progmune-runtime 3.7.47 → 3.7.48

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [3.7.48] — 2026-09-22
+
+### IR 提取失败必须发声（OOM 杀后的「0 违规假干净」根治）
+
+- **事故**：skyvern E1 重扫时 python3 提取器被 OOM 杀（SIGKILL），ir.json 被写成 2 字节空数组——引擎带着空 IR 照样输出「0 违规、85 分 APPROVED」，结果自洽、无任何迹象表明它是废票（静默降级比 R8 陈旧产物更阴）
+- **修复**（`src/trust/engine.ts` + `types.ts`）：
+  - 提取异常不再静默吞掉——异常信息记入 `extractionWarning`
+  - **提取后验尸**：ir.json 存在但函数数=0 且项目确有源码 ⇒ 记失败并 console.warn
+  - TrustDecision 新增 `overall.extractionWarning` 字段；失败时 `coverageConfidence` 强制降 LOW，摘要明示「本次扫描是废票，不得据此得出干净结论」
+- **E2E 验证**：空 ir.json + 1 个源文件 → warning 触发 / confidence LOW / 摘要正确
+- 回归：engine 21 + ir-staleness 12 + structural 165 全绿；build ✓
+- 后续：python3 提取分块（skyvern 级项目单进程内存峰值不可控，按目录分批提取、引擎侧合并）——机器资源恢复后按四门验收
+
 ## [3.7.47] — 2026-09-21
 
 ### 类方法的真实调用必须进 IR（状态机在 OO 代码上没有输入）

package/dist/sdk.js

@@ -20,7 +20,7 @@ const risk_model_1 = require("./risk-model");
 const protocol_knowledge_1 = require("./protocol-knowledge");
 const evidence_repository_1 = require("./evidence-repository");
 /** Runtime version — stable public identifier. Internal layers evolve underneath. */
-exports.RUNTIME_VERSION = "3.7.47";
+exports.RUNTIME_VERSION = "3.7.48";
 function verify(filePath) {
     const cert = (0, certify_1.certify)(filePath);
     const kb = (0, protocol_knowledge_1.buildKnowledgeBase)();

package/dist/trust/engine.js

@@ -103,7 +103,7 @@ async function evaluateTrust(ctx) {
     // ── Phase 5: Build call graph for cross-function propagation ──
     const callGraph = (0, call_graph_propagator_1.buildCallGraphFromIR)(path.join(ctx.projectPath, "ir.json"));
     const enterpriseViolations = collectEnterpriseViolations(ctx);
-    const { violations: protocolViolations, coverage: mappingCoverageData, ssgCoverage: ssgCov, annotationSuggestions: cAnnotationSuggestions } = await collectProtocolViolations(ctx, callGraph);
+    const { violations: protocolViolations, coverage: mappingCoverageData, ssgCoverage: ssgCov, annotationSuggestions: cAnnotationSuggestions, extractionWarning } = await collectProtocolViolations(ctx, callGraph);
     const expressResult = collectExpressViolations(ctx);
     const nestjsResult = collectNestJSViolations(ctx);
     const trpcResult = collectTRPCViolations(ctx);
@@ -218,12 +218,20 @@ async function evaluateTrust(ctx) {
             score: effectiveScore,
             decision,
             confidence,
-            coverageConfidence: {
-                score: coverageConfidence.score,
-                margin: coverageConfidence.margin,
-                level: coverageConfidence.level,
-                summary: coverageConfidence.summary,
-            },
+            coverageConfidence: extractionWarning
+                ? {
+                    score: 0,
+                    margin: 25,
+                    level: "LOW",
+                    summary: `${extractionWarning}——本次扫描是废票，不得据此得出「干净」结论`,
+                }
+                : {
+                    score: coverageConfidence.score,
+                    margin: coverageConfidence.margin,
+                    level: coverageConfidence.level,
+                    summary: coverageConfidence.summary,
+                },
+            extractionWarning,
             mappingCoverage: mappingCoverageData.totalApis > 0
                 ? {
                     rate: Math.round(((mappingCoverageData.lookupHits + mappingCoverageData.llmHits) /
@@ -1208,6 +1216,8 @@ async function collectProtocolViolations(ctx, callGraph) {
     const annotationRuleNames = new Set();
     // C 注解建议（函数级作用域——返回值在 try 外组装）
     let annotationSuggestions;
+    // 2026-09-22：提取失败标记（跨 try 作用域，随结果返回）
+    let extractionWarning;
     try {
         // ── P4.5 校准：TS/JS 项目在 ir.json 缺失时先提取 IR ──
         // 序列必须来自「函数体内真实调用」而非「文件内函数声明名单」——
@@ -1255,10 +1265,35 @@ async function collectProtocolViolations(ctx, callGraph) {
                             `需重提取运行 PROGMUNE_IR_REEXTRACT=always 或删除 ir.json）`);
                     }
                     if (shouldExtract) {
-                        const ir = extractFn();
-                        // C 走合并形态（与 execute/MCP 写盘一致）；TS/Python 保持裸数组形态
-                        const payload = lang === "c" ? { typeMap: {}, functions: ir } : ir;
-                        fs.writeFileSync(path.join(ctx.projectPath, "ir.json"), JSON.stringify(payload, null, 2));
+                        try {
+                            const ir = extractFn();
+                            // C 走合并形态（与 execute/MCP 写盘一致）；TS/Python 保持裸数组形态
+                            const payload = lang === "c" ? { typeMap: {}, functions: ir } : ir;
+                            fs.writeFileSync(path.join(ctx.projectPath, "ir.json"), JSON.stringify(payload, null, 2));
+                        }
+                        catch (extractErr) {
+                            // 2026-09-22：提取异常不再静默吞掉——OOM 杀（exit 137）等失败
+                            // 必须发声，否则引擎带着空 IR 输出「0 违规」的假干净结论
+                            extractionWarning = `IR 提取失败（${extractErr?.message || extractErr}）——结果不可信`;
+                        }
+                    }
+                    // 2026-09-22：提取后验尸——ir.json 存在但函数数为 0 且项目确有
+                    // 源码时，说明提取被静默截断（如 python3 被 OOM 杀后留下 2 字节
+                    // 空数组），同样记为失败
+                    if (!extractionWarning) {
+                        try {
+                            const irPath2 = path.join(ctx.projectPath, "ir.json");
+                            if (fs.existsSync(irPath2)) {
+                                const raw = fs.readFileSync(irPath2, "utf-8");
+                                const parsed = JSON.parse(raw);
+                                const fnCount = Array.isArray(parsed) ? parsed.length : (parsed.functions || []).length;
+                                if (fnCount === 0 && freshness.scannedFiles > 0) {
+                                    extractionWarning = `IR 提取产物为空（0 函数，但项目有 ${freshness.scannedFiles} 个源文件）——提取可能被 OOM 截断，结果不可信`;
+                                    console.warn(`[progmune] ⚠️ ${extractionWarning}`);
+                                }
+                            }
+                        }
+                        catch { /* best-effort */ }
                     }
                 }
                 catch { /* best-effort — 回退正则扫描 */ }
@@ -1590,6 +1625,7 @@ async function collectProtocolViolations(ctx, callGraph) {
             },
         } : undefined,
         annotationSuggestions,
+        extractionWarning,
     };
 }
 function extractCallSequencesFromProject(projectPath, language, keepNames) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "progmune-runtime",
-  "version": "3.7.47",
+  "version": "3.7.48",
   "description": "Progmune — AI Trust Decision Engine. Verify AI-generated code before it reaches production. Outputs APPROVED / NEEDS_REVIEW / BLOCKED with evidence.",
   "files": [
     "dist/",