@dommaker/harness 0.8.0 → 0.8.3

package/README.md

@@ -78,6 +78,12 @@ harness contract --contract-path api/openapi.yaml
 harness review                          # PR 审查状态检查
 harness review --min-reviewers 2        # 要求 2 个审批
 harness review status                   # PR 详情
+
+# 命令黑名单
+harness command "rm -rf /"             # 检查命令
+harness command --level "DROP TABLE"   # 显示风险等级
+harness command --list                  # 列出所有规则
+harness cmd                              # 别名
 ```
 
 ### Spec 验证
@@ -135,7 +141,7 @@ harness flow --auto-apply             # 自动应用低风险提案
 | `verify_external_capability` | 外部能力先验证 |
 | `no_implementation_without_requirement_review` | 实现后对比需求 |
 
-### 7 种门禁（均有 CLI 命令）
+### 8 种门禁（均有 CLI 命令）
 
 | 门禁 | CLI 命令 | 用途 |
 |------|:--------:|------|
@@ -145,9 +151,8 @@ harness flow --auto-apply             # 自动应用低风险提案
 | SecurityGate | `security` / `sec` | 安全检查 |
 | ContractGate | `contract` | API 契约验证 |
 | ReviewGate | `review` | PR 审核检查 |
+| CommandGate | `command` / `cmd` | 命令黑名单 |
 | CheckpointValidator | `validate` | 检查点验证 |
-| CheckpointValidator | 检查点验证 |
-| SpecAcceptanceGate | 验收标准检查 |
 
 ---
 
@@ -157,8 +162,8 @@ harness flow --auto-apply             # 自动应用低风险提案
 import {
   IronLawChecker,
   PassesGate,
+  CommandGate,
   CheckpointValidator,
-  interceptOperation,
 } from '@dommaker/harness';
 
 // 铁律检查
@@ -169,17 +174,15 @@ const results = await checker.checkAll(context);
 const gate = new PassesGate({ requireEvidence: true });
 const passed = await gate.runTests();
 
-// 检查点验证
-const validator = CheckpointValidator.getInstance();
-const result = await validator.validate(checkpoints, context);
-
-// 拦截器（自动执行 enforcement）
-await interceptOperation('task_completion_claim', context);
+// 命令黑名单
+const commandGate = new CommandGate();
+const result = await commandGate.check('rm -rf /');
+// { passed: false, message: '命令被禁止执行...' }
 ```
 
----
+> 详细 API 参考：[capabilities/](capabilities/) 目录
 
-## 📁 项目配置
+---
 
 ### .harness/config.yml
 

package/bin/harness.js

@@ -27,7 +27,9 @@ const {
   contract,
   validateSchema,
   review,
-  reviewStatus
+  reviewStatus,
+  command,
+  cmd
 } = require('../dist/cli/commands/index');
 
 const program = new Command();
@@ -295,5 +297,70 @@ program
     }
   });
 
+// ========================================
+// harness command
+// ========================================
+program
+  .command('command [cmd]')
+  .description('检查命令是否在黑名单中')
+  .alias('cmd')
+  .option('-l, --level', '显示风险等级')
+  .option('--list', '列出所有黑名单规则')
+  .option('--json', 'JSON 格式输出')
+  .option('--strict', '严格模式（warn 也阻止）')
+  .action(async (cmd, options, command) => {
+    const gate = require('../dist/gates/command').createCommandGate({ strict: options.strict });
+    
+    if (options.list) {
+      const { DEFAULT_COMMAND_BLACKLIST } = require('../dist/gates/command');
+      if (options.json) {
+        console.log(JSON.stringify(DEFAULT_COMMAND_BLACKLIST.map(r => ({
+          id: r.id,
+          level: r.level,
+          message: r.message,
+          category: r.category,
+        })), null, 2));
+      } else {
+        console.log('\n命令黑名单规则：\n');
+        console.log(`共 ${DEFAULT_COMMAND_BLACKLIST.length} 条规则`);
+        console.log('使用 harness command --list --json 查看详情');
+      }
+      return;
+    }
+    
+    if (!cmd) {
+      console.error('错误：请提供要检查的命令');
+      console.error('用法：harness command "your command"');
+      process.exit(1);
+    }
+    
+    const result = await gate.check(cmd);
+    
+    if (options.level) {
+      const { getCommandRiskLevel } = require('../dist/gates/command');
+      const level = getCommandRiskLevel(cmd);
+      if (options.json) {
+        console.log(JSON.stringify({ level, command: cmd }));
+      } else {
+        const levelColors = { high: '\x1b[31m', medium: '\x1b[33m', low: '\x1b[32m' };
+        console.log(`${levelColors[level]}${level}\x1b[0m ${cmd}`);
+      }
+      process.exit(level === 'high' ? 1 : 0);
+    }
+    
+    if (options.json) {
+      console.log(JSON.stringify({
+        command: cmd,
+        passed: result.passed,
+        message: result.message,
+        details: result.details,
+      }, null, 2));
+    } else {
+      console.log(result.passed ? `\x1b[32m✓\x1b[0m ${result.message}` : `\x1b[31m✗\x1b[0m ${result.message}`);
+    }
+    
+    process.exit(result.passed ? 0 : 1);
+  });
+
 // 解析命令行参数
 program.parse();

package/dist/cli/commands/command.d.ts

@@ -0,0 +1,12 @@
+/**
+ * 命令黑名单检查
+ *
+ * 用法：
+ *   harness command "rm -rf /"
+ *   harness command --level "DROP TABLE users"
+ *   harness command --list
+ */
+import { Command } from 'commander';
+export declare const command: Command;
+export declare const cmd: Command;
+//# sourceMappingURL=command.d.ts.map

package/dist/cli/commands/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,eAAO,MAAM,OAAO,SAoFhB,CAAC;AAGL,eAAO,MAAM,GAAG,SAmDZ,CAAC"}

package/dist/cli/commands/command.js

@@ -0,0 +1,145 @@
+"use strict";
+/**
+ * 命令黑名单检查
+ *
+ * 用法：
+ *   harness command "rm -rf /"
+ *   harness command --level "DROP TABLE users"
+ *   harness command --list
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmd = exports.command = void 0;
+const commander_1 = require("commander");
+const gates_1 = require("../../gates");
+exports.command = new commander_1.Command('command')
+    .description('检查命令是否在黑名单中')
+    .argument('[cmd]', '要检查的命令')
+    .option('-l, --level', '显示风险等级')
+    .option('--list', '列出所有黑名单规则')
+    .option('--json', 'JSON 格式输出')
+    .option('--strict', '严格模式（warn 也阻止）')
+    .action(async (cmd, options) => {
+    // 列出所有规则
+    if (options.list) {
+        if (options.json) {
+            console.log(JSON.stringify(gates_1.DEFAULT_COMMAND_BLACKLIST.map((r) => ({
+                id: r.id,
+                level: r.level,
+                message: r.message,
+                category: r.category,
+            })), null, 2));
+        }
+        else {
+            console.log('\n命令黑名单规则：\n');
+            const byCategory = gates_1.DEFAULT_COMMAND_BLACKLIST.reduce((acc, rule) => {
+                if (!acc[rule.category])
+                    acc[rule.category] = [];
+                acc[rule.category].push(rule);
+                return acc;
+            }, {});
+            for (const [category, rules] of Object.entries(byCategory)) {
+                console.log(`[${category}]`);
+                for (const rule of rules) {
+                    const levelIcon = rule.level === 'block' ? '🚫' : rule.level === 'warn' ? '⚠️' : '📋';
+                    console.log(`  ${levelIcon} ${rule.id}: ${rule.message} (${rule.level})`);
+                }
+                console.log();
+            }
+            console.log(`共 ${gates_1.DEFAULT_COMMAND_BLACKLIST.length} 条规则`);
+        }
+        return;
+    }
+    // 需要命令参数
+    if (!cmd) {
+        console.error('错误：请提供要检查的命令');
+        console.error('用法：harness command "your command"');
+        process.exit(1);
+    }
+    // 创建门禁
+    const gate = (0, gates_1.createCommandGate)({ strict: options.strict });
+    const result = await gate.check(cmd);
+    if (options.level) {
+        // 只显示风险等级
+        const level = (0, gates_1.getCommandRiskLevel)(cmd);
+        if (options.json) {
+            console.log(JSON.stringify({ level, command: cmd }));
+        }
+        else {
+            const levelColors = {
+                high: '\x1b[31m',
+                medium: '\x1b[33m',
+                low: '\x1b[32m',
+            };
+            console.log(`${levelColors[level]}${level}\x1b[0m ${cmd}`);
+        }
+        process.exit(level === 'high' ? 1 : 0);
+    }
+    // 完整检查
+    if (options.json) {
+        console.log(JSON.stringify({
+            command: cmd,
+            passed: result.passed,
+            message: result.message,
+            details: result.details,
+        }, null, 2));
+    }
+    else {
+        if (result.passed) {
+            console.log(`\x1b[32m✓\x1b[0m ${result.message}`);
+        }
+        else {
+            console.log(`\x1b[31m✗\x1b[0m ${result.message}`);
+        }
+    }
+    process.exit(result.passed ? 0 : 1);
+});
+// 别名
+exports.cmd = new commander_1.Command('cmd')
+    .description('命令黑名单检查（command 的别名）')
+    .argument('[cmd]', '要检查的命令')
+    .option('-l, --level', '显示风险等级')
+    .option('--list', '列出所有黑名单规则')
+    .option('--json', 'JSON 格式输出')
+    .option('--strict', '严格模式（warn 也阻止）')
+    .action(async (cmd, options) => {
+    // 复用 command 的逻辑
+    const gate = (0, gates_1.createCommandGate)({ strict: options.strict });
+    if (options.list) {
+        if (options.json) {
+            console.log(JSON.stringify(gates_1.DEFAULT_COMMAND_BLACKLIST.map((r) => ({
+                id: r.id,
+                level: r.level,
+                message: r.message,
+                category: r.category,
+            })), null, 2));
+        }
+        else {
+            console.log('\n命令黑名单规则：\n');
+            console.log(`共 ${gates_1.DEFAULT_COMMAND_BLACKLIST.length} 条规则`);
+            console.log('使用 harness command --list 查看详情');
+        }
+        return;
+    }
+    if (!cmd) {
+        console.error('错误：请提供要检查的命令');
+        process.exit(1);
+    }
+    const result = await gate.check(cmd);
+    if (options.level) {
+        const level = (0, gates_1.getCommandRiskLevel)(cmd);
+        console.log(level);
+        process.exit(level === 'high' ? 1 : 0);
+    }
+    if (options.json) {
+        console.log(JSON.stringify({
+            command: cmd,
+            passed: result.passed,
+            message: result.message,
+        }, null, 2));
+    }
+    else {
+        console.log(result.passed ? `\x1b[32m✓\x1b[0m` : `\x1b[31m✗\x1b[0m ${result.message}`);
+    }
+    process.exit(result.passed ? 0 : 1);
+});
+//# sourceMappingURL=command.js.map

package/dist/cli/commands/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/cli/commands/command.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,yCAAoC;AACpC,uCAA2H;AAE9G,QAAA,OAAO,GAAG,IAAI,mBAAO,CAAC,SAAS,CAAC;KAC1C,WAAW,CAAC,aAAa,CAAC;KAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC3B,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC;KAC/B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC7B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC7B,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC;KACpC,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,OAA8E,EAAE,EAAE;IACxH,SAAS;IACT,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,iCAAyB,CAAC,GAAG,CAAC,CAAC,CAAuB,EAAE,EAAE,CAAC,CAAC;gBACrF,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAE5B,MAAM,UAAU,GAAG,iCAAyB,CAAC,MAAM,CAAC,CAAC,GAA2C,EAAE,IAA0B,EAAE,EAAE;gBAC9H,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACjD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9B,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAAE,CAAC,CAAC;YAEP,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;gBAC7B,KAAK,MAAM,IAAI,IAAI,KAA+B,EAAE,CAAC;oBACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtF,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,iCAAyB,CAAC,MAAM,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;IACT,CAAC;IAED,SAAS;IACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;IACP,MAAM,IAAI,GAAG,IAAA,yBAAiB,EAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,UAAU;QACV,MAAM,KAAK,GAAG,IAAA,2BAAmB,EAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAA2B;gBAC1C,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,UAAU;aAChB,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,KAAK,WAAW,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,OAAO;IACP,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEL,KAAK;AACQ,QAAA,GAAG,GAAG,IAAI,mBAAO,CAAC,KAAK,CAAC;KAClC,WAAW,CAAC,sBAAsB,CAAC;KACnC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC3B,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC;KAC/B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC7B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC7B,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC;KACpC,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,OAA8E,EAAE,EAAE;IACxH,iBAAiB;IACjB,MAAM,IAAI,GAAG,IAAA,yBAAiB,EAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE3D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,iCAAyB,CAAC,GAAG,CAAC,CAAC,CAAuB,EAAE,EAAE,CAAC,CAAC;gBACrF,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,iCAAyB,CAAC,MAAM,MAAM,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAA,2BAAmB,EAAC,GAAG,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC"}

package/dist/cli/commands/index.d.ts

@@ -14,4 +14,5 @@ export { performance, type PerformanceOptions } from './performance';
 export { security, auditDetails, type SecurityOptions } from './security';
 export { contract, validateSchema, type ContractOptions } from './contract';
 export { review, reviewStatus, type ReviewOptions } from './review';
+export { command, cmd } from './command';
 //# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC"}

package/dist/cli/commands/index.js

@@ -3,7 +3,7 @@
  * CLI 命令导出
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.reviewStatus = exports.review = exports.validateSchema = exports.contract = exports.auditDetails = exports.security = exports.performance = exports.listAcceptanceCriteria = exports.acceptance = exports.listSpecTypes = exports.specValidate = exports.flow = exports.status = exports.report = exports.init = exports.checkCoverage = exports.runPassesGate = exports.createExampleCheckpoint = exports.validate = exports.listLaws = exports.check = void 0;
+exports.cmd = exports.command = exports.reviewStatus = exports.review = exports.validateSchema = exports.contract = exports.auditDetails = exports.security = exports.performance = exports.listAcceptanceCriteria = exports.acceptance = exports.listSpecTypes = exports.specValidate = exports.flow = exports.status = exports.report = exports.init = exports.checkCoverage = exports.runPassesGate = exports.createExampleCheckpoint = exports.validate = exports.listLaws = exports.check = void 0;
 var check_1 = require("./check");
 Object.defineProperty(exports, "check", { enumerable: true, get: function () { return check_1.check; } });
 Object.defineProperty(exports, "listLaws", { enumerable: true, get: function () { return check_1.listLaws; } });
@@ -38,4 +38,7 @@ Object.defineProperty(exports, "validateSchema", { enumerable: true, get: functi
 var review_1 = require("./review");
 Object.defineProperty(exports, "review", { enumerable: true, get: function () { return review_1.review; } });
 Object.defineProperty(exports, "reviewStatus", { enumerable: true, get: function () { return review_1.reviewStatus; } });
+var command_1 = require("./command");
+Object.defineProperty(exports, "command", { enumerable: true, get: function () { return command_1.command; } });
+Object.defineProperty(exports, "cmd", { enumerable: true, get: function () { return command_1.cmd; } });
 //# sourceMappingURL=index.js.map

package/dist/cli/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,iCAA6D;AAApD,8FAAA,KAAK,OAAA;AAAE,iGAAA,QAAQ,OAAA;AACxB,uCAAqF;AAA5E,oGAAA,QAAQ,OAAA;AAAE,mHAAA,uBAAuB,OAAA;AAC1C,6CAAqF;AAA5E,4GAAA,aAAa,OAAA;AAAE,4GAAA,aAAa,OAAA;AACrC,+BAAgD;AAAvC,4FAAA,IAAI,OAAA;AACb,mCAAsD;AAA7C,gGAAA,MAAM,OAAA;AACf,mCAAsD;AAA7C,gGAAA,MAAM,OAAA;AACf,+BAAgD;AAAvC,4FAAA,IAAI,OAAA;AACb,+BAA+E;AAAtE,oGAAA,YAAY,OAAA;AAAE,qGAAA,aAAa,OAAA;AACpC,2CAA0F;AAAjF,wGAAA,UAAU,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAC3C,6CAAqE;AAA5D,0GAAA,WAAW,OAAA;AACpB,uCAA0E;AAAjE,oGAAA,QAAQ,OAAA;AAAE,wGAAA,YAAY,OAAA;AAC/B,uCAA4E;AAAnE,oGAAA,QAAQ,OAAA;AAAE,0GAAA,cAAc,OAAA;AACjC,mCAAoE;AAA3D,gGAAA,MAAM,OAAA;AAAE,sGAAA,YAAY,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,iCAA6D;AAApD,8FAAA,KAAK,OAAA;AAAE,iGAAA,QAAQ,OAAA;AACxB,uCAAqF;AAA5E,oGAAA,QAAQ,OAAA;AAAE,mHAAA,uBAAuB,OAAA;AAC1C,6CAAqF;AAA5E,4GAAA,aAAa,OAAA;AAAE,4GAAA,aAAa,OAAA;AACrC,+BAAgD;AAAvC,4FAAA,IAAI,OAAA;AACb,mCAAsD;AAA7C,gGAAA,MAAM,OAAA;AACf,mCAAsD;AAA7C,gGAAA,MAAM,OAAA;AACf,+BAAgD;AAAvC,4FAAA,IAAI,OAAA;AACb,+BAA+E;AAAtE,oGAAA,YAAY,OAAA;AAAE,qGAAA,aAAa,OAAA;AACpC,2CAA0F;AAAjF,wGAAA,UAAU,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAC3C,6CAAqE;AAA5D,0GAAA,WAAW,OAAA;AACpB,uCAA0E;AAAjE,oGAAA,QAAQ,OAAA;AAAE,wGAAA,YAAY,OAAA;AAC/B,uCAA4E;AAAnE,oGAAA,QAAQ,OAAA;AAAE,0GAAA,cAAc,OAAA;AACjC,mCAAoE;AAA3D,gGAAA,MAAM,OAAA;AAAE,sGAAA,YAAY,OAAA;AAC7B,qCAAyC;AAAhC,kGAAA,OAAO,OAAA;AAAE,8FAAA,GAAG,OAAA"}

package/dist/gates/command.d.ts

@@ -0,0 +1,85 @@
+/**
+ * 命令门禁 - Command Gate
+ * SEC-006: 命令黑名单
+ *
+ * 检查命令是否安全，防止执行危险操作
+ */
+import type { GateResult, CommandGateConfig, CommandBlacklistRule } from './types';
+/**
+ * 黑名单级别
+ */
+export type BlacklistLevel = 'block' | 'warn' | 'audit';
+/**
+ * 默认黑名单规则
+ *
+ * 级别说明：
+ * - block: 禁止执行，直接拒绝
+ * - warn: 允许执行，但记录警告
+ * - audit: 允许执行，但记录审计日志
+ */
+export declare const DEFAULT_COMMAND_BLACKLIST: CommandBlacklistRule[];
+/**
+ * 命令门禁
+ */
+export declare class CommandGate {
+    private config;
+    private blacklist;
+    constructor(config?: Partial<CommandGateConfig>);
+    /**
+     * 检查命令
+     */
+    check(command: string): Promise<GateResult>;
+    /**
+     * 检查黑名单
+     */
+    private checkBlacklist;
+    /**
+     * 格式化成功消息
+     */
+    private formatSuccessMessage;
+    /**
+     * 格式化阻止消息
+     */
+    private formatBlockMessage;
+    /**
+     * 快速检查（不生成完整 GateResult）
+     */
+    isAllowed(command: string): boolean;
+    /**
+     * 获取命令风险等级
+     */
+    getRiskLevel(command: string): 'high' | 'medium' | 'low';
+    /**
+     * 获取黑名单规则
+     */
+    getBlacklist(): CommandBlacklistRule[];
+    /**
+     * 添加自定义规则
+     */
+    addRule(rule: CommandBlacklistRule): void;
+    /**
+     * 移除规则
+     */
+    removeRule(id: string): boolean;
+    /**
+     * 获取配置
+     */
+    getConfig(): Required<CommandGateConfig>;
+}
+/**
+ * 创建命令门禁
+ */
+export declare function createCommandGate(config?: Partial<CommandGateConfig>): CommandGate;
+/**
+ * 获取默认命令门禁
+ */
+export declare function getCommandGate(): CommandGate;
+/**
+ * 快速检查命令是否允许
+ */
+export declare function isCommandAllowed(command: string): boolean;
+/**
+ * 快速获取命令风险等级
+ */
+export declare function getCommandRiskLevel(command: string): 'high' | 'medium' | 'low';
+//# sourceMappingURL=command.d.ts.map

package/dist/gates/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/gates/command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEnF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAExD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,oBAAoB,EA0K3D,CAAC;AAEF;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,SAAS,CAAyB;gBAE9B,MAAM,GAAE,OAAO,CAAC,iBAAiB,CAAM;IAenD;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAgCjD;;OAEG;IACH,OAAO,CAAC,cAAc;IAuCtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAiB5B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAe1B;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAgBnC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK;IAoBxD;;OAEG;IACH,YAAY,IAAI,oBAAoB,EAAE;IAItC;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI;IAIzC;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAS/B;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,iBAAiB,CAAC;CAGzC;AAID;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,WAAW,CAElF;AAOD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAE9E"}

package/dist/gates/command.js

@@ -0,0 +1,392 @@
+"use strict";
+/**
+ * 命令门禁 - Command Gate
+ * SEC-006: 命令黑名单
+ *
+ * 检查命令是否安全，防止执行危险操作
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CommandGate = exports.DEFAULT_COMMAND_BLACKLIST = void 0;
+exports.createCommandGate = createCommandGate;
+exports.getCommandGate = getCommandGate;
+exports.isCommandAllowed = isCommandAllowed;
+exports.getCommandRiskLevel = getCommandRiskLevel;
+/**
+ * 默认黑名单规则
+ *
+ * 级别说明：
+ * - block: 禁止执行，直接拒绝
+ * - warn: 允许执行，但记录警告
+ * - audit: 允许执行，但记录审计日志
+ */
+exports.DEFAULT_COMMAND_BLACKLIST = [
+    // ========== 系统级破坏命令 ==========
+    {
+        id: 'rm-rf-root',
+        pattern: /\brm\s+(-[rf]+\s+)*\/\s*$/i,
+        level: 'block',
+        message: '禁止删除根目录',
+        category: 'system',
+    },
+    {
+        id: 'rm-rf-star',
+        pattern: /\brm\s+(-[rf]+\s+)*\*+/i,
+        level: 'block',
+        message: '禁止通配符删除',
+        category: 'system',
+    },
+    {
+        id: 'rm-rf-home',
+        pattern: /\brm\s+(-[rf]+\s+)*(~|\/home)/i,
+        level: 'block',
+        message: '禁止删除用户目录',
+        category: 'system',
+    },
+    {
+        id: 'rm-rf-project',
+        pattern: /\brm\s+(-[rf]+\s+)*\.\s*$/i,
+        level: 'block',
+        message: '禁止删除当前目录',
+        category: 'system',
+    },
+    // ========== 权限相关 ==========
+    {
+        id: 'chmod-777',
+        pattern: /\bchmod\s+(-R\s+)?777\b/i,
+        level: 'block',
+        message: '禁止设置 777 权限',
+        category: 'permission',
+    },
+    {
+        id: 'chown-root',
+        pattern: /\bchown\s+(-R\s+)?root\b/i,
+        level: 'warn',
+        message: '谨慎修改所有者为 root',
+        category: 'permission',
+    },
+    // ========== 数据库危险命令 ==========
+    {
+        id: 'drop-database',
+        pattern: /\bDROP\s+(DATABASE|SCHEMA)\b/i,
+        level: 'block',
+        message: '禁止删除数据库/Schema',
+        category: 'database',
+    },
+    {
+        id: 'drop-table',
+        pattern: /\bDROP\s+TABLE\b/i,
+        level: 'warn',
+        message: '删除表操作需要确认',
+        category: 'database',
+    },
+    {
+        id: 'truncate-table',
+        pattern: /\bTRUNCATE\s+TABLE?\b/i,
+        level: 'warn',
+        message: '清空表操作需要确认',
+        category: 'database',
+    },
+    {
+        id: 'delete-all',
+        pattern: /\bDELETE\s+FROM\b(?!.*\bWHERE\b)/i,
+        level: 'block',
+        message: '禁止无条件删除',
+        category: 'database',
+    },
+    // ========== 网络相关 ==========
+    {
+        id: 'iptables-flush',
+        pattern: /\biptables\s+(-F|--flush)\b/i,
+        level: 'block',
+        message: '禁止清空防火墙规则',
+        category: 'network',
+    },
+    {
+        id: 'curl-bash',
+        pattern: /\bcurl\b.*\|\s*(sudo\s+)?bash\b/i,
+        level: 'block',
+        message: '禁止从网络直接执行脚本',
+        category: 'network',
+    },
+    {
+        id: 'wget-bash',
+        pattern: /\bwget\b.*\|\s*(sudo\s+)?bash\b/i,
+        level: 'block',
+        message: '禁止从网络直接执行脚本',
+        category: 'network',
+    },
+    // ========== 特权命令 ==========
+    {
+        id: 'sudo-rm',
+        pattern: /\bsudo\s+.*\brm\s+/i,
+        level: 'block',
+        message: '禁止 sudo rm',
+        category: 'privilege',
+    },
+    {
+        id: 'sudo-dd',
+        pattern: /\bsudo\s+.*\bdd\b/i,
+        level: 'block',
+        message: '禁止 sudo dd',
+        category: 'privilege',
+    },
+    {
+        id: 'sudo-fdisk',
+        pattern: /\bsudo\s+.*\b(fdisk|parted)\b/i,
+        level: 'block',
+        message: '禁止 sudo 磁盘分区操作',
+        category: 'privilege',
+    },
+    // ========== 敏感文件 ==========
+    {
+        id: 'read-ssh-key',
+        pattern: /\bcat\s+.*\/\.ssh\/(id_rsa|id_ed25519)/i,
+        level: 'audit',
+        message: '读取 SSH 私钥',
+        category: 'sensitive',
+    },
+    {
+        id: 'read-env',
+        pattern: /\bcat\s+.*\.env\b/i,
+        level: 'audit',
+        message: '读取 .env 文件',
+        category: 'sensitive',
+    },
+    // ========== 进程管理 ==========
+    {
+        id: 'kill-all',
+        pattern: /\bkill\s+(-9\s+)?-1\b/i,
+        level: 'block',
+        message: '禁止杀死所有进程',
+        category: 'process',
+    },
+    {
+        id: 'killall',
+        pattern: /\bkillall\s+/i,
+        level: 'warn',
+        message: '批量杀死进程需要确认',
+        category: 'process',
+    },
+    // ========== 包管理 ==========
+    {
+        id: 'npm-uninstall-global',
+        pattern: /\bnpm\s+(uninstall|remove)\s+(-g|--global)\b/i,
+        level: 'warn',
+        message: '卸载全局包需要确认',
+        category: 'package',
+    },
+    {
+        id: 'pip-uninstall',
+        pattern: /\bpip\s+uninstall\s+/i,
+        level: 'warn',
+        message: '卸载 Python 包需要确认',
+        category: 'package',
+    },
+];
+/**
+ * 命令门禁
+ */
+class CommandGate {
+    config;
+    blacklist;
+    constructor(config = {}) {
+        this.config = {
+            enabled: config.enabled ?? true,
+            strict: config.strict ?? false,
+            customBlacklist: config.customBlacklist ?? [],
+            ignoreCategories: config.ignoreCategories ?? [],
+        };
+        // 合并默认黑名单和自定义黑名单
+        this.blacklist = [
+            ...exports.DEFAULT_COMMAND_BLACKLIST,
+            ...this.config.customBlacklist,
+        ];
+    }
+    /**
+     * 检查命令
+     */
+    async check(command) {
+        const startTime = Date.now();
+        if (!this.config.enabled) {
+            return {
+                gate: 'command',
+                passed: true,
+                message: '命令门禁已禁用',
+                timestamp: new Date().toISOString(),
+                duration: Date.now() - startTime,
+            };
+        }
+        const result = this.checkBlacklist(command);
+        return {
+            gate: 'command',
+            passed: result.allowed,
+            message: result.allowed
+                ? this.formatSuccessMessage(result)
+                : this.formatBlockMessage(result),
+            details: {
+                blocked: result.blocked,
+                warnings: result.warnings,
+                audits: result.audits,
+                command,
+            },
+            timestamp: new Date().toISOString(),
+            duration: Date.now() - startTime,
+        };
+    }
+    /**
+     * 检查黑名单
+     */
+    checkBlacklist(command) {
+        const blocked = [];
+        const warnings = [];
+        const audits = [];
+        for (const rule of this.blacklist) {
+            // 跳过忽略的类别
+            if (this.config.ignoreCategories.includes(rule.category)) {
+                continue;
+            }
+            if (rule.pattern.test(command)) {
+                switch (rule.level) {
+                    case 'block':
+                        blocked.push(rule);
+                        break;
+                    case 'warn':
+                        warnings.push(rule);
+                        break;
+                    case 'audit':
+                        audits.push(rule);
+                        break;
+                }
+            }
+        }
+        return {
+            allowed: blocked.length === 0,
+            blocked,
+            warnings,
+            audits,
+        };
+    }
+    /**
+     * 格式化成功消息
+     */
+    formatSuccessMessage(result) {
+        const parts = ['命令检查通过'];
+        if (result.warnings.length > 0) {
+            parts.push(`，${result.warnings.length} 个警告`);
+        }
+        if (result.audits.length > 0) {
+            parts.push(`，${result.audits.length} 个审计记录`);
+        }
+        return parts.join('');
+    }
+    /**
+     * 格式化阻止消息
+     */
+    formatBlockMessage(result) {
+        const lines = [];
+        lines.push('命令被禁止执行：');
+        for (const rule of result.blocked) {
+            lines.push(`  - [${rule.id}] ${rule.message} (${rule.category})`);
+        }
+        return lines.join('\n');
+    }
+    /**
+     * 快速检查（不生成完整 GateResult）
+     */
+    isAllowed(command) {
+        if (!this.config.enabled)
+            return true;
+        for (const rule of this.blacklist) {
+            if (this.config.ignoreCategories.includes(rule.category)) {
+                continue;
+            }
+            if (rule.level === 'block' && rule.pattern.test(command)) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * 获取命令风险等级
+     */
+    getRiskLevel(command) {
+        if (!this.config.enabled)
+            return 'low';
+        for (const rule of this.blacklist) {
+            if (this.config.ignoreCategories.includes(rule.category)) {
+                continue;
+            }
+            if (rule.pattern.test(command)) {
+                switch (rule.level) {
+                    case 'block': return 'high';
+                    case 'warn': return 'medium';
+                    case 'audit': return 'low';
+                }
+            }
+        }
+        return 'low';
+    }
+    /**
+     * 获取黑名单规则
+     */
+    getBlacklist() {
+        return [...this.blacklist];
+    }
+    /**
+     * 添加自定义规则
+     */
+    addRule(rule) {
+        this.blacklist.push(rule);
+    }
+    /**
+     * 移除规则
+     */
+    removeRule(id) {
+        const index = this.blacklist.findIndex(r => r.id === id);
+        if (index >= 0) {
+            this.blacklist.splice(index, 1);
+            return true;
+        }
+        return false;
+    }
+    /**
+     * 获取配置
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+exports.CommandGate = CommandGate;
+// ========== 便捷函数 ==========
+/**
+ * 创建命令门禁
+ */
+function createCommandGate(config) {
+    return new CommandGate(config);
+}
+/**
+ * 默认实例
+ */
+let defaultCommandGate = null;
+/**
+ * 获取默认命令门禁
+ */
+function getCommandGate() {
+    if (!defaultCommandGate) {
+        defaultCommandGate = new CommandGate();
+    }
+    return defaultCommandGate;
+}
+/**
+ * 快速检查命令是否允许
+ */
+function isCommandAllowed(command) {
+    return getCommandGate().isAllowed(command);
+}
+/**
+ * 快速获取命令风险等级
+ */
+function getCommandRiskLevel(command) {
+    return getCommandGate().getRiskLevel(command);
+}
+//# sourceMappingURL=command.js.map

package/dist/gates/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/gates/command.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAuZH,8CAEC;AAUD,wCAKC;AAKD,4CAEC;AAKD,kDAEC;AA7aD;;;;;;;GAOG;AACU,QAAA,yBAAyB,GAA2B;IAC/D,gCAAgC;IAChC;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,4BAA4B;QACrC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,4BAA4B;QACrC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,QAAQ;KACnB;IAED,6BAA6B;IAC7B;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,2BAA2B;QACpC,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,YAAY;KACvB;IAED,gCAAgC;IAChC;QACE,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,+BAA+B;QACxC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,mCAAmC;QAC5C,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,UAAU;KACrB;IAED,6BAA6B;IAC7B;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;KACpB;IAED,6BAA6B;IAC7B;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,oBAAoB;QAC7B,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,WAAW;KACtB;IAED,6BAA6B;IAC7B;QACE,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,oBAAoB;QAC7B,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,WAAW;KACtB;IAED,6BAA6B;IAC7B;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,SAAS;KACpB;IAED,4BAA4B;IAC5B;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,+CAA+C;QACxD,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,uBAAuB;QAChC,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,SAAS;KACpB;CACF,CAAC;AAEF;;GAEG;AACH,MAAa,WAAW;IACd,MAAM,CAA8B;IACpC,SAAS,CAAyB;IAE1C,YAAY,SAAqC,EAAE;QACjD,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;YAC9B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;YAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE;SAChD,CAAC;QAEF,iBAAiB;QACjB,IAAI,CAAC,SAAS,GAAG;YACf,GAAG,iCAAyB;YAC5B,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,OAAe;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAE5C,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACrB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBACnC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YACnC,OAAO,EAAE;gBACP,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO;aACR;YACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,OAAe;QAMpC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,UAAU;YACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,OAAO;wBACV,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACnB,MAAM;oBACR,KAAK,MAAM;wBACT,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACpB,MAAM;oBACR,KAAK,OAAO;wBACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAClB,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC7B,OAAO;YACP,QAAQ;YACR,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,MAG5B;QACC,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAI1B;QACC,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,OAAe;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAe;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;oBAC5B,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC;oBAC7B,KAAK,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAA0B;QAChC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,EAAU;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AAhND,kCAgNC;AAED,6BAA6B;AAE7B;;GAEG;AACH,SAAgB,iBAAiB,CAAC,MAAmC;IACnE,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,IAAI,kBAAkB,GAAuB,IAAI,CAAC;AAElD;;GAEG;AACH,SAAgB,cAAc;IAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,IAAI,WAAW,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,cAAc,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAe;IACjD,OAAO,cAAc,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/gates/index.d.ts

@@ -3,12 +3,13 @@
  *
  * 统一导出所有门禁类型
  */
-export type { GateResult, GateContext, PerformanceThresholds, ReviewGateConfig, SecurityGateConfig, PerformanceGateConfig, ContractGateConfig, SpecAcceptanceGateConfig, AcceptanceGateContext, AcceptanceCriteria, } from './types';
+export type { GateResult, GateContext, PerformanceThresholds, ReviewGateConfig, SecurityGateConfig, PerformanceGateConfig, ContractGateConfig, SpecAcceptanceGateConfig, AcceptanceGateContext, AcceptanceCriteria, CommandBlacklistRule, CommandGateConfig, } from './types';
 export { ReviewGate } from './review';
 export { SecurityGate } from './security';
 export { PerformanceGate } from './performance';
 export { ContractGate } from './contract';
 export { SpecAcceptanceGate } from './acceptance';
+export { CommandGate, createCommandGate, getCommandGate, isCommandAllowed, getCommandRiskLevel, DEFAULT_COMMAND_BLACKLIST } from './command';
 import { ReviewGate } from './review';
 import { SecurityGate } from './security';
 import { PerformanceGate } from './performance';

package/dist/gates/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,UAAU,EACV,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAEjB,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAE/E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAErF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,eAAe,CAE9F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAErF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,kBAAkB,CAEvG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,UAAU,EACV,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAG7I,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EAEzB,MAAM,SAAS,CAAC;AAEjB,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAE/E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAErF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,eAAe,CAE9F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAErF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,kBAAkB,CAEvG"}

package/dist/gates/index.js

@@ -5,7 +5,7 @@
  * 统一导出所有门禁类型
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SpecAcceptanceGate = exports.ContractGate = exports.PerformanceGate = exports.SecurityGate = exports.ReviewGate = void 0;
+exports.DEFAULT_COMMAND_BLACKLIST = exports.getCommandRiskLevel = exports.isCommandAllowed = exports.getCommandGate = exports.createCommandGate = exports.CommandGate = exports.SpecAcceptanceGate = exports.ContractGate = exports.PerformanceGate = exports.SecurityGate = exports.ReviewGate = void 0;
 exports.createReviewGate = createReviewGate;
 exports.createSecurityGate = createSecurityGate;
 exports.createPerformanceGate = createPerformanceGate;
@@ -22,6 +22,13 @@ var contract_1 = require("./contract");
 Object.defineProperty(exports, "ContractGate", { enumerable: true, get: function () { return contract_1.ContractGate; } });
 var acceptance_1 = require("./acceptance");
 Object.defineProperty(exports, "SpecAcceptanceGate", { enumerable: true, get: function () { return acceptance_1.SpecAcceptanceGate; } });
+var command_1 = require("./command");
+Object.defineProperty(exports, "CommandGate", { enumerable: true, get: function () { return command_1.CommandGate; } });
+Object.defineProperty(exports, "createCommandGate", { enumerable: true, get: function () { return command_1.createCommandGate; } });
+Object.defineProperty(exports, "getCommandGate", { enumerable: true, get: function () { return command_1.getCommandGate; } });
+Object.defineProperty(exports, "isCommandAllowed", { enumerable: true, get: function () { return command_1.isCommandAllowed; } });
+Object.defineProperty(exports, "getCommandRiskLevel", { enumerable: true, get: function () { return command_1.getCommandRiskLevel; } });
+Object.defineProperty(exports, "DEFAULT_COMMAND_BLACKLIST", { enumerable: true, get: function () { return command_1.DEFAULT_COMMAND_BLACKLIST; } });
 // 便捷工厂函数
 const review_2 = require("./review");
 const security_2 = require("./security");
@@ -43,4 +50,5 @@ function createContractGate(config) {
 function createSpecAcceptanceGate(config) {
     return new acceptance_2.SpecAcceptanceGate(config);
 }
+// CommandGate 已在 command.ts 中导出 createCommandGate
 //# sourceMappingURL=index.js.map

package/dist/gates/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAqCH,4CAEC;AAED,gDAEC;AAED,sDAEC;AAED,gDAEC;AAED,4DAEC;AAvCD,QAAQ;AACR,mCAAsC;AAA7B,oGAAA,UAAU,OAAA;AACnB,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,6CAAgD;AAAvC,8GAAA,eAAe,OAAA;AACxB,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,2CAAkD;AAAzC,gHAAA,kBAAkB,OAAA;AAE3B,SAAS;AACT,qCAAsC;AACtC,yCAA0C;AAC1C,+CAAgD;AAChD,yCAA0C;AAC1C,6CAAkD;AASlD,SAAgB,gBAAgB,CAAC,MAAkC;IACjE,OAAO,IAAI,mBAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoC;IACrE,OAAO,IAAI,uBAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,qBAAqB,CAAC,MAAuC;IAC3E,OAAO,IAAI,6BAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoC;IACrE,OAAO,IAAI,uBAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAA0C;IACjF,OAAO,IAAI,+BAAkB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AA0CH,4CAEC;AAED,gDAEC;AAED,sDAEC;AAED,gDAEC;AAED,4DAEC;AA1CD,QAAQ;AACR,mCAAsC;AAA7B,oGAAA,UAAU,OAAA;AACnB,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,6CAAgD;AAAvC,8GAAA,eAAe,OAAA;AACxB,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,2CAAkD;AAAzC,gHAAA,kBAAkB,OAAA;AAC3B,qCAA6I;AAApI,sGAAA,WAAW,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,yGAAA,cAAc,OAAA;AAAE,2GAAA,gBAAgB,OAAA;AAAE,8GAAA,mBAAmB,OAAA;AAAE,oHAAA,yBAAyB,OAAA;AAEzH,SAAS;AACT,qCAAsC;AACtC,yCAA0C;AAC1C,+CAAgD;AAChD,yCAA0C;AAC1C,6CAAkD;AAWlD,SAAgB,gBAAgB,CAAC,MAAkC;IACjE,OAAO,IAAI,mBAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoC;IACrE,OAAO,IAAI,uBAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,qBAAqB,CAAC,MAAuC;IAC3E,OAAO,IAAI,6BAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoC;IACrE,OAAO,IAAI,uBAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAA0C;IACjF,OAAO,IAAI,+BAAkB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,kDAAkD"}

package/dist/gates/types.d.ts

@@ -112,4 +112,27 @@ export interface AcceptanceCriteria {
     checked?: boolean;
     notes?: string;
 }
+/**
+ * 命令黑名单规则
+ */
+export interface CommandBlacklistRule {
+    id: string;
+    pattern: RegExp;
+    level: 'block' | 'warn' | 'audit';
+    message: string;
+    category: string;
+}
+/**
+ * 命令门禁配置
+ */
+export interface CommandGateConfig {
+    /** 是否启用 */
+    enabled?: boolean;
+    /** 严格模式（warn 也阻止） */
+    strict?: boolean;
+    /** 自定义黑名单规则 */
+    customBlacklist?: CommandBlacklistRule[];
+    /** 忽略的类别 */
+    ignoreCategories?: string[];
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/gates/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/gates/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IAGpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAGrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IAGzB,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,uBAAuB,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iBAAiB,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,qBAAqB,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,mBAAmB;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc;IACd,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CAC5E;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/gates/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IAGpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAGrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IAGzB,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,uBAAuB,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iBAAiB,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,qBAAqB,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,mBAAmB;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc;IACd,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CAC5E;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW;IACX,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe;IACf,eAAe,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACzC,YAAY;IACZ,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dommaker/harness",
-  "version": "0.8.0",
+  "version": "0.8.3",
   "description": "通用工程约束框架 - 铁律系统、检查点验证、测试门控、拦截器",
   "keywords": [
     "harness",