autosnippet 3.2.9 → 3.2.11

package/lib/core/ast/parser-init.js

@@ -1,86 +0,0 @@
-/**
- * @module ast/parser-init
- * @description web-tree-sitter 初始化器
- *
- * 统一管理 WASM 版 Parser 的生命周期：
- *   1. 调用 Parser.init() 初始化 WASM 运行时（仅一次）
- *   2. 加载 .wasm 语法文件为 Language 对象
- *   3. 提供同步的 Parser 构造与语言设置 API
- *
- * 所有 async 操作（init + wasm 加载）集中在 loadPlugins() 阶段完成，
- * 下游 analyzeFile / findCallExpressions 等保持同步调用。
- */
-
-import { readFile } from 'node:fs/promises';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-/** 预编译 .wasm 文件存放目录 */
-const GRAMMARS_DIR = path.resolve(__dirname, '..', '..', '..', 'resources', 'grammars');
-
-let Parser = null;
-/** web-tree-sitter 模块命名空间 — Language.load 在这里 */
-let _namespace = null;
-let _initialized = false;
-
-/**
- * 初始化 web-tree-sitter WASM 运行时
- * 幂等 — 多次调用只执行一次
- */
-export async function initParser() {
-  if (_initialized) {
-    return;
-  }
-
-  try {
-    // web-tree-sitter ESM: 导出 { Parser, Language, ... } 命名空间
-    const mod = await import('web-tree-sitter');
-    _namespace = mod.default || mod;
-    // v0.25 导出 { Parser, Language, ... }，需要提取 Parser 类
-    Parser = typeof _namespace === 'function' ? _namespace : _namespace.Parser;
-    await Parser.init();
-    _initialized = true;
-  } catch {
-    // web-tree-sitter 不可用时优雅降级
-    Parser = null;
-    _initialized = false;
-  }
-}
-
-/**
- * 获取 Parser 构造函数
- * @returns {typeof import('web-tree-sitter') | null}
- */
-export function getParserClass() {
-  return Parser;
-}
-
-/**
- * 检查 parser 是否已初始化
- */
-export function isParserReady() {
-  return _initialized && Parser !== null;
-}
-
-/**
- * 从 resources/grammars/ 加载指定语言的 .wasm 文件
- * @param {string} wasmFileName — 如 'tree-sitter-javascript.wasm'
- * @returns {Promise<object|null>} Language 对象，失败返回 null
- */
-export async function loadLanguageWasm(wasmFileName) {
-  if (!_initialized || !_namespace) {
-    return null;
-  }
-
-  const wasmPath = path.join(GRAMMARS_DIR, wasmFileName);
-  try {
-    // 自行读取 wasm 文件为 Uint8Array，绕过 ESM 下 __require("fs/promises") 的兼容问题
-    const buffer = await readFile(wasmPath);
-    const Language = _namespace.Language || Parser.Language;
-    return await Language.load(new Uint8Array(buffer));
-  } catch {
-    return null;
-  }
-}

package/lib/core/capability/CapabilityProbe.js

@@ -1,258 +0,0 @@
-/**
- * CapabilityProbe — 子仓库能力探针
- *
- * 通过 `git push --dry-run` 探测当前用户对子仓库的物理写权限。
- * 探测结果被缓存（默认 24h）以避免重复执行。
- *
- * 三种探测结果：
- *   'admin'       — 无子仓库（个人项目）/ 有 push 权限 → developer
- *   'contributor'  — 有子仓库但无 push 权限 → developer（本地用户 = 项目 Owner）
- *   'visitor'      — noRemote=deny 严格模式 → developer（仅探针级别区分，角色统一为 developer）
- *
- * 当没有 remote 时根据 constitution capabilities.git_write.no_remote 策略决定：
- *   'allow' (默认) — 本地开发，视为 admin
- *   'deny'          — 严格模式，视为 visitor
- */
-
-import { execSync } from 'node:child_process';
-import fs from 'node:fs';
-import path from 'node:path';
-import Logger from '../../infrastructure/logging/Logger.js';
-
-/**
- * @typedef {'admin' | 'contributor' | 'visitor'} ProbeResult
- * @typedef {{ result: ProbeResult, cachedAt: number, expiresAt: number, detail: string }} ProbeCache
- */
-
-export class CapabilityProbe {
-  /**
-   * @param {object} options
-   * @param {string} [options.subRepoPath]  — 子仓库根路径（默认 cwd/AutoSnippet）
-   * @param {number} [options.cacheTTL]     — 缓存 TTL（秒），默认 86400
-   * @param {string} [options.noRemote]     — 无 remote 策略: 'allow' | 'deny'
-   */
-  constructor(options = {}) {
-    this.logger = Logger.getInstance();
-    this.subRepoPath = options.subRepoPath || this._detectSubRepo();
-    this.cacheTTL = (options.cacheTTL ?? 86400) * 1000; // 转为 ms
-    this.noRemote = options.noRemote || 'allow';
-
-    /** @type {ProbeCache | null} */
-    this._cache = null;
-  }
-
-  // ═══════════════════════════════════════════════════
-  //  Public API
-  // ═══════════════════════════════════════════════════
-
-  /**
-   * 执行探测，返回角色级别
-   * @returns {ProbeResult}
-   */
-  probe() {
-    // 命中缓存
-    if (this._cache && Date.now() < this._cache.expiresAt) {
-      this.logger.debug('CapabilityProbe: cache hit', { result: this._cache.result });
-      return this._cache.result;
-    }
-
-    const result = this._runProbe();
-    this._cache = {
-      result,
-      cachedAt: Date.now(),
-      expiresAt: Date.now() + this.cacheTTL,
-      detail: `probed at ${new Date().toISOString()}`,
-    };
-
-    this.logger.info('CapabilityProbe: probed', {
-      subRepoPath: this.subRepoPath,
-      result,
-    });
-
-    return result;
-  }
-
-  /**
-   * 将探测结果映射为 Constitution 角色 ID
-   * @param {ProbeResult} probeResult
-   * @returns {string}
-   */
-  toRole(probeResult) {
-    // 本地运行 AutoSnippet 的用户 = 项目 Owner = developer
-    // 探针级别的 admin/contributor/visitor 仅做信息记录，角色统一为 developer
-    switch (probeResult) {
-      default:
-        return 'developer';
-    }
-  }
-
-  /**
-   * 一步到位：探测并返回角色
-   * @returns {string} Constitution role ID
-   */
-  probeRole() {
-    return this.toRole(this.probe());
-  }
-
-  /**
-   * 获取当前缓存状态（for dashboard display）
-   */
-  getCacheStatus() {
-    if (!this._cache) {
-      return { cached: false };
-    }
-    return {
-      cached: true,
-      result: this._cache.result,
-      cachedAt: this._cache.cachedAt,
-      expiresAt: this._cache.expiresAt,
-      expired: Date.now() >= this._cache.expiresAt,
-    };
-  }
-
-  /**
-   * 清除缓存（强制下次重新探测）
-   */
-  invalidate() {
-    this._cache = null;
-  }
-
-  // ═══════════════════════════════════════════════════
-  //  Internal
-  // ═══════════════════════════════════════════════════
-
-  /**
-   * 自动检测子仓库路径
-   * @returns {string | null}
-   */
-  _detectSubRepo() {
-    // 常见路径：cwd/AutoSnippet 或 .autosnippet/AutoSnippet
-    const candidates = [
-      path.resolve(process.cwd(), 'AutoSnippet'),
-      path.resolve(process.cwd(), '.autosnippet', 'AutoSnippet'),
-    ];
-
-    for (const p of candidates) {
-      if (fs.existsSync(path.join(p, '.git')) || fs.existsSync(path.join(p, '..', '.gitmodules'))) {
-        return p;
-      }
-      // 即使不是独立 git 目录，但文件夹存在也返回（可能是 subtree 形式）
-      if (fs.existsSync(p)) {
-        return p;
-      }
-    }
-
-    return null;
-  }
-
-  /**
-   * 执行实际探测
-   * @returns {ProbeResult}
-   */
-  _runProbe() {
-    // Case 1: 子仓库路径不存在 → 个人项目模式，全权限
-    if (!this.subRepoPath || !fs.existsSync(this.subRepoPath)) {
-      this.logger.debug('CapabilityProbe: no sub-repo — personal project, granting admin');
-      return 'admin';
-    }
-
-    // Case 2: 检查是否是 git 仓库
-    const isGitRepo = this._isGitRepo(this.subRepoPath);
-    if (!isGitRepo) {
-      // 有目录但不是 git 仓库 → contributor（可本地编辑但不能 push）
-      this.logger.debug('CapabilityProbe: directory exists but not a git repo');
-      return 'contributor';
-    }
-
-    // Case 3: 检查是否有 remote
-    const hasRemote = this._hasRemote(this.subRepoPath);
-    if (!hasRemote) {
-      // 无 remote，根据策略决定
-      this.logger.debug('CapabilityProbe: no remote', { noRemote: this.noRemote });
-      return this.noRemote === 'allow' ? 'admin' : 'visitor';
-    }
-
-    // Case 4: 有 remote → 执行 git push --dry-run 探测写权限
-    try {
-      return this._probePush(this.subRepoPath);
-    } catch (err) {
-      this.logger.warn('CapabilityProbe: push probe failed', { error: err.message });
-      return 'contributor';
-    }
-  }
-
-  /**
-   * @param {string} repoPath
-   * @returns {boolean}
-   */
-  _isGitRepo(repoPath) {
-    try {
-      execSync('git rev-parse --git-dir', {
-        cwd: repoPath,
-        stdio: 'pipe',
-        timeout: 5000,
-      });
-      return true;
-    } catch {
-      return false;
-    }
-  }
-
-  /**
-   * @param {string} repoPath
-   * @returns {boolean}
-   */
-  _hasRemote(repoPath) {
-    try {
-      const output = execSync('git remote', {
-        cwd: repoPath,
-        stdio: 'pipe',
-        timeout: 5000,
-        encoding: 'utf8',
-      });
-      return output.trim().length > 0;
-    } catch {
-      return false;
-    }
-  }
-
-  /**
-   * git push --dry-run 探测
-   * @param {string} repoPath
-   * @returns {ProbeResult}
-   */
-  _probePush(repoPath) {
-    try {
-      execSync('git push --dry-run 2>&1', {
-        cwd: repoPath,
-        stdio: 'pipe',
-        timeout: 15000,
-        encoding: 'utf8',
-      });
-      // 成功 → 有写权限
-      return 'admin';
-    } catch (err) {
-      const stderr = (err.stderr || err.stdout || err.message || '').toString();
-      // "Everything up-to-date" 也算成功
-      if (stderr.includes('Everything up-to-date') || stderr.includes('up to date')) {
-        return 'admin';
-      }
-      // 明确被拒绝
-      if (
-        stderr.includes('permission') ||
-        stderr.includes('denied') ||
-        stderr.includes('403') ||
-        stderr.includes('401')
-      ) {
-        return 'contributor';
-      }
-      // 网络错误等 → 降级为 contributor
-      this.logger.debug('CapabilityProbe: push dry-run inconclusive', {
-        stderr: stderr.slice(0, 200),
-      });
-      return 'contributor';
-    }
-  }
-}
-
-export default CapabilityProbe;

package/lib/core/constitution/Constitution.js

@@ -1,132 +0,0 @@
-import fs from 'node:fs';
-import yaml from 'js-yaml';
-
-/**
- * Constitution - 宪法加载与管理
- */
-export class Constitution {
-  constructor(configPath) {
-    this.configPath = configPath;
-    this.config = this.loadConfig();
-    this.priorities = this.config.priorities || [];
-    this.rules = this.config.rules || [];
-    this.roles = new Map(this.config.roles?.map((r) => [r.id, r]) || []);
-  }
-
-  /**
-   * 加载宪法配置
-   */
-  loadConfig() {
-    if (!fs.existsSync(this.configPath)) {
-      throw new Error(`Constitution file not found: ${this.configPath}`);
-    }
-
-    const content = fs.readFileSync(this.configPath, 'utf8');
-    return yaml.load(content);
-  }
-
-  /**
-   * 获取所有优先级
-   */
-  getPriorities() {
-    return this.priorities;
-  }
-
-  /**
-   * 获取所有数据守护规则
-   */
-  getRules() {
-    return this.rules;
-  }
-
-  /**
-   * 获取能力定义
-   */
-  getCapabilities() {
-    return this.config.capabilities || {};
-  }
-
-  /**
-   * 获取角色需要的能力列表
-   */
-  getRoleRequiredCapabilities(roleId) {
-    const role = this.getRole(roleId);
-    return role ? role.requires_capability || [] : [];
-  }
-
-  /**
-   * 获取特定优先级
-   */
-  getPriority(id) {
-    return this.priorities.find((p) => p.id === id);
-  }
-
-  /**
-   * 获取角色定义
-   */
-  getRole(roleId) {
-    return this.roles.get(roleId);
-  }
-
-  /**
-   * 获取角色权限
-   */
-  getRolePermissions(roleId) {
-    const role = this.getRole(roleId);
-    return role ? role.permissions : [];
-  }
-
-  /**
-   * 获取角色约束
-   */
-  getRoleConstraints(roleId) {
-    const role = this.getRole(roleId);
-    return role ? role.constraints : [];
-  }
-
-  /**
-   * 获取所有角色
-   */
-  getAllRoles() {
-    return Array.from(this.roles.values());
-  }
-
-  /**
-   * 验证角色是否存在
-   */
-  hasRole(roleId) {
-    return this.roles.has(roleId);
-  }
-
-  /**
-   * 重新加载宪法（热更新）
-   */
-  reload() {
-    this.config = this.loadConfig();
-    this.priorities = this.config.priorities || [];
-    this.rules = this.config.rules || [];
-    this.roles = new Map(this.config.roles?.map((r) => [r.id, r]) || []);
-  }
-
-  /**
-   * 导出宪法摘要
-   */
-  toJSON() {
-    return {
-      version: this.config.version,
-      effectiveDate: this.config.effective_date,
-      priorities: this.priorities,
-      rules: this.rules.map((r) => ({
-        id: r.id,
-        description: r.description,
-      })),
-      roles: Array.from(this.roles.values()).map((r) => ({
-        id: r.id,
-        name: r.name,
-        description: r.description,
-      })),
-    };
-  }
-}
-
-export default Constitution;

package/lib/core/constitution/ConstitutionValidator.js

@@ -1,196 +0,0 @@
-import Logger from '../../infrastructure/logging/Logger.js';
-import { ConstitutionViolation } from '../../shared/errors/BaseError.js';
-
-/**
- * ConstitutionValidator — 数据守护验证器
- *
- * 精简设计: 4 条纯数据完整性规则，不做伦理/价值观判断。
- * 每条规则对应 constitution.yaml 中的一个 rule.check 值。
- */
-export class ConstitutionValidator {
-  constructor(constitution) {
-    this.constitution = constitution;
-    this.logger = Logger.getInstance();
-
-    /** rule.check → 检查函数 */
-    this.checkers = {
-      destructive_needs_confirmation: this._checkDestructive.bind(this),
-      creation_needs_content: this._checkContent.bind(this),
-      ai_cannot_approve_recipe: this._checkAiRecipe.bind(this),
-      batch_needs_authorization: this._checkBatch.bind(this),
-    };
-  }
-
-  /**
-   * 验证操作，返回违规列表
-   */
-  async validate(request) {
-    const violations = [];
-    const rules = this.constitution.getRules?.() || this.constitution.rules || [];
-
-    for (const rule of rules) {
-      const checker = this.checkers[rule.check];
-      if (checker) {
-        const v = checker(request, rule);
-        if (v) {
-          violations.push(v);
-        }
-      }
-    }
-
-    // 兼容旧 priorities 格式（如果新 rules 为空但有旧 priorities）
-    if (rules.length === 0) {
-      const priorities = this.constitution.getPriorities?.() || [];
-      for (const p of priorities) {
-        const pvs = await this._checkLegacyPriority(p, request);
-        violations.push(...pvs);
-      }
-    }
-
-    if (violations.length > 0) {
-      this.logger.warn('Constitution violations', {
-        actor: request.actor,
-        action: request.action,
-        count: violations.length,
-      });
-    }
-
-    return { compliant: violations.length === 0, violations };
-  }
-
-  /**
-   * 强制验证（违规时抛异常）
-   */
-  async enforce(request) {
-    const result = await this.validate(request);
-    if (!result.compliant) {
-      throw new ConstitutionViolation(result.violations);
-    }
-    return result;
-  }
-
-  // ─── 规则检查器 ────────────────────────────────────────
-
-  /** 删除操作需要确认 */
-  _checkDestructive(req, rule) {
-    const destructive = ['delete', 'remove', 'destroy', 'purge', 'batch_delete'];
-    if (!destructive.some((w) => req.action?.toLowerCase().includes(w))) {
-      return null;
-    }
-    if (req.data?.confirmed || req.confirmed) {
-      return null;
-    }
-    return { rule: rule.id, reason: '操作未经确认', suggestion: '添加 confirmed: true' };
-  }
-
-  /** 创建候选/Recipe 需要内容 */
-  _checkContent(req, rule) {
-    const verb = this._verb(req.action);
-    const res = this._resource(req.action, req.resource);
-    const isCreation =
-      (verb === 'create' && (res.includes('candidate') || res.includes('recipe'))) ||
-      req.action === 'create_candidate' ||
-      req.action === 'create_recipe';
-    if (!isCreation) {
-      return null;
-    }
-    const ok =
-      req.data?.code ||
-      req.code ||
-      req.data?.content ||
-      (Array.isArray(req.data?.items) && req.data.items.length > 0) ||
-      req.data?.filePaths;
-    if (ok) {
-      return null;
-    }
-    return { rule: rule.id, reason: '缺少 code/content', suggestion: '提供代码或内容' };
-  }
-
-  /** AI 不能直接创建/批准 Recipe */
-  _checkAiRecipe(req, rule) {
-    if (!this._isAI(req.actor)) {
-      return null;
-    }
-    const verb = this._verb(req.action);
-    const res = this._resource(req.action, req.resource);
-    const isRecipeMod =
-      (verb === 'create' && res.includes('recipe')) ||
-      verb === 'approve' ||
-      verb === 'publish' ||
-      req.action === 'approve_candidate' ||
-      req.action === 'create_recipe';
-    if (!isRecipeMod) {
-      return null;
-    }
-    return {
-      rule: rule.id,
-      reason: 'AI 不能直接操作 Recipe',
-      suggestion: '通过 Dashboard 人工审批',
-    };
-  }
-
-  /** 批量操作需要授权 */
-  _checkBatch(req, rule) {
-    if (!req.action?.includes('batch_')) {
-      return null;
-    }
-    if (req.data?.authorized || req.authorized) {
-      return null;
-    }
-    return { rule: rule.id, reason: '缺少授权标志', suggestion: '添加 authorized: true' };
-  }
-
-  // ─── 辅助方法 ──────────────────────────────────────────
-
-  _verb(action) {
-    if (!action) {
-      return '';
-    }
-    return action.includes(':') ? action.split(':').pop() : action;
-  }
-
-  _resource(action, resource) {
-    if (action?.includes(':')) {
-      return action.split(':')[0];
-    }
-    if (typeof resource === 'string' && resource.startsWith('/')) {
-      const m = resource.match(/^\/([^/]+)/);
-      return m ? m[1] : resource;
-    }
-    return resource || '';
-  }
-
-  _isAI(actor) {
-    return ['external_agent', 'chat_agent'].some((a) => actor?.toLowerCase().includes(a));
-  }
-
-  // ─── 旧格式兼容 ───────────────────────────────────────
-
-  /** 兼容旧 priorities 格式 */
-  async _checkLegacyPriority(priority, request) {
-    const violations = [];
-    if (priority.id === 1) {
-      const v = this._checkDestructive(request, { id: 'destructive_confirm' });
-      if (v) {
-        violations.push(v);
-      }
-      const v2 = this._checkContent(request, { id: 'content_required' });
-      if (v2) {
-        violations.push(v2);
-      }
-    }
-    if (priority.id === 2) {
-      const v = this._checkAiRecipe(request, { id: 'ai_no_direct_recipe' });
-      if (v) {
-        violations.push(v);
-      }
-      const v2 = this._checkBatch(request, { id: 'batch_authorized' });
-      if (v2) {
-        violations.push(v2);
-      }
-    }
-    return violations;
-  }
-}
-
-export default ConstitutionValidator;