soloforge 1.1.2 → 1.1.31

package/dist/engine/audit/failure_report.d.ts

@@ -0,0 +1,74 @@
+/**
+ * 失败报告 — 问题十三 (Failure / Recovery Policy)。
+ *
+ * 核心规则:
+ * - 失败必须分类为明确 FailureClass
+ * - deterministic 不无限重试
+ * - scope_insufficient 不静默扩大
+ * - external_side_effect 部分成功必须记录已发生动作
+ * - retry 必须有预算、原因和新证据
+ * - unknown failure 不标记 completed
+ */
+import { type DiagnosticEvent } from "./diagnostic_registry.js";
+export type FailureClass = "deterministic" | "fixable" | "scope_insufficient" | "external_side_effect" | "state_inconsistent" | "human_required" | "unknown";
+export type RecoveryAction = "retry" | "escalate" | "expand_scope" | "require_human" | "rollback" | "abort";
+export interface FailureReport {
+    failure_id: string;
+    task_id: string;
+    contract_id?: string;
+    failure_class: FailureClass;
+    /** 脱敏后的摘要，不含 raw output */
+    redacted_summary: string;
+    /** 稳定内容哈希，用于去重和追溯 */
+    error_output_hash: string;
+    /** 原始输出不保留，只存 evidence ref */
+    evidence_ref?: string;
+    retry_count: number;
+    retry_budget: number;
+    retry_remaining: number;
+    occurred_at: string;
+    actions_taken: string[];
+    external_side_effects?: string[];
+    diagnostic_event: DiagnosticEvent | null;
+}
+export interface RecoveryPolicy {
+    policy_id: string;
+    failure_class: FailureClass;
+    max_retries: number;
+    action: RecoveryAction;
+    requires_new_evidence: boolean;
+    requires_human_confirmation: boolean;
+    diagnostic_code: string;
+}
+export interface RecoveryAttempt {
+    attempt_id: string;
+    failure_id: string;
+    policy_id: string;
+    action: RecoveryAction;
+    new_evidence_ids: string[];
+    result: "success" | "failure" | "in_progress";
+    attempted_at: string;
+}
+/** 按 FailureClass 获取恢复策略 */
+export declare function getRecoveryPolicy(failureClass: FailureClass): RecoveryPolicy | undefined;
+/** 列出所有恢复策略 */
+export declare function listRecoveryPolicies(): RecoveryPolicy[];
+/** 检查是否包含敏感内容 */
+export declare function containsSensitiveContent(content: string): boolean;
+/** 创建失败报告（含自检: 脱敏后仍含敏感内容时强制二次脱敏） */
+export declare function createFailureReport(taskId: string, failureClass: FailureClass, errorOutput: string, retryCount: number, retryBudget: number, contractId?: string, externalSideEffects?: string[]): FailureReport;
+/**
+ * 判断是否允许重试。
+ * - deterministic 不允许
+ * - 超预算不允许
+ * - human_required 不允许
+ */
+export declare function canRetry(failureClass: FailureClass, retryCount: number, retryBudget: number): boolean;
+/**
+ * 验证失败处理规则。
+ */
+export declare function validateFailureHandling(report: FailureReport): Array<{
+    error: string;
+    severity: "hard_fail" | "warning";
+}>;
+//# sourceMappingURL=failure_report.d.ts.map

package/dist/engine/audit/failure_report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure_report.d.ts","sourceRoot":"","sources":["../../../src/engine/audit/failure_report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGvF,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,SAAS,GACT,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,GAAG,eAAe,GAAG,UAAU,GAAG,OAAO,CAAC;AAE5G,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,YAAY,CAAC;IAC5B,2BAA2B;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,eAAe,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,2BAA2B,EAAE,OAAO,CAAC;IACrC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC;CACtB;AAoBD,4BAA4B;AAC5B,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,CAExF;AAED,eAAe;AACf,wBAAgB,oBAAoB,IAAI,cAAc,EAAE,CAEvD;AAiCD,iBAAiB;AACjB,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,oCAAoC;AACpC,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAC7B,aAAa,CAkCf;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAKrG;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,GAAG,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,CAAC,CAiC1H"}

package/dist/engine/audit/failure_report.js

@@ -0,0 +1,143 @@
+/**
+ * 失败报告 — 问题十三 (Failure / Recovery Policy)。
+ *
+ * 核心规则:
+ * - 失败必须分类为明确 FailureClass
+ * - deterministic 不无限重试
+ * - scope_insufficient 不静默扩大
+ * - external_side_effect 部分成功必须记录已发生动作
+ * - retry 必须有预算、原因和新证据
+ * - unknown failure 不标记 completed
+ */
+import { createDiagnosticEvent } from "./diagnostic_registry.js";
+import { createHash } from "node:crypto";
+// 内置恢复策略
+const BUILTIN_RECOVERY_POLICIES = [
+    { policy_id: "rp-deterministic", failure_class: "deterministic", max_retries: 0, action: "escalate",
+        requires_new_evidence: true, requires_human_confirmation: true, diagnostic_code: "SF-FAILURE-0001" },
+    { policy_id: "rp-fixable", failure_class: "fixable", max_retries: 3, action: "retry",
+        requires_new_evidence: true, requires_human_confirmation: false, diagnostic_code: "SF-FAILURE-0001" },
+    { policy_id: "rp-scope-insufficient", failure_class: "scope_insufficient", max_retries: 1, action: "require_human",
+        requires_new_evidence: true, requires_human_confirmation: true, diagnostic_code: "SF-FAILURE-0001" },
+    { policy_id: "rp-external-side-effect", failure_class: "external_side_effect", max_retries: 0, action: "rollback",
+        requires_new_evidence: true, requires_human_confirmation: true, diagnostic_code: "SF-FAILURE-0002" },
+    { policy_id: "rp-state-inconsistent", failure_class: "state_inconsistent", max_retries: 0, action: "abort",
+        requires_new_evidence: true, requires_human_confirmation: true, diagnostic_code: "SF-STATE-0001" },
+    { policy_id: "rp-human-required", failure_class: "human_required", max_retries: 0, action: "require_human",
+        requires_new_evidence: false, requires_human_confirmation: true, diagnostic_code: "SF-FAILURE-0001" },
+    { policy_id: "rp-unknown", failure_class: "unknown", max_retries: 0, action: "escalate",
+        requires_new_evidence: true, requires_human_confirmation: true, diagnostic_code: "SF-FAILURE-0001" },
+];
+/** 按 FailureClass 获取恢复策略 */
+export function getRecoveryPolicy(failureClass) {
+    return BUILTIN_RECOVERY_POLICIES.find((p) => p.failure_class === failureClass);
+}
+/** 列出所有恢复策略 */
+export function listRecoveryPolicies() {
+    return [...BUILTIN_RECOVERY_POLICIES];
+}
+// 敏感内容模式 — raw output/secret/PII
+const SENSITIVE_PATTERNS = [
+    /sk-[a-zA-Z0-9]{20,}/, // API key
+    /\b\d{11}\b/, // 手机号
+    /password\s*[:=]\s*\S+/i, // password=
+    /secret\s*[:=]\s*\S+/i, // secret=
+    /api_key\s*[:=]\s*\S+/i, // api_key=
+    /token\s*[:=]\s*\S+/i, // token=
+    /raw_stdout/i, // raw stdout 标记
+    /raw_stderr/i, // raw stderr 标记
+];
+/** 脱敏: 全局替换所有敏感内容，返回 redacted summary */
+function redactErrorOutput(raw) {
+    let result = raw;
+    // 全局替换所有敏感模式（使用 replaceAll 语义，确保多次出现都处理）
+    for (const pattern of SENSITIVE_PATTERNS) {
+        result = result.replace(new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g"), "[REDACTED]");
+    }
+    // 截断防止大段输出
+    if (result.length > 200) {
+        result = result.substring(0, 200) + "...[truncated]";
+    }
+    return result;
+}
+/** 稳定内容哈希 */
+function stableHash(content) {
+    return createHash("sha256").update(content).digest("hex").substring(0, 16);
+}
+/** 检查是否包含敏感内容 */
+export function containsSensitiveContent(content) {
+    return SENSITIVE_PATTERNS.some((p) => p.test(content));
+}
+/** 创建失败报告（含自检: 脱敏后仍含敏感内容时强制二次脱敏） */
+export function createFailureReport(taskId, failureClass, errorOutput, retryCount, retryBudget, contractId, externalSideEffects) {
+    const policy = getRecoveryPolicy(failureClass);
+    const diagCode = policy?.diagnostic_code ?? "SF-FAILURE-0001";
+    const diagEvent = createDiagnosticEvent(diagCode, { failure_class: failureClass, retry_count: retryCount }, contractId, taskId);
+    const hash = stableHash(errorOutput);
+    let redacted = redactErrorOutput(errorOutput);
+    // 自检: 脱敏后仍含敏感内容时强制替换为占位符
+    if (containsSensitiveContent(redacted)) {
+        redacted = "[内容已全部脱敏，原始输出不可展示]";
+    }
+    return {
+        failure_id: `fr-${taskId}-${hash}`,
+        task_id: taskId,
+        contract_id: contractId,
+        failure_class: failureClass,
+        redacted_summary: redacted,
+        error_output_hash: hash,
+        evidence_ref: undefined,
+        retry_count: retryCount,
+        retry_budget: retryBudget,
+        retry_remaining: Math.max(0, retryBudget - retryCount),
+        occurred_at: new Date().toISOString(),
+        actions_taken: [],
+        external_side_effects: externalSideEffects,
+        diagnostic_event: diagEvent,
+    };
+}
+/**
+ * 判断是否允许重试。
+ * - deterministic 不允许
+ * - 超预算不允许
+ * - human_required 不允许
+ */
+export function canRetry(failureClass, retryCount, retryBudget) {
+    if (failureClass === "deterministic" || failureClass === "human_required" || failureClass === "unknown") {
+        return false;
+    }
+    return retryCount < retryBudget;
+}
+/**
+ * 验证失败处理规则。
+ */
+export function validateFailureHandling(report) {
+    const errors = [];
+    if (report.failure_class === "deterministic" && report.retry_count > 0) {
+        errors.push({
+            error: `deterministic 失败不应重试，但已重试 ${report.retry_count} 次`,
+            severity: "hard_fail",
+        });
+    }
+    if (report.failure_class === "external_side_effect" && !report.external_side_effects) {
+        errors.push({
+            error: "external_side_effect 失败必须记录已发生动作",
+            severity: "hard_fail",
+        });
+    }
+    if (report.retry_remaining < 0) {
+        errors.push({
+            error: `重试次数超过预算: ${report.retry_count}/${report.retry_budget}`,
+            severity: "hard_fail",
+        });
+    }
+    // 红线: redacted_summary 不得包含敏感原文
+    if (containsSensitiveContent(report.redacted_summary)) {
+        errors.push({
+            error: "FailureReport redacted_summary 仍包含敏感内容（secret/PII/raw output）",
+            severity: "hard_fail",
+        });
+    }
+    return errors;
+}
+//# sourceMappingURL=failure_report.js.map

package/dist/engine/audit/failure_report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure_report.js","sourceRoot":"","sources":["../../../src/engine/audit/failure_report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,qBAAqB,EAAwB,MAAM,0BAA0B,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqDzC,SAAS;AACT,MAAM,yBAAyB,GAA8B;IAC3D,EAAE,SAAS,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU;QACjG,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE;IACtG,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO;QAClF,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE;IACvG,EAAE,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe;QAChH,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE;IACtG,EAAE,SAAS,EAAE,yBAAyB,EAAE,aAAa,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU;QAC/G,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE;IACtG,EAAE,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO;QACxG,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE;IACpG,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe;QACxG,qBAAqB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE;IACvG,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU;QACrF,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE;CACvG,CAAC;AAEF,4BAA4B;AAC5B,MAAM,UAAU,iBAAiB,CAAC,YAA0B;IAC1D,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC;AACjF,CAAC;AAED,eAAe;AACf,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,GAAG,yBAAyB,CAAC,CAAC;AACxC,CAAC;AAED,iCAAiC;AACjC,MAAM,kBAAkB,GAAa;IACnC,qBAAqB,EAAiB,UAAU;IAChD,YAAY,EAA2B,MAAM;IAC7C,wBAAwB,EAAc,YAAY;IAClD,sBAAsB,EAAe,UAAU;IAC/C,uBAAuB,EAAc,WAAW;IAChD,qBAAqB,EAAgB,SAAS;IAC9C,aAAa,EAA0B,gBAAgB;IACvD,aAAa,EAA0B,gBAAgB;CACxD,CAAC;AAEF,yCAAyC;AACzC,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,yCAAyC;IACzC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IACvI,CAAC;IACD,WAAW;IACX,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,aAAa;AACb,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,YAA0B,EAC1B,WAAmB,EACnB,UAAkB,EAClB,WAAmB,EACnB,UAAmB,EACnB,mBAA8B;IAE9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,EAAE,eAAe,IAAI,iBAAiB,CAAC;IAC9D,MAAM,SAAS,GAAG,qBAAqB,CACrC,QAAQ,EACR,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,EACxD,UAAU,EACV,MAAM,CACP,CAAC;IAEF,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAE9C,yBAAyB;IACzB,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,QAAQ,GAAG,oBAAoB,CAAC;IAClC,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,MAAM,IAAI,IAAI,EAAE;QAClC,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,QAAQ;QAC1B,iBAAiB,EAAE,IAAI;QACvB,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC;QACtD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,EAAE;QACjB,qBAAqB,EAAE,mBAAmB;QAC1C,gBAAgB,EAAE,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,YAA0B,EAAE,UAAkB,EAAE,WAAmB;IAC1F,IAAI,YAAY,KAAK,eAAe,IAAI,YAAY,KAAK,gBAAgB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACxG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,UAAU,GAAG,WAAW,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAqB;IAC3D,MAAM,MAAM,GAAgE,EAAE,CAAC;IAE/E,IAAI,MAAM,CAAC,aAAa,KAAK,eAAe,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,6BAA6B,MAAM,CAAC,WAAW,IAAI;YAC1D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,KAAK,sBAAsB,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,kCAAkC;YACzC,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,aAAa,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE;YAC/D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,IAAI,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,+DAA+D;YACtE,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/engine/audit/governance_report.d.ts

@@ -0,0 +1,100 @@
+/**
+ * 治理健康报告 — 汇总 audit pool、escape reports、capability action decisions、sample decisions。
+ * P2-5+P2-6 范围: 只读报告，不改状态。
+ */
+import type { AuditItem, AuditPoolStats } from "./audit_pool.js";
+import type { EscapeReport, EscapeReportStats } from "../contracts/escape_report.js";
+import type { ActionDecision } from "../contracts/capability_action_advisor.js";
+import type { SamplingDecision } from "./risk_sampler.js";
+import type { DualLayerGovernanceFinding } from "../../types/index.js";
+import { type OutputArtifact, type ArtifactGovernanceFinding } from "../contracts/artifact_contract_registry.js";
+import { type ConfigResolutionReport, type ConfigEvidenceEntry, type ConfigPrecedenceGovernanceFinding } from "../config/config_precedence_contract.js";
+import { type CorePrinciplesReport } from "./core_engineering_principles.js";
+import { type ContractGovernanceFinding } from "../contracts/contract_registry.js";
+export interface PolicySummary {
+    policy_id: string;
+    escape_count: number;
+    false_positive_count: number;
+    action: ActionDecision;
+}
+export interface TopFix {
+    escape_id: string;
+    policy_id: string;
+    failure_type: string;
+    fix_required: string;
+    owner: string;
+    due_date: string;
+}
+export interface DualLayerSummary {
+    total_mechanisms: number;
+    dual_layer_enforced_count: number;
+    hard_fail_count: number;
+    advisory_count: number;
+    findings: DualLayerGovernanceFinding[];
+}
+export interface GovernanceReport {
+    generated_at: string;
+    total_tasks: number;
+    audit_by_risk: Record<string, number>;
+    sampled_count: number | null;
+    total_escapes: number;
+    total_false_positives: number;
+    escape_by_type: Record<string, number>;
+    danger_policies: PolicySummary[];
+    downgrade_candidates: PolicySummary[];
+    top_fixes: TopFix[];
+    dual_layer_summary?: DualLayerSummary;
+    artifact_governance?: {
+        artifact_count: number;
+        hard_fail_count: number;
+        advisory_count: number;
+        findings: ArtifactGovernanceFinding[];
+    };
+    config_precedence_governance?: {
+        hard_fail_count: number;
+        advisory_count: number;
+        findings: ConfigPrecedenceGovernanceFinding[];
+    };
+    core_principles_governance?: {
+        task_level: string;
+        overall_passed: boolean;
+        principles: Array<{
+            principle_id: string;
+            status: string;
+            findings: string[];
+        }>;
+    };
+    contract_governance?: {
+        total_contracts: number;
+        hard_fail_count: number;
+        warning_count: number;
+        advisory_count: number;
+        findings: ContractGovernanceFinding[];
+    };
+}
+/**
+ * 生成治理健康报告。
+ * 汇总审计池、逃逸报告、能力决策和抽样决策的统计数据，识别危险策略和降级候选。
+ * 支持双层机制、制品契约、配置优先级契约和核心原则的治理检查。
+ * @param auditStats - 审计池统计数据
+ * @param auditItems - 审计条目列表
+ * @param escapeReports - 逃逸报告列表
+ * @param escapeStats - 逃逸报告统计数据
+ * @param decisions - 能力动作决策列表
+ * @param now - 报告生成时间（可选，默认当前时间）
+ * @param sampleDecisions - 抽样决策列表（可选）
+ * @param dualLayerFindings - 双层机制发现列表（可选）
+ * @param dualLayerMechanismCount - 双层机制总数（可选）
+ * @param artifacts - 输出制品列表（可选，用于制品契约检查）
+ * @param configReports - 配置解析报告列表（可选）
+ * @param configEntries - 配置优先级证据条目列表（可选）
+ * @param corePrinciples - 核心原则遵循性报告列表（可选）
+ * @returns 完整的治理健康报告
+ */
+/**
+ * 生成治理健康报告。
+ * @param options - 报告选项，包含审计池和能力状态存储
+ * @returns 治理报告，包含任务统计、逃逸分析和降级建议
+ */
+export declare function generateReport(auditStats: AuditPoolStats, _auditItems: AuditItem[], escapeReports: EscapeReport[], escapeStats: EscapeReportStats, decisions: ActionDecision[], now?: Date, sampleDecisions?: SamplingDecision[], dualLayerFindings?: DualLayerGovernanceFinding[], dualLayerMechanismCount?: number, artifacts?: OutputArtifact[], configReports?: ConfigResolutionReport[], configEntries?: ConfigEvidenceEntry[], corePrinciples?: CorePrinciplesReport[], contractFindings?: ContractGovernanceFinding[], totalRegistryContracts?: number): GovernanceReport;
+//# sourceMappingURL=governance_report.d.ts.map

package/dist/engine/audit/governance_report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance_report.d.ts","sourceRoot":"","sources":["../../../src/engine/audit/governance_report.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,2CAA2C,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAA6B,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5I,OAAO,EAA4B,KAAK,sBAAsB,EAAE,KAAK,mBAAmB,EAAE,KAAK,iCAAiC,EAAE,MAAM,yCAAyC,CAAC;AAClL,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAGnF,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,MAAM;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,oBAAoB,EAAE,aAAa,EAAE,CAAC;IACtC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;IACtC,mBAAmB,CAAC,EAAE;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,yBAAyB,EAAE,CAAC;KACvC,CAAC;IACF,4BAA4B,CAAC,EAAE;QAC7B,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,iCAAiC,EAAE,CAAC;KAC/C,CAAC;IACF,0BAA0B,CAAC,EAAE;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,OAAO,CAAC;QACxB,UAAU,EAAE,KAAK,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC;YACf,QAAQ,EAAE,MAAM,EAAE,CAAC;SACpB,CAAC,CAAC;KACJ,CAAC;IACF,mBAAmB,CAAC,EAAE;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,yBAAyB,EAAE,CAAC;KACvC,CAAC;CACH;AAqBD;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,cAAc,EAC1B,WAAW,EAAE,SAAS,EAAE,EACxB,aAAa,EAAE,YAAY,EAAE,EAC7B,WAAW,EAAE,iBAAiB,EAC9B,SAAS,EAAE,cAAc,EAAE,EAC3B,GAAG,CAAC,EAAE,IAAI,EACV,eAAe,CAAC,EAAE,gBAAgB,EAAE,EACpC,iBAAiB,CAAC,EAAE,0BAA0B,EAAE,EAChD,uBAAuB,CAAC,EAAE,MAAM,EAChC,SAAS,CAAC,EAAE,cAAc,EAAE,EAC5B,aAAa,CAAC,EAAE,sBAAsB,EAAE,EACxC,aAAa,CAAC,EAAE,mBAAmB,EAAE,EACrC,cAAc,CAAC,EAAE,oBAAoB,EAAE,EACvC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,EAC9C,sBAAsB,CAAC,EAAE,MAAM,GAC9B,gBAAgB,CAgJlB"}

package/dist/engine/audit/governance_report.js

@@ -0,0 +1,184 @@
+/**
+ * 治理健康报告 — 汇总 audit pool、escape reports、capability action decisions、sample decisions。
+ * P2-5+P2-6 范围: 只读报告，不改状态。
+ */
+import { validateArtifactContracts } from "../contracts/artifact_contract_registry.js";
+import { validateConfigPrecedence } from "../config/config_precedence_contract.js";
+import { debug } from "../core/logger.js";
+function deepCopyRule(rule) {
+    return { ...rule };
+}
+function deepCopyDecision(decision) {
+    return {
+        ...decision,
+        evidence_ids: [...decision.evidence_ids],
+        triggered_rules: decision.triggered_rules.map(deepCopyRule),
+    };
+}
+function deepCopySummary(summary) {
+    return {
+        ...summary,
+        action: deepCopyDecision(summary.action),
+    };
+}
+/**
+ * 生成治理健康报告。
+ * 汇总审计池、逃逸报告、能力决策和抽样决策的统计数据，识别危险策略和降级候选。
+ * 支持双层机制、制品契约、配置优先级契约和核心原则的治理检查。
+ * @param auditStats - 审计池统计数据
+ * @param auditItems - 审计条目列表
+ * @param escapeReports - 逃逸报告列表
+ * @param escapeStats - 逃逸报告统计数据
+ * @param decisions - 能力动作决策列表
+ * @param now - 报告生成时间（可选，默认当前时间）
+ * @param sampleDecisions - 抽样决策列表（可选）
+ * @param dualLayerFindings - 双层机制发现列表（可选）
+ * @param dualLayerMechanismCount - 双层机制总数（可选）
+ * @param artifacts - 输出制品列表（可选，用于制品契约检查）
+ * @param configReports - 配置解析报告列表（可选）
+ * @param configEntries - 配置优先级证据条目列表（可选）
+ * @param corePrinciples - 核心原则遵循性报告列表（可选）
+ * @returns 完整的治理健康报告
+ */
+/**
+ * 生成治理健康报告。
+ * @param options - 报告选项，包含审计池和能力状态存储
+ * @returns 治理报告，包含任务统计、逃逸分析和降级建议
+ */
+export function generateReport(auditStats, _auditItems, escapeReports, escapeStats, decisions, now, sampleDecisions, dualLayerFindings, dualLayerMechanismCount, artifacts, configReports, configEntries, corePrinciples, contractFindings, totalRegistryContracts) {
+    debug("治理报告", "生成治理健康报告");
+    const nonFPReports = escapeReports.filter((r) => r.failure_type !== "false_positive");
+    const fpReports = escapeReports.filter((r) => r.failure_type === "false_positive");
+    const sampledCount = sampleDecisions
+        ? sampleDecisions.filter((d) => d.should_sample).length
+        : null;
+    // 从决策构建每个策略的汇总
+    const policyMap = new Map();
+    for (const decision of decisions) {
+        const pid = decision.policy_id;
+        const policyEscapes = nonFPReports.filter((r) => r.policy_id === pid);
+        const policyFP = fpReports.filter((r) => r.policy_id === pid);
+        policyMap.set(pid, {
+            policy_id: pid,
+            escape_count: policyEscapes.length,
+            false_positive_count: policyFP.length,
+            action: deepCopyDecision(decision),
+        });
+    }
+    // 危险策略: 有逃逸且非 keep 动作的策略
+    debug("治理报告", "识别危险策略，总决策数=" + decisions.length);
+    const dangerPolicies = [...policyMap.values()]
+        .filter((p) => p.escape_count > 0 && p.action.recommended_action !== "keep")
+        .sort((a, b) => b.escape_count - a.escape_count)
+        .map(deepCopySummary);
+    // 降级候选: 动作为 downgrade 或 disable
+    debug("治理报告", "识别降级候选策略");
+    const downgradeCandidates = [...policyMap.values()]
+        .filter((p) => p.action.recommended_action === "downgrade" || p.action.recommended_action === "disable")
+        .sort((a, b) => {
+        const priority = (d) => (d.recommended_action === "disable" ? 0 : 1);
+        return priority(a.action) - priority(b.action);
+    })
+        .map(deepCopySummary);
+    // Top fixes: 非 FP 逃逸报告按 due_date 排序，最多 5 条
+    debug("治理报告", "整理 top fixes，非误报逃逸数=" + nonFPReports.length);
+    const topFixes = nonFPReports
+        .slice()
+        .sort((a, b) => a.due_date.localeCompare(b.due_date))
+        .slice(0, 5)
+        .map((r) => ({
+        escape_id: r.escape_id,
+        policy_id: r.policy_id,
+        failure_type: r.failure_type,
+        fix_required: r.fix_required,
+        owner: r.owner,
+        due_date: r.due_date,
+    }));
+    // 双层机制汇总
+    if (dualLayerFindings)
+        debug("治理报告", "双层机制发现数=" + dualLayerFindings.length);
+    const dlHardFails = (dualLayerFindings ?? []).filter((f) => f.severity === "hard_fail");
+    const dlAdvisory = (dualLayerFindings ?? []).filter((f) => f.severity === "advisory");
+    const dlSummary = dualLayerFindings
+        ? {
+            total_mechanisms: dualLayerMechanismCount ?? 0,
+            dual_layer_enforced_count: (dualLayerMechanismCount ?? 0) - dlHardFails.length,
+            hard_fail_count: dlHardFails.length,
+            advisory_count: dlAdvisory.length,
+            findings: [...dualLayerFindings],
+        }
+        : undefined;
+    // 制品治理 
+    if (artifacts && artifacts.length > 0)
+        debug("治理报告", "检查制品契约，制品数=" + artifacts.length);
+    let artifactGovernance;
+    if (artifacts && artifacts.length > 0) {
+        const findings = validateArtifactContracts(artifacts);
+        artifactGovernance = {
+            artifact_count: artifacts.length,
+            hard_fail_count: findings.filter(f => f.severity === "hard_fail").length,
+            advisory_count: findings.filter(f => f.severity === "advisory").length,
+            findings,
+        };
+    }
+    // 配置优先级治理 
+    if (configReports && configReports.length > 0)
+        debug("治理报告", "检查配置优先级契约，报告数=" + configReports.length);
+    let configPrecedenceGovernance;
+    if (configReports && configReports.length > 0) {
+        const cpFindings = validateConfigPrecedence(configReports, configEntries ?? []);
+        configPrecedenceGovernance = {
+            hard_fail_count: cpFindings.filter(f => f.severity === "hard_fail").length,
+            advisory_count: cpFindings.filter(f => f.severity === "advisory").length,
+            findings: cpFindings,
+        };
+    }
+    // 核心原则治理
+    if (corePrinciples && corePrinciples.length > 0)
+        debug("治理报告", "检查核心原则遵循性，报告数=" + corePrinciples.length);
+    let corePrinciplesGovernance;
+    if (corePrinciples && corePrinciples.length > 0) {
+        // 合并所有报告为汇总
+        const latestReport = corePrinciples[corePrinciples.length - 1];
+        corePrinciplesGovernance = {
+            task_level: latestReport.task_level,
+            overall_passed: corePrinciples.every(r => r.overall_passed),
+            principles: latestReport.principles.map(p => ({
+                principle_id: p.principle_id,
+                status: p.status,
+                findings: p.findings,
+            })),
+        };
+    }
+    // 契约治理汇总
+    if (contractFindings && contractFindings.length > 0)
+        debug("治理报告", "检查契约治理，发现数=" + contractFindings.length);
+    let contractGovernance;
+    if (contractFindings) {
+        contractGovernance = {
+            total_contracts: totalRegistryContracts ?? new Set(contractFindings.map((f) => f.contract_id)).size,
+            hard_fail_count: contractFindings.filter((f) => f.severity === "hard_fail").length,
+            warning_count: contractFindings.filter((f) => f.severity === "warning").length,
+            advisory_count: contractFindings.filter((f) => f.severity === "advisory").length,
+            findings: [...contractFindings],
+        };
+    }
+    return {
+        generated_at: (now ?? new Date()).toISOString(),
+        total_tasks: auditStats.total,
+        audit_by_risk: { ...auditStats.by_risk },
+        sampled_count: sampledCount,
+        total_escapes: nonFPReports.length,
+        total_false_positives: fpReports.length,
+        escape_by_type: { ...escapeStats.by_type },
+        danger_policies: dangerPolicies,
+        downgrade_candidates: downgradeCandidates,
+        top_fixes: topFixes,
+        dual_layer_summary: dlSummary,
+        artifact_governance: artifactGovernance,
+        config_precedence_governance: configPrecedenceGovernance,
+        core_principles_governance: corePrinciplesGovernance,
+        contract_governance: contractGovernance,
+    };
+}
+//# sourceMappingURL=governance_report.js.map

package/dist/engine/audit/governance_report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance_report.js","sourceRoot":"","sources":["../../../src/engine/audit/governance_report.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAAE,yBAAyB,EAAuD,MAAM,4CAA4C,CAAC;AAC5I,OAAO,EAAE,wBAAwB,EAAiG,MAAM,yCAAyC,CAAC;AAGlL,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAmE1C,SAAS,YAAY,CAAC,IAAgB;IACpC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwB;IAChD,OAAO;QACL,GAAG,QAAQ;QACX,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;QACxC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,OAAO;QACL,GAAG,OAAO;QACV,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,UAA0B,EAC1B,WAAwB,EACxB,aAA6B,EAC7B,WAA8B,EAC9B,SAA2B,EAC3B,GAAU,EACV,eAAoC,EACpC,iBAAgD,EAChD,uBAAgC,EAChC,SAA4B,EAC5B,aAAwC,EACxC,aAAqC,EACrC,cAAuC,EACvC,gBAA8C,EAC9C,sBAA+B;IAE/B,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE1B,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC;IAEnF,MAAM,YAAY,GAAG,eAAe;QAClC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM;QACvD,CAAC,CAAC,IAAI,CAAC;IAET,eAAe;IACf,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;QAE9D,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACjB,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,aAAa,CAAC,MAAM;YAClC,oBAAoB,EAAE,QAAQ,CAAC,MAAM;YACrC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,kBAAkB,KAAK,MAAM,CAAC;SAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;SAC/C,GAAG,CAAC,eAAe,CAAC,CAAC;IAExB,gCAAgC;IAChC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1B,MAAM,mBAAmB,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;SAChD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,CAAC;SACvG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,QAAQ,GAAG,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC;SACD,GAAG,CAAC,eAAe,CAAC,CAAC;IAExB,2CAA2C;IAC3C,KAAK,CAAC,MAAM,EAAE,sBAAsB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAa,YAAY;SACpC,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;SACpD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;IAEN,SAAS;IACT,IAAI,iBAAiB;QAAE,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACtF,MAAM,SAAS,GAAiC,iBAAiB;QAC/D,CAAC,CAAC;YACE,gBAAgB,EAAE,uBAAuB,IAAI,CAAC;YAC9C,yBAAyB,EAAE,CAAC,uBAAuB,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM;YAC9E,eAAe,EAAE,WAAW,CAAC,MAAM;YACnC,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,QAAQ,EAAE,CAAC,GAAG,iBAAiB,CAAC;SACjC;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,QAAQ;IACR,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,kBAA2D,CAAC;IAChE,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;QACtD,kBAAkB,GAAG;YACnB,cAAc,EAAE,SAAS,CAAC,MAAM;YAChC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,MAAM;YACxE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YACtE,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,WAAW;IACX,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtG,IAAI,0BAA4E,CAAC;IACjF,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,wBAAwB,CAAC,aAAa,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;QAChF,0BAA0B,GAAG;YAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,MAAM;YAC1E,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YACxE,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACzG,IAAI,wBAAwE,CAAC;IAC7E,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,YAAY;QACZ,MAAM,YAAY,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/D,wBAAwB,GAAG;YACzB,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAC3D,UAAU,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5C,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5G,IAAI,kBAA2D,CAAC;IAChE,IAAI,gBAAgB,EAAE,CAAC;QACrB,kBAAkB,GAAG;YACnB,eAAe,EAAE,sBAAsB,IAAI,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACnG,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,MAAM;YAClF,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;YAC9E,cAAc,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAChF,QAAQ,EAAE,CAAC,GAAG,gBAAgB,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,YAAY,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QAC/C,WAAW,EAAE,UAAU,CAAC,KAAK;QAC7B,aAAa,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE;QACxC,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,YAAY,CAAC,MAAM;QAClC,qBAAqB,EAAE,SAAS,CAAC,MAAM;QACvC,cAAc,EAAE,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE;QAC1C,eAAe,EAAE,cAAc;QAC/B,oBAAoB,EAAE,mBAAmB;QACzC,SAAS,EAAE,QAAQ;QACnB,kBAAkB,EAAE,SAAS;QAC7B,mBAAmB,EAAE,kBAAkB;QACvC,4BAA4B,EAAE,0BAA0B;QACxD,0BAA0B,EAAE,wBAAwB;QACpD,mBAAmB,EAAE,kBAAkB;KACxC,CAAC;AACJ,CAAC"}

package/dist/engine/audit/java_quality_guard.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Java Quality Guard — Java 代码质量检查。
+ * 原则: 项目约定优先，确定性规则才 hard gate，不确定的 advisory。
+ *
+ * 确定性规则（hard gate）:
+ * - 编译错误（语法/类型）
+ * - 缺少必需注解（@Override 等）
+ * - public 方法缺少 Javadoc（项目约定启用时）
+ *
+ * 不确定性规则（advisory）:
+ * - 代码风格（命名、格式）
+ * - 设计模式建议
+ * - 性能优化建议
+ */
+export interface QualityRule {
+    id: string;
+    severity: "hard_gate" | "advisory";
+    description: string;
+    pattern: RegExp;
+    message: string;
+}
+export interface QualityCheckResult {
+    rule_id: string;
+    severity: "hard_gate" | "advisory";
+    file_path: string;
+    line_number: number;
+    message: string;
+    detail: string;
+}
+export interface QualityGuardReport {
+    file_path: string;
+    total_checks: number;
+    hard_gate_failures: number;
+    advisory_warnings: number;
+    results: QualityCheckResult[];
+    can_proceed: boolean;
+    summary: string;
+}
+/**
+ * 从项目约定文件加载自定义规则。
+ * 项目约定优先于内置规则。
+ */
+export declare function loadProjectRules(conventionsContent: string | null): QualityRule[];
+/**
+ * 对 Java 源文件执行质量检查。
+ * @param filePath - 文件路径
+ * @param content - 文件内容
+ * @param projectRules - 项目自定义规则（优先于内置规则）
+ * @returns 质量检查报告
+ */
+export declare function checkJavaQuality(filePath: string, content: string, projectRules?: QualityRule[]): QualityGuardReport;
+//# sourceMappingURL=java_quality_guard.d.ts.map

package/dist/engine/audit/java_quality_guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"java_quality_guard.d.ts","sourceRoot":"","sources":["../../../src/engine/audit/java_quality_guard.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,WAAW,GAAG,UAAU,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,WAAW,GAAG,UAAU,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAiDD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,EAAE,CAwBjF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,WAAW,EAAO,GAC/B,kBAAkB,CAgEpB"}