soloforge 1.1.42 → 1.1.44

package/dist/gate/plan_proposal_gate.js

@@ -0,0 +1,345 @@
+/**
+ * Plan Proposal Gate — 管线层模块。
+ *
+ * 职责边界：
+ * - 负责：PlanGateTaskType 等 管线层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：状态机、工具层
+ * 调用谁：path_scope_utils
+ *
+ * 数据流：用户意图 → 解析/扩展 → 执行 → 输出
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+import { isPathInScope } from "../shared/path_scope_utils.js";
+// ── 任务类型到最低计划等级的映射 ──
+const MIN_PLAN_LEVEL = {
+    simple_answer: "none_with_reason",
+    read_only_analysis: "brief_plan",
+    code_change: "execution_plan",
+    file_edit: "execution_plan",
+    test_or_review: "execution_plan",
+    architecture_design: "option_proposal",
+    existing_system_development: "execution_plan",
+    local_acceptance: "execution_plan",
+    batch_documentation_update: "execution_plan",
+    migration: "human_confirmation_required",
+    delete_or_overwrite: "human_confirmation_required",
+    high_risk_operation: "human_confirmation_required",
+};
+/** 需要用户确认的任务类型 */
+const NEEDS_CONFIRMATION_TYPES = new Set([
+    "migration",
+    "delete_or_overwrite",
+    "high_risk_operation",
+]);
+/** plan_level 排序权重 */
+const LEVEL_WEIGHT = {
+    none_with_reason: 0,
+    brief_plan: 1,
+    execution_plan: 2,
+    option_proposal: 3,
+    human_confirmation_required: 4,
+};
+/** 风险升级触发条件 — 同时命中多个 task_type 时取最高 */
+const RISK_UPGRADE_TRIGGERS = [
+    { types: ["code_change", "delete_or_overwrite"], upgrade_to: "human_confirmation_required" },
+    { types: ["code_change", "migration"], upgrade_to: "human_confirmation_required" },
+    { types: ["file_edit", "delete_or_overwrite"], upgrade_to: "human_confirmation_required" },
+    { types: ["code_change", "high_risk_operation"], upgrade_to: "human_confirmation_required" },
+];
+/** 高风险关键词 — 检测用户意图中的高风险信号 */
+const HIGH_RISK_KEYWORDS = [
+    "删除", "drop", "truncate", "rm -rf", "DELETE FROM",
+    "覆盖", "force push", "--force",
+    "数据库", "database", "schema",
+    "权限", "permission", "auth",
+    "技术栈", "framework", "migration",
+    "发布", "deploy", "publish", "release",
+    "Docker", "docker", "端口", "port",
+    "安装", "install", "依赖", "dependency",
+    "用户数据", "user data",
+];
+/** none_with_reason 禁止用于的任务类型 */
+const NONE_WITH_REASON_FORBIDDEN = new Set([
+    "code_change", "file_edit", "test_or_review",
+    "local_acceptance", "batch_documentation_update",
+    "migration", "delete_or_overwrite", "high_risk_operation",
+]);
+// ── 核心函数 ──
+/**
+ * 评估计划前置门 — 检查任务是否有足够等级的计划。
+ */
+export function evaluatePlanProposalGate(input) {
+    const violations = [];
+    const blockedActions = [];
+    // 确定最低要求等级
+    let requiredLevel = MIN_PLAN_LEVEL[input.task_type] ?? "execution_plan";
+    // 风险升级: 当意图同时命中多个高风险类型时取最高等级
+    for (const trigger of RISK_UPGRADE_TRIGGERS) {
+        const allTypesMatch = trigger.types.every((t) => {
+            if (t === input.task_type)
+                return true;
+            return inferPlanGateTaskType(input.user_intent) === t;
+        });
+        if (allTypesMatch) {
+            const currentWeight = LEVEL_WEIGHT[requiredLevel];
+            const upgradeWeight = LEVEL_WEIGHT[trigger.upgrade_to];
+            if (upgradeWeight > currentWeight) {
+                requiredLevel = trigger.upgrade_to;
+            }
+        }
+    }
+    // 检测意图中的高风险关键词
+    const intentHasHighRisk = HIGH_RISK_KEYWORDS.some((kw) => input.user_intent.toLowerCase().includes(kw.toLowerCase()));
+    if (intentHasHighRisk && LEVEL_WEIGHT[requiredLevel] < LEVEL_WEIGHT["execution_plan"]) {
+        requiredLevel = "execution_plan";
+    }
+    // scope 扩大或风险升高 → 升级
+    if (input.scope_expanded || input.risk_elevated) {
+        if (LEVEL_WEIGHT[requiredLevel] < LEVEL_WEIGHT["human_confirmation_required"]) {
+            requiredLevel = "human_confirmation_required";
+        }
+    }
+    const currentLevel = input.plan_level ?? "none_with_reason";
+    // 检查 1: none_with_reason 适用范围
+    if (currentLevel === "none_with_reason" && NONE_WITH_REASON_FORBIDDEN.has(input.task_type)) {
+        violations.push({
+            rule: "none_with_reason_forbidden_for_write",
+            severity: "hard_fail",
+            reason_zh: `任务类型 ${input.task_type} 不得使用 none_with_reason，写入/高风险任务必须有计划`,
+            diagnostic_code: "SF-PLAN-5010",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 2: 计划等级不足
+    if (LEVEL_WEIGHT[currentLevel] < LEVEL_WEIGHT[requiredLevel]) {
+        violations.push({
+            rule: "plan_level_insufficient",
+            severity: "hard_fail",
+            reason_zh: `计划等级 ${currentLevel} 不足，任务类型 ${input.task_type} 至少需要 ${requiredLevel}`,
+            diagnostic_code: "SF-PLAN-5002",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 3: 需要用户确认
+    if (NEEDS_CONFIRMATION_TYPES.has(input.task_type) && !input.user_confirmation_ref) {
+        violations.push({
+            rule: "confirmation_required",
+            severity: "hard_fail",
+            reason_zh: `任务类型 ${input.task_type} 需要用户确认，但缺少 user_confirmation_ref`,
+            diagnostic_code: "SF-PLAN-5003",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 4: 高风险意图无确认
+    if (intentHasHighRisk && !input.user_confirmation_ref &&
+        LEVEL_WEIGHT[requiredLevel] >= LEVEL_WEIGHT["human_confirmation_required"]) {
+        violations.push({
+            rule: "high_risk_no_confirmation",
+            severity: "hard_fail",
+            reason_zh: "意图包含高风险操作但缺少用户确认",
+            diagnostic_code: "SF-PLAN-5003",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 5: 缺少计划本身
+    if (!input.plan_summary_zh && currentLevel !== "none_with_reason") {
+        violations.push({
+            rule: "no_plan",
+            severity: "hard_fail",
+            reason_zh: "执行前缺少计划",
+            diagnostic_code: "SF-PLAN-5001",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 6: 缺少验证计划（execution_plan 及以上）
+    if (LEVEL_WEIGHT[currentLevel] >= LEVEL_WEIGHT["execution_plan"] &&
+        (!input.verification_plan || input.verification_plan.length === 0)) {
+        violations.push({
+            rule: "verification_plan_missing",
+            severity: "hard_fail",
+            reason_zh: "计划未记录验证方式",
+            diagnostic_code: "SF-PLAN-5005",
+        });
+    }
+    // 检查 7: 缺少 evidence refs
+    if (!input.evidence_refs || input.evidence_refs.length === 0) {
+        violations.push({
+            rule: "evidence_refs_missing",
+            severity: "hard_fail",
+            reason_zh: "计划未进入 evidence refs",
+            diagnostic_code: "SF-PLAN-5006",
+        });
+    }
+    // 自动修复循环: 同 scope 内可用原计划
+    if (input.is_auto_repair_step && input.auto_repair_origin_plan_id && !input.scope_expanded) {
+        // 自动修复每轮仍需要 evidence
+        if (!input.evidence_refs || input.evidence_refs.length === 0) {
+            violations.push({
+                rule: "auto_repair_evidence_missing",
+                severity: "hard_fail",
+                reason_zh: "自动修复每轮必须有 evidence",
+                diagnostic_code: "SF-PLAN-5006",
+            });
+        }
+        // 自动修复在授权 scope 内不阻断
+    }
+    const hardFails = violations.filter((v) => v.severity === "hard_fail");
+    const passed = hardFails.length === 0;
+    return {
+        passed,
+        plan_gate_status: passed ? "passed" : hardFails.some((v) => v.diagnostic_code === "SF-PLAN-5003") ? "manual_required" : "blocked",
+        required_level: requiredLevel,
+        current_level: currentLevel,
+        reason_zh: passed ? "计划前置门通过" : hardFails.map((v) => v.reason_zh).join("; "),
+        violations,
+        diagnostic_code: hardFails.length > 0 ? hardFails[0].diagnostic_code : undefined,
+        evidence_refs: input.evidence_refs ?? [],
+        blocked_actions: [...new Set(blockedActions)],
+    };
+}
+/**
+ * 在执行动作前检查 plan gate — 返回是否允许执行。
+ */
+export function requirePlanBeforeAction(gateResult, action) {
+    if (!gateResult.passed) {
+        return {
+            allowed: false,
+            reason_zh: `Plan Gate 未通过: ${gateResult.reason_zh}`,
+            diagnostic_code: gateResult.diagnostic_code ?? "SF-PLAN-5001",
+        };
+    }
+    if (gateResult.blocked_actions.includes(action)) {
+        return {
+            allowed: false,
+            reason_zh: `动作 ${action} 被 Plan Gate 阻断`,
+            diagnostic_code: "SF-PLAN-5004",
+        };
+    }
+    return { allowed: true, reason_zh: "Plan Gate 通过，允许执行" };
+}
+/**
+ * 验证动作是否在已确认计划范围内。
+ */
+export function validateActionWithinPlan(plannedScope, actionTarget, planLevel) {
+    // 简单计划和只读分析不要求 scope 精确匹配
+    if (planLevel === "none_with_reason" || planLevel === "brief_plan") {
+        return { allowed: true, reason_zh: "低风险任务，不要求 scope 精确匹配" };
+    }
+    const inScope = plannedScope.some((s) => isPathInScope(actionTarget, s, { caseSensitive: true }));
+    if (!inScope) {
+        return {
+            allowed: false,
+            reason_zh: `动作目标 ${actionTarget} 不在已确认计划 scope 内: ${plannedScope.join(", ")}`,
+        };
+    }
+    return { allowed: true, reason_zh: "动作在计划范围内" };
+}
+/**
+ * 创建计划提案证据。
+ */
+export function createPlanProposalEvidence(input) {
+    const evidenceId = `plan-evidence-${input.task_id}-${Date.now()}`;
+    return {
+        evidence_id: evidenceId,
+        task_id: input.task_id,
+        plan_id: `plan-${input.task_id}`,
+        plan_level: input.plan_level ?? "execution_plan",
+        task_type: input.task_type,
+        plan_summary_zh: input.plan_summary_zh ?? "",
+        proposed_steps: input.proposed_steps ?? [],
+        verification_plan: input.verification_plan ?? [],
+        risks: input.risks ?? [],
+        needs_user_confirmation: input.needs_user_confirmation ?? false,
+        user_confirmation_ref: input.user_confirmation_ref,
+        evidence_refs: input.evidence_refs ?? [],
+        created_at: new Date().toISOString(),
+    };
+}
+/**
+ * 推断任务类型 — 从用户意图文本映射到 PlanGateTaskType。
+ */
+export function inferPlanGateTaskType(intent, route) {
+    // 高风险检测优先
+    if (/删除|drop\s+table|truncate|rm\s+-rf|覆盖/.test(intent))
+        return "delete_or_overwrite";
+    if (/迁移|migrate|数据库.*schema|database.*schema/.test(intent))
+        return "migration";
+    if (/发布|deploy|publish|release|push.*main|push.*master/.test(intent))
+        return "high_risk_operation";
+    if (/docker|容器|端口.*暴露|port.*expose/.test(intent))
+        return "high_risk_operation";
+    // 路由推断
+    if (route === "code_change")
+        return "code_change";
+    if (route === "analysis")
+        return "read_only_analysis";
+    if (route === "operation")
+        return "local_acceptance";
+    if (route === "review")
+        return "test_or_review";
+    // 内容推断
+    if (/修改.*代码|写.*代码|实现|开发|fix|feat/.test(intent))
+        return "code_change";
+    if (/修改.*文件|编辑|写.*文件|新增.*文件/.test(intent))
+        return "file_edit";
+    if (/架构|设计|方案/.test(intent))
+        return "architecture_design";
+    if (/现有.*系统|已有.*项目/.test(intent))
+        return "existing_system_development";
+    if (/审查|review|检查/.test(intent))
+        return "test_or_review";
+    if (/测试|test|验证/.test(intent))
+        return "test_or_review";
+    if (/文档|doc|batch.*文档/.test(intent))
+        return "batch_documentation_update";
+    if (/验收|browser|浏览器|docker.*accept/.test(intent))
+        return "local_acceptance";
+    // 默认
+    if (/分析|查看|阅读|read|search|find/.test(intent) || !/修改|写|改|创建|删除|构建|运行/.test(intent)) {
+        return "read_only_analysis";
+    }
+    return "code_change";
+}
+/**
+ * 检查是否为 "只要求 review" 场景 — 如是，不得擅自修复。
+ */
+export function isReviewOnlyIntent(intent) {
+    const lower = intent.toLowerCase();
+    const reviewWords = /审查|review|检查|代码审查|code review|只看|只读|不修复|不修改|不修改代码/;
+    const fixWords = /修复|fix|修|改|修改.*代码/;
+    return reviewWords.test(lower) && !fixWords.test(lower);
+}
+/**
+ * 确认参数 — 计划确认后，旧确认只能覆盖原计划范围。
+ */
+export function validateConfirmationScope(originalConfirmation, newScope) {
+    const newScopeStr = JSON.stringify(newScope.sort());
+    const origScopeStr = JSON.stringify(originalConfirmation.scope.sort());
+    if (newScopeStr === origScopeStr) {
+        return { valid: true, reason_zh: "scope 未变，旧确认有效" };
+    }
+    const expanded = newScope.filter((s) => !originalConfirmation.scope.includes(s));
+    if (expanded.length > 0) {
+        return {
+            valid: false,
+            reason_zh: `scope 扩大: 新增 ${expanded.join(", ")}，需要重新确认`,
+        };
+    }
+    return { valid: true, reason_zh: "scope 未扩大，旧确认有效" };
+}
+// ── 诊断码注册 ──
+export const PLAN_GATE_DIAGNOSTIC_CODES = {
+    "SF-PLAN-5001": "执行前缺少计划",
+    "SF-PLAN-5002": "计划等级不足",
+    "SF-PLAN-5003": "高风险动作缺少用户确认",
+    "SF-PLAN-5004": "执行动作超出已确认计划",
+    "SF-PLAN-5005": "计划未记录验证方式",
+    "SF-PLAN-5006": "计划未进入 evidence refs",
+    "SF-PLAN-5007": "计划只存在于最终报告，未在执行前生效",
+    "SF-PLAN-5008": "用户项目 adapter 未注入计划前置规则",
+    "SF-PLAN-5009": "机制层未接入，只有模板或知识描述",
+    "SF-PLAN-5010": "none_with_reason 被用于写入或高风险任务",
+};
+//# sourceMappingURL=plan_proposal_gate.js.map

package/dist/gate/plan_proposal_gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan_proposal_gate.js","sourceRoot":"","sources":["../../src/gate/plan_proposal_gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AA0H9D,uBAAuB;AAEvB,MAAM,cAAc,GAA4C;IAC9D,aAAa,EAAE,kBAAkB;IACjC,kBAAkB,EAAE,YAAY;IAChC,WAAW,EAAE,gBAAgB;IAC7B,SAAS,EAAE,gBAAgB;IAC3B,cAAc,EAAE,gBAAgB;IAChC,mBAAmB,EAAE,iBAAiB;IACtC,2BAA2B,EAAE,gBAAgB;IAC7C,gBAAgB,EAAE,gBAAgB;IAClC,0BAA0B,EAAE,gBAAgB;IAC5C,SAAS,EAAE,6BAA6B;IACxC,mBAAmB,EAAE,6BAA6B;IAClD,mBAAmB,EAAE,6BAA6B;CACnD,CAAC;AAEF,kBAAkB;AAClB,MAAM,wBAAwB,GAA0B,IAAI,GAAG,CAAC;IAC9D,WAAW;IACX,qBAAqB;IACrB,qBAAqB;CACtB,CAAC,CAAC;AAEH,sBAAsB;AACtB,MAAM,YAAY,GAAkC;IAClD,gBAAgB,EAAE,CAAC;IACnB,UAAU,EAAE,CAAC;IACb,cAAc,EAAE,CAAC;IACjB,eAAe,EAAE,CAAC;IAClB,2BAA2B,EAAE,CAAC;CAC/B,CAAC;AAEF,uCAAuC;AACvC,MAAM,qBAAqB,GAAoE;IAC7F,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC5F,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAClF,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC1F,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;CAC7F,CAAC;AAEF,6BAA6B;AAC7B,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa;IACjD,IAAI,EAAE,YAAY,EAAE,SAAS;IAC7B,KAAK,EAAE,UAAU,EAAE,QAAQ;IAC3B,IAAI,EAAE,YAAY,EAAE,MAAM;IAC1B,KAAK,EAAE,WAAW,EAAE,WAAW;IAC/B,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;IACpC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM;IAChC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY;IACnC,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF,iCAAiC;AACjC,MAAM,0BAA0B,GAA0B,IAAI,GAAG,CAAC;IAChE,aAAa,EAAE,WAAW,EAAE,gBAAgB;IAC5C,kBAAkB,EAAE,4BAA4B;IAChD,WAAW,EAAE,qBAAqB,EAAE,qBAAqB;CAC1D,CAAC,CAAC;AAEH,aAAa;AAEb;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAA4B;IACnE,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,WAAW;IACX,IAAI,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC;IAExE,6BAA6B;IAC7B,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9C,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvC,OAAO,qBAAqB,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACvD,IAAI,aAAa,GAAG,aAAa,EAAE,CAAC;gBAClC,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACvD,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAC3D,CAAC;IACF,IAAI,iBAAiB,IAAI,YAAY,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtF,aAAa,GAAG,gBAAgB,CAAC;IACnC,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAChD,IAAI,YAAY,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC9E,aAAa,GAAG,6BAA6B,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAE5D,8BAA8B;IAC9B,IAAI,YAAY,KAAK,kBAAkB,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3F,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,sCAAsC;YAC5C,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,QAAQ,KAAK,CAAC,SAAS,sCAAsC;YACxE,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,eAAe;IACf,IAAI,YAAY,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,QAAQ,YAAY,YAAY,KAAK,CAAC,SAAS,SAAS,aAAa,EAAE;YAClF,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,eAAe;IACf,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAClF,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,QAAQ,KAAK,CAAC,SAAS,mCAAmC;YACrE,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,iBAAiB;IACjB,IAAI,iBAAiB,IAAI,CAAC,KAAK,CAAC,qBAAqB;QACnD,YAAY,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,kBAAkB;YAC7B,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,eAAe;IACf,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,YAAY,KAAK,kBAAkB,EAAE,CAAC;QAClE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,SAAS;YACpB,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,gBAAgB,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;YACtB,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,qBAAqB;YAChC,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3F,qBAAqB;QACrB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,oBAAoB;gBAC/B,eAAe,EAAE,cAAc;aAChC,CAAC,CAAC;QACL,CAAC;QACD,qBAAqB;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;IAEtC,OAAO;QACL,MAAM;QACN,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QACjI,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,UAAU;QACV,eAAe,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAChF,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QACxC,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAkC,EAClC,MAAuB;IAEvB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,kBAAkB,UAAU,CAAC,SAAS,EAAE;YACnD,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,cAAc;SAC9D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,MAAM,MAAM,iBAAiB;YACxC,eAAe,EAAE,cAAc;SAChC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAsB,EACtB,YAAoB,EACpB,SAAwB;IAExB,0BAA0B;IAC1B,IAAI,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,QAAQ,YAAY,qBAAqB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA4B;IACrE,MAAM,UAAU,GAAG,iBAAiB,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAClE,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,QAAQ,KAAK,CAAC,OAAO,EAAE;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,gBAAgB;QAChD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;QAC1C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,EAAE;QAChD,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,IAAI,KAAK;QAC/D,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QACxC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,KAAc;IAClE,UAAU;IACV,IAAI,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACtF,IAAI,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/E,IAAI,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACnG,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAE/E,OAAO;IACP,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,oBAAoB,CAAC;IACtD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,kBAAkB,CAAC;IACrD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC;IAEhD,OAAO;IACP,IAAI,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,aAAa,CAAC;IACrE,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC1D,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,6BAA6B,CAAC;IACvE,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACzD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACzE,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAE5E,KAAK;IACL,IAAI,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,mDAAmD,CAAC;IACxE,MAAM,QAAQ,GAAG,mBAAmB,CAAC;IACrC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,oBAAyC,EACzC,QAAkB;IAElB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvE,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;SACxD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AACvD,CAAC;AAED,cAAc;AAEd,MAAM,CAAC,MAAM,0BAA0B,GAA2B;IAChE,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,WAAW;IAC3B,cAAc,EAAE,qBAAqB;IACrC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,wBAAwB;IACxC,cAAc,EAAE,kBAAkB;IAClC,cAAc,EAAE,8BAA8B;CAC/C,CAAC"}

package/dist/gate/privacy/grants.d.ts

@@ -0,0 +1,116 @@
+/**
+ * Privacy Grants — 审计层模块。
+ *
+ * 职责边界：
+ * - 负责：getDefaultHandling 等 审计层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：发布门禁、质量检查
+ * 调用谁：logger、privacy_types、privacy_patterns
+ *
+ * 数据流：审计输入（代码/配置） → 检查 → 评分/报告
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+import type { SensitivityLabel, HandlingMode, CheckContext, DataAccessGrant, AllowedOperation } from "./types.js";
+/**
+ * 获取指定敏感标签的默认处理方式。
+ * @param label - 敏感标签
+ * @returns 处理方式
+ */
+export declare function getDefaultHandling(label: SensitivityLabel): HandlingMode;
+/**
+ * 获取指定敏感标签在特定上下文中的处理方式。
+ * @param label - 敏感标签
+ * @param context - 检查上下文
+ * @returns 处理方式
+ */
+export declare function getContextHandling(label: SensitivityLabel, context: CheckContext): HandlingMode;
+/**
+ * 判断数据是否可以注入 prompt。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export declare function canInjectInPrompt(label: SensitivityLabel): boolean;
+/**
+ * 判断数据是否可以存入任务上下文。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export declare function canStoreInTaskContext(label: SensitivityLabel): boolean;
+/**
+ * 判断数据是否可以存入产物。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export declare function canStoreInArtifact(label: SensitivityLabel): boolean;
+/**
+ * 判断数据是否可以外部发送。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export declare function canSendExternally(label: SensitivityLabel): boolean;
+/**
+ * 判断来源的内容是否可以读取。
+ * @param sourceRef - 来源引用路径
+ * @returns 读取许可结果
+ */
+export declare function canReadContent(sourceRef: string): {
+    allowed: boolean;
+    reason: string;
+    label: SensitivityLabel;
+    requires_confirmation?: boolean;
+};
+/**
+ * 判断来源是否禁止读取。
+ * @param sourceRef - 来源引用路径
+ * @returns 是否禁止
+ */
+export declare function isReadForbidden(sourceRef: string): boolean;
+/**
+ * 判断来源是否需要确认后才能读取。
+ * @param sourceRef - 来源引用路径
+ * @returns 是否需要确认
+ */
+export declare function isReadRequiresConfirmation(sourceRef: string): boolean;
+/**
+ * 创建数据访问授权。
+ * @param options.granted_by - 授权人
+ * @param options.scope_refs - 授权范围引用
+ * @param options.sensitivity_allowed - 允许的敏感标签
+ * @param options.allowed_operations - 允许的操作
+ * @param options.purpose - 用途
+ * @param options.duration_hours - 有效时长（小时）
+ * @returns 数据访问授权
+ */
+export declare function createDataAccessGrant(options: {
+    granted_by: string;
+    scope_refs: string[];
+    sensitivity_allowed: SensitivityLabel[];
+    allowed_operations: AllowedOperation[];
+    purpose: string;
+    duration_hours: number;
+}): DataAccessGrant;
+/**
+ * 判断授权是否有效。
+ * @param grant - 数据访问授权
+ * @returns 是否有效
+ */
+export declare function isGrantValid(grant: DataAccessGrant): boolean;
+/**
+ * 判断授权是否已过期。
+ * @param grant - 数据访问授权
+ * @returns 是否已过期
+ */
+export declare function isGrantExpired(grant: DataAccessGrant): boolean;
+/**
+ * 检查授权是否允许指定操作。
+ * @param grant - 数据访问授权
+ * @param operation - 请求的操作
+ * @param sensitivity - 敏感标签
+ * @returns 权限检查结果
+ */
+export declare function checkGrantPermission(grant: DataAccessGrant, operation: AllowedOperation, sensitivity: SensitivityLabel): {
+    allowed: boolean;
+    reason: string;
+};
+//# sourceMappingURL=grants.d.ts.map

package/dist/gate/privacy/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../../src/gate/privacy/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAUpB;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,YAAY,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,GAAG,YAAY,CAG/F;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAIlE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAItE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAInE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAGlE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAE,CAahJ;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrE;AAID;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;IACxC,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,eAAe,CAalB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAG5D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAG9D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,gBAAgB,EAC3B,WAAW,EAAE,gBAAgB,GAC5B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAgBtC"}

package/dist/gate/privacy/grants.js

@@ -0,0 +1,179 @@
+/**
+ * Privacy Grants — 审计层模块。
+ *
+ * 职责边界：
+ * - 负责：getDefaultHandling 等 审计层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：发布门禁、质量检查
+ * 调用谁：logger、privacy_types、privacy_patterns
+ *
+ * 数据流：审计输入（代码/配置） → 检查 → 评分/报告
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+import { debugLog } from "../../shared/logger.js";
+import { DEFAULT_HANDLING, CONTEXT_HANDLING, FORBIDDEN_READ_PATTERNS, CONFIRMATION_READ_PATTERNS, } from "./patterns.js";
+// ── 检查函数 ──
+/**
+ * 获取指定敏感标签的默认处理方式。
+ * @param label - 敏感标签
+ * @returns 处理方式
+ */
+export function getDefaultHandling(label) {
+    debugLog(`隐私契约: 获取默认处理方式 — ${label}`);
+    return DEFAULT_HANDLING[label];
+}
+/**
+ * 获取指定敏感标签在特定上下文中的处理方式。
+ * @param label - 敏感标签
+ * @param context - 检查上下文
+ * @returns 处理方式
+ */
+export function getContextHandling(label, context) {
+    debugLog(`隐私契约: 获取上下文处理方式 — ${label}/${context}`);
+    return CONTEXT_HANDLING[label][context];
+}
+/**
+ * 判断数据是否可以注入 prompt。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export function canInjectInPrompt(label) {
+    debugLog(`隐私契约: 检查 prompt 注入许可 — ${label}`);
+    const handling = CONTEXT_HANDLING[label].prompt_injection;
+    return handling === "allow";
+}
+/**
+ * 判断数据是否可以存入任务上下文。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export function canStoreInTaskContext(label) {
+    debugLog(`隐私契约: 检查 TaskContext 存储许可 — ${label}`);
+    const handling = CONTEXT_HANDLING[label].task_context_store;
+    return handling === "allow" || handling === "redact" || handling === "summarize_only";
+}
+/**
+ * 判断数据是否可以存入产物。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export function canStoreInArtifact(label) {
+    debugLog(`隐私契约: 检查 artifact 存储许可 — ${label}`);
+    const handling = CONTEXT_HANDLING[label].artifact_store;
+    return handling === "allow" || handling === "redact" || handling === "summarize_only";
+}
+/**
+ * 判断数据是否可以外部发送。
+ * @param label - 敏感标签
+ * @returns 是否允许
+ */
+export function canSendExternally(label) {
+    debugLog(`隐私契约: 检查外发许可 — ${label}`);
+    return CONTEXT_HANDLING[label].external_send === "allow";
+}
+/**
+ * 判断来源的内容是否可以读取。
+ * @param sourceRef - 来源引用路径
+ * @returns 读取许可结果
+ */
+export function canReadContent(sourceRef) {
+    debugLog(`隐私契约: 检查内容读取许可 — ${sourceRef}`);
+    for (const { pattern, label, reason } of FORBIDDEN_READ_PATTERNS) {
+        if (pattern.test(sourceRef)) {
+            return { allowed: false, reason, label, requires_confirmation: false };
+        }
+    }
+    for (const { pattern, label, reason } of CONFIRMATION_READ_PATTERNS) {
+        if (pattern.test(sourceRef)) {
+            return { allowed: false, reason, label, requires_confirmation: true };
+        }
+    }
+    return { allowed: true, reason: "", label: "public" };
+}
+/**
+ * 判断来源是否禁止读取。
+ * @param sourceRef - 来源引用路径
+ * @returns 是否禁止
+ */
+export function isReadForbidden(sourceRef) {
+    debugLog(`隐私契约: 检查是否禁止读取 — ${sourceRef}`);
+    return FORBIDDEN_READ_PATTERNS.some(({ pattern }) => pattern.test(sourceRef));
+}
+/**
+ * 判断来源是否需要确认后才能读取。
+ * @param sourceRef - 来源引用路径
+ * @returns 是否需要确认
+ */
+export function isReadRequiresConfirmation(sourceRef) {
+    debugLog(`隐私契约: 检查是否需要确认读取 — ${sourceRef}`);
+    return CONFIRMATION_READ_PATTERNS.some(({ pattern }) => pattern.test(sourceRef));
+}
+// ── 授权管理 ──
+/**
+ * 创建数据访问授权。
+ * @param options.granted_by - 授权人
+ * @param options.scope_refs - 授权范围引用
+ * @param options.sensitivity_allowed - 允许的敏感标签
+ * @param options.allowed_operations - 允许的操作
+ * @param options.purpose - 用途
+ * @param options.duration_hours - 有效时长（小时）
+ * @returns 数据访问授权
+ */
+export function createDataAccessGrant(options) {
+    debugLog(`隐私契约: 创建数据访问授权 — 授权人: ${options.granted_by}, 范围: ${options.scope_refs.length} 个引用`);
+    const expiresAt = new Date(Date.now() + options.duration_hours * 3600_000);
+    return {
+        grant_id: `grant-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+        granted_by: options.granted_by,
+        scope_refs: options.scope_refs,
+        sensitivity_allowed: options.sensitivity_allowed,
+        allowed_operations: options.allowed_operations,
+        purpose: options.purpose,
+        expires_at: expiresAt.toISOString(),
+        revocable: true,
+    };
+}
+/**
+ * 判断授权是否有效。
+ * @param grant - 数据访问授权
+ * @returns 是否有效
+ */
+export function isGrantValid(grant) {
+    debugLog(`隐私契约: 检查授权有效性 — ${grant.grant_id}`);
+    return new Date(grant.expires_at) > new Date();
+}
+/**
+ * 判断授权是否已过期。
+ * @param grant - 数据访问授权
+ * @returns 是否已过期
+ */
+export function isGrantExpired(grant) {
+    debugLog(`隐私契约: 检查授权是否过期 — ${grant.grant_id}`);
+    return new Date(grant.expires_at) <= new Date();
+}
+/**
+ * 检查授权是否允许指定操作。
+ * @param grant - 数据访问授权
+ * @param operation - 请求的操作
+ * @param sensitivity - 敏感标签
+ * @returns 权限检查结果
+ */
+export function checkGrantPermission(grant, operation, sensitivity) {
+    debugLog(`隐私契约: 检查授权权限 — ${grant.grant_id}, 操作: ${operation}, 等级: ${sensitivity}`);
+    if (isGrantExpired(grant)) {
+        debugLog(`隐私契约: 授权权限拒绝 — 授权已过期`);
+        return { allowed: false, reason: `授权 ${grant.grant_id} 已过期` };
+    }
+    if (!grant.allowed_operations.includes(operation)) {
+        debugLog(`隐私契约: 授权权限拒绝 — 不允许操作 ${operation}`);
+        return { allowed: false, reason: `授权 ${grant.grant_id} 不允许操作 ${operation}` };
+    }
+    if (!grant.sensitivity_allowed.includes(sensitivity)) {
+        debugLog(`隐私契约: 授权权限拒绝 — 不允许敏感等级 ${sensitivity}`);
+        return { allowed: false, reason: `授权 ${grant.grant_id} 不允许敏感等级 ${sensitivity}` };
+    }
+    debugLog(`隐私契约: 授权权限通过`);
+    return { allowed: true, reason: "" };
+}
+//# sourceMappingURL=grants.js.map