@winspan/claude-forge 3.7.7 → 4.0.0

package/dist/governance/contract-builder.js

@@ -0,0 +1,216 @@
+/**
+ * ContractBuilder — 契约构建器
+ *
+ * 从多个来源编译治理契约：
+ * - Convention 规范
+ * - 用户需求
+ * - 默认模板
+ */
+import { randomUUID } from 'crypto';
+import { PolicyEngine } from '../orchestration/policy-engine.js';
+export class ContractBuilder {
+    contract = {};
+    /** 从需求开始构建 */
+    static fromRequirement(requirement, projectPath, sessionId, executionMode = 'governance') {
+        const builder = new ContractBuilder();
+        builder.contract = {
+            id: `gc_${Date.now()}_${randomUUID().slice(0, 8)}`,
+            requirement,
+            project_path: projectPath,
+            session_id: sessionId,
+            execution_mode: executionMode,
+            forbidden_rules: [],
+            required_deliverables: [],
+            verification_rules: [],
+            quality_standards: [],
+            suggested_skills: [],
+            memory_scope: {
+                enable_resume: true,
+                enable_knowledge: true,
+                enable_failure_patterns: true,
+            },
+            created_at: new Date().toISOString(),
+            updated_at: new Date().toISOString(),
+        };
+        return builder;
+    }
+    /** 从 Convention 编译契约 */
+    withConvention(convention) {
+        // 1. 编译质量标准
+        if (convention.quality_standards) {
+            this.contract.quality_standards = [
+                ...(this.contract.quality_standards ?? []),
+                ...convention.quality_standards,
+            ];
+        }
+        // 2. 编译禁止规则（从 quality_standards 中提取 must 级别）
+        const mustStandards = convention.quality_standards?.filter(s => s.severity === 'must') ?? [];
+        for (const std of mustStandards) {
+            this.addForbiddenRule({
+                id: `conv_${convention.id}_${std.category}`,
+                name: std.rule,
+                tool: '.*', // 匹配所有工具
+                pattern: '', // 由 AI 审查判断
+                action: 'warn', // must 规范违反先 warn，由 QualityGate 判断是否 block
+                reason: `违反 ${convention.name} 规范：${std.rule}`,
+                source: convention.id,
+            });
+        }
+        // 3. 编译交付物（从 node_types 的 expected_artifacts 提取）
+        if (convention.node_types) {
+            for (const nodeType of convention.node_types) {
+                if (nodeType.expected_artifacts) {
+                    for (const artifact of nodeType.expected_artifacts) {
+                        this.addDeliverable({
+                            name: artifact.description,
+                            description: artifact.description,
+                            path_pattern: artifact.path_pattern,
+                            required: artifact.required ?? true,
+                            verification: artifact.path_pattern
+                                ? {
+                                    type: 'artifact',
+                                    description: artifact.description,
+                                    path_glob: artifact.path_pattern,
+                                    min_count: artifact.min_count ?? 1,
+                                    min_size_bytes: artifact.min_size_bytes,
+                                    contains: artifact.content_constraints?.required_keywords,
+                                    required: artifact.required ?? true,
+                                }
+                                : undefined,
+                        });
+                    }
+                }
+            }
+        }
+        return this;
+    }
+    /** 添加内置安全规则 */
+    withBuiltinRules() {
+        const policyEngine = new PolicyEngine();
+        // 从 PolicyEngine 获取内置规则并转换为 ForbiddenRule
+        const builtinRules = [
+            {
+                id: 'no-rm-rf-root',
+                name: '禁止删除根目录',
+                tool: 'Bash',
+                pattern: 'rm\\s+-[^\\s]*r[^\\s]*f[^\\s]*\\s+/',
+                action: 'deny',
+                reason: '危险操作：禁止对根目录执行 rm -rf',
+                source: 'builtin',
+            },
+            {
+                id: 'no-sudo-rm',
+                name: '禁止 sudo 删除',
+                tool: 'Bash',
+                pattern: 'sudo\\s+rm\\s+-[^\\s]*r',
+                action: 'deny',
+                reason: '危险操作：禁止 sudo rm -r',
+                source: 'builtin',
+            },
+            {
+                id: 'warn-force-push',
+                name: 'force push 警告',
+                tool: 'Bash',
+                pattern: 'git\\s+push\\s+.*--force',
+                action: 'warn',
+                reason: '警告：force push 可能覆盖远程历史',
+                source: 'builtin',
+            },
+            {
+                id: 'no-chmod-777',
+                name: '禁止 chmod 777',
+                tool: 'Bash',
+                pattern: 'chmod\\s+777',
+                action: 'deny',
+                reason: '安全风险：禁止设置 777 权限',
+                source: 'builtin',
+            },
+        ];
+        this.contract.forbidden_rules = [
+            ...(this.contract.forbidden_rules ?? []),
+            ...builtinRules,
+        ];
+        return this;
+    }
+    /** 添加禁止规则 */
+    addForbiddenRule(rule) {
+        this.contract.forbidden_rules = this.contract.forbidden_rules ?? [];
+        this.contract.forbidden_rules.push(rule);
+        return this;
+    }
+    /** 添加交付物 */
+    addDeliverable(deliverable) {
+        this.contract.required_deliverables = this.contract.required_deliverables ?? [];
+        this.contract.required_deliverables.push(deliverable);
+        return this;
+    }
+    /** 添加验证规则 */
+    addVerificationRule(rule) {
+        this.contract.verification_rules = this.contract.verification_rules ?? [];
+        this.contract.verification_rules.push(rule);
+        return this;
+    }
+    /** 添加质量标准 */
+    addQualityStandard(standard) {
+        this.contract.quality_standards = this.contract.quality_standards ?? [];
+        this.contract.quality_standards.push(standard);
+        return this;
+    }
+    /** 添加建议技能 */
+    addSuggestedSkill(skillName) {
+        this.contract.suggested_skills = this.contract.suggested_skills ?? [];
+        if (!this.contract.suggested_skills.includes(skillName)) {
+            this.contract.suggested_skills.push(skillName);
+        }
+        return this;
+    }
+    /** 配置记忆范围 */
+    withMemoryScope(scope) {
+        this.contract.memory_scope = {
+            ...(this.contract.memory_scope ?? {
+                enable_resume: true,
+                enable_knowledge: true,
+                enable_failure_patterns: true,
+            }),
+            ...scope,
+        };
+        return this;
+    }
+    /** 配置升级策略 */
+    withEscalationPolicy(policy) {
+        this.contract.escalation_policy = policy;
+        return this;
+    }
+    /** 合并另一个契约 */
+    merge(other) {
+        this.contract.forbidden_rules = [
+            ...(this.contract.forbidden_rules ?? []),
+            ...other.forbidden_rules,
+        ];
+        this.contract.required_deliverables = [
+            ...(this.contract.required_deliverables ?? []),
+            ...other.required_deliverables,
+        ];
+        this.contract.verification_rules = [
+            ...(this.contract.verification_rules ?? []),
+            ...other.verification_rules,
+        ];
+        this.contract.quality_standards = [
+            ...(this.contract.quality_standards ?? []),
+            ...other.quality_standards,
+        ];
+        this.contract.suggested_skills = [
+            ...(this.contract.suggested_skills ?? []),
+            ...other.suggested_skills.filter(s => !this.contract.suggested_skills?.includes(s)),
+        ];
+        return this;
+    }
+    /** 构建最终契约 */
+    build() {
+        if (!this.contract.id || !this.contract.requirement || !this.contract.project_path || !this.contract.session_id) {
+            throw new Error('Contract 缺少必需字段：id, requirement, project_path, session_id');
+        }
+        return this.contract;
+    }
+}
+//# sourceMappingURL=contract-builder.js.map

package/dist/governance/contract-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-builder.js","sourceRoot":"","sources":["../../src/governance/contract-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAWpC,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,MAAM,OAAO,eAAe;IAClB,QAAQ,GAAgC,EAAE,CAAC;IAEnD,cAAc;IACd,MAAM,CAAC,eAAe,CACpB,WAAmB,EACnB,WAAmB,EACnB,SAAiB,EACjB,gBAA+B,YAAY;QAE3C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG;YACjB,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YAClD,WAAW;YACX,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,aAAa;YAC7B,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,EAAE;YACzB,kBAAkB,EAAE,EAAE;YACtB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE;gBACZ,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,uBAAuB,EAAE,IAAI;aAC9B;YACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,wBAAwB;IACxB,cAAc,CAAC,UAAsB;QACnC,YAAY;QACZ,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG;gBAChC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAC1C,GAAG,UAAU,CAAC,iBAAiB;aAChC,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,MAAM,aAAa,GAAG,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7F,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC;gBACpB,EAAE,EAAE,QAAQ,UAAU,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE;gBAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,IAAI,EAAE,SAAS;gBACrB,OAAO,EAAE,EAAE,EAAE,YAAY;gBACzB,MAAM,EAAE,MAAM,EAAE,2CAA2C;gBAC3D,MAAM,EAAE,MAAM,UAAU,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,EAAE;gBAC9C,MAAM,EAAE,UAAU,CAAC,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QAED,iDAAiD;QACjD,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1B,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC7C,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;oBAChC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;wBACnD,IAAI,CAAC,cAAc,CAAC;4BAClB,IAAI,EAAE,QAAQ,CAAC,WAAW;4BAC1B,WAAW,EAAE,QAAQ,CAAC,WAAW;4BACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;4BACnC,YAAY,EAAE,QAAQ,CAAC,YAAY;gCACjC,CAAC,CAAC;oCACE,IAAI,EAAE,UAAU;oCAChB,WAAW,EAAE,QAAQ,CAAC,WAAW;oCACjC,SAAS,EAAE,QAAQ,CAAC,YAAY;oCAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC;oCAClC,cAAc,EAAE,QAAQ,CAAC,cAAc;oCACvC,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,EAAE,iBAAiB;oCACzD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;iCACpC;gCACH,CAAC,CAAC,SAAS;yBACd,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;IACf,gBAAgB;QACd,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,0CAA0C;QAC1C,MAAM,YAAY,GAAoB;YACpC;gBACE,EAAE,EAAE,eAAe;gBACnB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,qCAAqC;gBAC9C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,SAAS;aAClB;YACD;gBACE,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,yBAAyB;gBAClC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,SAAS;aAClB;YACD;gBACE,EAAE,EAAE,iBAAiB;gBACrB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,0BAA0B;gBACnC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,wBAAwB;gBAChC,MAAM,EAAE,SAAS;aAClB;YACD;gBACE,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,SAAS;aAClB;SACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,eAAe,GAAG;YAC9B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;YACxC,GAAG,YAAY;SAChB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,gBAAgB,CAAC,IAAmB;QAClC,IAAI,CAAC,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;IACZ,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,mBAAmB,CAAC,IAAoB;QACtC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,kBAAkB,CAAC,QAAyB;QAC1C,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,iBAAiB,CAAC,SAAiB;QACjC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,eAAe,CAAC,KAA2B;QACzC,IAAI,CAAC,QAAQ,CAAC,YAAY,GAAG;YAC3B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI;gBAChC,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,uBAAuB,EAAE,IAAI;aAC9B,CAAC;YACF,GAAG,KAAK;SACT,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,oBAAoB,CAAC,MAAwB;QAC3C,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,MAAM,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc;IACd,KAAK,CAAC,KAAyB;QAC7B,IAAI,CAAC,QAAQ,CAAC,eAAe,GAAG;YAC9B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;YACxC,GAAG,KAAK,CAAC,eAAe;SACzB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,qBAAqB,GAAG;YACpC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,EAAE,CAAC;YAC9C,GAAG,KAAK,CAAC,qBAAqB;SAC/B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,kBAAkB,GAAG;YACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC;YAC3C,GAAG,KAAK,CAAC,kBAAkB;SAC5B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG;YAChC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;YAC1C,GAAG,KAAK,CAAC,iBAAiB;SAC3B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,gBAAgB,GAAG;YAC/B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACzC,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;SACpF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,QAA8B,CAAC;IAC7C,CAAC;CACF"}

package/dist/governance/engine.d.ts

@@ -0,0 +1,33 @@
+/**
+ * GovernanceEngine — 统一治理引擎
+ *
+ * 核心职责：
+ * - 管理契约生命周期
+ * - 注册和调度插件
+ * - 协调 Pre/Post 处理
+ * - 维护证据收集
+ */
+import type { GovernanceContract, GovernancePlugin, GovernanceDecision } from './types.js';
+import type { ForgeEvent } from '../types/index.js';
+export declare class GovernanceEngine {
+    private contracts;
+    private evidenceCollector;
+    private plugins;
+    /** 注册插件 */
+    registerPlugin(plugin: GovernancePlugin): void;
+    /** 加载契约 */
+    loadContract(contract: GovernanceContract): void;
+    /** 获取契约 */
+    getContract(sessionId: string): GovernanceContract | null;
+    /** 获取证据 */
+    getEvidence(contractId: string): import("./types.js").GovernanceEvidence | null;
+    /** PreToolUse 处理 */
+    handlePreToolUse(event: ForgeEvent): Promise<GovernanceDecision | null>;
+    /** PostToolUse 处理 */
+    handlePostToolUse(event: ForgeEvent): Promise<GovernanceDecision | null>;
+    /** 清理契约 */
+    clearContract(sessionId: string): void;
+    /** 合并多个决策 */
+    private mergeDecisions;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/governance/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/governance/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,SAAS,CAAyC;IAC1D,OAAO,CAAC,iBAAiB,CAA2B;IACpD,OAAO,CAAC,OAAO,CAA0B;IAEzC,WAAW;IACX,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAO9C,WAAW;IACX,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAQhD,WAAW;IACX,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAIzD,WAAW;IACX,WAAW,CAAC,UAAU,EAAE,MAAM;IAI9B,oBAAoB;IACd,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAwD7E,qBAAqB;IACf,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAqE9E,WAAW;IACX,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAWtC,aAAa;IACb,OAAO,CAAC,cAAc;CAyBvB"}

package/dist/governance/engine.js

@@ -0,0 +1,183 @@
+/**
+ * GovernanceEngine — 统一治理引擎
+ *
+ * 核心职责：
+ * - 管理契约生命周期
+ * - 注册和调度插件
+ * - 协调 Pre/Post 处理
+ * - 维护证据收集
+ */
+import { EvidenceCollector } from './evidence-collector.js';
+import { logger } from '../utils/logger.js';
+export class GovernanceEngine {
+    contracts = new Map(); // sessionId → contract
+    evidenceCollector = new EvidenceCollector();
+    plugins = [];
+    /** 注册插件 */
+    registerPlugin(plugin) {
+        this.plugins.push(plugin);
+        // 按优先级排序
+        this.plugins.sort((a, b) => a.priority - b.priority);
+        logger.info(`[GovernanceEngine] 插件已注册：${plugin.name} (priority=${plugin.priority})`);
+    }
+    /** 加载契约 */
+    loadContract(contract) {
+        this.contracts.set(contract.session_id, contract);
+        this.evidenceCollector.init(contract.id);
+        logger.info(`[GovernanceEngine] 契约已加载：${contract.id} (mode=${contract.execution_mode}, session=${contract.session_id})`);
+    }
+    /** 获取契约 */
+    getContract(sessionId) {
+        return this.contracts.get(sessionId) ?? null;
+    }
+    /** 获取证据 */
+    getEvidence(contractId) {
+        return this.evidenceCollector.get(contractId);
+    }
+    /** PreToolUse 处理 */
+    async handlePreToolUse(event) {
+        const contract = this.contracts.get(event.session_id);
+        if (!contract) {
+            logger.debug(`[GovernanceEngine] 无契约，跳过 PreToolUse 处理`);
+            return null;
+        }
+        // 只处理 governance 模式
+        if (contract.execution_mode !== 'governance') {
+            return null;
+        }
+        const evidence = this.evidenceCollector.get(contract.id);
+        if (!evidence) {
+            logger.warn(`[GovernanceEngine] 证据容器未初始化：${contract.id}`);
+            return null;
+        }
+        const ctx = { contract, evidence, event };
+        const decisions = [];
+        // 执行 PreToolUse 插件链
+        for (const plugin of this.plugins) {
+            if (!plugin.runOnPreTool)
+                continue;
+            try {
+                const result = await plugin.execute(ctx);
+                // 更新证据
+                if (result.evidence_update) {
+                    if (result.evidence_update.knowledge_hits) {
+                        for (const hit of result.evidence_update.knowledge_hits) {
+                            this.evidenceCollector.recordKnowledgeHit(contract.id, hit);
+                        }
+                    }
+                }
+                // 收集决策
+                if (result.decision) {
+                    decisions.push(result.decision);
+                }
+                // 如果插件要求停止，立即返回
+                if (!result.continue) {
+                    logger.info(`[GovernanceEngine] 插件 ${plugin.name} 要求停止，返回决策`);
+                    return result.decision ?? null;
+                }
+            }
+            catch (err) {
+                logger.error(`[GovernanceEngine] 插件 ${plugin.name} 执行失败：${err}`);
+            }
+        }
+        // 合并所有决策
+        return this.mergeDecisions(decisions);
+    }
+    /** PostToolUse 处理 */
+    async handlePostToolUse(event) {
+        const contract = this.contracts.get(event.session_id);
+        if (!contract) {
+            logger.debug(`[GovernanceEngine] 无契约，跳过 PostToolUse 处理`);
+            return null;
+        }
+        // 只处理 governance 模式
+        if (contract.execution_mode !== 'governance') {
+            return null;
+        }
+        const evidence = this.evidenceCollector.get(contract.id);
+        if (!evidence) {
+            logger.warn(`[GovernanceEngine] 证据容器未初始化：${contract.id}`);
+            return null;
+        }
+        // 记录工具事件
+        this.evidenceCollector.recordToolEvent(contract.id, {
+            tool_name: event.tool_name || 'unknown',
+            tool_input: event.tool_input,
+            timestamp: new Date().toISOString(),
+            success: true, // TODO: 从 event 中获取实际状态
+        });
+        const ctx = { contract, evidence, event };
+        const decisions = [];
+        // 执行 PostToolUse 插件链
+        for (const plugin of this.plugins) {
+            if (!plugin.runOnPostTool)
+                continue;
+            try {
+                const result = await plugin.execute(ctx);
+                // 更新证据
+                if (result.evidence_update) {
+                    if (result.evidence_update.verification_results) {
+                        for (const vr of result.evidence_update.verification_results) {
+                            this.evidenceCollector.recordVerification(contract.id, vr);
+                        }
+                    }
+                    if (result.evidence_update.quality_issues) {
+                        for (const qi of result.evidence_update.quality_issues) {
+                            this.evidenceCollector.recordQualityIssue(contract.id, qi);
+                        }
+                    }
+                }
+                // 收集决策
+                if (result.decision) {
+                    decisions.push(result.decision);
+                }
+                // 如果插件要求停止，立即返回
+                if (!result.continue) {
+                    logger.info(`[GovernanceEngine] 插件 ${plugin.name} 要求停止，返回决策`);
+                    return result.decision ?? null;
+                }
+            }
+            catch (err) {
+                logger.error(`[GovernanceEngine] 插件 ${plugin.name} 执行失败：${err}`);
+            }
+        }
+        // 合并所有决策
+        return this.mergeDecisions(decisions);
+    }
+    /** 清理契约 */
+    clearContract(sessionId) {
+        const contract = this.contracts.get(sessionId);
+        if (contract) {
+            this.evidenceCollector.clear(contract.id);
+            this.contracts.delete(sessionId);
+            logger.info(`[GovernanceEngine] 契约已清理：${contract.id}`);
+        }
+    }
+    // ─── 私有辅助方法 ────────────────────────────────────────────────────
+    /** 合并多个决策 */
+    mergeDecisions(decisions) {
+        if (decisions.length === 0)
+            return null;
+        if (decisions.length === 1)
+            return decisions[0];
+        // 优先级：deny > warn > allow
+        const hasDeny = decisions.some(d => d.action === 'deny');
+        const hasWarn = decisions.some(d => d.action === 'warn');
+        const action = hasDeny ? 'deny' : hasWarn ? 'warn' : 'allow';
+        const reasons = decisions.map(d => d.reason).filter(Boolean);
+        const contexts = decisions.map(d => d.inject_context).filter(Boolean);
+        const missingDeliverables = decisions.flatMap(d => d.missing_deliverables ?? []);
+        const qualityFailures = decisions.flatMap(d => d.quality_failures ?? []);
+        const correctiveActions = decisions.flatMap(d => d.corrective_actions ?? []);
+        return {
+            action,
+            reason: reasons.length > 0 ? reasons.join('; ') : undefined,
+            inject_context: contexts.length > 0 ? contexts.join('\n\n') : undefined,
+            missing_deliverables: missingDeliverables.length > 0 ? missingDeliverables : undefined,
+            quality_failures: qualityFailures.length > 0 ? qualityFailures : undefined,
+            corrective_actions: correctiveActions.length > 0 ? correctiveActions : undefined,
+            decided_at: new Date().toISOString(),
+        };
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/governance/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/governance/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,OAAO,gBAAgB;IACnB,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC,CAAC,uBAAuB;IAC1E,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC5C,OAAO,GAAuB,EAAE,CAAC;IAEzC,WAAW;IACX,cAAc,CAAC,MAAwB;QACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,SAAS;QACT,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,WAAW;IACX,YAAY,CAAC,QAA4B;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,4BAA4B,QAAQ,CAAC,EAAE,UAAU,QAAQ,CAAC,cAAc,aAAa,QAAQ,CAAC,UAAU,GAAG,CAC5G,CAAC;IACJ,CAAC;IAED,WAAW;IACX,WAAW,CAAC,SAAiB;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,WAAW;IACX,WAAW,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,gBAAgB,CAAC,KAAiB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oBAAoB;QACpB,IAAI,QAAQ,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzD,MAAM,SAAS,GAAyB,EAAE,CAAC;QAE3C,oBAAoB;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAAE,SAAS;YAEnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAEzC,OAAO;gBACP,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC3B,IAAI,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;wBAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;4BACxD,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO;gBACP,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClC,CAAC;gBAED,gBAAgB;gBAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,IAAI,YAAY,CAAC,CAAC;oBAC9D,OAAO,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACjC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,SAAS;QACT,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB;IACrB,KAAK,CAAC,iBAAiB,CAAC,KAAiB;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oBAAoB;QACpB,IAAI,QAAQ,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,SAAS;QACT,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE;YAClD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI,EAAE,wBAAwB;SACxC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzD,MAAM,SAAS,GAAyB,EAAE,CAAC;QAE3C,qBAAqB;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,SAAS;YAEpC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAEzC,OAAO;gBACP,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC3B,IAAI,MAAM,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC;wBAChD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC;4BAC7D,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;oBACD,IAAI,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;wBAC1C,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;4BACvD,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO;gBACP,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClC,CAAC;gBAED,gBAAgB;gBAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,IAAI,YAAY,CAAC,CAAC;oBAC9D,OAAO,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACjC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,SAAS;QACT,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,WAAW;IACX,aAAa,CAAC,SAAiB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,4BAA4B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,kEAAkE;IAElE,aAAa;IACL,cAAc,CAAC,SAA+B;QACpD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QAEhD,0BAA0B;QAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,mBAAmB,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,iBAAiB,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAE7E,OAAO;YACL,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,cAAc,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YACvE,oBAAoB,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;YACtF,gBAAgB,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YAC1E,kBAAkB,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAChF,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;CACF"}

package/dist/governance/evidence-collector.d.ts

@@ -0,0 +1,42 @@
+/**
+ * EvidenceCollector — 统一证据收集器
+ *
+ * 收集执行过程中的所有证据：工具事件、产物、验证结果、质量问题、知识命中。
+ * 按 contract_id 隔离，支持查询和统计。
+ */
+import type { GovernanceEvidence, ToolEvent, GovernanceArtifact, GovernanceVerificationResult, QualityIssue, KnowledgeHit } from './types.js';
+export declare class EvidenceCollector {
+    private evidenceMap;
+    /** 初始化一个契约的证据容器 */
+    init(contractId: string): void;
+    /** 获取证据（只读快照） */
+    get(contractId: string): GovernanceEvidence | null;
+    /** 记录工具事件 */
+    recordToolEvent(contractId: string, event: ToolEvent): void;
+    /** 记录产物 */
+    recordArtifact(contractId: string, artifact: GovernanceArtifact): void;
+    /** 记录验证结果 */
+    recordVerification(contractId: string, result: GovernanceVerificationResult): void;
+    /** 记录质量问题 */
+    recordQualityIssue(contractId: string, issue: QualityIssue): void;
+    /** 记录知识命中 */
+    recordKnowledgeHit(contractId: string, hit: KnowledgeHit): void;
+    /** 设置会话摘要 */
+    setSessionSummary(contractId: string, summary: string): void;
+    /** 最近 N 次工具事件 */
+    recentToolEvents(contractId: string, n: number): ToolEvent[];
+    /** 连续失败次数 */
+    consecutiveFailures(contractId: string): number;
+    /** 检测重复失败模式（最近 N 次是否都是同一工具失败） */
+    detectRepetitiveFailure(contractId: string, windowSize?: number): {
+        detected: boolean;
+        tool?: string;
+    };
+    /** 未通过的必需验证项 */
+    failedVerifications(contractId: string): GovernanceVerificationResult[];
+    /** 未解决的质量问题（fail 级别） */
+    openQualityIssues(contractId: string): QualityIssue[];
+    /** 清理契约证据 */
+    clear(contractId: string): void;
+}
+//# sourceMappingURL=evidence-collector.d.ts.map

package/dist/governance/evidence-collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-collector.d.ts","sourceRoot":"","sources":["../../src/governance/evidence-collector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,SAAS,EACT,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACZ,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,WAAW,CAAyC;IAE5D,mBAAmB;IACnB,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAa9B,iBAAiB;IACjB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAIlD,aAAa;IACb,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,IAAI;IAO3D,WAAW;IACX,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAYtE,aAAa;IACb,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,GAAG,IAAI;IAOlF,aAAa;IACb,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI;IAOjE,aAAa;IACb,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI;IAO/D,aAAa;IACb,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAS5D,iBAAiB;IACjB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE;IAM5D,aAAa;IACb,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAW/C,iCAAiC;IACjC,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,SAAI,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;IAYjG,gBAAgB;IAChB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,4BAA4B,EAAE;IAMvE,wBAAwB;IACxB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,EAAE;IAMrD,aAAa;IACb,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;CAGhC"}

package/dist/governance/evidence-collector.js

@@ -0,0 +1,136 @@
+/**
+ * EvidenceCollector — 统一证据收集器
+ *
+ * 收集执行过程中的所有证据：工具事件、产物、验证结果、质量问题、知识命中。
+ * 按 contract_id 隔离，支持查询和统计。
+ */
+export class EvidenceCollector {
+    evidenceMap = new Map();
+    /** 初始化一个契约的证据容器 */
+    init(contractId) {
+        if (this.evidenceMap.has(contractId))
+            return;
+        this.evidenceMap.set(contractId, {
+            contract_id: contractId,
+            tool_events: [],
+            artifacts: [],
+            verification_results: [],
+            quality_issues: [],
+            knowledge_hits: [],
+            updated_at: new Date().toISOString(),
+        });
+    }
+    /** 获取证据（只读快照） */
+    get(contractId) {
+        return this.evidenceMap.get(contractId) ?? null;
+    }
+    /** 记录工具事件 */
+    recordToolEvent(contractId, event) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return;
+        evidence.tool_events.push(event);
+        evidence.updated_at = event.timestamp;
+    }
+    /** 记录产物 */
+    recordArtifact(contractId, artifact) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return;
+        const existing = evidence.artifacts.findIndex(a => a.path === artifact.path);
+        if (existing >= 0) {
+            evidence.artifacts[existing] = artifact;
+        }
+        else {
+            evidence.artifacts.push(artifact);
+        }
+        evidence.updated_at = artifact.created_at;
+    }
+    /** 记录验证结果 */
+    recordVerification(contractId, result) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return;
+        evidence.verification_results.push(result);
+        evidence.updated_at = result.verified_at;
+    }
+    /** 记录质量问题 */
+    recordQualityIssue(contractId, issue) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return;
+        evidence.quality_issues.push(issue);
+        evidence.updated_at = issue.detected_at;
+    }
+    /** 记录知识命中 */
+    recordKnowledgeHit(contractId, hit) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return;
+        evidence.knowledge_hits.push(hit);
+        evidence.updated_at = hit.retrieved_at;
+    }
+    /** 设置会话摘要 */
+    setSessionSummary(contractId, summary) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return;
+        evidence.session_summary = summary;
+        evidence.updated_at = new Date().toISOString();
+    }
+    // ─── 查询与统计 ──────────────────────────────────────────────────────
+    /** 最近 N 次工具事件 */
+    recentToolEvents(contractId, n) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return [];
+        return evidence.tool_events.slice(-n);
+    }
+    /** 连续失败次数 */
+    consecutiveFailures(contractId) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return 0;
+        let count = 0;
+        for (let i = evidence.tool_events.length - 1; i >= 0; i--) {
+            if (!evidence.tool_events[i].success)
+                count++;
+            else
+                break;
+        }
+        return count;
+    }
+    /** 检测重复失败模式（最近 N 次是否都是同一工具失败） */
+    detectRepetitiveFailure(contractId, windowSize = 5) {
+        const recent = this.recentToolEvents(contractId, windowSize);
+        if (recent.length < windowSize)
+            return { detected: false };
+        const allFailed = recent.every(e => !e.success);
+        if (!allFailed)
+            return { detected: false };
+        const tools = new Set(recent.map(e => e.tool_name));
+        if (tools.size === 1) {
+            return { detected: true, tool: recent[0].tool_name };
+        }
+        return { detected: true };
+    }
+    /** 未通过的必需验证项 */
+    failedVerifications(contractId) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return [];
+        return evidence.verification_results.filter(r => !r.passed);
+    }
+    /** 未解决的质量问题（fail 级别） */
+    openQualityIssues(contractId) {
+        const evidence = this.evidenceMap.get(contractId);
+        if (!evidence)
+            return [];
+        return evidence.quality_issues.filter(i => i.level === 'fail');
+    }
+    /** 清理契约证据 */
+    clear(contractId) {
+        this.evidenceMap.delete(contractId);
+    }
+}
+//# sourceMappingURL=evidence-collector.js.map

package/dist/governance/evidence-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-collector.js","sourceRoot":"","sources":["../../src/governance/evidence-collector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,OAAO,iBAAiB;IACpB,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE5D,mBAAmB;IACnB,IAAI,CAAC,UAAkB;QACrB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QAC7C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE;YAC/B,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,EAAE;YACxB,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,aAAa;IACb,eAAe,CAAC,UAAkB,EAAE,KAAgB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;IACxC,CAAC;IAED,WAAW;IACX,cAAc,CAAC,UAAkB,EAAE,QAA4B;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC5C,CAAC;IAED,aAAa;IACb,kBAAkB,CAAC,UAAkB,EAAE,MAAoC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;IAC3C,CAAC;IAED,aAAa;IACb,kBAAkB,CAAC,UAAkB,EAAE,KAAmB;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1C,CAAC;IAED,aAAa;IACb,kBAAkB,CAAC,UAAkB,EAAE,GAAiB;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,aAAa;IACb,iBAAiB,CAAC,UAAkB,EAAE,OAAe;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,QAAQ,CAAC,eAAe,GAAG,OAAO,CAAC;QACnC,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC;IAED,mEAAmE;IAEnE,iBAAiB;IACjB,gBAAgB,CAAC,UAAkB,EAAE,CAAS;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,aAAa;IACb,mBAAmB,CAAC,UAAkB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC;QACxB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO;gBAAE,KAAK,EAAE,CAAC;;gBACzC,MAAM;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iCAAiC;IACjC,uBAAuB,CAAC,UAAkB,EAAE,UAAU,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,gBAAgB;IAChB,mBAAmB,CAAC,UAAkB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,wBAAwB;IACxB,iBAAiB,CAAC,UAAkB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,aAAa;IACb,KAAK,CAAC,UAAkB;QACtB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;CACF"}