progmune-runtime 3.7.28 → 3.7.29

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [3.7.29] — 2026-09-14
+
+### 失败语料沉淀接通（知识网络入口修复）
+
+- **断点**：信任引擎（trust CLI/agent/patrol/MCP）检出的违规从不写入失败语料库——此前只有 agent-loop 的 planner 失败会入 `.progmune_corpus`，引擎找到的真东西不进库，知识网络永远不喂新数据
+- **修复**（`src/trust/engine.ts` `writeTrustFailuresToCorpus`）：每次 evaluateTrust 的违规（cap 50/扫描）经 `recordFailure` 沉淀——intent=`trust-scan:<project>`、severity→SVL 阶梯映射（critical→SVL-4…low→SVL-1）、项目函数名快照（cap 300，语料挖掘词段门控输入）
+- **去重**：同日同（项目+规则+函数）sidecar 去重——反复扫描不重复沉淀
+- **噪声排除**：`PROTOCOL_CROSS_DOMAIN`/`PLAINTEXT_AUTH_WITHOUT_TLS`（已知高 FP、LLM 域映射抖动的 specific-check）不入语料；真实检出面（PATH_TRAVERSAL/SSRF/AUTHZ_CROSS_USER_WRITE/框架层/SSG）照常沉淀
+- **测试隔离**：VITEST/NODE_ENV=test 跳过——单测不污染语料
+- **首批入库验证**：本周 10 条真实检出全部入库存（openhop PATH_TRAVERSAL×4 + FASTIFY×1、open-webui SSRF×3 + AUTHZ_CROSS_USER_WRITE×1、mcp-from-openapi SSRF×1）——其中 open-webui 3 条 SSRF 命中的正是 fr-009 修复补丁加固的 web 加载器函数族，交叉验证 A3 扩展
+- 语料经 immune-reporter 既有管线脱敏上传 hub（默认脱敏口径不变）
+
+### 回归
+
+- build ✓ / 引擎测试 21 green ✓ / 语料写入全部 best-effort（永不打断扫描）
+
 ## [3.7.28] — 2026-09-14
 
 ### SSRF 检测 TS 化 + Python 形参污点扩展（A3，修复回归 fr-009/010/011 驱动）

package/dist/sdk.js

@@ -20,7 +20,7 @@ const risk_model_1 = require("./risk-model");
 const protocol_knowledge_1 = require("./protocol-knowledge");
 const evidence_repository_1 = require("./evidence-repository");
 /** Runtime version — stable public identifier. Internal layers evolve underneath. */
-exports.RUNTIME_VERSION = "3.7.28";
+exports.RUNTIME_VERSION = "3.7.29";
 function verify(filePath) {
     const cert = (0, certify_1.certify)(filePath);
     const kb = (0, protocol_knowledge_1.buildKnowledgeBase)();

package/dist/trust/engine.js

@@ -140,6 +140,11 @@ async function evaluateTrust(ctx) {
         ...fiberResult.violations,
     ];
     // ═══════════════════════════════════════
+    // ── 失败语料沉淀（2026-09-14）：信任引擎检出的违规写入本地语料库 ——
+    //    知识网络的入口。此前只有 agent-loop 的 planner 失败会入语料，
+    //    trust 扫描（CLI/agent/patrol/MCP）检出的真违规不沉淀。
+    //    测试环境跳过；同日同（项目+规则+函数）去重；语料写入永不打断扫描。
+    writeTrustFailuresToCorpus(ctx, allViolations);
     //  PHASE 3: SCORE
     // ═══════════════════════════════════════
     const policyResult = (0, score_calculator_1.scorePolicyCompliance)(allViolations);
@@ -1814,6 +1819,97 @@ function mapRiskSeverity(severity) {
         default: return "low";
     }
 }
+// ═══════════════════════════════════════════════════════════════
+// 失败语料沉淀（2026-09-14）：信任引擎违规 → .progmune_corpus
+// ═══════════════════════════════════════════════════════════════
+const SEVERITY_TO_SVL = {
+    critical: "SVL-4",
+    high: "SVL-3",
+    medium: "SVL-2",
+    low: "SVL-1",
+};
+/** 与 failure-corpus.ts 相同的语料目录解析（模块加载时定死 cwd 的语义） */
+function trustCorpusDir() {
+    if (process.env.PROGMUNE_CORPUS_DIR)
+        return process.env.PROGMUNE_CORPUS_DIR;
+    const projectDir = process.env.PROGMUNE_PROJECT_DIR || process.cwd();
+    return path.join(projectDir, ".progmune_corpus");
+}
+/**
+ * 把本次扫描检出的违规写入失败语料库（知识网络的入口）。
+ * - 测试环境（VITEST/NODE_ENV=test）跳过——单测不得污染语料
+ * - 同日同（项目+规则+函数）去重——反复扫描不重复沉淀
+ * - 全部 best-effort：语料写入失败绝不打断扫描主流程
+ */
+function writeTrustFailuresToCorpus(ctx, violations) {
+    if (process.env.VITEST === "true" || process.env.NODE_ENV === "test")
+        return;
+    if (violations.length === 0)
+        return;
+    try {
+        const { recordFailure } = require("../failure-corpus");
+        const fs = require("fs");
+        const corpusDir = trustCorpusDir();
+        const date = new Date().toISOString().slice(0, 10);
+        const dedupFile = path.join(corpusDir, `.trust-dedup-${date}.json`);
+        let seen = {};
+        try {
+            seen = JSON.parse(fs.readFileSync(dedupFile, "utf-8"));
+        }
+        catch { /* fresh day */ }
+        // 项目函数名快照（语料挖掘的词段门控输入），cap 300
+        let projectFunctions = [];
+        try {
+            const irPath = path.join(ctx.projectPath, "ir.json");
+            if (fs.existsSync(irPath)) {
+                const ir = JSON.parse(fs.readFileSync(irPath, "utf-8"));
+                const funcs = Array.isArray(ir) ? ir : (ir.functions || []);
+                projectFunctions = funcs
+                    .map((f) => String(f.name))
+                    .filter((n) => n && !n.startsWith("__progmune_"))
+                    .slice(0, 300);
+            }
+        }
+        catch { /* best-effort */ }
+        let added = 0;
+        for (const v of violations.slice(0, 50)) {
+            // 已知高 FP 的 specific-check 规则不入语料——它们以 LLM 域映射
+            // 抖动为主（open-webui 单次扫描 36 条 CROSS_DOMAIN），对语料挖掘
+            // 是纯噪声。真实检出面（PATH_TRAVERSAL/SSRF/CROSS_USER_WRITE/
+            // 框架层/SSG）照常沉淀。
+            if (v.rule_id === "PROTOCOL_CROSS_DOMAIN" || v.rule_id === "PLAINTEXT_AUTH_WITHOUT_TLS")
+                continue;
+            const key = `${ctx.projectName}:${v.rule_id}:${v.function || ""}`;
+            if (seen[key])
+                continue;
+            recordFailure({
+                intent: `trust-scan:${ctx.projectName}`,
+                projectFunctions,
+                violatedSVL: (SEVERITY_TO_SVL[v.severity] || "SVL-2"),
+                constraintType: v.rule_id,
+                actionSequence: [
+                    {
+                        kind: "violation",
+                        function: v.function || "unknown",
+                        file: v.file,
+                        rule: v.rule_id,
+                    },
+                ],
+                errorDetail: (v.message || v.why || "").slice(0, 500),
+            });
+            seen[key] = true;
+            added++;
+        }
+        if (added > 0) {
+            try {
+                fs.mkdirSync(corpusDir, { recursive: true });
+                fs.writeFileSync(dedupFile, JSON.stringify(seen, null, 2));
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    catch { /* corpus write must never crash the scan */ }
+}
 function extractFunctionName(text) {
     if (!text)
         return "unknown";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "progmune-runtime",
-  "version": "3.7.28",
+  "version": "3.7.29",
   "description": "Progmune — AI Trust Decision Engine. Verify AI-generated code before it reaches production. Outputs APPROVED / NEEDS_REVIEW / BLOCKED with evidence.",
   "files": [
     "dist/",