@hongmaple0820/scale-engine 0.7.2 → 0.9.0

package/dist/guardrails/GateEvaluator.js

@@ -0,0 +1,129 @@
+// SCALE Engine - Harness Engineering: 程序化质量门禁评估器
+// 文章启发："不可机器验证的约束是无效约束"
+import { logger } from '../core/logger.js';
+export class GateEvaluator {
+    static evaluate(conditionStr, payload) {
+        try {
+            const conditions = this.parseConditions(conditionStr);
+            const results = conditions.map(c => this.checkCondition(c, payload));
+            const passed = results.every(r => r.passed);
+            logger.debug({ conditionStr, passed }, 'Gate evaluated');
+            return passed;
+        }
+        catch (err) {
+            logger.error({ conditionStr, err }, 'Gate evaluation failed');
+            return false;
+        }
+    }
+    static parseConditions(conditionStr) {
+        const conditionPattern = /(\w+)\s*(==|!=|>=|<=|>|<)\s*(\d+|true|false|"[^"]*"|'[^']*')/g;
+        const conditions = [];
+        let match;
+        while ((match = conditionPattern.exec(conditionStr)) !== null) {
+            const field = match[1];
+            const operator = match[2];
+            let value = match[3];
+            if (value === 'true')
+                value = true;
+            else if (value === 'false')
+                value = false;
+            else if (/^\d+$/.test(value))
+                value = parseInt(value, 10);
+            else if (/^["']/.test(value))
+                value = value.slice(1, -1);
+            conditions.push({ field, operator, value });
+        }
+        return conditions;
+    }
+    static checkCondition(condition, payload) {
+        const { field, operator, value } = condition;
+        const actual = payload[field];
+        if (actual === undefined)
+            return { passed: false, reason: `字段 ${field} 未定义` };
+        let passed = false;
+        switch (operator) {
+            case '==':
+                passed = actual === value;
+                break;
+            case '!=':
+                passed = actual !== value;
+                break;
+            case '>=':
+                passed = typeof actual === 'number' && actual >= value;
+                break;
+            case '<=':
+                passed = typeof actual === 'number' && actual <= value;
+                break;
+            case '>':
+                passed = typeof actual === 'number' && actual > value;
+                break;
+            case '<':
+                passed = typeof actual === 'number' && actual < value;
+                break;
+        }
+        return { passed, reason: passed ? undefined : `${field}=${actual} 不满足 ${operator} ${value}` };
+    }
+    static checkHarnessGates(payload, requiredGates = ['ci-strict', 'coverage-80', 'review-passed', 'lint-clean']) {
+        const gateResults = [];
+        const payloadRecord = payload;
+        for (const gateId of requiredGates) {
+            const gate = this.HARNESS_GATES[gateId];
+            if (!gate)
+                continue;
+            if (gate.automatedCheck) {
+                const passed = this.evaluate(gate.automatedCheck, payloadRecord);
+                gateResults.push({ gate, passed, reason: passed ? undefined : `未满足 ${gate.automatedCheck}` });
+            }
+            else if (gate.conditions) {
+                const results = gate.conditions.map(c => this.checkCondition(c, payloadRecord));
+                const passed = results.every(r => r.passed);
+                gateResults.push({ gate, passed, reason: passed ? undefined : results.find(r => !r.passed)?.reason });
+            }
+        }
+        const passed = gateResults.filter(r => r.gate.required).every(r => r.passed);
+        return { passed, gateResults };
+    }
+}
+GateEvaluator.HARNESS_GATES = {
+    'ci-strict': {
+        name: 'CI Strict Verification',
+        required: true,
+        automatedCheck: 'buildExitCode == 0 && testPassed == true && testTotal > 0 && testFailed == 0',
+        conditions: [
+            { field: 'buildExitCode', operator: '==', value: 0, description: '编译通过' },
+            { field: 'testPassed', operator: '==', value: true, description: '测试通过' },
+            { field: 'testTotal', operator: '>', value: 0, description: '测试数量>0' },
+            { field: 'testFailed', operator: '==', value: 0, description: '无失败测试' },
+        ],
+        passed: false,
+    },
+    'coverage-80': {
+        name: 'Coverage Gate',
+        required: true,
+        automatedCheck: 'testCoverage >= 80',
+        conditions: [{ field: 'testCoverage', operator: '>=', value: 80, description: '覆盖率≥80%' }],
+        passed: false,
+    },
+    'review-passed': {
+        name: 'Code Review Gate',
+        required: true,
+        automatedCheck: 'reviewPassed == true',
+        conditions: [{ field: 'reviewPassed', operator: '==', value: true, description: '评审通过' }],
+        passed: false,
+    },
+    'lint-clean': {
+        name: 'Lint Gate',
+        required: true,
+        automatedCheck: 'lintStatus == "success"',
+        conditions: [{ field: 'lintStatus', operator: '==', value: 'success', description: 'Lint通过' }],
+        passed: false,
+    },
+    'e2e-passed': {
+        name: 'E2E Verification Gate',
+        required: false,
+        automatedCheck: 'e2ePassed == true',
+        conditions: [{ field: 'e2ePassed', operator: '==', value: true, description: '端到端测试通过' }],
+        passed: false,
+    },
+};
+//# sourceMappingURL=GateEvaluator.js.map

package/dist/guardrails/GateEvaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateEvaluator.js","sourceRoot":"","sources":["../../src/guardrails/GateEvaluator.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,wBAAwB;AAGxB,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C,MAAM,OAAO,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,YAAoB,EAAE,OAAgC;QACpE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;YACrD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAA;YACxD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAA;YAC7D,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,YAAoB;QACzC,MAAM,gBAAgB,GAAG,+DAA+D,CAAA;QACxF,MAAM,UAAU,GAAoB,EAAE,CAAA;QACtC,IAAI,KAAK,CAAA;QACT,OAAO,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAA8B,CAAA;YACtD,IAAI,KAAK,GAA8B,KAAK,CAAC,CAAC,CAAC,CAAA;YAC/C,IAAI,KAAK,KAAK,MAAM;gBAAE,KAAK,GAAG,IAAI,CAAA;iBAC7B,IAAI,KAAK,KAAK,OAAO;gBAAE,KAAK,GAAG,KAAK,CAAA;iBACpC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;iBACpD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACxD,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,SAAwB,EAAE,OAAgC;QAC9E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,CAAA;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;QAC7E,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,IAAI;gBAAE,MAAM,GAAG,MAAM,KAAK,KAAK,CAAC;gBAAC,MAAK;YAC3C,KAAK,IAAI;gBAAE,MAAM,GAAG,MAAM,KAAK,KAAK,CAAC;gBAAC,MAAK;YAC3C,KAAK,IAAI;gBAAE,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAK,KAAgB,CAAC;gBAAC,MAAK;YACpF,KAAK,IAAI;gBAAE,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAK,KAAgB,CAAC;gBAAC,MAAK;YACpF,KAAK,GAAG;gBAAE,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAI,KAAgB,CAAC;gBAAC,MAAK;YAClF,KAAK,GAAG;gBAAE,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAI,KAAgB,CAAC;gBAAC,MAAK;QACpF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,QAAQ,QAAQ,IAAI,KAAK,EAAE,EAAE,CAAA;IAC/F,CAAC;IA6CD,MAAM,CAAC,iBAAiB,CAAC,OAAoB,EAAE,gBAA0B,CAAC,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC;QAIlI,MAAM,WAAW,GAA4D,EAAE,CAAA;QAC/E,MAAM,aAAa,GAAG,OAA6C,CAAA;QACnE,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YACvC,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAA;gBAChE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;YAC/F,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;gBAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;gBAC3C,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;YACvG,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC5E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAChC,CAAC;;AA/DM,2BAAa,GAAyB;IAC3C,WAAW,EAAE;QACX,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,8EAA8E;QAC9F,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE;YACzE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE;YACzE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE;YACtE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE;SACxE;QACD,MAAM,EAAE,KAAK;KACd;IACD,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,oBAAoB;QACpC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAC1F,MAAM,EAAE,KAAK;KACd;IACD,eAAe,EAAE;QACf,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,sBAAsB;QACtC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACzF,MAAM,EAAE,KAAK;KACd;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,yBAAyB;QACzC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QAC9F,MAAM,EAAE,KAAK;KACd;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,KAAK;QACf,cAAc,EAAE,mBAAmB;QACnC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QACzF,MAAM,EAAE,KAAK;KACd;CACF,CAAA"}

package/dist/guardrails/Gateway.js

@@ -3,15 +3,14 @@
 // 设计参考：docs/03-CORE-MODULES.md §3.5
 import { logger } from '../core/logger.js';
 export class Gateway {
-    eventBus;
-    cache = new Map();
-    detectors = {
-        preTool: [],
-        postTool: [],
-        beforeStop: [],
-    };
     constructor(eventBus) {
         this.eventBus = eventBus;
+        this.cache = new Map();
+        this.detectors = {
+            preTool: [],
+            postTool: [],
+            beforeStop: [],
+        };
     }
     registerDetector(detector, hook) {
         this.detectors[hook].push(detector);

package/dist/guardrails/Gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"Gateway.js","sourceRoot":"","sources":["../../src/guardrails/Gateway.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,+BAA+B;AAC/B,oCAAoC;AAIpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAmB1C,MAAM,OAAO,OAAO;IAQE;IAPZ,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAA;IAClC,SAAS,GAAG;QAClB,OAAO,EAAE,EAAiB;QAC1B,QAAQ,EAAE,EAAiB;QAC3B,UAAU,EAAE,EAAiB;KAC9B,CAAA;IAED,YAAoB,QAAmB;QAAnB,aAAQ,GAAR,QAAQ,CAAW;IAAG,CAAC;IAE3C,gBAAgB,CAAC,QAAmB,EAAE,IAA2C;QAC/E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;YACrF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC9D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;oBACnI,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;gBAC/E,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC/B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAA;gBACrF,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QACzG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAsB;QACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QACpI,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QAC3J,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAgB;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;YACrF,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC;CACF"}
+{"version":3,"file":"Gateway.js","sourceRoot":"","sources":["../../src/guardrails/Gateway.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,+BAA+B;AAC/B,oCAAoC;AAIpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAmB1C,MAAM,OAAO,OAAO;IAQlB,YAAoB,QAAmB;QAAnB,aAAQ,GAAR,QAAQ,CAAW;QAP/B,UAAK,GAAG,IAAI,GAAG,EAAmB,CAAA;QAClC,cAAS,GAAG;YAClB,OAAO,EAAE,EAAiB;YAC1B,QAAQ,EAAE,EAAiB;YAC3B,UAAU,EAAE,EAAiB;SAC9B,CAAA;IAEyC,CAAC;IAE3C,gBAAgB,CAAC,QAAmB,EAAE,IAA2C;QAC/E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;YACrF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC9D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;oBACnI,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;gBAC/E,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC/B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAA;gBACrF,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QACzG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAsB;QACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QACpI,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QAC3J,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAgB;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;YACrF,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC;CACF"}

package/dist/guardrails/ReviewEnforcer.d.ts

@@ -0,0 +1,52 @@
+import type { IArtifactStore } from '../artifact/store.js';
+import type { IEventBus } from '../core/eventBus.js';
+import type { IFSM } from '../artifact/fsm.js';
+/**
+ * ReviewEnforcer - 编码完成后强制调用评审 Agent
+ *
+ * 文章证据：评审 Agent 发现了编码 Agent 遗漏的渠道判断逻辑（潜在线上故障）
+ *
+ * 工作流程：
+ * 1. Task 状态从 IN_PROGRESS → REVIEW_REQUIRED (新增状态)
+ * 2. 自动触发 code-reviewer agent 评审
+ * 3. 评审通过 → REVIEW_PASSED → DONE
+ * 4. 评审不通过 → REVIEW_FAILED → 回退到 IN_PROGRESS
+ */
+export declare class ReviewEnforcer {
+    private store;
+    private eventBus;
+    private fsm;
+    constructor(store: IArtifactStore, eventBus: IEventBus, fsm: IFSM);
+    /**
+     * Harness: 检查是否需要强制评审
+     */
+    shouldEnforceReview(taskId: string): Promise<boolean>;
+    /**
+     * Harness: 强制评审入口
+     * 编码完成后自动触发，不依赖人工
+     */
+    enforceReview(taskId: string): Promise<ReviewResult>;
+    /**
+     * Harness: 自动回退机制
+     * 评审不通过时，自动回退到 IN_PROGRESS 状态
+     */
+    rollbackOnReviewFailure(taskId: string, reasons: string[]): Promise<void>;
+    /**
+     * Harness: 评审循环上限
+     * 文章启发：评审最多 2 轮，超出升级人工决策
+     */
+    checkReviewIteration(taskId: string): Promise<{
+        exceeded: boolean;
+        iteration: number;
+    }>;
+}
+export interface ReviewResult {
+    passed: boolean;
+    taskId: string;
+    reasons?: string[];
+    gateResults?: Array<{
+        gate: any;
+        passed: boolean;
+        reason?: string;
+    }>;
+}

package/dist/guardrails/ReviewEnforcer.js

@@ -0,0 +1,117 @@
+// SCALE Engine - Harness Engineering: 强制评审阶段
+// 文章启发："将做事的 Agent 和评判的 Agent 分开，是一个强有力的杠杆"
+import { GateEvaluator } from '../guardrails/GateEvaluator.js';
+import { logger } from '../core/logger.js';
+/**
+ * ReviewEnforcer - 编码完成后强制调用评审 Agent
+ *
+ * 文章证据：评审 Agent 发现了编码 Agent 遗漏的渠道判断逻辑（潜在线上故障）
+ *
+ * 工作流程：
+ * 1. Task 状态从 IN_PROGRESS → REVIEW_REQUIRED (新增状态)
+ * 2. 自动触发 code-reviewer agent 评审
+ * 3. 评审通过 → REVIEW_PASSED → DONE
+ * 4. 评审不通过 → REVIEW_FAILED → 回退到 IN_PROGRESS
+ */
+export class ReviewEnforcer {
+    constructor(store, eventBus, fsm) {
+        this.store = store;
+        this.eventBus = eventBus;
+        this.fsm = fsm;
+    }
+    /**
+     * Harness: 检查是否需要强制评审
+     */
+    async shouldEnforceReview(taskId) {
+        const task = await this.store.get(taskId);
+        if (!task)
+            return false;
+        // 已完成的任务不需要评审
+        if (task.status === 'DONE' || task.status === 'CANCELLED')
+            return false;
+        // IN_PROGRESS 状态的任务，检查是否修改了代码
+        if (task.status === 'IN_PROGRESS') {
+            const payload = task.payload;
+            // 有代码变更但未评审
+            if (payload.filesInvolved?.length > 0 && !payload.reviewPassed) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Harness: 强制评审入口
+     * 编码完成后自动触发，不依赖人工
+     */
+    async enforceReview(taskId) {
+        const task = await this.store.get(taskId);
+        if (!task)
+            throw new Error('Task not found: ' + taskId);
+        logger.info({ taskId }, 'Enforcing mandatory review');
+        // 1. 发射评审事件（触发 code-reviewer agent）
+        this.eventBus.emit('review.required', {
+            taskId,
+            artifactId: taskId,
+            filesInvolved: task.payload.filesInvolved ?? [],
+            requiredChecks: [
+                '代码质量检查',
+                '安全漏洞扫描',
+                '业务逻辑验证',
+                '测试覆盖检查',
+            ],
+        });
+        // 2. 等待评审结果（简化版：直接检查 payload）
+        // 实际实现中应该等待 agent 完成评审并更新 payload
+        const payload = task.payload;
+        // 3. 检查 Harness Gates（程序化质量门禁）
+        const gateResult = GateEvaluator.checkHarnessGates(payload, ['ci-strict', 'coverage-80', 'lint-clean']);
+        // 4. 根据评审结果决定下一步
+        if (gateResult.passed && payload.reviewPassed) {
+            this.eventBus.emit('review.passed', { taskId, gateResults: gateResult.gateResults });
+            return { passed: true, taskId, gateResults: gateResult.gateResults };
+        }
+        else {
+            const reasons = gateResult.gateResults.filter(r => !r.passed).map(r => r.reason ?? r.gate.name);
+            this.eventBus.emit('review.failed', { taskId, reasons });
+            return { passed: false, taskId, reasons, gateResults: gateResult.gateResults };
+        }
+    }
+    /**
+     * Harness: 自动回退机制
+     * 评审不通过时，自动回退到 IN_PROGRESS 状态
+     */
+    async rollbackOnReviewFailure(taskId, reasons) {
+        const task = await this.store.get(taskId);
+        if (!task)
+            return;
+        logger.warn({ taskId, reasons }, 'Review failed, rolling back');
+        // 发射回退事件
+        this.eventBus.emit('task.review_failed', {
+            taskId,
+            previousStatus: task.status,
+            rollbackTo: 'IN_PROGRESS',
+            reasons,
+        });
+        // 更新 payload 记录失败原因
+        const payload = task.payload;
+        payload.reviewPassed = false;
+        // 触发 FSM transition（实际实现需要调用 fsm.transition）
+        // await this.fsm.transition(taskId, 'review_failed')
+    }
+    /**
+     * Harness: 评审循环上限
+     * 文章启发：评审最多 2 轮，超出升级人工决策
+     */
+    async checkReviewIteration(taskId) {
+        const events = await this.eventBus.query({
+            sessionId: '', // 需要 session context
+            types: ['review.required', 'review.passed', 'review.failed'],
+            filter: (e) => e.payload.taskId === taskId,
+        });
+        const reviewEvents = events.filter(e => e.type === 'review.required' || e.type === 'review.failed');
+        const iteration = reviewEvents.length;
+        // Harness: 最多 2 轮评审
+        return { exceeded: iteration >= 2, iteration };
+    }
+}
+//# sourceMappingURL=ReviewEnforcer.js.map

package/dist/guardrails/ReviewEnforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReviewEnforcer.js","sourceRoot":"","sources":["../../src/guardrails/ReviewEnforcer.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,4CAA4C;AAM5C,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACzB,YAAoB,KAAqB,EAAU,QAAmB,EAAU,GAAS;QAArE,UAAK,GAAL,KAAK,CAAgB;QAAU,aAAQ,GAAR,QAAQ,CAAW;QAAU,QAAG,GAAH,GAAG,CAAM;IAAG,CAAC;IAE7F;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QAEvB,cAAc;QACd,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,KAAK,CAAA;QAEvE,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAsB,CAAA;YAC3C,YAAY;YACZ,IAAI,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,CAAA;QAEvD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAA;QAErD,oCAAoC;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpC,MAAM;YACN,UAAU,EAAE,MAAM;YAClB,aAAa,EAAG,IAAI,CAAC,OAAuB,CAAC,aAAa,IAAI,EAAE;YAChE,cAAc,EAAE;gBACd,QAAQ;gBACR,QAAQ;gBACR,QAAQ;gBACR,QAAQ;aACT;SACF,CAAC,CAAA;QAEF,8BAA8B;QAC9B,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAsB,CAAA;QAE3C,+BAA+B;QAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAA;QAEvG,iBAAiB;QACjB,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;YACpF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAA;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACxD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAA;QAChF,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAAC,MAAc,EAAE,OAAiB;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,OAAM;QAEjB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAE/D,SAAS;QACT,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACvC,MAAM;YACN,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,UAAU,EAAE,aAAa;YACzB,OAAO;SACR,CAAC,CAAA;QAEF,oBAAoB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAsB,CAAA;QAC3C,OAAO,CAAC,YAAY,GAAG,KAAK,CAAA;QAE5B,6CAA6C;QAC7C,qDAAqD;IACvD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvC,SAAS,EAAE,EAAE,EAAE,qBAAqB;YACpC,KAAK,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,eAAe,CAAC;YAC5D,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,OAAe,CAAC,MAAM,KAAK,MAAM;SACpD,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;QACnG,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAA;QAErC,oBAAoB;QACpB,OAAO,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,CAAA;IAChD,CAAC;CACF"}

package/dist/guardrails/advancedDetectors.js

@@ -5,21 +5,23 @@
 // 6. 危险命令检测器
 // ============================================================================
 export class DangerousCommandDetector {
-    name = 'dangerous-command';
-    patterns = [
-        { pattern: /rm\s+-rf\s+[\/~]/, description: 'rm -rf on root/home' },
-        { pattern: /rm\s+-rf\s+\*/, description: 'rm -rf wildcard' },
-        { pattern: /DROP\s+(TABLE|DATABASE|SCHEMA)/i, description: 'SQL DROP' },
-        { pattern: /TRUNCATE\s+TABLE/i, description: 'SQL TRUNCATE' },
-        { pattern: /DELETE\s+FROM\s+\w+\s*;/i, description: 'SQL DELETE without WHERE' },
-        { pattern: /ALTER\s+TABLE\s+\w+\s+DROP/i, description: 'SQL ALTER DROP column' },
-        { pattern: /curl\s+.*\|\s*(bash|sh)/i, description: 'curl pipe to shell' },
-        { pattern: /chmod\s+777/, description: 'chmod 777' },
-        { pattern: />\s*\/dev\/sda/, description: 'write to device' },
-        { pattern: /mkfs\./, description: 'format filesystem' },
-        { pattern: /:(){ :\|:& };:/, description: 'fork bomb' },
-        { pattern: /dd\s+if=.*of=\/dev\//, description: 'dd to device' },
-    ];
+    constructor() {
+        this.name = 'dangerous-command';
+        this.patterns = [
+            { pattern: /rm\s+-rf\s+[\/~]/, description: 'rm -rf on root/home' },
+            { pattern: /rm\s+-rf\s+\*/, description: 'rm -rf wildcard' },
+            { pattern: /DROP\s+(TABLE|DATABASE|SCHEMA)/i, description: 'SQL DROP' },
+            { pattern: /TRUNCATE\s+TABLE/i, description: 'SQL TRUNCATE' },
+            { pattern: /DELETE\s+FROM\s+\w+\s*;/i, description: 'SQL DELETE without WHERE' },
+            { pattern: /ALTER\s+TABLE\s+\w+\s+DROP/i, description: 'SQL ALTER DROP column' },
+            { pattern: /curl\s+.*\|\s*(bash|sh)/i, description: 'curl pipe to shell' },
+            { pattern: /chmod\s+777/, description: 'chmod 777' },
+            { pattern: />\s*\/dev\/sda/, description: 'write to device' },
+            { pattern: /mkfs\./, description: 'format filesystem' },
+            { pattern: /:(){ :\|:& };:/, description: 'fork bomb' },
+            { pattern: /dd\s+if=.*of=\/dev\//, description: 'dd to device' },
+        ];
+    }
     async check(input, ctx) {
         if (input.tool !== 'Bash')
             return { triggered: false };
@@ -47,15 +49,17 @@ export class DangerousCommandDetector {
 // 7. 密钥泄露检测器
 // ============================================================================
 export class SecretLeakDetector {
-    name = 'secret-leak';
-    patterns = [
-        { pattern: /['"]?[A-Za-z0-9+\/]{40}['"]?/, description: 'possible API key (40 chars)' },
-        { pattern: /AKIA[0-9A-Z]{16}/, description: 'AWS Access Key ID' },
-        { pattern: /-----BEGIN (RSA |EC |DSA )?PRIVATE KEY-----/, description: 'Private key' },
-        { pattern: /sk-[a-zA-Z0-9]{48}/, description: 'OpenAI API key' },
-        { pattern: /ghp_[a-zA-Z0-9]{36}/, description: 'GitHub PAT' },
-        { pattern: /password\s*[:=]\s*['"][^'"]{8,}['"]/, description: 'hardcoded password' },
-    ];
+    constructor() {
+        this.name = 'secret-leak';
+        this.patterns = [
+            { pattern: /['"]?[A-Za-z0-9+\/]{40}['"]?/, description: 'possible API key (40 chars)' },
+            { pattern: /AKIA[0-9A-Z]{16}/, description: 'AWS Access Key ID' },
+            { pattern: /-----BEGIN (RSA |EC |DSA )?PRIVATE KEY-----/, description: 'Private key' },
+            { pattern: /sk-[a-zA-Z0-9]{48}/, description: 'OpenAI API key' },
+            { pattern: /ghp_[a-zA-Z0-9]{36}/, description: 'GitHub PAT' },
+            { pattern: /password\s*[:=]\s*['"][^'"]{8,}['"]/, description: 'hardcoded password' },
+        ];
+    }
     async check(input, ctx) {
         if (!['Edit', 'Write', 'MultiEdit'].includes(input.tool))
             return { triggered: false };
@@ -104,8 +108,10 @@ export const BUILT_IN_ROLES = {
     },
 };
 export class RoleGateDetector {
-    name = 'role-gate';
-    currentRole = BUILT_IN_ROLES.implementer;
+    constructor() {
+        this.name = 'role-gate';
+        this.currentRole = BUILT_IN_ROLES.implementer;
+    }
     setRole(role) {
         this.currentRole = role;
     }
@@ -139,12 +145,8 @@ export class RoleGateDetector {
 // 9. ScopeCreep 检测器
 // ============================================================================
 export class ScopeCreepDetector {
-    name = 'scope-creep';
-    /** Max distinct files allowed per session before warning */
-    maxFiles;
-    /** Window in ms to track file edits */
-    windowMs;
     constructor(opts = {}) {
+        this.name = 'scope-creep';
         this.maxFiles = opts.maxFiles ?? 15;
         this.windowMs = opts.windowMs ?? 10 * 60 * 1000; // 10 minutes
     }

package/dist/guardrails/advancedDetectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"advancedDetectors.js","sourceRoot":"","sources":["../../src/guardrails/advancedDetectors.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,0BAA0B;AAC1B,qCAAqC;AAKrC,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,OAAO,wBAAwB;IACnC,IAAI,GAAG,mBAAmB,CAAA;IAElB,QAAQ,GAAoD;QAClE,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACnE,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC5D,EAAE,OAAO,EAAE,iCAAiC,EAAE,WAAW,EAAE,UAAU,EAAE;QACvE,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE;QAC7D,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,0BAA0B,EAAE;QAChF,EAAE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,uBAAuB,EAAE;QAChF,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE;QAC1E,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE;QACpD,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC7D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;QACvD,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE;QACvD,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,cAAc,EAAE;KACjE,CAAA;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAEtD,MAAM,OAAO,GAAI,KAAK,CAAC,IAA6B,CAAC,OAAO,IAAI,EAAE,CAAA;QAElE,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,WAAW;oBACnB,OAAO;iBACR,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;gBAElC,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,cAAc,WAAW,SAAS,OAAO,mBAAmB;oBACpE,UAAU,EAAE,qBAAqB;iBAClC,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IAC7B,IAAI,GAAG,aAAa,CAAA;IAEZ,QAAQ,GAAoD;QAClE,EAAE,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,6BAA6B,EAAE;QACvF,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE;QACjE,EAAE,OAAO,EAAE,6CAA6C,EAAE,WAAW,EAAE,aAAa,EAAE;QACtF,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAChE,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,YAAY,EAAE;QAC7D,EAAE,OAAO,EAAE,qCAAqC,EAAE,WAAW,EAAE,oBAAoB,EAAE;KACtF,CAAA;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAErF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAE1C,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,WAAW;iBACpB,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;gBAElC,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,iBAAiB,WAAW,mBAAmB;oBACvD,UAAU,EAAE,8BAA8B;iBAC3C,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAaD,MAAM,CAAC,MAAM,cAAc,GAAmC;IAC5D,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;QAC3D,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;KAC5C;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QAC/C,WAAW,EAAE,CAAC,MAAM,CAAC;KACtB;IACD,WAAW,EAAE;QACX,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KAC7E;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9C,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;KAC5C;CACF,CAAA;AAED,MAAM,OAAO,gBAAgB;IAC3B,IAAI,GAAG,WAAW,CAAA;IACV,WAAW,GAAmB,cAAc,CAAC,WAAW,CAAA;IAEhE,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;IACzB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,IAAqB;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;QAE7B,6BAA6B;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW,IAAI,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,iCAAiC;gBAClF,UAAU,EAAE,0CAA0C;aACvD,CAAA;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW,IAAI,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC5F,UAAU,EAAE,SAAS,KAAK,CAAC,IAAI,SAAS;aACzC,CAAA;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IAC7B,IAAI,GAAG,aAAa,CAAA;IAEpB,4DAA4D;IACpD,QAAQ,CAAQ;IACxB,uCAAuC;IAC/B,QAAQ,CAAQ;IAExB,YAAY,OAAiD,EAAE;QAC7D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,aAAa;IAC/D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAErF,MAAM,IAAI,GAAI,KAAK,CAAC,IAA+B,CAAC,SAAS,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAEtC,MAAM,GAAG,GAAG,eAAe,KAAK,CAAC,SAAS,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAA8D;eAC1F,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;QAEjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,sCAAsC;QACtC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE5E,iBAAiB;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE3B,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAE1B,iEAAiE;QACjE,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ;gBAChD,IAAI;aACL,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;YAElC,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,IAAI,CAAC,QAAQ,4BAA4B;gBACtG,UAAU,EAAE,kCAAkC;aAC/C,CAAA;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF"}
+{"version":3,"file":"advancedDetectors.js","sourceRoot":"","sources":["../../src/guardrails/advancedDetectors.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,0BAA0B;AAC1B,qCAAqC;AAKrC,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,OAAO,wBAAwB;IAArC;QACE,SAAI,GAAG,mBAAmB,CAAA;QAElB,aAAQ,GAAoD;YAClE,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACnE,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC5D,EAAE,OAAO,EAAE,iCAAiC,EAAE,WAAW,EAAE,UAAU,EAAE;YACvE,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE;YAC7D,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,0BAA0B,EAAE;YAChF,EAAE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,uBAAuB,EAAE;YAChF,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE;YAC1E,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE;YACpD,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC7D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;YACvD,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE;YACvD,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,cAAc,EAAE;SACjE,CAAA;IA2BH,CAAC;IAzBC,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAEtD,MAAM,OAAO,GAAI,KAAK,CAAC,IAA6B,CAAC,OAAO,IAAI,EAAE,CAAA;QAElE,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,WAAW;oBACnB,OAAO;iBACR,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;gBAElC,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,cAAc,WAAW,SAAS,OAAO,mBAAmB;oBACpE,UAAU,EAAE,qBAAqB;iBAClC,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IAA/B;QACE,SAAI,GAAG,aAAa,CAAA;QAEZ,aAAQ,GAAoD;YAClE,EAAE,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACvF,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE;YACjE,EAAE,OAAO,EAAE,6CAA6C,EAAE,WAAW,EAAE,aAAa,EAAE;YACtF,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE;YAChE,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,YAAY,EAAE;YAC7D,EAAE,OAAO,EAAE,qCAAqC,EAAE,WAAW,EAAE,oBAAoB,EAAE;SACtF,CAAA;IA0BH,CAAC;IAxBC,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAErF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAE1C,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,WAAW;iBACpB,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;gBAElC,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,iBAAiB,WAAW,mBAAmB;oBACvD,UAAU,EAAE,8BAA8B;iBAC3C,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAaD,MAAM,CAAC,MAAM,cAAc,GAAmC;IAC5D,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;QAC3D,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;KAC5C;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QAC/C,WAAW,EAAE,CAAC,MAAM,CAAC;KACtB;IACD,WAAW,EAAE;QACX,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KAC7E;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9C,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;KAC5C;CACF,CAAA;AAED,MAAM,OAAO,gBAAgB;IAA7B;QACE,SAAI,GAAG,WAAW,CAAA;QACV,gBAAW,GAAmB,cAAc,CAAC,WAAW,CAAA;IAmClE,CAAC;IAjCC,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;IACzB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,IAAqB;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;QAE7B,6BAA6B;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW,IAAI,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,iCAAiC;gBAClF,UAAU,EAAE,0CAA0C;aACvD,CAAA;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW,IAAI,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC5F,UAAU,EAAE,SAAS,KAAK,CAAC,IAAI,SAAS;aACzC,CAAA;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IAQ7B,YAAY,OAAiD,EAAE;QAP/D,SAAI,GAAG,aAAa,CAAA;QAQlB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,aAAa;IAC/D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAErF,MAAM,IAAI,GAAI,KAAK,CAAC,IAA+B,CAAC,SAAS,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAEtC,MAAM,GAAG,GAAG,eAAe,KAAK,CAAC,SAAS,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAA8D;eAC1F,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;QAEjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,sCAAsC;QACtC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE5E,iBAAiB;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE3B,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAE1B,iEAAiE;QACjE,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ;gBAChD,IAAI;aACL,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;YAElC,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,IAAI,CAAC,QAAQ,4BAA4B;gBACtG,UAAU,EAAE,kCAAkC;aAC/C,CAAA;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF"}

package/dist/guardrails/detectors.js

@@ -4,9 +4,11 @@ import { createHash } from 'node:crypto';
 const hashArgs = (args) => createHash('md5').update(JSON.stringify(args)).digest('hex').slice(0, 8);
 // 1. 暴力重试检测
 export class BruteRetryDetector {
-    name = 'brute-retry';
-    windowMs = 3 * 60 * 1000;
-    threshold = 3;
+    constructor() {
+        this.name = 'brute-retry';
+        this.windowMs = 3 * 60 * 1000;
+        this.threshold = 3;
+    }
     async check(input, ctx) {
         const key = `${input.sessionId}:${input.tool}:${hashArgs(input.args)}`;
         const history = ctx.cache.get(key) ?? [];
@@ -26,7 +28,9 @@ export class BruteRetryDetector {
 }
 // 2. 工具闲置检测
 export class IdleToolDetector {
-    name = 'idle-tool';
+    constructor() {
+        this.name = 'idle-tool';
+    }
     async check(input, ctx) {
         if (!['Edit', 'Write', 'MultiEdit'].includes(input.tool))
             return { triggered: false };
@@ -55,7 +59,9 @@ export class IdleToolDetector {
 }
 // 3. 忙碌假象（来回反复修改同一文件）
 export class BusyLoopDetector {
-    name = 'busy-loop';
+    constructor() {
+        this.name = 'busy-loop';
+    }
     async check(input, ctx) {
         if (input.tool !== 'Edit')
             return { triggered: false };
@@ -96,9 +102,12 @@ export class BusyLoopDetector {
         return { triggered: false };
     }
 }
-// 4. 声称完成但未验证
+// 4. 声称完成但未验证（Harness Engineering 增强）
+// 文章启发："CI 通过但测试 0/0 是无效的"
 export class PrematureDoneDetector {
-    name = 'premature-done';
+    constructor() {
+        this.name = 'premature-done';
+    }
     async check(input, ctx) {
         const edits = await ctx.eventBus.query({
             sessionId: input.sessionId,
@@ -107,6 +116,7 @@ export class PrematureDoneDetector {
         });
         if (edits.length === 0)
             return { triggered: false };
+        // Harness: 检查验证命令是否运行
         const verifications = await ctx.eventBus.query({
             sessionId: input.sessionId,
             types: ['tool.completed'],
@@ -115,15 +125,17 @@ export class PrematureDoneDetector {
                 return p.tool === 'Bash' && /test|lint|build|typecheck/i.test(p.args.command ?? '');
             },
         });
+        // 情况1：完全未验证
         if (verifications.length === 0) {
             ctx.eventBus.emit('behavior.premature_done', { reason: 'no_verification' }, { sessionId: input.sessionId });
             return {
                 triggered: true,
                 severity: 'block',
                 reason: '检测到「声称完成但未验证」：本会话修改了代码，但未运行任何 test/lint/build。请先运行验证命令。',
-                suggestion: 'pnpm test  (or your project test command)',
+                suggestion: 'pnpm test && pnpm lint && pnpm build',
             };
         }
+        // 情况2：验证在编辑之前（文章：Premature Victory Declaration）
         const lastVerify = verifications[0];
         const lastEdit = edits[0];
         if (lastVerify.timestamp < lastEdit.timestamp) {
@@ -133,19 +145,67 @@ export class PrematureDoneDetector {
                 reason: '修改了代码但最后一次验证是修改之前运行的。请重新运行验证。',
             };
         }
+        // 情况3：Harness 新增 - 检查测试结果是否真正通过
+        // 文章启发：Agent 可能认为 "SUCCESS" 就通过，但实际测试 0/0
+        const testCmd = verifications.find(e => {
+            const p = e.payload;
+            return /test/i.test(p.args.command ?? '');
+        });
+        if (testCmd) {
+            const output = testCmd.payload.output ?? '';
+            // 检测测试 0/0 异常
+            if (/tests?\s*(0|no\s*tests?)/i.test(output) || /passed:\s*0/i.test(output)) {
+                ctx.eventBus.emit('behavior.premature_done', { reason: 'empty_tests' }, { sessionId: input.sessionId });
+                return {
+                    triggered: true,
+                    severity: 'block',
+                    reason: '检测到「测试为空」：运行了测试命令但测试数为 0。请确保测试文件存在且被正确执行。',
+                    suggestion: '检查测试文件是否存在，或添加测试用例',
+                };
+            }
+            // 检测失败测试
+            if (/failed:\s*[1-9]/i.test(output) || /FAIL/i.test(output)) {
+                ctx.eventBus.emit('behavior.premature_done', { reason: 'tests_failed' }, { sessionId: input.sessionId });
+                return {
+                    triggered: true,
+                    severity: 'block',
+                    reason: '检测到「测试失败」：存在失败的测试，不能声称完成。',
+                    suggestion: '修复失败的测试后重新运行',
+                };
+            }
+        }
+        // 情况4：Harness 新增 - 检查编译是否通过
+        const buildCmd = verifications.find(e => {
+            const p = e.payload;
+            return /build|compile|tsc/i.test(p.args.command ?? '');
+        });
+        if (buildCmd) {
+            const exitCode = buildCmd.payload.exitCode ?? 0;
+            if (exitCode !== 0) {
+                ctx.eventBus.emit('behavior.premature_done', { reason: 'build_failed' }, { sessionId: input.sessionId });
+                return {
+                    triggered: true,
+                    severity: 'block',
+                    reason: '检测到「编译失败」：build 命令返回非零退出码。',
+                    suggestion: '修复编译错误后重新构建',
+                };
+            }
+        }
         return { triggered: false };
     }
 }
 // 5. 甩锅检测
 export class BlameShiftDetector {
-    name = 'blame-shift';
-    patterns = [
-        /可能是环境问题/i,
-        /建议你?手动/i,
-        /maybe (an?|the) (environment|version|setup)/i,
-        /not sure why/i,
-        /unable to (determine|figure out|resolve)/i,
-    ];
+    constructor() {
+        this.name = 'blame-shift';
+        this.patterns = [
+            /可能是环境问题/i,
+            /建议你?手动/i,
+            /maybe (an?|the) (environment|version|setup)/i,
+            /not sure why/i,
+            /unable to (determine|figure out|resolve)/i,
+        ];
+    }
     async check(input, ctx) {
         const text = input.output ?? '';
         if (!this.patterns.some((p) => p.test(text)))