soloforge 1.1.48 → 1.1.49

package/templates/verify//345/256/241/346/237/245/346/270/205/345/215/225.md

@@ -35,6 +35,8 @@ extra:
 > 合并旧的十几个审查碎拆（SOLID/性能/并发/错误处理/数据隐私/可维护性等）。
 > verify-gate 的 SEC/PER/CON/API 是确定性正则门禁；本清单是审查者的维度指引。
 > 注入到代码审查报告（review_report）产出时。
+>
+> **对抗审查独立于此**：verify 后 `sf_work action=adversarial_review` 做 K=3 次独立采样取交集（每轮独立 session 不互参、取多数复现），findings 留痕不阻断（不追求"零 error 收敛"）。本清单是单次审查维度，对抗审查是多次独立交叉验证。
 
 ## 审查维度（每类都要过一遍）
 
@@ -57,7 +59,7 @@ extra:
 ### 架构（对应 ARC-*）
 - 分层依赖、循环依赖、单一职责、Controller 不含业务逻辑
 
-### 接口契约（对应 API-01~10）
+### 接口契约（对应 API-03/04/06/07/08/09）
 - DTO 不暴露 Entity、写操作事务、权限注解、参数校验、RESTful、统一响应、分页、版本号、文档
 
 ### 可维护性（AI 盲区，重点人工复核）

package/dist/gate/executors/executors_openapi_sync.d.ts

@@ -1,23 +0,0 @@
-/**
- * openapi_sync_check 执行器 — 比对 openapi.yaml 与详细设计文档的接口一致性。
- *
- * 职责边界：
- * - 负责：解析 openapi.yaml 和详细设计文档，比对路径/方法/参数/返回值
- * - 不负责：文档质量评估（语义层面的完整性由 AI 判断）
- *
- * 被谁调用：gate_engine evaluateCheck → gateExecutors.get("openapi_sync_check")
- * 调用谁：fs（读取文件）、yaml 解析（解析 openapi.yaml）
- *
- * 数据流：openapi.yaml + 详细设计文档 → 结构化比对 → 一致/不一致
- * 持久化：无
- */
-import type { GateExecutorFn } from "../gate_executors.js";
-/**
- * openapi_sync_check 执行器入口。
- *
- * 比对 openapi.yaml 与详细设计文档，检查：
- * 1. 设计文档引用的 endpoint 在 openapi.yaml 中存在
- * 2. 方法一致（GET/POST/PUT/DELETE 等）
- */
-export declare const executeOpenApiSyncCheck: GateExecutorFn;
-//# sourceMappingURL=executors_openapi_sync.d.ts.map

package/dist/gate/executors/executors_openapi_sync.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"executors_openapi_sync.d.ts","sourceRoot":"","sources":["../../../src/gate/executors/executors_openapi_sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAsE3D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,cA+ErC,CAAC"}

package/dist/gate/executors/executors_openapi_sync.js

@@ -1,145 +0,0 @@
-/**
- * openapi_sync_check 执行器 — 比对 openapi.yaml 与详细设计文档的接口一致性。
- *
- * 职责边界：
- * - 负责：解析 openapi.yaml 和详细设计文档，比对路径/方法/参数/返回值
- * - 不负责：文档质量评估（语义层面的完整性由 AI 判断）
- *
- * 被谁调用：gate_engine evaluateCheck → gateExecutors.get("openapi_sync_check")
- * 调用谁：fs（读取文件）、yaml 解析（解析 openapi.yaml）
- *
- * 数据流：openapi.yaml + 详细设计文档 → 结构化比对 → 一致/不一致
- * 持久化：无
- */
-import fs from "node:fs";
-import path from "node:path";
-/** 从 openapi.yaml 提取所有 endpoint（路径 + 方法） */
-function extractOpenApiEndpoints(content) {
-    const endpoints = new Map();
-    // 简易 YAML 解析：提取 paths 下的 path 和 method
-    const lines = content.split("\n");
-    let inPaths = false;
-    let currentPath = "";
-    for (const line of lines) {
-        const trimmed = line.trim();
-        // 进入 paths section
-        if (trimmed === "paths:") {
-            inPaths = true;
-            continue;
-        }
-        if (!inPaths)
-            continue;
-        // paths 下的顶级 key 就是 path（以 / 开头）
-        if (line.startsWith("  /")) {
-            currentPath = trimmed.replace(/:$/, "");
-            endpoints.set(currentPath, new Set());
-            continue;
-        }
-        // path 下的 method（get/post/put/delete/patch）
-        if (currentPath && line.startsWith("    ")) {
-            const methodMatch = trimmed.match(/^(get|post|put|delete|patch|options|head):$/);
-            if (methodMatch) {
-                endpoints.get(currentPath)?.add(methodMatch[1].toLowerCase());
-            }
-        }
-        // 离开 paths section（遇到非空行且缩进 <= 1）
-        if (trimmed.length > 0 && !line.startsWith("  ") && trimmed !== "paths:") {
-            break;
-        }
-    }
-    return endpoints;
-}
-/** 从详细设计文档提取 endpoint 引用（路径 + 方法） */
-function extractDesignDocEndpoints(content) {
-    const endpoints = new Map();
-    // 匹配常见格式：GET /api/xxx、POST /api/xxx、`GET /xxx` 等
-    const endpointRegex = /`?(GET|POST|PUT|DELETE|PATCH|OPTIONS|HEAD)\s+(\/[^\s`<,，)]+)/gi;
-    let match;
-    while ((match = endpointRegex.exec(content)) !== null) {
-        const method = match[1].toLowerCase();
-        const url = match[2];
-        // 提取 path（去掉 query string）
-        const pathOnly = url.split("?")[0].split("{")[0].replace(/\/+$/, "") || "/";
-        if (!endpoints.has(pathOnly)) {
-            endpoints.set(pathOnly, new Set());
-        }
-        endpoints.get(pathOnly)?.add(method);
-    }
-    return endpoints;
-}
-/**
- * openapi_sync_check 执行器入口。
- *
- * 比对 openapi.yaml 与详细设计文档，检查：
- * 1. 设计文档引用的 endpoint 在 openapi.yaml 中存在
- * 2. 方法一致（GET/POST/PUT/DELETE 等）
- */
-export const executeOpenApiSyncCheck = async (check, ctx) => {
-    const projectRoot = ctx.projectRoot;
-    // 定位文件
-    const openApiPath = path.join(projectRoot, "docs", "api", "openapi.yaml");
-    const designDocPath = path.join(projectRoot, "docs", "design", "03-详细设计文档.md");
-    if (!fs.existsSync(openApiPath)) {
-        return {
-            check_id: check.id,
-            executed_by: "code",
-            passed: false,
-            error: "openapi.yaml 不存在",
-        };
-    }
-    if (!fs.existsSync(designDocPath)) {
-        // 详细设计是可选产物，不存在时通过
-        return {
-            check_id: check.id,
-            executed_by: "code",
-            passed: true,
-            evidence: "详细设计文档不存在（可选产物），跳过检查",
-        };
-    }
-    // 容错读取：路径偶发为目录(EISDIR)或无权限(EACCES)，裸 readFileSync 会崩整个 executor
-    let openApiContent;
-    let designDocContent;
-    try {
-        openApiContent = fs.readFileSync(openApiPath, "utf-8");
-        designDocContent = fs.readFileSync(designDocPath, "utf-8");
-    }
-    catch (err) {
-        return {
-            check_id: check.id,
-            executed_by: "code",
-            passed: false,
-            error: `openapi/design 文档读取失败（EISDIR/EACCES）: ${err instanceof Error ? err.message : String(err)}`,
-        };
-    }
-    const openApiEndpoints = extractOpenApiEndpoints(openApiContent);
-    const designEndpoints = extractDesignDocEndpoints(designDocContent);
-    // 比对：设计文档引用的 endpoint 必须在 openapi.yaml 中存在
-    const mismatches = [];
-    for (const [designPath, methods] of designEndpoints) {
-        const openApiMethods = openApiEndpoints.get(designPath);
-        if (!openApiMethods) {
-            mismatches.push(`路径 ${designPath} 在 openapi.yaml 中不存在`);
-            continue;
-        }
-        for (const method of methods) {
-            if (!openApiMethods.has(method)) {
-                mismatches.push(`${method.toUpperCase()} ${designPath} 在 openapi.yaml 中不存在`);
-            }
-        }
-    }
-    if (mismatches.length === 0) {
-        return {
-            check_id: check.id,
-            executed_by: "code",
-            passed: true,
-            evidence: `设计文档 ${designEndpoints.size} 个 endpoint 全部与 openapi.yaml 一致`,
-        };
-    }
-    return {
-        check_id: check.id,
-        executed_by: "code",
-        passed: false,
-        evidence: `发现 ${mismatches.length} 处不一致：\n${mismatches.slice(0, 20).join("\n")}`,
-    };
-};
-//# sourceMappingURL=executors_openapi_sync.js.map

package/dist/gate/executors/executors_openapi_sync.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"executors_openapi_sync.js","sourceRoot":"","sources":["../../../src/gate/executors/executors_openapi_sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,4CAA4C;AAC5C,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEjD,uCAAuC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAG,EAAE,CAAC;IAErB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,mBAAmB;QACnB,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,iCAAiC;QACjC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QAED,4CAA4C;QAC5C,IAAI,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjF,IAAI,WAAW,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzE,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qCAAqC;AACrC,SAAS,yBAAyB,CAAC,OAAe;IAChD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEjD,iDAAiD;IACjD,MAAM,aAAa,GAAG,gEAAgE,CAAC;IACvF,IAAI,KAAK,CAAC;IAEV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAErB,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;QAE5E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAmB,KAAK,EAC1D,KAAgB,EAChB,GAAsB,EACtB,EAAE;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IAEpC,OAAO;IACP,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAE/E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,WAAW,EAAE,MAAe;YAC5B,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,kBAAkB;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,mBAAmB;QACnB,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,WAAW,EAAE,MAAe;YAC5B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,sBAAsB;SACjC,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,cAAsB,CAAC;IAC3B,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACvD,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,WAAW,EAAE,MAAe;YAC5B,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACnG,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IAEpE,2CAA2C;IAC3C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,MAAM,UAAU,sBAAsB,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,UAAU,sBAAsB,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,WAAW,EAAE,MAAe;YAC5B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,QAAQ,eAAe,CAAC,IAAI,iCAAiC;SACxE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,EAAE;QAClB,WAAW,EAAE,MAAe;QAC5B,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,MAAM,UAAU,CAAC,MAAM,WAAW,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACjF,CAAC;AACJ,CAAC,CAAC"}