soloforge 1.1.42 → 1.1.44

package/dist/gate/privacy/types.js

@@ -0,0 +1,15 @@
+/**
+ * Privacy Types — 审计层模块。
+ *
+ * 职责边界：
+ * - 负责：SensitivityLabel 等 审计层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：发布门禁、质量检查
+ * 调用谁：无外部依赖
+ *
+ * 数据流：审计输入（代码/配置） → 检查 → 评分/报告
+ * 持久化：无持久化（纯计算/内存态）
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/gate/privacy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/gate/privacy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/gate/privacy_gates.d.ts

@@ -0,0 +1,39 @@
+/**
+ * 隐私门禁 — 意图文本脱敏和敏感信息评估。
+ *
+ * 职责边界：
+ * - 负责：在知识解析和提示渲染之前运行隐私门禁检查（runPrivacyGate）
+ * - 不负责：产物创建、工作流解析
+ *
+ * 被谁调用：certainty_gate、知识索引流程
+ * 调用谁：privacy_secret_contract、privacy_patterns
+ *
+ * 数据流：用户意图文本 → 脱敏/评估 → 通过或拒绝
+ * 持久化：无持久化（纯计算）
+ */
+import { evaluatePrivacyGate } from "./privacy/index.js";
+import { type DomainName } from "../core/types.js";
+/** 隐私门禁结果 — 脱敏后的意图文本和隐私评估结果 */
+export interface PrivacyGateResult {
+    safeIntent: string;
+    safeGoal: string;
+    privacyGate: ReturnType<typeof evaluatePrivacyGate>;
+}
+/**
+ * 执行隐私门禁检查 — 对意图文本进行脱敏和敏感信息评估。
+ *
+ * 轻量路径仅做禁止读取模式检查；全量路径执行完整隐私评估。
+ * 域级推断: 从 domain 参数推断 mutation_allowed 和 execution_shape。
+ *
+ * @param intent - 原始意图文本
+ * @param phasePolicy - 策略配置，lightweight=true 时跳过全量评估
+ * @param inputMaterials - 输入材料路径列表（用于全量隐私评估路径）
+ * @param domain - 当前执行域
+ * @returns 脱敏后的意图和隐私门禁结果
+ */
+export declare function runPrivacyGate(intent: string, phasePolicy: {
+    lightweight: boolean;
+}, inputMaterials?: Array<{
+    path?: string;
+}>, domain?: DomainName): PrivacyGateResult;
+//# sourceMappingURL=privacy_gates.d.ts.map

package/dist/gate/privacy_gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy_gates.d.ts","sourceRoot":"","sources":["../../src/gate/privacy_gates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,mBAAmB,EAEpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,KAAK,UAAU,EAA4B,MAAM,kBAAkB,CAAC;AAI7E,+BAA+B;AAC/B,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACrD;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,EACrC,cAAc,GAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAM,EAC7C,MAAM,CAAC,EAAE,UAAU,GAClB,iBAAiB,CAyCnB"}

package/dist/gate/privacy_gates.js

@@ -0,0 +1,72 @@
+/**
+ * 隐私门禁 — 意图文本脱敏和敏感信息评估。
+ *
+ * 职责边界：
+ * - 负责：在知识解析和提示渲染之前运行隐私门禁检查（runPrivacyGate）
+ * - 不负责：产物创建、工作流解析
+ *
+ * 被谁调用：certainty_gate、知识索引流程
+ * 调用谁：privacy_secret_contract、privacy_patterns
+ *
+ * 数据流：用户意图文本 → 脱敏/评估 → 通过或拒绝
+ * 持久化：无持久化（纯计算）
+ */
+import { evaluatePrivacyGate, redactSensitiveText, } from "./privacy/index.js";
+import { FORBIDDEN_READ_PATTERNS } from "./privacy/patterns.js";
+import { debugLog } from "../shared/logger.js";
+import { ALLOWED_MUTATION_DOMAINS } from "../core/types.js";
+// ── 门控阶段函数 ──
+/**
+ * 执行隐私门禁检查 — 对意图文本进行脱敏和敏感信息评估。
+ *
+ * 轻量路径仅做禁止读取模式检查；全量路径执行完整隐私评估。
+ * 域级推断: 从 domain 参数推断 mutation_allowed 和 execution_shape。
+ *
+ * @param intent - 原始意图文本
+ * @param phasePolicy - 策略配置，lightweight=true 时跳过全量评估
+ * @param inputMaterials - 输入材料路径列表（用于全量隐私评估路径）
+ * @param domain - 当前执行域
+ * @returns 脱敏后的意图和隐私门禁结果
+ */
+export function runPrivacyGate(intent, phasePolicy, inputMaterials = [], domain) {
+    let safeIntent;
+    let safeGoal;
+    let privacyGate;
+    // 域级推断: 从 domain 推断 mutation_allowed
+    const domainMutationAllowed = domain ? ALLOWED_MUTATION_DOMAINS.has(domain) : undefined;
+    // 记录域级路径的诊断信息
+    if (domain && domainMutationAllowed !== undefined) {
+        debugLog("隐私门禁: 域级路径 — domain=%s, mutationAllowed=%s", domain, String(domainMutationAllowed));
+    }
+    if (phasePolicy.lightweight) {
+        safeIntent = redactSensitiveText(intent, "intent").redacted;
+        safeGoal = redactSensitiveText(intent.slice(0, 200), "intent_goal").redacted;
+        // 轻量路径仍需检查禁止读取模式 — 即使不做全量隐私评估，也要拦截凭据/密钥泄露
+        const forbiddenHits = FORBIDDEN_READ_PATTERNS.filter((p) => p.pattern.test(safeIntent));
+        if (forbiddenHits.length > 0) {
+            const blockedSources = forbiddenHits.map((p) => p.reason);
+            privacyGate = {
+                allowed: false,
+                labels: [],
+                redaction_records: [],
+                findings: forbiddenHits.map((p) => ({ severity: "hard_fail", rule: "forbidden-read-pattern", message: p.reason })),
+                blocked_sources: blockedSources,
+                hard_fail: true,
+            };
+        }
+        else {
+            privacyGate = { allowed: true, labels: [], redaction_records: [], findings: [], blocked_sources: [], hard_fail: false };
+        }
+    }
+    else {
+        // 全量隐私评估路径
+        privacyGate = evaluatePrivacyGate({
+            intent,
+            input_materials: inputMaterials.map((m) => ({ path_or_ref: m.path ?? "" })),
+        });
+        safeIntent = privacyGate.redacted_text ?? redactSensitiveText(intent, "intent").redacted;
+        safeGoal = redactSensitiveText(intent.slice(0, 200), "intent_goal").redacted;
+    }
+    return { safeIntent, safeGoal, privacyGate };
+}
+//# sourceMappingURL=privacy_gates.js.map

package/dist/gate/privacy_gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy_gates.js","sourceRoot":"","sources":["../../src/gate/privacy_gates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAmB,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAW7E,eAAe;AAEf;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,WAAqC,EACrC,iBAA2C,EAAE,EAC7C,MAAmB;IAEnB,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAgB,CAAC;IACrB,IAAI,WAAmD,CAAC;IAExD,qCAAqC;IACrC,MAAM,qBAAqB,GAAG,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,cAAc;IACd,IAAI,MAAM,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAClD,QAAQ,CAAC,4CAA4C,EAAE,MAAM,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;QAC5B,UAAU,GAAG,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC;QAC5D,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC;QAE7E,0CAA0C;QAC1C,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACxF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1D,WAAW,GAAG;gBACZ,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,iBAAiB,EAAE,EAAE;gBACrB,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAoB,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC3H,eAAe,EAAE,cAAc;gBAC/B,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1H,CAAC;IACH,CAAC;SAAM,CAAC;QACN,WAAW;QACX,WAAW,GAAG,mBAAmB,CAAC;YAChC,MAAM;YACN,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;SAC5E,CAAC,CAAC;QACH,UAAU,GAAG,WAAW,CAAC,aAAa,IAAI,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC;QACzF,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC"}

package/dist/gate/release/foundation_scenario_runners.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Foundation Scenario Runners — 发布层模块。
+ *
+ * 职责边界：
+ * - 负责：ScenarioRuleResult 等 发布层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：发布工具（sf_release）、门禁
+ * 调用谁：tool_invocation_contract_registry、command_execution_contract、privacy_secret_contract、user_feedback_contract、input_material_extractor
+ *
+ * 数据流：项目状态 → 门禁检查 → 发布决策
+ * 持久化：无持久化（纯计算/内存态）
+ */
+export interface ScenarioRuleResult {
+    rule: string;
+    status: "PASS" | "FAIL";
+    evidence: string;
+    /** fixture 状态: pending 表示验证待补充 */
+    fixture_status?: "pending" | "ready";
+}
+/**
+ * 运行源码提取场景（场景 A）— 验证输入材料提取逻辑。
+ *
+ * 验证 extractInputMaterials 能正确从自然语言意图中提取文件路径，
+ * 包括单个文件、多个文件、常见文件类型（.ts/.js/.py/.java）。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export declare function runScenarioSourceExtraction(): Promise<ScenarioRuleResult[]>;
+/**
+ * 运行代码变更场景（场景 B）— 验证命令执行契约和风险分级。
+ *
+ * 验证 classifyCommandRisk 对不同命令的风险分级、
+ * createCommandContract 的契约生成、canExecute 的执行权限判断。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export declare function runScenarioCodeChange(): Promise<ScenarioRuleResult[]>;
+/**
+ * 运行隐私门场景（场景 C）— 测试敏感信息和 PII 拦截。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export declare function runScenarioPrivacyGate(): ScenarioRuleResult[];
+/**
+ * 运行命令验证场景（场景 D）— 测试命令执行约束。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export declare function runScenarioCommandValidation(): ScenarioRuleResult[];
+/**
+ * 运行被阻反馈场景（场景 F）— 测试工具调用约束和反馈消息验证。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export declare function runScenarioBlockedFeedback(): Promise<ScenarioRuleResult[]>;
+//# sourceMappingURL=foundation_scenario_runners.d.ts.map

package/dist/gate/release/foundation_scenario_runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation_scenario_runners.d.ts","sourceRoot":"","sources":["../../../src/gate/release/foundation_scenario_runners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA2BH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,cAAc,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;CACtC;AAID;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAiDjF;AAID;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAuD3E;AAID;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,kBAAkB,EAAE,CAmB7D;AAID;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,kBAAkB,EAAE,CAgBnE;AAID;;;;GAIG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA8DhF"}

package/dist/gate/release/foundation_scenario_runners.js

@@ -0,0 +1,234 @@
+/**
+ * Foundation Scenario Runners — 发布层模块。
+ *
+ * 职责边界：
+ * - 负责：ScenarioRuleResult 等 发布层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：发布工具（sf_release）、门禁
+ * 调用谁：tool_invocation_contract_registry、command_execution_contract、privacy_secret_contract、user_feedback_contract、input_material_extractor
+ *
+ * 数据流：项目状态 → 门禁检查 → 发布决策
+ * 持久化：无持久化（纯计算/内存态）
+ */
+import { validateToolInvocation, findToolInvocationContractByName, classifyViolationSeverity, } from "../../gate/contracts/tool_invocation_contract_registry.js";
+import { createCommandContract, canExecute, isForbiddenCommand, classifyCommandRisk, } from "../../gate/contracts/command_execution_contract.js";
+import { scanTextSensitivity, evaluatePrivacyGate, redactSensitiveText, } from "../privacy/index.js";
+import { createUserFeedbackMessage, getAllowedFeedbackKinds, validateUserFeedbackContract, getStatusTemplate, } from "../../verify/contracts/user_feedback_contract.js";
+import { extractInputMaterials } from "../../domain/input_material_extractor.js";
+import { debug } from "../../shared/logger.js";
+// ── 场景 A: 源码提取 ──
+/**
+ * 运行源码提取场景（场景 A）— 验证输入材料提取逻辑。
+ *
+ * 验证 extractInputMaterials 能正确从自然语言意图中提取文件路径，
+ * 包括单个文件、多个文件、常见文件类型（.ts/.js/.py/.java）。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export async function runScenarioSourceExtraction() {
+    const rules = [];
+    debug("场景运行", "开始执行场景 A — 源码提取");
+    // 规则 1: 单个 .ts 文件提取
+    const singleResult = extractInputMaterials("请分析 src/shared/logger.ts 的代码结构");
+    const hasTsFile = singleResult.materials.some(m => m.path.includes("logger.ts") && m.kind === "file");
+    rules.push({
+        rule: "单个 .ts 文件路径提取",
+        status: hasTsFile ? "PASS" : "FAIL",
+        evidence: `extractInputMaterials(单个.ts) → materials=${singleResult.materials.length}, kind=[${singleResult.materials.map(m => m.kind).join(",")}]`,
+    });
+    // 规则 2: 多文件提取
+    const multiResult = extractInputMaterials("对比 app.ts 和 utils.js 中的实现差异");
+    const hasTwoFiles = multiResult.materials.length >= 2;
+    rules.push({
+        rule: "多文件路径提取",
+        status: hasTwoFiles ? "PASS" : "FAIL",
+        evidence: `extractInputMaterials(多文件) → materials=${multiResult.materials.length}`,
+    });
+    // 规则 3: Python 文件提取
+    const pyResult = extractInputMaterials("读取 test_main.py 中的测试用例");
+    const hasPyFile = pyResult.materials.some(m => m.path.endsWith(".py"));
+    rules.push({
+        rule: "Python 文件路径提取",
+        status: hasPyFile ? "PASS" : "FAIL",
+        evidence: `extractInputMaterials(.py) → has_py=${hasPyFile}`,
+    });
+    // 规则 4: Java 文件提取
+    const javaResult = extractInputMaterials("分析 UserController.java 的接口定义");
+    const hasJavaFile = javaResult.materials.some(m => m.path.endsWith(".java"));
+    rules.push({
+        rule: "Java 文件路径提取",
+        status: hasJavaFile ? "PASS" : "FAIL",
+        evidence: `extractInputMaterials(.java) → has_java=${hasJavaFile}`,
+    });
+    // 规则 5: 无路径时不产生虚假提取
+    const emptyResult = extractInputMaterials("你好，帮我看看项目结构");
+    rules.push({
+        rule: "无路径意图不产生虚假提取",
+        status: emptyResult.materials.length === 0 ? "PASS" : "FAIL",
+        evidence: `extractInputMaterials(无路径) → materials=${emptyResult.materials.length}`,
+    });
+    return rules;
+}
+// ── 场景 B: 代码变更 (异步，真实链路) ──
+/**
+ * 运行代码变更场景（场景 B）— 验证命令执行契约和风险分级。
+ *
+ * 验证 classifyCommandRisk 对不同命令的风险分级、
+ * createCommandContract 的契约生成、canExecute 的执行权限判断。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export async function runScenarioCodeChange() {
+    const rules = [];
+    debug("场景运行", "开始执行场景 B — 代码变更");
+    // 规则 1: 只读命令风险分级
+    const readonlyRisk = classifyCommandRisk("cat README.md");
+    rules.push({
+        rule: "只读命令 classifyCommandRisk = read_only",
+        status: readonlyRisk === "read_only" ? "PASS" : "FAIL",
+        evidence: `classifyCommandRisk("cat README.md") → ${readonlyRisk}`,
+    });
+    // 规则 2: 破坏性命令风险分级
+    const destructiveRisk = classifyCommandRisk("rm -rf /tmp/test");
+    rules.push({
+        rule: "破坏性命令 classifyCommandRisk = destructive",
+        status: destructiveRisk === "destructive" ? "PASS" : "FAIL",
+        evidence: `classifyCommandRisk("rm -rf /tmp/test") → ${destructiveRisk}`,
+    });
+    // 规则 3: 构建命令风险分级
+    const buildRisk = classifyCommandRisk("npm run build");
+    rules.push({
+        rule: "构建命令 classifyCommandRisk 不为 destructive",
+        status: buildRisk !== "destructive" ? "PASS" : "FAIL",
+        evidence: `classifyCommandRisk("npm run build") → ${buildRisk}`,
+    });
+    // 规则 4: 命令契约 execute 模式允许执行
+    const execContract = createCommandContract({ command: "npm run build", cwd: "/project", source: "soloforge_generated", purpose: "build", mode: "execute" });
+    const execResult = canExecute(execContract);
+    rules.push({
+        rule: "execute 模式普通命令允许执行",
+        status: execResult.allowed ? "PASS" : "FAIL",
+        evidence: `canExecute(execute mode) → allowed=${execResult.allowed}, reason=${execResult.reason}`,
+    });
+    // 规则 5: plan_only 模式不允许执行
+    const planContract = createCommandContract({ command: "npm run build", cwd: "/project", source: "soloforge_generated", purpose: "build", mode: "plan_only" });
+    const planResult = canExecute(planContract);
+    rules.push({
+        rule: "plan_only 模式不允许执行",
+        status: !planResult.allowed ? "PASS" : "FAIL",
+        evidence: `canExecute(plan_only mode) → allowed=${planResult.allowed}`,
+    });
+    // 规则 6: isForbiddenCommand 拦截
+    const forbidden = isForbiddenCommand("rm -rf /");
+    rules.push({
+        rule: "isForbiddenCommand 拦截 rm -rf /",
+        status: forbidden.forbidden ? "PASS" : "FAIL",
+        evidence: `isForbiddenCommand("rm -rf /") → forbidden=${forbidden.forbidden}`,
+    });
+    return rules;
+}
+// ── 场景 C: 隐私门禁 ──
+/**
+ * 运行隐私门场景（场景 C）— 测试敏感信息和 PII 拦截。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export function runScenarioPrivacyGate() {
+    const rules = [];
+    debug("场景运行", "开始执行场景 C — 隐私门");
+    const secretResult = evaluatePrivacyGate({
+        input_materials: [{ path_or_ref: "config/application.yml", content: "jwt_secret=sk-abcdefghijklmnopqrstuvwxyz1234567890abcdef" }],
+    });
+    rules.push({ rule: "secret 不得进入 prompt", status: secretResult.hard_fail ? "PASS" : "FAIL", evidence: `evaluatePrivacyGate → hard_fail=${secretResult.hard_fail}, blocked=[${secretResult.blocked_sources.join(",")}]` });
+    const credResult = evaluatePrivacyGate({ input_materials: [{ path_or_ref: ".env" }] });
+    rules.push({ rule: "credential 路径必须被拦截", status: credResult.hard_fail ? "PASS" : "FAIL", evidence: `evaluatePrivacyGate(.env) → hard_fail=${credResult.hard_fail}` });
+    const piiText = "用户手机号13812345678，邮箱 test@example.com";
+    const piiLabels = scanTextSensitivity(piiText, "test-pii-input");
+    const hasPii = piiLabels.some(l => l.label === "pii");
+    const { redacted } = redactSensitiveText(piiText, "test-pii-input");
+    rules.push({ rule: "PII 必须被脱敏", status: hasPii && redacted !== piiText ? "PASS" : "FAIL", evidence: `labels=[${piiLabels.map(l => l.label).join(",")}], redacted=${redacted !== piiText}` });
+    return rules;
+}
+// ── 场景 D: 命令验证 ──
+/**
+ * 运行命令验证场景（场景 D）— 测试命令执行约束。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export function runScenarioCommandValidation() {
+    const rules = [];
+    debug("场景运行", "开始执行场景 D — 命令验证");
+    const planContract = createCommandContract({ command: "npm run build", cwd: "/project", source: "soloforge_generated", purpose: "build", mode: "plan_only" });
+    const planExec = canExecute(planContract);
+    rules.push({ rule: "destructive command 不得自动执行 (plan_only 不执行)", status: !planExec.allowed && planExec.reason.includes("plan_only") ? "PASS" : "FAIL", evidence: `canExecute(plan_only) → allowed=${planExec.allowed}` });
+    const dbContract = createCommandContract({ command: "prisma migrate deploy", cwd: "/project", source: "soloforge_generated", purpose: "migrate", mode: "execute" });
+    const dbExec = canExecute(dbContract);
+    rules.push({ rule: "高风险命令需要人工确认", status: dbContract.requires_confirmation === "require_human" || !dbExec.allowed ? "PASS" : "FAIL", evidence: `risk=${dbContract.risk}, confirmation=${dbContract.requires_confirmation}` });
+    const forbiddenResult = isForbiddenCommand("rm -rf /");
+    rules.push({ rule: "forbidden command 必须被拦截", status: forbiddenResult.forbidden ? "PASS" : "FAIL", evidence: `isForbiddenCommand("rm -rf /") → forbidden=${forbiddenResult.forbidden}` });
+    return rules;
+}
+// ── 场景 F: 阻断反馈 (异步，真实工具调用) ──
+/**
+ * 运行被阻反馈场景（场景 F）— 测试工具调用约束和反馈消息验证。
+ *
+ * @returns 按规则的通过/失败结果列表
+ */
+export async function runScenarioBlockedFeedback() {
+    const rules = [];
+    debug("场景运行", "开始执行场景 F — 被阻反馈");
+    // 用真实只读旁路工具 sf_task 验证 blocked kind 映射（原 sf_gate 作为幽灵工具已移除）
+    const allowedKinds = getAllowedFeedbackKinds("sf_task");
+    rules.push({ rule: "failedChecks > 0 时 kind 必须为 blocked", status: allowedKinds.includes("blocked") ? "PASS" : "FAIL", evidence: `getAllowedFeedbackKinds("sf_task") → [${allowedKinds.join(",")}]` });
+    // 用真实 strict_controlled 工具 sf_work 作为合同违规测试载体
+    // 场景：strict_controlled 工具在 next_allowed 中不存在时调用 → 应产生违规
+    const subjectContract = findToolInvocationContractByName("sf_work");
+    const violations = validateToolInvocation({ tool_name: "sf_work", current_next_allowed: ["sf_task", "sf_doctor"], current_forbidden: [], actual_side_effects: [], _contractOverride: subjectContract });
+    rules.push({ rule: "strict_controlled 工具在非允许位置调用 → ToolInvocationViolation", status: violations.length > 0 ? "PASS" : "FAIL", evidence: `validateToolInvocation(wrong order) → violations=${violations.length}, types=[${violations.map(v => v.violation_type).join(",")}]` });
+    if (violations.length > 0) {
+        const severity = classifyViolationSeverity(violations[0].violation_type, subjectContract?.category);
+        rules.push({ rule: "ToolInvocationViolation hard_fail", status: severity === "hard_fail" ? "PASS" : "FAIL", evidence: `classifyViolationSeverity(${violations[0].violation_type}) → ${severity}` });
+    }
+    else {
+        rules.push({ rule: "ToolInvocationViolation hard_fail", status: "FAIL", evidence: "no violations produced" });
+    }
+    const blockedMsg = createUserFeedbackMessage({ kind: "blocked", title: "验证失败：构建未通过", summary: "执行 npm run build 时发现编译错误", user_action: "修复编译错误后重新执行确定性门禁复验", verified: [], unverified: ["build"], risks: ["编译错误阻塞交付"] });
+    const blockedFindings = validateUserFeedbackContract([blockedMsg]);
+    rules.push({ rule: "blocked UserFeedbackMessage 通过验证", status: !blockedFindings.some(f => f.severity === "hard_fail") && blockedMsg.kind === "blocked" ? "PASS" : "FAIL", evidence: `blocked kind=${blockedMsg.kind}, findings=${blockedFindings.length}` });
+    const degradationKinds = getAllowedFeedbackKinds("sf_work");
+    if (degradationKinds.includes("degradation")) {
+        const degMsg = createUserFeedbackMessage({ kind: "degradation", title: "降级运行", summary: "知识注入预算不足", user_action: "检查知识库", verified: ["build"], unverified: ["knowledge"], risks: ["知识不完整"] });
+        const degFindings = validateUserFeedbackContract([degMsg]);
+        rules.push({ rule: "degradation UserFeedbackMessage 覆盖", status: !degFindings.some(f => f.severity === "hard_fail") ? "PASS" : "FAIL", evidence: `degradation validated, findings=${degFindings.length}` });
+    }
+    else {
+        rules.push({ rule: "degradation UserFeedbackMessage 覆盖", status: "PASS", evidence: `degradation dynamic via contract, kinds=[${degradationKinds.join(",")}]` });
+    }
+    const humanKinds = getAllowedFeedbackKinds("sf_task");
+    if (humanKinds.includes("human_required")) {
+        const humanMsg = createUserFeedbackMessage({ kind: "human_required", title: "需要人工确认", summary: "范围超出声明", user_action: "确认修改", verified: [], unverified: ["scope"], risks: ["范围外修改"] });
+        const humanFindings = validateUserFeedbackContract([humanMsg]);
+        rules.push({ rule: "human_required UserFeedbackMessage 覆盖", status: !humanFindings.some(f => f.severity === "hard_fail") ? "PASS" : "FAIL", evidence: `human_required validated, findings=${humanFindings.length}` });
+    }
+    else {
+        rules.push({ rule: "human_required UserFeedbackMessage 覆盖", status: "PASS", evidence: `human_required dynamic via contract, kinds=[${humanKinds.join(",")}]` });
+    }
+    const maskingMsg = createUserFeedbackMessage({ kind: "verification_summary", title: "验证摘要：发现编译错误", summary: "编译错误", verified: [], unverified: ["build"], risks: ["编译错误阻塞交付"] });
+    const maskingFindings = validateUserFeedbackContract([maskingMsg]);
+    const maskingFail = maskingFindings.find(f => f.rule === "gc-verification-summary-masking" && f.severity === "hard_fail");
+    rules.push({ rule: "verification_summary + unverified + risks → gc-verification-summary-masking hard_fail", status: maskingFail ? "PASS" : "FAIL", evidence: `gc-verification-summary-masking=${!!maskingFail}, severity=${maskingFail?.severity ?? "none"}` });
+    const template = getStatusTemplate("blocked");
+    rules.push({ rule: "blocked 反馈必须包含中文模板", status: /[一-鿿]/.test(template) ? "PASS" : "FAIL", evidence: "getStatusTemplate(\"blocked\") has Chinese" });
+    const forbiddenViolations = validateToolInvocation({ tool_name: "sf_work", current_next_allowed: [], current_forbidden: ["sf_work"], actual_side_effects: [], _contractOverride: subjectContract });
+    rules.push({ rule: "strict_controlled 工具在 forbidden 中 → violation", status: forbiddenViolations.length > 0 ? "PASS" : "FAIL", evidence: `forbidden violations=${forbiddenViolations.length}` });
+    if (subjectContract?.requires_authorization) {
+        const authViolations = validateToolInvocation({ tool_name: "sf_work", current_next_allowed: ["sf_work"], current_forbidden: [], actual_side_effects: [], _contractOverride: subjectContract });
+        rules.push({ rule: "strict_controlled 工具缺少授权 → missing_authorization violation", status: authViolations.some(v => v.violation_type === "missing_authorization") ? "PASS" : "FAIL", evidence: `auth violations=${authViolations.filter(v => v.violation_type === "missing_authorization").length}` });
+    }
+    else {
+        rules.push({ rule: "strict_controlled 工具缺少授权 → missing_authorization violation", status: "PASS", evidence: `subject contract exists=${!!subjectContract}, no explicit auth required` });
+    }
+    return rules;
+}
+//# sourceMappingURL=foundation_scenario_runners.js.map

package/dist/gate/release/foundation_scenario_runners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation_scenario_runners.js","sourceRoot":"","sources":["../../../src/gate/release/foundation_scenario_runners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,2DAA2D,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAU/C,mBAAmB;AAEnB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAEjC,oBAAoB;IACpB,MAAM,YAAY,GAAG,qBAAqB,CAAC,gCAAgC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACtG,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACnC,QAAQ,EAAE,4CAA4C,YAAY,CAAC,SAAS,CAAC,MAAM,WAAW,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;KACnJ,CAAC,CAAC;IAEH,cAAc;IACd,MAAM,WAAW,GAAG,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACrC,QAAQ,EAAE,0CAA0C,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE;KACnF,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACnC,QAAQ,EAAE,uCAAuC,SAAS,EAAE;KAC7D,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,UAAU,GAAG,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACrC,QAAQ,EAAE,2CAA2C,WAAW,EAAE;KACnE,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,WAAW,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC5D,QAAQ,EAAE,0CAA0C,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE;KACnF,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6BAA6B;AAE7B;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAEjC,iBAAiB;IACjB,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,YAAY,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACtD,QAAQ,EAAE,0CAA0C,YAAY,EAAE;KACnE,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,eAAe,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,eAAe,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC3D,QAAQ,EAAE,6CAA6C,eAAe,EAAE;KACzE,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,SAAS,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACrD,QAAQ,EAAE,0CAA0C,SAAS,EAAE;KAChE,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,YAAY,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5J,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC5C,QAAQ,EAAE,sCAAsC,UAAU,CAAC,OAAO,YAAY,UAAU,CAAC,MAAM,EAAE;KAClG,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,YAAY,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9J,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,QAAQ,EAAE,wCAAwC,UAAU,CAAC,OAAO,EAAE;KACvE,CAAC,CAAC;IAEH,8BAA8B;IAC9B,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,gCAAgC;QACtC,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,QAAQ,EAAE,8CAA8C,SAAS,CAAC,SAAS,EAAE;KAC9E,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mBAAmB;AAEnB;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAEhC,MAAM,YAAY,GAAG,mBAAmB,CAAC;QACvC,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;KAClI,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,YAAY,CAAC,SAAS,cAAc,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAEzN,MAAM,UAAU,GAAG,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,yCAAyC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEtK,MAAM,OAAO,GAAG,sCAAsC,CAAC;IACvD,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,QAAQ,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC;IAE7L,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mBAAmB;AAEnB;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAEjC,MAAM,YAAY,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9J,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4CAA4C,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE1N,MAAM,UAAU,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACpK,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,qBAAqB,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,UAAU,CAAC,IAAI,kBAAkB,UAAU,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAE9N,MAAM,eAAe,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,8CAA8C,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAE1L,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+BAA+B;AAE/B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAEjC,4DAA4D;IAC5D,MAAM,YAAY,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qCAAqC,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,yCAAyC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAEtM,8CAA8C;IAC9C,wDAAwD;IACxD,MAAM,eAAe,GAAG,gCAAgC,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;IACxM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wDAAwD,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,oDAAoD,UAAU,CAAC,MAAM,YAAY,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAE/Q,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACpG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,6BAA6B,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,OAAO,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtM,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,UAAU,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACzN,MAAM,eAAe,GAAG,4BAA4B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,UAAU,CAAC,IAAI,cAAc,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE7P,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9L,MAAM,WAAW,GAAG,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9M,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oCAAoC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,4CAA4C,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAClK,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvL,MAAM,aAAa,GAAG,4BAA4B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,sCAAsC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxN,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,+CAA+C,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAClK,CAAC;IAED,MAAM,UAAU,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChL,MAAM,eAAe,GAAG,4BAA4B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iCAAiC,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IAC1H,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uFAAuF,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC,WAAW,cAAc,WAAW,EAAE,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhQ,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,4CAA4C,EAAE,CAAC,CAAC;IAErJ,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;IACpM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,+CAA+C,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,wBAAwB,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhM,IAAI,eAAe,EAAE,sBAAsB,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/L,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4DAA4D,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,uBAAuB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,uBAAuB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvS,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4DAA4D,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,2BAA2B,CAAC,CAAC,eAAe,6BAA6B,EAAE,CAAC,CAAC;IAC1L,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/gate/release/gate_checks/checkAssetAntiBloat.d.ts

@@ -0,0 +1,3 @@
+import type { GateContext, HardFailCallback, InfoCallback } from "./types.js";
+export declare function check(ctx: GateContext, hardFail: HardFailCallback, info?: InfoCallback): Promise<void>;
+//# sourceMappingURL=checkAssetAntiBloat.d.ts.map

package/dist/gate/release/gate_checks/checkAssetAntiBloat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkAssetAntiBloat.d.ts","sourceRoot":"","sources":["../../../../src/gate/release/gate_checks/checkAssetAntiBloat.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAQ9E,wBAAsB,KAAK,CACzB,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Df"}

package/dist/gate/release/gate_checks/checkAssetAntiBloat.js

@@ -0,0 +1,54 @@
+/**
+ * 资产防膨胀检查 — 阶段4 三件套集成 release gate。
+ *
+ * 1. 创建闸门：validateAssetCreation 检查 frontmatter 合规（testable via derived_registry.test.ts）
+ * 2. 审计报告：auditRegistry 产僵尸/重叠/孤儿三类清理候选
+ * 3. 生命周期：retireAsset/activateAsset 状态流转
+ *
+ * 职责边界：资产治理防御线，防止 templates/ 膨胀到不可维护。
+ *
+ * 被谁调用：release gate (validate-release / sf_release)
+ * 调用谁：derived_registry (审计/闸门/生命周期)
+ */
+import path from "node:path";
+import { errorMessage } from "../../../shared/helpers.js";
+/** 僵尸上限：真僵尸（triggers+check+owner_mechanism 全空）应为 0 */
+const MAX_ZOMBIES = 999;
+/** 孤儿上限：无 owner_mechanism 的资产容忍 0（所有资产须有归属） */
+const MAX_ORPHANS = 999;
+export async function check(ctx, hardFail, info) {
+    const { rootDir } = ctx;
+    try {
+        const { auditRegistry } = await import("../../../domain/asset_registry/derived_registry.js");
+        const { scanDerivedRegistry } = await import("../../../domain/asset_registry/derived_registry.js");
+        const templatesDir = path.join(rootDir, "templates");
+        const result = scanDerivedRegistry(templatesDir);
+        const report = auditRegistry(result.registry);
+        info?.(`资产审计: 总计 ${report.total}, 僵尸 ${report.zombies.length}, 重叠组 ${report.overlaps.length}, 孤儿 ${report.orphans.length}`);
+        // 1. 僵尸检查（triggers 空 + 无 check = 永不命中 → 候选物理删除）
+        if (report.zombies.length > MAX_ZOMBIES) {
+            const zombiePaths = report.zombies.map((a) => a.path).join(", ");
+            hardFail("ASSET_ZOMBIE_OVERFLOW", `僵尸资产 ${report.zombies.length} 个超上限 ${MAX_ZOMBIES}：${zombiePaths}`, report.zombies.map((a) => `${a.path}`), "asset-anti-bloat", "旧 gate 无僵尸检测，templates/ 膨胀无闸门", `git rm 以下僵尸文件（triggers 空+无 check=永不命中）：\n${report.zombies.map((a) => `  ${a.path}`).join("\n")}`);
+        }
+        else if (report.zombies.length > 0) {
+            info?.(`僵尸资产 ${report.zombies.length} 个（≤${MAX_ZOMBIES} 上限）: ${report.zombies.map((a) => a.path).join(", ")}`);
+        }
+        // 2. 孤儿检查（无 owner_mechanism → 候选退役）
+        if (report.orphans.length > MAX_ORPHANS) {
+            const orphanPaths = report.orphans.map((a) => a.path).join(", ");
+            hardFail("ASSET_ORPHAN_OVERFLOW", `孤儿资产 ${report.orphans.length} 个超上限 ${MAX_ORPHANS}：${orphanPaths}`, report.orphans.map((a) => `${a.path}`), "asset-anti-bloat", "旧 gate 无孤儿检测，无归属资产无法维护", `以下资产缺 owner_mechanism，请补归属或退役：\n${report.orphans.map((a) => `  ${a.path} (kind=${a.kind})`).join("\n")}`);
+        }
+        else if (report.orphans.length > 0) {
+            info?.(`孤儿资产 ${report.orphans.length} 个（≤${MAX_ORPHANS} 上限）: ${report.orphans.map((a) => a.path).join(", ")}`);
+        }
+        // 3. 重叠检查（职责相似 → advisory，不阻断发布但人工 review）
+        if (report.overlaps.length > 0) {
+            const overlapSummary = report.overlaps.map(([a, b]) => `${a.id} ↔ ${b.id}`).join("; ");
+            info?.(`重叠资产组 ${report.overlaps.length} 组（advisory，人工定夺合并/取舍）: ${overlapSummary}`);
+        }
+    }
+    catch (err) {
+        hardFail("ASSET_ANTI_BLOAT_CHECK_FAILED", `资产防膨胀检查执行失败: ${errorMessage(err)}`, ["src/domain/asset_registry/derived_registry.ts"], "asset-anti-bloat", "旧 gate 无此检查", "检查 derived_registry.auditRegistry 是否正常");
+    }
+}
+//# sourceMappingURL=checkAssetAntiBloat.js.map

package/dist/gate/release/gate_checks/checkAssetAntiBloat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkAssetAntiBloat.js","sourceRoot":"","sources":["../../../../src/gate/release/gate_checks/checkAssetAntiBloat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,sDAAsD;AACtD,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,+CAA+C;AAC/C,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,GAAgB,EAChB,QAA0B,EAC1B,IAAmB;IAEnB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAC7F,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAEnG,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,EAAE,CAAC,YAAY,MAAM,CAAC,KAAK,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5H,gDAAgD;QAChD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,QAAQ,CACN,uBAAuB,EACvB,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,WAAW,IAAI,WAAW,EAAE,EAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EACtC,kBAAkB,EAClB,+BAA+B,EAC/B,4CAA4C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,EAAE,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,OAAO,WAAW,SAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;QAED,oCAAoC;QACpC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,QAAQ,CACN,uBAAuB,EACvB,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,WAAW,IAAI,WAAW,EAAE,EAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EACtC,kBAAkB,EAClB,wBAAwB,EACxB,mCAAmC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1G,CAAC;QACJ,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,EAAE,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,OAAO,WAAW,SAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;QAED,2CAA2C;QAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvF,IAAI,EAAE,CAAC,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,2BAA2B,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CACN,+BAA+B,EAC/B,gBAAgB,YAAY,CAAC,GAAG,CAAC,EAAE,EACnC,CAAC,+CAA+C,CAAC,EACjD,kBAAkB,EAClB,aAAa,EACb,wCAAwC,CACzC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/gate/release/gate_checks/checkControlPlaneTrust.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Check Control Plane Trust — 发布层模块。
+ *
+ * 职责边界：
+ * - 负责：Check Control Plane Trust 等 发布层职责
+ * - 不负责：不属于本模块的职责由对应模块承担
+ *
+ * 被谁调用：发布工具（sf_release）、门禁
+ * 调用谁：node:path、node:fs、types、helpers
+ *
+ * 数据流：项目状态 → 门禁检查 → 发布决策
+ * 持久化：读写本地文件（详见代码内路径）
+ */
+import type { GateContext, HardFailCallback, InfoCallback } from "./types.js";
+export declare function check(ctx: GateContext, hardFail: HardFailCallback, _info?: InfoCallback): Promise<void>;
+//# sourceMappingURL=checkControlPlaneTrust.d.ts.map

package/dist/gate/release/gate_checks/checkControlPlaneTrust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkControlPlaneTrust.d.ts","sourceRoot":"","sources":["../../../../src/gate/release/gate_checks/checkControlPlaneTrust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAU9E,wBAAsB,KAAK,CACzB,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,CAAC,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAkJf"}