autosnippet 3.2.21 → 3.2.22

package/dist/lib/injection/modules/GuardModule.js

@@ -6,6 +6,8 @@
  *   - exclusionManager, ruleLearner, violationsStore
  *   - complianceReporter, guardFeedbackLoop
  */
+import fs from 'node:fs';
+import path from 'node:path';
 import { resolveProjectRoot } from '#shared/resolveProjectRoot.js';
 import { ComplianceReporter } from '../../service/guard/ComplianceReporter.js';
 import { ExclusionManager } from '../../service/guard/ExclusionManager.js';
@@ -29,7 +31,37 @@ export function register(c) {
     });
     c.singleton('guardCheckEngine', (ct) => {
         const config = ct.singletons._config || {};
-        return new GuardCheckEngine(ct.get('database'), { guardConfig: config.guard || {} });
+        // 基础配置（AutoSnippet 自身 config/default.json）
+        const baseGuard = config.guard || {};
+        // 项目级覆盖（.autosnippet/config.json 的 guard 段）
+        let projectGuard = {};
+        try {
+            const projectRoot = resolveProjectRoot(ct);
+            const projConfigPath = path.join(projectRoot, '.autosnippet', 'config.json');
+            if (fs.existsSync(projConfigPath)) {
+                const raw = JSON.parse(fs.readFileSync(projConfigPath, 'utf-8'));
+                if (raw.guard && typeof raw.guard === 'object') {
+                    projectGuard = raw.guard;
+                }
+            }
+        }
+        catch {
+            /* 项目配置读取失败不阻塞 */
+        }
+        // 合并：项目级覆盖基础配置
+        const merged = { ...baseGuard, ...projectGuard };
+        if (baseGuard.codeLevelThresholds || projectGuard.codeLevelThresholds) {
+            merged.codeLevelThresholds = {
+                ...(baseGuard.codeLevelThresholds || {}),
+                ...(projectGuard.codeLevelThresholds || {}),
+            };
+        }
+        if (baseGuard.disabledRules || projectGuard.disabledRules) {
+            const base = Array.isArray(baseGuard.disabledRules) ? baseGuard.disabledRules : [];
+            const proj = Array.isArray(projectGuard.disabledRules) ? projectGuard.disabledRules : [];
+            merged.disabledRules = [...new Set([...base, ...proj])];
+        }
+        return new GuardCheckEngine(ct.get('database'), { guardConfig: merged });
     });
     c.singleton('exclusionManager', (ct) => {
         const projectRoot = resolveProjectRoot(ct);

package/dist/lib/service/guard/GuardCheckEngine.d.ts

@@ -24,6 +24,7 @@ interface BuiltInRule {
     category?: string;
     fixSuggestion?: string;
     excludePaths?: RegExp;
+    excludeLinePatterns?: string[];
     skipComments?: boolean;
     skipTestBlocks?: boolean;
 }
@@ -40,6 +41,7 @@ interface GuardRule {
     type?: string;
     fixSuggestion?: string | null;
     excludePaths?: RegExp | string;
+    excludeLinePatterns?: string[];
     skipComments?: boolean;
     skipTestBlocks?: boolean;
     astQuery?: {
@@ -62,9 +64,14 @@ interface GuardViolation {
         suggestedFix: string | null;
     };
 }
+/** 每条规则的覆盖配置（支持数字阈值或富对象） */
+interface RuleOverride {
+    severity?: string;
+    exclude?: string[];
+}
 interface GuardConfig {
     disabledRules?: string[];
-    codeLevelThresholds?: Record<string, number>;
+    codeLevelThresholds?: Record<string, number | RuleOverride>;
 }
 interface GuardCheckEngineOptions {
     cacheTTL?: number;
@@ -157,6 +164,11 @@ export declare class GuardCheckEngine {
     _runAstRuleChecks(code: string, language: string): GuardViolation[];
     /** 获取 AstAnalyzer 模块（静态 import，带可用性检测） */
     _getAstAnalyzer(): typeof AstAnalyzerModule;
+    /**
+     * 合并内置 + 配置级行排除模式，编译为 RegExp 数组
+     * 配置来自 guardConfig.codeLevelThresholds[ruleId].exclude
+     */
+    _getExcludeLineRegexes(ruleId: string, builtIn?: string[]): RegExp[];
     /**
      * 将 Guard 命中计数回写到对应 Recipe 的 guard_hit_count
      * @param violations

package/dist/lib/service/guard/GuardCheckEngine.js

@@ -75,6 +75,13 @@ const BUILT_IN_RULES = {
         dimension: 'file',
         category: 'safety',
         fixSuggestion: '使用 as? 配合 guard let / if let 进行安全转换',
+        // UIKit 框架契约保证安全的 as! 场景
+        excludeLinePatterns: [
+            'dequeueReusableCell.*as\\s*!',
+            'dequeueReusableSupplementaryView.*as\\s*!',
+            'dequeueReusableHeaderFooterView.*as\\s*!',
+            'layerClass.*layer\\s+as\\s*!',
+        ],
     },
     'swift-force-try': {
         message: 'try! 在异常时崩溃，建议 do-catch 或 try?',
@@ -689,6 +696,9 @@ export class GuardCheckEngine {
             }
             const shouldSkipComments = !!rule.skipComments;
             const shouldSkipTestBlocks = !!rule.skipTestBlocks;
+            // 合并内置 + 配置级排除行模式
+            const ruleId = rule.id || rule.name;
+            const excludeLineRegexes = this._getExcludeLineRegexes(ruleId, rule.excludeLinePatterns);
             for (let i = 0; i < lines.length; i++) {
                 // skipComments: 跳过注释行（doc comments / 行注释 / 块注释内）
                 if (shouldSkipComments && commentLines[i]) {
@@ -699,6 +709,10 @@ export class GuardCheckEngine {
                     continue;
                 }
                 if (re.test(lines[i])) {
+                    // excludeLinePatterns: 跳过匹配排除模式的行（UIKit 框架契约安全等场景）
+                    if (excludeLineRegexes.length > 0 && excludeLineRegexes.some((ep) => ep.test(lines[i]))) {
+                        continue;
+                    }
                     violations.push({
                         ruleId: rule.id || rule.name,
                         message: rule.message,
@@ -711,10 +725,16 @@ export class GuardCheckEngine {
                 }
             }
         }
-        // Code-level 检查（不依赖正则）
+        // Code-level 检查（不依赖正则）— 仅传递数字类型阈值
+        const numericThresholds = {};
+        for (const [k, v] of Object.entries(this._guardConfig.codeLevelThresholds || {})) {
+            if (typeof v === 'number') {
+                numericThresholds[k] = v;
+            }
+        }
         violations.push(...runCodeLevelChecks(code, language, lines, {
             disabledRules: this._guardConfig.disabledRules,
-            codeLevelThresholds: this._guardConfig.codeLevelThresholds,
+            codeLevelThresholds: numericThresholds,
         }));
         // AST 语义规则检查
         violations.push(...this._runAstRuleChecks(code, language));
@@ -853,6 +873,28 @@ export class GuardCheckEngine {
     _getAstAnalyzer() {
         return AstAnalyzerModule;
     }
+    /**
+     * 合并内置 + 配置级行排除模式，编译为 RegExp 数组
+     * 配置来自 guardConfig.codeLevelThresholds[ruleId].exclude
+     */
+    _getExcludeLineRegexes(ruleId, builtIn) {
+        const patterns = [...(builtIn || [])];
+        // 合并项目配置中的 exclude
+        const override = this._guardConfig.codeLevelThresholds?.[ruleId];
+        if (override && typeof override === 'object' && Array.isArray(override.exclude)) {
+            patterns.push(...override.exclude);
+        }
+        const regexes = [];
+        for (const p of patterns) {
+            try {
+                regexes.push(new RegExp(p));
+            }
+            catch {
+                this.logger.debug(`Invalid excludeLinePattern in rule ${ruleId}: ${p}`);
+            }
+        }
+        return regexes;
+    }
     /**
      * 将 Guard 命中计数回写到对应 Recipe 的 guard_hit_count
      * @param violations

package/dist/lib/shared/schemas/config.d.ts

@@ -103,7 +103,10 @@ export declare const AppConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
     guard: z.ZodOptional<z.ZodObject<{
         disabledRules: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        codeLevelThresholds: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+        codeLevelThresholds: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodNumber, z.ZodObject<{
+            severity: z.ZodOptional<z.ZodString>;
+            exclude: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>]>>>;
     }, z.core.$strip>>;
     taskGraph: z.ZodOptional<z.ZodObject<{
         decision: z.ZodOptional<z.ZodObject<{

package/dist/lib/shared/schemas/config.js

@@ -81,9 +81,16 @@ const QualityGateConfig = z.object({
     maxWarnings: z.number().int().min(0).default(20),
     minScore: z.number().int().min(0).max(100).default(70),
 });
+const RuleOverrideConfig = z.union([
+    z.number().int().min(0),
+    z.object({
+        severity: z.string().optional(),
+        exclude: z.array(z.string()).optional(),
+    }),
+]);
 const GuardConfig = z.object({
     disabledRules: z.array(z.string()).default([]),
-    codeLevelThresholds: z.record(z.string(), z.number().int().min(0)).default({}),
+    codeLevelThresholds: z.record(z.string(), RuleOverrideConfig).default({}),
 });
 const TaskDecisionConfig = z.object({
     staleDays: z.number().int().min(1).default(30),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autosnippet",
-  "version": "3.2.21",
+  "version": "3.2.22",
   "description": "Extract code patterns into a knowledge base for AI coding assistants",
   "type": "module",
   "main": "dist/lib/bootstrap.js",