@fantasticit/sumi 0.7.5 → 0.8.0

package/node_modules/@sumi/plugins-precedent/sumi-plugins.yaml

@@ -9,17 +9,50 @@ plugins:
     command: [node, ./dist/plugins/planner.js]
     timeout: 60
     context: context-precedents
+    agentSettings:
+      - path: agentContext.beforeEdit
+        values: [off, inject-once, inject_once]
+        default: inject-once
+        event: beforeTool
+        group: 上下文模式
+        label: beforeEdit
+        upgradeNotice: '编辑前 hook 已按默认 inject-once 开启；可设置 agentContext.beforeEdit: off 或本次进程 SUMI_BEFORE_EDIT=off 关闭。'
+      - path: agentContext.onPrompt
+        values: [off, inject]
+        default: inject
+        event: onPrompt
+        group: 上下文模式
+        label: onPrompt
+        upgradeNotice: '提示词 hook 已按默认 inject 开启；可设置 agentContext.onPrompt: off 或本次进程 SUMI_ON_PROMPT=off 关闭。'
     hooks:
-      agent: { afterEdit: context-after-edit }
+      agent:
+        beforeTool:
+          command: context-before-edit
+          tools: edit
+          failure: open
+          when: { path: agentContext.beforeEdit, notEquals: off }
+        afterEdit: context-after-edit
+        onPrompt: { command: context-on-prompt, when: { path: agentContext.onPrompt, notEquals: off } }
     commands:
       - { name: context-precedents, argv: [node, ./dist/commands/context.js], description: 列出给定路径上生效的判例 }
       - { name: context-after-edit, argv: [node, ./dist/commands/after-edit-context.js], description: 编辑后提示新命中的约束 }
+      - { name: context-before-edit, argv: [node, ./dist/commands/before-edit-context.js], description: 首次编辑前送达约束 }
+      - { name: context-on-prompt, argv: [node, ./dist/commands/on-prompt-context.js], description: 用户提示词阶段送达任务目录 }
   - id: prec/checker
     version: 0.1.0
     description: 运行判例的检查器
     kind: check
     command: [node, ./dist/plugins/checker.js]
     timeout: 300
+  - id: prec/impact
+    version: 0.1.0
+    description: 业务约束影响记录与受检范围绑定
+    kind: check
+    command: [node, ./dist/plugins/impact.js]
+    timeout: 60
+    requires: ['@sumi/plugins-governance']
+    commands:
+      - { name: impact-submit, argv: [node, ./dist/commands/impact-submit.js], description: 提交业务约束影响判断 }
   - id: prec/selftest
     version: 0.1.0
     description: 判例自检：登记了就一定可执行

package/node_modules/@sumi/plugins-review/README.md

@@ -6,9 +6,10 @@
 
 ## 插件
 
-| id              | kind  | 作用                                 | 触发条件 / 档位                                                                                | `with` 配置项                                                                                                 |
-| --------------- | ----- | ------------------------------------ | ---------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
-| `review/rubric` | check | 按一个准则集合评审本次改动涉及的文件 | 插件本身不声明触发条件；在哪个档位运行由流程步骤的 `when` 决定（例如 `when: tier >= runtime`） | `rubric`：准则集合 id（对应 `control/rubrics/<rubric>.yaml`）；`mode`：`advisory`（默认）或 `human-confirmed` |
+| id                           | kind  | 作用                                           | 触发条件 / 档位                                                                                | `with` 配置项                                                                                                 |
+| ---------------------------- | ----- | ---------------------------------------------- | ---------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
+| `review/rubric`              | check | 按一个准则集合评审本次改动涉及的文件           | 插件本身不声明触发条件；在哪个档位运行由流程步骤的 `when` 决定（例如 `when: tier >= runtime`） | `rubric`：准则集合 id（对应 `control/rubrics/<rubric>.yaml`）；`mode`：`advisory`（默认）或 `human-confirmed` |
+| `review/independent-recheck` | check | 由不同的宿主会话模型逐项复核原评审失败 finding | 应排在源评审步骤之后                                                                           | `source`：源 `review/rubric` 步骤 id；`vendor` 和 `model`：期望的复核模型                                     |
 
 每个准则集合在流程中作为一个 `review/rubric` 步骤实例：
 
@@ -24,10 +25,11 @@ steps:
 
 ## 命令
 
-| 命令                                               | 作用                                                   |
-| -------------------------------------------------- | ------------------------------------------------------ |
-| `sumi submit <run-id> <step-id> --ticket <ticket>` | 校验并接受评审结果；参数由派发动作给出，不需要手工拼写 |
-| `context-rubrics`                                  | 约束查询命令，供 `sumi context` 调用（见下文）         |
+| 命令                                                      | 作用                                                 |
+| --------------------------------------------------------- | ---------------------------------------------------- |
+| `sumi submit <run-id> <step-id> --ticket <ticket>`        | 校验并接受评审结果；宿主 hook 可绑定实际会话模型来源 |
+| `sumi model-recheck <run-id> <step-id> --ticket <ticket>` | 提交独立模型复核结果；参数由复核步骤给出             |
+| `context-rubrics`                                         | 约束查询命令，供 `sumi context` 调用（见下文）       |
 
 ## 准则文件
 
@@ -66,7 +68,7 @@ items:
    - ticket 不存在、与运行或步骤不匹配，或已使用过；
    - 结果文件不在派发时指定的路径，或不是合法 JSON；
    - 被评审文件的内容与请求时不一致（需要重新运行流程）；
-   - 结果没有覆盖全部适用条目、`verdict` 不是 `pass`/`fail`、缺少 `reason`，或 `fail` 条目没有 `file`。
+   - 结果没有恰好覆盖全部适用条目（缺少、重复或多余）、`verdict` 不是 `pass`/`fail`、缺少非空 `reason`，或 `fail` 条目没有 `file`。
 
    通过后结果被接受，ticket 标记为已使用。
 
@@ -113,6 +115,23 @@ items:
 
 该目录由所有 worktree 共用，不在工作树中，也不随提交传播。
 
+采用结果的每次步骤还在自身证据目录写入 `accepted-review.json`（实际采用的 `key`、`resultDigest`）。覆盖复用时这是被复用的原键，不是本次请求键；下游应重新计算共享结果摘要。`sumi submit` 在未加载宿主 hook 时仍可用于普通评审，但不能参与独立模型复核。
+
+## 独立模型复核
+
+先运行 `sumi update` 安装项目 hook，并从 Codex 或 Claude Code 的独立代理会话完成原评审及 `sumi submit`。Sumi 只从代理宿主的 hook 输入取模型身份，绑定提交 ticket 和结果摘要；不查找模型 CLI、不执行自报模型的适配器，也不采纳结果正文里的模型名。Codex 的 `PreToolUse` 提供当前模型；Claude Code 通过 `SessionStart` 和 `PostModelSwitch` 跟踪会话模型，缺失时不记录来源。然后在流程中加入复核步骤：
+
+```yaml
+- id: review/architecture
+  use: review/rubric
+  with: { rubric: architecture }
+- id: review/architecture-recheck
+  use: review/independent-recheck
+  with: { source: review/architecture, vendor: openai, model: gpt-b }
+```
+
+使用期望模型开启全新代理上下文，按 `recheck-request.json` 对每个 finding 给出 `{ "findingId", "verdict": "confirm|reject", "reason" }`，写入派发给出的 `recheck-result.json`，再在该会话执行 `sumi model-recheck`。hook 报告的模型须与 `with.vendor` / `with.model` 一致。两次执行可以同厂商，但模型 ID 必须不同；模型相同、来源缺失或冲突均阻断。复核缓存绑定原评审键/摘要、受检内容、来源和每条 finding 身份。`confirm` 保留原失败；`reject` 交人处理，不自动清除原 finding。宿主 hook 是本机来源证据，不是厂商服务端签名。Cursor 当前不提供此来源接线；Claude Code 自动 fallback 可能不报告实际请求模型，因此其会话模型作为“会话模型记录（非强证明）”参与比较，结果摘要和证据均显式标注，不能声称为服务端实际模型。
+
 ## 结论与报告
 
 - 有 `fail` 条目：步骤 `fail`，每个不通过的条目产生一条 `error` 级 finding，规则名为 `<集合>#<条目>`，带文件与行号定位。

package/node_modules/@sumi/plugins-review/dist/commands/context.js

@@ -4,9 +4,10 @@ import { readContextInput } from '@sumi/plugin-sdk';
 import picomatch from 'picomatch';
 import { loadRubric } from '../review.js';
 /** 约束查询：范围命中给定路径的评审条目（没有范围的条目对所有路径生效）。 */
-const { repoRoot, paths } = await readContextInput();
+const { repoRoot, paths, select, catalog: wantCatalog } = await readContextInput();
 const dir = join(repoRoot, 'control', 'rubrics');
 const items = [];
+const catalog = [];
 for (const file of existsSync(dir)
     ? readdirSync(dir)
         .filter((f) => f.endsWith('.yaml'))
@@ -14,8 +15,22 @@ for (const file of existsSync(dir)
     : []) {
     const id = file.replace(/\.yaml$/, '');
     const { rubric } = loadRubric(repoRoot, id);
+    if (wantCatalog) {
+        catalog.push({
+            id: `rubric:${id}`,
+            description: rubric.description ?? '',
+            source: `control/rubrics/${file}`,
+            ...(!rubric.description ? { warning: '评审集合缺少 description' } : {}),
+        });
+        for (const item of rubric.items)
+            catalog.push({ id: `rubric:${id}#${item.id}`, description: item.question, source: `control/rubrics/${file}` });
+    }
     for (const item of rubric.items) {
-        const hit = item.scope?.length ? paths.some((f) => picomatch(item.scope, { dot: true })(f)) : true;
+        const hit = select
+            ? select.includes(`rubric:${id}`) || select.includes(`rubric:${id}#${item.id}`)
+            : item.scope?.length
+                ? paths.some((f) => picomatch(item.scope, { dot: true })(f))
+                : true;
         if (!hit)
             continue;
         const global = !item.scope?.length || item.scope.includes('**');
@@ -28,5 +43,5 @@ for (const file of existsSync(dir)
         });
     }
 }
-process.stdout.write(JSON.stringify({ items }));
+process.stdout.write(JSON.stringify({ items, ...(wantCatalog ? { catalog } : {}) }));
 //# sourceMappingURL=context.js.map

package/node_modules/@sumi/plugins-review/dist/commands/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAsB,MAAM,kBAAkB,CAAC;AACxE,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,0CAA0C;AAC1C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;AACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACjD,MAAM,KAAK,GAA2B,EAAE,CAAC;AACzC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC;IAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;SACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE;IACX,CAAC,CAAC,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpG,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE;YAC9B,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;YACzB,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,IAAI,EAAE;YAC1C,MAAM,EAAE,mBAAmB,IAAI,EAAE;YACjC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAA0B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAsB,MAAM,kBAAkB,CAAC;AACxE,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,0CAA0C;AAC1C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;AACnF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACjD,MAAM,KAAK,GAA2B,EAAE,CAAC;AACzC,MAAM,OAAO,GAA0C,EAAE,CAAC;AAC1D,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC;IAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;SACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE;IACX,CAAC,CAAC,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,UAAU,EAAE,EAAE;YAClB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,MAAM,EAAE,mBAAmB,IAAI,EAAE;YACjC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM;YAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YAC/E,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM;gBAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE;YAC9B,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;YACzB,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,IAAI,EAAE;YAC1C,MAAM,EAAE,mBAAmB,IAAI,EAAE;YACjC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAA0B,CAAC,CAAC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/commands/host-model-hook.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-review/dist/commands/host-model-hook.js

@@ -0,0 +1,12 @@
+import { observeHostModelEvent } from '../model-execution.js';
+const root = process.env.SUMI_ROOT ?? process.cwd();
+const chunks = [];
+for await (const chunk of process.stdin)
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+try {
+    observeHostModelEvent(root, JSON.parse(Buffer.concat(chunks).toString('utf8')));
+}
+catch {
+    // 模型事件只提供来源证据；坏输入不能阻断无关的编辑或命令。
+}
+//# sourceMappingURL=host-model-hook.js.map

package/node_modules/@sumi/plugins-review/dist/commands/host-model-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-model-hook.js","sourceRoot":"","sources":["../../src/commands/host-model-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACpD,MAAM,MAAM,GAAa,EAAE,CAAC;AAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;IAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1G,IAAI,CAAC;IACH,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAAC,MAAM,CAAC;IACP,+BAA+B;AACjC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/commands/model-recheck.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-review/dist/commands/model-recheck.js

@@ -0,0 +1,56 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { guardCommandArgs } from '@sumi/plugin-sdk';
+import { consumeHostModelEvent } from '../model-execution.js';
+import { compareVerifiedModels } from '../model-independence.js';
+import { buildRecheckRequest, loadOriginalRecheckInput, recheckKey, validateRecheckResult, writeRecheck, } from '../recheck.js';
+import { reviewsDir } from '../review.js';
+const root = process.env.SUMI_ROOT ?? process.cwd();
+const args = process.argv.slice(2);
+guardCommandArgs(args, { usage: '用法：sumi model-recheck <run-id> <step-id> --ticket <ticket>', options: ['ticket'] });
+const ti = args.indexOf('--ticket');
+const ticketId = ti >= 0 ? args[ti + 1] : undefined;
+const [runId, stepId] = args.filter((_, i) => i !== ti && i !== ti + 1);
+function reject(message) {
+    process.stderr.write(`独立复核被拒绝：${message}\n`);
+    process.exit(1);
+}
+if (!runId || !stepId || !ticketId || !/^[a-f0-9]{16}$/.test(ticketId))
+    reject('用法：sumi model-recheck <run-id> <step-id> --ticket <ticket>');
+try {
+    const ticketPath = join(reviewsDir(root), 'recheck-tickets', `${ticketId}.json`);
+    if (!existsSync(ticketPath))
+        throw new Error('ticket 不存在');
+    const ticket = JSON.parse(readFileSync(ticketPath, 'utf8'));
+    if (ticket.ticket !== ticketId || ticket.runId !== runId || ticket.stepId !== stepId || ticket.used)
+        throw new Error('ticket 不匹配或已使用');
+    if (typeof ticket.runDir !== 'string' || typeof ticket.source !== 'string' || !ticket.reviewer || typeof ticket.resultPath !== 'string')
+        throw new Error('ticket 格式无效');
+    const original = loadOriginalRecheckInput(root, ticket.runDir, ticket.source);
+    const independent = compareVerifiedModels(original.original, ticket.reviewer);
+    if (!independent.independent)
+        throw new Error(independent.reason);
+    const expected = buildRecheckRequest({ ...original, reviewer: ticket.reviewer });
+    if (recheckKey(expected) !== ticket.key)
+        throw new Error('复核输入已变化，请重新运行流程');
+    const supplied = JSON.parse(readFileSync(ticket.requestPath, 'utf8'));
+    if (recheckKey(supplied) !== ticket.key)
+        throw new Error('复核请求与 ticket 不一致');
+    const response = JSON.parse(readFileSync(ticket.resultPath, 'utf8'));
+    const error = validateRecheckResult(expected, response);
+    if (error)
+        throw new Error(`复核结果不合法：${error}`);
+    const identity = consumeHostModelEvent(root, ticketId, 'model-recheck');
+    if (identity.vendor !== ticket.reviewer.vendor || identity.model !== ticket.reviewer.model)
+        throw new Error('复核结果提交者的宿主模型与目标模型不一致');
+    const current = loadOriginalRecheckInput(root, ticket.runDir, ticket.source);
+    if (recheckKey(buildRecheckRequest({ ...current, reviewer: ticket.reviewer })) !== ticket.key)
+        throw new Error('提交期间被评审内容发生变化');
+    writeRecheck(root, expected, response, ticketId, identity);
+    writeFileSync(ticketPath, JSON.stringify({ ...ticket, used: true }, null, 2));
+    process.stdout.write('独立复核结果已接受，请重新运行流程\n');
+}
+catch (error) {
+    reject(error.message);
+}
+//# sourceMappingURL=model-recheck.js.map

package/node_modules/@sumi/plugins-review/dist/commands/model-recheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-recheck.js","sourceRoot":"","sources":["../../src/commands/model-recheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,UAAU,EACV,qBAAqB,EACrB,YAAY,GAIb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAe1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,4DAA4D,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACrH,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAExE,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;IACpE,MAAM,CAAC,4DAA4D,CAAC,CAAC;AACvE,IAAI,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI;QACjG,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrI,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,WAAW,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAmB,CAAC;IACxF,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK;QACxF,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,UAAU,CAAC,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG;QAC3F,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAyB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5E,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAC9C,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/commands/submit.js

@@ -1,11 +1,8 @@
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { readFileSync } from 'node:fs';
 import { guardCommandArgs } from '@sumi/plugin-sdk';
-import { digestOfBlobs, fileBlobs, isReviewResult, loadRubric, requestKey, ticketsDir, validateReviewResult, writeAccepted, writeCoverage, } from '../review.js';
-/**
- * sumi submit <run-id> <step-id> --ticket <t>：校验并接受评审结果。
- * ticket 必须匹配且未使用，结果文件必须在派发时指定的路径，覆盖全部适用条目，被评审内容未变化。
- */
+import { consumeHostModelEvent, writeModelSource } from '../model-execution.js';
+import { isReviewResult, validateReviewResult } from '../review.js';
+import { acceptSubmission, prepareSubmission } from '../submission.js';
 const root = process.env.SUMI_ROOT ?? process.cwd();
 const args = process.argv.slice(2);
 guardCommandArgs(args, { usage: '用法：sumi submit <run-id> <step-id> --ticket <ticket>', options: ['ticket'] });
@@ -18,73 +15,34 @@ function reject(message) {
 }
 if (!runId || !stepId || !ticketId)
     reject('用法：sumi submit <run-id> <step-id> --ticket <ticket>');
-const ticketPath = join(ticketsDir(root), `${ticketId}.json`);
-if (!existsSync(ticketPath))
-    reject(`ticket ${ticketId} 不存在`);
-/** 读取应为 JSON 对象的文件；不可读、不是合法 JSON 或不是对象（null、数组、数字等）时拒绝。 */
-function readObject(path, what) {
+try {
+    const prepared = prepareSubmission(root, runId, stepId, ticketId);
     let value;
     try {
-        value = JSON.parse(readFileSync(path, 'utf8'));
+        value = JSON.parse(readFileSync(prepared.ticket.resultPath, 'utf8'));
     }
     catch {
-        reject(`${what}无法读取或不是合法 JSON：${path}`);
+        throw new Error('结果文件不是合法 JSON');
     }
-    if (typeof value !== 'object' || value === null || Array.isArray(value))
-        reject(`${what}格式不合法（应为 JSON 对象）：${path}`);
-    return value;
-}
-const ticket = readObject(ticketPath, 'ticket ');
-if (ticket.runId !== runId || ticket.stepId !== stepId)
-    reject('ticket 与运行或步骤不匹配');
-if (ticket.used)
-    reject('ticket 已使用');
-if (typeof ticket.resultPath !== 'string' || !existsSync(ticket.resultPath))
-    reject(`结果文件不在指定路径：${ticket.resultPath}`);
-if (typeof ticket.requestPath !== 'string' || typeof ticket.resultPath !== 'string')
-    reject('ticket 格式不合法');
-const request = readObject(ticket.requestPath, '评审请求');
-if (!Array.isArray(request.items) || !request.items.every((i) => typeof i?.id === 'string' && Array.isArray(i.files)))
-    reject('评审请求格式不合法');
-// 请求必须是派发时的那一份：键与共享状态目录中的 ticket 一致，且由请求内容重算的键不变（条目范围、摘要未被改写）
-if (request.key !== ticket.key)
-    reject('评审请求的键与 ticket 不一致，请求可能被改写，请重新运行流程');
-if (requestKey(request) !== request.key)
-    reject('评审请求键与请求内容不符（条目范围或摘要被改写），请重新运行流程');
-let rubricDigest;
-try {
-    rubricDigest = loadRubric(request.repoRoot, request.rubric).digest;
+    const errors = validateReviewResult(prepared.request, value);
+    if (errors.length)
+        throw new Error(errors.join('；'));
+    if (!isReviewResult(value))
+        throw new Error('结果格式不合法');
+    // 普通提交保持兼容；只有真实宿主事件存在时，才附加可供独立复核使用的来源。
+    let identity = null;
+    try {
+        identity = consumeHostModelEvent(root, ticketId, 'submit');
+    }
+    catch {
+        // 无模型来源时仍可用于普通 rubric，但独立复核会拒绝。
+    }
+    const accepted = acceptSubmission(prepared, value);
+    if (identity)
+        writeModelSource(root, prepared.request.key, accepted, ticketId, identity);
+    process.stdout.write('评审结果已接受，请重新运行流程\n');
 }
 catch (error) {
     reject(error.message);
 }
-if (rubricDigest !== request.rubricDigest)
-    reject('评审准则已变化，请重新运行流程');
-const reviewed = [...new Set(request.items.flatMap((i) => i.files))];
-// blob 只算一次：内容核对与覆盖记录出自同一次结果，两次计算之间内容变化不会被记入覆盖
-const blobs = fileBlobs(request.repoRoot, reviewed);
-if (digestOfBlobs(reviewed, blobs) !== request.contentDigest)
-    reject('被评审的内容已变化，请重新运行流程');
-let value;
-try {
-    value = JSON.parse(readFileSync(ticket.resultPath, 'utf8'));
-}
-catch {
-    reject('结果文件不是合法 JSON');
-}
-const errors = validateReviewResult(request, value);
-if (errors.length)
-    reject(errors.join('；'));
-// 与读取已接受结果同一口径：写盘的结果必须能被 readAccepted 读出，否则会“接受后视为无结果、重新派发”循环
-if (!isReviewResult(value))
-    reject('结果格式不合法：verdicts 每一项都须是含字符串 item、verdict 为 pass 或 fail 的对象（含多余条目）');
-writeAccepted(root, request.key, value);
-// 记录覆盖范围：之后范围更窄（如门禁只看新增提交）且内容一致的运行可复用这份评审
-writeCoverage(root, request.key, {
-    rubricDigest: request.rubricDigest,
-    items: request.items.map((i) => ({ id: i.id, files: i.files })),
-    blobs: Object.fromEntries(blobs),
-});
-writeFileSync(ticketPath, JSON.stringify({ ...ticket, used: true }, null, 2));
-process.stdout.write('评审结果已接受，请重新运行流程\n');
 //# sourceMappingURL=submit.js.map

package/node_modules/@sumi/plugins-review/dist/commands/submit.js.map

@@ -1 +1 @@
-{"version":3,"file":"submit.js","sourceRoot":"","sources":["../../src/commands/submit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EACL,aAAa,EACb,SAAS,EACT,cAAc,EACd,UAAU,EACV,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,aAAa,EACb,aAAa,GAGd,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9G,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAExE,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;IAAE,MAAM,CAAC,qDAAqD,CAAC,CAAC;AAClG,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AAC9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;IAAE,MAAM,CAAC,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC9D,2DAA2D;AAC3D,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,GAAG,IAAI,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,GAAG,IAAI,qBAAqB,IAAI,EAAE,CAAC,CAAC;IACpH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,SAAS,CAAsB,CAAC;AACtE,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;IAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACnF,IAAI,MAAM,CAAC,IAAI;IAAE,MAAM,CAAC,YAAY,CAAC,CAAC;AACtC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;IAAE,MAAM,CAAC,cAAc,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAEvH,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;IAAE,MAAM,CAAC,cAAc,CAAC,CAAC;AAC5G,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAA6B,CAAC;AACnF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnH,MAAM,CAAC,WAAW,CAAC,CAAC;AACtB,8DAA8D;AAC9D,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;IAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAC7E,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,GAAG;IAAE,MAAM,CAAC,kCAAkC,CAAC,CAAC;AACpF,IAAI,YAAoB,CAAC;AACzB,IAAI,CAAC;IACH,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;AACrE,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AACD,IAAI,YAAY,KAAK,OAAO,CAAC,YAAY;IAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACrE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,+CAA+C;AAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpD,IAAI,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,OAAO,CAAC,aAAa;IAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE1F,IAAI,KAAc,CAAC;AACnB,IAAI,CAAC;IACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,CAAC,eAAe,CAAC,CAAC;AAC1B,CAAC;AACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACpD,IAAI,MAAM,CAAC,MAAM;IAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5C,8DAA8D;AAC9D,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;IAAE,MAAM,CAAC,mEAAmE,CAAC,CAAC;AAExG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACxC,0CAA0C;AAC1C,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;IAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;CACjC,CAAC,CAAC;AACH,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"submit.js","sourceRoot":"","sources":["../../src/commands/submit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9G,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAExE,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;IAAE,MAAM,CAAC,qDAAqD,CAAC,CAAC;AAClG,IAAI,CAAC;IACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,uCAAuC;IACvC,IAAI,QAAQ,GAAoD,IAAI,CAAC;IACrE,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,QAAQ;QAAE,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/node_modules/@sumi/plugins-review/dist/model-execution.d.ts

@@ -0,0 +1,29 @@
+import { type ReviewResult } from './review.js';
+export interface ModelIdentity {
+    vendor: string;
+    model: string;
+    host: 'codex' | 'claude';
+    assurance: 'tool-model' | 'session-model';
+    sessionId: string;
+    eventId: string;
+}
+export interface ModelSource extends ModelIdentity {
+    key: string;
+    resultDigest: string;
+    ticket: string;
+}
+interface HostEvent extends ModelIdentity {
+    action: 'submit' | 'model-recheck';
+    ticket: string;
+    issuedAt: number;
+    conflict?: boolean;
+}
+export declare function canonicalModelId(value: unknown): string | null;
+/** 只采纳代理宿主 hook 的结构化事件，不执行第三方模型适配器。 */
+export declare function observeHostModelEvent(root: string, value: unknown, now?: number): void;
+/** ticket 必须有最近的宿主工具事件；一份事件只能被一次提交消耗。 */
+export declare function consumeHostModelEvent(root: string, ticket: string, action: HostEvent['action'], now?: number): ModelIdentity;
+export declare function wasHostModelEventConsumed(root: string, ticket: string, action: HostEvent['action'], identity: ModelIdentity): boolean;
+export declare function writeModelSource(root: string, key: string, result: ReviewResult, ticket: string, identity: ModelIdentity): void;
+export declare function readModelSource(root: string, key: string, result: ReviewResult): ModelSource | null;
+export {};

package/node_modules/@sumi/plugins-review/dist/model-execution.js

@@ -0,0 +1,157 @@
+import { createHash } from 'node:crypto';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { resultDigest, reviewsDir } from './review.js';
+const record = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const keyOf = (value) => createHash('sha256').update(value).digest('hex');
+const stateDir = (root) => {
+    const dir = join(reviewsDir(root), 'host-model');
+    mkdirSync(dir, { recursive: true });
+    return dir;
+};
+const statePath = (root, sessionId) => join(stateDir(root), `session-${keyOf(sessionId)}.json`);
+const ticketPath = (root, ticket) => {
+    if (!/^[a-f0-9]{8}(?:[a-f0-9]{8})?$/.test(ticket))
+        throw new Error('模型事件 ticket 格式无效');
+    return join(stateDir(root), `ticket-${ticket}.json`);
+};
+export function canonicalModelId(value) {
+    if (typeof value !== 'string')
+        return null;
+    const model = value.trim().toLowerCase();
+    if (!/^[a-z0-9][a-z0-9._/-]*$/.test(model) || ['auto', 'default', 'latest', 'unknown'].includes(model))
+        return null;
+    return model;
+}
+function vendorFor(host) {
+    return host === 'codex' ? 'openai' : 'anthropic';
+}
+function readJson(path) {
+    try {
+        const value = JSON.parse(readFileSync(path, 'utf8'));
+        return record(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** 只采纳代理宿主 hook 的结构化事件，不执行第三方模型适配器。 */
+export function observeHostModelEvent(root, value, now = Date.now()) {
+    if (!record(value) || typeof value.session_id !== 'string' || !value.session_id || typeof value.cwd !== 'string')
+        return;
+    const rel = relative(root, value.cwd);
+    if (!isAbsolute(value.cwd) || rel === '..' || rel.startsWith(`..${sep}`))
+        return;
+    const sessionId = value.session_id;
+    if (value.hook_event_name === 'SessionStart' || value.hook_event_name === 'PostModelSwitch') {
+        const model = canonicalModelId(value.hook_event_name === 'PostModelSwitch' ? value.to_model : value.model);
+        writeFileSync(statePath(root, sessionId), JSON.stringify({ model, updatedAt: now }));
+        return;
+    }
+    if (value.hook_event_name !== 'PreToolUse' || !record(value.tool_input))
+        return;
+    const command = value.tool_input.command;
+    if (typeof command !== 'string' || typeof value.tool_use_id !== 'string' || !value.tool_use_id)
+        return;
+    const match = command.match(/(?:^|\s)(?:sumi|node\s+(?:"[^"]*sumi\.cjs"|'[^']*sumi\.cjs'|\S*sumi\.cjs))\s+(submit|model-recheck)\s+\S+\s+\S+\s+--ticket\s+([a-f0-9]{8,16})(?:\s|$)/);
+    if (!match)
+        return;
+    const host = typeof value.turn_id === 'string' ? 'codex' : 'claude';
+    const session = host === 'claude' ? readJson(statePath(root, sessionId)) : null;
+    const model = canonicalModelId(host === 'codex' ? value.model : session?.model);
+    if (!model)
+        return;
+    const event = {
+        action: match[1],
+        ticket: match[2],
+        host,
+        assurance: host === 'codex' ? 'tool-model' : 'session-model',
+        vendor: vendorFor(host),
+        model,
+        sessionId,
+        eventId: value.tool_use_id,
+        issuedAt: now,
+    };
+    const path = ticketPath(root, event.ticket);
+    const previous = readJson(path);
+    // 已消耗事件是评审来源证据；同一命令误重试时不能改写它。
+    if (previous?.used)
+        return;
+    if (previous &&
+        (previous.conflict ||
+            previous.model !== event.model ||
+            previous.sessionId !== event.sessionId ||
+            previous.host !== event.host ||
+            previous.action !== event.action))
+        event.conflict = true;
+    writeFileSync(path, JSON.stringify(event));
+}
+/** ticket 必须有最近的宿主工具事件；一份事件只能被一次提交消耗。 */
+export function consumeHostModelEvent(root, ticket, action, now = Date.now()) {
+    const event = readJson(ticketPath(root, ticket));
+    if (!event ||
+        event.ticket !== ticket ||
+        event.action !== action ||
+        event.conflict ||
+        typeof event.issuedAt !== 'number' ||
+        now < event.issuedAt ||
+        now - event.issuedAt > 120_000 ||
+        !canonicalModelId(event.model) ||
+        (event.host !== 'codex' && event.host !== 'claude') ||
+        event.assurance !== (event.host === 'codex' ? 'tool-model' : 'session-model') ||
+        event.vendor !== vendorFor(event.host) ||
+        typeof event.sessionId !== 'string' ||
+        typeof event.eventId !== 'string' ||
+        event.used)
+        throw new Error('缺少与该 ticket 绑定的当前代理宿主模型事件，或模型来源存在冲突');
+    writeFileSync(ticketPath(root, ticket), JSON.stringify({ ...event, used: true }));
+    return {
+        host: event.host,
+        assurance: event.assurance,
+        vendor: event.vendor,
+        model: event.model,
+        sessionId: event.sessionId,
+        eventId: event.eventId,
+    };
+}
+function sourcesDir(root) {
+    const dir = join(reviewsDir(root), 'sources');
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+export function wasHostModelEventConsumed(root, ticket, action, identity) {
+    const event = readJson(ticketPath(root, ticket));
+    return Boolean(event?.used &&
+        !event.conflict &&
+        event.action === action &&
+        event.ticket === ticket &&
+        event.host === identity.host &&
+        event.assurance === identity.assurance &&
+        event.vendor === identity.vendor &&
+        event.model === identity.model &&
+        event.sessionId === identity.sessionId &&
+        event.eventId === identity.eventId);
+}
+export function writeModelSource(root, key, result, ticket, identity) {
+    const source = { key, resultDigest: resultDigest(result), ticket, ...identity };
+    writeFileSync(join(sourcesDir(root), `${key}.json`), JSON.stringify(source, null, 2));
+}
+export function readModelSource(root, key, result) {
+    const source = readJson(join(sourcesDir(root), `${key}.json`));
+    if (!source ||
+        source.key !== key ||
+        source.resultDigest !== resultDigest(result) ||
+        !canonicalModelId(source.model) ||
+        (source.host !== 'codex' && source.host !== 'claude') ||
+        source.assurance !== (source.host === 'codex' ? 'tool-model' : 'session-model') ||
+        source.vendor !== vendorFor(source.host) ||
+        typeof source.sessionId !== 'string' ||
+        typeof source.eventId !== 'string' ||
+        typeof source.ticket !== 'string' ||
+        !/^[a-f0-9]{8}$/.test(source.ticket))
+        return null;
+    if (!wasHostModelEventConsumed(root, source.ticket, 'submit', source))
+        return null;
+    return source;
+}
+//# sourceMappingURL=model-execution.js.map

package/node_modules/@sumi/plugins-review/dist/model-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-execution.js","sourceRoot":"","sources":["../src/model-execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAqB,MAAM,aAAa,CAAC;AAyB1E,MAAM,MAAM,GAAG,CAAC,KAAc,EAAkB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACxH,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AACF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAChH,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;IAClD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,MAAM,OAAO,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAA2B;IAC5C,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAClF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO;IACzH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QAAE,OAAO;IACjF,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IACnC,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,iBAAiB,EAAE,CAAC;QAC5F,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,eAAe,KAAK,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3G,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO;IAChF,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO;IACvG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CACzB,uJAAuJ,CACxJ,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,IAAI,GAA0B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAc;QACvB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAwB;QACvC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE;QACjB,IAAI;QACJ,SAAS,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe;QAC5D,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;QACvB,KAAK;QACL,SAAS;QACT,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,QAAQ,EAAE,GAAG;KACd,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,8BAA8B;IAC9B,IAAI,QAAQ,EAAE,IAAI;QAAE,OAAO;IAC3B,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,QAAQ;YAChB,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAC9B,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACtC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAC5B,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;QAEnC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAc,EAAE,MAA2B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC/G,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,IACE,CAAC,KAAK;QACN,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,QAAQ;QACd,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,GAAG,GAAG,KAAK,CAAC,QAAQ;QACpB,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,OAAO;QAC9B,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;QACnD,KAAK,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7E,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QACtC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,IAAI;QAEV,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAuC;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAe;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,MAAc,EAAE,MAA2B,EAAE,QAAuB;IAC1H,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,OAAO,OAAO,CACZ,KAAK,EAAE,IAAI;QACX,CAAC,KAAK,CAAC,QAAQ;QACf,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC5B,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QACtC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAChC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC9B,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QACtC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW,EAAE,MAAoB,EAAE,MAAc,EAAE,QAAuB;IACvH,MAAM,MAAM,GAAgB,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC7F,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,MAAoB;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC;IAC/D,IACE,CAAC,MAAM;QACP,MAAM,CAAC,GAAG,KAAK,GAAG;QAClB,MAAM,CAAC,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC;QAC5C,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;QACrD,MAAM,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;QAC/E,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QACxC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAEpC,OAAO,IAAI,CAAC;IACd,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAgB,EAAE,QAAQ,EAAE,MAAkC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzH,OAAO,MAAgC,CAAC;AAC1C,CAAC"}

package/node_modules/@sumi/plugins-review/dist/model-independence.d.ts

@@ -0,0 +1,10 @@
+export interface ModelIdentity {
+    vendor: string;
+    model: string;
+}
+export interface IndependenceDecision {
+    independent: boolean;
+    reason: string;
+}
+/** 仅比较已由受信执行路径取得的身份；调用方必须先验证来源，不能把自报 JSON 直接传入。 */
+export declare function compareVerifiedModels(original: ModelIdentity | null, reviewer: ModelIdentity | null, reviewerClaim?: string): IndependenceDecision;

package/node_modules/@sumi/plugins-review/dist/model-independence.js

@@ -0,0 +1,14 @@
+import { canonicalModelId } from './model-execution.js';
+/** 仅比较已由受信执行路径取得的身份；调用方必须先验证来源，不能把自报 JSON 直接传入。 */
+export function compareVerifiedModels(original, reviewer, reviewerClaim) {
+    const first = canonicalModelId(original?.model);
+    const second = canonicalModelId(reviewer?.model);
+    if (!original?.vendor || !reviewer?.vendor || !first || !second)
+        return { independent: false, reason: '原评审或复核缺少可核验的厂商和明确模型 ID' };
+    if (reviewerClaim !== undefined && canonicalModelId(reviewerClaim) !== second)
+        return { independent: false, reason: '复核模型声明与受信执行来源冲突' };
+    if (first === second)
+        return { independent: false, reason: `原评审与复核使用同一模型 ${first}` };
+    return { independent: true, reason: '使用不同的明确模型，允许独立复核' };
+}
+//# sourceMappingURL=model-independence.js.map