@lingxiao-office/sdk 1.0.0

package/dist/tools/implementations/BrowserVisualVerifyTool.d.ts

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+import { Tool, type ToolContext, type ToolResult } from '../Tool.js';
+import { type ListeningPort } from './utils.js';
+/** 折叠连续空白为单空格并去首尾。视觉验收关心的是"可见文本",连续空白(换行/缩进/
+ *  断言里手误多敲的空格,如 "云  笺" vs 渲染出的 "云笺")在视觉上不可见,不应导致断言失败。 */
+export declare function normalizeVisibleWhitespace(s: string): string;
+/** 视觉等价的文本包含判定:忽略连续空白差异后做 includes。 */
+export declare function visibleTextContains(haystack: string, needle: string): boolean;
+/** 删除所有空白字符(用于检测 "云  笺" 与 "云笺" 这类纯空白/排版差异)。 */
+export declare function stripAllWhitespace(s: string): string;
+/** 构造文本断言失败的 reason。折叠连续空白后不等即判"未找到";若去尽所有空白后匹配,
+ *  则确定性点明这是空白差异(常见于断言里手误多敲的空格,如 "云  笺" 而页面渲染 "云笺"),
+ *  给出可执行引导,而非干巴巴的 not found。判定基于真实计算、非关键词启发式。 */
+export declare function describeTextFailure(haystack: string, needle: string): string;
+export type ConnErrorClass = 'refused' | 'name-resolution' | 'timeout' | 'reset' | 'empty' | 'other';
+/** 按真实的错误码分类连接失败(确定性:匹配的是系统发出的确切错误码,非模糊关键词)。 */
+export declare function classifyConnectionError(msg: string): ConnErrorClass;
+/** 用 TCP 探活判定某 IP:port 是否真能连上(连接成功即返回 true,被拒/超时返回 false)。 */
+export declare function probeReachable(ip: string, port: number, timeoutMs?: number): Promise<boolean>;
+export interface DiagnosisDeps {
+    /** 注入端口枚举(测试用);默认调真实 listListeningLoopbackPorts。 */
+    listPorts?: () => ListeningPort[];
+    /** 注入探活(测试用);默认调真实 probeReachable。 */
+    probe?: (ip: string, port: number) => Promise<boolean>;
+}
+/**
+ * 为连接类失败构造可执行引导:指出端口是否有监听、列出实际在听的 loopback 端口、
+ * 检测 IPv4/IPv6 地址族不匹配(127.0.0.1 拒而 ::1 可通的情形)并给出可用的真实 URL。
+ * 未知错误类或 URL 不可解析时返回空串(不臆造引导,回退到原始错误)。
+ */
+export declare function buildConnectionGuidance(rawUrl: string, errorMsg: string, deps?: DiagnosisDeps): Promise<string>;
+export declare class BrowserVisualVerifyTool extends Tool {
+    readonly name = "browser_visual_verify";
+    readonly description = "\u6D4F\u89C8\u5668\u89C6\u89C9\u9A8C\u6536\uFF1A\u6253\u5F00\u9875\u9762\u3001\u8BBE\u7F6E\u89C6\u53E3\u3001\u68C0\u67E5\u6587\u672C/selector\u3001\u4FDD\u5B58\u622A\u56FE\uFF0C\u5E76\u8FD4\u56DE\u9875\u9762\u6807\u9898\u3001\u5C3A\u5BF8\u548C\u5931\u8D25\u65AD\u8A00\u3002\u9002\u5408\u524D\u7AEF\u6539\u52A8\u540E\u9A8C\u6536\u3002";
+    readonly parameters: z.ZodObject<{
+        url: z.ZodString;
+        wait_until: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+            load: "load";
+            domcontentloaded: "domcontentloaded";
+            networkidle: "networkidle";
+        }>>>;
+        viewport: z.ZodOptional<z.ZodObject<{
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strip>>;
+        assertions: z.ZodOptional<z.ZodObject<{
+            text: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            selectors: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        screenshot_path: z.ZodOptional<z.ZodString>;
+        full_page: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$strip>;
+    execute(args: unknown, context?: ToolContext): Promise<ToolResult>;
+}
+export default BrowserVisualVerifyTool;
+//# sourceMappingURL=BrowserVisualVerifyTool.d.ts.map

package/dist/tools/implementations/BrowserVisualVerifyTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserVisualVerifyTool.d.ts","sourceRoot":"","sources":["../../../src/tools/implementations/BrowserVisualVerifyTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAoD,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAgClG;yDACyD;AACzD,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,uCAAuC;AACvC,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED,+CAA+C;AAC/C,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;iDAEiD;AACjD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAK5E;AAQD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAErG,gDAAgD;AAChD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CASnE;AAED,8DAA8D;AAC9D,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB3F;AAED,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,aAAa,EAAE,CAAC;IAClC,sCAAsC;IACtC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,MAAM,CAAC,CAkEjB;AAED,qBAAa,uBAAwB,SAAQ,IAAI;IAC/C,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,mVAAqE;IACzF,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;sBAA6B;IAE1C,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAkHzE;AAED,eAAe,uBAAuB,CAAC"}

package/dist/tools/implementations/BrowserVisualVerifyTool.js

@@ -0,0 +1,269 @@
+import { z } from 'zod';
+import { mkdir, writeFile } from 'fs/promises';
+import { dirname, resolve } from 'path';
+import net from 'net';
+import { Tool } from '../Tool.js';
+import { browserManager } from './BrowserManager.js';
+import { resolveTaskWritePath, listListeningLoopbackPorts } from './utils.js';
+const BrowserVisualVerifySchema = z.object({
+    url: z.string().url().describe('要打开并验证的 URL'),
+    wait_until: z.enum(['load', 'domcontentloaded', 'networkidle']).optional().default('domcontentloaded'),
+    viewport: z.object({
+        width: z.number().int().min(320).max(3840),
+        height: z.number().int().min(240).max(2160),
+    }).optional().describe('视口大小，默认 1440x900'),
+    assertions: z.object({
+        text: z.array(z.string().min(1)).optional().describe('必须出现在页面可见文本中的片段'),
+        selectors: z.array(z.string().min(1)).optional().describe('必须存在的 CSS selector'),
+    }).optional(),
+    screenshot_path: z.string().optional().describe('截图输出路径，默认写入 .lingxiao/artifacts'),
+    full_page: z.boolean().optional().default(false).describe('是否截取完整页面'),
+});
+function defaultScreenshotPath(context) {
+    const workspace = context?.workspace || process.cwd();
+    return resolve(workspace, '.lingxiao', 'artifacts', `browser-visual-${Date.now()}.png`);
+}
+// ==================== 可见文本判定 ====================
+// 等待客户端渲染就绪的上限。networkidle 只反映网络空闲、不反映 DOM 渲染完成,对 SPA/CSR
+// 会在文本水合进 DOM 之前就抓 innerText 致误报。此处确定性等待断言文本真正进入 DOM。
+// 这只是一个"等多久"的工程上限(同 page.goto 的 timeout 性质),判定逻辑本身基于真实
+// DOM 文本信号、非启发式阈值。
+const RENDER_SETTLE_TIMEOUT_MS = 5000;
+/** 折叠连续空白为单空格并去首尾。视觉验收关心的是"可见文本",连续空白(换行/缩进/
+ *  断言里手误多敲的空格,如 "云  笺" vs 渲染出的 "云笺")在视觉上不可见,不应导致断言失败。 */
+export function normalizeVisibleWhitespace(s) {
+    return (s ?? '').replace(/\s+/g, ' ').trim();
+}
+/** 视觉等价的文本包含判定:忽略连续空白差异后做 includes。 */
+export function visibleTextContains(haystack, needle) {
+    return normalizeVisibleWhitespace(haystack).includes(normalizeVisibleWhitespace(needle));
+}
+/** 删除所有空白字符(用于检测 "云  笺" 与 "云笺" 这类纯空白/排版差异)。 */
+export function stripAllWhitespace(s) {
+    return (s ?? '').replace(/\s+/g, '');
+}
+/** 构造文本断言失败的 reason。折叠连续空白后不等即判"未找到";若去尽所有空白后匹配,
+ *  则确定性点明这是空白差异(常见于断言里手误多敲的空格,如 "云  笺" 而页面渲染 "云笺"),
+ *  给出可执行引导,而非干巴巴的 not found。判定基于真实计算、非关键词启发式。 */
+export function describeTextFailure(haystack, needle) {
+    if (stripAllWhitespace(haystack).includes(stripAllWhitespace(needle))) {
+        return `visible text not found (去尽空白后匹配——页面可能含该文本但空白不同,请核对断言「${needle}」中的空格/换行是否为笔误)`;
+    }
+    return 'visible text not found';
+}
+/** 按真实的错误码分类连接失败(确定性:匹配的是系统发出的确切错误码,非模糊关键词)。 */
+export function classifyConnectionError(msg) {
+    const lower = msg.toLowerCase();
+    if (lower.includes('err_connection_refused') || lower.includes('econnrefused'))
+        return 'refused';
+    if (lower.includes('err_name_not_resolved') || lower.includes('err_name_resolution_failed')
+        || lower.includes('enotfound') || lower.includes('getaddrinfo'))
+        return 'name-resolution';
+    if (lower.includes('err_timed_out') || lower.includes('err_connection_timed_out') || lower.includes('etimedout'))
+        return 'timeout';
+    if (lower.includes('err_connection_reset') || lower.includes('econnreset'))
+        return 'reset';
+    if (lower.includes('err_empty_response'))
+        return 'empty';
+    return 'other';
+}
+/** 用 TCP 探活判定某 IP:port 是否真能连上(连接成功即返回 true,被拒/超时返回 false)。 */
+export function probeReachable(ip, port, timeoutMs = 1500) {
+    return new Promise((resolve) => {
+        const socket = new net.Socket();
+        let settled = false;
+        const finish = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            resolve(ok);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once('connect', () => finish(true));
+        socket.once('error', () => finish(false));
+        socket.once('timeout', () => finish(false));
+        socket.connect(port, ip);
+    });
+}
+/**
+ * 为连接类失败构造可执行引导:指出端口是否有监听、列出实际在听的 loopback 端口、
+ * 检测 IPv4/IPv6 地址族不匹配(127.0.0.1 拒而 ::1 可通的情形)并给出可用的真实 URL。
+ * 未知错误类或 URL 不可解析时返回空串(不臆造引导,回退到原始错误)。
+ */
+export async function buildConnectionGuidance(rawUrl, errorMsg, deps) {
+    const errorClass = classifyConnectionError(errorMsg);
+    if (errorClass === 'other')
+        return '';
+    const listPorts = deps?.listPorts ?? listListeningLoopbackPorts;
+    const probe = deps?.probe ?? probeReachable;
+    let host = '';
+    let port = 0;
+    try {
+        const parsed = new URL(rawUrl);
+        host = parsed.hostname.replace(/^\[|\]$/g, '');
+        port = parsed.port ? Number(parsed.port) : (parsed.protocol === 'https:' ? 443 : 80);
+    }
+    catch {
+        return '';
+    }
+    const parts = [];
+    switch (errorClass) {
+        case 'refused':
+            parts.push(`目标 ${host}:${port} 没有进程在接受连接(连接被拒)。`);
+            break;
+        case 'name-resolution':
+            parts.push(`主机名 "${host}" 无法解析。检查拼写,或改用 IP(127.0.0.1 / localhost)。`);
+            break;
+        case 'timeout':
+            parts.push(`连接 ${host}:${port} 超时无响应。可能 server 还没起好、绑到了错误地址,或被防火墙挡。`);
+            break;
+        case 'reset':
+            parts.push(`连接 ${host}:${port} 被重置(server 接受后立即断开,常见于进程崩溃)。`);
+            break;
+        case 'empty':
+            parts.push(`连接 ${host}:${port} 返回空响应(server 连上但未正确回应 HTTP,可能不是 HTTP 服务)。`);
+            break;
+        default:
+            return '';
+    }
+    // 对 loopback 目标跨地址族探活:检测 "127.0.0.1 被拒而 ::1 可通"(server 绑了 IPv6-only)及其反向。
+    const isLoopbackTarget = host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '0.0.0.0';
+    if (isLoopbackTarget && port > 0) {
+        const probes = [];
+        if (host !== '127.0.0.1')
+            probes.push({ label: `http://127.0.0.1:${port}`, ip: '127.0.0.1' });
+        if (host !== '::1')
+            probes.push({ label: `http://[::1]:${port}`, ip: '::1' });
+        const reachable = await Promise.all(probes.map(async (p) => ((await probe(p.ip, port)) ? p.label : null)));
+        const ok = reachable.filter((r) => r !== null);
+        if (ok.length > 0) {
+            parts.push(`检测到该端口在另一地址族可通(IPv4/IPv6 绑定不匹配),改用: ${ok.join(' / ')}。`);
+        }
+    }
+    // 列出实际在听的 loopback 端口,让调用方一眼看出端口填错。
+    const listening = listPorts().filter((p) => p.port !== port);
+    if (listening.length > 0) {
+        const shown = listening.slice(0, 12).map((p) => String(p.port)).join(', ');
+        const extra = listening.length > 12 ? ` …(共 ${listening.length} 个)` : '';
+        parts.push(`当前本机 loopback 实际在听的端口: ${shown}${extra}。dev server 很可能不在你填的 ${port}。`);
+    }
+    // 仅在原目标是 127.0.0.1 字面量时,提示换 localhost(localhost 可能解析为 ::1)。
+    if (host === '127.0.0.1') {
+        parts.push(`若 server 绑的是 localhost(部分系统解析为 ::1),可改试 http://localhost:${port}。`);
+    }
+    return parts.join(' ');
+}
+export class BrowserVisualVerifyTool extends Tool {
+    name = 'browser_visual_verify';
+    description = '浏览器视觉验收：打开页面、设置视口、检查文本/selector、保存截图，并返回页面标题、尺寸和失败断言。适合前端改动后验收。';
+    parameters = BrowserVisualVerifySchema;
+    async execute(args, context) {
+        const params = args;
+        // 先解析并校验截图输出路径(工作区/会话写入隔离)：失败时立即返回可执行引导，
+        // 避免白跑一轮浏览器(导航/断言/截图)之后才发现写不进去。
+        let rawScreenshotPath;
+        try {
+            rawScreenshotPath = params.screenshot_path
+                ? resolveTaskWritePath(context?.workspace, params.screenshot_path, context?.sessionId, context?.taskWriteScope)
+                : defaultScreenshotPath(context);
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            const hint = params.screenshot_path
+                ? '可省略 screenshot_path 参数，改用默认输出目录 .lingxiao/artifacts；'
+                : '';
+            return {
+                success: false,
+                data: null,
+                error: `截图路径不可写: ${reason}${hint ? ` ${hint}` : ''}`,
+            };
+        }
+        let page;
+        try {
+            page = await browserManager.ensureBrowser();
+        }
+        catch (error) {
+            return {
+                success: false,
+                data: null,
+                error: `浏览器启动失败: ${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
+        try {
+            const viewport = params.viewport || { width: 1440, height: 900 };
+            await page.setViewportSize(viewport);
+            await page.goto(params.url, {
+                waitUntil: params.wait_until ?? 'domcontentloaded',
+                timeout: 30_000,
+            });
+            // networkidle 只反映网络空闲、不反映客户端渲染完成。对 SPA/CSR,断言文本可能在
+            // JS 水合进 DOM 之前还不可见——若抓取一次 innerText 即判,会与稍后(渲染已完成时)
+            // 拍的截图矛盾,误报断言失败(用户实际遇到的"截图看着对、断言却报错")。
+            // 因此:先确定性等待所有断言文本/选择器进入 DOM(超时不抛,由下面逐条精确判定
+            // 哪些真正缺失),再抓最终可见文本判定。这是基于真实 DOM 信号的等待,非固定 sleep。
+            const textNeedles = params.assertions?.text ?? [];
+            const selectorList = params.assertions?.selectors ?? [];
+            if (textNeedles.length > 0) {
+                await page.waitForFunction((needles) => {
+                    const norm = (s) => (s ?? '').replace(/\s+/g, ' ').trim();
+                    const body = document.body?.innerText ?? '';
+                    return needles.every((n) => norm(body).includes(norm(n)));
+                }, textNeedles, { timeout: RENDER_SETTLE_TIMEOUT_MS }).catch(() => { });
+            }
+            for (const selector of selectorList) {
+                await page.waitForSelector(selector, { timeout: RENDER_SETTLE_TIMEOUT_MS }).catch(() => { });
+            }
+            const title = await page.title().catch(() => '');
+            const visibleText = await page.evaluate(() => document.body?.innerText || '').catch(() => '');
+            const failures = [];
+            for (const text of textNeedles) {
+                if (!visibleTextContains(visibleText, text)) {
+                    failures.push({ type: 'text', value: text, reason: describeTextFailure(visibleText, text) });
+                }
+            }
+            for (const selector of selectorList) {
+                const count = await page.locator(selector).count().catch(() => 0);
+                if (count < 1)
+                    failures.push({ type: 'selector', value: selector, reason: 'selector not found' });
+            }
+            await mkdir(dirname(rawScreenshotPath), { recursive: true });
+            const buffer = await page.screenshot({ type: 'png', fullPage: params.full_page === true });
+            await writeFile(rawScreenshotPath, buffer);
+            return {
+                success: failures.length === 0,
+                data: {
+                    url: page.url(),
+                    title,
+                    viewport,
+                    screenshot_path: rawScreenshotPath,
+                    visible_text_preview: visibleText.slice(0, 1200),
+                    assertions: {
+                        total: (params.assertions?.text?.length || 0) + (params.assertions?.selectors?.length || 0),
+                        failures,
+                    },
+                },
+                ...(failures.length > 0 ? { error: `视觉验收失败：${failures.length} 个断言未通过。` } : {}),
+            };
+        }
+        catch (error) {
+            const errMsg = error instanceof Error ? error.message : String(error);
+            // 连接类失败追加确定性引导(实际监听端口 + 地址族探活),避免调用方误诊为"沙箱网络"。
+            // 引导构造为 best-effort:任何异常都吞掉,绝不掩盖原始错误。
+            let guidance = '';
+            try {
+                guidance = await buildConnectionGuidance(params.url, errMsg);
+            }
+            catch { /* best-effort */ }
+            return {
+                success: false,
+                data: null,
+                error: guidance
+                    ? `浏览器视觉验收失败: ${errMsg}\n诊断与建议: ${guidance}`
+                    : `浏览器视觉验收失败: ${errMsg}`,
+            };
+        }
+    }
+}
+export default BrowserVisualVerifyTool;
+//# sourceMappingURL=BrowserVisualVerifyTool.js.map

package/dist/tools/implementations/BrowserVisualVerifyTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserVisualVerifyTool.js","sourceRoot":"","sources":["../../../src/tools/implementations/BrowserVisualVerifyTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,IAAI,EAAqC,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAsB,MAAM,YAAY,CAAC;AAElG,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACtG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;KAC5C,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACvE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KAChF,CAAC,CAAC,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAClF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;CACtE,CAAC,CAAC;AAIH,SAAS,qBAAqB,CAAC,OAAqB;IAClD,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,OAAO,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED,mDAAmD;AAEnD,0DAA0D;AAC1D,sDAAsD;AACtD,uDAAuD;AACvD,mBAAmB;AACnB,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC;yDACyD;AACzD,MAAM,UAAU,0BAA0B,CAAC,CAAS;IAClD,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAc;IAClE,OAAO,0BAA0B,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,kBAAkB,CAAC,CAAS;IAC1C,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;iDAEiD;AACjD,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAc;IAClE,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,wDAAwD,MAAM,gBAAgB,CAAC;IACxF,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAUD,gDAAgD;AAChD,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IACjG,IAAI,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC;WACtF,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC5F,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACnI,IAAI,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3F,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAAE,OAAO,OAAO,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,IAAY,EAAE,SAAS,GAAG,IAAI;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,QAAgB,EAChB,IAAoB;IAEpB,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,0BAA0B,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,cAAc,CAAC;IAE5C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,mBAAmB,CAAC,CAAC;YAClD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,4CAA4C,CAAC,CAAC;YACrE,MAAM;QACR,KAAK,SAAS;YACZ,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,uCAAuC,CAAC,CAAC;YACtE,MAAM;QACR,KAAK,OAAO;YACV,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,+BAA+B,CAAC,CAAC;YAC9D,MAAM;QACR,KAAK,OAAO;YACV,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,4CAA4C,CAAC,CAAC;YAC3E,MAAM;QACR;YACE,OAAO,EAAE,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,MAAM,gBAAgB,GAAG,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,CAAC;IAC9G,IAAI,gBAAgB,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAyC,EAAE,CAAC;QACxD,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,IAAI,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9F,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACtE,CAAC;QACF,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC5D,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,uCAAuC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,0BAA0B,KAAK,GAAG,KAAK,wBAAwB,IAAI,GAAG,CAAC,CAAC;IACrF,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,4DAA4D,IAAI,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,IAAI;IACtC,IAAI,GAAG,uBAAuB,CAAC;IAC/B,WAAW,GAAG,iEAAiE,CAAC;IAChF,UAAU,GAAG,yBAAyB,CAAC;IAEhD,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,OAAqB;QAChD,MAAM,MAAM,GAAG,IAAiC,CAAC;QAEjD,yCAAyC;QACzC,gCAAgC;QAChC,IAAI,iBAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,iBAAiB,GAAG,MAAM,CAAC,eAAe;gBACxC,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC;gBAC/G,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe;gBACjC,CAAC,CAAC,sDAAsD;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,YAAY,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,IAA+B,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC5E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,kBAAkB;gBAClD,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YAEH,mDAAmD;YACnD,qDAAqD;YACrD,uCAAuC;YACvC,2CAA2C;YAC3C,iDAAiD;YACjD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;YAExD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,eAAe,CACxB,CAAC,OAAiB,EAAE,EAAE;oBACpB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;oBAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,CAAC,EACD,WAAW,EACX,EAAE,OAAO,EAAE,wBAAwB,EAAE,CACtC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpB,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9F,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,QAAQ,GAAwE,EAAE,CAAC;YAEzF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;oBAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBAClE,IAAI,KAAK,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3F,MAAM,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC9B,IAAI,EAAE;oBACJ,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;oBACf,KAAK;oBACL,QAAQ;oBACR,eAAe,EAAE,iBAAiB;oBAClC,oBAAoB,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBAChD,UAAU,EAAE;wBACV,KAAK,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;wBAC3F,QAAQ;qBACT;iBACF;gBACD,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,QAAQ,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,+CAA+C;YAC/C,sCAAsC;YACtC,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,QAAQ;oBACb,CAAC,CAAC,cAAc,MAAM,YAAY,QAAQ,EAAE;oBAC5C,CAAC,CAAC,cAAc,MAAM,EAAE;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,eAAe,uBAAuB,CAAC"}

package/dist/tools/implementations/BughuntScanToolWrappers.d.ts

@@ -0,0 +1,28 @@
+/**
+ * BughuntScanToolWrappers — 把 BughuntScanTools 的 runner 函数
+ * 封装成可注册到 ToolRegistry 的普通 Tool。
+ *
+ * 之前这些工具走 LeaderTools 大 switch 内部 handler；改为统一通过
+ * directToolsExecutor → ToolRegistry 调用，让 LeaderTools 仅承担带 Leader 状
+ * 态副作用（setActiveTeam 等）的元工具，scan 类纯计算工具回归普通 tool。
+ *
+ * 合并说明：原文件暴露 4 个 Tool 类（full/semgrep/tsc/npm_audit），但其中
+ * semgrep/tsc/npm_audit 三个子扫描器从未注册到 registry、无任何测试、且
+ * bughunt_full_scan 已通过 skipSemgrep/skipTsc/skipNpmAudit 参数完整覆盖它们。
+ * 真正语义重叠 → 已删除三个死代码子类，仅保留 full 统一入口。runner 函数
+ * 仍由 BughuntScanTools.ts 导出供 runFullScan 内部调用。
+ */
+import { z } from 'zod';
+import { Tool, type ToolContext, type ToolResult } from '../Tool.js';
+export declare class BughuntFullScanTool extends Tool {
+    readonly name = "bughunt_full_scan";
+    readonly description = "BugHunt \u6A21\u5F0F\u4E13\u7528\uFF1A\u8FD0\u884C\u5168\u5957\u626B\u63CF\uFF08ast-grep + \u6B63\u5219 + js-x-ray + tsc + npm audit + semgrep\uFF09\uFF0C\u8FD4\u56DE\u7EFC\u5408\u5B89\u5168\u6001\u52BF\u3002";
+    readonly parameters: z.ZodObject<{
+        target: z.ZodOptional<z.ZodString>;
+        skipSemgrep: z.ZodOptional<z.ZodBoolean>;
+        skipTsc: z.ZodOptional<z.ZodBoolean>;
+        skipNpmAudit: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    execute(args: unknown, context?: ToolContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=BughuntScanToolWrappers.d.ts.map

package/dist/tools/implementations/BughuntScanToolWrappers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BughuntScanToolWrappers.d.ts","sourceRoot":"","sources":["../../../src/tools/implementations/BughuntScanToolWrappers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAyMrE,qBAAa,mBAAoB,SAAQ,IAAI;IAC3C,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,WAAW,sNAAyF;IAC7G,QAAQ,CAAC,UAAU;;;;;sBAKhB;IAEG,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAsBzE"}

package/dist/tools/implementations/BughuntScanToolWrappers.js

@@ -0,0 +1,183 @@
+/**
+ * BughuntScanToolWrappers — 把 BughuntScanTools 的 runner 函数
+ * 封装成可注册到 ToolRegistry 的普通 Tool。
+ *
+ * 之前这些工具走 LeaderTools 大 switch 内部 handler；改为统一通过
+ * directToolsExecutor → ToolRegistry 调用，让 LeaderTools 仅承担带 Leader 状
+ * 态副作用（setActiveTeam 等）的元工具，scan 类纯计算工具回归普通 tool。
+ *
+ * 合并说明：原文件暴露 4 个 Tool 类（full/semgrep/tsc/npm_audit），但其中
+ * semgrep/tsc/npm_audit 三个子扫描器从未注册到 registry、无任何测试、且
+ * bughunt_full_scan 已通过 skipSemgrep/skipTsc/skipNpmAudit 参数完整覆盖它们。
+ * 真正语义重叠 → 已删除三个死代码子类，仅保留 full 统一入口。runner 函数
+ * 仍由 BughuntScanTools.ts 导出供 runFullScan 内部调用。
+ */
+import { z } from 'zod';
+import { Tool } from '../Tool.js';
+import { runFullScan, } from './BughuntScanTools.js';
+import { ensureModeWorktree } from '../../core/ModeWorktreeService.js';
+import { runTaintScan } from './BughuntTaintScanner.js';
+import { getRulePack } from './rules/RuleLoader.js';
+function buildScanPayload(target, results, title, taintFindings = []) {
+    const successful = results.filter((result) => result.success).length;
+    const failed = results.length - successful;
+    const findings = results.flatMap((result) => result.findings.map((finding) => ({ result, finding })));
+    const highOrCritical = findings.filter(({ finding }) => finding.severity === 'HIGH' || finding.severity === 'CRITICAL').length;
+    const scanSuggested = findings
+        .filter(({ finding }) => finding.severity !== 'INFO')
+        .slice(0, 50)
+        .map(({ result, finding }, index) => toSuggestedFinding(result.tool, finding, index));
+    const taintSuggested = taintFindings.slice(0, 50).map((f, index) => toTaintSuggestedFinding(f, index));
+    const suggestedFindings = [...scanSuggested, ...taintSuggested];
+    const summaries = [
+        title,
+        ...results.map((result) => result.summary),
+        `总计: ${findings.length} 个扫描发现, ${highOrCritical} 个 HIGH/CRITICAL, ${taintFindings.length} 个污点流(TaintFlowEngine 自动 taint_path), ${suggestedFindings.length} 个 ledger 候选。`,
+        '扫描只生成 hypothesis/likely；带 taint_path 的污点候选为 likely（已有 source→sink 数据流证据）；confirmed 需要 source+sink/taint/whitebox 证据，verified 需要编译/测试和黑盒输出。',
+    ];
+    return {
+        kind: 'bughunt_scan_result',
+        target,
+        summary: summaries.join('\n'),
+        totals: {
+            tools: results.length,
+            successful_tools: successful,
+            failed_tools: failed,
+            findings: findings.length,
+            high_or_critical: highOrCritical,
+            suggested_findings: suggestedFindings.length,
+        },
+        results: results.map((result) => ({
+            tool: result.tool,
+            success: result.success,
+            summary: result.summary,
+            findings: result.findings,
+            error: result.error,
+            exitCode: result.exitCode,
+        })),
+        suggested_findings: suggestedFindings,
+        ledger_instruction: '用 upsert_bughunt_finding 记录扫描候选时设置 status=hypothesis 或 likely；confirmed 需要源码 source/sink/taint_path 或 whitebox/repro artifact；verified 需要 compile/test 信号和 blackbox_commands 输出证据。',
+        next_gates: [
+            '对 HIGH/CRITICAL 候选读取源码，补 source、sink、trust_boundary、taint_path。',
+            '为可疑路径设计最小插桩、测试或 repro_artifact，记录 whitebox_artifacts/instrumentation_artifacts。',
+            '运行编译/类型检查/测试并记录 compile_commands 或 compile_artifacts。',
+            '启动可授权的本地目标后执行 HTTP/CLI 黑盒探测，记录 blackbox_commands 和输出证据。',
+        ],
+    };
+}
+function toSuggestedFinding(tool, finding, index) {
+    const status = finding.severity === 'CRITICAL' || finding.severity === 'HIGH' ? 'likely' : 'hypothesis';
+    const location = `${finding.file}${finding.line ? `:${finding.line}` : ''}`;
+    const ruleTitle = finding.rule.replace(/[._-]+/g, ' ').trim() || 'security finding';
+    const title = `${ruleTitle}: ${finding.message}`.slice(0, 180);
+    return {
+        id: `SCAN-${sanitizeId(tool)}-${finding.id || index + 1}`,
+        title,
+        severity: finding.severity,
+        status,
+        files: finding.file ? [finding.file] : [],
+        cwe: finding.cwe,
+        owasp: finding.owasp,
+        source: inferSource(finding),
+        sink: inferSink(finding),
+        trigger: `${tool}/${finding.rule} at ${location}`,
+        exploitability: status === 'likely' ? 'possible' : 'unknown',
+        evidence: [`scan_result ${tool}/${finding.rule}: ${finding.message} (${location})${finding.code ? ` code=${finding.code.slice(0, 160)}` : ''}`],
+        evidence_gap: [
+            'read source and identify trust boundary, source, sink, and taint path',
+            'create minimal whitebox repro or instrumentation artifact',
+            'run compile/test command and authorized blackbox verification before verified',
+        ],
+        whitebox_artifacts: [],
+        instrumentation_artifacts: [],
+        compile_commands: [],
+        compile_artifacts: [],
+        blackbox_commands: [],
+        blackbox_artifacts: [],
+        fix_files: [],
+        linked_tasks: [],
+    };
+}
+function inferSource(finding) {
+    const text = `${finding.message} ${finding.code || ''}`;
+    const source = text.match(/\b(req\.(?:body|query|params|headers)|params|args|input|user|query|body|argv|process\.env)\b/i)?.[0];
+    return source;
+}
+function inferSink(finding) {
+    const text = `${finding.rule} ${finding.message} ${finding.code || ''}`;
+    const sink = text.match(/\b(execSync|exec|spawn|query|execute|raw|innerHTML|dangerouslySetInnerHTML|eval|Function|readFile|writeFile|createReadStream|fetch|axios|request)\b/i)?.[0];
+    return sink;
+}
+function sanitizeId(value) {
+    return value.replace(/[^a-zA-Z0-9]+/g, '-').replace(/^-+|-+$/g, '').toUpperCase().slice(0, 40) || 'TOOL';
+}
+/** TaintFlowEngine 的污点流 → ledger 候选（带自动 taint_path，status=likely）。 */
+function toTaintSuggestedFinding(f, index) {
+    const fileId = sanitizeId(f.file);
+    return {
+        id: `TAINT-${fileId}-${f.line}-${index + 1}`.slice(0, 80),
+        title: `Taint flow: ${f.source} → ${f.sink}${f.cwe ? ` (${f.cwe})` : ''}`.slice(0, 180),
+        severity: f.severity,
+        status: 'likely',
+        files: f.file ? [f.file] : [],
+        cwe: f.cwe,
+        source: f.source,
+        sink: f.sink,
+        trigger: `${f.sink} at ${f.file}:${f.line}`,
+        exploitability: 'possible',
+        evidence: [`taint_flow ${f.source} -> ${f.sink}: ${f.taint_path.join(' -> ')}`],
+        evidence_gap: [
+            '确认数据流可达性（读取源码核对路径节点）',
+            '运行编译/测试记录 compile 信号',
+            '授权后执行黑盒探测验证可利用性',
+        ],
+        whitebox_artifacts: [],
+        instrumentation_artifacts: [],
+        compile_commands: [],
+        compile_artifacts: [],
+        blackbox_commands: [],
+        blackbox_artifacts: [],
+        fix_files: [],
+        linked_tasks: [],
+        taint_path: f.taint_path,
+    };
+}
+/** 合并 js+ts 语言配置的污点源（供 TaintFlowEngine）。 */
+function collectJsTsSources() {
+    const pack = getRulePack();
+    return [...new Set([...pack.languages.javascript.sources, ...pack.languages.typescript.sources])];
+}
+export class BughuntFullScanTool extends Tool {
+    name = 'bughunt_full_scan';
+    description = 'BugHunt 模式专用：运行全套扫描（ast-grep + 正则 + js-x-ray + tsc + npm audit + semgrep），返回综合安全态势。';
+    parameters = z.object({
+        target: z.string().optional().describe('项目路径，默认当前工作区'),
+        skipSemgrep: z.boolean().optional(),
+        skipTsc: z.boolean().optional(),
+        skipNpmAudit: z.boolean().optional(),
+    });
+    async execute(args, context) {
+        const params = this.parameters.parse(args ?? {});
+        // 执行卫生：bughunt 扫描默认在独立 worktree 跑，避免 tsc/npm audit/semgrep
+        // 产物污染主工作树（非安全边界，仅工程卫生；见 ModeWorktreeService）。
+        // 用户显式传 target 时尊重其选择；否则在模式 worktree（若可用）内执行。
+        const requestedWorkspace = context?.workspace || process.cwd();
+        const target = params.target
+            || ensureModeWorktree('bughunt', requestedWorkspace)
+            || requestedWorkspace;
+        try {
+            const results = await runFullScan(target, {
+                skipSemgrep: params.skipSemgrep,
+                skipTsc: params.skipTsc,
+                skipNpmAudit: params.skipNpmAudit,
+            });
+            // Taint tier：JS/TS 过程内污点传播（自动 taint_path；确定性、无外部依赖）
+            const taint = runTaintScan(target, collectJsTsSources());
+            return { success: true, data: buildScanPayload(target, results, '=== BugHunt 全套扫描报告 ===', taint.findings) };
+        }
+        catch (err) {
+            return { success: false, data: null, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+}
+//# sourceMappingURL=BughuntScanToolWrappers.js.map

package/dist/tools/implementations/BughuntScanToolWrappers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BughuntScanToolWrappers.js","sourceRoot":"","sources":["../../../src/tools/implementations/BughuntScanToolWrappers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAqC,MAAM,YAAY,CAAC;AACrE,OAAO,EACL,WAAW,GAGZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAuDpD,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAqB,EAAE,KAAa,EAAE,gBAAyC,EAAE;IACzH,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC/H,MAAM,aAAa,GAAG,QAAQ;SAC3B,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;SACpD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACvG,MAAM,iBAAiB,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG;QAChB,KAAK;QACL,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1C,OAAO,QAAQ,CAAC,MAAM,WAAW,cAAc,qBAAqB,aAAa,CAAC,MAAM,yCAAyC,iBAAiB,CAAC,MAAM,eAAe;QACxK,4IAA4I;KAC7I,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM;QACN,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE;YACN,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,gBAAgB,EAAE,UAAU;YAC5B,YAAY,EAAE,MAAM;YACpB,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,gBAAgB,EAAE,cAAc;YAChC,kBAAkB,EAAE,iBAAiB,CAAC,MAAM;SAC7C;QACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,kBAAkB,EAAE,iBAAiB;QACrC,kBAAkB,EAAE,oLAAoL;QACxM,UAAU,EAAE;YACV,iEAAiE;YACjE,iFAAiF;YACjF,uDAAuD;YACvD,yDAAyD;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAoB,EAAE,KAAa;IAC3E,MAAM,MAAM,GAA2B,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IAChI,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,kBAAkB,CAAC;IACpF,MAAM,KAAK,GAAG,GAAG,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO;QACL,EAAE,EAAE,QAAQ,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,EAAE,IAAI,KAAK,GAAG,CAAC,EAAE;QACzD,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM;QACN,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;QACzC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC;QAC5B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,OAAO,QAAQ,EAAE;QACjD,cAAc,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC5D,QAAQ,EAAE,CAAC,eAAe,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/I,YAAY,EAAE;YACZ,uEAAuE;YACvE,2DAA2D;YAC3D,+EAA+E;SAChF;QACD,kBAAkB,EAAE,EAAE;QACtB,yBAAyB,EAAE,EAAE;QAC7B,gBAAgB,EAAE,EAAE;QACpB,iBAAiB,EAAE,EAAE;QACrB,iBAAiB,EAAE,EAAE;QACrB,kBAAkB,EAAE,EAAE;QACtB,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB;IACvC,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,+FAA+F,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,OAAoB;IACrC,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,sJAAsJ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrL,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAC3G,CAAC;AAED,sEAAsE;AACtE,SAAS,uBAAuB,CAAC,CAAe,EAAE,KAAa;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,SAAS,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACzD,KAAK,EAAE,eAAe,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACvF,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;QAC7B,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;QAC3C,cAAc,EAAE,UAAU;QAC1B,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,YAAY,EAAE;YACZ,sBAAsB;YACtB,sBAAsB;YACtB,iBAAiB;SAClB;QACD,kBAAkB,EAAE,EAAE;QACtB,yBAAyB,EAAE,EAAE;QAC7B,gBAAgB,EAAE,EAAE;QACpB,iBAAiB,EAAE,EAAE;QACrB,iBAAiB,EAAE,EAAE;QACrB,kBAAkB,EAAE,EAAE;QACtB,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,EAAE;QAChB,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,IAAI;IAClC,IAAI,GAAG,mBAAmB,CAAC;IAC3B,WAAW,GAAG,qFAAqF,CAAC;IACpG,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QACtD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,OAAqB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACjD,2DAA2D;QAC3D,+CAA+C;QAC/C,8CAA8C;QAC9C,MAAM,kBAAkB,GAAG,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;eACvB,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,CAAC;eACjD,kBAAkB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAiB,MAAM,WAAW,CAAC,MAAM,EAAE;gBACtD,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,oDAAoD;YACpD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjG,CAAC;IACH,CAAC;CACF"}

package/dist/tools/implementations/BughuntScanTools.d.ts

@@ -0,0 +1,48 @@
+/**
+ * BughuntScanTools — BugHunt 模式静态分析工具（跨平台）
+ *
+ * 3 层扫描架构：
+ * - Tier 1（始终可用）：内建 OWASP 正则规则 + @nodesecure/js-x-ray AST 分析
+ * - Tier 2（Node 项目）：tsc 类型检查 + npm audit 依赖漏洞
+ * - Tier 3（可选增强）：semgrep 深度语义分析
+ *
+ * 跨平台：npm install 后即可使用 Tier 0/1，无需任何外部工具
+ *   - Tier 0 多语言 AST：@ast-grep/napi（NAPI 预编译，9 平台均零编译）
+ *   - Tier 1 内建 OWASP 正则 + js-x-ray
+ */
+import { type LoadedRulePack } from './rules/RuleLoader.js';
+import type { ScannerAdapter, ScanOptions } from './scanners/ScannerAdapter.js';
+export interface ScanFinding {
+    id: string;
+    severity: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO';
+    rule: string;
+    message: string;
+    file: string;
+    line?: number;
+    endLine?: number;
+    code?: string;
+    cwe?: string;
+    owasp?: string;
+    source: string;
+}
+export interface ScanResult {
+    success: boolean;
+    tool: string;
+    findings: ScanFinding[];
+    summary: string;
+    rawOutput?: string;
+    error?: string;
+    exitCode?: number | string;
+}
+export declare function detectAvailableScanners(): string[];
+export declare function runBuiltinScan(targetPath: string, options?: {
+    rulePack?: LoadedRulePack;
+}): ScanResult;
+export declare function runJsXrayScan(targetPath: string): Promise<ScanResult>;
+export declare function runTscScan(projectPath: string): ScanResult;
+export declare function runNpmAuditScan(projectPath: string): ScanResult;
+export declare function runSemgrepScan(targetPath: string, rules?: string): ScanResult;
+/** 注册的扫描器（顺序 = runFullScan 输出顺序；新增 tier 在此追加即可）。 */
+export declare const SCANNER_ADAPTERS: readonly ScannerAdapter[];
+export declare function runFullScan(projectPath: string, options?: ScanOptions): Promise<ScanResult[]>;
+//# sourceMappingURL=BughuntScanTools.d.ts.map

package/dist/tools/implementations/BughuntScanTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BughuntScanTools.d.ts","sourceRoot":"","sources":["../../../src/tools/implementations/BughuntScanTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEzE,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhF,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAwDD,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAMlD;AAsCD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,GAAG,UAAU,CA+CtG;AAMD,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA8C3E;AAyCD,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAwB1D;AAcD,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAyB/D;AAwED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAe7E;AAwGD,oDAAoD;AACpD,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAOrD,CAAC;AAMF,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOnG"}