progmune-runtime 3.6.0 → 3.6.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [3.6.1] — 2026-08-23
+
+### 文档
+
+- README 社区章节直展双群二维码：微信（`assets/wechat-group.png`）+ WhatsApp（`assets/whatsapp-group.jpg`），中英双语同步
+- 微信群码 7 天过期提醒 workflow 文案同步直展形态
+
 ## [3.6.0] — 2026-08-23
 
 ### 新增：SSG endState 检查（序列末尾资源未释放）

package/README.md

@@ -197,10 +197,12 @@ SDK (src/sdk.ts)           verify() → APPROVED / NEEDS_REVIEW / BLOCKED
 ## Community & Feedback
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/shenlian19831109/progmune-runtime/main/assets/wechat-group.png" width="240" alt="Progmune user discussion group QR code" />
+  <img src="https://github.com/shenlian19831109/progmune-runtime/blob/main/assets/wechat-group.png?raw=true" width="200" alt="WeChat group QR code" />
+  &nbsp;&nbsp;&nbsp;
+  <img src="https://github.com/shenlian19831109/progmune-runtime/blob/main/assets/whatsapp-group.jpg?raw=true" width="200" alt="WhatsApp group QR code" />
 </p>
 
-Your feedback shapes Progmune. Scan the QR code to join the user discussion group (WeChat), or open a [GitHub Issue](https://github.com/shenlian19831109/progmune-runtime/issues) for bug reports, feature requests, and suggestions.
+Your feedback shapes Progmune. Scan the QR code to join the user discussion group (WeChat / WhatsApp), or open a [GitHub Issue](https://github.com/shenlian19831109/progmune-runtime/issues) for bug reports, feature requests, and suggestions.
 
 ---
 

package/README.zh-CN.md

@@ -196,10 +196,12 @@ SDK (src/sdk.ts)           verify() → APPROVED / NEEDS_REVIEW / BLOCKED
 ## 社区与反馈
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/shenlian19831109/progmune-runtime/main/assets/wechat-group.png" width="240" alt="Progmune 用户讨论群二维码" />
+  <img src="https://github.com/shenlian19831109/progmune-runtime/blob/main/assets/wechat-group.png?raw=true" width="200" alt="微信群二维码" />
+  &nbsp;&nbsp;&nbsp;
+  <img src="https://github.com/shenlian19831109/progmune-runtime/blob/main/assets/whatsapp-group.jpg?raw=true" width="200" alt="WhatsApp 群二维码" />
 </p>
 
-你的意见塑造 Progmune。扫码加入用户讨论群（微信），或通过 [GitHub Issue](https://github.com/shenlian19831109/progmune-runtime/issues) 提交缺陷报告、功能需求与建议。
+你的意见塑造 Progmune。扫码加入用户讨论群（微信 / WhatsApp），或通过 [GitHub Issue](https://github.com/shenlian19831109/progmune-runtime/issues) 提交缺陷报告、功能需求与建议。
 
 ---
 

package/dist/call-sequence.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * 跨函数调用序列构建（P4.6：跨函数传播）
+ *
+ * per-function 序列验证的扩展模型：
+ *   - 入口函数（不被任何项目函数调用的函数）的调用序列做传递展开——
+ *     内联被调项目函数体（深度 ≤ MAX_DEPTH、环安全），外部调用（非项目函数）
+ *     原样保留给规则匹配层（别名/词段匹配）。
+ *   - 非入口函数的孤立片段不再单独验证——违规归因到调用它的入口函数，
+ *     消除"helper 单独 close_file / read_file"类的片段误报。
+ *
+ * 边界（与 C 的 L3 同类，如实记录）：展开是语法内联（调用链扁平化），
+ * 不做数据流/指针/分支分析；跨文件依赖 IR 的 calls[] 图。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildCallSequences = buildCallSequences;
+const MAX_DEPTH = 4;
+/** 项目函数判定：有真实文件且非外部导入条目（external 条目无函数体可内联）。 */
+function isProjectFn(f) {
+    return !f.external && !!f.file && f.file !== "(external)";
+}
+/**
+ * 从 IR 构建验证序列：入口函数展开 + 非入口抑制。
+ * @param ir - FunctionInfo 列表（TS 或 Python 提取器输出）
+ */
+function buildCallSequences(ir) {
+    const fnMap = new Map();
+    for (const f of ir) {
+        if (isProjectFn(f))
+            fnMap.set(f.name, f);
+    }
+    // 被项目函数调用过的函数不是入口（其片段并入调用方展开序列）
+    const calledBy = new Set();
+    for (const f of ir) {
+        if (!isProjectFn(f))
+            continue;
+        for (const c of f.calls || []) {
+            if (fnMap.has(c))
+                calledBy.add(c);
+        }
+    }
+    const expand = (name, depth, visiting) => {
+        if (depth > MAX_DEPTH || visiting.has(name))
+            return [];
+        const fn = fnMap.get(name);
+        if (!fn)
+            return [name]; // 外部调用：保留给规则匹配
+        visiting.add(name);
+        const out = [];
+        for (const c of fn.calls || []) {
+            if (typeof c !== "string" || c.startsWith("__progmune_"))
+                continue;
+            out.push(...expand(c, depth + 1, visiting));
+        }
+        visiting.delete(name);
+        return out;
+    };
+    const sequences = [];
+    for (const f of ir) {
+        if (!isProjectFn(f))
+            continue;
+        if (calledBy.has(f.name))
+            continue; // 非入口：片段并入调用方
+        const calls = expand(f.name, 0, new Set());
+        if (calls.length === 0)
+            continue;
+        sequences.push({ calls, file: f.file, function: f.name });
+    }
+    return sequences;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "progmune-runtime",
-  "version": "3.6.0",
+  "version": "3.6.1",
   "description": "Progmune — AI Trust Decision Engine. Verify AI-generated code before it reaches production. Outputs APPROVED / NEEDS_REVIEW / BLOCKED with evidence.",
   "files": [
     "dist/",