@lingxiao-office/sdk 1.0.0

package/dist/core/transport/Transport.js

@@ -0,0 +1,17 @@
+import { randomUUID } from 'node:crypto';
+import { globalTracer } from '../Tracing.js';
+export function createEnvelope(type, payload) {
+    const active = globalTracer.currentSpan();
+    const envelope = {
+        version: 1,
+        type,
+        id: randomUUID(),
+        timestamp: Date.now(),
+        payload,
+    };
+    if (active?.context.traceId) {
+        envelope.traceId = active.context.traceId;
+    }
+    return envelope;
+}
+//# sourceMappingURL=Transport.js.map

package/dist/core/transport/Transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Transport.js","sourceRoot":"","sources":["../../../src/core/transport/Transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA4B7C,MAAM,UAAU,cAAc,CAAC,IAA+B,EAAE,OAAgB;IAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAsB;QAClC,OAAO,EAAE,CAAC;QACV,IAAI;QACJ,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO;KACR,CAAC;IACF,IAAI,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5B,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/transport/WebSocketTransport.d.ts

@@ -0,0 +1,41 @@
+import { type Transport, type TransportEnvelope } from './Transport.js';
+type WebSocketLike = {
+    readyState: number;
+    send(data: string): void;
+    close(): void;
+    addEventListener(event: 'open' | 'message' | 'close' | 'error', handler: (event: Event | MessageEvent | CloseEvent) => void): void;
+};
+type WebSocketCtor = new (url: string) => WebSocketLike;
+export interface WebSocketTransportOptions {
+    heartbeatInterval?: number;
+    staleAfterMs?: number;
+    reconnect?: boolean;
+    websocketFactory?: WebSocketCtor;
+}
+export declare class WebSocketTransport implements Transport {
+    private readonly endpoint;
+    readonly type: "websocket";
+    private socket;
+    private handler;
+    private heartbeatTimer?;
+    private reconnectTimer?;
+    private connected;
+    private lastSeen;
+    private reconnectDelayMs;
+    private readonly heartbeatInterval;
+    private readonly staleAfterMs;
+    private readonly reconnect;
+    private readonly websocketFactory;
+    constructor(endpoint: string, opts?: WebSocketTransportOptions);
+    connect(): Promise<void>;
+    send(envelope: TransportEnvelope): void;
+    onMessage(handler: (envelope: TransportEnvelope) => void): void;
+    disconnect(): Promise<void>;
+    isAlive(): boolean;
+    private receive;
+    private startHeartbeat;
+    private stopHeartbeat;
+    private scheduleReconnect;
+}
+export {};
+//# sourceMappingURL=WebSocketTransport.d.ts.map

package/dist/core/transport/WebSocketTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebSocketTransport.d.ts","sourceRoot":"","sources":["../../../src/core/transport/WebSocketTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExF,KAAK,aAAa,GAAG;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;IACd,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,GAAG,YAAY,GAAG,UAAU,KAAK,IAAI,GAAG,IAAI,CAAC;CACpI,CAAC;AAEF,KAAK,aAAa,GAAG,KAAK,GAAG,EAAE,MAAM,KAAK,aAAa,CAAC;AAIxD,MAAM,WAAW,yBAAyB;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,aAAa,CAAC;CAClC;AAED,qBAAa,kBAAmB,YAAW,SAAS;IActC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAbrC,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;IACrC,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,OAAO,CAAwD;IACvE,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,cAAc,CAAC,CAAgC;IACvD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgB;gBAEpB,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,yBAA8B;IAO7E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC9B,IAAI,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI;IAOvC,SAAS,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,GAAG,IAAI;IAIzD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IASjC,OAAO,IAAI,OAAO;IAKlB,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,iBAAiB;CAU1B"}

package/dist/core/transport/WebSocketTransport.js

@@ -0,0 +1,124 @@
+import { createEnvelope } from './Transport.js';
+const WS_OPEN = 1;
+export class WebSocketTransport {
+    endpoint;
+    type = 'websocket';
+    socket = null;
+    handler = null;
+    heartbeatTimer;
+    reconnectTimer;
+    connected = false;
+    lastSeen = 0;
+    reconnectDelayMs = 1000;
+    heartbeatInterval;
+    staleAfterMs;
+    reconnect;
+    websocketFactory;
+    constructor(endpoint, opts = {}) {
+        this.endpoint = endpoint;
+        this.heartbeatInterval = opts.heartbeatInterval ?? 30_000;
+        this.staleAfterMs = opts.staleAfterMs ?? 60_000;
+        this.reconnect = opts.reconnect ?? false;
+        this.websocketFactory = opts.websocketFactory ?? globalThis.WebSocket;
+    }
+    async connect() {
+        if (!this.websocketFactory) {
+            throw new Error('WebSocket is not available in this runtime');
+        }
+        await new Promise((resolve, reject) => {
+            const socket = new this.websocketFactory(this.endpoint);
+            this.socket = socket;
+            const onOpen = () => {
+                this.connected = true;
+                this.lastSeen = Date.now();
+                this.reconnectDelayMs = 1000;
+                this.startHeartbeat();
+                resolve();
+            };
+            const onMessage = (event) => {
+                this.lastSeen = Date.now();
+                const data = 'data' in event ? event.data : undefined;
+                this.receive(data);
+            };
+            const onClose = () => {
+                this.connected = false;
+                this.stopHeartbeat();
+                this.scheduleReconnect();
+            };
+            const onError = () => {
+                if (!this.connected)
+                    reject(new Error(`WebSocket connection failed: ${this.endpoint}`));
+            };
+            socket.addEventListener('open', onOpen);
+            socket.addEventListener('message', onMessage);
+            socket.addEventListener('close', onClose);
+            socket.addEventListener('error', onError);
+        });
+    }
+    send(envelope) {
+        if (!this.socket || this.socket.readyState !== WS_OPEN) {
+            throw new Error(`WebSocket transport is not connected: ${this.endpoint}`);
+        }
+        this.socket.send(JSON.stringify(envelope));
+    }
+    onMessage(handler) {
+        this.handler = handler;
+    }
+    async disconnect() {
+        this.stopHeartbeat();
+        if (this.reconnectTimer)
+            clearTimeout(this.reconnectTimer);
+        this.reconnectTimer = undefined;
+        this.connected = false;
+        this.socket?.close();
+        this.socket = null;
+    }
+    isAlive() {
+        if (!this.connected || !this.socket || this.socket.readyState !== WS_OPEN)
+            return false;
+        return Date.now() - this.lastSeen <= this.staleAfterMs;
+    }
+    receive(data) {
+        if (typeof data !== 'string')
+            return;
+        try {
+            const parsed = JSON.parse(data);
+            if (parsed.version !== 1 || typeof parsed.type !== 'string')
+                return;
+            this.handler?.(parsed);
+        }
+        catch {
+            // Ignore malformed remote frames.
+        }
+    }
+    startHeartbeat() {
+        this.stopHeartbeat();
+        this.heartbeatTimer = setInterval(() => {
+            if (!this.socket || this.socket.readyState !== WS_OPEN)
+                return;
+            this.send(createEnvelope('heartbeat', { endpoint: this.endpoint }));
+        }, this.heartbeatInterval);
+        if (this.heartbeatTimer.unref)
+            this.heartbeatTimer.unref();
+    }
+    stopHeartbeat() {
+        if (!this.heartbeatTimer)
+            return;
+        clearInterval(this.heartbeatTimer);
+        this.heartbeatTimer = undefined;
+    }
+    scheduleReconnect() {
+        if (!this.reconnect)
+            return;
+        if (this.reconnectTimer)
+            clearTimeout(this.reconnectTimer);
+        const delay = this.reconnectDelayMs;
+        this.reconnectDelayMs = Math.min(this.reconnectDelayMs * 2, 30_000);
+        this.reconnectTimer = setTimeout(() => {
+            void this.connect().catch(() => this.scheduleReconnect());
+        }, delay);
+        if (this.reconnectTimer.unref)
+            this.reconnectTimer.unref();
+    }
+}
+//# sourceMappingURL=WebSocketTransport.js.map

package/dist/core/transport/WebSocketTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebSocketTransport.js","sourceRoot":"","sources":["../../../src/core/transport/WebSocketTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA0C,MAAM,gBAAgB,CAAC;AAWxF,MAAM,OAAO,GAAG,CAAC,CAAC;AASlB,MAAM,OAAO,kBAAkB;IAcA;IAbpB,IAAI,GAAG,WAAoB,CAAC;IAC7B,MAAM,GAAyB,IAAI,CAAC;IACpC,OAAO,GAAmD,IAAI,CAAC;IAC/D,cAAc,CAAkC;IAChD,cAAc,CAAiC;IAC/C,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,CAAC,CAAC;IACb,gBAAgB,GAAG,IAAI,CAAC;IACf,iBAAiB,CAAS;IAC1B,YAAY,CAAS;IACrB,SAAS,CAAU;IACnB,gBAAgB,CAAgB;IAEjD,YAA6B,QAAgB,EAAE,OAAkC,EAAE;QAAtD,aAAQ,GAAR,QAAQ,CAAQ;QAC3C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAK,UAAU,CAAC,SAAsC,CAAC;IACtG,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBAC7B,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,CAAC,KAA2B,EAAE,EAAE;gBAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,CAAC,IAAI,CAAC,SAAS;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,QAA2B;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS,CAAC,OAA8C;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,cAAc;YAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACxF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC;IACzD,CAAC;IAEO,OAAO,CAAC,IAAa;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;YACrD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YACpE,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO;gBAAE,OAAO;YAC/D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IAClC,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,IAAI,CAAC,cAAc;YAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;CACF"}

package/dist/core/verify/BughuntVerificationRunner.d.ts

@@ -0,0 +1,45 @@
+export interface CompileCommand {
+    command: string;
+    args?: string[];
+    cwd: string;
+}
+export interface CompileResult {
+    command: string;
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+}
+export interface CompileVerificationResult {
+    results: CompileResult[];
+    allPassed: boolean;
+    artifacts: string[];
+}
+export interface BlackboxProbe {
+    cwd: string;
+    startCommand: string;
+    startArgs?: string[];
+    healthPath?: string;
+    requestPath: string;
+    expectedStatus?: number;
+    env?: Record<string, string>;
+    readyTimeoutMs?: number;
+}
+export interface BlackboxProbeResult {
+    requestPath: string;
+    status?: number;
+    ok: boolean;
+    bodyHead: string;
+}
+export interface BlackboxVerificationResult {
+    started: boolean;
+    stdoutTail: string;
+    stderrTail: string;
+    probes: BlackboxProbeResult[];
+    artifacts: string[];
+}
+/** compile 层：跑命令序列，捕获 exit_code/stdout，产出 compile_artifacts。 */
+export declare function runCompileVerification(commands: CompileCommand[]): Promise<CompileVerificationResult>;
+/** blackbox 层（需授权）：起目标服务 + HTTP probe，产出 blackbox_artifacts。 */
+export declare function runBlackboxVerification(probe: BlackboxProbe): Promise<BlackboxVerificationResult>;
+//# sourceMappingURL=BughuntVerificationRunner.d.ts.map

package/dist/core/verify/BughuntVerificationRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BughuntVerificationRunner.d.ts","sourceRoot":"","sources":["../../../src/core/verify/BughuntVerificationRunner.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AA2BD,gEAAgE;AAChE,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAkB3G;AAkBD,gEAAgE;AAChE,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAkCvG"}

package/dist/core/verify/BughuntVerificationRunner.js

@@ -0,0 +1,109 @@
+/**
+ * BughuntVerificationRunner — verified 门的真实执行层（独立于 WorkflowEngine）。
+ *
+ * compile 层（必）：在 worktree cwd 跑 compile_commands（如 tsc --noEmit / npm test / build），
+ *   捕获 exit_code/stdout/stderr，产出 compile_artifacts。无副作用（只 build/test），不需沙箱。
+ * blackbox 层（可选，默认关闭，需 Leader 显式授权）：TargetServiceManager 起目标服务 + HTTP probe，
+ *   产出 blackbox_artifacts。
+ *
+ * 编排决策：独立 runner 而非嵌入 WorkflowEngine——验证需确定性/无状态/幂等，WorkflowEngine 面向
+ * 用户 Canvas 的通用 DAG 编排过重。直接 child_process + node:net/http 更轻、更易测试。
+ *
+ * 产出的 artifacts 喂给 BughuntLedger.getBughuntFindingGateGaps 的 verified 门：
+ *   compile_artifacts/blackbox_artifacts 非空即认「真实执行产物」（gate 已优先于正则）。
+ *
+ * 无 Docker；跨平台（Linux/macOS/Windows × x64/arm64）。
+ */
+import { spawn } from 'node:child_process';
+import { get } from 'node:http';
+import { TargetServiceManager } from './TargetServiceManager.js';
+const OUT_MAX = 64 * 1024;
+function runChild(command, args, cwd, env) {
+    return new Promise((resolveRun) => {
+        const child = spawn(command, args, {
+            cwd,
+            env: { ...process.env, ...env },
+            shell: process.platform === 'win32',
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        const trim = (s) => (s.length > OUT_MAX ? s.slice(s.length - OUT_MAX) : s);
+        child.stdout?.on('data', (c) => { stdout = trim(stdout + c.toString()); });
+        child.stderr?.on('data', (c) => { stderr = trim(stderr + c.toString()); });
+        child.on('error', (err) => resolveRun({ exitCode: -1, stdout, stderr: stderr + `\n[spawn error] ${err.message}` }));
+        child.on('close', (code) => resolveRun({ exitCode: code ?? -1, stdout, stderr }));
+    });
+}
+/** compile 层：跑命令序列，捕获 exit_code/stdout，产出 compile_artifacts。 */
+export async function runCompileVerification(commands) {
+    const results = [];
+    for (const cmd of commands) {
+        const start = Date.now();
+        const r = await runChild(cmd.command, cmd.args ?? [], cmd.cwd, {});
+        results.push({
+            command: `${cmd.command} ${(cmd.args ?? []).join(' ')}`.trim(),
+            exitCode: r.exitCode,
+            stdout: r.stdout,
+            stderr: r.stderr,
+            durationMs: Date.now() - start,
+        });
+    }
+    const allPassed = results.length > 0 && results.every((r) => r.exitCode === 0);
+    const artifacts = results.map((r) => `[compile] ${r.command} → exit=${r.exitCode} (${r.durationMs}ms)${r.stdout ? `\nstdout: ${r.stdout.slice(0, 512)}` : ''}${r.stderr ? `\nstderr: ${r.stderr.slice(0, 256)}` : ''}`);
+    return { results, allPassed, artifacts };
+}
+function httpGet(host, port, path, timeoutMs) {
+    return new Promise((resolveReq) => {
+        const req = get({ host, port, path, timeout: timeoutMs }, (res) => {
+            let body = '';
+            res.on('data', (c) => {
+                body += c.toString();
+                if (body.length > OUT_MAX)
+                    body = body.slice(body.length - OUT_MAX);
+            });
+            res.on('end', () => resolveReq({ status: res.statusCode, body, ok: true }));
+            res.on('error', () => resolveReq({ status: res.statusCode, body, ok: false }));
+        });
+        req.on('timeout', () => { req.destroy(); resolveReq({ body: '', ok: false }); });
+        req.on('error', () => resolveReq({ body: '', ok: false }));
+    });
+}
+/** blackbox 层（需授权）：起目标服务 + HTTP probe，产出 blackbox_artifacts。 */
+export async function runBlackboxVerification(probe) {
+    const manager = new TargetServiceManager();
+    const cfg = {
+        cwd: probe.cwd,
+        command: probe.startCommand,
+        args: probe.startArgs,
+        healthPath: probe.healthPath,
+        env: probe.env,
+        readyTimeoutMs: probe.readyTimeoutMs,
+    };
+    const handle = await manager.start(cfg);
+    try {
+        const resp = await httpGet(handle.host, handle.port, probe.requestPath, 5000);
+        const expected = probe.expectedStatus;
+        const statusOk = expected !== undefined ? resp.status === expected : (resp.status ?? 599) < 400;
+        const pr = {
+            requestPath: probe.requestPath,
+            status: resp.status,
+            ok: statusOk && resp.ok,
+            bodyHead: resp.body.slice(0, 512),
+        };
+        const artifacts = [
+            `[blackbox] ${probe.requestPath} → status=${pr.status} ok=${pr.ok}\nbody: ${pr.bodyHead || '(empty)'}`,
+        ];
+        return {
+            started: true,
+            stdoutTail: handle.stdoutTail,
+            stderrTail: handle.stderrTail,
+            probes: [pr],
+            artifacts,
+        };
+    }
+    finally {
+        await manager.stop(`${handle.pid}:${handle.port}`);
+    }
+}
+//# sourceMappingURL=BughuntVerificationRunner.js.map

package/dist/core/verify/BughuntVerificationRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BughuntVerificationRunner.js","sourceRoot":"","sources":["../../../src/core/verify/BughuntVerificationRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAA4B,MAAM,2BAA2B,CAAC;AAgD3F,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1B,SAAS,QAAQ,CACf,OAAe,EACf,IAAc,EACd,GAAW,EACX,GAA2B;IAE3B,OAAO,IAAI,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE;YAC/B,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACpH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAA0B;IACrE,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;YAC9D,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAClC,aAAa,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClL,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,SAAiB;IAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChE,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBAC3B,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACrB,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO;oBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAoB;IAChE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAwB;QAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,YAAY;QAC3B,IAAI,EAAE,KAAK,CAAC,SAAS;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC;QACtC,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC;QAChG,MAAM,EAAE,GAAwB;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,EAAE,EAAE,QAAQ,IAAI,IAAI,CAAC,EAAE;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAClC,CAAC;QACF,MAAM,SAAS,GAAG;YAChB,cAAc,KAAK,CAAC,WAAW,aAAa,EAAE,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,IAAI,SAAS,EAAE;SACvG,CAAC;QACF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,CAAC,EAAE,CAAC;YACZ,SAAS;SACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/core/verify/TargetServiceManager.d.ts

@@ -0,0 +1,24 @@
+export interface TargetServiceConfig {
+    cwd: string;
+    command: string;
+    args?: string[];
+    host?: string;
+    env?: Record<string, string>;
+    healthPath?: string;
+    readyTimeoutMs?: number;
+}
+export interface TargetServiceHandle {
+    pid: number;
+    host: string;
+    port: number;
+    baseUrl: string;
+    stdoutTail: string;
+    stderrTail: string;
+}
+export declare class TargetServiceManager {
+    private readonly processes;
+    start(config: TargetServiceConfig): Promise<TargetServiceHandle>;
+    stop(id: string): Promise<void>;
+    private kill;
+}
+//# sourceMappingURL=TargetServiceManager.d.ts.map

package/dist/core/verify/TargetServiceManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TargetServiceManager.d.ts","sourceRoot":"","sources":["../../../src/core/verify/TargetServiceManager.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AA2CD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAEvD,KAAK,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwChE,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,OAAO,CAAC,IAAI;CAiBb"}

package/dist/core/verify/TargetServiceManager.js

@@ -0,0 +1,115 @@
+/**
+ * TargetServiceManager — 验证执行器的目标服务生命周期（blackbox 验证层）。
+ *
+ * 职责：spawn 目标服务进程 + 分配临时端口（net.createServer listen(0)，
+ *   复用 SlidevServerManager 模式）+ 健康检查（HTTP GET healthPath 或 TCP connect）
+ *   + CleanupRegistry 回收（进程退出 + map 清理）。
+ *
+ * 安全边界：仅监听 127.0.0.1，绝不暴露公网；blackbox 层默认关闭，需 Leader 显式授权。
+ * 跨平台：纯 node:net + node:child_process，无新依赖、无 Docker（Linux/macOS/Windows × x64/arm64）。
+ */
+import { createServer as netCreateServer, createConnection } from 'node:net';
+import { spawn } from 'node:child_process';
+import { get } from 'node:http';
+import { registerCleanup } from '../CleanupRegistry.js';
+import { coreLogger } from '../Log.js';
+const READY_TIMEOUT_DEFAULT = 10_000;
+const TAIL_MAX = 4096;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function findAvailablePort(host) {
+    return new Promise((resolvePort, reject) => {
+        const server = netCreateServer();
+        server.listen(0, host, () => {
+            const port = server.address().port;
+            server.close(() => resolvePort(port));
+        });
+        server.on('error', reject);
+    });
+}
+function appendTail(buf, chunk) {
+    const next = buf + chunk.toString();
+    return next.length > TAIL_MAX ? next.slice(next.length - TAIL_MAX) : next;
+}
+async function probeTcp(host, port, timeoutMs) {
+    return new Promise((resolveProbe) => {
+        const socket = createConnection({ host, port });
+        const timer = setTimeout(() => { socket.destroy(); resolveProbe(false); }, timeoutMs);
+        socket.on('connect', () => { clearTimeout(timer); socket.destroy(); resolveProbe(true); });
+        socket.on('error', () => { clearTimeout(timer); resolveProbe(false); });
+    });
+}
+function probeHttp(host, port, path, timeoutMs) {
+    return new Promise((resolveProbe) => {
+        const req = get({ host, port, path, timeout: timeoutMs }, (res) => {
+            res.resume();
+            resolveProbe({ ok: (res.statusCode ?? 0) < 500, status: res.statusCode });
+        });
+        req.on('timeout', () => { req.destroy(); resolveProbe({ ok: false }); });
+        req.on('error', () => resolveProbe({ ok: false }));
+    });
+}
+export class TargetServiceManager {
+    processes = new Map();
+    async start(config) {
+        const host = config.host ?? '127.0.0.1';
+        const port = await findAvailablePort(host);
+        const env = { ...process.env, ...config.env, PORT: String(port), HOST: host };
+        const child = spawn(config.command, config.args ?? [], {
+            cwd: config.cwd,
+            env,
+            shell: process.platform === 'win32', // Windows 需 shell 解析命令字串
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdoutTail = '';
+        let stderrTail = '';
+        child.stdout?.on('data', (c) => { stdoutTail = appendTail(stdoutTail, c); });
+        child.stderr?.on('data', (c) => { stderrTail = appendTail(stderrTail, c); });
+        const id = `${child.pid ?? 'svc'}:${port}`;
+        this.processes.set(id, child);
+        // CleanupRegistry 回收：进程级 SIGTERM→SIGKILL，避免泄漏
+        registerCleanup(() => this.kill(id), 60);
+        const timeout = config.readyTimeoutMs ?? READY_TIMEOUT_DEFAULT;
+        const deadline = Date.now() + timeout;
+        let healthy = false;
+        while (Date.now() < deadline) {
+            await sleep(150);
+            if (child.exitCode !== null)
+                break; // 进程已退出，不再探活
+            const ok = config.healthPath
+                ? (await probeHttp(host, port, config.healthPath, 800)).ok
+                : await probeTcp(host, port, 800);
+            if (ok) {
+                healthy = true;
+                break;
+            }
+        }
+        if (!healthy) {
+            this.kill(id);
+            throw new Error(`目标服务未在 ${timeout}ms 内通过健康检查（host=${host}:${port}）。stdout 尾：${stdoutTail.slice(-384)}；stderr 尾：${stderrTail.slice(-384)}`);
+        }
+        return { pid: child.pid ?? 0, host, port, baseUrl: `http://${host}:${port}`, stdoutTail, stderrTail };
+    }
+    async stop(id) {
+        this.kill(id);
+    }
+    kill(id) {
+        const child = this.processes.get(id);
+        if (!child || child.killed) {
+            this.processes.delete(id);
+            return;
+        }
+        try {
+            // Windows 无 SIGTERM 语义；传 undefined 走平台默认终止
+            child.kill(process.platform === 'win32' ? undefined : 'SIGTERM');
+            setTimeout(() => {
+                if (!child.killed && child.exitCode === null)
+                    child.kill('SIGKILL');
+            }, 500);
+        }
+        catch (err) {
+            coreLogger.debug(`[verify] target service kill failed (id=${id}): ${err instanceof Error ? err.message : String(err)}`);
+        }
+        this.processes.delete(id);
+    }
+}
+//# sourceMappingURL=TargetServiceManager.js.map

package/dist/core/verify/TargetServiceManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TargetServiceManager.js","sourceRoot":"","sources":["../../../src/core/verify/TargetServiceManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,IAAI,eAAe,EAAE,gBAAgB,EAAoB,MAAM,UAAU,CAAC;AAC/F,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAqBvC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEnF,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1B,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,KAAsB;IACrD,MAAM,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,SAAiB;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChE,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,oBAAoB;IACd,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE7D,KAAK,CAAC,KAAK,CAAC,MAA2B;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE;YACrD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG;YACH,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,yBAAyB;YAC9D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAErF,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9B,8CAA8C;QAC9C,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,IAAI,qBAAqB,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,MAAM,CAAC,aAAa;YACjD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU;gBAC1B,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE;gBAC1D,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,EAAE,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CACb,UAAU,OAAO,mBAAmB,IAAI,IAAI,IAAI,cAAc,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAC1H,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAEO,IAAI,CAAC,EAAU;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,2CAA2C;YAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjE,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtE,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,KAAK,CAAC,2CAA2C,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/core/workflow/ExecutionGraph.d.ts

@@ -0,0 +1,83 @@
+/**
+ * ExecutionGraph - 构建和分析 workflow 执行依赖图
+ *
+ * 职责：
+ * - 构建节点依赖图
+ * - 拓扑排序确定执行顺序
+ * - 检测循环依赖
+ * - 查找起始节点
+ */
+import type { WorkflowDefinition } from './types.js';
+export declare class ExecutionGraph {
+    private workflow;
+    private adjacencyList;
+    private reverseList;
+    private nodeIds;
+    constructor(workflow: WorkflowDefinition);
+    /**
+     * 构建依赖图
+     * adjacencyList: target -> [sources] (节点依赖哪些节点)
+     * reverseList: source -> [targets] (节点被哪些节点依赖)
+     */
+    private buildGraph;
+    /**
+     * 拓扑排序 - 返回执行顺序
+     * 使用 DFS 实现
+     */
+    topologicalSort(): string[];
+    /**
+     * 检测循环依赖
+     */
+    detectCycles(): boolean;
+    /**
+     * 获取起始节点（无依赖的节点）
+     */
+    getStartNodes(): string[];
+    /**
+     * 获取节点的直接依赖
+     */
+    getDependencies(nodeId: string): string[];
+    /**
+     * 获取依赖该节点的节点列表
+     */
+    getDependents(nodeId: string): string[];
+    /**
+     * 获取节点的所有前置节点（递归）
+     */
+    getAllPredecessors(nodeId: string): Set<string>;
+    /**
+     * 获取节点的所有后继节点（递归）
+     */
+    getAllSuccessors(nodeId: string): Set<string>;
+    /**
+     * 检查是否可以并行执行两个节点
+     */
+    canRunInParallel(nodeId1: string, nodeId2: string): boolean;
+    /**
+     * 获取可以并行执行的节点组
+     * 返回按层级分组的节点
+     */
+    getParallelLayers(): string[][];
+    /**
+     * 验证图的完整性
+     */
+    validate(): {
+        valid: boolean;
+        errors: string[];
+    };
+    /**
+     * 获取图的统计信息
+     */
+    getStats(): {
+        nodeCount: number;
+        edgeCount: number;
+        startNodeCount: number;
+        maxDepth: number;
+        layerCount: number;
+    };
+    /**
+     * 计算图的最大深度
+     */
+    private calculateMaxDepth;
+}
+//# sourceMappingURL=ExecutionGraph.d.ts.map

package/dist/core/workflow/ExecutionGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionGraph.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/ExecutionGraph.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,YAAY,CAAC;AAErE,qBAAa,cAAc;IAKb,OAAO,CAAC,QAAQ;IAJ5B,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,OAAO,CAAc;gBAET,QAAQ,EAAE,kBAAkB;IAOhD;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAkClB;;;OAGG;IACH,eAAe,IAAI,MAAM,EAAE;IAoC3B;;OAEG;IACH,YAAY,IAAI,OAAO;IAYvB;;OAEG;IACH,aAAa,IAAI,MAAM,EAAE;IAazB;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAIzC;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAIvC;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAmB/C;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAmB7C;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAY3D;;;OAGG;IACH,iBAAiB,IAAI,MAAM,EAAE,EAAE;IAkC/B;;OAEG;IACH,QAAQ,IAAI;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;IA8BhD;;OAEG;IACH,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB;IAYD;;OAEG;IACH,OAAO,CAAC,iBAAiB;CA2B1B"}