@devcxl/opencode-cabbage 0.2.1 → 0.3.1

package/dist/flowrun/coverage.js

@@ -0,0 +1,207 @@
+import { readFile, lstat, realpath } from "node:fs/promises";
+import { resolve, isAbsolute, join, normalize } from "node:path";
+import { createHash } from "node:crypto";
+// ─── 常量 ───
+const DANGEROUS_PATH = /[\x00-\x1f\x7f]/;
+// ─── 路径安全校验 ───
+/**
+ * 检验 coverage report 路径的安全性。
+ *
+ * 规则：
+ * - 拒绝空路径
+ * - 拒绝绝对路径
+ * - 拒绝包含 null 字节等危险字符的路径
+ * - 拒绝包含 `..` 路径遍历的路径
+ *
+ * 注意：此函数仅检查路径结构，不处理 symlink。symlink 检查由 resolveCoveragePath 通过 realpath 完成。
+ */
+export function validateCoveragePath(reportPath, sandboxRoot) {
+    if (!reportPath || reportPath.trim() === "") {
+        throw new Error("Coverage report path is empty");
+    }
+    if (DANGEROUS_PATH.test(reportPath)) {
+        throw new Error(`Coverage report path contains dangerous characters: ${reportPath}`);
+    }
+    const normalized = normalize(reportPath);
+    if (isAbsolute(normalized)) {
+        throw new Error("Coverage report path must be relative, got absolute path");
+    }
+    // 拒绝路径穿越：以 .. 开头或包含 /../
+    const segments = normalized.split("/");
+    if (segments.includes("..") || segments.includes("..\\")) {
+        throw new Error(`Coverage report path escapes sandbox: ${reportPath}`);
+    }
+    // 拒绝 Windows 风格的路径穿越
+    const winSegments = normalized.split("\\");
+    if (winSegments.includes("..")) {
+        throw new Error(`Coverage report path escapes sandbox: ${reportPath}`);
+    }
+}
+/**
+ * 在 sandbox 内安全地解析 coverage report 路径。
+ *
+ * 1. 先执行 validateCoveragePath 结构检查
+ * 2. join sandbox + reportPath
+ * 3. resolve 后确保不逃逸 sandbox
+ * 4. （调用方负责）通过 realpath 检查 symlink 逃逸
+ *
+ * 返回解析后的绝对路径。
+ */
+export function resolveCoveragePath(reportPath, sandboxRoot) {
+    // 步骤 1: 结构检查
+    validateCoveragePath(reportPath, sandboxRoot);
+    // 步骤 2: 拼接并解析
+    const sandboxNorm = resolve(sandboxRoot);
+    const resolved = resolve(join(sandboxNorm, reportPath));
+    // 步骤 3: 确保未逃逸 sandbox
+    if (!resolved.startsWith(sandboxNorm + "/") && resolved !== sandboxNorm) {
+        throw new Error(`Coverage report path resolves outside sandbox: ${reportPath} → ${resolved}`);
+    }
+    return resolved;
+}
+/**
+ * 解析 istanbul-json-summary 格式的 coverage 报告。
+ *
+ * 抽取 `total.lines.pct`，执行严格的数值校验：
+ * - 拒绝缺少 `total.lines` 字段
+ * - 拒绝 `pct` 为 non-number、NaN、`"Unknown"` 等非数值
+ * - 拒绝 `pct` 超出 [0, 100] 范围
+ *
+ * 返回 ParsedCoverageData 或 null（解析失败/数据无效）。
+ */
+export async function parseCoverageReport(reportPath, metric) {
+    let raw;
+    try {
+        raw = await readFile(reportPath, "utf-8");
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return null;
+    }
+    const report = parsed;
+    // 检查 total 对象
+    const total = report.total;
+    if (!total || typeof total !== "object") {
+        return null;
+    }
+    // 检查 lines 对象
+    const lines = total.lines;
+    if (!lines || typeof lines !== "object") {
+        return null;
+    }
+    // 提取并校验 pct
+    const pct = lines.pct;
+    // 拒绝 "Unknown" 字符串值
+    if (typeof pct === "string") {
+        return null;
+    }
+    // 拒绝非 number 类型
+    if (typeof pct !== "number") {
+        return null;
+    }
+    // 拒绝 NaN
+    if (isNaN(pct)) {
+        return null;
+    }
+    // 拒绝无穷大
+    if (!isFinite(pct)) {
+        return null;
+    }
+    // 拒绝范围外数值
+    if (pct < 0 || pct > 100) {
+        return null;
+    }
+    return {
+        actual: pct,
+        metric,
+    };
+}
+/**
+ * 构建 CoverageEvidence。
+ *
+ * - actual >= threshold → pass
+ * - actual < threshold → fail
+ * - actual 为 null → pending（报告解析失败或不存在）
+ */
+export function buildCoverageEvidence(input) {
+    let status;
+    let summary;
+    if (input.actual === null) {
+        status = "pending";
+        summary = `Coverage report not available or could not be parsed for head ${input.headSha.slice(0, 7)}`;
+    }
+    else if (input.actual >= input.threshold) {
+        status = "pass";
+        summary = `Coverage ${input.actual}% meets threshold ${input.threshold}% (${input.metric}) at head ${input.headSha.slice(0, 7)}`;
+    }
+    else {
+        status = "fail";
+        summary = `Coverage ${input.actual}% below threshold ${input.threshold}% (${input.metric}) at head ${input.headSha.slice(0, 7)}`;
+    }
+    return {
+        status,
+        headSha: input.headSha,
+        actual: input.actual,
+        threshold: input.threshold,
+        metric: input.metric,
+        reportDigest: input.reportDigest,
+        summary,
+    };
+}
+/**
+ * 简单的阈值校验（纯数字比较）。
+ */
+export function checkCoverageThreshold(actual, threshold) {
+    return actual >= threshold;
+}
+/**
+ * 对 coverage report 文件计算 digest。
+ * 用于绑定 report 内容与 evidence。
+ */
+export async function computeReportDigest(reportPath) {
+    try {
+        const content = await readFile(reportPath);
+        const hash = createHash("sha256");
+        hash.update(content);
+        return hash.digest("hex");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * 检查 symlink 是否逃逸 sandbox。
+ * 在 resolveCoveragePath 之后调用，对已解析路径做 realpath 检查。
+ *
+ * 返回 safe absolute path，或抛出错误。
+ */
+export async function verifySymlinkSafe(resolvedPath, sandboxRoot) {
+    const sandboxNorm = resolve(sandboxRoot);
+    let lstatResult;
+    try {
+        lstatResult = await lstat(resolvedPath);
+    }
+    catch {
+        // 文件不存在，由调用方处理
+        return resolvedPath;
+    }
+    if (lstatResult.isSymbolicLink()) {
+        const real = await realpath(resolvedPath);
+        const realNorm = resolve(real);
+        if (!realNorm.startsWith(sandboxNorm + "/") && realNorm !== sandboxNorm) {
+            throw new Error(`Symlink escapes sandbox: ${resolvedPath} → ${realNorm}`);
+        }
+        return realNorm;
+    }
+    return resolvedPath;
+}
+//# sourceMappingURL=coverage.js.map

package/dist/flowrun/coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/flowrun/coverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,aAAa;AAEb,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAExC,iBAAiB;AAEjB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,WAAmB;IAC1E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,uDAAuD,UAAU,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAExC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,qBAAqB;IACrB,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1C,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,WAAmB;IACzE,aAAa;IACb,oBAAoB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAE7C,cAAc;IACd,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAA;IAEvD,sBAAsB;IACtB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,kDAAkD,UAAU,MAAM,QAAQ,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAsBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,MAAe;IAEf,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,MAAM,GAAG,MAA4B,CAAA;IAE3C,cAAc;IACd,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;IAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,cAAc;IACd,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IACzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,YAAY;IACZ,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IAErB,oBAAoB;IACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,gBAAgB;IAChB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS;IACT,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAED,QAAQ;IACR,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,UAAU;IACV,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,MAAM;KACP,CAAA;AACH,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,IAAI,MAAkC,CAAA;IACtC,IAAI,OAAe,CAAA;IAEnB,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,SAAS,CAAA;QAClB,OAAO,GAAG,iEAAiE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACxG,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,GAAG,MAAM,CAAA;QACf,OAAO,GAAG,YAAY,KAAK,CAAC,MAAM,qBAAqB,KAAK,CAAC,SAAS,MAAM,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAClI,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAA;QACf,OAAO,GAAG,YAAY,KAAK,CAAC,MAAM,qBAAqB,KAAK,CAAC,SAAS,MAAM,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAClI,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO;KACR,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,SAAiB;IACtE,OAAO,MAAM,IAAI,SAAS,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAoB,EACpB,WAAmB;IAEnB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAExC,IAAI,WAAW,CAAA;IACf,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;QACf,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,IAAI,WAAW,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,MAAM,QAAQ,EAAE,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC"}

package/dist/flowrun/digest.d.ts

@@ -0,0 +1,17 @@
+import type { VersionedDigest } from "./types.js";
+export interface DigestOptions {
+    testFilePatterns: string[];
+    implementationFilePatterns: string[];
+    generatedArtifactPatterns: string[];
+}
+/**
+ * 计算 worktree 的 Canonical Content Digest。
+ *
+ * 规则：
+ * 1. repo-relative paths，按 UTF-8 字节序排序
+ * 2. 纳入文件类型（含可执行位）、原始字节、删除标记
+ * 3. 拒绝逃逸 worktree 的 symlink
+ * 4. 忽略 .git/、node_modules/、coverage/、dist/、policy 声明的 generated artifacts
+ * 5. tracked + policy 范围内 untracked 文件均纳入
+ */
+export declare function computeWorkspaceDigest(root: string, options: DigestOptions): Promise<VersionedDigest>;

package/dist/flowrun/digest.js

@@ -0,0 +1,301 @@
+import { createHash } from "node:crypto";
+import { readFile, lstat, readdir, realpath } from "node:fs/promises";
+import { join, relative, resolve, sep, isAbsolute } from "node:path";
+import { execFileSync } from "node:child_process";
+// ─── 常量 ───
+/** 始终忽略的目录 */
+const ALWAYS_IGNORED = new Set([
+    ".git",
+    "node_modules",
+    "coverage",
+    "dist",
+    ".nyc_output",
+]);
+/** 始终忽略的前缀（目录 + 分隔符） */
+function isAlwaysIgnored(relPath) {
+    const parts = relPath.split(sep);
+    if (parts.length === 0)
+        return false;
+    const top = parts[0];
+    if (!top)
+        return false;
+    return ALWAYS_IGNORED.has(top);
+}
+/** 危险字符正则：拒绝可能逃逸路径的字符 */
+const DANGEROUS_PATH = /[\x00-\x1f\x7f]/;
+// ─── Git 辅助 ───
+function runGit(args, cwd) {
+    try {
+        const output = execFileSync("git", args, {
+            cwd,
+            encoding: "utf-8",
+            env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1" },
+            maxBuffer: 10 * 1024 * 1024,
+        });
+        return output.trim().split("\n").filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+/** 获取 Git 已跟踪的文件列表（repo-relative paths） */
+function getTrackedFiles(cwd) {
+    const lines = runGit(["ls-files", "--cached", "-z"], cwd);
+    if (lines.length === 0)
+        return new Set();
+    // -z 输出的行以 null 分隔，但 execFileSync 返回时 null 被转为换行
+    // 实际用 -z 时输出用 \0 分隔，这里按 \0 分割
+    const raw = execFileSync("git", ["ls-files", "--cached", "-z"], {
+        cwd, encoding: "utf-8",
+        env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1" },
+        maxBuffer: 10 * 1024 * 1024,
+    });
+    return new Set(raw.split("\0").filter(Boolean));
+}
+/** 获取已跟踪但已删除的文件列表 */
+function getDeletedFiles(cwd) {
+    try {
+        const raw = execFileSync("git", ["ls-files", "--deleted", "-z"], {
+            cwd, encoding: "utf-8",
+            env: { ...process.env, GIT_CONFIG_NOSYSTEM: "1" },
+            maxBuffer: 10 * 1024 * 1024,
+        });
+        return new Set(raw.split("\0").filter(Boolean));
+    }
+    catch {
+        return new Set();
+    }
+}
+// ─── 模式匹配 ───
+/**
+ * 简单的 glob 匹配（支持 **、*）
+ * 不做完整 micromatch，仅覆盖常见 pattern
+ */
+function matchPattern(filePath, pattern) {
+    // 将路径分隔符统一为 /
+    const normalized = filePath.split(sep).join("/");
+    // 构建正则
+    let regexStr = "";
+    let i = 0;
+    while (i < pattern.length) {
+        if (pattern[i] === "*" && pattern[i + 1] === "*") {
+            // **：零或多个路径段
+            i += 2;
+            // 跳过可选的 /（**/ 匹配零或多个目录）
+            if (i < pattern.length && pattern[i] === "/") {
+                regexStr += "(.*/)?";
+                i++;
+            }
+            else {
+                // 独立的 **（末尾）：匹配所有
+                regexStr += ".*";
+            }
+        }
+        else if (pattern[i] === "*") {
+            // *：匹配单段内的任意字符（除 /）
+            regexStr += "[^/]*";
+            i++;
+        }
+        else if (pattern[i] === ".") {
+            regexStr += "\\.";
+            i++;
+        }
+        else if (pattern[i] === "?") {
+            regexStr += "[^/]";
+            i++;
+        }
+        else {
+            // 转义正则特殊字符
+            if ("+^$(){}[]|\\".includes(pattern[i])) {
+                regexStr += "\\" + pattern[i];
+            }
+            else {
+                regexStr += pattern[i];
+            }
+            i++;
+        }
+    }
+    const regex = new RegExp(`^${regexStr}$`);
+    return regex.test(normalized);
+}
+function matchesAnyPattern(filePath, patterns) {
+    return patterns.some(p => matchPattern(filePath, p));
+}
+// ─── 路径校验 ───
+function validateRelPath(relPath) {
+    // 拒绝包含危险字符的路径
+    if (DANGEROUS_PATH.test(relPath)) {
+        throw new Error(`Dangerous characters in path: ${relPath}`);
+    }
+    // 拒绝以 .. 开头的路径
+    const normalized = relPath.split(sep).join("/");
+    if (normalized.startsWith("..") || normalized.includes("/../")) {
+        throw new Error(`Path escapes worktree: ${relPath}`);
+    }
+    if (isAbsolute(relPath)) {
+        throw new Error(`Path must be relative: ${relPath}`);
+    }
+}
+// ─── 文件扫描 ───
+/**
+ * 递归列出目录下所有文件（repo-relative paths）
+ * 忽略 always-ignored 目录
+ */
+async function scanDir(root, subDir = "", results = []) {
+    const fullPath = subDir ? join(root, subDir) : root;
+    let dirents;
+    try {
+        dirents = await readdir(fullPath, { withFileTypes: true });
+    }
+    catch {
+        return results;
+    }
+    for (const entry of dirents) {
+        const relPath = subDir ? `${subDir}${sep}${entry.name}` : entry.name;
+        const relPathSlash = relPath.split(sep).join("/");
+        // 跳过 always-ignored 顶层目录
+        if (isAlwaysIgnored(relPath))
+            continue;
+        if (entry.isDirectory()) {
+            await scanDir(root, relPath, results);
+        }
+        else if (entry.isFile() || entry.isSymbolicLink()) {
+            results.push(relPathSlash);
+        }
+    }
+    return results;
+}
+async function collectFileEntries(root, tracked, deleted, untrackedPaths, generatedPatterns) {
+    const entries = [];
+    // 处理已跟踪文件
+    for (const relPath of tracked) {
+        validateRelPath(relPath);
+        // 跳过生成的 artifacts
+        if (matchesAnyPattern(relPath, generatedPatterns))
+            continue;
+        // 跳过 always-ignored 目录
+        if (isAlwaysIgnored(relPath))
+            continue;
+        // 已删除文件：使用删除标记
+        if (deleted.has(relPath)) {
+            entries.push({ path: relPath, mode: 0, content: null });
+            continue;
+        }
+        const absPath = join(root, relPath);
+        try {
+            const fileLstat = await lstat(absPath);
+            // 检查 symlink 是否逃逸
+            if (fileLstat.isSymbolicLink()) {
+                const resolved = await realpath(absPath);
+                const resolvedNorm = resolve(resolved);
+                const rootNorm = resolve(root);
+                if (!resolvedNorm.startsWith(rootNorm + sep) && resolvedNorm !== rootNorm) {
+                    throw new Error(`Symlink escapes worktree: ${relPath} → ${resolved}`);
+                }
+            }
+            if (fileLstat.isFile() || fileLstat.isSymbolicLink()) {
+                const content = await readFile(absPath);
+                // mode: 只保留权限位（低 9 位），用于区分可执行位
+                const mode = fileLstat.mode & 0o777;
+                entries.push({ path: relPath, mode, content });
+            }
+            // 目录、设备文件等跳过
+        }
+        catch (err) {
+            if (err instanceof Error && err.message.startsWith("Symlink escapes")) {
+                throw err;
+            }
+            // 文件不存在（可能被外部删除），添加删除标记
+            entries.push({ path: relPath, mode: 0, content: null });
+        }
+    }
+    // 处理 policy 范围内的 untracked 文件
+    for (const relPath of untrackedPaths) {
+        validateRelPath(relPath);
+        // 跳过已跟踪文件的重复
+        if (tracked.has(relPath))
+            continue;
+        // 跳过 always-ignored
+        if (isAlwaysIgnored(relPath))
+            continue;
+        // 跳过生成的 artifacts
+        if (matchesAnyPattern(relPath, generatedPatterns))
+            continue;
+        const absPath = join(root, relPath);
+        try {
+            const fileLstat = await lstat(absPath);
+            if (fileLstat.isSymbolicLink()) {
+                const resolved = await realpath(absPath);
+                const resolvedNorm = resolve(resolved);
+                const rootNorm = resolve(root);
+                if (!resolvedNorm.startsWith(rootNorm + sep) && resolvedNorm !== rootNorm) {
+                    throw new Error(`Symlink escapes worktree: ${relPath} → ${resolved}`);
+                }
+            }
+            if (fileLstat.isFile() || fileLstat.isSymbolicLink()) {
+                const content = await readFile(absPath);
+                const mode = fileLstat.mode & 0o777;
+                entries.push({ path: relPath, mode, content });
+            }
+        }
+        catch (err) {
+            if (err instanceof Error && err.message.startsWith("Symlink escapes")) {
+                throw err;
+            }
+            // 无法读取的文件跳过
+        }
+    }
+    return entries;
+}
+// ─── 主函数 ───
+/**
+ * 计算 worktree 的 Canonical Content Digest。
+ *
+ * 规则：
+ * 1. repo-relative paths，按 UTF-8 字节序排序
+ * 2. 纳入文件类型（含可执行位）、原始字节、删除标记
+ * 3. 拒绝逃逸 worktree 的 symlink
+ * 4. 忽略 .git/、node_modules/、coverage/、dist/、policy 声明的 generated artifacts
+ * 5. tracked + policy 范围内 untracked 文件均纳入
+ */
+export async function computeWorkspaceDigest(root, options) {
+    const rootNorm = resolve(root);
+    // 1. 获取 Git 跟踪状态
+    const tracked = getTrackedFiles(rootNorm);
+    const deleted = getDeletedFiles(rootNorm);
+    // 2. 扫描文件系统获取 policy 范围内的 untracked 文件
+    const allFiles = await scanDir(rootNorm);
+    const includedPatterns = [...options.testFilePatterns, ...options.implementationFilePatterns];
+    const untrackedPaths = new Set(allFiles.filter(f => !tracked.has(f) && matchesAnyPattern(f, includedPatterns)));
+    // 3. 收集文件条目
+    const entries = await collectFileEntries(rootNorm, tracked, deleted, untrackedPaths, options.generatedArtifactPatterns);
+    // 4. 按 UTF-8 字节序排序
+    entries.sort((a, b) => {
+        const bufA = Buffer.from(a.path, "utf-8");
+        const bufB = Buffer.from(b.path, "utf-8");
+        return Buffer.compare(bufA, bufB);
+    });
+    // 5. 构建 canonical 内容
+    const hash = createHash("sha256");
+    for (const entry of entries) {
+        // path
+        hash.update(entry.path);
+        hash.update("\0");
+        // mode (8 进制字符串)
+        hash.update(entry.mode.toString(8));
+        hash.update("\0");
+        // content 或删除标记
+        if (entry.content === null) {
+            hash.update("\0DELETED\0");
+        }
+        else {
+            hash.update(entry.content);
+        }
+        hash.update("\0");
+    }
+    return {
+        algorithm: "sha256-content-v1",
+        value: hash.digest("hex"),
+    };
+}
+//# sourceMappingURL=digest.js.map

package/dist/flowrun/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../src/flowrun/digest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAWjD,aAAa;AAEb,cAAc;AACd,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,cAAc;IACd,UAAU;IACV,MAAM;IACN,aAAa;CACd,CAAC,CAAA;AAEF,wBAAwB;AACxB,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACpB,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAChC,CAAC;AAED,yBAAyB;AACzB,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAExC,iBAAiB;AAEjB,SAAS,MAAM,CAAC,IAAc,EAAE,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACvC,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;YACjD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAA;IACxC,iDAAiD;IACjD,8BAA8B;IAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE;QAC9D,GAAG,EAAE,QAAQ,EAAE,OAAO;QACtB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;QACjD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAA;IACF,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,qBAAqB;AACrB,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;YAC/D,GAAG,EAAE,QAAQ,EAAE,OAAO;YACtB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;YACjD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAA;QACF,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAA;IAClB,CAAC;AACH,CAAC;AAED,eAAe;AAEf;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB,EAAE,OAAe;IACrD,cAAc;IACd,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEhD,OAAO;IACP,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,aAAa;YACb,CAAC,IAAI,CAAC,CAAA;YACN,wBAAwB;YACxB,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7C,QAAQ,IAAI,QAAQ,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;iBAAM,CAAC;gBACN,kBAAkB;gBAClB,QAAQ,IAAI,IAAI,CAAA;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9B,oBAAoB;YACpB,QAAQ,IAAI,OAAO,CAAA;YACnB,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9B,QAAQ,IAAI,KAAK,CAAA;YACjB,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9B,QAAQ,IAAI,MAAM,CAAA;YAClB,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,CAAC;YACN,WAAW;YACX,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,QAAQ,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;YAC/B,CAAC;iBAAM,CAAC;gBACN,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAA;YACxB,CAAC;YACD,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAA;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,QAAkB;IAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,eAAe;AAEf,SAAS,eAAe,CAAC,OAAe;IACtC,cAAc;IACd,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,eAAe;IACf,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,eAAe;AAEf;;;GAGG;AACH,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,SAAiB,EAAE,EAAE,UAAoB,EAAE;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnD,IAAI,OAAO,CAAA;IACX,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;QACpE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEjD,yBAAyB;QACzB,IAAI,eAAe,CAAC,OAAO,CAAC;YAAE,SAAQ;QAEtC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACvC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAUD,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,OAAoB,EACpB,OAAoB,EACpB,cAA2B,EAC3B,iBAA2B;IAE3B,MAAM,OAAO,GAAgB,EAAE,CAAA;IAE/B,UAAU;IACV,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,eAAe,CAAC,OAAO,CAAC,CAAA;QAExB,kBAAkB;QAClB,IAAI,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAAE,SAAQ;QAC3D,uBAAuB;QACvB,IAAI,eAAe,CAAC,OAAO,CAAC;YAAE,SAAQ;QAEtC,eAAe;QACf,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,SAAQ;QACV,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YAEtC,kBAAkB;YAClB,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;gBACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC9B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACvC,+BAA+B;gBAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,GAAG,KAAK,CAAA;gBACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAChD,CAAC;YACD,aAAa;QACf,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACtE,MAAM,GAAG,CAAA;YACX,CAAC;YACD,wBAAwB;YACxB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,eAAe,CAAC,OAAO,CAAC,CAAA;QAExB,aAAa;QACb,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAQ;QAClC,oBAAoB;QACpB,IAAI,eAAe,CAAC,OAAO,CAAC;YAAE,SAAQ;QACtC,kBAAkB;QAClB,IAAI,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAAE,SAAQ;QAE3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YAEtC,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;gBACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC9B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACvC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,GAAG,KAAK,CAAA;gBACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACtE,MAAM,GAAG,CAAA;YACX,CAAC;YACD,YAAY;QACd,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,cAAc;AAEd;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,OAAsB;IAEtB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9B,iBAAiB;IACjB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;IAEzC,uCAAuC;IACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,EAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAC7F,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAChF,CAAA;IAED,YAAY;IACZ,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC,QAAQ,EACR,OAAO,EACP,OAAO,EACP,cAAc,EACd,OAAO,CAAC,yBAAyB,CAClC,CAAA;IAED,mBAAmB;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACzC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,qBAAqB;IACrB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO;QACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjB,iBAAiB;QACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjB,gBAAgB;QAChB,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC;IAED,OAAO;QACL,SAAS,EAAE,mBAAmB;QAC9B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;KAC1B,CAAA;AACH,CAAC"}

package/dist/flowrun/evaluator.d.ts

@@ -0,0 +1,38 @@
+import type { TddPolicy, TddEvidence, AcceptanceCriterion } from "./types.js";
+/**
+ * evaluateTddCompliance 的结果类型。
+ *
+ * - status = pass    → 合规（advisory 下缺口记 warning）
+ * - status = fail    → 不合规，阻断
+ * - status = waived  → 豁免（bypass 模式下替代验证全部通过）
+ */
+export interface EvaluationResult {
+    status: "pass" | "fail" | "waived";
+    warnings: string[];
+}
+/**
+ * 判定 TDD 模式是否合规的纯函数。
+ *
+ * 规则（参见 Spec Section 4.3）：
+ *
+ * **strict**：
+ * - 必须至少有一个 verification=tDD 的 criterion
+ * - 每个 TDD criterion 都必须有 status=pass 的 cycle 覆盖
+ * - verification=regression 的 criterion 由 final regression 覆盖
+ * - verification=manual 不允许在 strict 模式下使用
+ * - final regression 和 final verification 必须 pass
+ *
+ * **relaxed**：
+ * - 仅要求 final regression 为 pass，不检查 cycle
+ * - final verification 必须 pass
+ *
+ * **bypass**：
+ * - 必须有 exception 且其 alternativeValidation 全部完成（evidence 中对应 status=pass）
+ * - final verification 仍必须 pass
+ * - 不要求 runner / cycle / regression
+ *
+ * **enforcement**：
+ * - advisory：缺失 evidence 仅产生 warning，不阻断（仍返回 pass/waived）
+ * - runtime：缺失 evidence 直接阻断（返回 fail）
+ */
+export declare function evaluateTddCompliance(policy: TddPolicy, evidence: TddEvidence, criteria: AcceptanceCriterion[]): EvaluationResult;