offerguard-mcp-server 0.4.0 → 0.4.2

package/package.json

@@ -1,32 +1,24 @@
 {
   "name": "offerguard-mcp-server",
-  "version": "0.4.0",
-  "private": false,
-  "type": "module",
+  "version": "0.4.2",
   "description": "OfferGuard MCP Server for internship offer auditing, compliance checks, scoring, and workflow routing.",
-  "scripts": {
-    "start": "node src/server.js",
-    "stdio": "node src/stdio.js",
-    "test": "node --test test/decision-engine.test.js test/mcp-protocol.test.js",
-    "validate": "node scripts/validate-release.js"
+  "type": "module",
+  "engines": {
+    "node": ">=20"
   },
   "bin": {
-    "offerguard-mcp-server": "src/stdio.js"
+    "offerguard-mcp-server": "dist/stdio.mjs"
+  },
+  "scripts": {
+    "start": "node dist/http.mjs",
+    "stdio": "node dist/stdio.mjs"
   },
   "files": [
+    "dist",
     "src",
     "README.md",
-    "test",
-    "scripts",
-    "docs",
-    "workflow"
+    "THIRD_PARTY_NOTICES.txt",
+    "build-manifest.json"
   ],
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.17.5",
-    "express": "^5.1.0",
-    "zod": "^3.25.76"
-  },
-  "engines": {
-    "node": ">=20"
-  }
+  "dependencies": {}
 }

package/src/decision-engine.js

@@ -1,7 +1,7 @@
 import { createHash } from "node:crypto";
 
-export const TOOL_VERSION = "0.4.0";
-const RULE_VERSION = "2026-09-evidence-1";
+export const TOOL_VERSION = "0.4.2";
+const RULE_VERSION = "2026-09-evidence-2";
 const hash = s => createHash("sha256").update(s).digest("hex").slice(0, 16);
 const text = s => typeof s === "string" ? s.trim() : "";
 const record = (source, value) => ({ id: hash(`${source}:${value}`), source, text: value });
@@ -83,6 +83,7 @@ function polarity(clause, pattern) {
   const m = clause.match(pattern); if (!m) return null;
   const before = clause.slice(0, m.index), after = clause.slice(m.index + m[0].length);
   if (/不接受|不希望|底线|希望有|想要|期望/.test(before)) return "unknown";
+  if (/(?:尚未|暂未|还未|还没)(?:提供|明确|说明|确认|给出|披露)/.test(clause)) return "unknown";
   if (/[？?]$/.test(clause) || /是否|有没有|未说明|未明确|未确认|未知|不清楚|不清晰|不明|不详|待定|待确认|待验证|可能|不确定|不保证|如果|假如|假设|计划|有望|预计/.test(clause)) return "unknown";
   if (/并非不|不是不|不能不|不得不|不排除|没有说|未承诺|未表示/.test(before)) return "unknown";
   if (/\bnot only\b/i.test(before)) return "unknown";
@@ -241,6 +242,11 @@ function render(r) {
 }
 export function auditOfferGuardInput(input = {}) {
   const start = performance.now();
+  validateInput(input);
+  const currentText = text(input.raw_input), legacyText = text(input.AGENT_USER_INPUT);
+  if (currentText && legacyText && currentText !== legacyText) throw new Error("Conflicting raw_input and AGENT_USER_INPUT; provide only one source message.");
+  // Normalize before envelope parsing so legacy bindings retain multi-turn inputs.
+  input = { ...input, raw_input: currentText || legacyText, AGENT_USER_INPUT: undefined };
   const envelopeText = text(input.raw_input);
   if (envelopeText.startsWith("{")) {
     let envelope;

package/src/mcp-server.js

@@ -0,0 +1,115 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { TOOL_VERSION } from "./decision-engine.js";
+import {
+  auditOfferGuardInput,
+  calculateOfferScore,
+  checkInternshipCompliance,
+  matchRiskTerms
+} from "./offerguard-tools.js";
+
+const SERVICE_NAME = "OfferGuardMCP";
+const SERVICE_VERSION = TOOL_VERSION;
+
+const sourceText = z.string().max(40000);
+const sourceRecord = z.object({
+  id: z.string().optional(),
+  source: z.enum(["jd", "student", "hr", "unattributed"]),
+  text: sourceText
+});
+const assessmentInput = {
+  raw_input: sourceText.optional().describe("Original labeled JD / student / HR text, or a JSON string envelope with offerguard_schema:1, user_message, structured_input, previous_state and mode. Never invent missing values."),
+  AGENT_USER_INPUT: sourceText.optional().describe("Legacy alias of raw_input for existing Agent nodes. If both are provided, they must contain the same text."),
+  structured_input: z.object({
+    original_input: sourceText.optional().describe("Original current user message. When supplied, extracted source fields must be literal excerpts of it."),
+    jd_text: sourceText.optional(),
+    student_profile: sourceText.optional(),
+    hr_reply: sourceText.optional(),
+    offers: z.array(z.object({ id: z.string().min(1).max(40), jd_text: sourceText.min(1), hr_reply: sourceText.optional() })).length(2).optional()
+  }).optional().describe("Separate original source documents, not model-computed facts or scores."),
+  previous_state: z.object({ schema_version: z.literal(1), records: z.array(sourceRecord).max(120) }).optional()
+    .describe("Previous next_state for this conversation and this offer only. Keep private; never share between users."),
+  mode: z.enum(["single_check", "negotiation", "interview_prep", "accept_conditions", "full_report"]).optional(),
+  new_assessment: z.boolean().optional().describe("True starts a different offer and discards previous_state.")
+};
+
+function jsonToolResult(result) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(result, null, 2)
+      }
+    ],
+    structuredContent: result
+  };
+}
+
+function runTool(handler, input) {
+  try {
+    return jsonToolResult(handler(input));
+  } catch (error) {
+    return {
+      ...jsonToolResult({ mcp_ok: false, error_code: "INVALID_ASSESSMENT_INPUT", error: error.message,
+        overall_score: null, report_text: "MCP 工具输入无效，暂不能生成 OfferGuard 风险报告。" }),
+      isError: true
+    };
+  }
+}
+
+export function createOfferGuardMcpServer() {
+  const server = new McpServer({
+    name: SERVICE_NAME,
+    version: SERVICE_VERSION
+  });
+
+  server.registerTool(
+    "offerguard_audit",
+    {
+      description: "All-in-one OfferGuard audit for XFYun workflow MCP nodes. It accepts raw_input and returns route, scores, risk terms, compliance flags, negotiation cards, and MCP audit summary.",
+      inputSchema: assessmentInput
+    },
+    async input => runTool(auditOfferGuardInput, input)
+  );
+
+  server.registerTool(
+    "risk_term_matcher",
+    {
+      description: "Match internship JD risk terms and return severity, source evidence, and trigger reasons.",
+      inputSchema: {
+        jdText: z.string().min(1).describe("Raw internship JD or offer text.")
+      }
+    },
+    async input => runTool(matchRiskTerms, input)
+  );
+
+  server.registerTool(
+    "internship_compliance_checker",
+    {
+      description: "Check internship compliance red lines such as unpaid trials, deposits, training loans, work hours, salary payment, agreements, and IP ownership.",
+      inputSchema: {
+        jdText: z.string().min(1).describe("Raw internship JD text."),
+        offerText: z.string().optional().describe("Optional offer or HR message text."),
+        extraText: z.string().optional().describe("Optional extra context from the student.")
+      }
+    },
+    async input => runTool(checkInternshipCompliance, input)
+  );
+
+  server.registerTool(
+    "offer_score_calculator",
+    {
+      description: "Calculate OfferGuard seven-dimension scores, overall risk level, and recommendation route.",
+      inputSchema: {
+        jdText: z.string().min(1).describe("Raw internship JD text."),
+        studentProfile: z.union([z.string(), z.record(z.string(), z.any())]).describe("Student profile, resume summary, preferences, and risk tolerance."),
+        jobProfile: z.union([z.string(), z.record(z.string(), z.any())]).optional().describe("Optional parsed job profile."),
+        riskTermResult: z.record(z.string(), z.any()).optional().describe("Optional output from risk_term_matcher."),
+        complianceResult: z.record(z.string(), z.any()).optional().describe("Optional output from internship_compliance_checker.")
+      }
+    },
+    async input => runTool(calculateOfferScore, input)
+  );
+
+  return server;
+}

package/src/server.js

@@ -1,124 +1,16 @@
 import { randomUUID } from "node:crypto";
 import { pathToFileURL } from "node:url";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import { createMcpExpressApp } from "@modelcontextprotocol/sdk/server/express.js";
 import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
-import { z } from "zod";
 import { TOOL_VERSION } from "./decision-engine.js";
-import {
-  auditOfferGuardInput,
-  calculateOfferScore,
-  checkInternshipCompliance,
-  matchRiskTerms
-} from "./offerguard-tools.js";
+import { createOfferGuardMcpServer } from "./mcp-server.js";
+export { createOfferGuardMcpServer } from "./mcp-server.js";
 
 const SERVICE_NAME = "OfferGuardMCP";
 const SERVICE_VERSION = TOOL_VERSION;
 
-const sourceText = z.string().max(40000);
-const sourceRecord = z.object({
-  id: z.string().optional(),
-  source: z.enum(["jd", "student", "hr", "unattributed"]),
-  text: sourceText
-});
-const assessmentInput = {
-  raw_input: sourceText.optional().describe("Original labeled JD / student / HR text, or a JSON string envelope with offerguard_schema:1, user_message, structured_input, previous_state and mode. Never invent missing values."),
-  structured_input: z.object({
-    original_input: sourceText.optional().describe("Original current user message. When supplied, extracted source fields must be literal excerpts of it."),
-    jd_text: sourceText.optional(),
-    student_profile: sourceText.optional(),
-    hr_reply: sourceText.optional(),
-    offers: z.array(z.object({ id: z.string().min(1).max(40), jd_text: sourceText.min(1), hr_reply: sourceText.optional() })).length(2).optional()
-  }).optional().describe("Separate original source documents, not model-computed facts or scores."),
-  previous_state: z.object({ schema_version: z.literal(1), records: z.array(sourceRecord).max(120) }).optional()
-    .describe("Previous next_state for this conversation and this offer only. Keep private; never share between users."),
-  mode: z.enum(["single_check", "negotiation", "interview_prep", "accept_conditions", "full_report"]).optional(),
-  new_assessment: z.boolean().optional().describe("True starts a different offer and discards previous_state.")
-};
-
-function jsonToolResult(result) {
-  return {
-    content: [
-      {
-        type: "text",
-        text: JSON.stringify(result, null, 2)
-      }
-    ],
-    structuredContent: result
-  };
-}
-
-function runTool(handler, input) {
-  try {
-    return jsonToolResult(handler(input));
-  } catch (error) {
-    return {
-      ...jsonToolResult({ mcp_ok: false, error_code: "INVALID_ASSESSMENT_INPUT", error: error.message,
-        overall_score: null, report_text: "MCP 工具输入无效，暂不能生成 OfferGuard 风险报告。" }),
-      isError: true
-    };
-  }
-}
-
-export function createOfferGuardMcpServer() {
-  const server = new McpServer({
-    name: SERVICE_NAME,
-    version: SERVICE_VERSION
-  });
-
-  server.registerTool(
-    "offerguard_audit",
-    {
-      description: "All-in-one OfferGuard audit for XFYun workflow MCP nodes. It accepts raw_input and returns route, scores, risk terms, compliance flags, negotiation cards, and MCP audit summary.",
-      inputSchema: assessmentInput
-    },
-    async input => runTool(auditOfferGuardInput, input)
-  );
-
-  server.registerTool(
-    "risk_term_matcher",
-    {
-      description: "Match internship JD risk terms and return severity, source evidence, and trigger reasons.",
-      inputSchema: {
-        jdText: z.string().min(1).describe("Raw internship JD or offer text.")
-      }
-    },
-    async input => runTool(matchRiskTerms, input)
-  );
-
-  server.registerTool(
-    "internship_compliance_checker",
-    {
-      description: "Check internship compliance red lines such as unpaid trials, deposits, training loans, work hours, salary payment, agreements, and IP ownership.",
-      inputSchema: {
-        jdText: z.string().min(1).describe("Raw internship JD text."),
-        offerText: z.string().optional().describe("Optional offer or HR message text."),
-        extraText: z.string().optional().describe("Optional extra context from the student.")
-      }
-    },
-    async input => runTool(checkInternshipCompliance, input)
-  );
-
-  server.registerTool(
-    "offer_score_calculator",
-    {
-      description: "Calculate OfferGuard seven-dimension scores, overall risk level, and recommendation route.",
-      inputSchema: {
-        jdText: z.string().min(1).describe("Raw internship JD text."),
-        studentProfile: z.union([z.string(), z.record(z.string(), z.any())]).describe("Student profile, resume summary, preferences, and risk tolerance."),
-        jobProfile: z.union([z.string(), z.record(z.string(), z.any())]).optional().describe("Optional parsed job profile."),
-        riskTermResult: z.record(z.string(), z.any()).optional().describe("Optional output from risk_term_matcher."),
-        complianceResult: z.record(z.string(), z.any()).optional().describe("Optional output from internship_compliance_checker.")
-      }
-    },
-    async input => runTool(calculateOfferScore, input)
-  );
-
-  return server;
-}
-
 export function createApp({ host = process.env.HOST ?? "127.0.0.1" } = {}) {
   const app = createMcpExpressApp({ host });
   const transports = {};

package/src/stdio.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { createOfferGuardMcpServer } from "./server.js";
+import { createOfferGuardMcpServer } from "./mcp-server.js";
 
 const server = createOfferGuardMcpServer();
 const transport = new StdioServerTransport();

package/docs/SCORING.md

@@ -1,42 +0,0 @@
-# 评分规则与边界
-
-规则版本：2026-09-evidence-1。所有分数是确定性规则估计，未使用真实录用结果校准；不是百分比概率、法律判断或行业排名。
-
-## 来源与状态
-
-只有 `jd` 和 `hr` 来源参与岗位事实匹配。`student` 只参与个人背景和偏好检查，`unattributed` 不作为公司事实。
-
-每个事实包含 `affirmed`、`negated`、`unknown` 或 `conflict`，并保留原文、来源类型和来源标识。来源表示由用户提供的材料类型，不表示平台已经核实 HR 身份或材料真伪。
-
-词典以句子和逗号分句识别常见否定、疑问与不确定表达。双重否定等不明确表达保守置为未知。不同来源的明确肯定与否定，或不同薪资金额，形成冲突；后续说法不会自动覆盖旧说法。
-
-无薪试岗、押金、培训贷仅作为重大风险信号。代码或作品归公司不自动判定违规；明确禁止展示时提示核实使用边界。
-
-## 七维公式
-
-以下公式仅在所需事实已知时执行。证据不足的维度为 null，不以默认分代替。
-
-| 维度 | 已知时的计算 |
-| --- | --- |
-| 岗位匹配 | 40 + 45 × 学生匹配的岗位方向数 / 岗位方向数；岗位和学生文本独立比较 |
-| 成长价值 | 导师明确存在40/明确不存在10 + 项目产出明确存在45/不存在10 |
-| 薪资透明 | 金额已知且提及发放安排85；仅金额65；同时仍明确面议45 |
-| 工作强度 | 工时已知：明确不加班85；未确定加班边界65；明确加班45；同时冲突于已识别学生时间偏好25 |
-| 合规安全 | 明确重大风险0；明确不签协议20；协议明确75，不能理解为已经证明合法 |
-| 转正清晰 | 标准明确存在80，明确不存在30；岗位不提供且学生不要求转正时不适用 |
-| 简历增益 | 展示/证明材料明确存在40/不存在10 + 项目明确存在45/不存在10 |
-
-总分仅在岗位职责、学生背景、薪资底线及到岗信息、岗位城市、金额、协议、工时有依据、无冲突且所有适用维度可评估时，取适用维度均分并四舍五入。总分为空时仍可报告有证据的风险。
-
-明确重大风险优先进入 reject；矛盾证据进入 verify 并暂停总分；关键资料缺失进入 followup。资料齐全、无已命中风险、无低于50的适用维度、均分至少75且薪资未低于可比的个人底线，才进入 advance；否则 verify。
-
-目前薪资底线只比较同单位日薪或月薪，不擅自换算每月工作天数。方向匹配不是技能掌握水平测量。城市名称、工时表达和否定结构的识别覆盖有限；未识别时需要补充明确格式。
-
-## 已知限制
-
-- 不抓取企业信用、招聘网站或市场薪酬；不得编造外部核验结果。
-- 否定识别为有限规则，不是通用中文语义理解；反例测试只证明覆盖的样例。
-- 学生只填写期望但未给出项目细节时，方向匹配仍可能粗糙；不能据此声称全面能力评估。
-- HR 模糊承诺的真实性、法律适用关系、通勤成本及实际岗位成长仍需人工核实。
-- 冲突解除暂采用完整核实材料开启新评估，未实现逐条签署确认。
-- 线上知识库、会话变量和客户端错误分支未验证前，不宣称平台端闭环已完成。

package/docs/WORKFLOW_INTEGRATION.md

@@ -1,64 +0,0 @@
-# 星辰工作流接入记录与操作规范
-
-状态：待线上读取与实施。目标地址：
-https://agent.xfyun.cn/agentbuilder/work_flow/621127/arrange?botId=5673753
-
-浏览器工具可以列出标签页，但读取该标签页反复超时。没有导出当前配置，没有修改线上节点，没有发布或提交审核。历史本地配置不能替代当前线上备份。
-
-## 先核对并备份
-
-1. 读取当前工作流版本、节点、连线、输入引用及 MCP 服务启动配置。通过平台导出功能保存当前配置，并记录版本与导出时间。
-2. 确认 MCP 是平台托管的包还是远程 URL，记录工具 `tools/list` 的真实 schema 与当前版本。不得因为本地存在0.4.0就认定线上已部署。
-3. 验证会话变量的生命周期、用户隔离及新对话清空行为。若平台无法持久保存当前会话状态，则暂停该部分接入并报告，不能用全局变量或 Prompt 假装记忆。
-
-## 目标数据流
-
-开始/当前会话状态 → 来源分离与任务识别 → 门禁分支 → 真实 MCP → 结果有效性分支 → 更新会话状态 → 展示报告。
-
-信息缺失时先问最多三个问题。若已有明确收费或无薪要求，即使资料不足也进入真实 MCP 审计，展示有证据的重大风险。知识库只在需解释规则或查证时检索，不能增加用户没提供的岗位事实。
-
-话术、反问与接受条件请求有状态时，直接调用同一 MCP 的相应 mode，无需重复长篇画像、专家报告和最终重写。新岗位清空旧状态。双 Offer 分开审计并要求选定一个 Offer 后继续追问。
-
-## 节点与变量绑定
-
-| 输入/输出 | 绑定 |
-| --- | --- |
-| raw_input | 当前用户原话，或来源分离节点返回的 envelope_json 字符串 |
-| structured_input | 仅本轮岗位原文、学生原文、HR原文；双Offer使用独立offers列表 |
-| previous_state | 当前用户、当前会话、当前岗位保存的上轮 next_state |
-| mode | single_check / negotiation / interview_prep / accept_conditions / full_report |
-| new_assessment | 切换新岗位时 true |
-| 下一轮状态 | MCP成功后保存 next_state；对比模式保存每个offers元素中的独立next_state |
-| 可见输出 | 经有效性检查后的 report_text；不把整个result包装成代码块 |
-
-如果平台只能绑定字符串，使用 README 中 `offerguard_schema:1` JSON envelope。应由结构化序列化节点组合状态；不要让模型重写 previous_state。源码包含真实 MCP 对该 envelope 的验证。
-
-## 清理旧规则
-
-- 删除把当前日期写死为六月的所有指令，统一使用 MCP report_date。
-- 删除 demo_advance 指定82-90分、demo_compare必须推荐A等规则。
-- 删除简短真实输入自动补造城市、薪资或背景的规则。演示按钮只发送完整、标注为合成的案例输入。
-- 多专家分析如继续保留，只负责解释真实证据与未知项，不改工具分数、路线或来源。未经独立节点验证，不在材料中宣称真实专家并行。
-- 比较 route 的精确字段值，不用包含通用“ROUTE_REAL”判断所有分支。
-
-## 失败分支
-
-MCP连接失败、超时、CallToolResult.isError、mcp_ok不为true、结果为空或缺少当前模式所需report_text时，输出：
-
-MCP 工具调用失败，暂不能生成 OfferGuard 风险报告。请稍后重试。
-
-不要保存失败状态，不输出上次报告作为本次成功结果，不调用模型重算风险作替代。用户-facing话术不暴露内部服务地址、密钥和堆栈。
-
-## 线上验收清单
-
-- 本地候选包的安装/服务启动与 tools/list 中的0.4.0版本一致。
-- 单岗位、缺信息、重大风险、不同专业、不同薪资底线、双Offer、谈判模式各运行一次。
-- 三轮闭环：缺薪资 → HR补充薪资 → HR改口产生矛盾；查看真实请求、状态保存、changes和报告。
-- 新会话及新岗位不携带其他岗位/用户资料。
-- 停止测试服务或使用隔离测试环境制造连接失败，验证用户侧失败分支。
-- 每次记录请求时间、各节点耗时、最终耗时、成功/失败及脱敏截图。不得将本地毫秒数据当成线上端到端时间。
-- 通过后冻结工作流、知识库、规则、包版本及其校验值，再录最终视频与生成复赛材料。
-
-## 当前未完成
-
-线上备份、节点修改、状态变量绑定、服务升级、真实平台调用及故障分支验证均未完成。不能将本文件当成已执行记录。

package/scripts/validate-release.js

@@ -1,53 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { auditOfferGuardInput } from "../src/offerguard-tools.js";
-import { TOOL_VERSION } from "../src/decision-engine.js";
-import { CASES, GOOD_JD, PROFILE } from "../test/fixtures.js";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const directory = path.join(root, "outputs", "retest-v040");
-fs.mkdirSync(directory, { recursive: true });
-const testedAt = new Date().toISOString();
-const started = performance.now();
-const tested = spawnSync(process.execPath, ["--test", "--test-reporter=tap", "test/decision-engine.test.js", "test/mcp-protocol.test.js"], { cwd: root, encoding: "utf8", timeout: 60000, maxBuffer: 4 * 1024 * 1024 });
-const log = `${tested.stdout ?? ""}\n${tested.stderr ?? ""}`;
-fs.writeFileSync(path.join(directory, "tests.tap"), log);
-const count = label => Number(log.match(new RegExp(`^# ${label} (\\d+)$`, "m"))?.[1] ?? 0);
-const success = tested.status === 0 && count("tests") > 0 && count("fail") === 0;
-const inputs = { ...CASES, compare: { structured_input: { student_profile: PROFILE, offers: [{ id: "A", jd_text: GOOD_JD }, { id: "B", jd_text: "北京后端实习生，须缴纳押金800元。" }] } } };
-const samples = {};
-const runs = [];
-for (const [name, input] of Object.entries(inputs)) {
-  const r = auditOfferGuardInput(input);
-  samples[name] = { input, result: r };
-  // This measures local rule execution only, excluding MCP transport, models and the platform.
-  const times = Array.from({ length: 20 }, () => {
-    const t = performance.now(); auditOfferGuardInput(input); return performance.now() - t;
-  }).sort((a, b) => a - b);
-  runs.push({ name, samples: times.length, local_median_ms: +times[Math.floor(times.length / 2)].toFixed(3), local_p95_ms: +times[Math.ceil(times.length * 0.95) - 1].toFixed(3), route: r.route, score: r.overall_score });
-}
-const first = auditOfferGuardInput({ structured_input: { jd_text: GOOD_JD.replace("薪资180元/天，每月15日发放。", ""), student_profile: PROFILE } });
-const secondInput = { raw_input: "HR回复：薪资180元/天，每月15日发放。", previous_state: first.next_state };
-const second = auditOfferGuardInput(secondInput);
-const thirdInput = { raw_input: "HR回复：薪资100元/天。", previous_state: second.next_state };
-const third = auditOfferGuardInput(thirdInput);
-samples.evidence_update = { first, second: { input: secondInput, result: second }, third: { input: thirdInput, result: third } };
-const sourceFiles = ["package.json", "package-lock.json", "src/decision-engine.js", "src/offerguard-tools.js", "src/server.js", "src/stdio.js", "test/decision-engine.test.js", "test/mcp-protocol.test.js", "test/fixtures.js"];
-const checksums = Object.fromEntries(sourceFiles.map(p => [p, fs.existsSync(path.join(root, p)) ? createHash("sha256").update(fs.readFileSync(path.join(root, p))).digest("hex") : null]));
-const report = { release_status: "local_candidate_not_online_verified", version: TOOL_VERSION, tested_at_utc: testedAt, node: process.version,
-  test_result: { passed: success, total: count("tests"), pass: count("pass"), fail: count("fail"), exit_code: tested.status, error: tested.error?.message ?? null, elapsed_ms: Math.round(performance.now() - started) },
-  local_rule_timings: runs, reproducibility_lock_present: fs.existsSync(path.join(root, "package-lock.json")), online: { verified: false, timings: null, blocker: "Browser tab enumeration works but reading the XFYun workflow tab repeatedly timed out; no current online backup, mutation or validation performed." }, source_sha256: checksums };
-fs.writeFileSync(path.join(directory, "validation.json"), JSON.stringify(report, null, 2));
-fs.writeFileSync(path.join(directory, "demo-results.json"), JSON.stringify(samples, null, 2));
-const markdown = ["# OfferGuard 0.4.0 本地候选版验证", `测试时间（UTC）：${testedAt}`, `结果：${success ? "通过" : "失败"}；${count("pass")}/${count("tests")}；Node ${process.version}。`,
-  "真实协议覆盖：HTTP、SSE、stdio 的初始化、工具发现、四工具调用、状态更新、双 Offer 及输入错误；另有 HTTP 服务断开测试。", "线上状态：未验收。未读取当前配置，未修改或发布线上工作流。", "## 合成场景实测",
-  ["| 场景 | 路线 | 综合分 | 本地规则中位耗时(ms) |", "| --- | --- | --- | --- |", ...runs.map(r => `| ${r.name} | ${r.route} | ${r.score ?? "未评分"} | ${r.local_median_ms} |`)].join("\n"),
-  "这些耗时仅是本地规则函数执行，排除网络、MCP传输、模型与星辰平台耗时，不可作为线上响应时间。",
-  `三轮证据更新：${first.route}/${first.overall_score ?? "未评分"} → ${second.route}/${second.overall_score ?? "未评分"} → ${third.route}/${third.overall_score ?? "未评分"}。`,
-  "测试日志见 tests.tap，完整合成输入/输出见 demo-results.json，源码校验值见 validation.json。未使用真实学生数据，未测量现实场景准确率。", "当前候选版不得作为最终冻结版或已上线证明。"];
-fs.writeFileSync(path.join(directory, "validation.md"), markdown.join("\n\n"));
-console.log(JSON.stringify({ passed: success, tests: report.test_result, output: directory, online_verified: false }, null, 2));
-if (!success) process.exitCode = 1;