@winspan/claude-forge 8.41.0 → 8.51.0

package/dist/engine/conventions/database-safety.yaml

@@ -1,74 +0,0 @@
-id: "database-safety"
-name: "数据库安全规范"
-version: "1.0.0"
-description: "数据库操作安全规则，防止 SQL 注入、数据丢失和性能问题"
-triggers: ["sql", "database", "mysql", "postgres", "mongodb", "数据库", "查询"]
-
-variables:
-  sql_file_patterns: [".sql"]
-  dangerous_sql_keywords: ["DROP", "TRUNCATE", "DELETE", "UPDATE"]
-  orm_patterns: ["execute", "raw", "query"]
-
-forbidden:
-  - id: "no-sql-injection"
-    when: |
-      tool.in(["Write", "Edit"])
-      && (args.content ?? args.new_string ?? "").match(/(?:execute|query|raw)\s*\([^)]*\+[^)]*\)/).ok()
-    level: block
-    message: "检测到 SQL 字符串拼接，存在 SQL 注入风险"
-    suggestion: "使用参数化查询或 ORM 的安全 API"
-    operator_guidance: "字符串拼接无法防止 SQL 注入；使用 ? 占位符或 ORM 的参数绑定。"
-    doc_ref: "https://owasp.org/www-community/attacks/SQL_Injection"
-    tags: ["database", "sql-injection", "security"]
-
-  - id: "warn-delete-without-where"
-    when: |
-      tool.in(["Write", "Edit", "Bash"])
-      && (args.content ?? args.new_string ?? args.command ?? "").lower().match(/delete\s+from\s+\w+\s*;/).ok()
-    level: block
-    message: "检测到无 WHERE 条件的 DELETE，会删除全表数据"
-    suggestion: "添加 WHERE 条件限定删除范围，或使用 TRUNCATE"
-    operator_guidance: "无条件 DELETE 是不可逆操作；先用 SELECT 验证条件，再执行 DELETE。"
-    tags: ["database", "data-loss"]
-
-  - id: "warn-update-without-where"
-    when: |
-      tool.in(["Write", "Edit", "Bash"])
-      && (args.content ?? args.new_string ?? args.command ?? "").lower().match(/update\s+\w+\s+set\s+[^;]*;/).ok()
-      && !(args.content ?? args.new_string ?? args.command ?? "").lower().match(/where/).ok()
-    level: block
-    message: "检测到无 WHERE 条件的 UPDATE，会修改全表数据"
-    suggestion: "添加 WHERE 条件限定更新范围"
-    operator_guidance: "无条件 UPDATE 会覆盖所有行；先用 SELECT 验证条件，确认影响行数。"
-    tags: ["database", "data-loss"]
-
-  - id: "warn-select-star"
-    when: |
-      tool.in(["Write", "Edit"])
-      && (args.content ?? args.new_string ?? "").match(/SELECT\s+\*\s+FROM/i).ok()
-    level: warn
-    message: "检测到 SELECT *，可能影响性能和可维护性"
-    suggestion: "显式列出需要的字段，避免传输不必要的数据"
-    operator_guidance: "SELECT * 传输所有列，增加网络开销；显式列出字段提升性能和可读性。"
-    tags: ["database", "performance"]
-
-  - id: "no-drop-production"
-    when: |
-      tool == "Bash"
-      && args.command.lower().match(/drop\s+(database|table)/).ok()
-      && (args.command.includes("prod") || args.command.includes("production"))
-    level: block
-    message: "禁止在生产环境执行 DROP 操作"
-    operator_guidance: "生产环境的 DROP 操作必须经过审批和备份；先在测试环境验证。"
-    tags: ["database", "production", "destructive"]
-
-escalation: []
-
-deliverables: []
-
-principles: |
-  ## 数据库安全规范
-  - 禁止 SQL 字符串拼接，使用参数化查询
-  - DELETE/UPDATE 必须带 WHERE 条件
-  - 避免 SELECT *，显式列出字段
-  - 生产环境禁止 DROP 操作

package/dist/engine/conventions/dependency-safety.yaml

@@ -1,132 +0,0 @@
-id: "dependency-safety"
-name: "依赖安全规范"
-version: "1.0.0"
-description: "第三方依赖管理的安全规则，覆盖版本锁定、漏洞检测和供应链风险"
-triggers: ["npm install", "pip install", "yarn add", "pnpm add", "依赖", "安装", "package", "upgrade", "更新依赖"]
-
-variables:
-  package_managers: ["npm", "yarn", "pnpm", "pip", "gem", "cargo", "go"]
-  known_vulnerable_packages: ["event-stream@3.3.6", "eslint-scope@3.7.2"]
-  dev_only_packages: ["webpack", "vite", "eslint", "prettier", "jest", "vitest", "typescript"]
-
-forbidden:
-  - id: "no-unversioned-install"
-    when: |
-      tool == "Bash"
-      && args.command.match(/(?:npm|yarn|pnpm)\s+(?:add|install)\s+[a-z@][a-z0-9-/@]*(?:\s|$)/).ok()
-      && !args.command.match(/@[\d.]+/).ok()
-      && !args.command.includes("--save-dev")
-      && !args.command.includes("-D")
-    level: warn
-    message: "安装依赖时未指定版本号，可能引入不兼容更新"
-    suggestion: "使用 npm install package@version 锁定版本，或在 package.json 中使用精确版本"
-
-  - id: "warn-global-install"
-    when: |
-      tool == "Bash"
-      && args.command.match(/(?:npm|yarn|pnpm)\s+(?:install|add)\s+-g/).ok()
-    level: warn
-    message: "全局安装依赖可能导致版本冲突"
-    suggestion: "优先使用项目本地依赖或 npx 执行"
-
-  - id: "no-known-vulnerable"
-    when: |
-      tool == "Bash"
-      && vars.known_vulnerable_packages.any(pkg => args.command.includes(pkg))
-    level: block
-    message: "尝试安装已知存在漏洞的包版本"
-    suggestion: "升级到安全版本或寻找替代方案"
-
-  - id: "warn-dev-in-prod"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path.endsWith("package.json")
-      && (args.content ?? args.new_string ?? "").match(/"dependencies":\s*\{[^}]*(?:webpack|vite|eslint|prettier|jest|vitest|typescript)/).ok()
-    level: warn
-    message: "检测到开发工具出现在 dependencies 中"
-    suggestion: "将开发工具移至 devDependencies，减小生产包体积"
-
-  - id: "warn-npm-audit-skip"
-    when: |
-      tool == "Bash"
-      && args.command.match(/npm\s+install.*--no-audit/).ok()
-    level: warn
-    message: "跳过了 npm audit 安全检查"
-    suggestion: "移除 --no-audit 以启用漏洞扫描"
-
-  - id: "warn-package-lock-delete"
-    when: |
-      tool == "Bash"
-      && args.command.match(/rm\s+.*(?:package-lock\.json|yarn\.lock|pnpm-lock\.yaml)/).ok()
-    level: confirm
-    message: "删除锁文件会导致依赖版本不确定"
-    suggestion: "只在解决依赖冲突时删除，删除后需重新生成并提交"
-
-  - id: "no-npm-install-root"
-    when: |
-      tool == "Bash"
-      && args.command.match(/sudo\s+npm\s+install/).ok()
-    level: block
-    message: "禁止使用 sudo npm install，存在权限风险"
-    suggestion: "修复 npm 权限配置或使用 nvm 管理 Node.js"
-
-  - id: "warn-wildcard-version"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path.endsWith("package.json")
-      && (args.content ?? args.new_string ?? "").match(/"[^"]+"\s*:\s*"\*"/).ok()
-    level: warn
-    message: "依赖版本使用通配符 *，可能引入破坏性更新"
-    suggestion: "使用语义化版本范围（如 ^1.2.3）或精确版本"
-
-  - id: "warn-outdated-major"
-    when: |
-      tool == "Bash"
-      && args.command.match(/npm\s+(?:install|update).*@\d+\./).ok()
-      && args.command.match(/@[0-4]\./).ok()
-    level: warn
-    message: "安装的依赖版本可能过旧（主版本 < 5）"
-    suggestion: "检查是否有更新的稳定版本"
-
-escalation:
-  - id: "dependency-churn-alert"
-    when: |
-      history.last(10).filter(e =>
-        e.tool == "Bash"
-        && e.args.command.match(/npm\s+(?:install|uninstall|update)/).ok()
-      ).length >= 5
-    action: warn
-    message: "短时间内频繁变更依赖（10 次操作中 5+ 次）"
-    suggestion: "建议整理依赖变更计划，避免反复试错"
-
-  - id: "audit-reminder"
-    when: |
-      history.file_changes.any(f => f.endsWith("package.json"))
-      && !history.last(5).any(e =>
-        e.tool == "Bash"
-        && e.args.command.includes("npm audit")
-      )
-    action: warn
-    message: "修改了 package.json 但未运行安全审计"
-    suggestion: "运行 npm audit 检查已知漏洞"
-
-deliverables:
-  - name: "依赖安全审计"
-    command: "npm audit --audit-level=moderate"
-    required: true
-    check_at: "before_commit"
-
-  - name: "锁文件一致性"
-    command: "npm ci"
-    required: false
-    check_at: "ci"
-
-principles: |
-  ## 依赖安全规范
-  - 安装依赖时锁定版本号，避免隐式升级
-  - 禁止安装已知漏洞包
-  - 开发工具放在 devDependencies
-  - 保留锁文件，确保依赖可复现
-  - 定期运行 npm audit 检查漏洞
-  - 避免使用 sudo npm install
-  - 依赖变更后运行安全审计

package/dist/engine/conventions/docker-safety.yaml

@@ -1,69 +0,0 @@
-id: "docker-safety"
-name: "Docker/容器安全规范"
-version: "1.0.0"
-description: "容器化应用安全规则，覆盖镜像构建、运行时安全和资源管理"
-triggers: ["docker", "dockerfile", "container", "镜像", "容器"]
-
-variables:
-  dockerfile_patterns: ["Dockerfile", ".dockerfile"]
-  dangerous_base_images: ["latest", "alpine:latest"]
-
-forbidden:
-  - id: "no-latest-tag"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path != null
-      && (file_path.endsWith("Dockerfile") || file_path.includes("Dockerfile"))
-      && (args.content ?? args.new_string ?? "").match(/FROM\s+[^:]+:latest/).ok()
-    level: warn
-    message: "Dockerfile 使用 :latest 标签，可能导致构建不可复现"
-    suggestion: "使用具体版本号，如 node:18.20.0-alpine"
-    operator_guidance: "latest 标签会随时间变化；固定版本号确保构建可复现。"
-    tags: ["docker", "reproducibility"]
-
-  - id: "warn-run-as-root"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path != null
-      && (file_path.endsWith("Dockerfile") || file_path.includes("Dockerfile"))
-      && !(args.content ?? args.new_string ?? "").match(/USER\s+\w+/).ok()
-    level: warn
-    message: "Dockerfile 未指定 USER，容器将以 root 运行"
-    suggestion: "添加 USER 指令切换到非 root 用户"
-    operator_guidance: "以 root 运行容器增加攻击面；创建专用用户并切换：RUN adduser -D appuser && USER appuser"
-    tags: ["docker", "security"]
-
-  - id: "no-apt-get-without-cleanup"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path != null
-      && (file_path.endsWith("Dockerfile") || file_path.includes("Dockerfile"))
-      && (args.content ?? args.new_string ?? "").match(/apt-get\s+install/).ok()
-      && !(args.content ?? args.new_string ?? "").match(/rm\s+-rf\s+\/var\/lib\/apt\/lists/).ok()
-    level: warn
-    message: "apt-get install 后未清理缓存，会增大镜像体积"
-    suggestion: "在同一 RUN 层添加清理命令：&& rm -rf /var/lib/apt/lists/*"
-    operator_guidance: "每个 RUN 层都会保留文件系统快照；在同一层安装和清理可减小镜像体积。"
-    tags: ["docker", "optimization"]
-
-  - id: "warn-expose-sensitive-port"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path != null
-      && (file_path.endsWith("Dockerfile") || file_path.includes("Dockerfile"))
-      && (args.content ?? args.new_string ?? "").match(/EXPOSE\s+(22|3306|5432|6379|27017)/).ok()
-    level: warn
-    message: "Dockerfile 暴露敏感端口（SSH/数据库），可能存在安全风险"
-    suggestion: "确认是否需要暴露该端口，生产环境应通过网络策略限制访问"
-    tags: ["docker", "security"]
-
-escalation: []
-
-deliverables: []
-
-principles: |
-  ## Docker/容器安全规范
-  - 使用具体版本号而非 :latest 标签
-  - 容器应以非 root 用户运行
-  - apt-get install 后清理缓存减小镜像体积
-  - 避免暴露敏感端口（SSH、数据库）

package/dist/engine/conventions/git-safety.yaml

@@ -1,118 +0,0 @@
-id: "git-safety"
-name: "Git 操作安全规范"
-version: "1.0.0"
-description: "Git 版本控制操作的安全规则，防止误操作导致代码丢失"
-triggers: ["git", "push", "commit", "merge", "rebase", "reset", "branch", "提交", "推送", "合并"]
-
-variables:
-  protected_branches: ["main", "master", "production", "staging", "release"]
-  dangerous_git_commands: ["reset --hard", "clean -fd", "clean -fdx", "branch -D"]
-
-forbidden:
-  - id: "no-force-push-main"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+push.*--force/).ok()
-      && git.branch.in(vars.protected_branches)
-    level: block
-    message: "禁止强制推送到受保护分支 {{git.branch}}"
-    suggestion: "使用 --force-with-lease 或创建新分支后提交 PR"
-    operator_guidance: "公共分支改写历史会影响他人协作；优先通过新分支和 PR 完成修复。"
-    doc_ref: "CLAUDE.md#Git 操作安全规范"
-    tags: ["git", "protected-branch", "history-rewrite"]
-
-  - id: "warn-force-push-feature"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+push.*--force(?!-with-lease)/).ok()
-      && !git.branch.in(vars.protected_branches)
-    level: warn
-    message: "检测到 git push --force，这会覆盖远程历史"
-    suggestion: "考虑使用 --force-with-lease 以避免覆盖他人提交"
-    operator_guidance: "只有在确认远端无人基于该提交继续工作时，才考虑 force push。"
-    doc_ref: "CLAUDE.md#Git 操作安全规范"
-    tags: ["git", "force-push"]
-
-  - id: "no-reset-hard-uncommitted"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+reset\s+--hard/).ok()
-      && git.has_uncommitted_changes
-    level: block
-    message: "禁止在有未提交更改时执行 git reset --hard"
-    suggestion: "先使用 git stash 保存更改，或提交后再 reset"
-    operator_guidance: "先用 git status 确认工作区，再 stash 或提交，避免本地未保存改动丢失。"
-    doc_ref: "CLAUDE.md#Git 操作安全规范"
-    tags: ["git", "reset-hard", "uncommitted-changes"]
-
-  - id: "warn-reset-hard"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+reset\s+--hard/).ok()
-    level: confirm
-    message: "git reset --hard 会丢弃所有未提交的更改"
-    suggestion: "确认这是有意为之，或使用 git stash 保存更改"
-    operator_guidance: "执行前先确认 HEAD 目标和工作区状态，必要时先创建临时分支保存现场。"
-    doc_ref: "CLAUDE.md#Git 操作安全规范"
-    tags: ["git", "reset-hard"]
-
-  - id: "warn-clean-fd"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+clean\s+-[^\s]*f[^\s]*d/).ok()
-    level: confirm
-    message: "git clean -fd 会删除所有未跟踪的文件和目录"
-    suggestion: "确认不会误删重要文件，或先使用 git clean -n 预览"
-
-  - id: "no-delete-git-dir"
-    when: |
-      tool == "Bash"
-      && args.command.match(/rm\s+-[^\s]*r[^\s]*.*\.git/).ok()
-    level: block
-    message: "禁止删除 .git 目录，这会导致版本历史丢失"
-
-  - id: "warn-branch-delete-unmerged"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+branch\s+-D/).ok()
-    level: confirm
-    message: "git branch -D 会强制删除分支，即使未合并"
-    suggestion: "使用 git branch -d 以确保分支已合并，或确认这是有意为之"
-
-  - id: "warn-rebase-public-branch"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+rebase/).ok()
-      && git.branch.in(vars.protected_branches)
-    level: block
-    message: "禁止在公共分支上执行 rebase"
-    suggestion: "rebase 会改写历史，只应在本地分支使用"
-
-  - id: "warn-amend-pushed-commit"
-    when: |
-      tool == "Bash"
-      && args.command.match(/git\s+commit\s+--amend/).ok()
-      && git.last_commit_pushed
-    level: warn
-    message: "修改已推送的提交需要 force push"
-    suggestion: "如果他人已拉取该提交，考虑创建新提交而非修改"
-
-escalation:
-  - id: "repeated-git-failures"
-    when: |
-      history.last(5).filter(e =>
-        e.tool == "Bash"
-        && e.args.command.startsWith("git")
-        && e.failed
-      ).length >= 3
-    action: confirm
-    message: "Git 操作连续失败 3 次，可能需要调整策略"
-    suggestion: "检查分支状态、远程连接或权限配置"
-
-principles: |
-  ## Git 操作安全规范
-  - 受保护分支禁止强制推送和 rebase
-  - 危险操作（reset --hard、clean -fd）需要确认
-  - 禁止删除 .git 目录
-  - 强制删除分支前确认已合并
-  - 修改已推送的提交需谨慎

package/dist/engine/conventions/go-best-practices.yaml

@@ -1,84 +0,0 @@
-id: "go-best-practices"
-name: "Go 最佳实践"
-version: "1.0.0"
-description: "Go 开发规范，覆盖错误处理、并发安全、资源管理和性能"
-triggers: ["go", "golang", "goroutine", "channel", "defer", "panic"]
-
-variables:
-  go_file_patterns: [".go"]
-  dangerous_packages: ["unsafe", "reflect"]
-  max_function_lines: 50
-
-forbidden:
-  - id: "no-panic-in-library"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".go"
-      && !file_path.includes("_test.go")
-      && (args.content ?? args.new_string ?? "").match(/\bpanic\(/).ok()
-    level: warn
-    message: "库代码中检测到 panic，应返回 error 而非 panic"
-    suggestion: "将 panic 改为返回 error，让调用方决定如何处理"
-    operator_guidance: "panic 应只用于不可恢复的错误；库代码应返回 error，由调用方处理。"
-    doc_ref: "https://go.dev/blog/error-handling-and-go"
-    tags: ["go", "error-handling"]
-
-  - id: "warn-goroutine-leak"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".go"
-      && (args.content ?? args.new_string ?? "").match(/go\s+func\s*\(/).ok()
-      && !(args.content ?? args.new_string ?? "").match(/context\./).ok()
-    level: warn
-    message: "检测到 goroutine 但未使用 context，可能导致泄漏"
-    suggestion: "传入 context.Context 参数，监听 ctx.Done() 以优雅退出"
-    operator_guidance: "goroutine 泄漏会耗尽资源；用 context 控制生命周期，监听 Done() 信号退出。"
-    doc_ref: "https://go.dev/blog/context"
-    tags: ["go", "concurrency", "resource-leak"]
-
-  - id: "no-defer-in-loop"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".go"
-      && (args.content ?? args.new_string ?? "").match(/for\s+[^{]*\{[^}]*defer\s+/).ok()
-    level: warn
-    message: "检测到循环中使用 defer，会延迟到函数结束才执行"
-    suggestion: "将循环体提取为独立函数，或手动调用清理函数"
-    operator_guidance: "defer 在函数返回时执行，不是循环迭代结束；循环中的 defer 会累积，可能导致资源耗尽。"
-    doc_ref: "https://go.dev/ref/spec#Defer_statements"
-    tags: ["go", "defer", "resource-leak"]
-
-  - id: "warn-error-ignored"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".go"
-      && (args.content ?? args.new_string ?? "").match(/\w+\([^)]*\)\s*$/).ok()
-      && (args.content ?? args.new_string ?? "").match(/,\s*err\s*:=/).ok()
-    level: warn
-    message: "检测到可能未检查的 error 返回值"
-    suggestion: "显式检查 error：if err != nil { return err }"
-    operator_guidance: "Go 的错误处理依赖显式检查；忽略 error 会掩盖问题，用 if err != nil 立即处理。"
-    tags: ["go", "error-handling"]
-
-  - id: "no-unsafe-package"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".go"
-      && (args.content ?? args.new_string ?? "").match(/import\s+.*"unsafe"/).ok()
-    level: warn
-    message: "检测到 unsafe 包，会绕过 Go 的类型安全"
-    suggestion: "除非性能关键场景，避免使用 unsafe"
-    operator_guidance: "unsafe 绕过类型安全和内存安全；只在性能瓶颈且充分测试后使用。"
-    tags: ["go", "safety"]
-
-escalation: []
-
-deliverables: []
-
-principles: |
-  ## Go 最佳实践
-  - 库代码返回 error 而非 panic
-  - goroutine 使用 context 控制生命周期
-  - 避免在循环中使用 defer
-  - 显式检查所有 error 返回值
-  - 谨慎使用 unsafe 包

package/dist/engine/conventions/python-best-practices.yaml

@@ -1,96 +0,0 @@
-id: "python-best-practices"
-name: "Python 最佳实践"
-version: "1.0.0"
-description: "Python 开发规范，覆盖代码风格、类型安全、安全性和性能"
-triggers: ["python", "py", "pip", "django", "flask", "fastapi", "虚拟环境"]
-
-variables:
-  python_file_patterns: [".py"]
-  dangerous_imports: ["pickle", "eval", "exec", "compile", "__import__"]
-  max_function_lines: 50
-  max_class_lines: 300
-
-forbidden:
-  - id: "no-pickle-untrusted"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".py"
-      && (args.content ?? args.new_string ?? "").match(/pickle\.loads?\(/).ok()
-    level: warn
-    message: "检测到 pickle.load/loads，反序列化不可信数据存在代码执行风险"
-    suggestion: "使用 JSON 或其他安全的序列化格式，避免 pickle 处理外部数据"
-    operator_guidance: "pickle 可以执行任意代码；只用于可信数据，外部数据优先用 JSON/MessagePack。"
-    doc_ref: "https://docs.python.org/3/library/pickle.html#module-pickle"
-    tags: ["python", "security", "deserialization"]
-
-  - id: "no-eval-exec"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".py"
-      && (args.content ?? args.new_string ?? "").match(/\b(eval|exec)\s*\(/).ok()
-    level: block
-    message: "禁止使用 eval() 或 exec()，存在代码注入风险"
-    suggestion: "使用 ast.literal_eval() 解析字面量，或重新设计避免动态执行"
-    operator_guidance: "eval/exec 可执行任意代码；用 ast.literal_eval 安全解析，或用字典映射替代动态执行。"
-    doc_ref: "https://docs.python.org/3/library/ast.html#ast.literal_eval"
-    tags: ["python", "security", "code-injection"]
-
-  - id: "warn-bare-except"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".py"
-      && (args.content ?? args.new_string ?? "").match(/except\s*:/).ok()
-    level: warn
-    message: "检测到裸 except:，会捕获所有异常包括 KeyboardInterrupt"
-    suggestion: "使用 except Exception: 或捕获具体异常类型"
-    operator_guidance: "裸 except 会捕获系统退出信号；用 except Exception 或具体异常类型。"
-    tags: ["python", "error-handling"]
-
-  - id: "warn-mutable-default-arg"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".py"
-      && (args.content ?? args.new_string ?? "").match(/def\s+\w+\([^)]*=\s*(\[\]|\{\})\s*[,)]/).ok()
-    level: warn
-    message: "检测到可变默认参数（[] 或 {}），会在调用间共享"
-    suggestion: "使用 None 作为默认值，在函数内部初始化"
-    operator_guidance: "可变默认参数只创建一次，多次调用会共享同一对象；用 None 并在函数内 if arg is None: arg = []"
-    doc_ref: "https://docs.python-guide.org/writing/gotchas/#mutable-default-arguments"
-    tags: ["python", "correctness"]
-
-  - id: "no-shell-injection"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_ext == ".py"
-      && (args.content ?? args.new_string ?? "").match(/subprocess\.(call|run|Popen)\([^)]*shell\s*=\s*True/).ok()
-    level: warn
-    message: "检测到 subprocess 使用 shell=True，存在命令注入风险"
-    suggestion: "使用列表形式传递参数，避免 shell=True"
-    operator_guidance: "shell=True 会通过 shell 解析命令，存在注入风险；用列表传参：['ls', '-la']"
-    doc_ref: "https://docs.python.org/3/library/subprocess.html#security-considerations"
-    tags: ["python", "security", "command-injection"]
-
-  - id: "warn-requirements-no-version"
-    when: |
-      tool.in(["Write", "Edit"])
-      && file_path != null
-      && file_path.endsWith("requirements.txt")
-      && (args.content ?? args.new_string ?? "").match(/^\w+\s*$/m).ok()
-    level: warn
-    message: "requirements.txt 中存在未固定版本的依赖"
-    suggestion: "使用 == 固定版本号，确保构建可复现"
-    operator_guidance: "未固定版本会导致不同环境安装不同版本；用 pip freeze 生成精确版本。"
-    tags: ["python", "dependency", "reproducibility"]
-
-escalation: []
-
-deliverables: []
-
-principles: |
-  ## Python 最佳实践
-  - 禁止 pickle 反序列化不可信数据
-  - 禁止 eval/exec 动态执行代码
-  - 使用 except Exception 而非裸 except
-  - 避免可变默认参数
-  - subprocess 避免 shell=True
-  - requirements.txt 固定依赖版本