@lqc123qwe/car-runtime 1.9.0 → 1.11.0

package/dist/sbom.json

@@ -0,0 +1,263 @@
+{
+  "bomFormat": "CAR-SBOM",
+  "specVersion": "0.1",
+  "version": "1.11.0",
+  "components": [
+    {
+      "type": "file",
+      "path": "src/authz/authz.ts",
+      "sha256": "93c9d92387109bde25cd33f4125a9cef19e74d9abedc74a0f5efb94552c1b472"
+    },
+    {
+      "type": "file",
+      "path": "src/cli.ts",
+      "sha256": "fc52749c25ac8534bed687e33ae4c32ecbaf221d11b38af3477191779b6b5b36"
+    },
+    {
+      "type": "file",
+      "path": "src/dx/doctor.ts",
+      "sha256": "bf0e39f62edbafe12f91100c009879cbc73ff1cd7628a7851b264dbef1fd5a4c"
+    },
+    {
+      "type": "file",
+      "path": "src/governance/dump.ts",
+      "sha256": "7cfbf8eda03d5fd10ab80f7a06e62c6722a584ecc94a833112922bb9b095d2f1"
+    },
+    {
+      "type": "file",
+      "path": "src/host/facade.ts",
+      "sha256": "564ad91b40afcbffbc84a9e0974e77e5f3da1f15d97d15ec62d42b22044c7a7d"
+    },
+    {
+      "type": "file",
+      "path": "src/host/hostGateway.ts",
+      "sha256": "3cd027297ca0f2f16984a5f2e91f98cf0f127a97bfa1bb787d8414ca255d9d8b"
+    },
+    {
+      "type": "file",
+      "path": "src/host/mappings.ts",
+      "sha256": "01e57ad2a89c828a5e0d43d3d98d1c4a9db4601fffe32f4c9678b268057b006c"
+    },
+    {
+      "type": "file",
+      "path": "src/host/stdio.ts",
+      "sha256": "03d80ac988b79c2db05d443a9cc8e87c62b3da03ce01f3445276d23ca6543955"
+    },
+    {
+      "type": "file",
+      "path": "src/kernel/context.ts",
+      "sha256": "a2d0afb72c96c880a28ba806f2248ea8b42c3d59c1d26ec901f3de823651de3e"
+    },
+    {
+      "type": "file",
+      "path": "src/kernel/events.ts",
+      "sha256": "eff9fc018c5f87ff6f090df35702c0ac9b5821150c8d0640245aad3ca7527a13"
+    },
+    {
+      "type": "file",
+      "path": "src/load/config.ts",
+      "sha256": "60b0b2c4bd97a75f3c31e59fe4d1a44acbc0d2ca6167bd0394c2744d63a4d8e2"
+    },
+    {
+      "type": "file",
+      "path": "src/load/loader.ts",
+      "sha256": "61302590522da92501e3927b2dc6551e86e8a8ef9e79db8b10865ba73e978246"
+    },
+    {
+      "type": "file",
+      "path": "src/load/registry.ts",
+      "sha256": "37503eff9bccc8ea7ce52f68d510c5cbcd216aabe9833c8060a68e56b47bb30c"
+    },
+    {
+      "type": "file",
+      "path": "src/load/report.ts",
+      "sha256": "a7e176c353d9b639b969f5af46681cf56eedbbc725c5af8ab1663422360f4d83"
+    },
+    {
+      "type": "file",
+      "path": "src/load/sigGate.ts",
+      "sha256": "1bfb6a82a003d4bfef31e4d9aad82081bb57913e35b09ee603466baa32b93216"
+    },
+    {
+      "type": "file",
+      "path": "src/load/sign.ts",
+      "sha256": "f757d2fd277c97921b30571cb4997a49746a4a2827c615943d39c9b59d2e7217"
+    },
+    {
+      "type": "file",
+      "path": "src/load/verifier.ts",
+      "sha256": "e4b65e4bc97d81e10ecb2d1efb5d1f2647105d4ad5d4c0d67aeab8c0ed9f8ad0"
+    },
+    {
+      "type": "file",
+      "path": "src/loop/goal.ts",
+      "sha256": "69cd3f41cac19435b514426962ea81f4f5518c5d34c39fea21b94d7f46e653c6"
+    },
+    {
+      "type": "file",
+      "path": "src/loop/recover.ts",
+      "sha256": "095d68827ae129f80f84cf485d7d2c41549dec99574311b8fe0f65fae9498ec5"
+    },
+    {
+      "type": "file",
+      "path": "src/loop/stop.ts",
+      "sha256": "f32392a1047da2351c2430659a1e54f2701c7e6cef0015d456e7c8f984472057"
+    },
+    {
+      "type": "file",
+      "path": "src/mcp/gateway.ts",
+      "sha256": "a7da0cfd913a5a5b85b9c69401070f4a39ecf47337ab7969ea96dee318675df0"
+    },
+    {
+      "type": "file",
+      "path": "src/mcp/httpClient.ts",
+      "sha256": "d2db77099633dc89c34330fab04c4a05bc6dc87f9f457898f5b29d2e8c25b436"
+    },
+    {
+      "type": "file",
+      "path": "src/mcp/stdioClient.ts",
+      "sha256": "5c5c576e906eeef1c68397fde90e468183e3f4eabd93a72e23b5bbf0154fb6c6"
+    },
+    {
+      "type": "file",
+      "path": "src/ptc/budget.ts",
+      "sha256": "61d9419b6e6a9fb722f81a86731108e0f0078f0211dbb87b4de6cf3396c5231a"
+    },
+    {
+      "type": "file",
+      "path": "src/ptc/erasable.ts",
+      "sha256": "8579ce6e6d501cc534a119dde0ae55e539cd79ce4397be6a6ba8f7a0b8eaa975"
+    },
+    {
+      "type": "file",
+      "path": "src/ptc/runCode.ts",
+      "sha256": "eac0bd34fe8419ea85b5f7728c5a3291eb14925effaf5d21c29216bc02424f2d"
+    },
+    {
+      "type": "file",
+      "path": "src/ptc/schemaRender.ts",
+      "sha256": "d5426253a575910ae642bd8ce9e73faaa6b49fbd565da0efb15765abd3b84374"
+    },
+    {
+      "type": "file",
+      "path": "src/ptc/sdk.ts",
+      "sha256": "332c567377fe135ada141629eb5c07fd8aeef7184e17ba58e3935161660b5456"
+    },
+    {
+      "type": "file",
+      "path": "src/ptc/worker-entry.ts",
+      "sha256": "d6fd30b9c92435eb09869f77328ee39eca4fc401cea090bc36ab769f2ebc8115"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/chatStep.ts",
+      "sha256": "7a0f455e352529ee7e97a3ed2b9b7b9032493baae7542396d6f8b186fb788ecb"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/credentials.ts",
+      "sha256": "f59d8420e5066d915f688f594b447026b992fa70980600a500773e3a0de2d1b1"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/errors.ts",
+      "sha256": "e94d3ce47aba5ed85fffcc468bc785e8d083b689385c91321f397a5cbb3a445b"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/llm.ts",
+      "sha256": "781b951a4e822c759fc7af0297679d4f000270162e3c3b1ff119c03e59e91cce"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/redaction.ts",
+      "sha256": "9e0f40b1151ea6c57d13552d4ba04ac5189caef69baa4dcf39fd6bf68d718ae4"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/telemetry.ts",
+      "sha256": "6f7839fe84668124d5ecfc4d216739b8a025e5a01e7201bcdcd26e3098c08ac1"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/tools.ts",
+      "sha256": "7298906174ddfaae0f6a88110e0a48fea0d7bbf690ee47dcec7bd6ddb734e3b6"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/trace.ts",
+      "sha256": "7ee54e2dcd408851b82d7bbd0b55473726b60a1875a220b5a5dc827f3a07420d"
+    },
+    {
+      "type": "file",
+      "path": "src/runtime-core/types.ts",
+      "sha256": "f828cc38072b36ba47d8a4f24337277fe5e5867fa0292a24696c9f845f204571"
+    },
+    {
+      "type": "file",
+      "path": "src/sandbox/sandbox.ts",
+      "sha256": "2ef4e259fb00284df36c21ef171e0680e72d6e3daa524b2697d4f38c3edc0215"
+    },
+    {
+      "type": "file",
+      "path": "src/seam.ts",
+      "sha256": "79b27945adbc1784d2d76064878c16fabd229bee2fa533151e84cddd93712169"
+    },
+    {
+      "type": "file",
+      "path": "src/security/secrets-baseline.ts",
+      "sha256": "e2eccbad24cf881ce5535f58d5016975ffe02ccef2fd113aae38c5f93bbdf0de"
+    },
+    {
+      "type": "file",
+      "path": "src/security/secrets.ts",
+      "sha256": "9c9c95c9c9d5cc7b9c31b5aada49e556417882ade56df40d90967c900a209a06"
+    },
+    {
+      "type": "file",
+      "path": "src/session/export.ts",
+      "sha256": "6b40fbb1266f9441e589edb9b769cd9f6fe430fe5517c3c72f2d4aa4e1f7448b"
+    },
+    {
+      "type": "file",
+      "path": "src/session/fork.ts",
+      "sha256": "4a58e18e8d1410f69659dded561f91add3f3801abaf254a58c9dbc20c83f4cf6"
+    },
+    {
+      "type": "file",
+      "path": "src/session/format.ts",
+      "sha256": "2a9f1dd071610010ac3f1e32984125f0f80daa59cb11af3b2cf82304faf1911e"
+    },
+    {
+      "type": "file",
+      "path": "src/session/indexStore.ts",
+      "sha256": "9ddf06a35158f3af1e401932850a0dc4a79ccb90d79b2c7c4649e7272167c253"
+    },
+    {
+      "type": "file",
+      "path": "src/session/log.ts",
+      "sha256": "aa8c7b8d9cff690dfe7c6429399d9d2bd656f1ff1c07154715e4dc5d07946c9d"
+    },
+    {
+      "type": "file",
+      "path": "src/session/store.ts",
+      "sha256": "c46261cbc8dbfd0e151748fc66318f73677db23449bf8558d3d0dbdf70cc051e"
+    },
+    {
+      "type": "file",
+      "path": "src/telemetry/metrics.ts",
+      "sha256": "119ef9094781b8d3e16226daa4a7895407e8a4fc1a54dcf4df7c27de350f0dab"
+    },
+    {
+      "type": "file",
+      "path": "package.json",
+      "sha256": "56c8ff1fbee334a0829bcaf344aabebc3a58154282c002f7e6a215c9162254a8"
+    },
+    {
+      "type": "file",
+      "path": "README.md",
+      "sha256": "c0f3b806a2b2639a95ab4ac1f28bb85e13426f24de462a65e806455667e171f2"
+    }
+  ],
+  "runtimeDependencies": []
+}

package/dist/seam.d.ts

@@ -0,0 +1,24 @@
+/**
+ * KernelSeam 公开导出面（1.10.0 加法——D16 T-6 冻结面口径：本文件即内核库形态的 semver 承诺面）
+ *
+ * 消费方：CAR 平台层（KernelSeam 适配器）；约定：
+ *  - 仅暴露进程内挂接所需的最窄面（装配/会话/turn/遥测），禁止透出内核内部模块路径语义；
+ *  - 破坏性变更须内核 major；加法演进走 minor 并在本文件头登记；
+ *  - 语义不变：runTurn/chatStep/SessionLog 即 CLI 与测试承载的同一实现（非转发壳）。
+ *
+ * 加法登记：1.11.0 —— AuthzService/checkCapability 出面（平台确认桥幂等决策 + 会话策略直判承载；F4 US-3 语义同源）。
+ */
+export { SessionLog, type SessionEvent, type EventKind, type Actor } from './session/log.ts';
+export { SessionFileStore } from './session/store.ts';
+export { runTurn, type TurnEndReason, type TurnPreset, type TurnResult } from './loop/stop.ts';
+export { chatStep } from './runtime-core/chatStep.ts';
+export { RuntimeCore, createOpenAICompatAdapter, createAnthropicAdapter } from './runtime-core/llm.ts';
+export { CredentialService } from './runtime-core/credentials.ts';
+export type { LlmAdapter, LlmRequest, LlmChunk } from './runtime-core/types.ts';
+export { mountPlugin } from './load/loader.ts';
+export { Context } from './kernel/context.ts';
+export { loadCarConfig, mergeLlmConfig, mergeSignatureGate, warmCarConfig, type CarConfig, type LlmConfig } from './load/config.ts';
+export { probeCapabilities, SandboxExecutor } from './sandbox/sandbox.ts';
+export { AuthzService, checkCapability, type Decision, type AuthzRequest, type AuthzDecision, type DeclaredCapabilities } from './authz/authz.ts';
+export { createTelemetryFacade, telemetryConfigFromEnv } from './runtime-core/telemetry.ts';
+export { TurnTracer, type TurnSpanHandle } from './runtime-core/trace.ts';

package/dist/seam.js

@@ -0,0 +1,23 @@
+/**
+ * KernelSeam 公开导出面（1.10.0 加法——D16 T-6 冻结面口径：本文件即内核库形态的 semver 承诺面）
+ *
+ * 消费方：CAR 平台层（KernelSeam 适配器）；约定：
+ *  - 仅暴露进程内挂接所需的最窄面（装配/会话/turn/遥测），禁止透出内核内部模块路径语义；
+ *  - 破坏性变更须内核 major；加法演进走 minor 并在本文件头登记；
+ *  - 语义不变：runTurn/chatStep/SessionLog 即 CLI 与测试承载的同一实现（非转发壳）。
+ *
+ * 加法登记：1.11.0 —— AuthzService/checkCapability 出面（平台确认桥幂等决策 + 会话策略直判承载；F4 US-3 语义同源）。
+ */
+export { SessionLog } from './session/log.js';
+export { SessionFileStore } from './session/store.js';
+export { runTurn } from './loop/stop.js';
+export { chatStep } from './runtime-core/chatStep.js';
+export { RuntimeCore, createOpenAICompatAdapter, createAnthropicAdapter } from './runtime-core/llm.js';
+export { CredentialService } from './runtime-core/credentials.js';
+export { mountPlugin } from './load/loader.js';
+export { Context } from './kernel/context.js';
+export { loadCarConfig, mergeLlmConfig, mergeSignatureGate, warmCarConfig } from './load/config.js';
+export { probeCapabilities, SandboxExecutor } from './sandbox/sandbox.js';
+export { AuthzService, checkCapability } from './authz/authz.js';
+export { createTelemetryFacade, telemetryConfigFromEnv } from './runtime-core/telemetry.js';
+export { TurnTracer } from './runtime-core/trace.js';

package/dist/security/secrets-baseline.d.ts

@@ -0,0 +1,43 @@
+/**
+ * E-5 · 万级 secrets 基准集（M2 退出标准 #4 落地；D-3 可验证交付）
+ *
+ * 口径（M2 安全设计增补 D-3）：基准集 1:9 正负比 = 1000 正 + 9000 负；
+ * 判据：漏报率 <1.5%、FPR ≤5%、precision ≥80%。
+ * 生成确定性（mulberry32 固定种子）——同版本代码跑出的结果可复现、可 diff。
+ *
+ * 负样本四类对抗面（逐类映射三层检测的一个防误报机制）：
+ *   N1 泛良性（无 L1 前缀交叠，纯稀释面）
+ *   N2 低熵/占位前缀近似（测 L2 熵过滤：sk-/ghp_/AKIA/AWS/AccountKey 等后接低熵或占位串）
+ *   N3 注释行无键名真形（测 L3 注释降级；「注释+键名」按 D-3 设计语义 2+1-1=2 应命中，不属负样本）
+ *   N4 文档风连接串占位值（结构化模式无熵过滤——已知 FP 高危族，如实计量）
+ *   N5 低熵 kv（password/api_key 后接弱值）
+ *
+ * 红线：不输出任何样本原文；报告只含计数与聚合指标。
+ */
+export interface BaselineSample {
+    label: 'pos' | 'neg';
+    cls: string;
+    text: string;
+}
+export declare function genPositives(n: number, seed?: number): BaselineSample[];
+export declare function genNegatives(n: number, seed?: number): BaselineSample[];
+export interface BaselineResult {
+    posTotal: number;
+    negTotal: number;
+    tp: number;
+    fn: number;
+    fp: number;
+    tn: number;
+    missRate: number;
+    fpr: number;
+    precision: number;
+    fpByClass: Record<string, number>;
+    missByClass: Record<string, number>;
+    criteria: {
+        missRateLt: number;
+        fprLe: number;
+        precisionGe: number;
+    };
+    pass: boolean;
+}
+export declare function runBaseline(posN?: number, negN?: number): BaselineResult;

package/dist/security/secrets-baseline.js

@@ -0,0 +1,176 @@
+/**
+ * E-5 · 万级 secrets 基准集（M2 退出标准 #4 落地；D-3 可验证交付）
+ *
+ * 口径（M2 安全设计增补 D-3）：基准集 1:9 正负比 = 1000 正 + 9000 负；
+ * 判据：漏报率 <1.5%、FPR ≤5%、precision ≥80%。
+ * 生成确定性（mulberry32 固定种子）——同版本代码跑出的结果可复现、可 diff。
+ *
+ * 负样本四类对抗面（逐类映射三层检测的一个防误报机制）：
+ *   N1 泛良性（无 L1 前缀交叠，纯稀释面）
+ *   N2 低熵/占位前缀近似（测 L2 熵过滤：sk-/ghp_/AKIA/AWS/AccountKey 等后接低熵或占位串）
+ *   N3 注释行无键名真形（测 L3 注释降级；「注释+键名」按 D-3 设计语义 2+1-1=2 应命中，不属负样本）
+ *   N4 文档风连接串占位值（结构化模式无熵过滤——已知 FP 高危族，如实计量）
+ *   N5 低熵 kv（password/api_key 后接弱值）
+ *
+ * 红线：不输出任何样本原文；报告只含计数与聚合指标。
+ */
+import { scanSecrets } from './secrets.js';
+// ── 确定性 RNG（mulberry32） ──
+function mulberry32(seed) {
+    let a = seed >>> 0;
+    return function () {
+        a |= 0;
+        a = (a + 0x6d2b79f5) | 0;
+        let t = Math.imul(a ^ (a >>> 15), 1 | a);
+        t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;
+        return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+    };
+}
+const ALNUM = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+const UPPER36 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
+const B64CH = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+function randFrom(rnd, alphabet, n) {
+    let s = '';
+    for (let i = 0; i < n; i++)
+        s += alphabet[Math.floor(rnd() * alphabet.length)];
+    return s;
+}
+const randAlnum = (rnd, n) => randFrom(rnd, ALNUM, n);
+const randB64 = (rnd, n) => randFrom(rnd, B64CH, n);
+/** 不放回采样（n ≤ |alphabet|）：全异字符 → 经验熵 = log2(n)，稳定越过 L2 硬门槛 */
+function sampleDistinct(rnd, alphabet, n) {
+    const pool = alphabet.split('');
+    let s = '';
+    for (let i = 0; i < n; i++)
+        s += pool.splice(Math.floor(rnd() * pool.length), 1)[0];
+    return s;
+}
+const POS_MAKERS = [
+    ['openai', r => `const OPENAI_API_KEY = "sk-${randAlnum(r, 45)}"`],
+    ['anthropic', r => `anthropic_key: "sk-ant-${randAlnum(r, 45)}"`],
+    ['github-pat', r => `GITHUB_TOKEN=ghp_${randAlnum(r, 36)}`],
+    ['slack', r => `SLACK_BOT_TOKEN=xoxb-${randAlnum(r, 12)}-${randAlnum(r, 12)}`],
+    ['aws-akia', r => `aws_access_key_id = AKIA${sampleDistinct(r, UPPER36, 16)}`],
+    ['stripe', r => `stripe.secret_key = "sk_live_${randAlnum(r, 24)}"`],
+    ['npm', r => `npm_token: npm_${randAlnum(r, 32)}`],
+    ['pem-rsa', r => `-----BEGIN RSA PRIVATE KEY-----\n${randB64(r, 64)}\n${randB64(r, 64)}\n-----END RSA PRIVATE KEY-----`],
+    ['pem-ec', r => `-----BEGIN EC PRIVATE KEY-----\n${randB64(r, 64)}\n-----END EC PRIVATE KEY-----`],
+    ['pem-openssh', r => `-----BEGIN OPENSSH PRIVATE KEY-----\n${randB64(r, 64)}\n-----END OPENSSH PRIVATE KEY-----`],
+    ['pem-pkcs8', r => `-----BEGIN PRIVATE KEY-----\n${randB64(r, 64)}\n-----END PRIVATE KEY-----`],
+    ['putty-ppk', r => `PuTTY-User-Key-File-2: ssh-rsa\nEncryption: aes256-cbc\nComment: ${randAlnum(r, 8)}-key`],
+    ['conn-postgres', r => `DATABASE_URL=postgresql://app_svc:${randAlnum(r, 20)}@db.internal:5432/prod`],
+    ['conn-mysql', r => `mysql://root:${randAlnum(r, 18)}@127.0.0.1:3306/app`],
+    ['conn-mongo', r => `MONGO_URI=mongodb+srv://svc:${randAlnum(r, 22)}@cluster0.mongodb.net/db`],
+    ['conn-redis', r => `REDIS_URL=redis://:${randAlnum(r, 24)}@cache.internal:6379`],
+    ['conn-jdbc', r => `jdbc:mysql://svc:${randAlnum(r, 20)}@db.internal:3306/core`],
+    ['aws-secret', r => `aws_secret_access_key = ${randB64(r, 40)}`],
+    ['gcp-sa', r => `{"type": "service_account", "project_id": "proj-${randAlnum(r, 6)}", "private_key": "-----BEGIN PRIVATE KEY-----"}`],
+    ['azure-conn', r => `DefaultEndpointsProtocol=https;AccountName=st01;AccountKey=${randB64(r, 88)}`],
+    ['jwt', r => `token=${'eyJ' + randAlnum(r, 30)}.${'eyJ' + randAlnum(r, 30)}.${randAlnum(r, 43)}`],
+    ['bearer', r => `fetch(url, { headers: { Authorization: 'Bearer ${randAlnum(r, 32)}' } })`],
+    ['api-key-kv', r => `api_key: "${sampleDistinct(r, ALNUM, 20)}"`],
+    ['client-secret-kv', r => `"client_secret": "${sampleDistinct(r, ALNUM, 16)}"`],
+    ['password-kv', r => `password = "${sampleDistinct(r, ALNUM, 24)}"`],
+];
+export function genPositives(n, seed = 20260918) {
+    const rnd = mulberry32(seed);
+    const out = [];
+    const per = Math.floor(n / POS_MAKERS.length);
+    for (const [cls, maker] of POS_MAKERS) {
+        for (let i = 0; i < per; i++)
+            out.push({ label: 'pos', cls, text: maker(rnd) });
+    }
+    for (let i = 0; out.length < n; i++)
+        out.push({ label: 'pos', cls: POS_MAKERS[0][0], text: POS_MAKERS[0][1](rnd) });
+    return out;
+}
+const NEG_MAKERS = [
+    // N1 泛良性（无 L1 交叠）
+    { cls: 'N1-generic', make: r => `const id = "${randAlnum(r, 8)}-${randAlnum(r, 4)}"; // internal ref` },
+    { cls: 'N1-uuid', make: r => `${randAlnum(r, 8)}-${randAlnum(r, 4)}-4${randAlnum(r, 3)}-a${randAlnum(r, 3)}-${randAlnum(r, 12)}` },
+    { cls: 'N1-sha', make: r => `commit ${randFrom(r, '0123456789abcdef', 40)}` },
+    { cls: 'N1-b64img', make: r => `data:image/png;base64,${randB64(r, 60)}` },
+    { cls: 'N1-url', make: r => `https://registry.example.com/@scope/pkg/-/pkg-1.${Math.floor(r() * 9)}.${Math.floor(r() * 9)}.tgz` },
+    { cls: 'N1-config', make: r => `max_retries=${Math.floor(r() * 9)}\ntimeout_ms=${Math.floor(r() * 9000)}\nregion=cn-north-1` },
+    // N2 低熵/占位前缀近似（L2 应过滤）
+    { cls: 'N2-lowent-openai', make: () => `const K = "sk-aaaaaaaaaaaaaaaaaaaaaaaaaaaa"` },
+    { cls: 'N2-lowent-ghp', make: () => `GITHUB_TOKEN=ghp_1234123412341234123412341234123412` },
+    { cls: 'N2-lowent-npm', make: () => `npm_token: npm_bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb` },
+    { cls: 'N2-lowent-slack', make: () => `SLACK_TOKEN=xoxb-0000000000-0000000000` },
+    { cls: 'N2-lowent-akia', make: () => `aws_access_key_id = AKIA0123012301230123` },
+    { cls: 'N2-lowent-awssecret', make: () => `aws_secret_access_key = ${'1234567890'.repeat(4)}` },
+    { cls: 'N2-lowent-azure', make: () => `AccountKey=${'A'.repeat(80)}` },
+    { cls: 'N2-lowent-stripe', make: () => `stripe_key = "sk_live_test0000000000000000000"` },
+    { cls: 'N2-placeholder', make: () => `openai.api_key = "sk-your-key-here-xxxxxxxxxxxx"` },
+    // N3 注释行无键名真形（L3 注释降级应压到 1 → 仅候选）
+    { cls: 'N3-comment-token1', make: r => `// sk-${randAlnum(r, 45)}` },
+    { cls: 'N3-comment-token2', make: r => `# ghp_${randAlnum(r, 36)}` },
+    { cls: 'N3-comment-token3', make: r => `* xoxb-${randAlnum(r, 12)}-${randAlnum(r, 12)}` },
+    { cls: 'N3-comment-token4', make: r => `// redis://:${randAlnum(r, 16)}@cache.internal:6379` },
+    // N4 文档风连接串占位值（结构化模式无熵过滤——FP 高危族，如实计量）
+    { cls: 'N4-docs-pg', make: () => `postgres://user:password@localhost:5432/mydb` },
+    { cls: 'N4-docs-pg2', make: () => `postgresql://demo:demo@db.example.com/demo` },
+    { cls: 'N4-docs-mysql', make: () => `mysql://root:changeme@127.0.0.1:3306/app` },
+    { cls: 'N4-docs-mongo', make: () => `mongodb://admin:example@cluster0.sample.mongodb.net/test` },
+    { cls: 'N4-docs-redis', make: () => `redis://:default@localhost:6379/0` },
+    { cls: 'N4-docs-jdbc', make: () => `jdbc:mysql://dev:pass@db.local:3306/sample` },
+    // N5 低熵 kv（L2 应过滤）
+    { cls: 'N5-lowent-password', make: () => `password = "12345678"` },
+    { cls: 'N5-lowent-password2', make: () => `password: "abcd1234"` },
+    { cls: 'N5-lowent-apikey', make: () => `api_key: "aaaaaaaaaaaaaaaa"` },
+    { cls: 'N5-empty-secret', make: () => `client_secret: ""` },
+    { cls: 'N5-short-token', make: () => `access_token: "tok_123"` },
+];
+export function genNegatives(n, seed = 20260919) {
+    const rnd = mulberry32(seed);
+    const out = [];
+    // 权重：N1 30% / N2 20% / N3 7% / N4 13% / N5 30%（N4≈1170 条如实暴露占位连接串 FP 面）
+    const weights = { N1: 0.30, N2: 0.20, N3: 0.07, N4: 0.13, N5: 0.30 };
+    const bucketTarget = Object.fromEntries(Object.entries(weights).map(([k, w]) => [k, Math.round(w * n)]));
+    let i = 0;
+    while (out.length < n) {
+        const m = NEG_MAKERS[i % NEG_MAKERS.length];
+        const bucket = m.cls.split('-')[0];
+        if ((bucketTarget[bucket] ?? 0) > 0 || out.length + NEG_MAKERS.length >= n) {
+            out.push({ label: 'neg', cls: m.cls, text: m.make(rnd) });
+            if (bucketTarget[bucket] !== undefined)
+                bucketTarget[bucket]--;
+        }
+        i++;
+    }
+    return out;
+}
+export function runBaseline(posN = 1000, negN = 9000) {
+    const pos = genPositives(posN);
+    const neg = genNegatives(negN);
+    let tp = 0, fn = 0, fp = 0, tn = 0;
+    const fpByClass = {};
+    const missByClass = {};
+    for (const s of pos) {
+        const { hits } = scanSecrets(s.text);
+        if (hits.length > 0)
+            tp++;
+        else {
+            fn++;
+            missByClass[s.cls] = (missByClass[s.cls] ?? 0) + 1;
+        }
+    }
+    for (const s of neg) {
+        const { hits } = scanSecrets(s.text);
+        if (hits.length > 0) {
+            fp++;
+            fpByClass[s.cls] = (fpByClass[s.cls] ?? 0) + 1;
+        }
+        else
+            tn++;
+    }
+    const missRate = fn / pos.length;
+    const fpr = fp / neg.length;
+    const precision = tp / Math.max(1, tp + fp);
+    const pass = missRate < 0.015 && fpr <= 0.05 && precision >= 0.80;
+    return {
+        posTotal: pos.length, negTotal: neg.length, tp, fn, fp, tn,
+        missRate, fpr, precision, fpByClass, missByClass,
+        criteria: { missRateLt: 0.015, fprLe: 0.05, precisionGe: 0.80 }, pass,
+    };
+}

package/dist/security/secrets.d.ts

@@ -0,0 +1,45 @@
+/**
+ * F12 · secrets 检测（完整版，M2-S7 实装加载期；运行期输出期挂点预留）
+ *
+ * 口径（M2 安全设计增补 T-6 + D-3 裁决）：
+ *  - 模式库 6 类（api-key 前缀族 / 私钥块 / 连接串 / 云凭据 / token-Bearer / 自定义正则）；
+ *  - 三层检测降误报：L1 精确前缀（Aho-Corasick 等价的朴素扫描，规模小不构成瓶颈）
+ *    → L2 Shannon 熵（≥3.5 才升级候选，排除 'aaaa' 类低熵误报）
+ *    → L3 上下文打分（键名共现 +1、代码引号内 +0、注释 -1；总分 ≥2 判命中）；
+ *  - 可验证交付（D-3）：漏报率 <1.5%、FPR ≤5%、precision ≥80%——基准集 1:9 正负比、CI 标定；
+ *  - 检测不可静默关闭：disable 仅允许显式配置且留痕（本层不提供总开关，红线 §6.3）。
+ */
+export type SecretCategory = 'api-key' | 'private-key' | 'connection-string' | 'cloud-credential' | 'bearer-token' | 'custom';
+export interface SecretPattern {
+    category: SecretCategory;
+    name: string;
+    re: RegExp; /** 键名共现提示 */
+    keyHints?: string[];
+}
+/** 6 类模式库（v1：30 条精选；自定义正则经 manifest 注入需过安全评审，M3） */
+export declare const PATTERN_LIBRARY: SecretPattern[];
+/** Shannon 熵（bit/char） */
+export declare function shannonEntropy(s: string): number;
+export interface ScanHit {
+    category: SecretCategory;
+    name: string;
+    start: number;
+    end: number; /** 命中摘要（全遮蔽，保留首尾 ≤4） */
+    masked: string;
+    score: number;
+}
+/**
+ * 三层检测：前缀命中 → 熵过滤 → 上下文打分。
+ * 返回确认命中（score ≥2）；低分候选不返回但可通过 returnCandidates 观察（标定用）。
+ */
+export declare function scanSecrets(text: string, opts?: {
+    returnCandidates?: boolean;
+}): {
+    hits: ScanHit[];
+    candidates: ScanHit[];
+};
+/** 脱敏钩子：确认命中全遮蔽后返回新文本（M8 redact 的 F12 升级实现） */
+export declare function redactSecrets(text: string): {
+    text: string;
+    redacted: number;
+};