@liuhange/dsh-data-asset-attestation 3.1.0

package/README.md

@@ -0,0 +1,22 @@
+# @liuhange/dsh-data-asset-attestation
+
+## 功能说明
+
+Attestation-level data quality report plugin with evidence chain hash and attestation statement
+
+## 安装
+
+```bash
+dsh plugin --profile web add @liuhange/dsh-data-asset-attestation
+```
+
+## 用法
+
+```javascript
+import { apply } from '@liuhange/dsh-data-asset-attestation';
+apply(ctx); // 注册工具: attest_data_quality
+```
+
+## License
+
+MIT

package/lib/index.js

@@ -0,0 +1,94 @@
+export const name = '@liuhange/dsh-data-asset-attestation';
+export const inject = ['tools'];
+import { createHash, randomUUID } from 'node:crypto';
+import { loadJsonConfig } from '@liuhange/dsh-data-asset-shared';
+import { resolvePolicyBasis } from './policyBasis.js';
+export function apply(ctx) {
+    ctx.tools.register({
+        name: 'attest_data_quality',
+        description: '生成鉴证级数据质量报告，含时间戳、证据链哈希和鉴证声明',
+        parameters: {
+            type: 'object',
+            properties: {
+                qualityScoreResult: { type: 'string', description: 'quality-score工具输出的JSON结果' },
+                assetId: { type: 'string', description: '数据资产标识（可选）' },
+            },
+            required: ['qualityScoreResult'],
+        },
+        async execute(args) {
+            try {
+                if (!args?.qualityScoreResult || typeof args.qualityScoreResult !== 'string') {
+                    return JSON.stringify({ error: 'ATTESTATION_INPUT_INVALID', message: 'qualityScoreResult is required' });
+                }
+                const scoreResult = JSON.parse(args.qualityScoreResult);
+                if (scoreResult.error) {
+                    return JSON.stringify({ error: 'ATTESTATION_INPUT_INVALID', message: `quality-score错误透传: ${scoreResult.error}` });
+                }
+                let rulesConfig;
+                try {
+                    rulesConfig = loadJsonConfig('BUSINESS_RULES_PATH', 'config/business-rules.json', '@liuhange/dsh-data-asset-shared/config/business-rules.json');
+                }
+                catch {
+                    return JSON.stringify({ error: 'ATTESTATION_RULES_MISSING', message: '无法加载business-rules.json' });
+                }
+                const attestationConfig = rulesConfig.attestation;
+                if (!attestationConfig) {
+                    return JSON.stringify({ error: 'ATTESTATION_RULES_MISSING', message: 'attestation配置段缺失' });
+                }
+                const dimensions = (scoreResult.dimensions ?? []);
+                const anomalies = locateAnomalies(dimensions, attestationConfig.severityMapping, args.assetId ?? 'unknown');
+                const evidenceChainHash = buildEvidenceChain(anomalies, scoreResult);
+                const policyBasis = resolvePolicyBasis('ATTESTATION');
+                const statement = generateStatement(anomalies, attestationConfig.statementTemplate);
+                const report = {
+                    reportId: randomUUID(),
+                    generatedAt: new Date().toISOString(),
+                    inspector: 'dsh-data-asset-attestation',
+                    inspectionMethod: '基于六维质量评分的自动化鉴证',
+                    dataSampleSize: anomalies.length,
+                    anomalies,
+                    evidenceChainHash,
+                    attestationStatement: statement,
+                    policyBasis,
+                    qualityScoreReference: scoreResult.timestamp ?? 'unknown',
+                    disclaimer: '鉴证报告底稿，正式鉴证须由具备资质的鉴证机构出具',
+                };
+                return JSON.stringify(report, null, 2);
+            }
+            catch (e) {
+                return JSON.stringify({ error: 'UNKNOWN_ERROR', message: e.message });
+            }
+        },
+    });
+}
+function locateAnomalies(dimensions, severityMapping, assetId) {
+    const anomalies = [];
+    for (const dim of dimensions) {
+        if (dim.score < 60) {
+            const deduction = 100 - dim.score;
+            let severity = 'minor';
+            if (deduction >= (severityMapping.critical ?? 20))
+                severity = 'critical';
+            else if (deduction >= (severityMapping.major ?? 10))
+                severity = 'major';
+            for (const issue of dim.issues) {
+                anomalies.push({ dimension: dim.dimension, severity, assetId, issue });
+            }
+        }
+    }
+    return anomalies;
+}
+function buildEvidenceChain(anomalies, scoreResult) {
+    try {
+        const serialized = JSON.stringify({ anomalies, scoreResult, timestamp: new Date().toISOString() });
+        return createHash('sha256').update(serialized).digest('hex');
+    }
+    catch (e) {
+        return `构建失败: ${e.message}`;
+    }
+}
+function generateStatement(anomalies, template) {
+    const conclusion = anomalies.length === 0 ? '数据质量符合入表要求' : '数据质量不符合入表要求，存在异常项';
+    return `${template.scope}。${template.basis}。${conclusion}。`;
+}
+//# sourceMappingURL=index.js.map

package/lib/policyBasis.js

@@ -0,0 +1,17 @@
+import { loadJsonConfig } from '@liuhange/dsh-data-asset-shared';
+export function resolvePolicyBasis(stage) {
+    try {
+        const config = loadJsonConfig('POLICY_REFS_PATH', 'config/policy-references.json', '@liuhange/dsh-data-asset-shared/config/policy-references.json');
+        const refs = config.policyReferences;
+        const stageEntry = refs?.find((s) => s.stage === stage);
+        if (!stageEntry) {
+            console.warn(`Policy stage "${stage}" not configured`);
+            return [`依据：政策依据未配置（stage=${stage}）`];
+        }
+        return stageEntry.documents.map((d) => `依据：《${d.name}》（${d.docNumber}）—${d.coreRequirement}`);
+    }
+    catch {
+        return ['依据：政策依据配置加载失败'];
+    }
+}
+//# sourceMappingURL=policyBasis.js.map

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@liuhange/dsh-data-asset-attestation",
+  "description": "Attestation-level data quality report plugin with evidence chain hash and attestation statement",
+  "version": "3.1.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/liuhange789/data-asset-inspector.git",
+    "directory": "packages/data-asset/data-asset-attestation"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/**/*.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "build": "tsc"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.0",
+    "@deepseek-ai/dsh-tools": "0.0.1-rc.1",
+    "@liuhange/dsh-data-asset-shared": "^3.0.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": true
+    }
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin",
+    "data-asset",
+    "data-asset-inspector",
+    "shujintong",
+    "数据资产",
+    "attestation",
+    "evidence-chain",
+    "quality-attestation",
+    "鉴证报告",
+    "证据链",
+    "质量鉴证"
+  ],
+  "homepage": "https://github.com/liuhange789/data-asset-inspector#readme"
+}