@fantasticit/sumi 0.0.0-stage → 0.5.0

package/node_modules/@sumi/plugins-review/README.md

@@ -0,0 +1,131 @@
+# @sumi/plugins-review
+
+评审插件：按 `control/rubrics/` 下的结构化准则确定适用条目，派发给全新上下文的代理逐条评审，经 `sumi submit` 校验后接受结果，并在内容不变时复用。
+
+依赖 `@sumi/plugins-governance`（共享状态目录与人工确认）。
+
+## 插件
+
+| id              | kind  | 作用                                 | 触发条件 / 档位                                                                                | `with` 配置项                                                                                                 |
+| --------------- | ----- | ------------------------------------ | ---------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
+| `review/rubric` | check | 按一个准则集合评审本次改动涉及的文件 | 插件本身不声明触发条件；在哪个档位运行由流程步骤的 `when` 决定（例如 `when: tier >= runtime`） | `rubric`：准则集合 id（对应 `control/rubrics/<rubric>.yaml`）；`mode`：`advisory`（默认）或 `human-confirmed` |
+
+每个准则集合在流程中作为一个 `review/rubric` 步骤实例：
+
+```yaml
+steps:
+  - id: review/architecture
+    use: review/rubric
+    with: { rubric: architecture, mode: advisory }
+    when: tier >= runtime
+```
+
+`advisory` 评审的步骤若在流程中声明 `required: false`，评审待完成（pending）不影响运行结论。
+
+## 命令
+
+| 命令                                               | 作用                                                   |
+| -------------------------------------------------- | ------------------------------------------------------ |
+| `sumi submit <run-id> <step-id> --ticket <ticket>` | 校验并接受评审结果；参数由派发动作给出，不需要手工拼写 |
+| `context-rubrics`                                  | 约束查询命令，供 `sumi context` 调用（见下文）         |
+
+## 准则文件
+
+路径：`control/rubrics/<集合 id>.yaml`。解析代码读取的字段：
+
+```yaml
+id: architecture
+items:
+  - id: R1 # 条目 id，在集合内唯一
+    question: 内核是否只做编排？ # 评审问题
+    pass: 无策略代码 # 通过标准
+    scope: ['src/kernel/**'] # 可选，路径 glob
+```
+
+条目适用规则：
+
+- 有 `scope` 的条目，在改动文件命中 `scope` 时适用，评审范围是命中的文件。
+- 没有 `scope` 的条目，只要本次有改动就适用，评审范围是全部改动文件。
+- 判例等插件通过 `rubric-item` 类型的执行义务强制纳入某个条目时，该条目必定适用，评审范围加入义务给出的目标文件，不受条目自身 `scope` 限制。义务引用了集合中不存在的条目时，步骤为 `blocked`。
+
+没有适用条目时步骤直接 `pass`。
+
+## 评审流程
+
+1. **生成请求**：插件计算请求键（见下文）。没有可复用的已接受结果时，在步骤的证据目录写入 `review-request.json`，在共享状态目录写入一次性 ticket，步骤返回 `pending`，`next` 中给出一个 `dispatch-review` 动作：
+
+   ```
+   sumi submit <run-id> <step-id> --ticket <8 位十六进制>
+   ```
+
+   动作说明中写明请求文件路径、结果文件路径与结果格式。
+
+2. **派发评审**：由全新上下文的代理读取请求文件，逐条评审，把结果写到指定的 `review-result.json`。
+
+3. **提交**：执行 `sumi submit`。以下任一情况会拒绝提交（退出码 1）：
+   - ticket 不存在、与运行或步骤不匹配，或已使用过；
+   - 结果文件不在派发时指定的路径，或不是合法 JSON；
+   - 被评审文件的内容与请求时不一致（需要重新运行流程）；
+   - 结果没有覆盖全部适用条目、`verdict` 不是 `pass`/`fail`、缺少 `reason`，或 `fail` 条目没有 `file`。
+
+   通过后结果被接受，ticket 标记为已使用。
+
+4. **重跑流程**：插件读到已接受的结果并据此给出结论。
+
+### 请求文件（`review-request.json`）
+
+| 字段            | 含义                                                     |
+| --------------- | -------------------------------------------------------- |
+| `key`           | 请求键                                                   |
+| `rubric`        | 准则集合 id                                              |
+| `rubricDigest`  | 准则文件内容的 sha256                                    |
+| `base`          | 本次运行的比较基准（可为 `null`）                        |
+| `contentDigest` | 被评审文件的内容摘要（按路径排序的路径与 git blob id）   |
+| `repoRoot`      | 仓库根目录                                               |
+| `items`         | 适用条目：准则条目的全部字段，加上本次的评审范围 `files` |
+
+### 结果文件（`review-result.json`）
+
+```json
+{
+  "verdicts": [
+    { "item": "R1", "verdict": "pass", "reason": "只做编排" },
+    { "item": "R2", "verdict": "fail", "reason": "直接修改了状态字段", "file": "src/order/refund.js", "line": 42 }
+  ]
+}
+```
+
+`file` 与 `line` 可选，但 `verdict` 为 `fail` 时必须给出 `file`。
+
+## 结果复用
+
+请求键是以下内容的 sha256：准则文件摘要、被评审文件的内容摘要、每个适用条目的 id 及其文件列表。比较基准不进键，因此推送门禁可以复用在工作区完成的评审。准则文件或被评审内容任一变化，都需要重新评审。内容摘要取 git blob id（经 clean 过滤），准则摘要按 LF 计算，因此同一提交在 LF 与 CRLF 检出（如 Windows 的 `core.autocrlf=true`）中得到相同的键。
+
+已接受的结果保存在共享状态目录（`git rev-parse --git-common-dir` 下的 `sumi/`）中：
+
+| 路径                         | 内容                 |
+| ---------------------------- | -------------------- |
+| `sumi/reviews/<key>.json`    | 已接受的评审结果     |
+| `sumi/tickets/<ticket>.json` | 派发记录与是否已使用 |
+
+该目录由所有 worktree 共用，不在工作树中，也不随提交传播。
+
+## 结论与报告
+
+- 有 `fail` 条目：步骤 `fail`，每个不通过的条目产生一条 `error` 级 finding，规则名为 `<集合>#<条目>`，带文件与行号定位。
+- 全部通过：步骤 `pass`；`human-confirmed` 模式见下一节。
+- 对 `rubric-item` 义务给出回执：条目通过为 `passed`，不通过为 `failed`，结果中没有该条目为 `not-executed`。
+- 已有结果时附条目级报告段落（`#### 评审：<集合>`），表格列出每个条目的问题、结论（通过 / 不通过 / 未评审）与理由，不通过的条目附定位。
+
+## 人工确认
+
+`mode: human-confirmed` 时，结果全部通过后步骤仍为 `pending`，并发起一个 `review-result` 类型的确认请求（绑定请求键与结果摘要），`next` 中给出 `ask-human` 动作 `sumi approve <请求 id>`。人在自己的终端确认后，重跑流程步骤才为 `pass`。
+
+## 约束查询（`context-rubrics`）
+
+`sumi context <路径...>` 调用该命令，列出 `control/rubrics/` 下所有准则中范围命中给定路径的条目（没有 `scope` 的条目对所有路径生效）。每个条目包含：
+
+- `ref`：`rubric:<集合>#<条目>`，别名 `rubric:<集合>`；
+- `text`：`<问题> 通过标准：<pass>`；
+- `source`：准则文件路径；
+- `global`：条目没有 `scope` 或 `scope` 包含 `**` 时为真。

package/node_modules/@sumi/plugins-review/dist/commands/context.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-review/dist/commands/context.js

@@ -0,0 +1,32 @@
+import { existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { readContextInput } from '@sumi/plugin-sdk';
+import picomatch from 'picomatch';
+import { loadRubric } from '../review.js';
+/** 约束查询：范围命中给定路径的评审条目（没有范围的条目对所有路径生效）。 */
+const { repoRoot, paths } = await readContextInput();
+const dir = join(repoRoot, 'control', 'rubrics');
+const items = [];
+for (const file of existsSync(dir)
+    ? readdirSync(dir)
+        .filter((f) => f.endsWith('.yaml'))
+        .sort()
+    : []) {
+    const id = file.replace(/\.yaml$/, '');
+    const { rubric } = loadRubric(repoRoot, id);
+    for (const item of rubric.items) {
+        const hit = item.scope?.length ? paths.some((f) => picomatch(item.scope, { dot: true })(f)) : true;
+        if (!hit)
+            continue;
+        const global = !item.scope?.length || item.scope.includes('**');
+        items.push({
+            ref: `rubric:${id}#${item.id}`,
+            aliases: [`rubric:${id}`],
+            text: `${item.question} 通过标准：${item.pass}`,
+            source: `control/rubrics/${file}`,
+            global,
+        });
+    }
+}
+process.stdout.write(JSON.stringify({ items }));
+//# sourceMappingURL=context.js.map

package/node_modules/@sumi/plugins-review/dist/commands/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAsB,MAAM,kBAAkB,CAAC;AACxE,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,0CAA0C;AAC1C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;AACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACjD,MAAM,KAAK,GAA2B,EAAE,CAAC;AACzC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC;IAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;SACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE;IACX,CAAC,CAAC,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpG,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE;YAC9B,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;YACzB,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,IAAI,EAAE;YAC1C,MAAM,EAAE,mBAAmB,IAAI,EAAE;YACjC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAA0B,CAAC,CAAC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/commands/submit.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-review/dist/commands/submit.js

@@ -0,0 +1,46 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { filesDigest, ticketsDir, validateReviewResult, writeAccepted } from '../review.js';
+/**
+ * sumi submit <run-id> <step-id> --ticket <t>：校验并接受评审结果。
+ * ticket 必须匹配且未使用，结果文件必须在派发时指定的路径，覆盖全部适用条目，被评审内容未变化。
+ */
+const root = process.env.SUMI_ROOT ?? process.cwd();
+const args = process.argv.slice(2);
+const ti = args.indexOf('--ticket');
+const ticketId = ti >= 0 ? args[ti + 1] : undefined;
+const [runId, stepId] = args.filter((_, i) => i !== ti && i !== ti + 1);
+function reject(message) {
+    process.stderr.write(`提交被拒绝：${message}\n`);
+    process.exit(1);
+}
+if (!runId || !stepId || !ticketId)
+    reject('用法：sumi submit <run-id> <step-id> --ticket <ticket>');
+const ticketPath = join(ticketsDir(root), `${ticketId}.json`);
+if (!existsSync(ticketPath))
+    reject(`ticket ${ticketId} 不存在`);
+const ticket = JSON.parse(readFileSync(ticketPath, 'utf8'));
+if (ticket.runId !== runId || ticket.stepId !== stepId)
+    reject('ticket 与运行或步骤不匹配');
+if (ticket.used)
+    reject('ticket 已使用');
+if (!existsSync(ticket.resultPath))
+    reject(`结果文件不在指定路径：${ticket.resultPath}`);
+const request = JSON.parse(readFileSync(ticket.requestPath, 'utf8'));
+const reviewed = [...new Set(request.items.flatMap((i) => i.files))];
+if (filesDigest(request.repoRoot, reviewed) !== request.contentDigest)
+    reject('被评审的内容已变化，请重新运行流程');
+let value;
+try {
+    value = JSON.parse(readFileSync(ticket.resultPath, 'utf8'));
+}
+catch {
+    reject('结果文件不是合法 JSON');
+}
+const errors = validateReviewResult(request, value);
+if (errors.length)
+    reject(errors.join('；'));
+writeAccepted(root, request.key, value);
+writeFileSync(ticketPath, JSON.stringify({ ...ticket, used: true }, null, 2));
+process.stdout.write('评审结果已接受，请重新运行流程\n');
+//# sourceMappingURL=submit.js.map

package/node_modules/@sumi/plugins-review/dist/commands/submit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit.js","sourceRoot":"","sources":["../../src/commands/submit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAmC,MAAM,cAAc,CAAC;AAE7H;;;GAGG;AACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAExE,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;IAAE,MAAM,CAAC,qDAAqD,CAAC,CAAC;AAClG,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AAC9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;IAAE,MAAM,CAAC,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAW,CAAC;AACtE,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;IAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACnF,IAAI,MAAM,CAAC,IAAI;IAAE,MAAM,CAAC,YAAY,CAAC,CAAC;AACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;IAAE,MAAM,CAAC,cAAc,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAE9E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAkB,CAAC;AACtF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,OAAO,CAAC,aAAa;IAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAEnG,IAAI,KAAc,CAAC;AACnB,IAAI,CAAC;IACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,CAAC,eAAe,CAAC,CAAC;AAC1B,CAAC;AACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACpD,IAAI,MAAM,CAAC,MAAM;IAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5C,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,KAA8B,CAAC,CAAC;AACjE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/index.d.ts

@@ -0,0 +1 @@
+export * from './review.js';

package/node_modules/@sumi/plugins-review/dist/index.js

@@ -0,0 +1,2 @@
+export * from './review.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@sumi/plugins-review/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/node_modules/@sumi/plugins-review/dist/plugins/rubric.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-review/dist/plugins/rubric.js

@@ -0,0 +1,116 @@
+import { randomBytes } from 'node:crypto';
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { definePlugin, result } from '@sumi/plugin-sdk';
+import { requireApproval } from '@sumi/plugins-governance';
+import { applicableItems, filesDigest, loadRubric, readAccepted, requestKey, resultDigest, ticketsDir, } from '../review.js';
+/** 表格单元：去掉换行并转义竖线。 */
+const cell = (text) => text.replace(/\s*\n\s*/g, ' ').replace(/\|/g, '\\|');
+/** 条目级报告段落：准则、每个条目的问题、结论与理由，不通过的条目附定位。 */
+function reportOf(rubricId, items, verdicts) {
+    const rows = items.map((item) => {
+        const v = verdicts.find((x) => x.item === item.id);
+        const verdict = !v ? '未评审' : v.verdict === 'pass' ? '✅ 通过' : '❌ 不通过';
+        const where = v?.file ? `（${v.file}${v.line ? `:${v.line}` : ''}）` : '';
+        return `| ${item.id} | ${cell(item.question)} | ${verdict} | ${cell(v?.reason ?? '')}${where} |`;
+    });
+    return [`#### 评审：${rubricId}`, '', '| 条目 | 问题 | 结论 | 理由 |', '| --- | --- | --- | --- |', ...rows].join('\n');
+}
+/**
+ * 评审：按结构化准则确定适用条目；有可复用的已接受结果则直接采用，否则返回 pending，
+ * 派发给全新上下文的代理完成评审，再由 sumi submit 提交。内核不理解评审，只看到 pending。
+ */
+await definePlugin((ctx) => {
+    const rubricId = String(ctx.config.rubric ?? '');
+    const mode = ctx.config.mode === 'human-confirmed' ? 'human-confirmed' : 'advisory';
+    const { rubric, digest } = loadRubric(ctx.repoRoot, rubricId);
+    const forced = new Map();
+    for (const o of ctx.obligations.filter((x) => x.type === 'rubric-item')) {
+        const item = String(o.target.item);
+        if (!rubric.items.some((i) => i.id === item)) {
+            return result({ status: 'blocked', summary: `义务 ${o.id} 引用了准则中不存在的条目 ${rubricId}#${item}` });
+        }
+        forced.set(item, [...(forced.get(item) ?? []), ...(o.target.files ?? [])]);
+    }
+    const items = applicableItems(rubric, ctx.files, forced);
+    if (items.length === 0)
+        return result({ status: 'pass', summary: '没有适用的评审条目', checked: ctx.files });
+    const reviewed = [...new Set(items.flatMap((i) => i.files))];
+    const parts = { rubric: rubricId, rubricDigest: digest, base: ctx.base, contentDigest: filesDigest(ctx.repoRoot, reviewed), items };
+    const key = requestKey(parts);
+    const accepted = readAccepted(ctx.repoRoot, key);
+    if (accepted) {
+        const report = reportOf(rubricId, items, accepted.verdicts);
+        const findings = accepted.verdicts
+            .filter((v) => v.verdict === 'fail')
+            .map((v, i) => ({
+            id: `F${i + 1}`,
+            rule: `${rubricId}#${v.item}`,
+            severity: 'error',
+            message: v.reason,
+            file: v.file,
+            line: v.line,
+        }));
+        const receipts = ctx.obligations
+            .filter((o) => o.type === 'rubric-item')
+            .map((o) => {
+            const v = accepted.verdicts.find((x) => x.item === String(o.target.item));
+            return { id: o.id, outcome: v ? (v.verdict === 'pass' ? 'passed' : 'failed') : 'not-executed' };
+        });
+        if (findings.length) {
+            return result({
+                status: 'fail',
+                summary: `评审未通过：${findings.length} 个条目`,
+                findings,
+                checked: reviewed,
+                obligations: receipts,
+                report,
+            });
+        }
+        if (mode === 'human-confirmed') {
+            const id = requireApproval(ctx.repoRoot, 'review-result', { key, result: resultDigest(accepted) }, [
+                `评审准则 ${rubricId} 的结果全部通过，需要人确认`,
+                ...accepted.verdicts.map((v) => `${v.item}：${v.reason}`),
+            ]);
+            if (id) {
+                return result({
+                    status: 'pending',
+                    summary: '评审已通过，等待人工确认',
+                    checked: reviewed,
+                    next: [
+                        {
+                            type: 'ask-human',
+                            question: `请确认 ${rubricId} 的评审结果`,
+                            argv: ['sumi', 'approve', id],
+                            why: '有放行效力的评审需要人确认',
+                        },
+                    ],
+                });
+            }
+        }
+        return result({ status: 'pass', summary: `评审通过（${items.length} 个条目）`, checked: reviewed, obligations: receipts, report });
+    }
+    const request = { key, repoRoot: ctx.repoRoot, ...parts };
+    mkdirSync(ctx.evidenceDir, { recursive: true });
+    const requestPath = join(ctx.evidenceDir, 'review-request.json');
+    const resultPath = join(ctx.evidenceDir, 'review-result.json');
+    writeFileSync(requestPath, JSON.stringify(request, null, 2));
+    const ticket = randomBytes(4).toString('hex');
+    const record = { ticket, key, runId: ctx.runId, stepId: ctx.stepId, requestPath, resultPath, used: false };
+    writeFileSync(join(ticketsDir(ctx.repoRoot), `${ticket}.json`), JSON.stringify(record, null, 2));
+    return result({
+        status: 'pending',
+        summary: `需要按准则 ${rubricId} 评审 ${items.length} 个条目`,
+        checked: reviewed,
+        next: [
+            {
+                type: 'run',
+                kind: 'dispatch-review',
+                argv: ['sumi', 'submit', ctx.runId, ctx.stepId, '--ticket', ticket],
+                effects: ['none'],
+                why: `用全新上下文的代理按 ${requestPath} 逐条评审，结果写入 ${resultPath}（格式：{"verdicts":[{"item","verdict":"pass|fail","reason","file?","line?"}]}），然后执行该命令`,
+            },
+        ],
+    });
+});
+//# sourceMappingURL=rubric.js.map

package/node_modules/@sumi/plugins-review/dist/plugins/rubric.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rubric.js","sourceRoot":"","sources":["../../src/plugins/rubric.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,EAA8B,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,UAAU,GAGX,MAAM,cAAc,CAAC;AAEtB,sBAAsB;AACtB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAEpF,0CAA0C;AAC1C,SAAS,QAAQ,CACf,QAAgB,EAChB,KAAyC,EACzC,QAAoG;IAEpG,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACrE,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,OAAO,MAAM,IAAI,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC;IACnG,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,WAAW,QAAQ,EAAE,EAAE,EAAE,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/G,CAAC;AAED;;;GAGG;AACH,MAAM,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;IACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC;IACpF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,iBAAiB,QAAQ,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAE,CAAC,CAAC,MAAM,CAAC,KAAkB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAEpG,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;IACpI,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEjD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAc,QAAQ,CAAC,QAAQ;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACd,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;YACf,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAC7B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,CAAC,CAAC,MAAM;YACjB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;QACN,MAAM,QAAQ,GAAc,GAAG,CAAC,WAAW;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;QAClG,CAAC,CAAC,CAAC;QACL,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,SAAS,QAAQ,CAAC,MAAM,MAAM;gBACvC,QAAQ;gBACR,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,QAAQ;gBACrB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACjG,QAAQ,QAAQ,gBAAgB;gBAChC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,IAAI,EAAE,EAAE,CAAC;gBACP,OAAO,MAAM,CAAC;oBACZ,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,cAAc;oBACvB,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE;wBACJ;4BACE,IAAI,EAAE,WAAW;4BACjB,QAAQ,EAAE,OAAO,QAAQ,QAAQ;4BACjC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;4BAC7B,GAAG,EAAE,eAAe;yBACrB;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,KAAK,CAAC,MAAM,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;IACzE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC/D,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnH,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC;QACZ,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS,QAAQ,OAAO,KAAK,CAAC,MAAM,MAAM;QACnD,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;gBACnE,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,GAAG,EAAE,cAAc,WAAW,cAAc,UAAU,qFAAqF;aAC5I;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/review.d.ts

@@ -0,0 +1,64 @@
+export interface RubricItem {
+    id: string;
+    question: string;
+    pass: string;
+    scope?: string[];
+}
+export interface Rubric {
+    id: string;
+    items: RubricItem[];
+}
+export interface RequestItem extends RubricItem {
+    /** 本次评审该条目的文件范围。 */
+    files: string[];
+}
+export interface ReviewRequest {
+    key: string;
+    rubric: string;
+    rubricDigest: string;
+    base: string | null;
+    contentDigest: string;
+    repoRoot: string;
+    items: RequestItem[];
+}
+export interface Verdict {
+    item: string;
+    verdict: 'pass' | 'fail';
+    reason: string;
+    file?: string;
+    line?: number;
+}
+export interface ReviewResult {
+    verdicts: Verdict[];
+}
+export interface Ticket {
+    ticket: string;
+    key: string;
+    runId: string;
+    stepId: string;
+    requestPath: string;
+    resultPath: string;
+    used: boolean;
+}
+export declare function loadRubric(root: string, id: string): {
+    rubric: Rubric;
+    digest: string;
+};
+/**
+ * 被评审文件的内容摘要：路径与 git blob id，按路径排序；与运行在哪个 worktree、哪个平台无关。
+ * blob id 经过 git 的 clean 过滤（core.autocrlf、.gitattributes），工作区的 LF 文件与门禁检出的 CRLF 文件得到同一个值。
+ */
+export declare function filesDigest(root: string, files: string[]): string;
+/**
+ * 适用条目：条目范围命中改动文件即适用（无范围的条目在有改动时适用）；
+ * 条目义务强制纳入，评审范围取义务目标文件，不受条目自身范围限制。
+ */
+export declare function applicableItems(rubric: Rubric, files: string[], forced: Map<string, string[]>): RequestItem[];
+export declare function requestKey(parts: Omit<ReviewRequest, 'key' | 'repoRoot'>): string;
+export declare function reviewsDir(root: string): string;
+export declare function readAccepted(root: string, key: string): ReviewResult | null;
+export declare function writeAccepted(root: string, key: string, result: ReviewResult): void;
+export declare function resultDigest(result: ReviewResult): string;
+export declare function ticketsDir(root: string): string;
+/** 校验评审结果：覆盖全部适用条目，verdict 合法，fail 条目带文件定位。返回错误列表。 */
+export declare function validateReviewResult(request: ReviewRequest, value: unknown): string[];

package/node_modules/@sumi/plugins-review/dist/review.js

@@ -0,0 +1,104 @@
+import { execFileSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { GIT_MAX_BUFFER } from '@sumi/plugin-sdk';
+import { stateDir } from '@sumi/plugins-governance';
+import picomatch from 'picomatch';
+import { parse } from 'yaml';
+const sha256 = (text) => createHash('sha256').update(text).digest('hex');
+export function loadRubric(root, id) {
+    const path = join(root, 'control', 'rubrics', `${id}.yaml`);
+    if (!existsSync(path))
+        throw new Error(`找不到评审准则 ${path}`);
+    const text = readFileSync(path, 'utf8');
+    // 摘要按 LF 计算：同一准则在 CRLF 检出（Windows 的 core.autocrlf）与 LF 检出中得到相同摘要。
+    return { rubric: parse(text), digest: sha256(text.replace(/\r\n/g, '\n')) };
+}
+/**
+ * 被评审文件的内容摘要：路径与 git blob id，按路径排序；与运行在哪个 worktree、哪个平台无关。
+ * blob id 经过 git 的 clean 过滤（core.autocrlf、.gitattributes），工作区的 LF 文件与门禁检出的 CRLF 文件得到同一个值。
+ */
+export function filesDigest(root, files) {
+    const sorted = [...files].sort();
+    // 子模块在工作区中是目录，与内核的内容摘要一致不纳入
+    const present = sorted.filter((f) => existsSync(join(root, f)) && !statSync(join(root, f)).isDirectory());
+    const blobs = present.length
+        ? execFileSync('git', ['hash-object', '--stdin-paths'], {
+            cwd: root,
+            // 以 " 开头的路径会被 git 当作 C 风格转义串，按转义写法传入
+            input: `${present.map((f) => (f.startsWith('"') ? `"${f.replace(/["\\]/g, '\\$&')}"` : f)).join('\n')}\n`,
+            encoding: 'utf8',
+            windowsHide: true,
+            maxBuffer: GIT_MAX_BUFFER,
+        })
+            .trim()
+            .split('\n')
+        : [];
+    const blobOf = new Map(present.map((f, i) => [f, blobs[i]]));
+    return sha256(sorted.map((f) => `${f}\0${blobOf.get(f) ?? '-'}`).join('\n'));
+}
+/**
+ * 适用条目：条目范围命中改动文件即适用（无范围的条目在有改动时适用）；
+ * 条目义务强制纳入，评审范围取义务目标文件，不受条目自身范围限制。
+ */
+export function applicableItems(rubric, files, forced) {
+    const out = [];
+    for (const item of rubric.items) {
+        const matched = item.scope?.length ? files.filter((f) => picomatch(item.scope, { dot: true })(f)) : files;
+        const forcedFiles = forced.get(item.id);
+        const scope = [...new Set([...(matched.length ? matched : []), ...(forcedFiles ?? [])])].sort();
+        if (scope.length)
+            out.push({ ...item, files: scope });
+    }
+    return out;
+}
+export function requestKey(parts) {
+    return sha256(JSON.stringify({
+        // 内容摘要覆盖被评审文件的内容；基准只影响"评审哪些文件"，已由 items 的文件列表体现，因此不进键，
+        // 这样推送门禁（基准可能是空树或远端旧 OID）能复用工作区完成的评审。
+        rubricDigest: parts.rubricDigest,
+        contentDigest: parts.contentDigest,
+        items: parts.items.map((i) => ({ id: i.id, files: i.files })),
+    }));
+}
+export function reviewsDir(root) {
+    const dir = join(stateDir(root), 'reviews');
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+export function readAccepted(root, key) {
+    const path = join(reviewsDir(root), `${key}.json`);
+    return existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : null;
+}
+export function writeAccepted(root, key, result) {
+    writeFileSync(join(reviewsDir(root), `${key}.json`), JSON.stringify(result, null, 2));
+}
+export function resultDigest(result) {
+    return sha256(JSON.stringify(result));
+}
+export function ticketsDir(root) {
+    const dir = join(stateDir(root), 'tickets');
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+/** 校验评审结果：覆盖全部适用条目，verdict 合法，fail 条目带文件定位。返回错误列表。 */
+export function validateReviewResult(request, value) {
+    const errors = [];
+    const verdicts = value?.verdicts;
+    if (!Array.isArray(verdicts))
+        return ['结果必须包含 verdicts 数组'];
+    for (const item of request.items) {
+        const v = verdicts.find((x) => x?.item === item.id);
+        if (!v)
+            errors.push(`缺少条目 ${item.id}`);
+        else if (v.verdict !== 'pass' && v.verdict !== 'fail')
+            errors.push(`条目 ${item.id} 的 verdict 必须为 pass 或 fail`);
+        else if (typeof v.reason !== 'string' || !v.reason)
+            errors.push(`条目 ${item.id} 缺少理由`);
+        else if (v.verdict === 'fail' && !v.file)
+            errors.push(`条目 ${item.id} 判为 fail 时必须给出文件定位`);
+    }
+    return errors;
+}
+//# sourceMappingURL=review.js.map

package/node_modules/@sumi/plugins-review/dist/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../src/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAkD7B,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE1F,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAW,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAe;IACvD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,4BAA4B;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM;QAC1B,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE;YACpD,GAAG,EAAE,IAAI;YACT,qCAAqC;YACrC,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACzG,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,cAAc;SAC1B,CAAC;aACC,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,KAAe,EAAE,MAA6B;IAC5F,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3G,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChG,IAAI,KAAK,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA8C;IACvE,OAAO,MAAM,CACX,IAAI,CAAC,SAAS,CAAC;QACb,uDAAuD;QACvD,sCAAsC;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;KAC9D,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW,EAAE,MAAoB;IAC3E,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,OAAsB,EAAE,KAAc;IACzE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAI,KAA6B,EAAE,QAAQ,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;aAClC,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;aACzG,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;aACjF,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/node_modules/@sumi/plugins-review/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@sumi/plugins-review",
+  "version": "0.5.0",
+  "description": "评审插件",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@sumi/plugin-sdk": "0.5.0",
+    "yaml": "2.9.1",
+    "picomatch": "4.0.7",
+    "@sumi/plugins-governance": "0.5.0"
+  },
+  "files": [
+    "dist",
+    "sumi-plugins.yaml"
+  ]
+}

package/node_modules/@sumi/plugins-review/sumi-plugins.yaml

@@ -0,0 +1,13 @@
+# 评审插件：按结构化准则派发独立代理评审。每个准则在流程中作为一个 review/rubric 步骤实例（with.rubric）。
+plugins:
+  - id: review/rubric
+    version: 0.1.0
+    kind: check
+    command: [node, ./dist/plugins/rubric.js]
+    timeout: 60
+    requires: ['@sumi/plugins-governance']
+    description: 按结构化准则派发独立代理评审
+    context: context-rubrics
+    commands:
+      - { name: submit, argv: [node, ./dist/commands/submit.js], description: 提交评审结果 }
+      - { name: context-rubrics, argv: [node, ./dist/commands/context.js], description: 列出给定路径上适用的评审条目 }