@feng0531/dsh-code-review 0.30.0 → 0.30.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # 变更记录
 
+## 0.30.1
+
+- 风险请求来源sourceReadCoverage记录本批生成阶段requested/read/unread；未读来源不能以无发现冒充完整核查。
+- search/find与旧批次不算片段读取，报告partial限制，无新调用/权限，285测试通过。
+- 完成主loop核心退出/定位/预算调度复核；agent/templates剩余核查仍待。
+
 ## 0.30.0
 
 - Git自动直接上下文改512字面候选index探针，不枚举全tracked；普通tracked有效性及同probe竞态重核保持。

package/README.md

@@ -4,7 +4,9 @@
 
 ## 当前状态
 
-当前代码版本为 0.30.0
+当前代码版本为 0.30.1
+
+风险计划sourceIds会记录本批生成读取片段/未读状态；未读产生partial覆盖限制。search/find不算读，读过片段也不证明条件已核查或缺陷成立，不自动添加调用。
 
 Git自动直接依赖上下文仅查询从已捕获源码导出的最多512路径索引探针，不列整个tracked树；累计索引1MiB并在结束核对同探针指纹。SVN沿用原索引限额，此项不冒充SVN等价。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feng0531/dsh-code-review",
-  "version": "0.30.0",
+  "version": "0.30.1",
   "private": false,
   "license": "SEE LICENSE IN LICENSE",
   "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/" },

package/src/review.mjs

@@ -1,4 +1,5 @@
 import { correctAnchor } from './anchor-correction.mjs';
+import { riskReadCoverage } from './risk-read-coverage.mjs';
 import { BUSINESS_GROUP_INSTRUCTIONS, prepareBusinessGroups, validateBusinessGroups } from './business-groups.mjs';
 import { RISK_PLAN_INSTRUCTIONS, validateRiskPlan } from './risk-plan.mjs';
 import { prepareInteractionInput } from './interaction-input.mjs';
@@ -186,6 +187,11 @@ export async function reviewSnapshot(snapshot, model, options = {}) {
             response = decoded;
           }
         }
+        if (options.enableRiskPlanning === true && !batch.synthesis) {
+          const entry=state.riskPlans.at(-1);
+          entry.sourceReadCoverage=riskReadCoverage(entry.risks,(state.retrievalAudit??[]).slice(auditStart),scope?.catalog()??[],input.id);
+          if(entry.sourceReadCoverage.some(c=>c.unreadSourceIds.length)) report.limitations.push({fileId:file.id,text:'风险计划请求的部分来源未在本次生成阶段读取；不能视为已核查风险条件或排除问题'});
+        }
         const generated = batch.interaction ? validateInteractionFindings(response, input, batch.interaction, (state.retrievalAudit ?? []).slice(auditStart), scope.catalog()) : validateResponse(response, file, changes);
         if (batch.synthesis) validateSynthesisReads(generated.findings, changes, (state.retrievalAudit ?? []).slice(auditStart), scope.catalog(), file.id, input.id);
         if (!batch.interaction && state.sourceMode === 'change-windows') validateWindowFindings(generated.findings, batch.synthesis ? prepared.synthesis.windows : JSON.parse(batch.payload).windows, batch.synthesis === true);

package/src/risk-read-coverage.mjs

@@ -0,0 +1,6 @@
+// Read occurrence only, never complete source coverage or semantic verification.
+export function riskReadCoverage(risks, audit, catalog, snapshotId){
+ const allowed=new Set(catalog.map(s=>s.id));
+ const read=new Set(audit.filter(r=>r.kind==='read'&&r.snapshotId===snapshotId&&r.stage==='retrieved-locally'&&Number.isSafeInteger(r.count)&&r.count>0&&allowed.has(r.sourceId)).map(r=>r.sourceId));
+ return risks.map(r=>({riskId:r.id,requestedSourceIds:[...r.sourceIds],readSourceIds:r.sourceIds.filter(id=>read.has(id)),unreadSourceIds:r.sourceIds.filter(id=>!read.has(id)),status:r.sourceIds.some(id=>!read.has(id))?'unread-sources':r.sourceIds.length?'fragments-read':'no-sources-requested',conditions:'unverified'}));
+}