dsh-rule-engine 0.6.3 → 0.6.5

package/scripts/health-audit.mjs

@@ -1,66 +0,0 @@
-// health-audit.mjs - 健康审计（找茬，不是证明；2026-08-26）。
-// 输出"问题清单"（近 24h），无问题也要列出"查了什么"：
-// ① 失败/降级类统计：intent-llm（成功/失败降级）、judge-pass/false/unavailable、
-//    verify-gap、inject-skip、source-skip——失败可见化（"LLM 意图 31 次全降级"从此自浮现）；
-// ② 接口接线交叉：关键导出符号在 lib 下引用计数 ≤1（仅定义，无引用）→ 疑似未接线；
-// ③ 与 verify-all 的真实判例口径一致（供人工核对）。
-import { readdirSync, statSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const root = join(dirname(fileURLToPath(import.meta.url)), "..");
-const auditPath = join(process.env.DSH_HOME || join(process.env.USERPROFILE || "", ".dsh"), "rule-engine.log.jsonl");
-const now = Date.now();
-const cuts = { intentFail: 0, intentOk: 0, judgePass: 0, judgeFalse: 0, judgeUnavail: 0, verifyGap: 0, injectSkip: 0, sourceSkip: 0, denyTotal: 0, labelIncorrect: 0, labelCorrect: 0, errorHint: 0 };
-
-try {
-  for (const line of readFileSync(auditPath, "utf8").split("\n")) {
-    const m = line.match(/"ts":"([^"]+)"/);
-    if (!m || now - new Date(m[1]).getTime() > 24 * 3600 * 1000) continue;
-    if (line.includes('"kind":"intent-llm"')) (line.includes("LLM 失败降级") ? cuts.intentFail++ : cuts.intentOk++);
-    if (line.includes('"kind":"judge-pass"')) cuts.judgePass++;
-    if (line.includes('"kind":"judge-false"')) cuts.judgeFalse++;
-    if (line.includes('"kind":"judge-unavailable"')) cuts.judgeUnavail++;
-    if (line.includes('"kind":"verify-gap"')) cuts.verifyGap++;
-    if (line.includes('"kind":"inject-skip"')) cuts.injectSkip++;
-    if (line.includes('"kind":"source-skip"')) cuts.sourceSkip++;
-    if (line.includes('"kind":"deny"')) cuts.denyTotal++;
-    if (line.includes('"kind":"task-label"') && line.includes("incorrect")) cuts.labelIncorrect++;
-    if (line.includes('"kind":"task-label"') && line.includes("correct")) cuts.labelCorrect++;
-    if (line.includes('"kind":"error-hint"')) cuts.errorHint++;
-  }
-} catch {
-  // 无日志文件：一切 0
-}
-
-// ② 接线交叉：导出符号引用计数（>1 = 定义+引用；=1 = 疑似仅定义未接线）
-const EXPORTS = [
-  "setSessionWorkspaceRoot", "setWorkspaceRoots", "isVerificationCommand",
-  "isNegatingSuggestion", "isPromiseQuoteContext", "judgeViolation",
-  "shouldDetectTurn", "shouldDeliver", "isReadOnlyCommand"
-];
-let libText = "";
-(function walk(d) {
-  for (const f of readdirSync(d)) {
-    const p = join(d, f);
-    if (statSync(p).isDirectory()) walk(p);
-    else if (/\.js$/.test(f)) libText += readFileSync(p, "utf8") + "\n";
-  }
-})(join(root, "lib"));
-const orphans = EXPORTS.filter((n) => ((libText.match(new RegExp("\\b" + n + "\\b", "g")) || []).length) <= 1);
-
-console.log("== 健康审计（近 24h）==");
-console.log(`intent-llm 失败降级 ${cuts.intentFail} 条 / 成功 ${cuts.intentOk} 条`);
-console.log(`judge-pass ${cuts.judgePass} 条 / judge-false ${cuts.judgeFalse} 条 / judge-unavailable ${cuts.judgeUnavail} 条`);
-console.log(`verify-gap ${cuts.verifyGap} 条 / inject-skip ${cuts.injectSkip} 条 / source-skip ${cuts.sourceSkip} 条`);
-console.log(`误判打标（建议4）：deny 总数 ${cuts.denyTotal} 条 → label incorrect ${cuts.labelIncorrect} 条 / correct ${cuts.labelCorrect} 条${cuts.denyTotal > 0 && cuts.labelIncorrect > 0 ? `（incorrect 占比 ${(cuts.labelIncorrect / cuts.denyTotal * 100).toFixed(1)}%）` : ""}——词表迭代量化依据`);
-console.log(`已知坑召回（建议5）：error-hint ${cuts.errorHint} 条`);
-console.log(`接线交叉：${EXPORTS.length} 个关键导出 → 疑似未接线 ${orphans.length ? orphans.join("、") : "0 个"}`);
-if (cuts.judgePass + cuts.judgeFalse === 0) {
-  console.log("⚠️ 问题：近 24h 无真实判例——裁决器无运行证据（需实弹）");
-}
-if (cuts.intentFail > 0) {
-  console.log(`⚠️ 问题：intent-llm 失败降级 ${cuts.intentFail} 条——LLM 意图判定不可用（需查模型路由/密钥）`);
-}
-console.log(orphans.length ? `❌ 问题：疑似未接线：${orphans.join("、")}` : `✅ 接线：全部导出有引用`);
-console.log("（已查：失败统计 8 类 + 接线交叉 9 个导出；无问题也列出如上）");

package/scripts/lib/pnpm-exempt.mjs

@@ -1,56 +0,0 @@
-// pnpm-exempt.mjs — pnpm-workspace minimumReleaseAgeExclude 豁免判定（verify-all ⑬ 与 release-plugin 预插共享单源）
-// 约定（exempt 语义）：行含包名（`pkg@`）且版本段任一匹配——yaml 支持 `- pkg@1.5.3 || 1.5.4` 形态（段可带/不带包名前缀）
-import { readFileSync, writeFileSync } from "node:fs";
-
-export function exemptPkg(wsYaml, pkg, ver) {
-  if (typeof wsYaml !== "string" || wsYaml.length === 0) return false;
-  return wsYaml.split(/\r?\n/).some((l) => l.includes(`${pkg}@`) && l.split(/\s*\|\|\s*/).some((tok) => {
-    const t = tok.trim().replace(/^-\s*/, "");
-    return t === ver || t === `${pkg}@${ver}`;
-  }));
-}
-
-/** 追加豁免行（已存在=幂等跳过；返回 {yaml, added}） */
-export function addExemptLine(wsYaml, pkg, ver) {
-  if (exemptPkg(wsYaml, pkg, ver)) return { yaml: wsYaml, added: false };
-  const sep = wsYaml.endsWith("\n") ? "" : "\n";
-  return { yaml: `${wsYaml}${sep}  - ${pkg}@${ver}\n`, added: true };
-}
-
-/** 读 yaml（fail-closed：读取失败抛错，调用方中止发布） */
-export function readYamlOrThrow(path) {
-  try {
-    const text = readFileSync(path, "utf8");
-    if (!text.includes("minimumReleaseAgeExclude")) throw new Error(`yaml 缺 minimumReleaseAgeExclude 块：${path}`);
-    return text;
-  } catch (e) {
-    if (e.code === "ENOENT") throw new Error(`yaml 不存在（fail-closed）：${path}`);
-    throw e;
-  }
-}
-
-/**
- * 预插核心（release-plugin bump 后 publish 前调用；单测可注入 dryRun/write/log）：
- * 已存在=幂等跳过；yaml 缺失/坏=抛错（fail-closed）；dryRun=只打印不写。
- */
-export function ensureExempt(yamlPath, pkgName, ver, opts = {}) {
-  const { dryRun = false, write = (p, c) => writeFileSync(p, c, "utf8"), log = console.log } = opts;
-  let yaml;
-  try {
-    yaml = readYamlOrThrow(yamlPath);
-  } catch (e) {
-    throw new Error(`豁免预插失败（fail-closed 中止）：${e.message}`);
-  }
-  const { yaml: nextYaml, added } = addExemptLine(yaml, pkgName, ver);
-  if (dryRun) {
-    log(`[DRY-RUN] 豁免预插：${added ? `将追加 ${pkgName}@${ver}` : `已存在（幂等跳过）`}`);
-    return { added, dryRun: true };
-  }
-  if (added) {
-    write(yamlPath, nextYaml);
-    log(`豁免预插：+ ${pkgName}@${ver}`);
-  } else {
-    log(`豁免预插：${pkgName}@${ver} 已存在（幂等跳过）`);
-  }
-  return { added };
-}

package/scripts/local-residue-scan.mjs

@@ -1,46 +0,0 @@
-#!/usr/bin/env node
-// local-residue-scan.mjs — 发布物本机痕迹扫描（仅扫 lib/；无 --pack 模式）
-// 用法：node scripts/local-residue-scan.mjs   （在包根目录运行；exit 0 = 干净，exit 1 = 有命中）
-
-import { readdirSync, statSync, readFileSync } from "node:fs";
-import { join, extname } from "node:path";
-import { fileURLToPath } from "node:url";
-import { dirname } from "node:path";
-
-const root = join(dirname(fileURLToPath(import.meta.url)), "..");
-
-// 词表唯一源（2026-09-09 起配置化）：本机 rule-engine.json 的 dualtrack.markers 优先，
-// 其次 DUALTRACK_MARKERS 环境变量，最后回退包内示例文件——见 lib/core/dualtrack-markers.js。
-// 理由：词表是**发布者私有数据**，不应随公开仓库/包分发。
-import { loadMarkers } from "../lib/core/dualtrack-markers.js";
-const { markers: MARKERS, source: MARKERS_SOURCE } = loadMarkers({ root });
-if (MARKERS.length === 0) {
-  console.error("REFUSED: 本机标识词表为空——请在 rule-engine.json 配置 dualtrack.markers，或设置 DUALTRACK_MARKERS 环境变量");
-  process.exit(1);
-}
-// 注意：不扫 package.json（作者署名/仓库地址为合法项，A6 口径见其节）；tool-catalog.js 的
-// dev_/esr_/engram_ 前缀规则按阶段 A「关键裁决 3」保留，静态枚举列 0.6.x 跟进。
-
-const TEXT_EXT = new Set([".js", ".mjs", ".cjs", ".json", ".md", ".yml", ".yaml"]);
-function* walk(dir) {
-  for (const e of readdirSync(dir)) {
-    const p = join(dir, e);
-    const s = statSync(p);
-    if (s.isDirectory()) { if (e !== "node_modules" && e !== ".git") yield* walk(p); }
-    else if (TEXT_EXT.has(extname(e))) yield p;
-  }
-}
-
-let hits = 0;
-for (const file of walk(join(root, "lib"))) {
-  const text = readFileSync(file, "utf8");
-  for (const m of MARKERS) {
-    const lines = text.split("\n");
-    lines.forEach((line, i) => {
-      if (line.includes(m)) { console.log(`HIT  ${file}:${i + 1}  [${m}]  ${line.trim()}`); hits++; }
-    });
-  }
-}
-
-if (hits) { console.error(`\nRESIDUE SCAN FAILED（${hits} 处本机痕迹）`); process.exit(1); }
-console.log("RESIDUE SCAN OK（发布面零本机痕迹）");

package/scripts/plugins.json

@@ -1,10 +0,0 @@
-{
-  "profile": "web",
-  "plugins": [
-    {
-      "name": "dsh-rule-engine",
-      "dir": ".",
-      "repo": "jilian-dsh/dsh-rule-engine"
-    }
-  ]
-}

package/scripts/probe-home.mjs

@@ -1,3 +0,0 @@
-// probe-home.mjs - 实测 resolveDshHome 解析结果（同 host 用的 @deepseek-ai/dsh-home-paths）
-import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
-console.log("resolveDshHome():", resolveDshHome());

package/scripts/probe-intent.mjs

@@ -1,14 +0,0 @@
-// probe-intent.mjs - 测"落"字为何被判问句（用户明确执行却拦）
-import { parseUserIntents, shouldDenyMutation } from "../lib/core/intent.js";
-const texts = [
-  "2、连同上面这条一起落",
-  "连上面这条一起落",
-  "落",
-  "全部一起落",
-  "认可全部link不装npm形态",
-  "1、认可形态 2、连上面这条一起落"
-];
-for (const t of texts) {
-  const r = parseUserIntents(t);
-  console.log(`"${t}" → hasExecute=${r.hasExecute} hasQuestion=${r.hasQuestion} types=${r.clauses.map((c) => c.type).join(",")}`);
-}

package/scripts/publish-aptitude-check.mjs

@@ -1,102 +0,0 @@
-// publish-aptitude-check.mjs — 发布适用性门禁（T6，2026-08-31）
-// 目的：兑现 README「通用化」承诺的"陌生人视角"检查——发布物必须先证明：
-//   ① 无 AGENTS.md（陌生环境冷启动）：引擎零错 / 零死映射 / 零意外拦截面
-//   ② 空白规则文件：静默（0 规则、无错、无 dead）
-//   ③ 任意编号规则（非本机编号）：声明式绑定与"纯自证"分流行为正确
-//   ④ 四要素 + 执行等级格式的最小规则：actions/handler 解析正确（README 格式契约冒烟）
-//   ⑤ 发布物个人标识扫描：files 白名单内文件不得含本机个人标识（本地用户名/真实路径/邮箱/私人注释）
-// 默认模式 = 单进程纯函数链（不 spawn、不 import index.js，沙箱可直接跑）；
-// --deep 模式 = 额外子进程全链冷启动（临时 DSH_HOME + 完整引擎加载 + 真实裁决链，需完整权限/CI）。
-// 用法：node scripts/publish-aptitude-check.mjs [--deep] [--tgz <路径>]
-import { mkdtempSync, writeFileSync, rmSync, readFileSync, readdirSync, statSync, existsSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join, dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const args = process.argv.slice(2);
-const deep = args.includes("--deep");
-const tgzArg = args.includes("--tgz") ? args[args.indexOf("--tgz") + 1] : null;
-
-const FAILS = [];
-function check(ok, msg) {
-  console.log(`${ok ? "✅" : "❌"} ${msg}`);
-  if (!ok) FAILS.push(msg);
-}
-
-// ①-④ 使用的纯函数链（与引擎 lib 同源，动态 import 保证读到本次代码）
-const { loadRules } = await import("../lib/core/parser.js");
-const { understandAll, understandRule, analyzeCoverage, defaultHandlerMapSize } = await import("../lib/core/understander.js");
-
-// ── ① 陌生环境冷启动（临时 DSH_HOME，无 AGENTS.md）──
-const sceneDir = mkdtempSync(join(tmpdir(), "aptitude-check-"));
-process.env.DSH_HOME = sceneDir;
-process.env.DSH_WORKSPACE = root;
-{
-  const parsed = loadRules();
-  check(parsed.ok === false && parsed.missing === true, `① 无 AGENTS.md：处理器返回 missing（ok=${parsed.ok}, missing=${parsed.missing}）`);
-  const configs = understandAll([]);
-  check(configs.length === 0, "① 无 AGENTS.md：理解产物为空（不产生任何规则）");
-  const { dead, uncovered } = analyzeCoverage(configs);
-  // 残余1 剥离后：代码层无默认表（通用部署空表）→ dead=0；关键断言 = 无规则被声称机器执行（uncovered=0）且冷启动零报错
-  check(dead.size === 0, `① 无 AGENTS.md：dead=0（代码层无默认偏好表）`);
-  check(uncovered.length === 0, `① 无 AGENTS.md：零未覆盖（uncovered=0）`);
-}
-
-// ── ② 空白规则文件静默 ──
-{
-  writeFileSync(join(sceneDir, "AGENTS.md"), "", "utf8");
-  const parsed = loadRules();
-  check(parsed.ok === true && parsed.rules.length === 0, `② 空白 AGENTS.md：解析成功且 0 规则（rules=${parsed.rules.length}）`);
-  const configs = understandAll(parsed.rules);
-  check(configs.length === 0, "② 空白 AGENTS.md：理解产物为空");
-}
-
-// ── ③ 任意编号规则（非本机编号）：声明式绑定 + 纯自证分流 ──
-{
-  const arbitrary = {
-    index: "X-77",
-    title: "陌生用户规则（执行等级：A+D）",
-    section: "自定义分区",
-    level: "A+D",
-    body: "- **触发**：使用内联命令。\n- **检查**：拦 node -e / pwsh -c。\n- **动作**：拒绝。\n- **豁免**：无。"
-  };
-  const plain = understandRule(arbitrary);
-  check(plain.handler === "", "③ 任意编号 + 无声明：handler 为空（纯自证分流，不误绑定本机执行器）");
-  check(plain.actions.includes("deny") && plain.actions.includes("self-certify"), "③ 任意编号：A+D 动作解析正确（deny+self-certify）");
-  const declared = understandRule({ ...arbitrary, body: arbitrary.body + "\n<!-- handler: rule12a-approval -->" });
-  check(declared.handler === "rule12a-approval", "③ 任意编号 + 声明：绑定指定执行器");
-  const covered = analyzeCoverage(understandAll([arbitrary]));
-  check(covered.uncovered.some((u) => u.ruleId === "X-77"), "③ 任意编号 A 级无 handler：被标记未覆盖（提示正确）");
-  // 通用化闭环：defaultMap 清空 → 陌生规则无兜底绑定（纯声明式世界，不借道本机偏好表）；
-  // 注：analyzeCoverage 自省对象恒为本机默认表（体检对象），不受 defaultMap 影响。
-  const bare = understandRule(arbitrary, { defaultMap: {} });
-  check(bare.handler === "", "③ defaultMap 清空：陌生规则无兜底绑定（纯声明式世界）");
-}
-
-// ── ④ 四要素 + 执行等级格式契约冒烟（README 格式）──
-{
-  const elem = understandRule({
-    index: "E-1",
-    title: "格式样例（执行等级：B + D）",
-    section: "样例分区",
-    level: "B + D",
-    body: "- **触发**：触发条件。\n- **检查**：检查项。\n- **动作**：动作说明。\n- **豁免**：豁免说明。"
-  });
-  check(elem.elements.trigger.length > 0 && elem.elements.check.length > 0 && elem.elements.action.length > 0 && elem.elements.exemption.length > 0, "④ 四要素提取完整");
-  check(elem.actions.includes("correct") && elem.actions.includes("self-certify"), "④ 组合等级 B + D 动作解析正确");
-  check(elem.confidence === "high", "④ 四要素齐全 → 置信 high");
-}
-
-// ── ⑤（2026-09-04 本机化：存在性判据 + 个人词表扫描移入本机发行工具
-//    scripts/scan-real-paths.mjs（判据库 scripts/lib/realpath-guard.js），
-//    本文件只保留 ①-④ 通用发布适用性检查；发布前由本机 release-gate 统一执行门禁）──
-
-// ── --deep：完整引擎链冷启动（子进程，需完整权限/CI；沙箱不可用）──
-if (deep) {
-  console.log("\n（--deep 模式：请确认在完整权限/CI 环境运行——子进程捕获受沙箱限制）");
-}
-
-rmSync(sceneDir, { recursive: true, force: true });
-console.log(`\n${FAILS.length === 0 ? "ADEPTITUDE CHECK PASS" : `ADEPTITUDE CHECK FAIL（${FAILS.length} 项）`}`);
-process.exit(FAILS.length === 0 ? 0 : 1);

package/scripts/readme-version-check.mjs

@@ -1,41 +0,0 @@
-#!/usr/bin/env node
-// readme-version-check.mjs — README 版本四性一致性门禁
-// 检查：package.json version == README 徽章 == README 正文"当前版本 X" == 版本历史表含当前版本 == 发行固定源锚定当前版本
-// 用法：node scripts/readme-version-check.mjs   （在包根目录运行；exit 0 = 一致，exit 1 = 不一致）
-
-import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { dirname, join } from "node:path";
-
-const root = join(dirname(fileURLToPath(import.meta.url)), "..");
-const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
-const readme = readFileSync(join(root, "README.md"), "utf8");
-const ver = pkg.version;
-
-let failures = [];
-const ok = (cond, label, detail) => {
-  if (cond) console.log(`PASS  ${label}`);
-  else { failures.push(label); console.log(`FAIL  ${label} — ${detail}`); }
-};
-
-// 1. 徽章：badge/version-X.Y.Z
-const badge = readme.match(/badge\/version-(\d+\.\d+\.\d+)/);
-ok(badge?.[1] === ver, "徽章=package.json", `徽章=${badge?.[1] ?? "未找到"} vs package=${ver}`);
-
-// 2. 正文"当前版本 X"（允许"当前版本 **X**"）
-const cur = readme.match(/当前版本[^\d]{0,10}(\d+\.\d+\.\d+)/);
-ok(cur?.[1] === ver, "正文当前版本=package.json", `正文=${cur?.[1] ?? "未找到"} vs package=${ver}`);
-
-// 3. 版本历史表包含当前版本行：| **X.Y.Z** | 或 | X.Y.Z |
-const tableHit = new RegExp(`^\\|\\s*\\*{0,2}${ver.replace(/\./g, "\\.")}\\*{0,2}\\s*\\|`, "m").test(readme);
-ok(tableHit, "版本历史表含当前版本行", `未找到 | ${ver} | 行`);
-
-// 4. 发行固定源锚定当前版本："**X（当前）**" 或 "X.Y.Z（当前）"
-const pin = readme.match(/\*\*(\d+\.\d+\.\d+)（当前）\*\*/);
-ok(pin?.[1] === ver, "发行固定源=package.json", `固定源=${pin?.[1] ?? "未找到"} vs package=${ver}`);
-
-if (failures.length) {
-  console.error(`\nVERSION CHECK FAILED（${failures.length} 项不一致）`);
-  process.exit(1);
-}
-console.log(`\nVERSION CHECK OK（${ver} 四处一致）`);