bounty-guard 0.2.0

package/dist/report.js

@@ -0,0 +1,181 @@
+/**
+ * 终端报告渲染与 CI 门禁判定。
+ */
+import { languageOf } from './review.js';
+import { SEVERITY_RANK } from './types.js';
+/** 粘性评论的识别标记：更新而非新建全靠它 */
+export const COMMENT_MARKER = '<!-- bounty-guard-report -->';
+/** 各严重度的中文标签（终端、Markdown 与告警标注共用） */
+export const LABELS = {
+    high: '高危',
+    medium: '中危',
+    low: '低危',
+    info: '提示'
+};
+/** CI 门禁：任一告警达到 failOn 档即应非零退出 */
+export function shouldFail(findings, failOn) {
+    const threshold = SEVERITY_RANK[failOn];
+    return findings.some((f) => SEVERITY_RANK[f.severity] >= threshold);
+}
+/** 渲染中文终端报告，按文件分组 */
+export function renderReport(findings, meta) {
+    const out = [];
+    out.push('bounty-guard 扫描报告');
+    out.push(`来源：${meta.source} ｜ 扫描文件 ${meta.scannedFiles} 个 ｜ 新增行 ${meta.addedLines} 行`);
+    if (meta.review) {
+        const r = meta.review;
+        out.push(`LLM 复核（${r.provider}）：确认 ${r.confirmed} · 误报过滤 ${r.filtered} · 严重度下调 ${r.downgraded}${r.unreviewed ? ` · 未复核 ${r.unreviewed}（保留规则原判）` : ''}`);
+    }
+    out.push('');
+    if (findings.length === 0) {
+        out.push('✅ 未发现问题');
+    }
+    else {
+        const byFile = new Map();
+        for (const f of findings) {
+            const list = byFile.get(f.file);
+            if (list)
+                list.push(f);
+            else
+                byFile.set(f.file, [f]);
+        }
+        for (const [file, list] of byFile) {
+            out.push(file);
+            for (const f of list) {
+                const suffix = f.review
+                    ? f.review.verdict === 'unsure'
+                        ? ' · LLM 未能确证，保留原判'
+                        : f.review.severity
+                            ? ' · 严重度经复核下调'
+                            : ''
+                    : '';
+                out.push(`  [${LABELS[f.severity]}] ${f.ruleId} · 第 ${f.line} 行${suffix}`);
+                out.push(`    ${f.snippet.trim()}`);
+                out.push(`    ⚠ ${f.message}`);
+                if (f.review?.fixSuggestion)
+                    out.push(`    💡 修复建议（复核）：${f.review.fixSuggestion}`);
+                else if (f.fixHint)
+                    out.push(`    💡 ${f.fixHint}`);
+            }
+            out.push('');
+        }
+    }
+    const count = (s) => findings.filter((f) => f.severity === s).length;
+    out.push(`汇总：高危 ${count('high')} · 中危 ${count('medium')} · 低危 ${count('low')} · 提示 ${count('info')}`);
+    return out.join('\n');
+}
+const MD_ICONS = { high: '🔴', medium: '🟠', low: '🟡', info: '🔵' };
+/** Markdown 版报告：PR 粘性评论与 Job Summary 共用 */
+export function renderMarkdownReport(findings, meta) {
+    const out = [];
+    out.push('## 🛡 bounty-guard 扫描报告');
+    out.push('');
+    out.push(`来源：${meta.source} ｜ 扫描文件 ${meta.scannedFiles} 个 ｜ 新增行 ${meta.addedLines} 行`);
+    if (meta.review) {
+        const r = meta.review;
+        out.push('');
+        out.push(`**LLM 复核（${r.provider}）**：确认 ${r.confirmed} · 误报过滤 ${r.filtered} · 严重度下调 ${r.downgraded}${r.unreviewed ? ` · 未复核 ${r.unreviewed}（保留规则原判）` : ''}`);
+    }
+    out.push('');
+    if (findings.length === 0) {
+        out.push('✅ **未发现安全问题**');
+    }
+    else {
+        const count = (s) => findings.filter((f) => f.severity === s).length;
+        out.push(`发现 **${findings.length}** 个问题：${LABELS.high} ${count('high')} · ${LABELS.medium} ${count('medium')} · ${LABELS.low} ${count('low')} · ${LABELS.info} ${count('info')}`);
+        out.push('');
+        for (const f of findings) {
+            out.push(`### ${MD_ICONS[f.severity]} \`${f.file}:${f.line}\` — ${LABELS[f.severity]} · \`${f.ruleId}\``);
+            out.push('');
+            // 代码块围栏升级：片段本身含三反引号时用四反引号包裹
+            const fence = f.snippet.includes('```') ? '````' : '```';
+            const lang = languageOf(f.file);
+            out.push(fence + (lang === 'unknown' ? '' : lang));
+            out.push(f.snippet);
+            out.push(fence);
+            out.push('');
+            out.push(`- ⚠️ ${f.message}`);
+            if (f.review?.fixSuggestion)
+                out.push(`- 💡 复核建议：${f.review.fixSuggestion}`);
+            else if (f.fixHint)
+                out.push(`- 💡 ${f.fixHint}`);
+            if (f.review?.verdict === 'unsure')
+                out.push('- ❓ LLM 未能确证，保留原判');
+            out.push('');
+        }
+    }
+    out.push('---');
+    out.push(`<sub>🤖 由 <a href="https://github.com/Croesus-K/bounty-guard">bounty-guard</a> 自动生成 · 规则初筛${meta.review ? ' + LLM 复核' : ''} · 粘性评论，重复扫描只更新本条</sub>`);
+    out.push('');
+    out.push(COMMENT_MARKER);
+    return out.join('\n');
+}
+/** SARIF 级别映射：high → error，medium → warning，low/info → note */ function sarifLevel(severity) {
+    return severity === 'high' ? 'error' : severity === 'medium' ? 'warning' : 'note';
+}
+/** SARIF 2.1.0 输出：可直接对接 GitHub code-scanning（actions/upload-sarif） */
+export function renderSarif(findings, meta) {
+    const rules = new Map();
+    const results = findings.map((f) => {
+        if (!rules.has(f.ruleId)) {
+            rules.set(f.ruleId, {
+                id: f.ruleId,
+                shortDescription: { text: f.message },
+                defaultConfiguration: { level: sarifLevel(f.severity) }
+            });
+        }
+        return {
+            ruleId: f.ruleId,
+            level: sarifLevel(f.severity),
+            message: { text: f.review?.fixSuggestion ? `${f.message}。${f.review.fixSuggestion}` : f.message },
+            locations: [
+                {
+                    physicalLocation: {
+                        artifactLocation: { uri: f.file.replace(/\\/g, '/') },
+                        region: { startLine: f.line }
+                    }
+                }
+            ]
+        };
+    });
+    return {
+        $schema: 'https://json.schemastore.org/sarif-2.1.0.json',
+        version: '2.1.0',
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: 'bounty-guard',
+                        informationUri: 'https://github.com/Croesus-K/bounty-guard',
+                        rules: [...rules.values()]
+                    }
+                },
+                results,
+                properties: { source: meta.source, scannedFiles: meta.scannedFiles, addedLines: meta.addedLines }
+            }
+        ]
+    };
+}
+/** 周报表格：配合 scripts/weekly-report.ts 定时生成 docs/metrics.md */
+export function renderMetricsTable(rows, date) {
+    const totalAdded = rows.reduce((n, r) => n + r.addedLines, 0);
+    const totalFindings = rows.reduce((n, r) => n + r.findings.length, 0);
+    return [
+        '# 误报率周报',
+        '',
+        `> 自动生成于 ${date} · 来源清单 \`scripts/metrics-prs.txt\` · 样本 ${rows.length} 个真实 PR`,
+        '',
+        '| 指标 | 数值 |',
+        '|---|---|',
+        `| 新增行 | ${totalAdded} |`,
+        `| 命中 | ${totalFindings} |`,
+        '',
+        '| PR | 新增行 | 命中 |',
+        '|---|---|---|',
+        ...rows.map((r) => `| ${r.pr} | ${r.addedLines} | ${r.findings.length === 0 ? '0' : r.findings.join('<br>')} |`),
+        '',
+        '<sub>由 bounty-guard 自动生成，每周五更新</sub>',
+        ''
+    ].join('\n');
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,0BAA0B;AAC1B,MAAM,CAAC,MAAM,cAAc,GAAG,8BAA8B,CAAC;AAE7D,qCAAqC;AACrC,MAAM,CAAC,MAAM,MAAM,GAA6B;IAC9C,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,kCAAkC;AAClC,MAAM,UAAU,UAAU,CAAC,QAAmB,EAAE,MAAgB;IAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;AACtE,CAAC;AAWD,qBAAqB;AACrB,MAAM,UAAU,YAAY,CAAC,QAAmB,EAAE,IAAgB;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,UAAU,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9I,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAClB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM;oBACrB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ;wBAC7B,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;4BACjB,CAAC,CAAC,aAAa;4BACf,CAAC,CAAC,EAAE;oBACR,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa;oBAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;qBAC9E,IAAI,CAAC,CAAC,OAAO;oBAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/E,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,QAAQ,GAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAE/F,2CAA2C;AAC3C,MAAM,UAAU,oBAAoB,CAAC,QAAmB,EAAE,IAAgB;IACxE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACpC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CACN,YAAY,CAAC,CAAC,QAAQ,UAAU,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAClJ,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/E,GAAG,CAAC,IAAI,CACN,QAAQ,QAAQ,CAAC,MAAM,UAAU,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CACxK,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YAC1G,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,4BAA4B;YAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACzD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa;gBAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;iBACxE,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,GAAG,CAAC,IAAI,CACN,6FAA6F,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,yBAAyB,CACrJ,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,+DAA+D,CAAA,SAAS,UAAU,CAAC,QAAkB;IACnG,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACpF,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CACzB,QAAmB,EACnB,IAAgE;IAEhE,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAC;IACJ,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE;gBAClB,EAAE,EAAE,CAAC,CAAC,MAAM;gBACZ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;gBACrC,oBAAoB,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;aACxD,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;YACjG,SAAS,EAAE;gBACT;oBACE,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;wBACrD,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;qBAC9B;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,cAAc;wBACpB,cAAc,EAAE,2CAA2C;wBAC3D,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;qBAC3B;iBACF;gBACD,OAAO;gBACP,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;aAClG;SACF;KACF,CAAC;AACJ,CAAC;AAQD,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAAC,IAAkB,EAAE,IAAY;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,SAAS;QACT,EAAE;QACF,WAAW,IAAI,4CAA4C,IAAI,CAAC,MAAM,SAAS;QAC/E,EAAE;QACF,aAAa;QACb,WAAW;QACX,WAAW,UAAU,IAAI;QACzB,UAAU,aAAa,IAAI;QAC3B,EAAE;QACF,mBAAmB;QACnB,eAAe;QACf,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAChH,EAAE;QACF,sCAAsC;QACtC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/review.d.ts

@@ -0,0 +1,22 @@
+import type { Finding, LLMProvider } from './types.js';
+/** 从文件扩展名推断语言（供 LLM 判断语境） */
+export declare function languageOf(file: string): string;
+export interface ReviewOptions {
+    /** 并发复核数（默认 4） */
+    concurrency?: number;
+    /** 最多送审的告警组数（默认 20）；按严重度优先，超出部分保留规则原判 */
+    maxReviews?: number;
+}
+export interface ReviewOutcome {
+    /** 过滤误报后的最终告警（已复核项挂载 review 结果） */
+    findings: Finding[];
+    /** 被判误报剔除的数量 */
+    filtered: number;
+    /** 严重度被下调的数量 */
+    downgraded: number;
+    /** 实际送入 LLM 的告警数（按条计） */
+    reviewed: number;
+    /** 因超出上限未复核、保留规则原判的告警数 */
+    unreviewed: number;
+}
+export declare function reviewFindings(findings: Finding[], provider: LLMProvider, options?: ReviewOptions): Promise<ReviewOutcome>;

package/dist/review.js

@@ -0,0 +1,98 @@
+/**
+ * 复核流水线：规则候选告警 → LLM 逐条核实 → 过滤误报 / 应用降级。
+ * 约束：LLM 只复核、不发明——本模块只会增改已有 Finding 的复核字段
+ * 或剔除误报，绝不发明新告警；被剔除的误报计数上报（降噪可量化）。
+ *
+ * 成本护栏：
+ * - 相同「规则 + 归一化片段」的告警共享一次复核结论（去重）；
+ * - 按严重度优先送审，超出 maxReviews 的保留规则原判并计入 unreviewed；
+ * - 并发度可调（默认 4），避免大 diff 时逐条串行等待。
+ */
+import { SEVERITY_RANK } from './types.js';
+const LANGUAGE_BY_EXT = {
+    js: 'javascript',
+    mjs: 'javascript',
+    cjs: 'javascript',
+    jsx: 'javascript',
+    ts: 'typescript',
+    tsx: 'typescript',
+    vue: 'vue',
+    html: 'html',
+    css: 'css',
+    py: 'python',
+    go: 'go',
+    java: 'java',
+    php: 'php',
+    rb: 'ruby',
+    sql: 'sql'
+};
+/** 从文件扩展名推断语言（供 LLM 判断语境） */
+export function languageOf(file) {
+    const dot = file.lastIndexOf('.');
+    if (dot === -1 || dot === file.length - 1)
+        return 'unknown';
+    return LANGUAGE_BY_EXT[file.slice(dot + 1).toLowerCase()] ?? 'unknown';
+}
+export async function reviewFindings(findings, provider, options = {}) {
+    const concurrency = Math.max(1, Math.floor(options.concurrency ?? 4));
+    const maxReviews = Math.max(1, Math.floor(options.maxReviews ?? 20));
+    // 按「规则 + 归一化片段」分组去重：同组告警共享一次复核结论
+    const groups = new Map();
+    for (const finding of findings) {
+        const key = `${finding.ruleId}|${finding.snippet.trim()}`;
+        const group = groups.get(key);
+        if (group)
+            group.push(finding);
+        else
+            groups.set(key, [finding]);
+    }
+    // 复核优先级：严重度高的组先送审
+    const ordered = [...groups.entries()].sort((a, b) => SEVERITY_RANK[b[1][0].severity] - SEVERITY_RANK[a[1][0].severity]);
+    const toReview = ordered.slice(0, maxReviews);
+    const verdicts = new Map();
+    let cursor = 0;
+    const worker = async () => {
+        for (;;) {
+            const index = cursor++;
+            if (index >= toReview.length)
+                return;
+            const [key, group] = toReview[index];
+            const sample = group[0];
+            const request = {
+                ruleId: sample.ruleId,
+                severity: sample.severity,
+                snippet: sample.snippet,
+                language: languageOf(sample.file),
+                context: sample.contextLines
+            };
+            verdicts.set(key, await provider.review(request));
+        }
+    };
+    await Promise.all(Array.from({ length: Math.min(concurrency, toReview.length) }, worker));
+    const kept = [];
+    let filtered = 0;
+    let downgraded = 0;
+    let reviewed = 0;
+    for (const [key, group] of groups.entries()) {
+        const review = verdicts.get(key);
+        if (!review) {
+            kept.push(...group); // 超出上限：保留规则原判
+            continue;
+        }
+        for (const finding of group) {
+            reviewed++;
+            if (review.verdict === 'false-positive') {
+                filtered++;
+                continue; // 误报剔除——降噪主通道
+            }
+            const result = { ...finding, review };
+            if (review.severity && SEVERITY_RANK[review.severity] < SEVERITY_RANK[result.severity]) {
+                result.severity = review.severity; // 只可能下调（适配器已丢弃上调建议，这里双保险）
+                downgraded++;
+            }
+            kept.push(result);
+        }
+    }
+    return { findings: kept, filtered, downgraded, reviewed, unreviewed: findings.length - reviewed };
+}
+//# sourceMappingURL=review.js.map

package/dist/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../src/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,MAAM,eAAe,GAA2B;IAC9C,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,YAAY;IACjB,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,MAAM;IACV,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,6BAA6B;AAC7B,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,SAAS,CAAC;AACzE,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAmB,EACnB,QAAqB,EACrB,UAAyB,EAAE;IAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAErE,iCAAiC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEpD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;YACvB,IAAI,KAAK,IAAI,QAAQ,CAAC,MAAM;gBAAE,OAAO;YACrC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,OAAO,GAAqB;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM,CAAC,YAAY;aAC7B,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAE1F,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc;YACnC,SAAS;QACX,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,QAAQ,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACxC,QAAQ,EAAE,CAAC;gBACX,SAAS,CAAC,cAAc;YAC1B,CAAC;YACD,MAAM,MAAM,GAAY,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvF,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,0BAA0B;gBAC7D,UAAU,EAAE,CAAC;YACf,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;AACpG,CAAC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,6 @@
+import type { Rule, RuleContext } from './model.js';
+export type { Rule, RuleContext } from './model.js';
+/** 当前注册的全部规则（JS 种子规则 + Python 子集，数组顺序即运行顺序） */
+export declare const ALL_RULES: Rule[];
+/** 对单个新增行运行全部规则，返回命中的规则列表 */
+export declare function runRules(ctx: RuleContext): Rule[];

package/dist/rules/index.js

@@ -0,0 +1,9 @@
+import { PYTHON_RULES } from './python.js';
+import { SEED_RULES } from './seeds.js';
+/** 当前注册的全部规则（JS 种子规则 + Python 子集，数组顺序即运行顺序） */
+export const ALL_RULES = [...SEED_RULES, ...PYTHON_RULES];
+/** 对单个新增行运行全部规则，返回命中的规则列表 */
+export function runRules(ctx) {
+    return ALL_RULES.filter((rule) => rule.detect(ctx));
+}
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAIxC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,SAAS,GAAW,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;AAElE,6BAA6B;AAC7B,MAAM,UAAU,QAAQ,CAAC,GAAgB;IACvC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/rules/model.d.ts

@@ -0,0 +1,24 @@
+import type { Severity } from '../types.js';
+/**
+ * 规则判定上下文：只暴露「单行 + 周边窗口」，规则不做跨文件分析——
+ * 这既控制成本，也逼着规则把误报率压在行级判断里。
+ */
+export interface RuleContext {
+    /** 新文件路径（已按 ignore 过滤） */
+    file: string;
+    /** 新文件中的行号 */
+    line: number;
+    /** 命中行原文（不含换行符） */
+    content: string;
+    /** hunk 内命中行前后各至多 3 行的 add/context 行文本（不含命中行自身） */
+    context: string[];
+}
+/** 规则模型：每条规则必须自带中文描述与修复建议 */
+export interface Rule {
+    id: string;
+    severity: Severity;
+    message: string;
+    fixHint: string;
+    /** 返回 true 表示命中；只在新增行上被调用 */
+    detect(ctx: RuleContext): boolean;
+}

package/dist/rules/model.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=model.js.map

package/dist/rules/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/rules/model.ts"],"names":[],"mappings":""}

package/dist/rules/python.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from './model.js';
+export declare const PYTHON_RULES: Rule[];

package/dist/rules/python.js

@@ -0,0 +1,88 @@
+/**
+ * Python 规则子集（多语言第一步）。
+ * 只在 .py 文件上运行；判定倾向与 JS 规则一致：宁可漏报不可误报。
+ * Python 注释以 # 开头，匹配前简易剔除（字符串含 # 时宁可漏报）。
+ */
+function isPython(file) {
+    return file.toLowerCase().endsWith('.py');
+}
+function stripPyComment(line) {
+    return line.split('#')[0];
+}
+function mentionsAny(code, context, word) {
+    return word.test(code) || context.some((l) => word.test(l));
+}
+/** P1. Python 动态执行：eval / exec / compile */
+const PY_DANGEROUS_EVAL = {
+    id: 'py-dangerous-eval',
+    severity: 'high',
+    message: '使用动态代码执行（eval / exec / compile），注入面直接暴露给不可信输入',
+    fixHint: '改用 ast.literal_eval、json.loads 或查表映射等显式解析',
+    detect(ctx) {
+        if (!isPython(ctx.file))
+            return false;
+        const code = stripPyComment(ctx.content);
+        return (/(?:^|[^\w.])eval\s*\(/.test(code) ||
+            /(?:^|[^\w.])exec\s*\(/.test(code) ||
+            /\bcompile\s*\(/.test(code));
+    }
+};
+/** P2. Python 弱哈希（MD5/SHA1）用于密码 */
+const PY_WEAK_HASH_PASSWORD = {
+    id: 'py-weak-hash-password',
+    severity: 'high',
+    message: '对密码相关数据使用 MD5/SHA1，可被高速暴力破解',
+    fixHint: '改用 bcrypt / passlib 的 CryptContext（argon2/bcrypt）并加盐',
+    detect(ctx) {
+        if (!isPython(ctx.file))
+            return false;
+        const code = stripPyComment(ctx.content);
+        if (!/\b(?:md5|sha1)\s*\(/i.test(code))
+            return false;
+        return mentionsAny(code, ctx.context, /(password|passwd|pwd|密码)/i);
+    }
+};
+/** P3. Python SQL 字符串拼接（+ / % 元组 / .format / f-string 插值） */
+const PY_SQL_CONCAT = {
+    id: 'py-sql-concat',
+    severity: 'high',
+    message: 'SQL 语句通过字符串拼接引入变量，存在注入风险',
+    fixHint: '改用参数化查询（占位符 + 参数元组）或 ORM 的绑定参数',
+    detect(ctx) {
+        if (!isPython(ctx.file))
+            return false;
+        const code = stripPyComment(ctx.content);
+        const sql = /(?:\bselect\b.{0,120}?\bfrom\b|\binsert\s+into\b|\bupdate\s+\S+.{0,60}?\bset\b|\bdelete\s+from\b)/i.test(code);
+        if (!sql)
+            return false;
+        const fString = /\bf['"]/.test(code) && /\{/.test(code);
+        return /\+/.test(code) || /\bformat\s*\(/.test(code) || /%\s*\(/.test(code) || fString;
+    }
+};
+/** P4. Python 硬编码密钥（模块级常量形态） */
+const PY_HARDCODED_SECRET = {
+    id: 'py-hardcoded-secret',
+    severity: 'high',
+    message: '疑似把密钥/口令硬编码进源码，泄露即失控',
+    fixHint: '改从环境变量（os.environ）或密钥管理服务读取，并轮换已泄露的旧值',
+    detect(ctx) {
+        if (!isPython(ctx.file))
+            return false;
+        const code = ctx.content.split('#')[0];
+        const m = code.match(/^\s*([A-Za-z0-9_]*(?:secret|api_?key|access_?key|private_?key|password|passwd|token)[A-Za-z0-9_]*)\s*=\s*(['"])(.{8,}?)\2\s*$/i);
+        if (!m)
+            return false;
+        if (/(os\.environ|getenv|config\[|config\.)/i.test(code))
+            return false;
+        if (/(your|example|placeholder|xxx|changeme|<[^>]*>)/i.test(m[3]))
+            return false;
+        return true;
+    }
+};
+export const PYTHON_RULES = [
+    PY_DANGEROUS_EVAL,
+    PY_WEAK_HASH_PASSWORD,
+    PY_SQL_CONCAT,
+    PY_HARDCODED_SECRET
+];
+//# sourceMappingURL=python.js.map

package/dist/rules/python.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python.js","sourceRoot":"","sources":["../../src/rules/python.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAiB,EAAE,IAAY;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,4CAA4C;AAC5C,MAAM,iBAAiB,GAAS;IAC9B,EAAE,EAAE,mBAAmB;IACvB,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,+CAA+C;IACxD,OAAO,EAAE,2CAA2C;IACpD,MAAM,CAAC,GAAG;QACR,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,CACL,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,mCAAmC;AACnC,MAAM,qBAAqB,GAAS;IAClC,EAAE,EAAE,uBAAuB;IAC3B,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,6BAA6B;IACtC,OAAO,EAAE,sDAAsD;IAC/D,MAAM,CAAC,GAAG;QACR,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IACrE,CAAC;CACF,CAAC;AAEF,6DAA6D;AAC7D,MAAM,aAAa,GAAS;IAC1B,EAAE,EAAE,eAAe;IACnB,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,gCAAgC;IACzC,MAAM,CAAC,GAAG;QACR,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GACP,oGAAoG,CAAC,IAAI,CACvG,IAAI,CACL,CAAC;QACJ,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;IACzF,CAAC;CACF,CAAC;AAEF,gCAAgC;AAChC,MAAM,mBAAmB,GAAS;IAChC,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,uCAAuC;IAChD,MAAM,CAAC,GAAG;QACR,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAClB,gIAAgI,CACjI,CAAC;QACF,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,kDAAkD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,iBAAiB;IACjB,qBAAqB;IACrB,aAAa;IACb,mBAAmB;CACpB,CAAC"}

package/dist/rules/seeds.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from './model.js';
+export declare const SEED_RULES: Rule[];