progmune-runtime 2.1.6 → 3.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (356) hide show
  1. package/README.md +119 -461
  2. package/dist/ablation-study.js +144 -0
  3. package/dist/ablation-study.test.js +18 -0
  4. package/dist/action-runtime.js +3 -1
  5. package/dist/active-learning.js +211 -0
  6. package/dist/analytics.js +139 -0
  7. package/dist/asset-factory.js +309 -0
  8. package/dist/asset-growth.js +244 -0
  9. package/dist/asset-promotion.js +382 -0
  10. package/dist/asset-quality.js +550 -0
  11. package/dist/audit/business-translator.js +285 -0
  12. package/dist/audit/cli.js +66 -0
  13. package/dist/audit/formatters/html.js +379 -0
  14. package/dist/audit/formatters/json.js +11 -0
  15. package/dist/audit/formatters/markdown.js +192 -0
  16. package/dist/audit/formatters/terminal.js +189 -0
  17. package/dist/audit/index.js +25 -0
  18. package/dist/audit/report-builder.js +318 -0
  19. package/dist/audit/types.js +8 -0
  20. package/dist/audit.js +3 -3
  21. package/dist/auto-benchmark-generator.js +137 -0
  22. package/dist/auto-benchmark-generator.test.js +45 -0
  23. package/dist/auto-protocol-synthesizer.js +362 -0
  24. package/dist/auto-protocol-synthesizer.test.js +82 -0
  25. package/dist/autonomous-patch.js +175 -0
  26. package/dist/autonomous-patch.test.js +128 -0
  27. package/dist/badge/badge-server.js +98 -0
  28. package/dist/behavior-miner.js +442 -0
  29. package/dist/belief-layer.js +475 -0
  30. package/dist/benchmark-count.js +5 -0
  31. package/dist/benchmark-generator.js +211 -0
  32. package/dist/benchmark-harness.js +201 -0
  33. package/dist/benchmark-pass-rate.js +7 -0
  34. package/dist/benchmark-report.js +8 -3
  35. package/dist/benchmark-save.js +14 -1
  36. package/dist/bootstrap-validation.js +197 -0
  37. package/dist/bootstrap-validation.test.js +51 -0
  38. package/dist/branch-ledger.js +1 -1
  39. package/dist/capability-gap.js +130 -0
  40. package/dist/certify-html.js +351 -0
  41. package/dist/certify.js +326 -0
  42. package/dist/check.js +4 -4
  43. package/dist/compliance-miner.js +447 -0
  44. package/dist/continuous-benchmark.js +194 -0
  45. package/dist/continuous-benchmark.test.js +116 -0
  46. package/dist/corpus-stats.js +173 -0
  47. package/dist/counterfactual-engine.js +288 -0
  48. package/dist/coverage-dashboard.js +109 -0
  49. package/dist/coverage-system.test.js +205 -0
  50. package/dist/cross-repo-precision.js +352 -0
  51. package/dist/cve-benchmark.js +180 -0
  52. package/dist/cve-benchmark.test.js +28 -0
  53. package/dist/cve-collector.js +73 -0
  54. package/dist/data-quality.js +141 -0
  55. package/dist/decision-engine.js +388 -0
  56. package/dist/derive-metadata.js +250 -0
  57. package/dist/difficulty-active.test.js +198 -0
  58. package/dist/difficulty-map.js +244 -0
  59. package/dist/discovery-analytics.js +125 -0
  60. package/dist/discovery-model.js +149 -0
  61. package/dist/discovery-optimize.test.js +199 -0
  62. package/dist/discovery-trace.js +276 -0
  63. package/dist/discovery-trace.test.js +97 -0
  64. package/dist/emitter.js +83 -1
  65. package/dist/enterprise-dashboard.js +405 -0
  66. package/dist/eval-hardening.js +297 -0
  67. package/dist/eval-hardening.test.js +85 -0
  68. package/dist/evaluation-campaign.js +359 -0
  69. package/dist/evaluation-campaign.test.js +181 -0
  70. package/dist/evidence-growth.js +143 -0
  71. package/dist/evidence-repository.js +209 -0
  72. package/dist/evidence-system.js +441 -0
  73. package/dist/execute.js +15 -7
  74. package/dist/experimental/software-physics.js +291 -0
  75. package/dist/experimental/state-inference.js +516 -0
  76. package/dist/experimental/unsupervised-physics.js +230 -0
  77. package/dist/extract-ir-python.js +54 -7
  78. package/dist/extract-ir.js +376 -12
  79. package/dist/failure-collector.js +2 -2
  80. package/dist/failure-corpus.js +322 -9
  81. package/dist/feedback.js +16 -5
  82. package/dist/feedback.test.js +49 -0
  83. package/dist/file-lock.js +1 -1
  84. package/dist/flywheel-batch.js +292 -0
  85. package/dist/frameworks/express-cli.js +237 -0
  86. package/dist/frameworks/express-detector.js +445 -0
  87. package/dist/frameworks/express-detector.test.js +206 -0
  88. package/dist/frameworks/index.js +30 -0
  89. package/dist/frameworks/nestjs-detector.js +302 -0
  90. package/dist/frameworks/trpc-detector.js +161 -0
  91. package/dist/frameworks/version-awareness.js +179 -0
  92. package/dist/function-synonyms.js +164 -0
  93. package/dist/function-synonyms.test.js +68 -0
  94. package/dist/generalization.test.js +352 -0
  95. package/dist/goal-annotator.js +113 -0
  96. package/dist/goal-planner.js +563 -0
  97. package/dist/gold-cve.js +164 -0
  98. package/dist/gold-cve.test.js +104 -0
  99. package/dist/gold-quality.js +206 -0
  100. package/dist/gold-tiers.js +241 -0
  101. package/dist/governance-dashboard.js +327 -0
  102. package/dist/graph-viz.js +240 -0
  103. package/dist/guided-frontier.js +195 -0
  104. package/dist/hierarchical-planner.js +148 -0
  105. package/dist/identifier-parser.js +260 -0
  106. package/dist/immune-metrics.js +93 -0
  107. package/dist/immune-receiver.js +158 -0
  108. package/dist/immune-reporter.js +1 -1
  109. package/dist/improvement-orchestrator.js +206 -0
  110. package/dist/inject-p0-vocabulary.js +300 -0
  111. package/dist/intent-parser.js +218 -0
  112. package/dist/invariant-algebra.js +476 -0
  113. package/dist/invariant-calculus.js +533 -0
  114. package/dist/ir-utils.js +70 -0
  115. package/dist/ir-utils.test.js +50 -0
  116. package/dist/knowledge-api.js +312 -0
  117. package/dist/knowledge-evolution.js +452 -0
  118. package/dist/knowledge-explorer.js +506 -0
  119. package/dist/knowledge-flywheel.js +274 -0
  120. package/dist/knowledge-governance.js +338 -0
  121. package/dist/knowledge-governance.test.js +150 -0
  122. package/dist/knowledge-graph.js +181 -0
  123. package/dist/knowledge-guided-synth.js +246 -0
  124. package/dist/knowledge-loop.test.js +77 -0
  125. package/dist/knowledge-object.js +316 -0
  126. package/dist/knowledge-package.js +98 -0
  127. package/dist/kpi-dashboard.js +561 -0
  128. package/dist/l3-cross-function.js +280 -0
  129. package/dist/learning-ranker.js +148 -0
  130. package/dist/learning-ranker.test.js +291 -0
  131. package/dist/ledger/accountability.js +322 -0
  132. package/dist/ledger/chain-builder.js +185 -0
  133. package/dist/ledger/cli.js +222 -0
  134. package/dist/ledger/index.js +13 -0
  135. package/dist/ledger/signatures.js +193 -0
  136. package/dist/ledger/types.js +9 -0
  137. package/dist/llm.js +74 -3
  138. package/dist/load-benchmarks.js +8 -3
  139. package/dist/logger.js +66 -0
  140. package/dist/logger.test.js +37 -0
  141. package/dist/logistic-reward.js +339 -0
  142. package/dist/logistic-reward.test.js +180 -0
  143. package/dist/macro-graph.js +193 -0
  144. package/dist/macro-repair.js +183 -0
  145. package/dist/mcp-server.mjs +1202 -483
  146. package/dist/memory-layer.js +42 -5
  147. package/dist/multi-repo-precision.js +422 -0
  148. package/dist/name-free-protocol.js +425 -0
  149. package/dist/name-free-protocol.test.js +170 -0
  150. package/dist/name-scrambling.js +138 -0
  151. package/dist/name-scrambling.test.js +16 -0
  152. package/dist/p3-observability.test.js +281 -0
  153. package/dist/p5-orchestrator.test.js +225 -0
  154. package/dist/pairwise-preference.js +294 -0
  155. package/dist/pairwise-preference.test.js +140 -0
  156. package/dist/planner-constraints.js +104 -0
  157. package/dist/planner-prompts.js +155 -0
  158. package/dist/planner-telemetry.js +415 -0
  159. package/dist/planner-trace.js +214 -0
  160. package/dist/planner.js +162 -167
  161. package/dist/plsb/artifact.js +116 -0
  162. package/dist/plsb/cli.js +71 -0
  163. package/dist/plsb/index.js +19 -0
  164. package/dist/plsb/leaderboard.js +249 -0
  165. package/dist/plsb/report-md.js +156 -0
  166. package/dist/plsb/schema.js +179 -0
  167. package/dist/plsb-benchmark.js +284 -0
  168. package/dist/plsb-benchmark.test.js +119 -0
  169. package/dist/policy/cli.js +134 -0
  170. package/dist/policy/engine.js +333 -0
  171. package/dist/policy/index.js +12 -0
  172. package/dist/policy/types.js +59 -0
  173. package/dist/policy-miner.js +505 -0
  174. package/dist/precision-analyze.js +229 -0
  175. package/dist/precision-benchmark.js +147 -0
  176. package/dist/precision-label-c.js +134 -0
  177. package/dist/precision-label.js +193 -0
  178. package/dist/precision-report-c.js +149 -0
  179. package/dist/precision-report.js +246 -0
  180. package/dist/progmune-status.js +108 -0
  181. package/dist/proof-engine.js +479 -0
  182. package/dist/proof-provenance.js +315 -0
  183. package/dist/protocol-coverage.js +294 -0
  184. package/dist/protocol-detector.js +1189 -0
  185. package/dist/protocol-embedding-expanded.js +297 -0
  186. package/dist/protocol-embedding-expanded.test.js +97 -0
  187. package/dist/protocol-embedding.js +195 -0
  188. package/dist/protocol-embedding.test.js +82 -0
  189. package/dist/protocol-extractor-v2.js +354 -0
  190. package/dist/protocol-extractor-v2.test.js +140 -0
  191. package/dist/protocol-extractor.js +310 -0
  192. package/dist/protocol-extractor.test.js +113 -0
  193. package/dist/protocol-foundation.js +322 -0
  194. package/dist/protocol-foundation.test.js +163 -0
  195. package/dist/protocol-frontier.js +243 -0
  196. package/dist/protocol-frontier.test.js +92 -0
  197. package/dist/protocol-gap-analyzer.js +228 -0
  198. package/dist/protocol-gap-analyzer.test.js +49 -0
  199. package/dist/protocol-invariants.js +276 -0
  200. package/dist/protocol-invariants.test.js +111 -0
  201. package/dist/protocol-knowledge.js +464 -0
  202. package/dist/protocol-miner.js +343 -0
  203. package/dist/protocol-mining.js +207 -0
  204. package/dist/protocol-mining.test.js +37 -0
  205. package/dist/protocol-registry.js +1 -1
  206. package/dist/protocol-security-benchmark.js +222 -0
  207. package/dist/protocol-vulnerability.js +257 -0
  208. package/dist/protocol-vulnerability.test.js +60 -0
  209. package/dist/python-benchmark.js +120 -0
  210. package/dist/python-emitter.js +163 -45
  211. package/dist/python-protocol-extractor.js +187 -0
  212. package/dist/python-protocol-extractor.test.js +116 -0
  213. package/dist/realworld-benchmark.js +646 -0
  214. package/dist/realworld-benchmark.test.js +36 -0
  215. package/dist/repair-arch.test.js +411 -0
  216. package/dist/repair-evolution.test.js +454 -0
  217. package/dist/repair-executor.js +719 -0
  218. package/dist/repair-proposal.js +4 -4
  219. package/dist/repair-ranker.js +141 -0
  220. package/dist/repair-strategies.js +419 -0
  221. package/dist/repair-taxonomy.js +234 -0
  222. package/dist/repair-types.js +12 -0
  223. package/dist/repo-evaluator.js +250 -0
  224. package/dist/repo-evaluator.test.js +128 -0
  225. package/dist/resource-abstraction.js +242 -0
  226. package/dist/resource-detector.js +211 -0
  227. package/dist/result.test.js +43 -0
  228. package/dist/reward-system.js +411 -0
  229. package/dist/reward-system.test.js +175 -0
  230. package/dist/risk-model.js +215 -0
  231. package/dist/rule-miner.js +234 -7
  232. package/dist/rule-specificity.js +254 -0
  233. package/dist/runtime-types.js +27 -0
  234. package/dist/scaffold.js +208 -0
  235. package/dist/scale-collector.test.js +101 -0
  236. package/dist/scale-trajectory-collector.js +128 -0
  237. package/dist/sdk.js +250 -0
  238. package/dist/search-planner.js +4 -41
  239. package/dist/semantic-snapshot.js +1 -1
  240. package/dist/semantic-topology.js +121 -0
  241. package/dist/semantic-trace.js +310 -317
  242. package/dist/sequence-extractor.js +343 -0
  243. package/dist/skill-library.js +245 -0
  244. package/dist/skill-planner.test.js +189 -0
  245. package/dist/software-physics.js +291 -0
  246. package/dist/software-physics.test.js +81 -0
  247. package/dist/ssg-precision.js +478 -0
  248. package/dist/ssg-validator.js +71 -21
  249. package/dist/state-inference-doubleblind.test.js +160 -0
  250. package/dist/state-inference.js +516 -0
  251. package/dist/state-inference.test.js +115 -0
  252. package/dist/state-machine-fingerprint.js +345 -0
  253. package/dist/state-machine-fingerprint.test.js +120 -0
  254. package/dist/state-miner.js +386 -0
  255. package/dist/state-name-inference.js +213 -0
  256. package/dist/state-name-inference.test.js +69 -0
  257. package/dist/strategy-planner.js +262 -96
  258. package/dist/strategy-planner.test.js +135 -0
  259. package/dist/telemetry-analytics.test.js +402 -0
  260. package/dist/terminal-format.js +68 -0
  261. package/dist/terminal-format.test.js +83 -0
  262. package/dist/topology-factory.js +196 -0
  263. package/dist/topology-representation.js +242 -0
  264. package/dist/topology-representation.test.js +27 -0
  265. package/dist/trajectory-augmentation.js +254 -0
  266. package/dist/trajectory-augmentation.test.js +63 -0
  267. package/dist/trajectory-corpus.js +440 -0
  268. package/dist/trajectory-corpus.test.js +32 -0
  269. package/dist/trajectory-feedback.test.js +116 -0
  270. package/dist/transition-synthesizer.js +286 -0
  271. package/dist/transition-synthesizer.test.js +123 -0
  272. package/dist/trust/api-semantic-mapper.js +809 -0
  273. package/dist/trust/call-graph-propagator.js +225 -0
  274. package/dist/trust/cli.js +122 -0
  275. package/dist/trust/compliance-scorer.js +283 -0
  276. package/dist/trust/confidence-calculator.js +261 -0
  277. package/dist/trust/engine.js +1145 -0
  278. package/dist/trust/explainability.js +85 -0
  279. package/dist/trust/formatters/ci.js +42 -0
  280. package/dist/trust/formatters/json.js +11 -0
  281. package/dist/trust/formatters/terminal.js +152 -0
  282. package/dist/trust/index.js +39 -0
  283. package/dist/trust/phase1-verify.js +171 -0
  284. package/dist/trust/protocol-domain-validator.js +697 -0
  285. package/dist/trust/score-calculator.js +282 -0
  286. package/dist/trust/ssg-bridge.js +641 -0
  287. package/dist/trust/ssg-bridge.test.js +269 -0
  288. package/dist/trust/types.js +67 -0
  289. package/dist/trust/violation-trace.js +335 -0
  290. package/dist/trust-api.js +179 -0
  291. package/dist/trust-calibration.js +279 -0
  292. package/dist/unknown-protocol-discovery.js +339 -0
  293. package/dist/unknown-protocol-discovery.test.js +102 -0
  294. package/dist/unsupervised-physics.js +230 -0
  295. package/dist/unsupervised-physics.test.js +95 -0
  296. package/dist/utils.test.js +37 -0
  297. package/dist/validator.js +187 -10
  298. package/dist/verification-intelligence.js +475 -0
  299. package/dist/verify-api.js +432 -0
  300. package/dist/vi-impact-report.js +293 -0
  301. package/dist/wl-fingerprint.js +162 -0
  302. package/dist/wl-fingerprint.test.js +130 -0
  303. package/dist/zeroshot-strategy.js +139 -0
  304. package/docs/Progmune_/346/212/225/350/265/204/344/272/272/347/231/275/347/232/256/344/271/246_v2.0.html +576 -0
  305. package/docs/Progmune_/351/241/271/347/233/256/345/205/250/350/247/243.html +721 -0
  306. package/package.json +73 -6
  307. package/protocols.json +1956 -50
  308. package/.dockerignore +0 -14
  309. package/.mcp.json +0 -11
  310. package/.progmune_allowlist +0 -50
  311. package/.test_report/test_report.md +0 -87
  312. package/Dockerfile +0 -9
  313. package/FAQ.md +0 -167
  314. package/WHITEPAPER.md +0 -540
  315. package/demo-project/auth.ts +0 -55
  316. package/demo-project/tsconfig.json +0 -8
  317. package/dist/acl-breakdown.js +0 -13
  318. package/dist/all-sessions.js +0 -11
  319. package/dist/antibody-stats.js +0 -11
  320. package/dist/branch-tree-count.js +0 -14
  321. package/dist/common-fixpath.js +0 -12
  322. package/dist/constraint-types.js +0 -12
  323. package/dist/exec-metrics.js +0 -11
  324. package/dist/failure-report.js +0 -11
  325. package/dist/fast-path-hits.js +0 -13
  326. package/dist/fingerprint-list.js +0 -15
  327. package/dist/gen-history-log.js +0 -13
  328. package/dist/heatmap-data.js +0 -11
  329. package/dist/recent-session.js +0 -12
  330. package/dist/svl-distribution.js +0 -11
  331. package/dist/terminal-status.js +0 -11
  332. package/dist/token-savings.js +0 -11
  333. package/dist/total-repairs.js +0 -12
  334. package/dist/unresolved-count.js +0 -12
  335. package/dist/valid-fingerprints.js +0 -13
  336. package/dist/verify-ledgers.js +0 -11
  337. package/docs/whitepaper-style.css +0 -77
  338. package/docs/whitepaper-v2.1.md +0 -609
  339. package/docs/whitepaper-v2.2.md +0 -1064
  340. package/docs/whitepaper-v2.2.pdf +0 -0
  341. package/fly.toml +0 -31
  342. package/public/dashboard.html +0 -119
  343. package/server/hub.js +0 -116
  344. package/test/replay-golden/sess_1780063202050_mgeld.json +0 -9
  345. package/test/replay-golden/sess_1780064032560_gocld.json +0 -354
  346. package/test/replay-golden/sess_1780064413331_s2709.json +0 -606
  347. package/test/replay-golden/sess_1780064792710_y3avo.json +0 -614
  348. package/test/replay-golden.ts +0 -84
  349. package/test_benchmark.js +0 -165
  350. package/test_comprehensive.mjs +0 -638
  351. package/test_concurrency.js +0 -129
  352. package/test_ir_robustness.js +0 -85
  353. package/test_semantic_contracts.js +0 -269
  354. package/test_ssg_stress.js +0 -156
  355. package/test_svl3.js +0 -58
  356. package/tsconfig.json +0 -17
package/dist/audit/formatters/html.js ADDED
@@ -0,0 +1,379 @@
1
+ "use strict";
2
+ /**
3
+ * Phase 10: HTML Formatter
4
+ *
5
+ * Generates a standalone, visually polished HTML governance report.
6
+ * No external dependencies — all CSS inline, single self-contained file.
7
+ * Suitable for CTO/VPs, audit committees, and compliance review.
8
+ */
9
+ Object.defineProperty(exports, "__esModule", { value: true });
10
+ exports.formatAsHTML = formatAsHTML;
11
+ function formatAsHTML(report) {
12
+ const { metadata, sessions, ssv, plsb, provenance, antibodies, verdict, recommendations, business } = report;
13
+ const vc = verdictColor(verdict);
14
+ return `<!DOCTYPE html>
15
+ <html lang="zh-CN">
16
+ <head>
17
+ <meta charset="UTF-8">
18
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
19
+ <title>AI 治理报告 — ${escapeHtml(metadata.projectId)}</title>
20
+ <style>
21
+ *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
22
+ body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', sans-serif; background: #f8fafc; color: #1e293b; line-height: 1.6; }
23
+ .container { max-width: 960px; margin: 0 auto; padding: 40px 24px; }
24
+
25
+ /* Header */
26
+ .header { background: linear-gradient(135deg, #1e293b 0%, #334155 100%); color: #fff; border-radius: 16px; padding: 40px; margin-bottom: 32px; }
27
+ .header h1 { font-size: 28px; font-weight: 700; margin-bottom: 8px; }
28
+ .header .subtitle { color: #94a3b8; font-size: 14px; }
29
+ .header .meta { display: flex; gap: 24px; margin-top: 20px; flex-wrap: wrap; }
30
+ .header .meta-item { font-size: 13px; color: #cbd5e1; }
31
+ .header .meta-item span { color: #fff; font-weight: 600; }
32
+
33
+ /* Verdict badge */
34
+ .verdict { display: inline-flex; align-items: center; gap: 8px; padding: 8px 20px; border-radius: 100px; font-size: 18px; font-weight: 700; margin-top: 16px; }
35
+ .verdict.pass { background: rgba(34,197,94,0.15); color: #86efac; }
36
+ .verdict.warn { background: rgba(234,179,8,0.15); color: #fde047; }
37
+ .verdict.fail { background: rgba(239,68,68,0.15); color: #fca5a5; }
38
+
39
+ /* Cards */
40
+ .card { background: #fff; border: 1px solid #e2e8f0; border-radius: 12px; padding: 28px; margin-bottom: 20px; }
41
+ .card h2 { font-size: 18px; font-weight: 700; color: #0f172a; margin-bottom: 16px; display: flex; align-items: center; gap: 10px; }
42
+ .card h3 { font-size: 14px; font-weight: 600; color: #475569; margin-bottom: 12px; text-transform: uppercase; letter-spacing: 0.05em; }
43
+
44
+ /* Summary grid */
45
+ .summary-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 16px; margin-bottom: 20px; }
46
+ .summary-item { background: #f8fafc; border: 1px solid #e2e8f0; border-radius: 10px; padding: 20px; text-align: center; }
47
+ .summary-item .value { font-size: 32px; font-weight: 800; }
48
+ .summary-item .label { font-size: 13px; color: #64748b; margin-top: 4px; }
49
+ .summary-item .value.green { color: #16a34a; }
50
+ .summary-item .value.amber { color: #d97706; }
51
+ .summary-item .value.gray { color: #64748b; }
52
+
53
+ /* Risk table */
54
+ table { width: 100%; border-collapse: collapse; font-size: 14px; }
55
+ th { text-align: left; padding: 10px 12px; font-weight: 600; color: #64748b; font-size: 12px; text-transform: uppercase; letter-spacing: 0.05em; border-bottom: 2px solid #e2e8f0; }
56
+ td { padding: 12px; border-bottom: 1px solid #f1f5f9; }
57
+ tr:last-child td { border-bottom: none; }
58
+
59
+ .badge { display: inline-flex; align-items: center; gap: 4px; padding: 3px 10px; border-radius: 100px; font-size: 12px; font-weight: 600; }
60
+ .badge.protected { background: #dcfce7; color: #166534; }
61
+ .badge.partial { background: #fef3c7; color: #92400e; }
62
+ .badge.exposed { background: #fee2e2; color: #991b1b; }
63
+ .badge.full { background: #dcfce7; color: #166534; }
64
+ .badge.none { background: #fee2e2; color: #991b1b; }
65
+
66
+ /* Protocol graph */
67
+ .graph-flow { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; padding: 16px 0; }
68
+ .graph-node { background: #e0e7ff; color: #3730a3; padding: 6px 14px; border-radius: 8px; font-size: 13px; font-weight: 600; }
69
+ .graph-arrow { color: #94a3b8; font-size: 16px; margin: 0 2px; }
70
+ .graph-label { font-size: 11px; color: #94a3b8; margin: 0 4px; }
71
+
72
+ .graph-section { margin-bottom: 24px; }
73
+ .graph-section h4 { font-size: 14px; font-weight: 600; color: #475569; margin-bottom: 8px; }
74
+
75
+ /* Bars */
76
+ .bar-wrap { height: 8px; background: #f1f5f9; border-radius: 4px; overflow: hidden; margin: 8px 0; }
77
+ .bar-fill { height: 100%; border-radius: 4px; transition: width 0.3s; }
78
+ .bar-fill.green { background: linear-gradient(90deg, #22c55e, #16a34a); }
79
+ .bar-fill.amber { background: linear-gradient(90deg, #f59e0b, #d97706); }
80
+ .bar-fill.red { background: linear-gradient(90deg, #ef4444, #dc2626); }
81
+
82
+ /* Recommendations */
83
+ .rec { border-left: 3px solid #e2e8f0; padding: 12px 16px; margin-bottom: 12px; border-radius: 0 8px 8px 0; }
84
+ .rec.critical { border-color: #ef4444; background: #fef2f2; }
85
+ .rec.high { border-color: #f59e0b; background: #fffbeb; }
86
+ .rec.medium { border-color: #6366f1; background: #eef2ff; }
87
+ .rec.low { border-color: #94a3b8; background: #f8fafc; }
88
+ .rec .rec-severity { font-size: 11px; font-weight: 700; text-transform: uppercase; letter-spacing: 0.05em; }
89
+ .rec .rec-msg { font-size: 14px; margin-top: 4px; }
90
+ .rec .rec-action { font-size: 12px; color: #64748b; margin-top: 4px; }
91
+
92
+ /* Tech details */
93
+ .tech { background: #f1f5f9; border-radius: 8px; padding: 16px 20px; font-family: 'SF Mono', 'Menlo', 'Monaco', monospace; font-size: 13px; color: #334155; white-space: pre-wrap; line-height: 1.5; margin-top: 12px; }
94
+
95
+ /* Footer */
96
+ .footer { text-align: center; padding: 40px 0 20px; color: #94a3b8; font-size: 12px; }
97
+ .footer strong { color: #64748b; }
98
+
99
+ /* Timeline */
100
+ .chain { display: flex; align-items: center; gap: 12px; padding: 16px 0; flex-wrap: wrap; }
101
+ .chain-node { background: #fff; border: 2px solid #e2e8f0; border-radius: 12px; padding: 12px 20px; text-align: center; min-width: 120px; }
102
+ .chain-node.active { border-color: #6366f1; background: #eef2ff; }
103
+ .chain-arrow { color: #94a3b8; font-size: 20px; }
104
+
105
+ @media print {
106
+ body { background: #fff; }
107
+ .card { break-inside: avoid; box-shadow: none; }
108
+ }
109
+ </style>
110
+ </head>
111
+ <body>
112
+ <div class="container">
113
+
114
+ <!-- ═══ HEADER ═══ -->
115
+ <div class="header">
116
+ <h1>🔬 AI 代码治理报告</h1>
117
+ <p class="subtitle">Progmune Runtime — AI 生成软件治理</p>
118
+ <div class="meta">
119
+ <div class="meta-item">生成器 <span>${escapeHtml(metadata.generator)} v${escapeHtml(metadata.version)}</span></div>
120
+ <div class="meta-item">时间 <span>${escapeHtml(metadata.timestamp)}</span></div>
121
+ <div class="meta-item">项目 <span>${escapeHtml(metadata.projectId)}</span></div>
122
+ <div class="meta-item">验证器 <span>${escapeHtml(metadata.validator)}</span></div>
123
+ </div>
124
+ <div class="verdict ${verdict.toLowerCase()}">${verdictIcon(verdict)} ${verdictLabel(verdict)}</div>
125
+ </div>
126
+
127
+ <!-- ═══ GOVERNANCE SUMMARY ═══ -->
128
+ ${business ? renderBusinessSummary(business) : ""}
129
+
130
+ <!-- ═══ TECHNICAL VERIFICATION ═══ -->
131
+ <div class="card">
132
+ <h2>📊 技术验证详情</h2>
133
+
134
+ <div class="summary-grid">
135
+ <div class="summary-item">
136
+ <div class="value green">${sessions.total}</div>
137
+ <div class="label">治理会话</div>
138
+ </div>
139
+ <div class="summary-item">
140
+ <div class="value green">${ssv.passed}</div>
141
+ <div class="label">SSV 检查通过</div>
142
+ </div>
143
+ <div class="summary-item">
144
+ <div class="value ${plsb.coverage >= 0.7 ? 'green' : plsb.coverage >= 0.3 ? 'amber' : 'gray'}">${fmtPct(plsb.coverage)}</div>
145
+ <div class="label">PLSB 覆盖率</div>
146
+ </div>
147
+ <div class="summary-item">
148
+ <div class="value green">${provenance.verified}</div>
149
+ <div class="label">指纹验证通过</div>
150
+ </div>
151
+ <div class="summary-item">
152
+ <div class="value ${provenance.tampered > 0 ? 'red' : 'green'}">${provenance.tampered}</div>
153
+ <div class="label">篡改检测</div>
154
+ </div>
155
+ </div>
156
+
157
+ <table>
158
+ <tr><th>检查项</th><th>详情</th><th>状态</th></tr>
159
+ <tr><td>SSV 检查</td><td>${ssv.totalChecks} 项，${ssv.passed} 通过，${ssv.failed} 失败</td><td>${ssv.failed > 0 ? '⚠ 异常' : '✅ 正常'}</td></tr>
160
+ <tr><td>PLSB 基准</td><td>v${plsb.version}，${plsb.totalEntries} 条目（${plsb.verifiedEntries} 已验证）</td><td>✅ 正常</td></tr>
161
+ <tr><td>召回率 / 精确率</td><td>${fmtPct(plsb.recall)} / ${fmtPct(plsb.precision)}</td><td>—</td></tr>
162
+ <tr><td>指纹验证</td><td>${provenance.totalFingerprints} 指纹，${provenance.verified} 通过</td><td>${provenance.tampered > 0 ? '⚠ 有篡改' : '✅ 正常'}</td></tr>
163
+ <tr><td>抗体系统</td><td>${antibodies.totalHits} 命中，快速通道 ${antibodies.fastPathHits}，节省 ${antibodies.tokensSaved.toLocaleString()} tokens</td><td>✅ 正常</td></tr>
164
+ </table>
165
+ </div>
166
+
167
+ <!-- ═══ SESSIONS ═══ -->
168
+ ${sessions.details.length > 0 ? renderSessionDetails(sessions) : ""}
169
+
170
+ <!-- ═══ RECOMMENDATIONS ═══ -->
171
+ ${recommendations.length > 0 ? renderRecommendations(recommendations) : ""}
172
+
173
+ <!-- ═══ FOOTER ═══ -->
174
+ <div class="footer">
175
+ <p>由 <strong>Progmune Runtime</strong> 生成 — AI 生成软件治理</p>
176
+ <p>此报告不替代人工代码审查、渗透测试或合规审计</p>
177
+ </div>
178
+
179
+ </div>
180
+ </body>
181
+ </html>`;
182
+ }
183
+ // ── Section Renderers ──
184
+ function renderBusinessSummary(biz) {
185
+ return `
186
+ <div class="card" style="border-color: #6366f1; background: linear-gradient(135deg, #eef2ff 0%, #fff 100%);">
187
+ <h2>🛡 治理摘要 — 业务视角</h2>
188
+
189
+ <div class="summary-grid">
190
+ <div class="summary-item">
191
+ <div class="value green">${biz.summary.totalRisksMitigated}</div>
192
+ <div class="label">风险类别已防护</div>
193
+ </div>
194
+ <div class="summary-item">
195
+ <div class="value green">${biz.summary.knowledgeDomainsCovered}</div>
196
+ <div class="label">业务知识域覆盖</div>
197
+ </div>
198
+ <div class="summary-item">
199
+ <div class="value green">${biz.summary.businessProtocolsIntact}</div>
200
+ <div class="label">业务协议边验证通过</div>
201
+ </div>
202
+ ${Object.entries(biz.summary.preventedViolationsByCategory).slice(0, 2).map(([k, v]) => `
203
+ <div class="summary-item">
204
+ <div class="value green">${v}</div>
205
+ <div class="label">${escapeHtml(k)} 违规预防</div>
206
+ </div>`).join("")}
207
+ </div>
208
+
209
+ <h3>🛡 风险防护</h3>
210
+ <table>
211
+ <tr><th>风险类别</th><th>防护状态</th><th>协议覆盖</th><th>违规预防</th></tr>
212
+ ${biz.risks.map((r) => `
213
+ <tr>
214
+ <td><strong>${escapeHtml(r.category)}</strong><br><span style="font-size:12px;color:#64748b">${escapeHtml(r.description)}</span></td>
215
+ <td><span class="badge ${r.status}">${statusIcon(r.status)} ${statusLabel(r.status)}</span></td>
216
+ <td>${r.protocolsCovered} 条</td>
217
+ <td>${r.violationsPrevented} 次</td>
218
+ </tr>`).join("")}
219
+ </table>
220
+
221
+ <h3 style="margin-top:24px">📚 业务知识覆盖</h3>
222
+ <table>
223
+ <tr><th>业务域</th><th>覆盖状态</th><th>关联实体</th></tr>
224
+ ${biz.knowledgeCoverage.map((k) => `
225
+ <tr>
226
+ <td><strong>${escapeHtml(k.domain)}</strong></td>
227
+ <td><span class="badge ${k.coverage === 'full' ? 'full' : k.coverage === 'partial' ? 'partial' : 'none'}">${coverageIcon(k.coverage)} ${coverageLabel(k.coverage)}</span></td>
228
+ <td style="font-size:12px;color:#64748b">${(k.entities || []).join(", ")}</td>
229
+ </tr>`).join("")}
230
+ </table>
231
+
232
+ ${renderProtocolGraph(biz.protocolGraph)}
233
+ </div>`;
234
+ }
235
+ function renderProtocolGraph(edges) {
236
+ if (!edges || edges.length === 0)
237
+ return "";
238
+ // Group edges by context
239
+ const leadEdges = edges.filter((e) => ["新线索", "已联系", "已合格", "提案中", "赢单", "丢单"].includes(e.from) ||
240
+ ["新线索", "已联系", "已合格", "提案中", "赢单", "丢单"].includes(e.to));
241
+ const dealEdges = edges.filter((e) => ["交易创建", "阶段流转", "赢单", "丢单"].includes(e.from) ||
242
+ ["交易创建", "阶段流转", "赢单", "丢单"].includes(e.to));
243
+ const relationEdges = edges.filter((e) => ["公司", "联系人"].includes(e.from));
244
+ return `
245
+ <h3 style="margin-top:24px">🔗 业务协议图</h3>
246
+ <p style="font-size:13px;color:#64748b;margin-bottom:8px">全部 ${edges.length} 条协议边验证通过 — AI 代码未违反任何业务协议边</p>
247
+
248
+ ${leadEdges.length > 0 ? `
249
+ <div class="graph-section">
250
+ <h4>📈 线索生命周期</h4>
251
+ <div class="graph-flow">${leadEdges.map((e) => `
252
+ <span class="graph-node">${escapeHtml(e.from)}</span>
253
+ <span class="graph-arrow">→</span>
254
+ <span class="graph-label">${escapeHtml(e.label)}</span>
255
+ <span class="graph-arrow">→</span>
256
+ <span class="graph-node">${escapeHtml(e.to)}</span>
257
+ <span style="margin: 0 8px; color: #22c55e; font-size: 12px;">✓</span>
258
+ `).join("")}</div>
259
+ </div>` : ""}
260
+
261
+ ${dealEdges.length > 0 ? `
262
+ <div class="graph-section">
263
+ <h4>💰 交易管道</h4>
264
+ <div class="graph-flow">${dealEdges.map((e) => `
265
+ <span class="graph-node">${escapeHtml(e.from)}</span>
266
+ <span class="graph-arrow">→</span>
267
+ <span class="graph-label">${escapeHtml(e.label)}</span>
268
+ <span class="graph-arrow">→</span>
269
+ <span class="graph-node">${escapeHtml(e.to)}</span>
270
+ <span style="margin: 0 8px; color: #22c55e; font-size: 12px;">✓</span>
271
+ `).join("")}</div>
272
+ </div>` : ""}
273
+
274
+ ${relationEdges.length > 0 ? `
275
+ <div class="graph-section">
276
+ <h4>🔗 关联关系</h4>
277
+ <div class="graph-flow">${relationEdges.map((e) => `
278
+ <span class="graph-node">${escapeHtml(e.from)}</span>
279
+ <span class="graph-arrow">→</span>
280
+ <span class="graph-label">${escapeHtml(e.label)}</span>
281
+ <span class="graph-arrow">→</span>
282
+ <span class="graph-node">${escapeHtml(e.to)}</span>
283
+ <span style="margin: 0 8px; color: #22c55e; font-size: 12px;">✓</span>
284
+ `).join("")}</div>
285
+ </div>` : ""}
286
+ `;
287
+ }
288
+ function renderSessionDetails(sessions) {
289
+ return `
290
+ <div class="card">
291
+ <h2>📋 会话详情</h2>
292
+ <table>
293
+ <tr><th>会话 ID</th><th>意图</th><th>转换数</th><th>有效</th><th>指纹</th></tr>
294
+ ${sessions.details.map((d) => `
295
+ <tr>
296
+ <td style="font-family:monospace;font-size:12px">${escapeHtml(d.sessionId.slice(0, 24))}...</td>
297
+ <td>${escapeHtml(d.intent.slice(0, 50))}</td>
298
+ <td>${d.transitionCount}</td>
299
+ <td>${d.validTransitions}/${d.transitionCount}</td>
300
+ <td>${d.fingerprintVerified ? '✅' : d.fingerprintTampered ? '⚠ 篡改' : '—'}</td>
301
+ </tr>`).join("")}
302
+ </table>
303
+ </div>`;
304
+ }
305
+ function renderRecommendations(recs) {
306
+ return `
307
+ <div class="card">
308
+ <h2>💡 建议改进</h2>
309
+ ${recs.map((r) => `
310
+ <div class="rec ${r.severity}">
311
+ <div class="rec-severity" style="color:${sevColor(r.severity)}">${r.severity}</div>
312
+ <div class="rec-msg">${escapeHtml(r.message)}</div>
313
+ <div class="rec-action">→ ${escapeHtml(r.action)}</div>
314
+ </div>`).join("")}
315
+ </div>`;
316
+ }
317
+ // ── Helpers ──
318
+ function escapeHtml(s) {
319
+ return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
320
+ }
321
+ function fmtPct(v) { return `${(v * 100).toFixed(0)}%`; }
322
+ function verdictColor(v) {
323
+ if (v === "PASS")
324
+ return "#16a34a";
325
+ if (v === "WARN")
326
+ return "#d97706";
327
+ return "#dc2626";
328
+ }
329
+ function verdictIcon(v) {
330
+ if (v === "PASS")
331
+ return "✅";
332
+ if (v === "WARN")
333
+ return "⚠️";
334
+ return "❌";
335
+ }
336
+ function verdictLabel(v) {
337
+ if (v === "PASS")
338
+ return "通过 — 信任";
339
+ if (v === "WARN")
340
+ return "警告 — 需关注";
341
+ return "失败 — 需修复";
342
+ }
343
+ function statusIcon(s) {
344
+ if (s === "protected")
345
+ return "🛡";
346
+ if (s === "partial")
347
+ return "⚠";
348
+ return "✗";
349
+ }
350
+ function statusLabel(s) {
351
+ if (s === "protected")
352
+ return "已防护";
353
+ if (s === "partial")
354
+ return "部分防护";
355
+ return "未防护";
356
+ }
357
+ function coverageIcon(c) {
358
+ if (c === "full")
359
+ return "✓";
360
+ if (c === "partial")
361
+ return "◐";
362
+ return "✗";
363
+ }
364
+ function coverageLabel(c) {
365
+ if (c === "full")
366
+ return "完整覆盖";
367
+ if (c === "partial")
368
+ return "部分覆盖";
369
+ return "未覆盖";
370
+ }
371
+ function sevColor(s) {
372
+ if (s === "critical")
373
+ return "#dc2626";
374
+ if (s === "high")
375
+ return "#d97706";
376
+ if (s === "medium")
377
+ return "#6366f1";
378
+ return "#94a3b8";
379
+ }
package/dist/audit/formatters/json.js ADDED
@@ -0,0 +1,11 @@
1
+ "use strict";
2
+ /**
3
+ * Phase 9: JSON Formatter
4
+ *
5
+ * Machine-readable governance report output.
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
8
+ exports.formatAsJSON = formatAsJSON;
9
+ function formatAsJSON(report, compress = false) {
10
+ return JSON.stringify(report, null, compress ? 0 : 2);
11
+ }
package/dist/audit/formatters/markdown.js ADDED
@@ -0,0 +1,192 @@
1
+ "use strict";
2
+ /**
3
+ * Phase 9: Markdown Formatter
4
+ *
5
+ * Generates a self-contained governance report in GitHub-flavored markdown.
6
+ * Suitable for CI artifacts, PR comments, or PDF conversion.
7
+ */
8
+ Object.defineProperty(exports, "__esModule", { value: true });
9
+ exports.formatAsMarkdown = formatAsMarkdown;
10
+ function percent(v) {
11
+ return `${(v * 100).toFixed(0)}%`;
12
+ }
13
+ function verdictBadge(v) {
14
+ if (v === "PASS")
15
+ return "🟢 **PASS**";
16
+ if (v === "WARN")
17
+ return "🟡 **WARN**";
18
+ return "🔴 **FAIL**";
19
+ }
20
+ function severityEmoji(s) {
21
+ if (s === "critical")
22
+ return "🔴";
23
+ if (s === "high")
24
+ return "🟠";
25
+ if (s === "medium")
26
+ return "🟡";
27
+ return "⚪";
28
+ }
29
+ function formatAsMarkdown(report) {
30
+ const { metadata, sessions, ssv, plsb, provenance, antibodies, verdict, recommendations, business } = report;
31
+ const lines = [];
32
+ // ── Title ──
33
+ lines.push("# AI Code Governance Report");
34
+ lines.push("");
35
+ lines.push(`**Progmune Runtime** — AI Generated Software Governance`);
36
+ lines.push("");
37
+ lines.push(`| Field | Value |`);
38
+ lines.push(`|-------|-------|`);
39
+ lines.push(`| Generator | ${metadata.generator} v${metadata.version} |`);
40
+ lines.push(`| Timestamp | ${metadata.timestamp} |`);
41
+ lines.push(`| Project | \`${metadata.projectId}\` |`);
42
+ lines.push(`| Validator | ${metadata.validator} |`);
43
+ lines.push("");
44
+ // ── Verdict ──
45
+ lines.push("## Verdict");
46
+ lines.push("");
47
+ lines.push(`### ${verdictBadge(verdict)}`);
48
+ lines.push("");
49
+ // ── Sessions ──
50
+ lines.push("## Sessions");
51
+ lines.push("");
52
+ lines.push(`| Metric | Value |`);
53
+ lines.push(`|--------|-------|`);
54
+ lines.push(`| Total Sessions | ${sessions.total} |`);
55
+ lines.push(`| Verified | ${sessions.verified} |`);
56
+ lines.push(`| Compromised | ${sessions.compromised} |`);
57
+ lines.push(`| Coverage | ${percent(sessions.total > 0 ? sessions.verified / sessions.total : 0)} |`);
58
+ lines.push("");
59
+ // ── SSV ──
60
+ lines.push("## Semantic State Verification (SSV)");
61
+ lines.push("");
62
+ lines.push(`| Metric | Value |`);
63
+ lines.push(`|--------|-------|`);
64
+ lines.push(`| Total Checks | ${ssv.totalChecks} |`);
65
+ lines.push(`| Passed | ${ssv.passed} |`);
66
+ lines.push(`| Failed | ${ssv.failed} |`);
67
+ lines.push("");
68
+ // ── PLSB ──
69
+ lines.push("## Protocol Lifecycle Security Benchmark (PLSB)");
70
+ lines.push("");
71
+ lines.push(`| Metric | Value |`);
72
+ lines.push(`|--------|-------|`);
73
+ lines.push(`| Version | v${plsb.version} |`);
74
+ lines.push(`| Total Entries | ${plsb.totalEntries} (${plsb.verifiedEntries} verified) |`);
75
+ lines.push(`| Coverage | ${percent(plsb.coverage)} |`);
76
+ lines.push(`| Recall | ${percent(plsb.recall)} |`);
77
+ lines.push(`| Precision | ${percent(plsb.precision)} |`);
78
+ lines.push("");
79
+ if (plsb.matchedCategories.length > 0) {
80
+ lines.push(`**Covered:** ${plsb.matchedCategories.join(", ")}`);
81
+ lines.push("");
82
+ }
83
+ if (plsb.unmatchedCategories.length > 0) {
84
+ lines.push(`**Uncovered:** ${plsb.unmatchedCategories.join(", ")}`);
85
+ lines.push("");
86
+ }
87
+ // ── Provenance ──
88
+ lines.push("## Provenance (Ledger Integrity)");
89
+ lines.push("");
90
+ lines.push(`| Metric | Value |`);
91
+ lines.push(`|--------|-------|`);
92
+ lines.push(`| Total Fingerprints | ${provenance.totalFingerprints} |`);
93
+ lines.push(`| Verified | ${provenance.verified} |`);
94
+ lines.push(`| Tampered | ${provenance.tampered} |`);
95
+ lines.push(`| Not Found | ${provenance.notFound} |`);
96
+ lines.push("");
97
+ // ── Antibodies ──
98
+ lines.push("## Immune System (Antibodies)");
99
+ lines.push("");
100
+ lines.push(`| Metric | Value |`);
101
+ lines.push(`|--------|-------|`);
102
+ lines.push(`| Total Hits | ${antibodies.totalHits} |`);
103
+ lines.push(`| Fast-Path Hits | ${antibodies.fastPathHits} |`);
104
+ lines.push(`| LLM Calls Saved | ${antibodies.llmCallsSaved} |`);
105
+ lines.push(`| Tokens Saved | ${antibodies.tokensSaved.toLocaleString()} |`);
106
+ lines.push("");
107
+ // ── Session Details ──
108
+ if (sessions.details.length > 0 && sessions.details.length <= 20) {
109
+ lines.push("## Session Details");
110
+ lines.push("");
111
+ lines.push(`| Session ID | Intent | Transitions | Valid | Verified | Consistent |`);
112
+ lines.push(`|------------|--------|-------------|-------|----------|------------|`);
113
+ for (const d of sessions.details) {
114
+ const v = d.fingerprintVerified ? "✅" : "❌";
115
+ const c = d.consistencyPassed ? "✅" : "⚠️";
116
+ lines.push(`| \`${d.sessionId.slice(0, 20)}...\` | ${d.intent.slice(0, 30)} | ${d.transitionCount} | ${d.validTransitions} | ${v} | ${c} |`);
117
+ }
118
+ lines.push("");
119
+ }
120
+ // ── Business Translation (Trust Report) ──
121
+ if (business) {
122
+ const biz = business;
123
+ lines.push("## Governance Summary");
124
+ lines.push("");
125
+ lines.push("### Protected Against");
126
+ lines.push("");
127
+ lines.push(`- ✅ **${biz.summary.totalRisksMitigated}** risk categories mitigated`);
128
+ lines.push(`- ✅ **${biz.summary.knowledgeDomainsCovered}** business knowledge domains covered`);
129
+ lines.push(`- ✅ **${biz.summary.businessProtocolsIntact}** business protocol edges verified`);
130
+ lines.push("");
131
+ // Risk Protection
132
+ lines.push("### Risk Protection");
133
+ lines.push("");
134
+ lines.push("| Category | Status | Description | Protocols | Violations Prevented |");
135
+ lines.push("|----------|--------|-------------|-----------|---------------------|");
136
+ for (const r of biz.risks) {
137
+ const icon = r.status === "protected" ? "🟢" : r.status === "partial" ? "🟡" : "🔴";
138
+ const statusLabel = r.status === "protected" ? "Protected" : r.status === "partial" ? "Partial" : "Exposed";
139
+ lines.push(`| ${icon} ${r.category} | ${statusLabel} | ${r.description} | ${r.protocolsCovered} | ${r.violationsPrevented} |`);
140
+ }
141
+ lines.push("");
142
+ // Knowledge Coverage
143
+ lines.push("### Knowledge Coverage");
144
+ lines.push("");
145
+ lines.push("| Domain | Coverage | Protocols | Entities |");
146
+ lines.push("|--------|----------|-----------|----------|");
147
+ for (const k of biz.knowledgeCoverage) {
148
+ const icon = k.coverage === "full" ? "🟢" : k.coverage === "partial" ? "🟡" : "🔴";
149
+ const label = k.coverage === "full" ? "Full" : k.coverage === "partial" ? "Partial" : "None";
150
+ const entities = k.entities?.join(", ") || "—";
151
+ lines.push(`| ${icon} ${k.domain} | ${label} | ${k.protocols.join(", ") || "—"} | ${entities} |`);
152
+ }
153
+ lines.push("");
154
+ // Protocol Graph
155
+ if (biz.protocolGraph.length > 0) {
156
+ lines.push("### Business Protocol Graph");
157
+ lines.push("");
158
+ lines.push(`All **${biz.summary.businessProtocolsIntact}** edges verified — no AI-generated code violated business protocol edges.`);
159
+ lines.push("");
160
+ lines.push("| From | To | Label | Verified |");
161
+ lines.push("|------|----|-------|----------|");
162
+ for (const e of biz.protocolGraph.slice(0, 15)) {
163
+ const check = e.verified ? "✅" : "❌";
164
+ const desc = e.description ? ` (${e.description})` : "";
165
+ lines.push(`| ${e.from} | ${e.to} | ${e.label}${desc} | ${check} |`);
166
+ }
167
+ lines.push("");
168
+ }
169
+ }
170
+ // ── Recommendations ──
171
+ if (recommendations.length > 0) {
172
+ lines.push("## Recommendations");
173
+ lines.push("");
174
+ for (const r of recommendations) {
175
+ lines.push(`- ${severityEmoji(r.severity)} **[${r.severity.toUpperCase()}]** ${r.message}`);
176
+ lines.push(` - Action: ${r.action}`);
177
+ }
178
+ lines.push("");
179
+ }
180
+ else {
181
+ lines.push("## Recommendations");
182
+ lines.push("");
183
+ lines.push("✅ No issues found. All systems nominal.");
184
+ lines.push("");
185
+ }
186
+ // ── Footer ──
187
+ lines.push("---");
188
+ lines.push("");
189
+ lines.push("*Report generated by [Progmune Runtime](https://github.com/shenlian19831109/progmune-runtime) — AI Generated Software Governance*");
190
+ lines.push("");
191
+ return lines.join("\n");
192
+ }