@dommaker/harness 0.8.3 → 0.10.0

package/dist/tools/definitions/definitions/std/governance/define-stance.yml

@@ -0,0 +1,82 @@
+# define-stance.yml - 立场注入工具
+# ============================================================================
+# 类型: 治理类工具
+# 执行方式: 内置处理器
+# 用途: 注入立场 prompt，引导 Agent 以特定立场思考
+# 核心理念: 角色绑定立场，立场决定思考方式
+# ============================================================================
+
+name: define-stance
+stage: govern
+description: 注入立场 prompt（三省六部制核心工具）
+category: governance
+version: 1.0.0
+
+# 输入定义
+inputs:
+  - name: stance_id
+    type: string
+    required: true
+    description: |
+      立场 ID，可选值：
+      决策类：critic, supporter, decider
+      执行类：planner, executor, tester
+      专业类：architect, security, performance
+      审计：auditor
+  
+  - name: task
+    type: string
+    description: 当前任务描述
+  
+  - name: input_content
+    type: string
+    description: 输入内容
+  
+  - name: context
+    type: string
+    description: 上下文信息
+  
+  - name: additional_prompt
+    type: string
+    description: 额外的 prompt 内容
+
+# 输出定义
+outputs:
+  - name: injected_prompt
+    type: string
+    description: 注入立场后的完整 prompt
+  
+  - name: stance
+    type: object
+    description: 立场信息
+    properties:
+      id:
+        type: string
+      name:
+        type: string
+      nameZh:
+        type: string
+      category:
+        type: string
+  
+  - name: forbidden_actions
+    type: array
+    description: 禁止行为列表
+  
+  - name: focus_areas
+    type: array
+    description: 关注重点列表
+
+# 执行配置
+execute:
+  type: script
+  script: ./define-stance.sh
+
+# 元数据
+metadata:
+  author: Agent Studio
+  tags:
+    - governance
+    - stance
+    - prompt-injection
+    - stance-isolation

package/dist/tools/definitions/definitions/std/governance/generate-review-report.yml

@@ -0,0 +1,23 @@
+# generate-review-report.yml - 生成审核报告
+id: governance/generate-review-report
+stage: govern
+name: 生成审核报告
+description: 生成审核报告
+
+inputs:
+  - name: artifact_type
+    type: string
+    required: true
+  - name: final_decision
+    type: string
+    required: true
+  - name: opinions
+    type: array
+    required: true
+  - name: statistics
+    type: object
+    required: false
+
+outputs:
+  - name: report
+    type: object

package/dist/tools/definitions/definitions/std/governance/impeach.yml

@@ -0,0 +1,179 @@
+# impeach.yml - 弹劾步骤
+# ============================================================================
+# 类型: 治理类步骤
+# 执行方式: 内置处理器 + Agent 审核
+# 用途: 发起和处理角色弹劾流程
+# 核心理念: 独立审计发现问题，启动弹劾程序
+# ============================================================================
+
+name: impeach
+stage: govern
+description: 发起和处理角色弹劾流程
+category: governance
+version: 1.0.0
+
+# 执行配置
+execute:
+  type: builtin
+  handler: governance/impeach
+
+# 输入定义
+inputs:
+  target_id:
+    type: string
+    description: 被弹劾角色 ID
+    required: true
+  
+  reason:
+    type: string
+    description: 弹劾理由
+    required: true
+  
+  severity:
+    type: string
+    description: 弹劾严重程度
+    enum: [critical, major, minor]
+    required: true
+  
+  evidence:
+    type: array
+    description: 证据链
+    items:
+      type: string
+    required: true
+  
+  audit_report_id:
+    type: string
+    description: 关联的审计报告 ID
+    required: false
+  
+  initiated_by:
+    type: string
+    description: 发起人 ID（通常是 auditor）
+    required: true
+
+# 弹劾条件
+impeachment_conditions:
+  critical:
+    reasons:
+      - 严重失职导致重大损失
+      - 故意隐瞒问题
+      - 伪造签署文档
+      - 滥用职权
+    penalty: 解雇
+  
+  major:
+    reasons:
+      - 连续 3 个月绩效不达标
+      - 多次审核失误
+      - 违反工作流程
+    penalty: 降级 + 扣质量分
+  
+  minor:
+    reasons:
+      - 工作态度问题
+      - 沟通不畅
+      - 配合度低
+    penalty: 警告 + 扣质量分
+
+# 处理流程
+workflow:
+  step_1:
+    name: 发起弹劾
+    role: auditor
+    actions:
+      - 创建弹劾记录
+      - 收集证据
+      - 通知被弹劾角色
+  
+  step_2:
+    name: 技术负责人审核
+    role: tech-lead
+    actions:
+      - 审核证据
+      - 听取当事人陈述
+      - 做出初步判断
+  
+  step_3:
+    name: 用户裁决
+    role: owner
+    actions:
+      - 审核弹劾报告
+      - 做出最终决定
+      - 执行处罚
+
+# 处罚选项
+penalties:
+  critical:
+    - 解雇
+    - 降级 + 扣质量分
+    - 警告 + 扣质量分
+  
+  major:
+    - 降级 + 扣质量分
+    - 警告 + 扣质量分
+    - 无处罚（情节轻微）
+  
+  minor:
+    - 警告 + 扣质量分
+    - 口头警告
+    - 无处罚
+
+# 输出定义
+outputs:
+  - name: impeachment_id
+    type: string
+    description: 弹劾记录 ID
+  
+  - name: status
+    type: string
+    enum: [pending, reviewed, decided, executed, dismissed]
+    description: 弹劾状态
+  
+  - name: tech_lead_decision
+    type: object
+    description: 技术负责人决策
+    properties:
+      decision:
+        type: string
+        enum: [proceed, dismiss]
+      opinion:
+        type: string
+  
+  - name: owner_decision
+    type: object
+    description: 用户决策
+    properties:
+      decision:
+        type: string
+        enum: [approve, reject, mitigate]
+      penalty:
+        type: string
+  
+  - name: timeline
+    type: object
+    description: 时间线
+    properties:
+      initiated_at:
+        type: number
+      reviewed_at:
+        type: number
+      decided_at:
+        type: number
+      executed_at:
+        type: number
+
+# 保护措施
+protections:
+  - 被弹劾角色有权申辩
+  - 弹劾记录需要证据支撑
+  - 严重弹劾需要用户最终确认
+  - 弹劾失败不记入档案
+
+# 元数据
+metadata:
+  author: Agent Studio
+  tags:
+    - governance
+    - impeachment
+    - accountability

package/dist/tools/definitions/definitions/std/governance/multi-stance-review.yml

@@ -0,0 +1,154 @@
+# multi-stance-review.yml - 多立场审核步骤
+# ============================================================================
+# 类型: 治理类步骤
+# 执行方式: 并行调用多个 Agent
+# 用途: 多个立场并行审核，汇聚意见后做出决策
+# 核心理念: 多角色共同审核重大决策
+# ============================================================================
+
+name: multi-stance-review
+stage: govern
+description: 多立场并行会审（会审制度）
+category: governance
+version: 1.0.0
+
+# Agent 配置
+agent: codex
+temperature: 0.3
+
+# 可用工具
+tools:
+  - file-read
+  - define-stance
+  - validate-artifact
+  - aggregate-opinions
+
+# 输入定义
+inputs:
+  - name: artifact_type
+    type: string
+    required: true
+    description: 审核对象类型
+  
+  - name: artifact_content
+    type: string
+    required: true
+    description: 审核对象内容
+  
+  - name: stances
+    type: array
+    description: |
+      参与审核的立场列表，默认使用决策类立场：
+      - critic: 挑刺者
+      - supporter: 支持者
+      - decider: 决策者
+    default: ["critic", "supporter", "decider"]
+  
+  - name: aggregation_method
+    type: string
+    description: |
+      意见汇聚方式：
+      - consensus: 一致同意
+      - majority: 多数同意
+      - weighted: 加权投票（critic 权重更高）
+      - decider: 决策者决定
+    default: "decider"
+  
+  - name: review_criteria
+    type: array
+    description: 审核标准列表
+    default: []
+
+# 输出定义
+outputs:
+  - name: final_decision
+    type: string
+    description: |
+      最终决策：
+      - approved: 通过
+      - rejected: 拒绝
+      - changes_requested: 要求修改
+  
+  - name: reason
+    type: string
+    description: 决策理由
+  
+  - name: opinions
+    type: array
+    description: 各立场审核意见
+    items:
+      type: object
+      properties:
+        stanceId:
+          type: string
+        verdict:
+          type: string
+        opinion:
+          type: string
+        issues:
+          type: array
+  
+  - name: statistics
+    type: object
+    description: 审核统计
+    properties:
+      approve:
+        type: number
+      reject:
+        type: number
+      request_changes:
+        type: number
+      total:
+        type: number
+
+# Prompt 模板
+prompt: |
+  你正在组织多立场会审。
+  
+  ## 审核对象
+  类型: {{artifact_type}}
+  内容: {{artifact_content}}
+  
+  ## 参与立场
+  {{#each stances}}
+  - {{this}}
+  {{/each}}
+  
+  ## 汇聚方式
+  {{aggregation_method}}
+  
+  ## 审核标准
+  {{#if review_criteria}}
+  {{#each review_criteria}}
+  - {{this}}
+  {{/each}}
+  {{else}}
+  - 完整性
+  - 可行性
+  - 风险评估
+  {{/if}}
+  
+  请按照以下流程执行：
+  1. 为每个立场生成审核 prompt
+  2. 并行执行各立场审核
+  3. 汇聚审核意见
+  4. 做出最终决策
+
+# 执行配置
+execute:
+  type: builtin
+  handler: multi-stance-review
+
+# 并行执行配置
+parallel: true
+max_parallel: 3
+
+# 元数据
+metadata:
+  author: Agent Studio
+  tags:
+    - governance
+    - review
+    - multi-stance
+    - multi-stakeholder
+    - stance-isolation

package/dist/tools/definitions/definitions/std/governance/prepare-artifact.yml

@@ -0,0 +1,20 @@
+# prepare-artifact.yml - 准备审核对象
+id: governance/prepare-artifact
+stage: govern
+name: 准备审核对象
+description: 准备审核对象内容
+
+inputs:
+  - name: artifact_type
+    type: string
+    required: true
+  - name: content
+    type: string
+    required: true
+  - name: context
+    type: object
+    required: false
+
+outputs:
+  - name: output
+    type: object

package/dist/tools/definitions/definitions/std/governance/review-spec-approval.yml

@@ -0,0 +1,262 @@
+# review-spec-approval.yml - 关键变更双签审批
+# ============================================================================
+# 类型: 治理类步骤
+# 执行方式: 工作流编排（等待外部审批）
+# 用途: 关键变更（架构/API/数据模型）的双签审批
+# 审批人: 架构师 + 项目负责人
+# ============================================================================
+# 与 AS-048 联动：动态获取项目负责人
+# 与 spec-review-service.ts 联动：双签审批逻辑
+# ============================================================================
+
+name: review-spec-approval
+stage: govern
+description: 关键变更双签审批（架构师 + 项目负责人）
+category: governance
+version: 1.0.0
+
+# 执行方式：编排步骤（非 Agent）
+type: orchestration
+
+# 输入定义
+inputs:
+  changes:
+    type: array
+    description: Spec 变更列表
+    required: true
+    items:
+      type: object
+      properties:
+        type:
+          type: string
+          enum: [architecture, api, data-model, workflow, step, skill, other]
+          description: 变更类型
+        file:
+          type: string
+          description: 变更文件路径
+        description:
+          type: string
+          description: 变更描述
+        impact:
+          type: string
+          enum: [high, medium, low]
+          description: 影响级别
+        diff:
+          type: string
+          description: 变更差异
+  
+  workflow_id:
+    type: string
+    description: 关联的工作流 ID
+    required: false
+  
+  title:
+    type: string
+    description: 审查标题
+    required: true
+  
+  description:
+    type: string
+    description: 审查描述
+    required: false
+  
+  company_id:
+    type: string
+    description: 公司 ID（用于获取项目负责人）
+    required: false
+    default: "default-company"
+  
+  requested_by:
+    type: string
+    description: 请求人 ID
+    required: false
+
+# 配置
+config:
+  # 审批超时（默认 24 小时）
+  approval_timeout_ms: 86400000
+  
+  # 关键变更类型（需要双签）
+  critical_change_types:
+    - architecture
+    - api
+    - data-model
+  
+  # 高影响级别（需要审批）
+  high_impact_levels:
+    - high
+
+# 执行步骤
+steps:
+  # Step 1: 分析变更
+  - id: analyze_changes
+    name: 分析变更
+    action: call
+    service: spec-review-service
+    method: analyzeChanges
+    input:
+      changes: ${{ inputs.changes }}
+    output: analysis_result
+  
+  # Step 2: 判断是否需要审批
+  - id: check_required
+    name: 检查是否需要审批
+    action: condition
+    condition: ${{ steps.analyze_changes.output.required }}
+    on_true: create_review
+    on_false: skip_review
+  
+  # Step 3: 创建审查（分支：需要审批）
+  - id: create_review
+    name: 创建审查请求
+    action: call
+    service: spec-review-service
+    method: createReview
+    input:
+      workflowId: ${{ inputs.workflow_id }}
+      title: ${{ inputs.title }}
+      description: ${{ inputs.description }}
+      changes: ${{ inputs.changes }}
+      requestedBy: ${{ inputs.requested_by }}
+    output: review
+  
+  # Step 4: 等待审批（双签）
+  - id: wait_approval
+    name: 等待双签审批
+    action: wait
+    event: spec-review.approved
+    filter:
+      reviewId: ${{ steps.create_review.output.review.id }}
+    timeout_ms: ${{ config.approval_timeout_ms }}
+    on_timeout: approval_timeout
+    output: approval_result
+  
+  # Step 5: 检查审批结果
+  - id: check_approval
+    name: 检查审批结果
+    action: condition
+    condition: ${{ steps.wait_approval.output.status == 'approved' }}
+    on_true: approval_success
+    on_false: approval_rejected
+  
+  # 分支：审批通过
+  - id: approval_success
+    name: 审批通过
+    action: emit
+    event: spec-review.completed
+    data:
+      reviewId: ${{ steps.create_review.output.review.id }}
+      status: approved
+      approvals: ${{ steps.wait_approval.output.approvals }}
+  
+  # 分支：审批拒绝
+  - id: approval_rejected
+    name: 审批拒绝
+    action: emit
+    event: spec-review.completed
+    data:
+      reviewId: ${{ steps.create_review.output.review.id }}
+      status: rejected
+      reason: ${{ steps.wait_approval.output.rejection_reason }}
+  
+  # 分支：无需审批
+  - id: skip_review
+    name: 无需审批
+    action: emit
+    event: spec-review.completed
+    data:
+      status: not-required
+      reason: ${{ steps.analyze_changes.output.reason }}
+  
+  # 分支：审批超时
+  - id: approval_timeout
+    name: 审批超时
+    action: emit
+    event: spec-review.timeout
+    data:
+      reviewId: ${{ steps.create_review.output.review.id }}
+      status: timeout
+    then:
+      action: fail
+      message: "审批超时，请重新提交"
+
+# 输出定义
+outputs:
+  status:
+    type: string
+    enum: [approved, rejected, not-required, timeout]
+    description: 审批状态
+    value: "${{ steps.approval_success ? 'approved' : steps.approval_rejected ? 'rejected' : steps.skip_review ? 'not-required' : 'timeout' }}"
+  
+  review_id:
+    type: string
+    description: 审查 ID
+    value: ${{ steps.create_review.output.review.id }}
+  
+  approvals:
+    type: object
+    description: 审批记录
+    value: ${{ steps.wait_approval.output.approvals }}
+    properties:
+      architect:
+        type: object
+        properties:
+          approved:
+            type: boolean
+          reviewerName:
+            type: string
+          timestamp:
+            type: string
+      projectLead:
+        type: object
+        properties:
+          approved:
+            type: boolean
+          reviewerName:
+            type: string
+          timestamp:
+            type: string
+  
+  reason:
+    type: string
+    description: 原因说明
+    value: "${{ steps.skip_review.output.reason || steps.wait_approval.output.rejection_reason || '' }}"
+
+# 元数据
+metadata:
+  author: system
+  created_at: 2026-04-14
+  updated_at: 2026-04-14
+  
+  # 与 AS-048 联动说明
+  integration:
+    as_048:
+      description: 动态获取项目负责人
+      usage: |
+        spec-review-service.notifyReviewers() 会调用：
+        roleService.getProjectLead(companyId)
+        
+        返回项目负责人角色信息，用于：
+        - 审批通知
+        - 双签验证
+  
+  # 双签审批逻辑说明
+  dual_sign_logic:
+    description: |
+      关键变更类型（architecture, api, data-model）需要双签：
+      - 架构师批准
+      - 项目负责人批准
+      
+      其他变更类型只需单签（任意一人批准即可）。
+    
+    implementation: |
+      // spec-review-service.ts L160-180
+      const needsDualSign = ['architecture', 'api', 'data-model'].includes(review.changeType);
+      
+      if (needsDualSign) {
+        if (approvals.architect?.approved && approvals.projectLead?.approved) {
+          newStatus = 'approved';
+        }
+      } else {
+        newStatus = 'approved';
+      }