@devflow-tools/database 0.17.8 → 0.18.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shilongfeicool
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/data/LocalDataProvider.d.ts

@@ -0,0 +1,63 @@
+import type { SQLInputValue } from "node:sqlite";
+import type { IDataProvider, VectorResult, VectorPoint, GraphNode, GraphEdge, SessionEntry, SymbolEntry, SymbolKind, FileMeta, ImportEntry, AuditEntry, ContextReceipt, Rule } from "@devflow-tools/sdk";
+export declare class LocalDataProvider implements IDataProvider {
+    private db;
+    constructor(_root: string, options?: {
+        dbPath?: string;
+    });
+    private initSchema;
+    close(): void;
+    vectorSearch(_collection: string, _query: number[], _limit: number): Promise<VectorResult[]>;
+    vectorUpsert(_collection: string, _points: VectorPoint[]): Promise<void>;
+    vectorDelete(_collection: string, _ids: string[]): Promise<void>;
+    graphGetAll(): Promise<{
+        nodes: GraphNode[];
+        edges: GraphEdge[];
+    }>;
+    graphGetNode(_id: string): Promise<GraphNode | null>;
+    graphGetEdges(_nodeId: string, _direction: "in" | "out"): Promise<GraphEdge[]>;
+    graphUpsertNodes(_nodes: GraphNode[]): Promise<void>;
+    graphUpsertEdges(_edges: GraphEdge[]): Promise<void>;
+    graphClear(): Promise<void>;
+    kvGet(key: string): Promise<unknown>;
+    kvSet(key: string, value: unknown): Promise<void>;
+    kvDelete(key: string): Promise<void>;
+    kvGetPrefix(prefix: string): Promise<Record<string, unknown>>;
+    sessionGet(sessionId: string): Promise<SessionEntry[]>;
+    sessionAppend(sessionId: string, entry: SessionEntry): Promise<void>;
+    sessionCreate(sessionId: string, task: string): Promise<void>;
+    sessionClose(sessionId: string): Promise<void>;
+    sqlQuery<T>(sql: string, params?: SQLInputValue[]): Promise<T[]>;
+    sqlExecute(sql: string, params?: SQLInputValue[]): Promise<void>;
+    recordToolCall(tool: string, args: Record<string, unknown>, durationMs: number, error?: string): Promise<void>;
+    getToolCallStats(): Promise<{
+        total: number;
+        byTool: Record<string, number>;
+        recent: Array<{
+            tool: string;
+            timestamp: number;
+            durationMs: number;
+            error?: string;
+        }>;
+    }>;
+    private _auditSecret;
+    auditGetSecret(): Promise<string>;
+    auditAppend(entry: AuditEntry): Promise<void>;
+    auditGetAll(): Promise<AuditEntry[]>;
+    ruleSave(rule: Rule): Promise<void>;
+    ruleGetAll(options?: {
+        includeDisabled?: boolean;
+    }): Promise<Rule[]>;
+    ruleDelete(id: string): Promise<void>;
+    contextReceiptPut(receipt: ContextReceipt): Promise<void>;
+    contextReceiptGet(projectRoot: string, sessionId: string, executionId: string): Promise<ContextReceipt | null>;
+    contextReceiptDelete(projectRoot: string, sessionId: string, executionId?: string): Promise<void>;
+    insertSymbols(_symbols: SymbolEntry[]): Promise<void>;
+    insertFiles(_files: FileMeta[]): Promise<void>;
+    insertImports(_imports: ImportEntry[]): Promise<void>;
+    findSymbols(_name: string): Promise<SymbolEntry[]>;
+    findSymbolsByKind(_kind: SymbolKind): Promise<SymbolEntry[]>;
+    getSymbolsInFile(_file: string): Promise<SymbolEntry[]>;
+    getFileCount(): Promise<number>;
+    getSymbolCount(): Promise<number>;
+}

package/dist/data/LocalDataProvider.js

@@ -0,0 +1,332 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalDataProvider = void 0;
+const node_sqlite_1 = require("node:sqlite");
+const node_path_1 = require("node:path");
+const node_fs_1 = require("node:fs");
+const database_js_1 = require("../database.js");
+const node_crypto_1 = require("node:crypto");
+const devflow_schema_js_1 = require("./devflow-schema.js");
+function parseStringArray(value) {
+    if (typeof value !== 'string')
+        return [];
+    try {
+        const parsed = JSON.parse(value);
+        return Array.isArray(parsed) ? parsed.filter((item) => typeof item === 'string') : [];
+    }
+    catch {
+        return [];
+    }
+}
+function parseJsonObject(value) {
+    if (typeof value !== 'string' || !value)
+        return undefined;
+    try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function parseJsonArray(value) {
+    if (typeof value !== 'string' || !value)
+        return [];
+    try {
+        const parsed = JSON.parse(value);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+class LocalDataProvider {
+    constructor(_root, options) {
+        // --- Audit chain ---
+        this._auditSecret = null;
+        const dbPath = options?.dbPath ?? (0, database_js_1.getGlobalDevFlowDbPath)();
+        (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(dbPath), { recursive: true });
+        this.db = new node_sqlite_1.DatabaseSync(dbPath);
+        this.db.exec("PRAGMA journal_mode = WAL");
+        this.initSchema();
+    }
+    initSchema() {
+        this.db.exec(devflow_schema_js_1.DEVFLOW_SCHEMA_SQL);
+        try {
+            this.db.exec("ALTER TABLE devflow_workflow_runs ADD COLUMN failure_category TEXT");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_workflow_runs ADD COLUMN failure_reason TEXT");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_workflow_runs ADD COLUMN failure_evidence TEXT");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_rules ADD COLUMN gate INTEGER NOT NULL DEFAULT 1");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_rules ADD COLUMN updated_at INTEGER");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN selected_files TEXT NOT NULL DEFAULT '[]'");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN memory_ids TEXT NOT NULL DEFAULT '[]'");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN canonical_next_action TEXT");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN canonical_action_json TEXT");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN action_attempts TEXT NOT NULL DEFAULT '[]'");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN action_satisfied_at INTEGER");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN action_degradation_json TEXT");
+        }
+        catch { }
+        try {
+            this.db.exec("ALTER TABLE devflow_context_receipts ADD COLUMN request_id TEXT");
+        }
+        catch { }
+        this.db.exec("UPDATE devflow_rules SET updated_at = created_at WHERE updated_at IS NULL");
+    }
+    close() {
+        if (this.db.isOpen)
+            this.db.close();
+    }
+    // --- Vector (P0 stubs) ---
+    async vectorSearch(_collection, _query, _limit) {
+        return [];
+    }
+    async vectorUpsert(_collection, _points) { }
+    async vectorDelete(_collection, _ids) { }
+    // --- Graph (stubs — CodeGraph owns this now) ---
+    async graphGetAll() { return { nodes: [], edges: [] }; }
+    async graphGetNode(_id) { return null; }
+    async graphGetEdges(_nodeId, _direction) { return []; }
+    async graphUpsertNodes(_nodes) { }
+    async graphUpsertEdges(_edges) { }
+    async graphClear() { }
+    // --- KV ---
+    async kvGet(key) {
+        const row = this.db.prepare("SELECT value FROM devflow_kv WHERE key = ?").get(key);
+        if (!row)
+            return null;
+        return JSON.parse(row.value);
+    }
+    async kvSet(key, value) {
+        this.db.prepare("INSERT OR REPLACE INTO devflow_kv (key, value) VALUES (?, ?)").run(key, JSON.stringify(value));
+    }
+    async kvDelete(key) {
+        this.db.prepare("DELETE FROM devflow_kv WHERE key = ?").run(key);
+    }
+    async kvGetPrefix(prefix) {
+        const rows = this.db.prepare("SELECT key, value FROM devflow_kv WHERE key LIKE ?").all(prefix + "%");
+        const result = {};
+        for (const row of rows) {
+            result[row.key] = JSON.parse(row.value);
+        }
+        return result;
+    }
+    // --- Session ---
+    async sessionGet(sessionId) {
+        const rows = this.db.prepare("SELECT timestamp, event, data FROM devflow_sessions WHERE session_id = ? ORDER BY timestamp").all(sessionId);
+        return rows.map((r) => ({
+            timestamp: r.timestamp,
+            action: r.event,
+            summary: r.event,
+            ...(r.data ? JSON.parse(r.data) : {}),
+        }));
+    }
+    async sessionAppend(sessionId, entry) {
+        this.db.prepare("INSERT INTO devflow_sessions (session_id, timestamp, event, data) VALUES (?, ?, ?, ?)").run(sessionId, entry.timestamp, entry.action, JSON.stringify({ summary: entry.summary, metadata: entry.metadata }));
+    }
+    async sessionCreate(sessionId, task) {
+        await this.sessionAppend(sessionId, {
+            timestamp: Date.now(),
+            action: "session:create",
+            summary: task,
+        });
+    }
+    async sessionClose(sessionId) {
+        await this.sessionAppend(sessionId, {
+            timestamp: Date.now(),
+            action: "session:close",
+            summary: "Session closed",
+        });
+    }
+    // --- SQL ---
+    async sqlQuery(sql, params) {
+        const stmt = this.db.prepare(sql);
+        return (params ? stmt.all(...params) : stmt.all());
+    }
+    async sqlExecute(sql, params) {
+        const stmt = this.db.prepare(sql);
+        params ? stmt.run(...params) : stmt.run();
+    }
+    // --- Tool call telemetry (Layer 4: local mode) ---
+    async recordToolCall(tool, args, durationMs, error) {
+        this.db.prepare("INSERT INTO devflow_tool_calls (tool, args, timestamp, duration_ms, error) VALUES (?, ?, ?, ?, ?)").run(tool, JSON.stringify(args), Date.now(), durationMs, error ?? null);
+    }
+    async getToolCallStats() {
+        const total = this.db.prepare("SELECT COUNT(*) as c FROM devflow_tool_calls").get().c;
+        const byToolRows = this.db.prepare("SELECT tool, COUNT(*) as c FROM devflow_tool_calls GROUP BY tool").all();
+        const byTool = {};
+        for (const r of byToolRows)
+            byTool[r.tool] = r.c;
+        const recent = this.db.prepare("SELECT tool, timestamp, duration_ms, error FROM devflow_tool_calls ORDER BY timestamp DESC LIMIT 20").all();
+        return {
+            total,
+            byTool,
+            recent: recent.map((r) => ({ tool: r.tool, timestamp: r.timestamp, durationMs: r.duration_ms, ...(r.error ? { error: r.error } : {}) })),
+        };
+    }
+    async auditGetSecret() {
+        if (this._auditSecret)
+            return this._auditSecret;
+        const row = this.db.prepare("SELECT value FROM devflow_kv WHERE key = ?").get("audit_secret");
+        if (row) {
+            this._auditSecret = row.value;
+            return this._auditSecret;
+        }
+        const secret = (0, node_crypto_1.randomBytes)(32).toString("hex");
+        this.db.prepare("INSERT OR REPLACE INTO devflow_kv (key, value) VALUES ('audit_secret', ?)").run(secret);
+        this._auditSecret = secret;
+        return secret;
+    }
+    async auditAppend(entry) {
+        this.db.prepare("INSERT INTO devflow_audit_chain (ts, tool, args_hash, decision, rule_id, session_id, prev_hash, signature) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(entry.ts, entry.tool, entry.argsHash, entry.decision, entry.ruleId, entry.sessionId, entry.prevHash, entry.signature);
+    }
+    async auditGetAll() {
+        const rows = this.db.prepare("SELECT seq, ts, tool, args_hash, decision, rule_id, session_id, prev_hash, signature FROM devflow_audit_chain ORDER BY seq").all();
+        return rows.map((r) => ({
+            seq: r.seq,
+            ts: r.ts,
+            tool: r.tool,
+            argsHash: r.args_hash,
+            decision: r.decision,
+            ruleId: r.rule_id,
+            sessionId: r.session_id,
+            prevHash: r.prev_hash,
+            signature: r.signature,
+        }));
+    }
+    // --- Rules ---
+    async ruleSave(rule) {
+        const now = Date.now();
+        this.db.prepare(`INSERT INTO devflow_rules
+        (id, name, gate, level, condition_json, action, message, enabled, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         name = excluded.name, gate = excluded.gate, level = excluded.level,
+         condition_json = excluded.condition_json, action = excluded.action,
+         message = excluded.message, enabled = excluded.enabled,
+         updated_at = excluded.updated_at`).run(rule.id, rule.name, rule.gate, rule.level, JSON.stringify(rule.condition), rule.action, rule.message, rule.enabled ? 1 : 0, rule.createdAt ?? now, now);
+    }
+    async ruleGetAll(options) {
+        const where = options?.includeDisabled ? "" : "WHERE enabled = 1";
+        const rows = this.db.prepare(`SELECT * FROM devflow_rules ${where} ORDER BY gate, id`).all();
+        return rows.map((r) => ({
+            id: r.id,
+            name: r.name,
+            gate: r.gate,
+            level: r.level,
+            condition: JSON.parse(r.condition_json),
+            action: r.action,
+            message: r.message,
+            enabled: r.enabled === 1,
+            createdAt: r.created_at,
+            updatedAt: r.updated_at,
+        }));
+    }
+    async ruleDelete(id) {
+        this.db.prepare("DELETE FROM devflow_rules WHERE id = ?").run(id);
+    }
+    async contextReceiptPut(receipt) {
+        this.db.prepare(`
+      INSERT INTO devflow_context_receipts
+        (project_root, session_id, execution_id, context_hash, issued_at, expires_at,
+         selected_files, memory_ids, canonical_next_action, canonical_action_json,
+         action_attempts, action_satisfied_at, action_degradation_json, request_id)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(project_root, session_id, execution_id) DO UPDATE SET
+        context_hash = excluded.context_hash,
+        issued_at = excluded.issued_at,
+        expires_at = excluded.expires_at,
+        selected_files = excluded.selected_files,
+        memory_ids = excluded.memory_ids,
+        canonical_next_action = excluded.canonical_next_action,
+        canonical_action_json = excluded.canonical_action_json,
+        action_attempts = excluded.action_attempts,
+        action_satisfied_at = excluded.action_satisfied_at,
+        action_degradation_json = excluded.action_degradation_json,
+        request_id = excluded.request_id
+    `).run(receipt.projectRoot, receipt.sessionId, receipt.executionId, receipt.contextHash, receipt.issuedAt, receipt.expiresAt, JSON.stringify(receipt.selectedFiles ?? []), JSON.stringify(receipt.memoryIds ?? []), receipt.canonicalNextAction ?? null, receipt.canonicalAction ? JSON.stringify(receipt.canonicalAction) : null, JSON.stringify(receipt.actionAttempts ?? []), receipt.actionSatisfiedAt ?? null, receipt.actionDegradation ? JSON.stringify(receipt.actionDegradation) : null, receipt.requestId ?? null);
+    }
+    async contextReceiptGet(projectRoot, sessionId, executionId) {
+        const row = this.db.prepare(`
+      SELECT project_root, session_id, execution_id, context_hash, issued_at, expires_at,
+             selected_files, memory_ids, canonical_next_action, canonical_action_json,
+             action_attempts, action_satisfied_at, action_degradation_json, request_id
+      FROM devflow_context_receipts
+      WHERE project_root = ? AND session_id = ? AND execution_id = ?
+    `).get(projectRoot, sessionId, executionId);
+        if (!row)
+            return null;
+        return {
+            projectRoot: row.project_root,
+            sessionId: row.session_id,
+            executionId: row.execution_id,
+            contextHash: row.context_hash,
+            issuedAt: row.issued_at,
+            expiresAt: row.expires_at,
+            selectedFiles: parseStringArray(row.selected_files),
+            memoryIds: parseStringArray(row.memory_ids),
+            canonicalNextAction: typeof row.canonical_next_action === 'string'
+                ? row.canonical_next_action
+                : undefined,
+            canonicalAction: parseJsonObject(row.canonical_action_json),
+            actionAttempts: parseJsonArray(row.action_attempts),
+            actionSatisfiedAt: typeof row.action_satisfied_at === 'number' ? row.action_satisfied_at : undefined,
+            actionDegradation: parseJsonObject(row.action_degradation_json),
+            requestId: typeof row.request_id === 'string' ? row.request_id : undefined,
+        };
+    }
+    async contextReceiptDelete(projectRoot, sessionId, executionId) {
+        if (executionId) {
+            this.db.prepare(`DELETE FROM devflow_context_receipts
+        WHERE project_root = ? AND session_id = ? AND execution_id = ?`)
+                .run(projectRoot, sessionId, executionId);
+        }
+        else {
+            this.db.prepare(`DELETE FROM devflow_context_receipts
+        WHERE project_root = ? AND session_id = ?`).run(projectRoot, sessionId);
+        }
+    }
+    // --- File index (stubs — CodeGraph owns this now) ---
+    async insertSymbols(_symbols) { }
+    async insertFiles(_files) { }
+    async insertImports(_imports) { }
+    async findSymbols(_name) { return []; }
+    async findSymbolsByKind(_kind) { return []; }
+    async getSymbolsInFile(_file) { return []; }
+    async getFileCount() { return 0; }
+    async getSymbolCount() { return 0; }
+}
+exports.LocalDataProvider = LocalDataProvider;

package/dist/data/default-enforcer-rules.d.ts

@@ -0,0 +1,3 @@
+import type { IDataProvider, Rule } from "@devflow-tools/sdk";
+export declare const DEFAULT_ENFORCER_RULES: readonly Rule[];
+export declare function seedDefaultEnforcerRules(provider: IDataProvider): Promise<void>;

package/dist/data/default-enforcer-rules.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ENFORCER_RULES = void 0;
+exports.seedDefaultEnforcerRules = seedDefaultEnforcerRules;
+const constitutional = (rule) => ({
+    ...rule,
+    gate: 1,
+    level: "constitutional",
+    enabled: true,
+});
+exports.DEFAULT_ENFORCER_RULES = [
+    constitutional({
+        id: "C001",
+        name: "Session Token 缺失",
+        condition: { requireFields: ["_devflow_token"] },
+        action: "warn",
+        message: "缺少 Session Token。当前调用处于降级认证模式。",
+    }),
+    constitutional({
+        id: "C002",
+        name: "Session Token 过期",
+        condition: { paramPatterns: { "_devflow_token.expired": "^true$" } },
+        action: "warn",
+        message: "Session Token 已过期，DevFlow 将自动续期。",
+    }),
+    constitutional({
+        id: "C003",
+        name: "调用速率限制",
+        condition: { maxCallsPerMinute: 60 },
+        action: "warn",
+        message: "调用频率超过每分钟 60 次，请降低请求速率。",
+    }),
+    constitutional({
+        id: "C004",
+        name: "危险 Shell 命令",
+        condition: {
+            toolPatterns: ["^(bash|shell|run_command|execute_command)$"],
+            forbidPatterns: ["(^|\\s)(rm\\s+-rf|mkfs(\\.|\\s)|dd\\s+if=|shutdown|reboot)(\\s|$)"],
+        },
+        action: "deny",
+        message: "检测到高风险系统命令，执行已阻止。",
+    }),
+    constitutional({
+        id: "C005",
+        name: "禁止强制推送",
+        condition: { forbidPatterns: ["git\\s+push(?:\\s+[^\\n]*)?\\s(?:--force|-f)(?:\\s|$)"] },
+        action: "deny",
+        message: "禁止未经显式治理规则批准的 Git 强制推送。",
+    }),
+    constitutional({
+        id: "C006",
+        name: "保护敏感文件",
+        condition: {
+            toolPatterns: ["(write|edit|patch|create|delete|remove|move|rename)"],
+            forbidPatterns: ["(^|/)(\\.env(?:\\.[^/]*)?|id_rsa|id_ed25519|credentials(?:\\.json)?|secrets?\\.(?:json|ya?ml))$"],
+        },
+        action: "deny",
+        message: "目标包含敏感凭据文件，写入已阻止。",
+    }),
+    constitutional({
+        id: "C007",
+        name: "阻止明文凭据",
+        condition: {
+            toolPatterns: ["(write|edit|patch|create|save|update)"],
+            forbidPatterns: ["(?:sk-[A-Za-z0-9_-]{20,}|AKIA[0-9A-Z]{16}|-----BEGIN (?:RSA |OPENSSH )?PRIVATE KEY-----)"],
+        },
+        action: "deny",
+        message: "检测到疑似明文凭据或私钥，写入已阻止。",
+    }),
+    constitutional({
+        id: "C008",
+        name: "Token 预算上限",
+        condition: { maxNumericFields: { maxTokens: 200000, max_tokens: 200000, tokenBudget: 200000, token_budget: 200000 } },
+        action: "warn",
+        message: "请求的 Token 预算超过 200000，请拆分任务或降低预算。",
+    }),
+    constitutional({
+        id: "C009",
+        name: "项目根目录必填",
+        condition: {
+            toolPatterns: ["^(get_project_context|search_symbol|get_dependency_graph|react_|vue_|nest_|next_|express_)"],
+            requireFields: ["projectRoot"],
+        },
+        action: "deny",
+        message: "该工具必须显式提供 projectRoot，禁止使用进程 cwd 推断。",
+    }),
+    constitutional({
+        id: "C010",
+        name: "破坏性 SQL",
+        condition: {
+            toolPatterns: ["(sql|query|database|db)"],
+            forbidPatterns: ["\\b(?:DROP\\s+(?:DATABASE|TABLE)|TRUNCATE\\s+TABLE|DELETE\\s+FROM\\s+[^;]+(?:;|$))"],
+        },
+        action: "deny",
+        message: "检测到破坏性 SQL，执行已阻止。",
+    }),
+    {
+        id: "S001",
+        name: "领域工具先获取项目上下文",
+        gate: 2,
+        level: "project",
+        condition: {
+            toolPatterns: ["^(react|vue|nest|next|nextjs|graphql|express|typescript|testing|security|database)_"],
+            requirePriorTools: ["get_project_context"],
+        },
+        action: "deny",
+        message: "Call get_project_context successfully before this domain tool.",
+        enabled: true,
+    },
+    {
+        id: "S002",
+        name: "代码生成先获取项目上下文",
+        gate: 2,
+        level: "project",
+        condition: {
+            toolPatterns: ["(generate|scaffold|refactor|code_write)"],
+            requirePriorTools: ["get_project_context"],
+        },
+        action: "warn",
+        message: "Gate 2：生成或重构代码前必须先获取项目上下文。",
+        enabled: true,
+    },
+    {
+        id: "I001",
+        name: "上下文告警拦截写入",
+        gate: 3,
+        level: "session",
+        condition: {
+            toolPatterns: ["(write|edit|patch|create|generate|refactor|code_write)"],
+            requiresContextWarning: true,
+        },
+        action: "warn",
+        message: "Gate 3：最近的项目上下文包含告警或低置信度，请先补充检索再写代码。",
+        enabled: true,
+    },
+    {
+        id: "I002",
+        name: "低置信度上下文拦截工作流",
+        gate: 3,
+        level: "session",
+        condition: {
+            toolPatterns: ["(workflow|execute|run)_"],
+            requiresContextWarning: true,
+        },
+        action: "warn",
+        message: "Gate 3：上下文质量不足，执行工作流前应确认告警并缩小范围。",
+        enabled: true,
+    },
+    {
+        id: "R001",
+        name: "失败后自动纠正",
+        gate: 4,
+        level: "session",
+        condition: { tools: ["*"], requiresPreviousFailure: true },
+        action: "warn",
+        message: "Gate 4：上一工具调用失败。请根据失败信息调整参数、缩小操作范围后重试。",
+        enabled: true,
+    },
+];
+async function seedDefaultEnforcerRules(provider) {
+    const existing = new Map((await provider.ruleGetAll({ includeDisabled: true })).map((rule) => [rule.id, rule]));
+    for (const rule of exports.DEFAULT_ENFORCER_RULES) {
+        const stored = existing.get(rule.id);
+        const staleS001 = rule.id === "S001" && stored && (stored.action !== rule.action
+            || stored.enabled !== rule.enabled
+            || JSON.stringify(stored.condition) !== JSON.stringify(rule.condition));
+        if (!stored || staleS001)
+            await provider.ruleSave(rule);
+    }
+}

package/dist/data/devflow-schema.d.ts

@@ -0,0 +1,2 @@
+export declare const DEVFLOW_TABLE_NAMES: readonly ["devflow_kv", "devflow_sessions", "devflow_telemetry_runs", "devflow_benchmark_reports", "devflow_workflow_runs", "devflow_knowledge_entries", "devflow_tool_calls", "devflow_rules", "devflow_audit_chain", "devflow_context_receipts"];
+export declare const DEVFLOW_SCHEMA_SQL = "\n  CREATE TABLE IF NOT EXISTS devflow_kv (\n    key TEXT PRIMARY KEY, value TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_sessions (\n    session_id TEXT, timestamp INTEGER, event TEXT, data TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_telemetry_runs (\n    id TEXT PRIMARY KEY, agent TEXT, mode TEXT, status TEXT,\n    started_at INTEGER, finished_at INTEGER, token_used INTEGER, data TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_benchmark_reports (\n    id TEXT PRIMARY KEY, task TEXT, score REAL, started_at INTEGER,\n    finished_at INTEGER, data TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_workflow_runs (\n    run_id TEXT PRIMARY KEY, type TEXT, status TEXT, input TEXT,\n    steps TEXT, started_at INTEGER, finished_at INTEGER,\n    failure_category TEXT, failure_reason TEXT, failure_evidence TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_knowledge_entries (\n    id TEXT PRIMARY KEY, source TEXT, title TEXT, content TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_tool_calls (\n    id INTEGER PRIMARY KEY AUTOINCREMENT,\n    tool TEXT NOT NULL,\n    args TEXT,\n    timestamp INTEGER NOT NULL,\n    duration_ms INTEGER NOT NULL,\n    error TEXT\n  );\n  CREATE TABLE IF NOT EXISTS devflow_rules (\n    id TEXT PRIMARY KEY, name TEXT NOT NULL, level TEXT NOT NULL DEFAULT 'project',\n    gate INTEGER NOT NULL DEFAULT 1,\n    condition_json TEXT NOT NULL, action TEXT NOT NULL DEFAULT 'warn',\n    message TEXT NOT NULL, enabled INTEGER NOT NULL DEFAULT 1,\n    created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL\n  );\n  CREATE TABLE IF NOT EXISTS devflow_audit_chain (\n    seq INTEGER PRIMARY KEY AUTOINCREMENT, ts INTEGER NOT NULL,\n    tool TEXT NOT NULL, args_hash TEXT NOT NULL,\n    decision TEXT NOT NULL, rule_id TEXT,\n    session_id TEXT NOT NULL, prev_hash TEXT NOT NULL,\n    signature TEXT NOT NULL\n  );\n  CREATE TABLE IF NOT EXISTS devflow_context_receipts (\n    project_root TEXT NOT NULL,\n    session_id TEXT NOT NULL,\n    execution_id TEXT NOT NULL,\n    context_hash TEXT NOT NULL,\n    issued_at INTEGER NOT NULL,\n    expires_at INTEGER NOT NULL,\n    selected_files TEXT NOT NULL DEFAULT '[]',\n    memory_ids TEXT NOT NULL DEFAULT '[]',\n    canonical_next_action TEXT,\n    canonical_action_json TEXT,\n    action_attempts TEXT NOT NULL DEFAULT '[]',\n    action_satisfied_at INTEGER,\n    action_degradation_json TEXT,\n    request_id TEXT,\n    PRIMARY KEY (project_root, session_id, execution_id)\n  );\n  CREATE INDEX IF NOT EXISTS idx_context_receipts_expiry\n    ON devflow_context_receipts(expires_at);\n";

package/dist/data/devflow-schema.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEVFLOW_SCHEMA_SQL = exports.DEVFLOW_TABLE_NAMES = void 0;
+exports.DEVFLOW_TABLE_NAMES = [
+    'devflow_kv',
+    'devflow_sessions',
+    'devflow_telemetry_runs',
+    'devflow_benchmark_reports',
+    'devflow_workflow_runs',
+    'devflow_knowledge_entries',
+    'devflow_tool_calls',
+    'devflow_rules',
+    'devflow_audit_chain',
+    'devflow_context_receipts',
+];
+exports.DEVFLOW_SCHEMA_SQL = `
+  CREATE TABLE IF NOT EXISTS devflow_kv (
+    key TEXT PRIMARY KEY, value TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_sessions (
+    session_id TEXT, timestamp INTEGER, event TEXT, data TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_telemetry_runs (
+    id TEXT PRIMARY KEY, agent TEXT, mode TEXT, status TEXT,
+    started_at INTEGER, finished_at INTEGER, token_used INTEGER, data TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_benchmark_reports (
+    id TEXT PRIMARY KEY, task TEXT, score REAL, started_at INTEGER,
+    finished_at INTEGER, data TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_workflow_runs (
+    run_id TEXT PRIMARY KEY, type TEXT, status TEXT, input TEXT,
+    steps TEXT, started_at INTEGER, finished_at INTEGER,
+    failure_category TEXT, failure_reason TEXT, failure_evidence TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_knowledge_entries (
+    id TEXT PRIMARY KEY, source TEXT, title TEXT, content TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_tool_calls (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    tool TEXT NOT NULL,
+    args TEXT,
+    timestamp INTEGER NOT NULL,
+    duration_ms INTEGER NOT NULL,
+    error TEXT
+  );
+  CREATE TABLE IF NOT EXISTS devflow_rules (
+    id TEXT PRIMARY KEY, name TEXT NOT NULL, level TEXT NOT NULL DEFAULT 'project',
+    gate INTEGER NOT NULL DEFAULT 1,
+    condition_json TEXT NOT NULL, action TEXT NOT NULL DEFAULT 'warn',
+    message TEXT NOT NULL, enabled INTEGER NOT NULL DEFAULT 1,
+    created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL
+  );
+  CREATE TABLE IF NOT EXISTS devflow_audit_chain (
+    seq INTEGER PRIMARY KEY AUTOINCREMENT, ts INTEGER NOT NULL,
+    tool TEXT NOT NULL, args_hash TEXT NOT NULL,
+    decision TEXT NOT NULL, rule_id TEXT,
+    session_id TEXT NOT NULL, prev_hash TEXT NOT NULL,
+    signature TEXT NOT NULL
+  );
+  CREATE TABLE IF NOT EXISTS devflow_context_receipts (
+    project_root TEXT NOT NULL,
+    session_id TEXT NOT NULL,
+    execution_id TEXT NOT NULL,
+    context_hash TEXT NOT NULL,
+    issued_at INTEGER NOT NULL,
+    expires_at INTEGER NOT NULL,
+    selected_files TEXT NOT NULL DEFAULT '[]',
+    memory_ids TEXT NOT NULL DEFAULT '[]',
+    canonical_next_action TEXT,
+    canonical_action_json TEXT,
+    action_attempts TEXT NOT NULL DEFAULT '[]',
+    action_satisfied_at INTEGER,
+    action_degradation_json TEXT,
+    request_id TEXT,
+    PRIMARY KEY (project_root, session_id, execution_id)
+  );
+  CREATE INDEX IF NOT EXISTS idx_context_receipts_expiry
+    ON devflow_context_receipts(expires_at);
+`;