@nimiplatform/nimi-coding 0.5.0 → 0.6.0

package/cli/commands/validate-ai-governance.mjs

@@ -1,335 +0,0 @@
-import { localize } from "../lib/ui.mjs";
-import { loadGovernanceConfig, requireProfile } from "../lib/internal/governance/config.mjs";
-import { evaluateAiContextBudget, formatBytes } from "../lib/internal/governance/ai/ai-context-budget-core.mjs";
-import { evaluateAiStructureBudget } from "../lib/internal/governance/ai/ai-structure-budget-core.mjs";
-import { evaluateHighRiskDocMetadata } from "../lib/internal/governance/ai/check-high-risk-doc-metadata-core.mjs";
-import {
-  evaluateAgentsFreshnessCheck,
-  runAgentsFreshnessCheck,
-} from "../lib/internal/governance/ai/check-agents-freshness.mjs";
-
-const SCOPES = new Set([
-  "agents-freshness",
-  "context-budget",
-  "structure-budget",
-  "high-risk-doc-metadata",
-]);
-
-function parseOptions(args) {
-  const options = {
-    profile: null,
-    scope: "all",
-    json: false,
-  };
-
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index];
-
-    if (arg === "--profile") {
-      const value = args[index + 1];
-      if (!value || value.startsWith("--")) {
-        return { ok: false, error: "nimicoding validate-ai-governance refused: --profile requires a value.\n" };
-      }
-      options.profile = value;
-      index += 1;
-      continue;
-    }
-
-    if (arg === "--scope") {
-      const value = args[index + 1];
-      if (!value || value.startsWith("--")) {
-        return { ok: false, error: "nimicoding validate-ai-governance refused: --scope requires a value.\n" };
-      }
-      options.scope = value;
-      index += 1;
-      continue;
-    }
-
-    if (arg === "--json") {
-      options.json = true;
-      continue;
-    }
-
-    return {
-      ok: false,
-      error: `nimicoding validate-ai-governance refused: unknown option ${arg}.\n`,
-    };
-  }
-
-  if (options.scope !== "all" && !SCOPES.has(options.scope)) {
-    return {
-      ok: false,
-      error: `nimicoding validate-ai-governance refused: unsupported --scope value ${options.scope}.\n`,
-    };
-  }
-
-  return { ok: true, options };
-}
-
-function writeJson(payload) {
-  process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
-}
-
-function buildContextBudgetReport(governanceConfig) {
-  const report = evaluateAiContextBudget({
-    cwd: process.cwd(),
-    config: governanceConfig.aiGovernance.contextBudget,
-    configPathLabel: ".nimi/config/governance.yaml#ai_governance.context_budget",
-  });
-  const exitCode = report.invalidWaivers.length > 0 || report.expiredWaivers.length > 0 || report.errors.length > 0
-    ? 1
-    : 0;
-  return { exitCode, report };
-}
-
-function buildStructureBudgetReport(governanceConfig) {
-  const report = evaluateAiStructureBudget({
-    cwd: process.cwd(),
-    config: governanceConfig.aiGovernance.structureBudget,
-    configPathLabel: ".nimi/config/governance.yaml#ai_governance.structure_budget",
-  });
-  const exitCode = report.errors.length > 0 || report.expiredWaivers.length > 0 ? 1 : 0;
-  return { exitCode, report };
-}
-
-function buildHighRiskDocMetadataReport(governanceConfig) {
-  const config = governanceConfig.aiGovernance.highRiskDocMetadata;
-  const report = evaluateHighRiskDocMetadata({
-    repoRoot: process.cwd(),
-    docRoots: Array.isArray(config.doc_roots) ? config.doc_roots : [".local"],
-    exemptPaths: Array.isArray(config.exempt_paths) ? config.exempt_paths : [],
-    namePatterns: Array.isArray(config.name_patterns) ? config.name_patterns : [],
-    requiredMetadataKeys: Array.isArray(config.required_metadata_keys)
-      ? config.required_metadata_keys
-      : [],
-  });
-  return {
-    exitCode: report.failures.length > 0 ? 1 : 0,
-    report: {
-      ...report,
-      exemptPaths: [...report.exemptPaths],
-    },
-  };
-}
-
-function buildAgentsFreshnessReport(governanceConfig) {
-  const report = evaluateAgentsFreshnessCheck({
-    projectRoot: process.cwd(),
-    config: governanceConfig.aiGovernance.agentsFreshness,
-  });
-  return {
-    exitCode: report.failures.length > 0 ? 1 : 0,
-    report,
-  };
-}
-
-function formatStructureRow(row) {
-  if (row.check === "depth") {
-    return `${row.file} [rule=${row.ruleId}] depth=${row.depth} base=${row.depthBase} subject=${row.depthSubject} (threshold warn>=${row.warningDepth} error>=${row.errorDepth})`;
-  }
-  return `${row.file} [rule=${row.ruleId}] basename=${row.basename} (forwarding shell outside allowed basename set)`;
-}
-
-function formatContextBudgetRow(row, thresholdPrefix) {
-  return `${row.file} [${row.profile}] lines=${row.lines} bytes=${formatBytes(row.bytes)} max-line=${formatBytes(row.maxLineBytes)} avg-line=${formatBytes(Math.round(row.averageLineBytes))} `
-    + `(${thresholdPrefix} lines>=${row[`${thresholdPrefix}Lines`] ?? "-"} bytes>=${row[`${thresholdPrefix}Bytes`] ?? "-"} max-line>=${row[`${thresholdPrefix}MaxLineBytes`] ?? "-"} avg-line>=${row[`${thresholdPrefix}AverageLineBytes`] ?? "-"})`;
-}
-
-async function runContextBudget(governanceConfig) {
-  const { exitCode, report } = buildContextBudgetReport(governanceConfig);
-
-  process.stdout.write(`ai-context-budget: config=${report.configPath}\n`);
-  process.stdout.write(`ai-context-budget: tracked=${report.totalTrackedFiles}, analyzed=${report.analyzedFiles}\n`);
-
-  for (const row of report.warnings) {
-    process.stderr.write(`WARN: ${formatContextBudgetRow(row, "warning")}\n`);
-  }
-  for (const row of report.waivedErrors) {
-    const until = row.waiver?.until ? row.waiver.until.toISOString().slice(0, 10) : "n/a";
-    const reason = row.waiver?.reason || "no reason";
-    process.stderr.write(`WARN: WAIVED error for ${formatContextBudgetRow(row, "error")} until=${until} reason=${reason}\n`);
-  }
-  for (const row of report.expiredWaivers) {
-    process.stderr.write(`ERROR: waiver expired for ${formatContextBudgetRow(row, "error")}\n`);
-  }
-  for (const row of report.invalidWaivers) {
-    process.stderr.write(`ERROR: invalid waiver for ${row.file}: ${row.detail}\n`);
-  }
-  for (const row of report.errors) {
-    process.stderr.write(`ERROR: ${formatContextBudgetRow(row, "error")}\n`);
-  }
-
-  if (exitCode !== 0) {
-    return exitCode;
-  }
-
-  process.stdout.write("ai-context-budget: OK\n");
-  return 0;
-}
-
-async function runStructureBudget(governanceConfig) {
-  const { exitCode, report } = buildStructureBudgetReport(governanceConfig);
-
-  process.stdout.write(`ai-structure-budget: config=${report.configPath}\n`);
-  process.stdout.write(`ai-structure-budget: tracked=${report.totalTrackedFiles}, analyzed=${report.analyzedFiles}\n`);
-  for (const row of report.warnings) {
-    process.stderr.write(`WARN: ${formatStructureRow(row)}\n`);
-  }
-  for (const row of report.waivedErrors) {
-    const until = row.waiver?.untilDate ? row.waiver.untilDate.toISOString().slice(0, 10) : "n/a";
-    const reason = row.waiver?.reason || "no reason";
-    process.stderr.write(`WARN: WAIVED error for ${formatStructureRow(row)} until=${until} reason=${reason}\n`);
-  }
-  for (const row of report.expiredWaivers) {
-    process.stderr.write(`ERROR: expired waiver for ${formatStructureRow(row)}\n`);
-  }
-  for (const row of report.errors) {
-    process.stderr.write(`ERROR: ${formatStructureRow(row)}\n`);
-  }
-  if (exitCode !== 0) {
-    return exitCode;
-  }
-
-  process.stdout.write("ai-structure-budget: OK\n");
-  return 0;
-}
-
-async function runHighRiskDocMetadata(governanceConfig) {
-  const { exitCode, report } = buildHighRiskDocMetadataReport(governanceConfig);
-
-  if (exitCode !== 0) {
-    process.stderr.write("high-risk doc metadata check failed:\n");
-    for (const failure of report.failures) {
-      process.stderr.write(`- ${failure}\n`);
-    }
-    return exitCode;
-  }
-
-  process.stdout.write(`high-risk doc metadata check passed (${report.scanned.length} file(s) scanned)\n`);
-  return 0;
-}
-
-function runJsonScope(governanceConfig, scope) {
-  if (scope === "agents-freshness") {
-    return buildAgentsFreshnessReport(governanceConfig);
-  }
-  if (scope === "context-budget") {
-    return buildContextBudgetReport(governanceConfig);
-  }
-  if (scope === "structure-budget") {
-    return buildStructureBudgetReport(governanceConfig);
-  }
-  if (scope === "high-risk-doc-metadata") {
-    return buildHighRiskDocMetadataReport(governanceConfig);
-  }
-  return {
-    exitCode: 2,
-    report: { error: `unsupported scope: ${scope}` },
-  };
-}
-
-export async function runValidateAiGovernance(args) {
-  const wantsJson = args.includes("--json");
-  const parsed = parseOptions(args);
-  if (!parsed.ok) {
-    if (wantsJson) {
-      writeJson({
-        ok: false,
-        command: "validate-ai-governance",
-        error: parsed.error.trim(),
-      });
-    } else {
-      process.stderr.write(localize(parsed.error, parsed.error));
-    }
-    return 2;
-  }
-
-  const governance = await loadGovernanceConfig(process.cwd());
-  if (!governance.ok) {
-    const error = `nimicoding validate-ai-governance refused: ${governance.reason} at ${governance.path}.`;
-    if (parsed.options.json) {
-      writeJson({
-        ok: false,
-        command: "validate-ai-governance",
-        error,
-        governancePath: governance.path,
-      });
-    } else {
-      process.stderr.write(localize(
-        `${error}\n`,
-        `nimicoding validate-ai-governance 已拒绝：${governance.path} 的治理配置不可用。\n`,
-      ));
-    }
-    return 2;
-  }
-
-  const profileCheck = requireProfile(governance.config, parsed.options.profile);
-  if (!profileCheck.ok) {
-    const error = `nimicoding validate-ai-governance refused: ${profileCheck.error}.`;
-    if (parsed.options.json) {
-      writeJson({
-        ok: false,
-        command: "validate-ai-governance",
-        error,
-        profile: profileCheck.profile,
-      });
-    } else {
-      process.stderr.write(localize(
-        `${error}\n`,
-        `nimicoding validate-ai-governance 已拒绝：${profileCheck.error}。\n`,
-      ));
-    }
-    return 2;
-  }
-
-  const scopes = parsed.options.scope === "all"
-    ? ["agents-freshness", "context-budget", "structure-budget", "high-risk-doc-metadata"]
-    : [parsed.options.scope];
-
-  if (parsed.options.json) {
-    const results = [];
-    let exitCode = 0;
-    for (const scope of scopes) {
-      const result = runJsonScope(governance.config, scope);
-      if (exitCode === 0 && result.exitCode !== 0) {
-        exitCode = result.exitCode;
-      }
-      results.push({
-        scope,
-        ok: result.exitCode === 0,
-        exitCode: result.exitCode,
-        report: result.report,
-      });
-    }
-    writeJson({
-      ok: exitCode === 0,
-      command: "validate-ai-governance",
-      profile: profileCheck.profile,
-      scope: parsed.options.scope,
-      scopes: results,
-    });
-    return exitCode;
-  }
-
-  for (const scope of scopes) {
-    let exitCode = 0;
-    if (scope === "agents-freshness") {
-      exitCode = runAgentsFreshnessCheck({
-        projectRoot: process.cwd(),
-        config: governance.config.aiGovernance.agentsFreshness,
-      });
-    } else if (scope === "context-budget") {
-      exitCode = await runContextBudget(governance.config);
-    } else if (scope === "structure-budget") {
-      exitCode = await runStructureBudget(governance.config);
-    } else if (scope === "high-risk-doc-metadata") {
-      exitCode = await runHighRiskDocMetadata(governance.config);
-    }
-
-    if (exitCode !== 0) {
-      return exitCode;
-    }
-  }
-
-  return 0;
-}

package/cli/lib/internal/governance/ai/ai-context-budget-core.mjs

@@ -1,377 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-import path from 'node:path';
-import { execSync } from 'node:child_process';
-import YAML from 'yaml';
-
-const GOVERNANCE_CONFIG_RELATIVE_PATH = '.nimi/config/governance.yaml';
-const GOVERNANCE_CONTEXT_BUDGET_SECTION = 'ai_governance.context_budget';
-
-function escapeRegex(input) {
-  return input.replace(/[|\\{}()[\]^$+?.]/g, '\\$&');
-}
-
-function globToRegExp(glob) {
-  const normalized = glob.replace(/\\/g, '/').trim();
-  let pattern = '^';
-  for (let i = 0; i < normalized.length; i += 1) {
-    const current = normalized[i];
-    const next = normalized[i + 1];
-    if (current === '*') {
-      if (next === '*') {
-        const afterNext = normalized[i + 2];
-        if (afterNext === '/') {
-          pattern += '(?:.*/)?';
-          i += 2;
-        } else {
-          pattern += '.*';
-          i += 1;
-        }
-      } else {
-        pattern += '[^/]*';
-      }
-      continue;
-    }
-    if (current === '?') {
-      pattern += '[^/]';
-      continue;
-    }
-    pattern += escapeRegex(current);
-  }
-  pattern += '$';
-  return new RegExp(pattern);
-}
-
-function compileMatchers(patterns) {
-  return (patterns || []).map((pattern) => ({
-    pattern,
-    regex: globToRegExp(pattern),
-  }));
-}
-
-function matchesAny(filePath, matchers) {
-  const normalized = filePath.replace(/\\/g, '/');
-  for (const matcher of matchers) {
-    if (matcher.regex.test(normalized)) {
-      return true;
-    }
-  }
-  return false;
-}
-
-function toSeverity(value, warningThreshold, errorThreshold) {
-  if (typeof errorThreshold === 'number' && value >= errorThreshold) {
-    return 'error';
-  }
-  if (typeof warningThreshold === 'number' && value >= warningThreshold) {
-    return 'warning';
-  }
-  return 'none';
-}
-
-function maxSeverity(left, right) {
-  const rank = {
-    none: 0,
-    warning: 1,
-    error: 2,
-  };
-  return rank[left] >= rank[right] ? left : right;
-}
-
-function parseDateMaybe(input) {
-  if (!input) {
-    return null;
-  }
-  if (input instanceof Date) {
-    return Number.isNaN(input.getTime()) ? null : input;
-  }
-  const parsed = new Date(String(input));
-  if (Number.isNaN(parsed.getTime())) {
-    return null;
-  }
-  return parsed;
-}
-
-function measureLineShape(buffer) {
-  if (!buffer || buffer.length === 0) {
-    return {
-      lines: 0,
-      maxLineBytes: 0,
-      averageLineBytes: 0,
-    };
-  }
-
-  let lines = 1;
-  let currentLineBytes = 0;
-  let maxLineBytes = 0;
-
-  for (const byte of buffer) {
-    if (byte === 10) {
-      maxLineBytes = Math.max(maxLineBytes, currentLineBytes);
-      currentLineBytes = 0;
-      lines += 1;
-      continue;
-    }
-    currentLineBytes += 1;
-  }
-  maxLineBytes = Math.max(maxLineBytes, currentLineBytes);
-
-  return {
-    lines,
-    maxLineBytes,
-    averageLineBytes: buffer.byteLength / lines,
-  };
-}
-
-function getPathSection(source, sectionPath) {
-  let current = source;
-  for (const segment of sectionPath.split('.')) {
-    if (!current || typeof current !== 'object') {
-      return null;
-    }
-    current = current[segment];
-  }
-  return current && typeof current === 'object' ? current : null;
-}
-
-function loadBudgetConfig(cwd, relativePath, inlineConfig, configPathLabel, configSection) {
-  const rawParsed = inlineConfig ?? (() => {
-    const configPath = path.join(cwd, relativePath);
-    if (!fs.existsSync(configPath)) {
-      throw new Error(`budget config not found: ${relativePath}`);
-    }
-    const raw = fs.readFileSync(configPath, 'utf8');
-    return YAML.parse(raw);
-  })();
-  const parsed = configSection ? getPathSection(rawParsed, configSection) : rawParsed;
-  if (!parsed || typeof parsed !== 'object') {
-    throw new Error(`invalid budget config format: ${relativePath}${configSection ? `#${configSection}` : ''}`);
-  }
-  if (!parsed.profiles || typeof parsed.profiles !== 'object') {
-    throw new Error(`budget config missing profiles: ${relativePath}${configSection ? `#${configSection}` : ''}`);
-  }
-  const defaultProfile = String(parsed.default_profile || 'production');
-  if (!parsed.profiles[defaultProfile]) {
-    throw new Error(`default profile not found in profiles: ${defaultProfile}`);
-  }
-  return {
-    configPath: configPathLabel || (configSection ? `${relativePath}#${configSection}` : relativePath),
-    parsed,
-    defaultProfile,
-  };
-}
-
-function listTrackedFiles(cwd) {
-  const output = execSync('git ls-files -z', {
-    cwd,
-    encoding: 'utf8',
-    stdio: ['ignore', 'pipe', 'pipe'],
-  });
-  return output
-    .split('\u0000')
-    .map((value) => value.trim())
-    .filter((value) => value.length > 0);
-}
-
-function resolveProfile(filePath, classifierMatchers, defaultProfile) {
-  for (const classifier of classifierMatchers) {
-    if (matchesAny(filePath, classifier.matchers)) {
-      return classifier.profile;
-    }
-  }
-  return defaultProfile;
-}
-
-function buildWaiverMap(waivers) {
-  const map = new Map();
-  for (const waiver of waivers || []) {
-    if (!waiver || typeof waiver !== 'object') {
-      continue;
-    }
-    const filePath = String(waiver.path || '').trim();
-    if (!filePath) {
-      continue;
-    }
-    map.set(filePath, {
-      path: filePath,
-      reason: String(waiver.reason || '').trim(),
-      until: parseDateMaybe(waiver.until),
-    });
-  }
-  return map;
-}
-
-function waiverAllowedForProfile(profileId) {
-  return profileId === 'tests_and_scripts' || profileId === 'tests' || profileId === 'scripts' || profileId === 'generated';
-}
-
-export function evaluateAiContextBudget(options = {}) {
-  const cwd = options.cwd || process.cwd();
-  const configRelativePath = options.configRelativePath || GOVERNANCE_CONFIG_RELATIVE_PATH;
-  const configSection = options.configSection
-    ?? (options.config || options.configRelativePath ? null : GOVERNANCE_CONTEXT_BUDGET_SECTION);
-  const { parsed, defaultProfile, configPath } = loadBudgetConfig(
-    cwd,
-    configRelativePath,
-    options.config || null,
-    options.configPathLabel || null,
-    configSection,
-  );
-
-  const excludeMatchers = compileMatchers(parsed.exclude || []);
-  const classifierMatchers = Object.entries(parsed.classifiers || {}).map(([profile, patterns]) => ({
-    profile,
-    matchers: compileMatchers(patterns || []),
-  }));
-  const waiverMap = buildWaiverMap(parsed.waivers || []);
-
-  const files = listTrackedFiles(cwd);
-  const rows = [];
-  const skippedMissing = [];
-  const invalidWaivers = [];
-
-  for (const [filePath, waiver] of waiverMap.entries()) {
-    const absolutePath = path.join(cwd, filePath);
-    if (!fs.existsSync(absolutePath)) {
-      invalidWaivers.push({
-        file: filePath,
-        reason: waiver.reason,
-        kind: 'missing',
-        detail: 'waiver points to a missing path',
-      });
-      continue;
-    }
-    if (matchesAny(filePath, excludeMatchers)) {
-      invalidWaivers.push({
-        file: filePath,
-        reason: waiver.reason,
-        kind: 'excluded',
-        detail: 'waiver targets an excluded path',
-      });
-      continue;
-    }
-    const profileId = resolveProfile(filePath, classifierMatchers, defaultProfile);
-    if (!waiverAllowedForProfile(profileId)) {
-      invalidWaivers.push({
-        file: filePath,
-        reason: waiver.reason,
-        kind: 'forbidden_profile',
-        detail: `waivers are forbidden for profile ${profileId}`,
-      });
-    }
-  }
-
-  for (const relativePath of files) {
-    if (matchesAny(relativePath, excludeMatchers)) {
-      continue;
-    }
-
-    const absolutePath = path.join(cwd, relativePath);
-    if (!fs.existsSync(absolutePath)) {
-      skippedMissing.push(relativePath);
-      continue;
-    }
-    const stat = fs.statSync(absolutePath);
-    if (!stat.isFile()) {
-      continue;
-    }
-
-    const profileId = resolveProfile(relativePath, classifierMatchers, defaultProfile);
-    const profile = parsed.profiles[profileId] || parsed.profiles[defaultProfile];
-    if (!profile) {
-      continue;
-    }
-
-    const buffer = fs.readFileSync(absolutePath);
-    const { lines, maxLineBytes, averageLineBytes } = measureLineShape(buffer);
-    const bytes = buffer.byteLength;
-
-    const linesSeverity = toSeverity(lines, profile.warning_lines, profile.error_lines);
-    const bytesSeverity = toSeverity(bytes, profile.warning_bytes, profile.error_bytes);
-    const maxLineBytesSeverity = toSeverity(
-      maxLineBytes,
-      profile.warning_max_line_bytes,
-      profile.error_max_line_bytes,
-    );
-    const averageLineBytesSeverity = toSeverity(
-      averageLineBytes,
-      profile.warning_average_line_bytes,
-      profile.error_average_line_bytes,
-    );
-    const severity = [
-      linesSeverity,
-      bytesSeverity,
-      maxLineBytesSeverity,
-      averageLineBytesSeverity,
-    ].reduce((current, next) => maxSeverity(current, next), "none");
-
-    const waiver = waiverMap.get(relativePath) || null;
-    const waiverExpired = waiver?.until ? waiver.until.getTime() < Date.now() : false;
-    const waived = Boolean(waiver) && !waiverExpired;
-
-    rows.push({
-      file: relativePath,
-      profile: profileId,
-      lines,
-      bytes,
-      maxLineBytes,
-      averageLineBytes,
-      severity,
-      linesSeverity,
-      bytesSeverity,
-      maxLineBytesSeverity,
-      averageLineBytesSeverity,
-      warningLines: profile.warning_lines,
-      errorLines: profile.error_lines,
-      warningBytes: profile.warning_bytes,
-      errorBytes: profile.error_bytes,
-      warningMaxLineBytes: profile.warning_max_line_bytes,
-      errorMaxLineBytes: profile.error_max_line_bytes,
-      warningAverageLineBytes: profile.warning_average_line_bytes,
-      errorAverageLineBytes: profile.error_average_line_bytes,
-      waiver,
-      waiverExpired,
-      waived,
-    });
-  }
-
-  const warnings = rows.filter((row) => row.severity === 'warning');
-  const errors = rows.filter((row) => row.severity === 'error' && !row.waived);
-  const waivedErrors = rows.filter((row) => row.severity === 'error' && row.waived);
-  const expiredWaivers = rows.filter((row) => row.severity === 'error' && row.waiver && row.waiverExpired);
-
-  rows.sort((left, right) => {
-    if (right.lines !== left.lines) {
-      return right.lines - left.lines;
-    }
-    if (right.bytes !== left.bytes) {
-      return right.bytes - left.bytes;
-    }
-    return right.maxLineBytes - left.maxLineBytes;
-  });
-
-  return {
-    configPath,
-    totalTrackedFiles: files.length,
-    analyzedFiles: rows.length,
-    skippedMissing,
-    rows,
-    warnings,
-    errors,
-    waivedErrors,
-    expiredWaivers,
-    invalidWaivers,
-  };
-}
-
-export function formatBytes(bytes) {
-  const kb = 1024;
-  const mb = kb * 1024;
-  if (bytes >= mb) {
-    return `${(bytes / mb).toFixed(1)}MB`;
-  }
-  if (bytes >= kb) {
-    return `${(bytes / kb).toFixed(1)}KB`;
-  }
-  return `${bytes}B`;
-}