@feng0531/dsh-code-review 0.30.0 → 0.30.2

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # 变更记录
 
+## 0.30.2
+
+- 对照Agent核心plan失败继续main行为，风险计划异常回退原输入主审查，不传无效假设，保留fallback原因/partial限制。
+- 原调用/时间预算与取消不绕过，不重试计划；主及交互回退287测试通过。
+
+## 0.30.1
+
+- 风险请求来源sourceReadCoverage记录本批生成阶段requested/read/unread；未读来源不能以无发现冒充完整核查。
+- search/find与旧批次不算片段读取，报告partial限制，无新调用/权限，285测试通过。
+- 完成主loop核心退出/定位/预算调度复核；agent/templates剩余核查仍待。
+
 ## 0.30.0
 
 - Git自动直接上下文改512字面候选index探针，不枚举全tracked；普通tracked有效性及同probe竞态重核保持。

package/README.md

@@ -4,7 +4,11 @@
 
 ## 当前状态
 
-当前代码版本为 0.30.0
+当前代码版本为 0.30.2
+
+风险计划失败时在原预算内回退不带计划的主审查，保留fallback原因与partial限制；不重试无效计划，取消/超时/调用耗尽仍阻断。
+
+风险计划sourceIds会记录本批生成读取片段/未读状态；未读产生partial覆盖限制。search/find不算读，读过片段也不证明条件已核查或缺陷成立，不自动添加调用。
 
 Git自动直接依赖上下文仅查询从已捕获源码导出的最多512路径索引探针，不列整个tracked树；累计索引1MiB并在结束核对同探针指纹。SVN沿用原索引限额，此项不冒充SVN等价。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feng0531/dsh-code-review",
-  "version": "0.30.0",
+  "version": "0.30.2",
   "private": false,
   "license": "SEE LICENSE IN LICENSE",
   "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/" },

package/src/review.mjs

@@ -1,4 +1,5 @@
 import { correctAnchor } from './anchor-correction.mjs';
+import { riskReadCoverage } from './risk-read-coverage.mjs';
 import { BUSINESS_GROUP_INSTRUCTIONS, prepareBusinessGroups, validateBusinessGroups } from './business-groups.mjs';
 import { RISK_PLAN_INSTRUCTIONS, validateRiskPlan } from './risk-plan.mjs';
 import { prepareInteractionInput } from './interaction-input.mjs';
@@ -161,6 +162,7 @@ export async function reviewSnapshot(snapshot, model, options = {}) {
           state.riskPlans ??= [];
           const entry = { status: 'pending', windowIds: batch.windowIds, ...(batch.interaction ? {groupId:batch.interaction.id,sourceMode:'file-interaction'} : {}), risks: [] };
           state.riskPlans.push(entry);
+          try {
           const response = await executor({ ...enclosingRequest, input: batch.payload, instructions: RISK_PLAN_INSTRUCTIONS });
           const riskFiles = batch.interaction ? JSON.parse(batch.payload).files : [{ fileId: file.id, edits: changes.edits ?? [] }];
           const risks = validateRiskPlan(response, riskFiles, scope?.catalog() ?? []);
@@ -168,6 +170,11 @@ export async function reviewSnapshot(snapshot, model, options = {}) {
           entry.status = 'completed'; entry.risks = risks;
           batchPayload = JSON.stringify({ ...JSON.parse(batch.payload), riskPlan: risks, riskPlanNotice: '未可信假设而非发现或证据；须验证及寻找反证，不增加读取权限。' });
           if (!initialInputBudget({ instructions: REVIEW_INSTRUCTIONS, input: batchPayload }, scope, maxInputBytes).fits) throw new Error('Risk-enriched review input exceeds budget');
+          } catch(error) {
+            enclosingRequest.signal.throwIfAborted();
+            entry.status='fallback';entry.reason=error?.message??String(error);entry.risks=[];batchPayload=batch.payload;
+            report.limitations.push({fileId:file.id,text:'风险计划未完成，回退原输入主审查：'+entry.reason});
+          }
         }
         const request = { ...enclosingRequest, input: batchPayload };
         const auditStart = state.retrievalAudit?.length ?? 0;
@@ -186,6 +193,11 @@ export async function reviewSnapshot(snapshot, model, options = {}) {
             response = decoded;
           }
         }
+        if (options.enableRiskPlanning === true && !batch.synthesis) {
+          const entry=state.riskPlans.at(-1);
+          entry.sourceReadCoverage=riskReadCoverage(entry.risks,(state.retrievalAudit??[]).slice(auditStart),scope?.catalog()??[],input.id);
+          if(entry.sourceReadCoverage.some(c=>c.unreadSourceIds.length)) report.limitations.push({fileId:file.id,text:'风险计划请求的部分来源未在本次生成阶段读取；不能视为已核查风险条件或排除问题'});
+        }
         const generated = batch.interaction ? validateInteractionFindings(response, input, batch.interaction, (state.retrievalAudit ?? []).slice(auditStart), scope.catalog()) : validateResponse(response, file, changes);
         if (batch.synthesis) validateSynthesisReads(generated.findings, changes, (state.retrievalAudit ?? []).slice(auditStart), scope.catalog(), file.id, input.id);
         if (!batch.interaction && state.sourceMode === 'change-windows') validateWindowFindings(generated.findings, batch.synthesis ? prepared.synthesis.windows : JSON.parse(batch.payload).windows, batch.synthesis === true);

package/src/risk-read-coverage.mjs

@@ -0,0 +1,6 @@
+// Read occurrence only, never complete source coverage or semantic verification.
+export function riskReadCoverage(risks, audit, catalog, snapshotId){
+ const allowed=new Set(catalog.map(s=>s.id));
+ const read=new Set(audit.filter(r=>r.kind==='read'&&r.snapshotId===snapshotId&&r.stage==='retrieved-locally'&&Number.isSafeInteger(r.count)&&r.count>0&&allowed.has(r.sourceId)).map(r=>r.sourceId));
+ return risks.map(r=>({riskId:r.id,requestedSourceIds:[...r.sourceIds],readSourceIds:r.sourceIds.filter(id=>read.has(id)),unreadSourceIds:r.sourceIds.filter(id=>!read.has(id)),status:r.sourceIds.some(id=>!read.has(id))?'unread-sources':r.sourceIds.length?'fragments-read':'no-sources-requested',conditions:'unverified'}));
+}