.md CHANGED
@@ -9,8 +9,7 @@
9
9
 
10
10
  <p align="center">
11
11
  <a href="https://www.npmjs.com/package/@agile-team/wl-skills-gate"><img src="https://img.shields.io/npm/v/@agile-team/wl-skills-gate?color=087A7D&label=npm" alt="npm version" /></a>
12
- <img src="https://img.shields.io/badge/Node.js-%E2%89%A522.12-172634" alt="Node.js 22.12 or later" />
13
- <img src="https://img.shields.io/badge/runtime_dependencies-0-087A7D" alt="Zero runtime dependencies" />
12
+ <img src="https://img.shields.io/badge/Node.js-22.13%2B_or_24%2B-172634" alt="Node.js 22.13+ / 24+" />
14
13
  </p>
15
14
 
16
15
  <p align="center">
@@ -23,6 +22,7 @@ Gate 是质量执行与裁决层，复用项目已有检查器和适用的 WL
23
22
 
24
23
  | 场景 | Gate 提供什么 | 能看到什么 |
25
24
  | --- | --- | --- |
25
+ | 完整检测 | Java参考六引擎＋BD组织规则；前端类型语义、安全、密钥、重复、架构和依赖 | 原件、覆盖范围、指标与具体位置 |
26
26
  | 日常提交 | Hook 自动运行分档检查 | 问题位置、规则、修复建议与阻断原因 |
27
27
  | 问题整改 | 预览方案 → 本人确认 → 白名单脚本 → 复扫 | 修前修后变化、剩余问题与回归项 |
28
28
  | Code Review | 汇总九维证据，生成待确认草稿 | 非作者逐维确认后的正式 Review |
@@ -33,12 +33,13 @@ Gate 是质量执行与裁决层，复用项目已有检查器和适用的 WL
33
33
 
34
34
  ## 快速接入
35
35
 
36
- 技术经理拿到批准的 Gate 完整包后，打开 `templates/launchers/setup.command`（macOS）、`setup.cmd`（Windows）或 `setup.sh`（Linux），按菜单选择任务。先提供 Node.js ≥22.12、项目固定的包管理器及原有构建工具。
36
+ 技术经理拿到批准的 Gate 完整包后，打开 `templates/launchers/setup.command`（macOS）、`setup.cmd`（Windows）或 `setup.sh`（Linux），按菜单选择任务。先提供 Node.js 22.13+ 或 24+、项目固定的包管理器及原有构建工具。
37
37
 
38
38
  | 任务 | 人只需做什么 | 脚本完成什么 |
39
39
  | --- | --- | --- |
40
40
  | 首次接入项目 | 选择 Git 项目根、批准安装源，确认各阶段差异 | 识别范围、安装固定依赖、同步规则、Hook、POM/锁、首扫及提交说明正反验证 |
41
41
  | 新成员初始化 | 选择已接项目，在安装与激活计划上确认 | 按仓库已提交清单恢复本机环境，保留项目策略，再验真实 Hook |
42
+ | 六分支接线 | 选择批准基础配置，确认完整差异 | 自动生成目标分支独立scope与Review接线；保留验证来源，权限与作业仍由运维配置 |
42
43
  | 运维接线 | 选择批准配置目录，预检后选择启动 | 核对配置/身份/凭据存在性/旧状态，启动中央采集与操作入口；消息默认预览 |
43
44
  | 组合发布输入 | 选择批准配置，确认组件与输出 | 从真实采集原件生成输入，核验来源、SHA、制品与兼容证据 |
44
45
 
@@ -47,7 +48,7 @@ Gate 是质量执行与裁决层，复用项目已有检查器和适用的 WL
47
48
  ```bash
48
49
  npx --yes --ignore-scripts --registry https://registry.npmjs.org/ \
49
50
  --@agile-team:registry=https://registry.npmjs.org/ \
50
- @agile-team/wl-skills-gate@0.11.0 setup project
51
+ @agile-team/wl-skills-gate@0.12.0 setup project
51
52
  ```
52
53
 
53
54
  | 项目 | 依赖装在哪里 | 业务构建 |