progmune-runtime 3.4.1 → 3.5.0

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [3.5.0] — 2026-08-22
+
+### 新增：多语言合并 IR（注册表式提取）
+
+- `src/extract-project-ir.ts`：`LanguageExtractor` 注册表（detect + extract），`extractProjectIR` 合并所有检测到语言的 FunctionInfo——混合项目中 TS 与 Python 函数共存于同一 IR
+- agent loop 感知路径（`extractIRWithDelta`）、`execute()` 的 ir.json 写盘、MCP server 统一走合并入口：Python 项目的函数协议链进入 agent 编排范围（此前 agent 侧 IR 仅 TS）
+- `extractIRPython` 默认写临时文件（可选 `outPath`），不再覆盖项目根 ir.json；单语言提取失败不中断其余语言，全部失败才抛错（保留 execute 硬失败语义）
+- 新增语言（Go/Java/Rust）：实现 detect + extract → `LANGUAGE_EXTRACTORS` 注册一条 → 调用方零改动
+
+### 修复：function-synonyms 本地超时（遗留）
+
+- `runBootstrapValidation` 无参调用结果缓存（同进程复用，语料重度测试 5 次重计算降为 1 次）
+- vitest 改用 forks 池 + 4GB 堆上限（本地语料丰富时 threads 池触 V8 自适应堆上限 OOM）；本地 7/7 通过（~24s）
+
+### 验证
+
+- 相关套件 26/26；`npm run check` 0 失败；合并冒烟：progmune-runtime 自身 4043 函数（TS 1949 + Python 2094）
+
 ## [3.4.1] — 2026-08-22
 
 ### 修复：`npm run check` 四项失败根因

package/README.md

@@ -106,6 +106,8 @@ Progmune is honest about what it can and cannot verify.
 | **C** | ⚠️ Research-only | Gold benchmark F1=16.5%. L3 cross-function experiment terminated; L4 not planned. See [C Language Status](https://github.com/shenlian19831109/progmune-runtime/blob/main/docs/c-language-status.md). |
 | **Go, Java** | ❌ None | Planned |
 
+**Multi-language IR (registry-based).** TypeScript (ts-morph) and Python (AST) extractors are registered entries in one registry (`src/extract-project-ir.ts`); `extractProjectIR` merges every detected language into a single function IR shared by the agent loop, `execute()`, and the MCP server — the agent composes function-protocol chains across both languages. Adding a language (Go, Java, …) = register one extractor entry; callers don't change.
+
 **Framework adapters: 2/13.** Express ✅ and tRPC ✅ have dedicated detectors; Next.js has version-aware governance; NestJS is partial. Django, FastAPI and 8 more remain — framework adaptation is the #1 product gap.
 
 ### What Progmune does NOT cover (honest boundaries)
@@ -172,9 +174,10 @@ SDK (src/sdk.ts)           verify() → APPROVED / NEEDS_REVIEW / BLOCKED
        ├─ Policy Engine     Enterprise policy enforcement (ALLOW/WARN/BLOCK)
        ├─ SSG Validator     Protocol state machine verification
        ├─ Protocol Detector  Regex-based protocol step detection (22 detectors)
-       ├─ IR Extractors     TypeScript (ts-morph) + Python (ast module) → function IR;
-       │                    source-level markers: taint tracking, import resolution,
-       │                    qualified call chains, cross-file template analysis
+       ├─ IR Extraction      Registry-based: TS (ts-morph) + Python (ast module)
+       │                     merged into one function IR per project;
+       │                     source-level markers: taint tracking, import resolution,
+       │                     qualified call chains, cross-file template analysis
        ├─ Repair Executor   detect → plan → fix → validate → commit/rollback
        └─ Knowledge Base    31 domains, 140 rules, evidence chains
 ```

package/README.zh-CN.md

@@ -106,6 +106,8 @@ Progmune 对能验证什么、不能验证什么保持诚实。
 | **C** | ⚠️ 仅研究 | 黄金基准 F1=16.5%。L3 跨函数实验已终止；L4 无计划。见 [C 语言状态](https://github.com/shenlian19831109/progmune-runtime/blob/main/docs/c-language-status.md)。 |
 | **Go, Java** | ❌ 无 | 规划中 |
 
+**多语言 IR（注册表式）。** TypeScript（ts-morph）与 Python（AST）提取器是同一注册表（`src/extract-project-ir.ts`）中的注册项；`extractProjectIR` 把检测到的所有语言合并为一份函数 IR，由 agent loop、`execute()` 与 MCP server 共享——agent 可在两种语言上编排函数协议链。新增语言（Go、Java……）= 注册一条提取器，调用方零改动。
+
 **框架适配器：2/13。** Express ✅ 与 tRPC ✅ 有专用检测器；Next.js 有版本感知治理；NestJS 部分支持。Django、FastAPI 及另外 8 个待适配——框架适配是 #1 产品缺口。
 
 ### Progmune 不覆盖什么（诚实边界）
@@ -172,7 +174,8 @@ SDK (src/sdk.ts)           verify() → APPROVED / NEEDS_REVIEW / BLOCKED
        ├─ 策略引擎           企业策略执行（ALLOW/WARN/BLOCK）
        ├─ SSG 校验器         协议状态机验证
        ├─ 协议检测器         基于正则的协议步骤检测（22 个检测器）
-       ├─ IR 提取器          TypeScript（ts-morph）+ Python（ast 模块）→ 函数 IR；
+       ├─ IR 提取            注册表式：TS（ts-morph）+ Python（ast 模块）
+       │                     合并为每项目一份函数 IR；
        │                     源码级标记：污点追踪、import 解析、限定调用链、跨文件模板分析
        ├─ 修复执行器         detect → plan → fix → validate → commit/rollback
        └─ 知识库             31 个域、140 条规则、证据链

package/dist/agent-perception.js

@@ -49,7 +49,7 @@ exports.extractIRWithDelta = extractIRWithDelta;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
-const extract_ir_1 = require("./extract-ir");
+const extract_project_ir_1 = require("./extract-project-ir");
 // ── Git Context ──
 function git(projectPath, args) {
     return (0, child_process_1.execSync)(`git -C "${projectPath}" ${args}`, {
@@ -125,7 +125,7 @@ function listSourceFiles(projectPath) {
  * prevNames 缺省时只返回全量 IR（delta 为空）。
  */
 function extractIRWithDelta(projectPath, prevNames) {
-    const ir = (0, extract_ir_1.extractIR)(projectPath);
+    const ir = (0, extract_project_ir_1.extractProjectIR)(projectPath);
     const names = ir.map((f) => String(f.name || "")).filter(Boolean);
     if (!prevNames) {
         return { ir, delta: { added: [], removed: [], functionCount: names.length } };

package/dist/agent-perception.test.js

@@ -41,16 +41,16 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 const vitest_1 = require("vitest");
 const child_process_1 = require("child_process");
-const extract_ir_1 = require("./extract-ir");
+const extract_project_ir_1 = require("./extract-project-ir");
 const agent_perception_1 = require("./agent-perception");
 vitest_1.vi.mock("child_process", () => ({
     execSync: vitest_1.vi.fn(),
 }));
-vitest_1.vi.mock("./extract-ir", () => ({
-    extractIR: vitest_1.vi.fn(),
+vitest_1.vi.mock("./extract-project-ir", () => ({
+    extractProjectIR: vitest_1.vi.fn(),
 }));
 const mockExecSync = vitest_1.vi.mocked(child_process_1.execSync);
-const mockExtractIR = vitest_1.vi.mocked(extract_ir_1.extractIR);
+const mockExtractProjectIR = vitest_1.vi.mocked(extract_project_ir_1.extractProjectIR);
 (0, vitest_1.beforeEach)(() => {
     vitest_1.vi.clearAllMocks();
 });
@@ -82,7 +82,7 @@ const mockExtractIR = vitest_1.vi.mocked(extract_ir_1.extractIR);
         (0, vitest_1.expect)(ctx.error).toContain("not a git repository");
     });
     (0, vitest_1.it)("extractIRWithDelta 计算新增/消失函数差集", () => {
-        mockExtractIR.mockReturnValue([
+        mockExtractProjectIR.mockReturnValue([
             { name: "verify_password" },
             { name: "main" },
         ]);

package/dist/bootstrap-validation.js

@@ -69,8 +69,23 @@ function buildPath(startFn, rules, visited) {
 }
 /**
  * Run the bootstrap validation experiment.
+ *
+ * 无参调用结果缓存（纯计算、确定性）：同进程内多次调用复用同一结果。
+ * 运行时与本地语料规模线性相关（语料丰富时可 >30s / 2GB 堆）——
+ * function-synonyms 等测试会 5 次重计算，缓存降为 1 次。
  */
+let _defaultResultCache = null;
 async function runBootstrapValidation(existingRules, extraSequences) {
+    if (!existingRules && !extraSequences) {
+        if (!_defaultResultCache) {
+            _defaultResultCache = runBootstrapValidationUncached();
+        }
+        return _defaultResultCache;
+    }
+    return runBootstrapValidationUncached(existingRules, extraSequences);
+}
+/** 原实现（无缓存）。 */
+async function runBootstrapValidationUncached(existingRules, extraSequences) {
     // 1. Ground truth
     const defs = (0, protocol_coverage_1.loadDefaultProtocolDefinitions)();
     const originalRules = existingRules || new Map();

package/dist/execute.js

@@ -49,7 +49,7 @@ exports.verifyFileMarker = verifyFileMarker;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const planner_1 = require("./planner");
-const extract_ir_1 = require("./extract-ir");
+const extract_project_ir_1 = require("./extract-project-ir");
 const failure_collector_1 = require("./failure-collector");
 const emitter_1 = require("./emitter");
 const METRICS_FILE = ".progmune_corpus/metrics.json";
@@ -101,7 +101,7 @@ async function execute(intent, projectPath, filePath) {
     // 1. IR extraction
     let ir;
     try {
-        ir = (0, extract_ir_1.extractIR)(projectPath);
+        ir = (0, extract_project_ir_1.extractProjectIR)(projectPath);
     }
     catch (e) {
         return { success: false, degraded: false, code: "", sessionId: "", hash: "", ruleHash: "", irFunctionCount: 0, protocolRuleCount: 0, violations: 0, repairApplied: false, repairCount: 0, repairBranchIds: [], branchWinner: undefined, error: `IR extraction failed: ${e.message}` };

package/dist/extract-ir-python.js

@@ -50,10 +50,18 @@ exports.extractIRPython = extractIRPython;
 exports.isPythonProject = isPythonProject;
 const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
-function extractIRPython(projectRoot) {
+/**
+ * @param projectRoot - Project root to scan
+ * @param outPath - Output path for the Python script. Defaults to a temp
+ *   file (cleaned up afterwards) so extraction never clobbers the project's
+ *   own ir.json — the merged extractProjectIR runs this on TS projects too.
+ *   Pass an explicit path when the extracted IR must be persisted.
+ */
+function extractIRPython(projectRoot, outPath) {
     const scriptPath = path.resolve(__dirname, "..", "tools", "extract_ir.py");
-    const irPath = path.resolve(projectRoot, "ir.json");
+    const irPath = outPath ?? path.join(os.tmpdir(), `progmune-py-ir-${process.pid}-${Date.now()}.json`);
     const cmd = `python3 "${scriptPath}" "${projectRoot}" "${irPath}"`;
     try {
         (0, child_process_1.execSync)(cmd, { encoding: "utf-8", stdio: "pipe" });
@@ -64,7 +72,18 @@ function extractIRPython(projectRoot) {
     }
     if (!fs.existsSync(irPath))
         return [];
-    const raw = JSON.parse(fs.readFileSync(irPath, "utf-8"));
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(irPath, "utf-8"));
+    }
+    finally {
+        if (!outPath) {
+            try {
+                fs.unlinkSync(irPath);
+            }
+            catch { /* 临时文件清理失败无害 */ }
+        }
+    }
     if (!Array.isArray(raw))
         return [];
     // Map Python IR records to FunctionInfo

package/dist/extract-project-ir.js

@@ -0,0 +1,136 @@
+"use strict";
+/**
+ * Project IR extraction — merged multi-language entry point.
+ *
+ * Registry pattern: each supported language contributes a detector +
+ * extractor entry. extractProjectIR runs every extractor whose language
+ * is detected in the project and merges the results into one FunctionInfo
+ * list, so TS + Python coexist in a mixed project.
+ *
+ * Adding a language later (Go, Java, ...) = register one entry in
+ * LANGUAGE_EXTRACTORS. The agent loop (extractIRWithDelta), execute()'s
+ * ir.json write and the MCP server all pick it up automatically — no
+ * dispatch rewiring anywhere else.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LANGUAGE_EXTRACTORS = void 0;
+exports.detectLanguages = detectLanguages;
+exports.extractProjectIR = extractProjectIR;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const extract_ir_1 = require("./extract-ir");
+const extract_ir_python_1 = require("./extract-ir-python");
+const SKIP_DIRS = new Set([
+    "node_modules", "dist", "build", ".git", ".progmune_corpus",
+    "__pycache__", "venv", ".venv",
+]);
+/** 有界递归扫描：项目是否含指定扩展名源文件（首个命中即返回）。 */
+function hasSourceFiles(projectRoot, exts) {
+    const stack = [projectRoot];
+    const seen = new Set();
+    while (stack.length > 0) {
+        const dir = stack.pop();
+        if (seen.has(dir))
+            continue;
+        seen.add(dir);
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            const full = path.join(dir, e.name);
+            if (e.isDirectory()) {
+                if (!SKIP_DIRS.has(e.name) && !e.name.startsWith("."))
+                    stack.push(full);
+            }
+            else if (exts.has(path.extname(e.name))) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+/** 已注册语言提取器（新增语言在此追加一条）。 */
+exports.LANGUAGE_EXTRACTORS = [
+    {
+        language: "typescript",
+        detect: (p) => hasSourceFiles(p, new Set([".ts", ".tsx"])),
+        extract: (p) => (0, extract_ir_1.extractIR)(p),
+    },
+    {
+        language: "python",
+        detect: (p) => hasSourceFiles(p, new Set([".py"])),
+        extract: (p) => (0, extract_ir_python_1.extractIRPython)(p),
+    },
+];
+/** 项目检测到的语言列表（审计/标签用）。 */
+function detectLanguages(projectRoot) {
+    return exports.LANGUAGE_EXTRACTORS.filter((e) => e.detect(projectRoot)).map((e) => e.language);
+}
+/**
+ * Extract the merged project IR across all detected languages.
+ *
+ * 单语言提取失败不拖垮其余语言（与感知层 best-effort 原则一致）；
+ * 仅当所有检测到的语言全部失败时才抛错，保留 execute 的硬失败语义。
+ *
+ * @param projectRoot - Absolute path to project root
+ * @param extractors - Registry override (tests inject fake entries here)
+ * @returns Merged FunctionInfo list
+ */
+function extractProjectIR(projectRoot, extractors = exports.LANGUAGE_EXTRACTORS) {
+    const merged = [];
+    let anyDetected = false;
+    let anySucceeded = false;
+    for (const e of extractors) {
+        if (!e.detect(projectRoot))
+            continue;
+        anyDetected = true;
+        try {
+            merged.push(...e.extract(projectRoot));
+            anySucceeded = true;
+        }
+        catch (err) {
+            console.error(`[extractProjectIR] ${e.language} 提取失败: ${err?.message || err}`);
+        }
+    }
+    if (anyDetected && !anySucceeded) {
+        throw new Error("所有已检测语言的 IR 提取均失败");
+    }
+    return merged;
+}

package/dist/extract-project-ir.test.js

@@ -0,0 +1,116 @@
+"use strict";
+/**
+ * Project IR extraction (merged multi-language registry) — unit tests.
+ *
+ * Registry injection: tests pass fake extractor entries to extractProjectIR
+ * so no real extractor runs; the real detectors are covered by two
+ * temp-dir tests (per module convention, FS use is kept minimal).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const extract_project_ir_1 = require("./extract-project-ir");
+(0, vitest_1.describe)("extractProjectIR（注册表合并）", () => {
+    (0, vitest_1.it)("合并所有检测到语言的函数", () => {
+        const tsFns = [{ name: "getSession", file: "src/auth.ts" }];
+        const pyFns = [{ name: "verify_password", file: "auth_service.py" }];
+        const extractors = [
+            { language: "typescript", detect: () => true, extract: () => tsFns },
+            { language: "python", detect: () => true, extract: () => pyFns },
+        ];
+        const ir = (0, extract_project_ir_1.extractProjectIR)("/tmp/fake", extractors);
+        (0, vitest_1.expect)(ir).toEqual([...tsFns, ...pyFns]);
+    });
+    (0, vitest_1.it)("未检测到的语言不运行提取器", () => {
+        const ran = [];
+        const extractors = [
+            { language: "typescript", detect: () => true, extract: () => { ran.push("ts"); return []; } },
+            { language: "python", detect: () => false, extract: () => { ran.push("py"); return []; } },
+        ];
+        (0, extract_project_ir_1.extractProjectIR)("/tmp/fake", extractors);
+        (0, vitest_1.expect)(ran).toEqual(["ts"]);
+    });
+    (0, vitest_1.it)("单语言提取失败不拖垮其余语言", () => {
+        vitest_1.vi.spyOn(console, "error").mockImplementation(() => { });
+        const extractors = [
+            { language: "typescript", detect: () => true, extract: () => { throw new Error("broken tsconfig"); } },
+            { language: "python", detect: () => true, extract: () => [{ name: "f" }] },
+        ];
+        const ir = (0, extract_project_ir_1.extractProjectIR)("/tmp/fake", extractors);
+        (0, vitest_1.expect)(ir).toEqual([{ name: "f" }]);
+    });
+    (0, vitest_1.it)("所有检测到的语言都失败时抛错（保留 execute 硬失败语义）", () => {
+        vitest_1.vi.spyOn(console, "error").mockImplementation(() => { });
+        const extractors = [
+            { language: "typescript", detect: () => true, extract: () => { throw new Error("broken"); } },
+        ];
+        (0, vitest_1.expect)(() => (0, extract_project_ir_1.extractProjectIR)("/tmp/fake", extractors)).toThrow();
+    });
+    (0, vitest_1.it)("无任何检测到的语言时返回空数组，不抛错", () => {
+        const extractors = [
+            { language: "typescript", detect: () => false, extract: () => [] },
+            { language: "python", detect: () => false, extract: () => [] },
+        ];
+        (0, vitest_1.expect)((0, extract_project_ir_1.extractProjectIR)("/tmp/fake", extractors)).toEqual([]);
+    });
+});
+(0, vitest_1.describe)("detectLanguages（真实探测器）", () => {
+    (0, vitest_1.it)("TS/Python 混合项目两种语言都被检测", () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), "pm-lang-"));
+        try {
+            fs.writeFileSync(path.join(dir, "main.ts"), "export function f() {}");
+            fs.mkdirSync(path.join(dir, "src"));
+            fs.writeFileSync(path.join(dir, "src", "app.py"), "def g():\n    pass\n");
+            (0, vitest_1.expect)((0, extract_project_ir_1.detectLanguages)(dir).sort()).toEqual(["python", "typescript"]);
+        }
+        finally {
+            fs.rmSync(dir, { recursive: true, force: true });
+        }
+    });
+    (0, vitest_1.it)("依赖目录里的源文件不计入检测（node_modules/.py）", () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), "pm-lang2-"));
+        try {
+            fs.mkdirSync(path.join(dir, "node_modules", "pkg"), { recursive: true });
+            fs.writeFileSync(path.join(dir, "node_modules", "pkg", "x.py"), "x = 1\n");
+            (0, vitest_1.expect)((0, extract_project_ir_1.detectLanguages)(dir)).toEqual([]);
+        }
+        finally {
+            fs.rmSync(dir, { recursive: true, force: true });
+        }
+    });
+});

package/dist/function-synonyms.test.js

@@ -49,12 +49,16 @@ const bootstrap_validation_1 = require("./bootstrap-validation");
     });
 });
 (0, vitest_1.describe)("Synonym Normalization Impact", () => {
+    // 注：这两个测试的重度与本地语料规模线性相关（.progmune_corpus 864+ 条时
+    // 实测 40-130s）。CI 干净检出无语料 → 秒级通过；本地语料丰富 → 需放宽超时。
+    // 显式超时 180s，不依赖 vitest 全局 30s。
+    const CORPUS_HEAVY_TIMEOUT = 180000;
     (0, vitest_1.it)("reduces unique function count via normalization", async () => {
         const report = await (0, function_synonyms_1.runSynonymNormalization)();
         (0, vitest_1.expect)(report.uniqueAfter).toBeLessThanOrEqual(report.uniqueBefore);
         (0, vitest_1.expect)(report.uniqueAfter).toBeLessThanOrEqual(report.uniqueBefore);
         (0, function_synonyms_1.printSynonymReport)(report);
-    });
+    }, CORPUS_HEAVY_TIMEOUT);
     (0, vitest_1.it)("bootstrap function overlap improves with normalization", async () => {
         // Baseline without normalization
         const baseline = await (0, bootstrap_validation_1.runBootstrapValidation)();
@@ -64,5 +68,5 @@ const bootstrap_validation_1 = require("./bootstrap-validation");
         console.log(`Function overlap: ${(after.functionOverlap * 100).toFixed(0)}%`);
         console.log(`State overlap: ${(after.stateOverlap * 100).toFixed(0)}%`);
         console.log(`Behavioral: ${after.behavioralMatch}/${after.behavioralTotal}`);
-    }, 30000);
+    }, CORPUS_HEAVY_TIMEOUT);
 });

package/dist/mcp-server.mjs

@@ -39,8 +39,7 @@ for (const envPath of [
     }
 }
 import { plan } from "./planner.js";
-import { extractIR } from "./extract-ir.js";
-import { extractIRPython, isPythonProject } from "./extract-ir-python.js";
+import { extractProjectIR, detectLanguages } from "./extract-project-ir.js";
 import { emitCode } from "./emitter.js";
 import { recordRun } from "./feedback.js";
 import { reportFingerprints } from "./immune-reporter.js";
@@ -419,10 +418,9 @@ Then restart Claude Code.`,
                 log.warn(`No .ts files found in project root, IR may be empty`);
             }
             // IR extraction — auto-detect language
-            const isPython = isPythonProject(projectPath);
             let ir;
             try {
-                ir = isPython ? extractIRPython(projectPath) : extractIR(projectPath);
+                ir = extractProjectIR(projectPath);
             }
             catch (e) {
                 return {
@@ -573,9 +571,9 @@ Then restart Claude Code.`,
             const warn = (msg) => results.push(`! ${msg}`);
             // 1. IR extraction — auto-detect language
             try {
-                const py = isPythonProject(projectPath);
-                const ir = py ? extractIRPython(projectPath) : extractIR(projectPath);
-                pass(`IR (${py ? "Python" : "TypeScript"}): ${ir.length} functions extracted`);
+                const langs = detectLanguages(projectPath);
+                const ir = extractProjectIR(projectPath);
+                pass(`IR (${langs.length > 0 ? langs.join("+") : "无已支持语言"}): ${ir.length} functions extracted`);
             }
             catch (e) {
                 fail(`IR extraction: ${e.message}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "progmune-runtime",
-  "version": "3.4.1",
+  "version": "3.5.0",
   "description": "Progmune — AI Trust Decision Engine. Verify AI-generated code before it reaches production. Outputs APPROVED / NEEDS_REVIEW / BLOCKED with evidence.",
   "files": [
     "dist/",