kcode-pi 0.1.5 → 0.1.7

package/README.md

@@ -61,6 +61,12 @@ kcode context --refresh
 kcode doctor
 ```
 
+查看当前 KCode 版本：
+
+```powershell
+kcode version
+```
+
 启动工作环境：
 
 ```powershell
@@ -236,6 +242,16 @@ kcode context --refresh
 kcode doctor
 ```
 
+### `kcode version`
+
+显示当前 KCode package 版本、安装路径、随包 Pi CLI 版本和 Node 版本。
+
+```powershell
+kcode version
+kcode --version
+kcode -v
+```
+
 ### `kcode start`
 
 启动 KCode 工作环境。
@@ -398,15 +414,32 @@ kd_debug            分析金蝶日志和堆栈
 这些工具不依赖本机 Python：
 
 - `kd_ksql_lint` 是内置 Node 静态检查器。
-- `kd_cosmic_config` 使用 Node 读取并校验 `ok-cosmic.json`。
-- `kd_cosmic_metadata` 使用 `ok-cosmic.json` 中的统一路由 API，并在当前项目 `.pi/kd/official-skills/` 下维护 JSON 缓存。
+- `kd_cosmic_config` 使用 Node 校验 Cosmic 官方能力配置；项目没有 `ok-cosmic.json` 时会自动使用 KCode 随包默认配置。
+- `kd_cosmic_metadata` 使用统一路由 API 查询真实单据/表单元数据，并在当前项目 `.pi/kd/official-skills/` 下维护 JSON 缓存。
 - `kd_cosmic_api` 查询随包金蝶知识库；需要精确方法签名时，仍要结合当前项目 SDK、编译输出或红绿证据确认。
 
+`ok-cosmic.json` 是可选的 KCode 官方能力覆盖配置，不是苍穹工程模板里的 `cosmic.json`。业务项目里的 `cosmic.json` 通常只包含开发者标识、工程标识、MC 资源地址等运行环境信息，不能替代 `ok-cosmic.json`。
+
+只有需要指定企业统一路由 API 或覆盖知识库路径时，才需要在业务项目根目录创建 `ok-cosmic.json`：
+
+```json
+{
+  "graph": {
+    "dbPath": "D:\\path\\to\\ok-cosmic-docs.db"
+  },
+  "route": {
+    "apiUrl": "https://your-runtime-route.example.com/api",
+    "timeoutSeconds": 10
+  }
+}
+```
+
 ## 升级
 
 查看当前安装版本：
 
 ```powershell
+kcode version
 npm ls -g kcode-pi --depth=0
 ```
 

package/dist/cli/kcode.d.ts

@@ -12,5 +12,6 @@ export declare function runKcodeCli(args: string[], cwd?: string): KcodeCliResul
 export declare function initProject(cwd: string): KcodeCliResult;
 export declare function context(cwd: string, args: string[]): KcodeCliResult;
 export declare function doctor(cwd: string): KcodeCliResult;
+export declare function version(): KcodeCliResult;
 export declare function start(cwd: string, piArgs: string[]): KcodeCliResult;
 export declare function resolvePiCliCommand(piArgs?: string[]): PiCliCommand | undefined;

package/dist/cli/kcode.js

@@ -6,7 +6,9 @@ import { createRequire } from "node:module";
 import { ensureProjectContext, writeProjectContext } from "../context/project-context.js";
 const packageRoot = dirname(dirname(dirname(fileURLToPath(import.meta.url))));
 const require = createRequire(import.meta.url);
-const packageName = readPackageName(packageRoot) ?? "kcode-pi";
+const packageMetadata = readPackageMetadata(packageRoot);
+const packageName = packageMetadata.name ?? "kcode-pi";
+const packageVersion = packageMetadata.version ?? "unknown";
 export function runKcodeCli(args, cwd = process.cwd()) {
     const command = args[0] ?? "help";
     switch (command) {
@@ -16,6 +18,10 @@ export function runKcodeCli(args, cwd = process.cwd()) {
             return context(cwd, args.slice(1));
         case "doctor":
             return doctor(cwd);
+        case "version":
+        case "--version":
+        case "-v":
+            return version();
         case "start":
             return start(cwd, args.slice(1));
         case "help":
@@ -57,6 +63,7 @@ export function doctor(cwd) {
     const settingsPath = projectSettingsPath(cwd);
     lines.push(`Node：${node.status === 0 ? node.stdout.trim() : "未找到"}`);
     lines.push(`Pi CLI：${formatPiCliStatus(piCli, pi)}`);
+    lines.push(`KCode version：${packageName}@${packageVersion}`);
     lines.push(`KCode package：${packageRoot}`);
     lines.push(`项目配置：${existsSync(settingsPath) ? settingsPath : "未创建，请先运行 kcode init"}`);
     lines.push(`项目上下文：${existsSync(join(cwd, ".pi", "kd", "PROJECT_CONTEXT.md")) ? join(cwd, ".pi", "kd", "PROJECT_CONTEXT.md") : "未创建，请运行 kcode context"}`);
@@ -70,6 +77,19 @@ export function doctor(cwd) {
         output: lines.join("\n"),
     };
 }
+export function version() {
+    const piCli = resolvePiCliCommand(["--version"]);
+    const pi = piCli ? spawnSync(piCli.command, piCli.args, { encoding: "utf8" }) : undefined;
+    return {
+        exitCode: 0,
+        output: [
+            `${packageName}@${packageVersion}`,
+            `KCode package：${packageRoot}`,
+            `Pi CLI：${formatPiCliStatus(piCli, pi)}`,
+            `Node：${process.version}`,
+        ].join("\n"),
+    };
+}
 export function start(cwd, piArgs) {
     const init = initProject(cwd);
     const piCli = resolvePiCliCommand(piArgs);
@@ -127,12 +147,14 @@ function isSameKcodePackage(candidate, currentPackage) {
     return candidateName === packageName;
 }
 function readPackageName(packagePath) {
+    return readPackageMetadata(packagePath).name;
+}
+function readPackageMetadata(packagePath) {
     try {
-        const packageJson = JSON.parse(readFileSync(join(packagePath, "package.json"), "utf8"));
-        return packageJson.name;
+        return JSON.parse(readFileSync(join(packagePath, "package.json"), "utf8"));
     }
     catch {
-        return undefined;
+        return {};
     }
 }
 function packageNameFromPath(path) {
@@ -182,6 +204,7 @@ function helpText() {
         "  kcode init      初始化当前项目的 .pi/settings.json",
         "  kcode context   生成或刷新 .pi/kd/PROJECT_CONTEXT.md",
         "  kcode doctor    检查 Node、随包 Pi CLI、KCode package 和项目级配置",
+        "  kcode version   显示 KCode、随包 Pi CLI 和 Node 版本",
         "  kcode start     初始化项目配置后启动 KCode 工作环境",
     ].join("\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kcode-pi",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Kingdee-specific package and harness for Pi Coding Agent",
   "type": "module",
   "private": false,

package/src/cli/kcode.ts

@@ -17,7 +17,9 @@ interface PiSettings {
 
 const packageRoot = dirname(dirname(dirname(fileURLToPath(import.meta.url))));
 const require = createRequire(import.meta.url);
-const packageName = readPackageName(packageRoot) ?? "kcode-pi";
+const packageMetadata = readPackageMetadata(packageRoot);
+const packageName = packageMetadata.name ?? "kcode-pi";
+const packageVersion = packageMetadata.version ?? "unknown";
 
 export interface PiCliCommand {
 	command: string;
@@ -36,6 +38,10 @@ export function runKcodeCli(args: string[], cwd = process.cwd()): KcodeCliResult
 			return context(cwd, args.slice(1));
 		case "doctor":
 			return doctor(cwd);
+		case "version":
+		case "--version":
+		case "-v":
+			return version();
 		case "start":
 			return start(cwd, args.slice(1));
 		case "help":
@@ -84,6 +90,7 @@ export function doctor(cwd: string): KcodeCliResult {
 
 	lines.push(`Node：${node.status === 0 ? node.stdout.trim() : "未找到"}`);
 	lines.push(`Pi CLI：${formatPiCliStatus(piCli, pi)}`);
+	lines.push(`KCode version：${packageName}@${packageVersion}`);
 	lines.push(`KCode package：${packageRoot}`);
 	lines.push(`项目配置：${existsSync(settingsPath) ? settingsPath : "未创建，请先运行 kcode init"}`);
 	lines.push(`项目上下文：${existsSync(join(cwd, ".pi", "kd", "PROJECT_CONTEXT.md")) ? join(cwd, ".pi", "kd", "PROJECT_CONTEXT.md") : "未创建，请运行 kcode context"}`);
@@ -100,6 +107,20 @@ export function doctor(cwd: string): KcodeCliResult {
 	};
 }
 
+export function version(): KcodeCliResult {
+	const piCli = resolvePiCliCommand(["--version"]);
+	const pi = piCli ? spawnSync(piCli.command, piCli.args, { encoding: "utf8" }) : undefined;
+	return {
+		exitCode: 0,
+		output: [
+			`${packageName}@${packageVersion}`,
+			`KCode package：${packageRoot}`,
+			`Pi CLI：${formatPiCliStatus(piCli, pi)}`,
+			`Node：${process.version}`,
+		].join("\n"),
+	};
+}
+
 export function start(cwd: string, piArgs: string[]): KcodeCliResult {
 	const init = initProject(cwd);
 	const piCli = resolvePiCliCommand(piArgs);
@@ -168,11 +189,14 @@ function isSameKcodePackage(candidate: string, currentPackage: string): boolean
 }
 
 function readPackageName(packagePath: string): string | undefined {
+	return readPackageMetadata(packagePath).name;
+}
+
+function readPackageMetadata(packagePath: string): { name?: string; version?: string } {
 	try {
-		const packageJson = JSON.parse(readFileSync(join(packagePath, "package.json"), "utf8")) as { name?: string };
-		return packageJson.name;
+		return JSON.parse(readFileSync(join(packagePath, "package.json"), "utf8")) as { name?: string; version?: string };
 	} catch {
-		return undefined;
+		return {};
 	}
 }
 
@@ -229,6 +253,7 @@ function helpText(): string {
 		"  kcode init      初始化当前项目的 .pi/settings.json",
 		"  kcode context   生成或刷新 .pi/kd/PROJECT_CONTEXT.md",
 		"  kcode doctor    检查 Node、随包 Pi CLI、KCode package 和项目级配置",
+		"  kcode version   显示 KCode、随包 Pi CLI 和 Node 版本",
 		"  kcode start     初始化项目配置后启动 KCode 工作环境",
 	].join("\n");
 }

package/src/official/kingdee-skills.ts

@@ -109,8 +109,8 @@ export async function runOfficialCommand(command: OfficialCommand): Promise<Comm
 export async function cosmicConfigCommand(cwd: string, config?: string): Promise<OfficialCommand> {
 	await ensureOfficialSkillRoot(cwd, "ok-cosmic");
 	const configPath = resolveConfigPath(cwd, config);
-	const display = formatCommand("kcode-node:cosmic-config", config ? ["--config", configPath] : []);
-	return officialCommand(display, () => runCosmicConfig(cwd, configPath));
+	const display = formatCommand("kcode-node:cosmic-config", config && configPath ? ["--config", configPath] : []);
+	return officialCommand(display, () => runCosmicConfig(cwd, configPath, Boolean(config)));
 }
 
 export async function cosmicMetadataCommand(
@@ -133,7 +133,7 @@ export async function cosmicMetadataCommand(
 	if (params.fuzzy) args.push("--fuzzy", ...splitTerms(params.fuzzy));
 	if (params.typeFilter) args.push("--type", params.typeFilter);
 	const configPath = resolveConfigPath(cwd, params.config);
-	return officialCommand(formatCommand("kcode-node:cosmic-metadata", args), () => runCosmicMetadata(cwd, configPath, params));
+	return officialCommand(formatCommand("kcode-node:cosmic-metadata", args), () => runCosmicMetadata(cwd, configPath, Boolean(params.config), params));
 }
 
 export async function cosmicApiCommand(
@@ -219,8 +219,10 @@ function officialCommand(display: string, run: () => Promise<Omit<CommandResult,
 	};
 }
 
-function resolveConfigPath(cwd: string, config?: string): string {
-	return config ? resolveWorkspacePath(cwd, config) : resolve(cwd, "ok-cosmic.json");
+function resolveConfigPath(cwd: string, config?: string): string | undefined {
+	if (config) return resolveWorkspacePath(cwd, config);
+	const projectConfig = resolve(cwd, "ok-cosmic.json");
+	return existsSync(projectConfig) ? projectConfig : undefined;
 }
 
 function readJsonObject(path: string): Record<string, unknown> {
@@ -231,20 +233,34 @@ function readJsonObject(path: string): Record<string, unknown> {
 	return data as Record<string, unknown>;
 }
 
-async function runCosmicConfig(_cwd: string, configPath: string): Promise<Omit<CommandResult, "command">> {
+interface LoadedCosmicConfig {
+	config: Record<string, unknown>;
+	path?: string;
+	source: "project" | "explicit" | "bundled";
+	baseDir: string;
+}
+
+async function runCosmicConfig(cwd: string, configPath: string | undefined, explicitConfig: boolean): Promise<Omit<CommandResult, "command">> {
 	const issues: Array<{ level: "OK" | "WARNING" | "ERROR"; key: string; message: string }> = [];
 	issues.push({ level: "OK", key: "runtime.node", message: `Node ${process.version}` });
 
-	let config: Record<string, unknown> | undefined;
+	let loaded: LoadedCosmicConfig | undefined;
 	try {
-		if (!existsSync(configPath)) throw new Error(`找不到配置文件: ${configPath}`);
-		config = readJsonObject(configPath);
-		issues.push({ level: "OK", key: "__file__", message: `已找到配置文件: ${configPath}` });
+		loaded = loadCosmicConfig(cwd, configPath, explicitConfig);
+		if (loaded.path) {
+			issues.push({ level: "OK", key: "__file__", message: `已找到配置文件: ${loaded.path}` });
+		} else {
+			issues.push({
+				level: "WARNING",
+				key: "__file__",
+				message: "当前项目未提供 ok-cosmic.json，已使用 KCode 随包默认配置。项目根目录 cosmic.json 是苍穹工程配置，不是 KCode 官方能力配置。",
+			});
+		}
 	} catch (error) {
 		issues.push({ level: "ERROR", key: "__file__", message: error instanceof Error ? error.message : String(error) });
 	}
 
-	if (config) issues.push(...validateCosmicConfig(config, dirname(configPath)));
+	if (loaded) issues.push(...validateCosmicConfig(loaded.config, loaded.baseDir));
 	const errors = issues.filter((issue) => issue.level === "ERROR").length;
 	const warnings = issues.filter((issue) => issue.level === "WARNING").length;
 	const lines = issues.map((issue) => `[${issue.level}] ${issue.key}: ${issue.message}`);
@@ -252,6 +268,36 @@ async function runCosmicConfig(_cwd: string, configPath: string): Promise<Omit<C
 	return { exitCode: errors ? 1 : 0, stdout: `${lines.join("\n")}\n`, stderr: "" };
 }
 
+function loadCosmicConfig(cwd: string, configPath: string | undefined, explicitConfig: boolean): LoadedCosmicConfig {
+	if (configPath) {
+		if (!existsSync(configPath)) throw new Error(`找不到配置文件: ${configPath}`);
+		return {
+			config: readJsonObject(configPath),
+			path: configPath,
+			source: explicitConfig ? "explicit" : "project",
+			baseDir: dirname(configPath),
+		};
+	}
+	if (explicitConfig) throw new Error("指定的 ok-cosmic.json 配置文件不存在。");
+	return {
+		config: defaultCosmicConfig(),
+		source: "bundled",
+		baseDir: cwd,
+	};
+}
+
+function defaultCosmicConfig(): Record<string, unknown> {
+	return {
+		graph: {
+			dbPath: join(packageRoot, "vendor", "kingdee-skills", "ok-cosmic", "setup", "ok-cosmic-docs.db"),
+		},
+		route: {
+			apiUrl: process.env.COSMIC_ROUTE_API || process.env.COSMIC_RUNTIME_ROUTE_API || "",
+			timeoutSeconds: Number(process.env.COSMIC_ROUTE_TIMEOUT || 10),
+		},
+	};
+}
+
 function validateCosmicConfig(config: Record<string, unknown>, baseDir: string): Array<{ level: "OK" | "WARNING" | "ERROR"; key: string; message: string }> {
 	const issues: Array<{ level: "OK" | "WARNING" | "ERROR"; key: string; message: string }> = [];
 	const graph = objectValue(config.graph);
@@ -308,10 +354,11 @@ function validateCosmicConfig(config: Record<string, unknown>, baseDir: string):
 
 async function runCosmicMetadata(
 	cwd: string,
-	configPath: string,
+	configPath: string | undefined,
+	explicitConfig: boolean,
 	params: { form: string; fuzzy?: string; typeFilter?: string; sql?: boolean; op?: boolean; showDetail?: boolean },
 ): Promise<Omit<CommandResult, "command">> {
-	const config = readJsonObject(configPath);
+	const config = loadCosmicConfig(cwd, configPath, explicitConfig).config;
 	const cache = readMetadataCache(cwd);
 	const targets = params.form.split(/[,，]/).map((item) => item.trim()).filter(Boolean);
 	if (targets.length === 0) return { exitCode: 1, stdout: "", stderr: "必须提供 formId 或中文单据名。" };

package/src/rules/checker.ts

@@ -65,6 +65,7 @@ function checkCosmicReviewerRules(lines: string[]): CheckResult[] {
 		...checkSecurityPatterns(lines),
 		...checkThreadingPatterns(lines),
 		...checkUiPerformance(lines),
+		...checkViewInteractionOrder(lines),
 		...checkLoggingAndDiagnostics(lines),
 	];
 }
@@ -134,6 +135,17 @@ function checkResourceHandling(lines: string[]): CheckResult[] {
 		results.push(makeResult(i, line, "DataSet", "resource", "error", "P0：DataSet 创建后未明显使用 try-with-resources 关闭，可能导致连接泄漏", "p0-dataset-not-closed"));
 	}
 
+	for (let i = 0; i < lines.length; i++) {
+		const line = lines[i];
+		if (isCommentLine(line)) continue;
+		if (/\.\s*getDynamicObject\s*\([^)]*\)\s*\.\s*get(?:String|Long|Int|Integer|Double|Date|PkValue|DynamicObject|DynamicObjectCollection)\s*\(/.test(line)) {
+			results.push(makeResult(i, line, "getDynamicObject", "resource", "warning", "P1：嵌套 DynamicObject 直接取值缺少空值保护，引用字段为空时可能 NPE；先取对象并判空或用安全取值工具", "p1-dynamicobject-chain-null-risk"));
+		}
+		if (/row\s*\.\s*get(?:BigDecimal|String|Long|Int|Integer|Date)\s*\(/.test(line) && !nearbyLineHas(lines, i, -2, /\brow\b\s*(?:!=|==)\s*null|Optional\.ofNullable\s*\(\s*row\s*\)|Objects\.nonNull\s*\(\s*row\s*\)/)) {
+			results.push(makeResult(i, line, "row", "resource", "warning", "P1：DataSet.Row 取值可能返回 null，参与运算或解包前应判空或给默认值", "p1-dataset-row-null-risk"));
+		}
+	}
+
 	return results;
 }
 
@@ -159,6 +171,20 @@ function checkSecurityPatterns(lines: string[]): CheckResult[] {
 		if (/(password|passwd|secret|token|ak|sk)\s*=\s*"[^"]{4,}"/i.test(line)) {
 			results.push(makeResult(i, line, "=", "security", "error", "P0：疑似敏感信息硬编码，请改为安全配置或密文存储", "p0-secret-hardcode"));
 		}
+
+		if (/\bcache\s*\.\s*put\s*\(/i.test(line) || /\bCacheFactory\b/.test(line)) {
+			const statement = collectStatement(lines, i, 5);
+			if (/\bput\s*\(/i.test(statement) && !/(account|acct|tenant|org|dcId|getAccountId|getOrgId|RequestContext|UserServiceHelper)/i.test(statement)) {
+				results.push(makeResult(i, line, "put", "security", "warning", "P1：缓存写入 key 未体现账套/租户/组织隔离，跨账套环境可能串数据", "p1-cache-key-without-tenant"));
+			}
+		}
+
+		if (/\b(openConnection|HttpClient\s*\.|HttpClientBuilder|OkHttpClient|RestTemplate|WebClient)\b/.test(line)) {
+			const statement = collectStatement(lines, i, 8);
+			if (!/(timeout|setConnectTimeout|setReadTimeout|connectTimeout|readTimeout|callTimeout|responseTimeout)/i.test(statement)) {
+				results.push(makeResult(i, line, line.match(/\b(openConnection|HttpClient|HttpClientBuilder|OkHttpClient|RestTemplate|WebClient)\b/)?.[1] ?? "HTTP", "security", "warning", "P1：第三方 HTTP 调用未看到超时设置，生产环境可能阻塞业务线程", "p1-http-without-timeout"));
+			}
+		}
 	}
 
 	return results;
@@ -197,6 +223,22 @@ function checkUiPerformance(lines: string[]): CheckResult[] {
 		if (isInsideLoop(lines, i) && /getFieldIndex\s*\(/.test(line)) {
 			results.push(makeResult(i, line, "getFieldIndex", "performance", "warning", "P1：循环内重复获取 FieldIndex 会造成性能损耗；应在循环外缓存", "p1-loop-field-index"));
 		}
+
+		if (/SerializationUtils\s*\.\s*toJsonString\s*\(/.test(line) && /(view|model|event|page|args|this|getView\s*\(|getModel\s*\(|\be\b)/i.test(line)) {
+			results.push(makeResult(i, line, "SerializationUtils", "performance", "warning", "P1：不要序列化页面、模型或事件大对象做日志，容易造成 CPU 和内存压力；只记录关键字段", "p1-heavy-json-serialization"));
+		}
+
+		const entryUiMatch = line.match(/\bgetView\s*\(\)\s*\.\s*(setEnable|setVisible)\s*\(/);
+		if (entryUiMatch) {
+			const statement = collectStatement(lines, i, 3);
+			const args = extractCallArgs(statement, /(setEnable|setVisible)\s*\(/);
+			if (args.length >= 2 && !looksLikeRowIndexedViewCall(args)) {
+				const fieldArgs = args.slice(1).join(",");
+				if (/(entry|entries|detail|row|qty|price|amount|material|item)/i.test(fieldArgs)) {
+					results.push(makeResult(i, line, entryUiMatch[1], "performance", "warning", "P1：疑似对分录字段使用单头 setEnable/setVisible；分录字段应使用带 rowIndex 的重载", "p1-entry-field-without-row-index"));
+				}
+			}
+		}
 	}
 
 	if (beginInitCount > endInitCount) {
@@ -209,6 +251,45 @@ function checkUiPerformance(lines: string[]): CheckResult[] {
 	return results;
 }
 
+function checkViewInteractionOrder(lines: string[]): CheckResult[] {
+	const results: CheckResult[] = [];
+
+	for (let i = 0; i < lines.length; i++) {
+		const line = lines[i];
+		if (isCommentLine(line)) continue;
+
+		if (/setDataChanged\s*\(\s*false\s*\)/.test(line)) {
+			for (let j = i + 1; j < Math.min(lines.length, i + 25); j++) {
+				if (/^\s*}\s*$/.test(lines[j])) break;
+				if (!isCommentLine(lines[j]) && /(getModel\s*\(\)\s*\.\s*)?setValue\s*\(/.test(lines[j])) {
+					results.push(makeResult(i, line, "setDataChanged", "lifecycle", "warning", "P1：setDataChanged(false) 后仍继续 setValue，脏标记会被重新置回；应放到所有 setValue 之后", "p1-set-data-changed-before-setvalue"));
+					break;
+				}
+			}
+		}
+
+		if (/showConfirm\s*\(/.test(line)) {
+			const statement = collectStatement(lines, i, 8);
+			const args = extractCallArgs(statement, /showConfirm\s*\(/);
+			if (args.length < 3 || /\bnull\b/.test(args[2] ?? "")) {
+				results.push(makeResult(i, line, "showConfirm", "lifecycle", "error", "P0：showConfirm 未提供有效回调监听器，用户选择不会触发业务处理", "p0-show-confirm-without-callback"));
+			}
+		}
+
+		if (/getView\s*\(\)\s*\.\s*close\s*\(/.test(line)) {
+			for (let j = i + 1; j < Math.min(lines.length, i + 10); j++) {
+				if (/^\s*}\s*$/.test(lines[j])) break;
+				if (!isCommentLine(lines[j]) && /returnDataToParent\s*\(/.test(lines[j])) {
+					results.push(makeResult(i, line, "close", "lifecycle", "error", "P0：先 close 再 returnDataToParent 会导致返回数据不执行；应先 returnDataToParent 再 close", "p0-close-before-return-data"));
+					break;
+				}
+			}
+		}
+	}
+
+	return results;
+}
+
 function checkLoggingAndDiagnostics(lines: string[]): CheckResult[] {
 	const results: CheckResult[] = [];
 
@@ -548,6 +629,68 @@ function isInsideLoop(lines: string[], index: number): boolean {
 	return false;
 }
 
+function collectStatement(lines: string[], start: number, maxExtraLines: number): string {
+	const parts: string[] = [];
+	for (let i = start; i < Math.min(lines.length, start + maxExtraLines + 1); i++) {
+		parts.push(lines[i]);
+		if (/[;{}]\s*$/.test(lines[i].trim())) break;
+	}
+	return parts.join("\n");
+}
+
+function extractCallArgs(statement: string, callPattern: RegExp): string[] {
+	const match = callPattern.exec(statement);
+	if (!match || match.index === undefined) return [];
+	const open = statement.indexOf("(", match.index);
+	if (open < 0) return [];
+
+	const args: string[] = [];
+	let depth = 0;
+	let current = "";
+	let quote: "'" | '"' | undefined;
+	for (let i = open + 1; i < statement.length; i++) {
+		const ch = statement[i];
+		const prev = statement[i - 1];
+		if (quote) {
+			current += ch;
+			if (ch === quote && prev !== "\\") quote = undefined;
+			continue;
+		}
+		if (ch === "'" || ch === '"') {
+			quote = ch;
+			current += ch;
+			continue;
+		}
+		if (ch === "(" || ch === "[" || ch === "{") {
+			depth++;
+			current += ch;
+			continue;
+		}
+		if (ch === ")" && depth === 0) {
+			if (current.trim()) args.push(current.trim());
+			return args;
+		}
+		if (ch === ")" || ch === "]" || ch === "}") {
+			depth--;
+			current += ch;
+			continue;
+		}
+		if (ch === "," && depth === 0) {
+			args.push(current.trim());
+			current = "";
+			continue;
+		}
+		current += ch;
+	}
+	return [];
+}
+
+function looksLikeRowIndexedViewCall(args: string[]): boolean {
+	if (args.length < 3) return false;
+	const second = args[1].trim();
+	return /^(rowIndex|index|idx|i|row|entryIndex|\d+)$/.test(second) || /\bgetRowIndex\s*\(/.test(second);
+}
+
 function isCommentLine(line: string): boolean {
 	const trimmed = line.trim();
 	return trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*");

package/vendor/kingdee-skills/kingdee-cosmic-reviewer/SKILL.md

@@ -304,7 +304,7 @@ references/
 
 ### 📌 步骤3: 执行模式匹配扫描
 
-**使用 pattern-matcher.py 或手动执行以下模式检查**：
+**使用 KCode `kd_check` 或手动执行以下模式检查**：
 
 ```
 📌 步骤3: 执行模式匹配扫描
@@ -671,4 +671,4 @@ D:\new_workspace\macc-dev\pm\report\代码审查报告_xxx.html  ❌ 子模块
 ### 幂等性
 - 重复执行是否产生副作用
 - MQ 消费是否支持重复消费
-- 操作是否可安全重试
+- 操作是否可安全重试