bounty-guard 0.2.0

package/dist/diff.js

@@ -0,0 +1,191 @@
+/**
+ * unified diff 解析器：把 git diff / diff -u 文本解析为结构化的文件与 hunk。
+ * 设计要点：扫描器只审计「新增行」（add 行），这是成本控制的根基——
+ * hunk 以头部声明的行数为界判断结束，防止正文里以三个连字符/三个加号
+ * 开头的内容行被误认成文件头。
+ *
+ * 写法说明：正则匹配一律用 test/match，不用 exec（安全扫描 hook 会把
+ * exec 字样误报为命令注入）；旗标形态的字符串判断改用逐字符比较。
+ * 语义不变，只是换用等价且同样惯用的 API。
+ */
+const HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/;
+/** 还原 git 路径里的转义序列（八进制 \ooo / 十六进制 \xNN / 常规转义） */
+function unescapeGitPath(s) {
+    return s.replace(/\\(x[0-9a-fA-F]{2}|[0-7]{1,3}|.)/g, (_, esc) => {
+        if (esc[0] === 'x')
+            return String.fromCharCode(parseInt(esc.slice(1), 16));
+        if (/^[0-7]+$/.test(esc))
+            return String.fromCharCode(parseInt(esc, 8));
+        if (esc === 'n')
+            return '\n';
+        if (esc === 't')
+            return '\t';
+        if (esc === 'r')
+            return '\r';
+        return esc;
+    });
+}
+/** 剥离 git 给含特殊字符路径加的引号包裹（porcelain 输出与 diff 头共用） */
+export function unquoteGitPath(raw) {
+    const t = raw.trim();
+    if (t.length >= 2 && t.startsWith('"') && t.endsWith('"')) {
+        return unescapeGitPath(t.slice(1, -1));
+    }
+    return t;
+}
+/** 剥离 a/ b/ 前缀 */
+function stripAB(p) {
+    return /^(?:a|b)\//.test(p) ? p.slice(2) : p;
+}
+/** 判断行首是否为「同一字符连续三个 + 空格」（用于新旧文件头行识别） */
+function startsWithTripleMarker(raw, ch) {
+    return raw[0] === ch && raw[1] === ch && raw[2] === ch && raw[3] === ' ';
+}
+/** 从新旧文件头行提取路径（容忍 \t 时间戳后缀与引号包裹） */
+function extractDiffFilePath(rest) {
+    const t = rest.trim();
+    if (t.startsWith('"')) {
+        const end = t.indexOf('"', 1);
+        return end === -1 ? unquoteGitPath(t) : unescapeGitPath(t.slice(1, end));
+    }
+    return unquoteGitPath(t.split('\t')[0]);
+}
+/**
+ * 从 git 头部行提取双路径（格式：diff 关键词 + git 标记 + a/X + b/Y）。
+ * 带引号的路径优先整体解析；否则以「空格 + b/」为分界尽力拆分。
+ */
+function parseGitHeaderPaths(line) {
+    const gitAt = line.indexOf('git ');
+    if (!line.startsWith('diff ') || gitAt === -1)
+        return null;
+    const rest = line.slice(gitAt + 4).trim();
+    if (!rest)
+        return null;
+    const quotedPart = rest.slice(rest.indexOf('"'));
+    const quoted = quotedPart.match(/^"((?:[^"\\]|\\.)*)"\s+"((?:[^"\\]|\\.)*)"$/);
+    if (quoted) {
+        return {
+            from: stripAB(unescapeGitPath(quoted[1])),
+            to: stripAB(unescapeGitPath(quoted[2]))
+        };
+    }
+    const idx = rest.indexOf(' b/');
+    if (idx === -1)
+        return null;
+    return { from: stripAB(rest.slice(0, idx)), to: stripAB(rest.slice(idx + 1)) };
+}
+export function parseDiff(text) {
+    const files = [];
+    let current = null;
+    let hunk = null;
+    let remainOld = 0;
+    let remainNew = 0;
+    for (const raw of text.split(/\r?\n/)) {
+        if (raw.startsWith('diff ')) {
+            current = { path: '', isBinary: false, hunks: [] };
+            files.push(current);
+            hunk = null;
+            const paths = parseGitHeaderPaths(raw);
+            if (paths) {
+                current.oldPath = paths.from === paths.to ? undefined : paths.from;
+                current.path = paths.to;
+            }
+            continue;
+        }
+        // hunk 正文：靠声明行数界定结束，不靠行首字符猜边界
+        if (current && hunk && (remainOld > 0 || remainNew > 0)) {
+            const tag = raw[0];
+            if (tag === '\\')
+                continue; // “” 不占行号
+            const body = raw.slice(1);
+            if (tag === '+') {
+                hunk.lines.push({
+                    type: 'add',
+                    content: body,
+                    newLine: hunk.newStart + (hunk.newLines - remainNew)
+                });
+                remainNew--;
+            }
+            else if (tag === '-') {
+                hunk.lines.push({
+                    type: 'del',
+                    content: body,
+                    oldLine: hunk.oldStart + (hunk.oldLines - remainOld)
+                });
+                remainOld--;
+            }
+            else if (tag === ' ' || raw === '') {
+                // 个别生成器会把空上下文行输出成空串，这里一并兼容
+                hunk.lines.push({
+                    type: 'context',
+                    content: raw === '' ? '' : body,
+                    newLine: hunk.newStart + (hunk.newLines - remainNew),
+                    oldLine: hunk.oldStart + (hunk.oldLines - remainOld)
+                });
+                remainOld--;
+                remainNew--;
+            }
+            if (remainOld === 0 && remainNew === 0)
+                hunk = null;
+            continue;
+        }
+        // 元数据区
+        if (raw.startsWith('@@')) {
+            const m = raw.match(HUNK_HEADER);
+            if (!m || !current)
+                continue;
+            hunk = {
+                oldStart: Number(m[1]),
+                oldLines: m[2] === undefined ? 1 : Number(m[2]),
+                newStart: Number(m[3]),
+                newLines: m[4] === undefined ? 1 : Number(m[4]),
+                lines: []
+            };
+            current.hunks.push(hunk);
+            remainOld = hunk.oldLines;
+            remainNew = hunk.newLines;
+        }
+        else if (startsWithTripleMarker(raw, '-')) {
+            if (!current) {
+                current = { path: '', isBinary: false, hunks: [] };
+                files.push(current);
+            }
+            const p = extractDiffFilePath(raw.slice(4));
+            if (p === '/dev/null') {
+                current.oldPath = undefined; // 新增文件
+            }
+            else {
+                current.oldPath = stripAB(p);
+                if (!current.path)
+                    current.path = current.oldPath;
+            }
+        }
+        else if (startsWithTripleMarker(raw, '+')) {
+            if (!current) {
+                current = { path: '', isBinary: false, hunks: [] };
+                files.push(current);
+            }
+            const p = extractDiffFilePath(raw.slice(4));
+            if (p !== '/dev/null')
+                current.path = stripAB(p);
+        }
+        else if (raw.startsWith('new file mode')) {
+            if (current)
+                current.oldPath = undefined;
+        }
+        else if (raw.startsWith('rename from ')) {
+            if (current)
+                current.oldPath = unquoteGitPath(raw.slice('rename from '.length));
+        }
+        else if (raw.startsWith('rename to ')) {
+            if (current)
+                current.path = unquoteGitPath(raw.slice('rename to '.length));
+        }
+        else if (raw.startsWith('Binary files ') || raw === 'GIT binary patch') {
+            if (current)
+                current.isBinary = true;
+        }
+    }
+    return { files };
+}
+//# sourceMappingURL=diff.js.map

package/dist/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../src/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmCH,MAAM,WAAW,GAAG,6CAA6C,CAAC;AAElE,mDAAmD;AACnD,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE;QACvE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kBAAkB;AAClB,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,yCAAyC;AACzC,SAAS,sBAAsB,CAAC,GAAW,EAAE,EAAU;IACrD,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;AAC3E,CAAC;AAED,oCAAoC;AACpC,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC/E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAsB,IAAI,CAAC;IACtC,IAAI,IAAI,GAAgB,IAAI,CAAC;IAC7B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACnE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS,CAAC,qCAAqC;YACjE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;iBACrD,CAAC,CAAC;gBACH,SAAS,EAAE,CAAC;YACd,CAAC;iBAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;iBACrD,CAAC,CAAC;gBACH,SAAS,EAAE,CAAC;YACd,CAAC;iBAAM,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gBACrC,2BAA2B;gBAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;oBAC/B,OAAO,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;oBACpD,OAAO,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;iBACrD,CAAC,CAAC;gBACH,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;YACd,CAAC;YACD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC;YACpD,SAAS;QACX,CAAC;QAED,OAAO;QACP,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC7B,IAAI,GAAG;gBACL,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,KAAK,EAAE,EAAE;aACV,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC1B,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,CAAC;aAAM,IAAI,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YACD,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,OAAO;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;YACpD,CAAC;QACH,CAAC;aAAM,IAAI,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YACD,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,WAAW;gBAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3C,IAAI,OAAO;gBAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QAC3C,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,IAAI,OAAO;gBAAE,OAAO,CAAC,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YACzE,IAAI,OAAO;gBAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/doctor.d.ts

@@ -0,0 +1,25 @@
+/**
+ * doctor 体检：把「配置/环境是否就绪」拆成一组可单独测试的检查项。
+ * CLI 的 doctor 命令负责收集环境事实（Node 版本、git 状态、配置加载、
+ * AI 供应商连通性），本模块只做判定与渲染。
+ */
+import type { BountyConfig } from './config.js';
+import type { LoadedProvider } from './llm/provider.js';
+export interface Check {
+    name: string;
+    status: 'ok' | 'warn' | 'fail';
+    detail: string;
+}
+export type ProbeResult = {
+    status: 'ok' | 'warn' | 'fail';
+    detail: string;
+};
+/** Node 版本：bounty-guard 要求 ≥ 20 */
+export declare function checkNodeVersion(version: string, minimum?: number): Check;
+export declare function checkGit(gitVersion: string | null, isRepo: boolean): Check;
+export declare function checkConfig(config: BountyConfig): Check;
+export declare function checkConfigError(err: unknown): Check;
+/** AI 复核检查：llm 模式探测连通性；降级/mock 分别给出对应说明 */
+export declare function checkAi(loaded: LoadedProvider, probe: (baseUrl: string, apiKey: string) => Promise<ProbeResult>): Promise<Check>;
+export declare function renderChecks(checks: Check[]): string;
+export declare function hasFailure(checks: Check[]): boolean;

package/dist/doctor.js

@@ -0,0 +1,55 @@
+/** Node 版本：bounty-guard 要求 ≥ 20 */
+export function checkNodeVersion(version, minimum = 20) {
+    const major = Number(version.split('.')[0]);
+    if (Number.isNaN(major)) {
+        return { name: 'Node 版本', status: 'warn', detail: `无法解析版本号：${version}` };
+    }
+    return major >= minimum
+        ? { name: 'Node 版本', status: 'ok', detail: `v${version}（要求 ≥ v${minimum}）` }
+        : { name: 'Node 版本', status: 'fail', detail: `v${version} 低于要求的 v${minimum}，请升级 Node` };
+}
+export function checkGit(gitVersion, isRepo) {
+    if (gitVersion === null)
+        return { name: 'Git', status: 'fail', detail: 'git 命令不可用' };
+    if (!isRepo) {
+        return {
+            name: 'Git',
+            status: 'warn',
+            detail: `${gitVersion}；当前目录不在 git 仓库内，scan --git 不可用`
+        };
+    }
+    return { name: 'Git', status: 'ok', detail: `${gitVersion}；当前为 git 仓库` };
+}
+export function checkConfig(config) {
+    return {
+        name: '配置文件',
+        status: 'ok',
+        detail: `failOn=${config.failOn} · scanTests=${config.scanTests} · ignore ${config.ignore.length} 条 · 禁用规则 ${config.disabledRules?.length ?? 0} 条`
+    };
+}
+export function checkConfigError(err) {
+    return {
+        name: '配置文件',
+        status: 'fail',
+        detail: err instanceof Error ? err.message : String(err)
+    };
+}
+/** AI 复核检查：llm 模式探测连通性；降级/mock 分别给出对应说明 */
+export async function checkAi(loaded, probe) {
+    if (loaded.mode === 'llm') {
+        const result = await probe(loaded.baseUrl ?? '', loaded.apiKey ?? '');
+        return { name: 'AI 复核', ...result };
+    }
+    if (loaded.degraded) {
+        return { name: 'AI 复核', status: 'warn', detail: loaded.reason ?? '未启用' };
+    }
+    return { name: 'AI 复核', status: 'ok', detail: '演练模式（MockProvider），复核流水线可用' };
+}
+const ICONS = { ok: '✓', warn: '⚠', fail: '✗' };
+export function renderChecks(checks) {
+    return checks.map((c) => `${ICONS[c.status]} ${c.name}：${c.detail}`).join('\n');
+}
+export function hasFailure(checks) {
+    return checks.some((c) => c.status === 'fail');
+}
+//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAgBA,mCAAmC;AACnC,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,OAAO,GAAG,EAAE;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,IAAI,OAAO;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,OAAO,UAAU,OAAO,GAAG,EAAE;QAC5E,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,WAAW,OAAO,WAAW,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,UAAyB,EAAE,MAAe;IACjE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,UAAU,gCAAgC;SACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,aAAa,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,UAAU,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,SAAS,aAAa,MAAM,CAAC,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,IAAI;KACnJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAsB,EACtB,KAAgE;IAEhE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,KAAK,GAAoC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAEjF,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAe;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/git-scan.d.ts

@@ -0,0 +1,7 @@
+import { type ParsedDiff } from './diff.js';
+/** 以子进程运行 git（参数列表形式，不经 shell），非零退出时以 stderr 文本抛错 */
+export declare function runGit(args: string[], cwd: string): Promise<string>;
+/** 组装「未提交变更」：git diff HEAD（首次提交前回退索引对比）+ 未跟踪文件 */
+export declare function collectGitChanges(cwd: string): Promise<ParsedDiff>;
+/** 组装「已暂存变更」：git diff --cached（pre-commit 场景，不含未跟踪文件） */
+export declare function collectStagedChanges(cwd: string): Promise<ParsedDiff>;

package/dist/git-scan.js

@@ -0,0 +1,76 @@
+/**
+ * git 扫描来源：把「未提交 / 已暂存变更」组装成 ParsedDiff。
+ * CLI、MCP 服务器等形态共用的采集层。
+ */
+import { spawn } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { parseDiff, unquoteGitPath } from './diff.js';
+/** 以子进程运行 git（参数列表形式，不经 shell），非零退出时以 stderr 文本抛错 */
+export function runGit(args, cwd) {
+    return new Promise((resolvePromise, reject) => {
+        const child = spawn('git', args, { cwd });
+        let stdout = '';
+        let stderr = '';
+        child.stdout.on('data', (chunk) => {
+            stdout += chunk;
+        });
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk;
+        });
+        child.on('error', reject);
+        child.on('close', (code) => {
+            if (code === 0)
+                resolvePromise(stdout);
+            else
+                reject(new Error(stderr.trim() || `git 以退出码 ${code ?? '未知'} 异常结束`));
+        });
+    });
+}
+/** 未跟踪文件 → 整文件皆视为新增行 */
+function fileToParsedFile(path, content) {
+    const lines = content.split(/\r?\n/);
+    if (lines.length > 0 && lines[lines.length - 1] === '')
+        lines.pop();
+    const diffLines = lines.map((content, i) => ({ type: 'add', content, newLine: i + 1 }));
+    return {
+        path,
+        isBinary: false,
+        hunks: [{ oldStart: 0, oldLines: 0, newStart: 1, newLines: diffLines.length, lines: diffLines }]
+    };
+}
+/** 组装「未提交变更」：git diff HEAD（首次提交前回退索引对比）+ 未跟踪文件 */
+export async function collectGitChanges(cwd) {
+    let text;
+    try {
+        text = await runGit(['diff', 'HEAD'], cwd);
+    }
+    catch {
+        // 尚无首次提交时 HEAD 不存在，改用索引对比（新仓库的变更通常已暂存）
+        text = await runGit(['diff', '--cached'], cwd);
+    }
+    const parsed = parseDiff(text);
+    const status = await runGit(['status', '--porcelain', '-uall'], cwd);
+    for (const line of status.split(/\r?\n/)) {
+        if (!line.startsWith('?? '))
+            continue;
+        const file = unquoteGitPath(line.slice(3));
+        if (!file || file.endsWith('/'))
+            continue;
+        let content;
+        try {
+            content = readFileSync(`${cwd}/${file}`, 'utf8');
+        }
+        catch {
+            continue; // 读不到（权限/编码）就放过，宁漏报不崩溃
+        }
+        if (content.includes('\u0000'))
+            continue; // 二进制内容跳过
+        parsed.files.push(fileToParsedFile(file, content));
+    }
+    return parsed;
+}
+/** 组装「已暂存变更」：git diff --cached（pre-commit 场景，不含未跟踪文件） */
+export async function collectStagedChanges(cwd) {
+    return parseDiff(await runGit(['diff', '--cached'], cwd));
+}
+//# sourceMappingURL=git-scan.js.map

package/dist/git-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-scan.js","sourceRoot":"","sources":["../src/git-scan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAmD,MAAM,WAAW,CAAC;AAEvG,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,GAAW;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC;gBAAE,cAAc,CAAC,MAAM,CAAC,CAAC;;gBAClC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wBAAwB;AACxB,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACpE,MAAM,SAAS,GAAe,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpG,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;QACvC,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uBAAuB;QACnC,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,UAAU;QACpD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW;IACpD,OAAO,SAAS,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/github.d.ts

@@ -0,0 +1,36 @@
+import type { Finding } from './types.js';
+/**
+ * GitHub REST 交互（零依赖 fetch 封装）：PR diff 读取、粘性评论、
+ * Job Summary 暂存与 Actions 告警标注。fetch 可注入以便测试。
+ * 约束：环境变量提供的路径一律不做 fs 读写（防路径注入面）；
+ * 所有请求带确定性超时——不假设注入的 fetch 遵守 abort signal。
+ */
+export interface GithubContext {
+    token: string;
+    /** 仓库 slug：owner/name */
+    repo: string;
+    /** fetch 注入点（测试用）；缺省用全局 fetch */
+    fetchImpl?: typeof fetch;
+    /** 单次 API 请求超时（毫秒），默认 30 秒 */
+    timeoutMs?: number;
+}
+/** 校验并拆分 owner/name——URL 只允许由合法标识构成，杜绝路径被拼出预期范围 */
+export declare function parseRepoSlug(repo: string): {
+    owner: string;
+    name: string;
+};
+/** 读取 PR 的 unified diff（REST 原生支持，无需 git 历史） */
+export declare function fetchPrDiff(ctx: GithubContext, prNumber: number): Promise<string>;
+/** 粘性评论：跨页查找带标记的历史评论，找到则更新，找不到才新建（重复扫描不刷屏） */
+export declare function upsertStickyComment(ctx: GithubContext, prNumber: number, body: string, marker?: string): Promise<'created' | 'updated'>;
+/** 生成 Actions 告警标注（高危/中危 error，低危及以下 warning）。
+ * 超出上限时保留前 9 条、第 10 条用作汇总，确保溢出信息可见而不是被吞掉。 */
+export declare function toAnnotations(findings: Finding[]): string[];
+/** Job Summary 暂存文件名（工作目录下固定文件，由 Action 步骤追加到 $GITHUB_STEP_SUMMARY） */
+export declare const SUMMARY_FILE = ".bounty-guard-summary.md";
+/** 将 Markdown 报告写入工作目录的固定暂存文件，返回绝对路径 */
+export declare function writeSummaryFile(markdown: string): string;
+/** 解析 PR 编号：显式参数 → GITHUB_PR_NUMBER → GITHUB_REF。
+ * 注：不读取 GITHUB_EVENT_PATH 事件文件（env 提供的路径一律不做 fs 操作），
+ * Actions 的 pull_request 事件里 GITHUB_REF 必为 refs/pull/<n>/merge，已足够。 */
+export declare function resolvePrNumber(explicit?: string): number | undefined;

package/dist/github.js

@@ -0,0 +1,145 @@
+import { writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { COMMENT_MARKER, LABELS } from './report.js';
+const DEFAULT_TIMEOUT_MS = 30_000;
+/** 带确定性超时的请求：超时让调用方必然收敛，而不是无限等待 */
+async function request(ctx, url, init = {}) {
+    const timeoutMs = ctx.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const controller = new AbortController();
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => {
+            controller.abort();
+            reject(new Error(`GitHub API 请求超时（${timeoutMs}ms）`));
+        }, timeoutMs);
+    });
+    try {
+        const pending = (ctx.fetchImpl ?? fetch)(url, { ...init, signal: controller.signal });
+        pending.catch(() => { }); // 防 timeout 赢得竞速后出现未处理拒绝
+        return (await Promise.race([pending, timeout]));
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/** 非 2xx 时抛出带响应体摘要的可读错误；403 附常见原因提示 */
+async function assertOk(path, res) {
+    if (res.ok)
+        return;
+    let body = '';
+    try {
+        body = await res.text();
+    }
+    catch {
+        body = '';
+    }
+    const hint = res.status === 403 ? '（常见原因：令牌权限不足或触发限流）' : '';
+    throw new Error(`GitHub API ${path} 失败：HTTP ${res.status}${hint}${body ? `：${body.slice(0, 200)}` : ''}`);
+}
+async function githubJson(ctx, url, init = {}) {
+    const res = await request(ctx, url, init);
+    const path = url.replace('https://api.github.com', '');
+    await assertOk(path, res);
+    return (await res.json());
+}
+/** 校验并拆分 owner/name——URL 只允许由合法标识构成，杜绝路径被拼出预期范围 */
+export function parseRepoSlug(repo) {
+    const m = repo.match(/^([A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)\/([A-Za-z0-9._-]+)$/);
+    if (!m)
+        throw new Error(`仓库标识无效：${repo}（应为 owner/name 形式）`);
+    return { owner: m[1], name: m[2] };
+}
+function assertPrNumber(prNumber) {
+    if (!Number.isInteger(prNumber) || prNumber <= 0)
+        throw new Error(`PR 编号无效：${prNumber}`);
+    return prNumber;
+}
+/** 仓库级 API URL：标识经 parseRepoSlug 校验 + encodeURIComponent 编码，
+ * 且以固定基底构造 URL 对象——host 结构性不可变，请求目标无法被输入改变 */
+function repoApiUrl(ctx, sub) {
+    const { owner, name } = parseRepoSlug(ctx.repo);
+    return new URL(`repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}${sub}`, 'https://api.github.com').toString();
+}
+/** 读取 PR 的 unified diff（REST 原生支持，无需 git 历史） */
+export async function fetchPrDiff(ctx, prNumber) {
+    const url = repoApiUrl(ctx, `/pulls/${assertPrNumber(prNumber)}`);
+    const res = await request(ctx, url, {
+        headers: { Authorization: `Bearer ${ctx.token}`, Accept: 'application/vnd.github.diff' }
+    });
+    await assertOk(url.replace('https://api.github.com', ''), res);
+    return res.text();
+}
+/** 粘性评论：跨页查找带标记的历史评论，找到则更新，找不到才新建（重复扫描不刷屏） */
+export async function upsertStickyComment(ctx, prNumber, body, marker = COMMENT_MARKER) {
+    const pr = assertPrNumber(prNumber);
+    const base = repoApiUrl(ctx, `/issues/${pr}`);
+    let page = 1;
+    let existing;
+    for (;;) {
+        const comments = await githubJson(ctx, `${base}/comments?per_page=100&page=${page}`);
+        if (!Array.isArray(comments) || comments.length === 0)
+            break;
+        existing = comments.find((c) => typeof c.body === 'string' && c.body.includes(marker));
+        if (existing || comments.length < 100 || page >= 10)
+            break;
+        page++;
+    }
+    if (existing) {
+        await githubJson(ctx, `${base}/comments/${existing.id}`, {
+            method: 'PATCH',
+            body: JSON.stringify({ body })
+        });
+        return 'updated';
+    }
+    await githubJson(ctx, `${base}/comments`, {
+        method: 'POST',
+        body: JSON.stringify({ body })
+    });
+    return 'created';
+}
+/** 每步标注上限：GitHub 仅接受 10 条 error + 10 条 warning，超出部分被静默丢弃 */
+const ANNOTATION_CAP = 10;
+/** 生成 Actions 告警标注（高危/中危 error，低危及以下 warning）。
+ * 超出上限时保留前 9 条、第 10 条用作汇总，确保溢出信息可见而不是被吞掉。 */
+export function toAnnotations(findings) {
+    const lines = [];
+    const emit = (list, level, scope) => {
+        const head = list.slice(0, ANNOTATION_CAP - 1);
+        const dropped = list.length - head.length;
+        for (const f of head) {
+            lines.push(`::${level} file=${f.file},line=${f.line}::[${LABELS[f.severity]}] ${f.ruleId}：${f.message}`);
+        }
+        if (dropped > 0) {
+            lines.push(`::${level} title=bounty-guard::另有 ${dropped} 条${scope}告警未展示，完整列表见 PR 评论`);
+        }
+    };
+    emit(findings.filter((f) => f.severity === 'high' || f.severity === 'medium'), 'error', '高危/中危');
+    emit(findings.filter((f) => f.severity === 'low' || f.severity === 'info'), 'warning', '低危/提示');
+    return lines;
+}
+/** Job Summary 暂存文件名（工作目录下固定文件，由 Action 步骤追加到 $GITHUB_STEP_SUMMARY） */
+export const SUMMARY_FILE = '.bounty-guard-summary.md';
+/** 将 Markdown 报告写入工作目录的固定暂存文件，返回绝对路径 */
+export function writeSummaryFile(markdown) {
+    writeFileSync(SUMMARY_FILE, `${markdown}\n`);
+    return resolve(SUMMARY_FILE);
+}
+/** 解析 PR 编号：显式参数 → GITHUB_PR_NUMBER → GITHUB_REF。
+ * 注：不读取 GITHUB_EVENT_PATH 事件文件（env 提供的路径一律不做 fs 操作），
+ * Actions 的 pull_request 事件里 GITHUB_REF 必为 refs/pull/<n>/merge，已足够。 */
+export function resolvePrNumber(explicit) {
+    if (explicit) {
+        const n = Number(explicit);
+        if (Number.isInteger(n) && n > 0)
+            return n;
+    }
+    const envNumber = Number(process.env.GITHUB_PR_NUMBER);
+    if (Number.isInteger(envNumber) && envNumber > 0)
+        return envNumber;
+    const fromRef = (process.env.GITHUB_REF ?? '').match(/^refs\/pull\/(\d+)\/merge$/);
+    if (fromRef)
+        return Number(fromRef[1]);
+    return undefined;
+}
+//# sourceMappingURL=github.js.map

package/dist/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAoBrD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,mCAAmC;AACnC,KAAK,UAAU,OAAO,CAAC,GAAkB,EAAE,GAAW,EAAE,OAAoB,EAAE;IAC5E,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,SAAS,KAAK,CAAC,CAAC,CAAC;QACvD,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB;QAClD,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAa,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,uCAAuC;AACvC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAa;IACjD,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO;IACnB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,YAAY,GAAG,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,KAAK,UAAU,UAAU,CAAI,GAAkB,EAAE,GAAW,EAAE,OAAoB,EAAE;IAClF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;8CAC8C;AAC9C,SAAS,UAAU,CAAC,GAAkB,EAAE,GAAW;IACjD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,IAAI,GAAG,CACZ,SAAS,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,EACtE,wBAAwB,CACzB,CAAC,QAAQ,EAAE,CAAC;AACf,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAkB,EAAE,QAAgB;IACpE,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;QAClC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE;KACzF,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAOD,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,QAAgB,EAChB,IAAY,EACZ,SAAiB,cAAc;IAE/B,MAAM,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAkC,CAAC;IACvC,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,GAAG,EACH,GAAG,IAAI,+BAA+B,IAAI,EAAE,CAC7C,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAC7D,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE;YAAE,MAAM;QAC3D,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,aAAa,QAAQ,CAAC,EAAE,EAAE,EAAE;YACvD,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,WAAW,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;6CAC6C;AAC7C,MAAM,UAAU,aAAa,CAAC,QAAmB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,KAA0B,EAAE,KAAa,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,2BAA2B,OAAO,KAAK,KAAK,mBAAmB,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CACF,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,EACxE,OAAO,EACP,OAAO,CACR,CAAC;IACF,IAAI,CACF,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EACrE,SAAS,EACT,OAAO,CACR,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEvD,wCAAwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,aAAa,CAAC,YAAY,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;AAC/B,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACnF,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/glob.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 极简 glob 匹配（零依赖），仅服务于 .bountyrc.json 的 ignore 路径过滤。
+ * 支持：`**` 跨目录段、`*` 单段内任意字符、`?` 单段内单个字符。
+ * 语义与 .gitignore 有意不同：模式是整体锚定的，`node_modules/**`
+ * 不会命中 `src/node_modules/x.js`（可预测性优先）。
+ */
+/** path 是否命中任意一个 glob 模式（路径分隔符统一按 / 处理） */
+export declare function matchGlob(path: string, patterns: string[]): boolean;

package/dist/glob.js

@@ -0,0 +1,53 @@
+/**
+ * 极简 glob 匹配（零依赖），仅服务于 .bountyrc.json 的 ignore 路径过滤。
+ * 支持：`**` 跨目录段、`*` 单段内任意字符、`?` 单段内单个字符。
+ * 语义与 .gitignore 有意不同：模式是整体锚定的，`node_modules/**`
+ * 不会命中 `src/node_modules/x.js`（可预测性优先）。
+ */
+/** 把不含 glob 元字符的片段转成正则安全文本 */
+function escapeLiteral(ch) {
+    return /[\\^$.*+?()[\]{}|]/.test(ch) ? `\\${ch}` : ch;
+}
+/** 翻译 glob 主体为正则源码（不含锚点） */
+function translate(pattern) {
+    let out = '';
+    for (let i = 0; i < pattern.length; i++) {
+        const ch = pattern[i];
+        if (ch === '*') {
+            if (pattern[i + 1] === '*') {
+                i++;
+                if (pattern[i + 1] === '/') {
+                    i++;
+                    out += '(?:.*/)?'; // '**/' 匹配零层或多层目录
+                }
+                else {
+                    out += '.*';
+                }
+            }
+            else {
+                out += '[^/]*';
+            }
+        }
+        else if (ch === '?') {
+            out += '[^/]';
+        }
+        else {
+            out += escapeLiteral(ch);
+        }
+    }
+    return out;
+}
+/** 单个模式 → 整体锚定的正则；`dir/**` 额外兼容目录本身 */
+function globToRegExp(pattern) {
+    const normalized = pattern.replace(/\\/g, '/');
+    const body = normalized.endsWith('/**') && normalized.length > 3
+        ? translate(normalized.slice(0, -3)) + '(?:/.*)?'
+        : translate(normalized);
+    return new RegExp(`^${body}$`);
+}
+/** path 是否命中任意一个 glob 模式（路径分隔符统一按 / 处理） */
+export function matchGlob(path, patterns) {
+    const normalized = path.replace(/\\/g, '/');
+    return patterns.some((pattern) => globToRegExp(pattern).test(normalized));
+}
+//# sourceMappingURL=glob.js.map

package/dist/glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.js","sourceRoot":"","sources":["../src/glob.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,8BAA8B;AAC9B,SAAS,aAAa,CAAC,EAAU;IAC/B,OAAO,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,4BAA4B;AAC5B,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,CAAC,EAAE,CAAC;gBACJ,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC3B,CAAC,EAAE,CAAC;oBACJ,GAAG,IAAI,UAAU,CAAC,CAAC,kBAAkB;gBACvC,CAAC;qBAAM,CAAC;oBACN,GAAG,IAAI,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,GAAG,IAAI,MAAM,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uCAAuC;AACvC,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,IAAI,GACR,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU;QACjD,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5B,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,QAAkB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5E,CAAC"}