soloforge 1.1.2 → 1.1.31

package/dist/engine/contracts/backend_implementation_contract.js

@@ -0,0 +1,164 @@
+/**
+ * 后端实现工程契约。
+ *
+ * 将 Controller 边界、DTO/校验、事务、幂等、安全、审计与契约对齐
+ * 纳入编码前工作包和验证/交付阻断口径。
+ */
+const BACKEND_KEYWORDS = /后端|接口|API|endpoint|controller|数据库|migration|DTO|请求参数|响应|分页|权限|租户|幂等|事务|并发|审计|spring|nestjs|express/i;
+const LOW_RISK_KEYWORDS = /文案|README|注释|样式|css|错别字|拼写|测试数据|fixture/i;
+const SIMPLE_READ_ONLY_KEYWORDS = /简单\s*(?:GET|查询|详情)|只读(?:查询|接口)?|GET\s+详情/i;
+export function requiresBackendImplementationContract(intent, route, changedFiles = []) {
+    const text = `${intent} ${changedFiles.join(" ")}`;
+    if (LOW_RISK_KEYWORDS.test(text) && !BACKEND_KEYWORDS.test(text))
+        return false;
+    if (SIMPLE_READ_ONLY_KEYWORDS.test(text) && !/(?:权限|租户|敏感|支付|财务|审计)/i.test(text))
+        return false;
+    if (route === "artifact_generation" && /文档|规格|设计|openapi|产物/i.test(text))
+        return false;
+    const relevantRoute = !route || ["code_change", "artifact_generation", "operation", "multi_stage_plan"].includes(route);
+    return relevantRoute && BACKEND_KEYWORDS.test(text);
+}
+export function createBackendImplementationWorkPackage(taskId, intent) {
+    return {
+        task_id: taskId,
+        status: "required",
+        applicability_reason_zh: `该任务涉及后端接口或数据行为，需先确认实现工程约束: ${intent}`,
+        controller_contracts: [],
+        dto_and_validation: [],
+        transaction_and_consistency: [],
+        security_and_audit: [],
+        api_db_alignment: [],
+        tests_and_evidence: [],
+    };
+}
+function workPackageComplete(workPackage) {
+    return !!workPackage
+        && workPackage.controller_contracts.length > 0
+        && workPackage.dto_and_validation.length > 0
+        && workPackage.transaction_and_consistency.length > 0
+        && workPackage.security_and_audit.length > 0
+        && workPackage.api_db_alignment.length > 0
+        && workPackage.tests_and_evidence.length > 0;
+}
+export function evaluateBackendImplementationGate(input) {
+    if (!requiresBackendImplementationContract(input.intent, input.route, input.changed_files)) {
+        return {
+            applicable: false,
+            allowed: true,
+            status: "not_applicable",
+            reason_zh: "非后端实现任务，不触发后端工程工作包",
+        };
+    }
+    if (!workPackageComplete(input.work_package)) {
+        return {
+            applicable: true,
+            allowed: false,
+            status: "blocked",
+            reason_zh: "后端实现任务缺少完整工程工作包，不得开始编码",
+            work_package: input.work_package ?? createBackendImplementationWorkPackage(input.task_id, input.intent),
+        };
+    }
+    return {
+        applicable: true,
+        allowed: true,
+        status: "satisfied",
+        reason_zh: "后端实现工程工作包已具备，可进入实现并在审查阶段复验",
+        work_package: { ...input.work_package, status: "satisfied" },
+    };
+}
+function finding(category, severity, file, evidence, suggestion_zh) {
+    return { category, severity, file, evidence, suggestion_zh };
+}
+function isJavaEntityModel(file, content) {
+    return /(?:^|\/)(?:entity|domain|model)\//i.test(file)
+        || /\bclass\s+\w*(?:Entity|DO|PO)\b/i.test(content)
+        || /@(?:Entity|Table)\b/.test(content);
+}
+function isJavaBoundaryDataModel(file, content) {
+    return /(?:DTO|Dto|VO|Vo|Request|Response|Command|Query)\.java$/i.test(file)
+        || /\bclass\s+\w*(?:DTO|Dto|VO|Vo|Request|Response|Command|Query)\b/i.test(content);
+}
+export function reviewBackendImplementationFiles(fileContents) {
+    const findings = [];
+    for (const [file, content] of Object.entries(fileContents)) {
+        const lowered = file.toLowerCase();
+        const controller = /controller|routes?|handler/.test(lowered);
+        if (/\.java$/i.test(file)) {
+            const javaEntity = isJavaEntityModel(file, content);
+            const javaBoundaryModel = isJavaBoundaryDataModel(file, content);
+            if (javaEntity && /@Data\b/.test(content)) {
+                findings.push(finding("model_lombok_contract", "hard_fail", file, "持久化 Entity 使用 @Data，容易引入 equals/hashCode/toString 递归、懒加载泄漏和敏感字段日志风险", "Entity 必须使用 @Getter/@Setter；需要 equals/hashCode/toString 时显式按业务键设计并排除敏感和关联字段。"));
+            }
+            if (javaEntity && !/@Getter\b/.test(content) || javaEntity && !/@Setter\b/.test(content)) {
+                findings.push(finding("model_lombok_contract", "hard_fail", file, "持久化 Entity 未同时声明 @Getter 与 @Setter", "Entity 保持薄数据载体，默认使用 @Getter/@Setter，不使用 @Data。"));
+            }
+            if (javaBoundaryModel && !/@Data\b/.test(content)) {
+                findings.push(finding("model_lombok_contract", "hard_fail", file, "DTO/VO/Request/Response 边界对象未使用 @Data", "DTO、VO、Request、Response、Command、Query 等边界数据对象默认使用 @Data，保持字段访问、构造和序列化行为一致。"));
+            }
+        }
+        if (controller && /(?:return|Promise<|ResponseEntity<)\s*[\w<, ?]*(?:Entity|DO|Po)\b|@RequestBody\s+\w*(?:Entity|DO|Po)\b/i.test(content)) {
+            findings.push(finding("controller_boundary", "hard_fail", file, "接口边界直接暴露持久化实体", "使用请求/响应 DTO，并在应用服务或 mapper 中完成实体映射。"));
+        }
+        if (controller && /(?:@PostMapping|@PutMapping|@PatchMapping|router\.(?:post|put|patch))/.test(content)
+            && !/(?:@Valid|@Validated|validate\(|zod|class-validator|Joi|RequestDto|Command|Input)/i.test(content)) {
+            findings.push(finding("dto_validation", "hard_fail", file, "写接口缺少 DTO 或输入校验证据", "定义请求对象并执行字段、枚举和边界校验。"));
+        }
+        if (controller && /(?:page|Pageable|pagination|limit|size)/i.test(content)
+            && !/(?:max|maxPageSize|Math\.min|@Max|size\s*<=|limit\s*<=)/i.test(content)) {
+            findings.push(finding("pagination", "warning", file, "分页入口未体现上限限制", "限制 page size 并对白名单排序字段做校验。"));
+        }
+        if (/(?:payment|callback|webhook|createOrder|submit|缴费|支付)/i.test(`${file} ${content}`)
+            && /(?:@PostMapping|router\.post|async\s+\w+\s*\()/i.test(content)
+            && !/(?:Idempotency|idempot|requestId|request_id|unique|幂等)/i.test(content)) {
+            findings.push(finding("idempotency", "hard_fail", file, "可重复提交的写入流程未声明幂等保护", "增加幂等键、唯一约束或重复请求结果复用策略。"));
+        }
+        if (/@Transactional[\s\S]{0,1000}(?:RestTemplate|WebClient|HttpClient|Feign|fetch\(|axios\.|send\(|publish\()/i.test(content)) {
+            findings.push(finding("transaction", "hard_fail", file, "事务范围内包含外部调用或消息发送", "缩短事务边界，使用 outbox/补偿或事务提交后执行外部交互。"));
+        }
+        const writes = (content.match(/\.(?:save|insert|update|delete)\s*\(/gi) ?? []).length;
+        if (/(?:service|usecase)/.test(lowered) && writes >= 2 && !/@Transactional/i.test(content)) {
+            findings.push(finding("transaction", "hard_fail", file, "多次持久化写入未体现事务边界", "在应用服务定义事务边界并补充回滚一致性测试。"));
+        }
+        if (/(?:tenant|机构|organization|权限|role|account-status|折扣|财务|payment)/i.test(`${file} ${content}`)
+            && controller && !/(?:tenantId|tenant_id|organizationId|@PreAuthorize|authorize|permission|audit|审计)/i.test(content)) {
+            findings.push(finding("security_tenant", "hard_fail", file, "敏感业务接口缺少租户、授权或审计约束证据", "补充权限校验、租户隔离与关键操作审计。"));
+        }
+    }
+    return findings;
+}
+export function hasBlockingBackendFindings(findings) {
+    return findings.some((item) => item.severity === "hard_fail");
+}
+export function verifyBackendArtifactAlignment(input) {
+    const findings = [];
+    if (input.sourceFiles && Object.keys(input.sourceFiles).length > 0 && !input.openapiText) {
+        findings.push(finding("api_db_alignment", "hard_fail", "docs/api/openapi.yaml", "后端接口实现变更缺少 OpenAPI 权威资产", "补齐或更新 OpenAPI，并复验 DTO 字段和错误语义。"));
+    }
+    if (input.apiDocumentText && !input.openapiText) {
+        findings.push(finding("api_db_alignment", "hard_fail", "docs/api", "存在 API 规格文档但缺少 OpenAPI 权威资产", "补齐 OpenAPI 并对齐端点、字段、错误码与枚举。"));
+    }
+    if (input.apiDocumentText && !input.migrationText && /数据库|字段|表结构|DDL/i.test(input.apiDocumentText)) {
+        findings.push(finding("api_db_alignment", "hard_fail", "db/migrations", "接口声明依赖数据库结构但缺少 migration 权威证据", "补齐可执行 migration 并复验接口/数据库一致性。"));
+    }
+    if (input.apiDocumentText && input.openapiText) {
+        const markdownEndpoints = [...input.apiDocumentText.matchAll(/\b(?:GET|POST|PUT|PATCH|DELETE)\s+(\/[A-Za-z0-9_/{}/.-]+)/g)]
+            .map((match) => match[1] ?? "");
+        const missingEndpoints = markdownEndpoints.filter((endpoint) => !(input.openapiText ?? "").includes(endpoint));
+        if (missingEndpoints.length > 0) {
+            findings.push(finding("api_db_alignment", "hard_fail", "docs/api/openapi.yaml", `Markdown API 中的端点未进入 OpenAPI: ${missingEndpoints.join(", ")}`, "补齐 OpenAPI operation，并复验请求响应字段和错误码。"));
+        }
+    }
+    if (input.openapiText && input.sourceFiles) {
+        for (const [file, content] of Object.entries(input.sourceFiles)) {
+            for (const block of content.matchAll(/(?:interface|class)\s+\w*(?:Response|Dto|DTO)\w*\s*\{([\s\S]*?)\}/g)) {
+                const fields = [...(block[1] ?? "").matchAll(/\b([a-zA-Z_][a-zA-Z0-9_]*)\s*(?:\?|:)/g)].map((match) => match[1] ?? "");
+                const missingFields = fields.filter((field) => !(input.openapiText ?? "").includes(field));
+                if (missingFields.length > 0) {
+                    findings.push(finding("api_db_alignment", "hard_fail", file, `响应/DTO 字段未在 OpenAPI 中找到: ${missingFields.join(", ")}`, "同步更新 OpenAPI schema 与 Markdown 字段表后重新复验。"));
+                }
+            }
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=backend_implementation_contract.js.map

package/dist/engine/contracts/backend_implementation_contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend_implementation_contract.js","sourceRoot":"","sources":["../../../src/engine/contracts/backend_implementation_contract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4CH,MAAM,gBAAgB,GAAG,qGAAqG,CAAC;AAC/H,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AACrE,MAAM,yBAAyB,GAAG,2CAA2C,CAAC;AAE9E,MAAM,UAAU,qCAAqC,CACnD,MAAc,EACd,KAAc,EACd,eAAyB,EAAE;IAE3B,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/F,IAAI,KAAK,KAAK,qBAAqB,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxH,OAAO,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,MAAc,EACd,MAAc;IAEd,OAAO;QACL,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,UAAU;QAClB,uBAAuB,EAAE,8BAA8B,MAAM,EAAE;QAC/D,oBAAoB,EAAE,EAAE;QACxB,kBAAkB,EAAE,EAAE;QACtB,2BAA2B,EAAE,EAAE;QAC/B,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,EAAE;QACpB,kBAAkB,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAyD;IACpF,OAAO,CAAC,CAAC,WAAW;WACf,WAAW,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;WAC3C,WAAW,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;WACzC,WAAW,CAAC,2BAA2B,CAAC,MAAM,GAAG,CAAC;WAClD,WAAW,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;WACzC,WAAW,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;WACvC,WAAW,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAMjD;IACC,IAAI,CAAC,qCAAqC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3F,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,gBAAgB;YACxB,SAAS,EAAE,oBAAoB;SAChC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,wBAAwB;YACnC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,sCAAsC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;SACxG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,4BAA4B;QACvC,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAa,EAAE,MAAM,EAAE,WAAW,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,QAAgC,EAChC,QAA8C,EAC9C,IAAY,EACZ,QAAgB,EAChB,aAAqB;IAErB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAe;IACtD,OAAO,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC;WACjD,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;WAChD,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,OAAe;IAC5D,OAAO,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC;WACvE,kEAAkE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,YAAoC;IACnF,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjE,IAAI,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,WAAW,EAAE,IAAI,EAC9D,qEAAqE,EACrE,8EAA8E,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,UAAU,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,WAAW,EAAE,IAAI,EAC9D,oCAAoC,EACpC,gDAAgD,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,WAAW,EAAE,IAAI,EAC9D,uCAAuC,EACvC,4EAA4E,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,IAAI,UAAU,IAAI,yGAAyG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1I,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,WAAW,EAAE,IAAI,EAC5D,eAAe,EACf,qCAAqC,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,UAAU,IAAI,uEAAuE,CAAC,IAAI,CAAC,OAAO,CAAC;eAClG,CAAC,oFAAoF,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,IAAI,EACvD,mBAAmB,EACnB,sBAAsB,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,UAAU,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC;eACrE,CAAC,0DAA0D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EACjD,aAAa,EACb,4BAA4B,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,wDAAwD,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;eAClF,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC;eAC/D,CAAC,yDAAyD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EACpD,mBAAmB,EACnB,wBAAwB,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,2GAA2G,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9H,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EACpD,kBAAkB,EAClB,kCAAkC,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACtF,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3F,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EACpD,gBAAgB,EAChB,wBAAwB,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,kEAAkE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;eAC5F,UAAU,IAAI,CAAC,oFAAoF,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,WAAW,EAAE,IAAI,EACxD,sBAAsB,EACtB,qBAAqB,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAwC;IACjF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAK9C;IACC,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,IAAI,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,EAC5E,yBAAyB,EACzB,gCAAgC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAC/D,6BAA6B,EAC7B,6BAA6B,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACnG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,WAAW,EAAE,eAAe,EACpE,+BAA+B,EAC/B,+BAA+B,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,iBAAiB,GAAG,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC;aACxH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/G,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,EAC5E,iCAAiC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,qCAAqC,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,oEAAoE,CAAC,EAAE,CAAC;gBAC3G,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3F,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,WAAW,EAAE,IAAI,EACzD,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACtD,0CAA0C,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/contracts/brainstorm_contract.d.ts

@@ -0,0 +1,48 @@
+/**
+ * 问题四十二: Brainstorm / Option Exploration — 脑暴与方案探索契约。
+ *
+ * 强制执行:
+ * - brainstorm 不能停留在闲聊，必须形成候选方案、取舍、反证、推荐与非目标
+ * - 脑暴推荐不得绕过 Decision Sovereignty human gate
+ */
+import type { BrainstormSession, OptionExplorationRecord, OptionTradeoffMatrix, BrainstormStatus } from "./extension_platform_contracts.js";
+export interface BrainstormValidationResult {
+    valid: boolean;
+    violations: string[];
+    completeness_score: number;
+    /** 期望的 JSON 结构，供 AI 修正输入时参考 */
+    expected_schema?: Record<string, unknown>;
+}
+/**
+ * 创建脑暴会话。
+ */
+export declare function createBrainstormSession(overrides: Partial<BrainstormSession> & Pick<BrainstormSession, "session_id" | "problem_statement">): BrainstormSession;
+/**
+ * 创建候选方案记录。
+ */
+export declare function createOptionRecord(overrides: Partial<OptionExplorationRecord> & Pick<OptionExplorationRecord, "option_id" | "title">): OptionExplorationRecord;
+/**
+ * 验证脑暴会话完整性。
+ * - 必须有候选方案
+ * - 必须有取舍分析
+ * - 必须有推荐方案
+ * - 必须有被否决的方案及原因
+ */
+export declare function validateBrainstormSession(session: BrainstormSession): BrainstormValidationResult;
+/**
+ * 创建取舍矩阵。
+ */
+export declare function createTradeoffMatrix(overrides: Partial<OptionTradeoffMatrix> & Pick<OptionTradeoffMatrix, "matrix_id" | "criteria" | "selected_option_id">, options: OptionExplorationRecord[]): OptionTradeoffMatrix;
+/**
+ * 评估脑暴推荐是否可以绕过 Decision Sovereignty。
+ * 返回 false 表示脑暴推荐不能直接执行，必须经过决策主权流程。
+ */
+export declare function canBrainstormAutoExecute(_session: BrainstormSession): boolean;
+/**
+ * 推进脑暴状态。
+ */
+export declare function advanceBrainstormStatus(session: BrainstormSession, targetStatus: BrainstormStatus): {
+    allowed: boolean;
+    reason: string;
+};
+//# sourceMappingURL=brainstorm_contract.d.ts.map

package/dist/engine/contracts/brainstorm_contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brainstorm_contract.d.ts","sourceRoot":"","sources":["../../../src/engine/contracts/brainstorm_contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+BAA+B;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAaD;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,mBAAmB,CAAC,GAClG,iBAAiB,CAWnB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,uBAAuB,EAAE,WAAW,GAAG,OAAO,CAAC,GACjG,uBAAuB,CAczB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,0BAA0B,CAoDhG;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,oBAAoB,EAAE,WAAW,GAAG,UAAU,GAAG,oBAAoB,CAAC,EACtH,OAAO,EAAE,uBAAuB,EAAE,GACjC,oBAAoB,CAWtB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAI7E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,YAAY,EAAE,gBAAgB,GAC7B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAetC"}

package/dist/engine/contracts/brainstorm_contract.js

@@ -0,0 +1,146 @@
+/**
+ * 问题四十二: Brainstorm / Option Exploration — 脑暴与方案探索契约。
+ *
+ * 强制执行:
+ * - brainstorm 不能停留在闲聊，必须形成候选方案、取舍、反证、推荐与非目标
+ * - 脑暴推荐不得绕过 Decision Sovereignty human gate
+ */
+/** 脑暴触发条件对应的最低选项数量要求 */
+const MIN_OPTIONS_BY_TRIGGER = {
+    high_impact_change: 2,
+    mechanism_design: 2,
+    technology_choice: 3,
+    user_project_architecture: 2,
+    migration_plan: 2,
+    ambiguous_goal: 2,
+    rework_risk: 2,
+};
+/**
+ * 创建脑暴会话。
+ */
+export function createBrainstormSession(overrides) {
+    return {
+        trigger: "ambiguous_goal",
+        options: [],
+        recommended_option_id: "",
+        rejected_option_ids: [],
+        human_gate_required: false,
+        evidence_refs: [],
+        brainstorm_status: "not_required",
+        ...overrides,
+    };
+}
+/**
+ * 创建候选方案记录。
+ */
+export function createOptionRecord(overrides) {
+    return {
+        description: "",
+        pros: [],
+        cons: [],
+        applicable_when: [],
+        not_applicable_when: [],
+        failure_conditions: [],
+        verification_method: [],
+        estimated_risk: "medium",
+        reversibility: "reversible",
+        required_human_decisions: [],
+        ...overrides,
+    };
+}
+/**
+ * 验证脑暴会话完整性。
+ * - 必须有候选方案
+ * - 必须有取舍分析
+ * - 必须有推荐方案
+ * - 必须有被否决的方案及原因
+ */
+export function validateBrainstormSession(session) {
+    const violations = [];
+    const minOptions = MIN_OPTIONS_BY_TRIGGER[session.trigger] ?? 2;
+    if (session.options.length < minOptions) {
+        violations.push(`脑暴必须包含至少 ${minOptions} 个候选方案，当前 ${session.options.length} 个`);
+    }
+    if (!session.recommended_option_id) {
+        violations.push("脑暴必须形成推荐方案");
+    }
+    if (session.recommended_option_id && !session.options.some(o => o.option_id === session.recommended_option_id)) {
+        violations.push("推荐方案不在候选方案列表中");
+    }
+    // 检查每个候选方案的完整性
+    for (const opt of session.options) {
+        if (opt.pros.length === 0 && opt.cons.length === 0) {
+            violations.push(`候选方案 ${opt.option_id} 缺少取舍分析（pros/cons）`);
+        }
+        if (opt.failure_conditions.length === 0) {
+            violations.push(`候选方案 ${opt.option_id} 缺少失败条件（反证）`);
+        }
+    }
+    // 检查被否决方案是否有原因
+    for (const rejectedId of session.rejected_option_ids) {
+        const opt = session.options.find(o => o.option_id === rejectedId);
+        if (!opt) {
+            violations.push(`被否决方案 ${rejectedId} 不在候选方案列表中`);
+        }
+    }
+    const maxScore = 5;
+    const score = Math.max(0, maxScore - violations.length);
+    const result = {
+        valid: violations.length === 0,
+        violations,
+        completeness_score: score / maxScore,
+    };
+    if (!result.valid) {
+        result.expected_schema = {
+            trigger: "uncertainty | high_impact | detail_intensive",
+            options: [{ option_id: "string", title: "string", description: "string", pros: ["string"], cons: ["string"] }],
+            recommended_option_id: "string — 必须匹配 options[].option_id",
+            rejected_option_ids: ["string — 必须在 options 列表中"],
+            failure_conditions: ["string — 每个方案的失败条件"],
+        };
+    }
+    return result;
+}
+/**
+ * 创建取舍矩阵。
+ */
+export function createTradeoffMatrix(overrides, options) {
+    return {
+        option_scores: options.map(opt => ({
+            option_id: opt.option_id,
+            scores: Object.fromEntries(overrides.criteria?.map(c => [c, "unknown"]) ?? []),
+            rationale_zh: "",
+        })),
+        why_selected_zh: "",
+        why_rejected_zh: [],
+        ...overrides,
+    };
+}
+/**
+ * 评估脑暴推荐是否可以绕过 Decision Sovereignty。
+ * 返回 false 表示脑暴推荐不能直接执行，必须经过决策主权流程。
+ */
+export function canBrainstormAutoExecute(_session) {
+    // 脑暴推荐永远不能绕过 Decision Sovereignty human gate
+    // 即使 human_gate_required = false，仍然需要经过决策流程
+    return false;
+}
+/**
+ * 推进脑暴状态。
+ */
+export function advanceBrainstormStatus(session, targetStatus) {
+    const validTransitions = {
+        not_required: ["exploring"],
+        exploring: ["options_ready", "not_required"],
+        options_ready: ["selected", "human_required", "exploring"],
+        selected: [],
+        human_required: ["selected", "rejected"],
+        rejected: [],
+    };
+    const allowed = validTransitions[session.brainstorm_status]?.includes(targetStatus) ?? false;
+    return {
+        allowed,
+        reason: allowed ? "合法转移" : `${session.brainstorm_status} → ${targetStatus} 不允许`,
+    };
+}
+//# sourceMappingURL=brainstorm_contract.js.map

package/dist/engine/contracts/brainstorm_contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brainstorm_contract.js","sourceRoot":"","sources":["../../../src/engine/contracts/brainstorm_contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,wBAAwB;AACxB,MAAM,sBAAsB,GAAiD;IAC3E,kBAAkB,EAAE,CAAC;IACrB,gBAAgB,EAAE,CAAC;IACnB,iBAAiB,EAAE,CAAC;IACpB,yBAAyB,EAAE,CAAC;IAC5B,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,CAAC;IACjB,WAAW,EAAE,CAAC;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAmG;IAEnG,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,EAAE;QACX,qBAAqB,EAAE,EAAE;QACzB,mBAAmB,EAAE,EAAE;QACvB,mBAAmB,EAAE,KAAK;QAC1B,aAAa,EAAE,EAAE;QACjB,iBAAiB,EAAE,cAAc;QACjC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAkG;IAElG,OAAO;QACL,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,EAAE;QACR,IAAI,EAAE,EAAE;QACR,eAAe,EAAE,EAAE;QACnB,mBAAmB,EAAE,EAAE;QACvB,kBAAkB,EAAE,EAAE;QACtB,mBAAmB,EAAE,EAAE;QACvB,cAAc,EAAE,QAAQ;QACxB,aAAa,EAAE,YAAY;QAC3B,wBAAwB,EAAE,EAAE;QAC5B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA0B;IAClE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACxC,UAAU,CAAC,IAAI,CAAC,YAAY,UAAU,aAAa,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC/G,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,eAAe;IACf,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,SAAS,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,SAAS,aAAa,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,eAAe;IACf,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,UAAU,CAAC,IAAI,CAAC,SAAS,UAAU,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,MAAM,GAA+B;QACzC,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAC9B,UAAU;QACV,kBAAkB,EAAE,KAAK,GAAG,QAAQ;KACrC,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,CAAC,eAAe,GAAG;YACvB,OAAO,EAAE,8CAA8C;YACvD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9G,qBAAqB,EAAE,mCAAmC;YAC1D,mBAAmB,EAAE,CAAC,0BAA0B,CAAC;YACjD,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;SAC3C,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAsH,EACtH,OAAkC;IAElC,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;YACvF,YAAY,EAAE,EAAE;SACjB,CAAC,CAAC;QACH,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,EAAE;QACnB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA2B;IAClE,6CAA6C;IAC7C,4CAA4C;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA0B,EAC1B,YAA8B;IAE9B,MAAM,gBAAgB,GAAiD;QACrE,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QAC5C,aAAa,EAAE,CAAC,UAAU,EAAE,gBAAgB,EAAE,WAAW,CAAC;QAC1D,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;QACxC,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;IAC7F,OAAO;QACL,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,MAAM,YAAY,MAAM;KAChF,CAAC;AACJ,CAAC"}

package/dist/engine/contracts/capability_action_advisor.d.ts

@@ -0,0 +1,27 @@
+/**
+ * 能力状态变更建议 — 基于 escape report 生成 downgrade/disable/promote_blocked/keep 决策。
+ * P2-4 范围: 只输出建议，不直接改 registry。
+ *
+ * 规则来源: 设计方案 7.7.3 降级规则表。
+ */
+import type { EscapeReport, CapabilityAction } from "./escape_report.js";
+import type { CapabilityState } from "./capability_registry.js";
+export interface ActionRule {
+    rule_id: string;
+    description: string;
+    severity: "critical" | "medium" | "low";
+}
+export interface ActionDecision {
+    policy_id: string;
+    current_state: CapabilityState;
+    recommended_action: CapabilityAction;
+    target_state: CapabilityState;
+    reason: string;
+    evidence_ids: string[];
+    triggered_rules: ActionRule[];
+}
+/**
+ * 执行 decideAction 操作
+ */
+export declare function decideAction(reports: EscapeReport[], current_state: CapabilityState, policy_id: string, now?: Date): ActionDecision;
+//# sourceMappingURL=capability_action_advisor.d.ts.map

package/dist/engine/contracts/capability_action_advisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_action_advisor.d.ts","sourceRoot":"","sources":["../../../src/engine/contracts/capability_action_advisor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAc,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGhE,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,KAAK,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,eAAe,CAAC;IAC/B,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,YAAY,EAAE,eAAe,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,UAAU,EAAE,CAAC;CAC/B;AAgDD;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,YAAY,EAAE,EACvB,aAAa,EAAE,eAAe,EAC9B,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,IAAiB,GACrB,cAAc,CAiIhB"}

package/dist/engine/contracts/capability_action_advisor.js

@@ -0,0 +1,158 @@
+/**
+ * 能力状态变更建议 — 基于 escape report 生成 downgrade/disable/promote_blocked/keep 决策。
+ * P2-4 范围: 只输出建议，不直接改 registry。
+ *
+ * 规则来源: 设计方案 7.7.3 降级规则表。
+ */
+import { debug } from "../core/logger.js";
+const CRITICAL_ESCAPE_TYPES = new Set([
+    "ai_escape",
+    "rule_gap",
+    "tool_bug",
+]);
+const MEDIUM_ESCAPE_TYPES = new Set([
+    "weak_test",
+    "bad_evidence",
+    "human_miss",
+]);
+const FALSE_POSITIVE_TYPE = "false_positive";
+const FALSE_POSITIVE_THRESHOLD = 2;
+const RULE_CRITICAL_ESCAPE = {
+    rule_id: "R-CE",
+    description: "同一 policy_id 出现 1 次严重逃逸 (ai_escape/rule_gap/tool_bug) → enforced→advisory",
+    severity: "critical",
+};
+const RULE_TWO_MEDIUM_7DAYS = {
+    rule_id: "R-2M7D",
+    description: "7 天内同一 policy_id 出现 2 次中等逃逸 → enforced→advisory",
+    severity: "medium",
+};
+const RULE_REPEATED_FALSE_POSITIVE = {
+    rule_id: "R-FP",
+    description: `连续 ${FALSE_POSITIVE_THRESHOLD}+ 次误伤 → promote_blocked（暂停 hard block，保留 warning）`,
+    severity: "medium",
+};
+const RULE_STALE_ENFORCED = {
+    rule_id: "R-SE",
+    description: "advisory/experimental 下仍有逃逸累积 → disable 直到修复",
+    severity: "critical",
+};
+function withinDays(report, days, now) {
+    const created = new Date(report.created_at);
+    const cutoff = new Date(now.getTime() - days * 24 * 60 * 60 * 1000);
+    return created >= cutoff;
+}
+/**
+ * 执行 decideAction 操作
+ */
+export function decideAction(reports, current_state, policy_id, now = new Date()) {
+    debug("能力决策", "decideAction() 开始 — policy_id:", policy_id, "当前状态:", current_state);
+    const relevant = reports.filter((r) => r.policy_id === policy_id);
+    const criticals = relevant.filter((r) => CRITICAL_ESCAPE_TYPES.has(r.failure_type) && r.capability_action !== "keep");
+    const mediumsRecent = relevant.filter((r) => MEDIUM_ESCAPE_TYPES.has(r.failure_type) &&
+        r.capability_action !== "keep" &&
+        withinDays(r, 7, now));
+    const falsePositives = relevant.filter((r) => r.failure_type === FALSE_POSITIVE_TYPE);
+    const triggered = [];
+    // 规则 R-CE: 1 次严重逃逸 → enforced 降级为 advisory
+    if (criticals.length >= 1) {
+        triggered.push(RULE_CRITICAL_ESCAPE);
+    }
+    // 规则 R-2M7D: 7 天内 2 次中等逃逸 → enforced 降级为 advisory
+    if (mediumsRecent.length >= 2) {
+        triggered.push(RULE_TWO_MEDIUM_7DAYS);
+    }
+    // 规则 R-FP: 连续误伤 → promote_blocked
+    if (falsePositives.length >= FALSE_POSITIVE_THRESHOLD) {
+        triggered.push(RULE_REPEATED_FALSE_POSITIVE);
+    }
+    // 根据触发规则和当前状态确定动作
+    if (triggered.length === 0) {
+        debug("能力决策", "无触发规则，保持当前状态 —", policy_id);
+        return {
+            policy_id,
+            current_state,
+            recommended_action: "keep",
+            target_state: current_state,
+            reason: `${policy_id} 无可操作逃逸。能力保持 ${current_state}。`,
+            evidence_ids: [],
+            triggered_rules: [],
+        };
+    }
+    const evidenceIds = [
+        ...criticals.map((r) => r.escape_id),
+        ...mediumsRecent.map((r) => r.escape_id),
+        ...falsePositives.map((r) => r.escape_id),
+    ];
+    // R-FP 无论当前状态如何都升级为 blocked
+    const hasFP = triggered.some((r) => r.rule_id === "R-FP");
+    if (current_state === "enforced") {
+        // 严重或 2 次以上中等 → 降级为 advisory
+        if (triggered.some((r) => r.rule_id === "R-CE" || r.rule_id === "R-2M7D")) {
+            debug("能力决策", "enforced→advisory —", policy_id, "触发规则:", triggered.map(r => r.rule_id).join(","));
+            return {
+                policy_id,
+                current_state,
+                recommended_action: "downgrade",
+                target_state: "advisory",
+                reason: `已实施能力 ${policy_id} 触发 ${triggered.map((r) => r.rule_id).join(", ")}。建议降级为 advisory。`,
+                evidence_ids: evidenceIds,
+                triggered_rules: triggered,
+            };
+        }
+        // 仅误伤 → promote_blocked
+        if (hasFP) {
+            debug("能力决策", "promote_blocked (enforced) —", policy_id, "误伤次数:", falsePositives.length);
+            return {
+                policy_id,
+                current_state,
+                recommended_action: "promote_blocked",
+                target_state: "enforced",
+                reason: `已实施能力 ${policy_id} 有 ${falsePositives.length} 次误伤。硬性阻止已暂停，保留警告。`,
+                evidence_ids: evidenceIds,
+                triggered_rules: triggered,
+            };
+        }
+    }
+    if (current_state === "advisory" || current_state === "experimental") {
+        // 已降级但仍持续累积逃逸 → disable
+        if (triggered.some((r) => r.rule_id === "R-CE" || r.rule_id === "R-2M7D")) {
+            triggered.push(RULE_STALE_ENFORCED);
+            debug("能力决策", current_state, "→ removed (disable) —", policy_id, "持续累积逃逸");
+            return {
+                policy_id,
+                current_state,
+                recommended_action: "disable",
+                target_state: "removed",
+                reason: `${current_state} 能力 ${policy_id} 持续累积逃逸。建议 disable 直到修复。`,
+                evidence_ids: evidenceIds,
+                triggered_rules: triggered,
+            };
+        }
+        // 仅误伤且处于 advisory/experimental → 仍然 promote_blocked
+        if (hasFP) {
+            debug("能力决策", "promote_blocked (advisory/experimental) —", policy_id, "状态:", current_state, "误伤次数:", falsePositives.length);
+            return {
+                policy_id,
+                current_state,
+                recommended_action: "promote_blocked",
+                target_state: current_state,
+                reason: `${current_state} 能力 ${policy_id} 有 ${falsePositives.length} 次误伤。升级为 enforced blocked。`,
+                evidence_ids: evidenceIds,
+                triggered_rules: triggered,
+            };
+        }
+    }
+    // removed 状态或未处理: keep
+    debug("能力决策", "保持状态 —", policy_id, "当前:", current_state, "已触发规则:", triggered.map(r => r.rule_id).join(","));
+    return {
+        policy_id,
+        current_state,
+        recommended_action: "keep",
+        target_state: current_state,
+        reason: `不建议对 ${policy_id} 进行状态变更（当前: ${current_state}）。`,
+        evidence_ids: evidenceIds,
+        triggered_rules: triggered,
+    };
+}
+//# sourceMappingURL=capability_action_advisor.js.map

package/dist/engine/contracts/capability_action_advisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_action_advisor.js","sourceRoot":"","sources":["../../../src/engine/contracts/capability_action_advisor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAkB1C,MAAM,qBAAqB,GAAoB,IAAI,GAAG,CAAC;IACrD,WAAW;IACX,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAoB,IAAI,GAAG,CAAC;IACnD,WAAW;IACX,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAe,gBAAgB,CAAC;AAEzD,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC,MAAM,oBAAoB,GAAe;IACvC,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,2EAA2E;IACxF,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,MAAM,qBAAqB,GAAe;IACxC,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,iDAAiD;IAC9D,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,MAAM,4BAA4B,GAAe;IAC/C,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,MAAM,wBAAwB,mDAAmD;IAC9F,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,MAAM,mBAAmB,GAAe;IACtC,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,8CAA8C;IAC3D,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,SAAS,UAAU,CAAC,MAAoB,EAAE,IAAY,EAAE,GAAS;IAC/D,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,OAAO,OAAO,IAAI,MAAM,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAuB,EACvB,aAA8B,EAC9B,SAAiB,EACjB,MAAY,IAAI,IAAI,EAAE;IAEpB,KAAK,CAAC,MAAM,EAAE,gCAAgC,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAElE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,MAAM,CACnF,CAAC;IAEF,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QACvC,CAAC,CAAC,iBAAiB,KAAK,MAAM;QAC9B,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CACxB,CAAC;IAEF,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,mBAAmB,CAC9C,CAAC;IAEF,MAAM,SAAS,GAAiB,EAAE,CAAC;IAEnC,2CAA2C;IAC3C,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;IAED,kDAAkD;IAClD,IAAI,aAAa,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;IAED,kCAAkC;IAClC,IAAI,cAAc,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACtD,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IAED,kBAAkB;IAClB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAC3C,OAAO;YACL,SAAS;YACT,aAAa;YACb,kBAAkB,EAAE,MAAM;YAC1B,YAAY,EAAE,aAAa;YAC3B,MAAM,EAAE,GAAG,SAAS,gBAAgB,aAAa,GAAG;YACpD,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;KAC1C,CAAC;IAEF,4BAA4B;IAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAE1D,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjC,6BAA6B;QAC7B,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAClG,OAAO;gBACL,SAAS;gBACT,aAAa;gBACb,kBAAkB,EAAE,WAAW;gBAC/B,YAAY,EAAE,UAAU;gBACxB,MAAM,EAAE,SAAS,SAAS,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAC7F,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;QACD,wBAAwB;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YACzF,OAAO;gBACL,SAAS;gBACT,aAAa;gBACb,kBAAkB,EAAE,iBAAiB;gBACrC,YAAY,EAAE,UAAU;gBACxB,MAAM,EAAE,SAAS,SAAS,MAAM,cAAc,CAAC,MAAM,oBAAoB;gBACzE,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrE,wBAAwB;QACxB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACpC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,uBAAuB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC3E,OAAO;gBACL,SAAS;gBACT,aAAa;gBACb,kBAAkB,EAAE,SAAS;gBAC7B,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,GAAG,aAAa,OAAO,SAAS,0BAA0B;gBAClE,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;QACD,oDAAoD;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,MAAM,EAAE,2CAA2C,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC5H,OAAO;gBACL,SAAS;gBACT,aAAa;gBACb,kBAAkB,EAAE,iBAAiB;gBACrC,YAAY,EAAE,aAAa;gBAC3B,MAAM,EAAE,GAAG,aAAa,OAAO,SAAS,MAAM,cAAc,CAAC,MAAM,4BAA4B;gBAC/F,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5G,OAAO;QACL,SAAS;QACT,aAAa;QACb,kBAAkB,EAAE,MAAM;QAC1B,YAAY,EAAE,aAAa;QAC3B,MAAM,EAAE,QAAQ,SAAS,eAAe,aAAa,IAAI;QACzD,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,SAAS;KAC3B,CAAC;AACJ,CAAC"}