soloforge 1.2.20 → 1.3.1

package/dist/engine/plan_proposal_gate.js

@@ -0,0 +1,340 @@
+/**
+ * Plan / Proposal First Gate — 问题五十五核心机制。
+ *
+ * 任何写入、编码、构建、Docker、迁移、发布、外部副作用或交付动作前，
+ * AI 必须先给出与任务风险匹配的计划或方案。
+ *
+ * 核心原则: 先说明计划，再执行动作。
+ */
+// ── 任务类型到最低计划等级的映射 ──
+const MIN_PLAN_LEVEL = {
+    simple_answer: "none_with_reason",
+    read_only_analysis: "brief_plan",
+    code_change: "execution_plan",
+    file_edit: "execution_plan",
+    test_or_review: "execution_plan",
+    architecture_design: "option_proposal",
+    existing_system_development: "execution_plan",
+    local_acceptance: "execution_plan",
+    batch_documentation_update: "execution_plan",
+    migration: "human_confirmation_required",
+    delete_or_overwrite: "human_confirmation_required",
+    high_risk_operation: "human_confirmation_required",
+};
+/** 需要用户确认的任务类型 */
+const NEEDS_CONFIRMATION_TYPES = new Set([
+    "migration",
+    "delete_or_overwrite",
+    "high_risk_operation",
+]);
+/** plan_level 排序权重 */
+const LEVEL_WEIGHT = {
+    none_with_reason: 0,
+    brief_plan: 1,
+    execution_plan: 2,
+    option_proposal: 3,
+    human_confirmation_required: 4,
+};
+/** 风险升级触发条件 — 同时命中多个 task_type 时取最高 */
+const RISK_UPGRADE_TRIGGERS = [
+    { types: ["code_change", "delete_or_overwrite"], upgrade_to: "human_confirmation_required" },
+    { types: ["code_change", "migration"], upgrade_to: "human_confirmation_required" },
+    { types: ["file_edit", "delete_or_overwrite"], upgrade_to: "human_confirmation_required" },
+    { types: ["code_change", "high_risk_operation"], upgrade_to: "human_confirmation_required" },
+];
+/** 高风险关键词 — 检测用户意图中的高风险信号 */
+const HIGH_RISK_KEYWORDS = [
+    "删除", "drop", "truncate", "rm -rf", "DELETE FROM",
+    "覆盖", "force push", "--force",
+    "数据库", "database", "schema",
+    "权限", "permission", "auth",
+    "技术栈", "framework", "migration",
+    "发布", "deploy", "publish", "release",
+    "Docker", "docker", "端口", "port",
+    "安装", "install", "依赖", "dependency",
+    "用户数据", "user data",
+];
+/** none_with_reason 禁止用于的任务类型 */
+const NONE_WITH_REASON_FORBIDDEN = new Set([
+    "code_change", "file_edit", "test_or_review",
+    "local_acceptance", "batch_documentation_update",
+    "migration", "delete_or_overwrite", "high_risk_operation",
+]);
+// ── 核心函数 ──
+/**
+ * 评估计划前置门 — 检查任务是否有足够等级的计划。
+ */
+export function evaluatePlanProposalGate(input) {
+    const violations = [];
+    const blockedActions = [];
+    // 确定最低要求等级
+    let requiredLevel = MIN_PLAN_LEVEL[input.task_type] ?? "execution_plan";
+    // 风险升级: 当意图同时命中多个高风险类型时取最高等级
+    for (const trigger of RISK_UPGRADE_TRIGGERS) {
+        const allTypesMatch = trigger.types.every((t) => {
+            if (t === input.task_type)
+                return true;
+            return inferPlanGateTaskType(input.user_intent) === t;
+        });
+        if (allTypesMatch) {
+            const currentWeight = LEVEL_WEIGHT[requiredLevel];
+            const upgradeWeight = LEVEL_WEIGHT[trigger.upgrade_to];
+            if (upgradeWeight > currentWeight) {
+                requiredLevel = trigger.upgrade_to;
+            }
+        }
+    }
+    // 检测意图中的高风险关键词
+    const intentHasHighRisk = HIGH_RISK_KEYWORDS.some((kw) => input.user_intent.toLowerCase().includes(kw.toLowerCase()));
+    if (intentHasHighRisk && LEVEL_WEIGHT[requiredLevel] < LEVEL_WEIGHT["execution_plan"]) {
+        requiredLevel = "execution_plan";
+    }
+    // scope 扩大或风险升高 → 升级
+    if (input.scope_expanded || input.risk_elevated) {
+        if (LEVEL_WEIGHT[requiredLevel] < LEVEL_WEIGHT["human_confirmation_required"]) {
+            requiredLevel = "human_confirmation_required";
+        }
+    }
+    const currentLevel = input.plan_level ?? "none_with_reason";
+    // 检查 1: none_with_reason 适用范围
+    if (currentLevel === "none_with_reason" && NONE_WITH_REASON_FORBIDDEN.has(input.task_type)) {
+        violations.push({
+            rule: "none_with_reason_forbidden_for_write",
+            severity: "hard_fail",
+            reason_zh: `任务类型 ${input.task_type} 不得使用 none_with_reason，写入/高风险任务必须有计划`,
+            diagnostic_code: "SF-PLAN-5010",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 2: 计划等级不足
+    if (LEVEL_WEIGHT[currentLevel] < LEVEL_WEIGHT[requiredLevel]) {
+        violations.push({
+            rule: "plan_level_insufficient",
+            severity: "hard_fail",
+            reason_zh: `计划等级 ${currentLevel} 不足，任务类型 ${input.task_type} 至少需要 ${requiredLevel}`,
+            diagnostic_code: "SF-PLAN-5002",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 3: 需要用户确认
+    if (NEEDS_CONFIRMATION_TYPES.has(input.task_type) && !input.user_confirmation_ref) {
+        violations.push({
+            rule: "confirmation_required",
+            severity: "hard_fail",
+            reason_zh: `任务类型 ${input.task_type} 需要用户确认，但缺少 user_confirmation_ref`,
+            diagnostic_code: "SF-PLAN-5003",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 4: 高风险意图无确认
+    if (intentHasHighRisk && !input.user_confirmation_ref &&
+        LEVEL_WEIGHT[requiredLevel] >= LEVEL_WEIGHT["human_confirmation_required"]) {
+        violations.push({
+            rule: "high_risk_no_confirmation",
+            severity: "hard_fail",
+            reason_zh: "意图包含高风险操作但缺少用户确认",
+            diagnostic_code: "SF-PLAN-5003",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 5: 缺少计划本身
+    if (!input.plan_summary_zh && currentLevel !== "none_with_reason") {
+        violations.push({
+            rule: "no_plan",
+            severity: "hard_fail",
+            reason_zh: "执行前缺少计划",
+            diagnostic_code: "SF-PLAN-5001",
+        });
+        blockedActions.push("write_file", "code_change", "build", "docker", "migrate", "publish", "deliver");
+    }
+    // 检查 6: 缺少验证计划（execution_plan 及以上）
+    if (LEVEL_WEIGHT[currentLevel] >= LEVEL_WEIGHT["execution_plan"] &&
+        (!input.verification_plan || input.verification_plan.length === 0)) {
+        violations.push({
+            rule: "verification_plan_missing",
+            severity: "hard_fail",
+            reason_zh: "计划未记录验证方式",
+            diagnostic_code: "SF-PLAN-5005",
+        });
+    }
+    // 检查 7: 缺少 evidence refs
+    if (!input.evidence_refs || input.evidence_refs.length === 0) {
+        violations.push({
+            rule: "evidence_refs_missing",
+            severity: "hard_fail",
+            reason_zh: "计划未进入 evidence refs",
+            diagnostic_code: "SF-PLAN-5006",
+        });
+    }
+    // 自动修复循环: 同 scope 内可用原计划
+    if (input.is_auto_repair_step && input.auto_repair_origin_plan_id && !input.scope_expanded) {
+        // 自动修复每轮仍需要 evidence
+        if (!input.evidence_refs || input.evidence_refs.length === 0) {
+            violations.push({
+                rule: "auto_repair_evidence_missing",
+                severity: "hard_fail",
+                reason_zh: "自动修复每轮必须有 evidence",
+                diagnostic_code: "SF-PLAN-5006",
+            });
+        }
+        // 自动修复在授权 scope 内不阻断
+    }
+    const hardFails = violations.filter((v) => v.severity === "hard_fail");
+    const passed = hardFails.length === 0;
+    return {
+        passed,
+        plan_gate_status: passed ? "passed" : hardFails.some((v) => v.diagnostic_code === "SF-PLAN-5003") ? "manual_required" : "blocked",
+        required_level: requiredLevel,
+        current_level: currentLevel,
+        reason_zh: passed ? "计划前置门通过" : hardFails.map((v) => v.reason_zh).join("; "),
+        violations,
+        diagnostic_code: hardFails.length > 0 ? hardFails[0].diagnostic_code : undefined,
+        evidence_refs: input.evidence_refs ?? [],
+        blocked_actions: [...new Set(blockedActions)],
+    };
+}
+/**
+ * 在执行动作前检查 plan gate — 返回是否允许执行。
+ */
+export function requirePlanBeforeAction(gateResult, action) {
+    if (!gateResult.passed) {
+        return {
+            allowed: false,
+            reason_zh: `Plan Gate 未通过: ${gateResult.reason_zh}`,
+            diagnostic_code: gateResult.diagnostic_code ?? "SF-PLAN-5001",
+        };
+    }
+    if (gateResult.blocked_actions.includes(action)) {
+        return {
+            allowed: false,
+            reason_zh: `动作 ${action} 被 Plan Gate 阻断`,
+            diagnostic_code: "SF-PLAN-5004",
+        };
+    }
+    return { allowed: true, reason_zh: "Plan Gate 通过，允许执行" };
+}
+/**
+ * 验证动作是否在已确认计划范围内。
+ */
+export function validateActionWithinPlan(plannedScope, actionTarget, planLevel) {
+    // 简单计划和只读分析不要求 scope 精确匹配
+    if (planLevel === "none_with_reason" || planLevel === "brief_plan") {
+        return { allowed: true, reason_zh: "低风险任务，不要求 scope 精确匹配" };
+    }
+    const inScope = plannedScope.some((s) => actionTarget.startsWith(s) || actionTarget.includes(s));
+    if (!inScope) {
+        return {
+            allowed: false,
+            reason_zh: `动作目标 ${actionTarget} 不在已确认计划 scope 内: ${plannedScope.join(", ")}`,
+        };
+    }
+    return { allowed: true, reason_zh: "动作在计划范围内" };
+}
+/**
+ * 创建计划提案证据。
+ */
+export function createPlanProposalEvidence(input) {
+    const evidenceId = `plan-evidence-${input.task_id}-${Date.now()}`;
+    return {
+        evidence_id: evidenceId,
+        task_id: input.task_id,
+        plan_id: `plan-${input.task_id}`,
+        plan_level: input.plan_level ?? "execution_plan",
+        task_type: input.task_type,
+        plan_summary_zh: input.plan_summary_zh ?? "",
+        proposed_steps: input.proposed_steps ?? [],
+        verification_plan: input.verification_plan ?? [],
+        risks: input.risks ?? [],
+        needs_user_confirmation: input.needs_user_confirmation ?? false,
+        user_confirmation_ref: input.user_confirmation_ref,
+        evidence_refs: input.evidence_refs ?? [],
+        created_at: new Date().toISOString(),
+    };
+}
+/**
+ * 推断任务类型 — 从用户意图文本映射到 PlanGateTaskType。
+ */
+export function inferPlanGateTaskType(intent, route) {
+    const lower = intent.toLowerCase();
+    // 高风险检测优先
+    if (/删除|drop\s+table|truncate|rm\s+-rf|覆盖/.test(intent))
+        return "delete_or_overwrite";
+    if (/迁移|migrate|数据库.*schema|database.*schema/.test(intent))
+        return "migration";
+    if (/发布|deploy|publish|release|push.*main|push.*master/.test(intent))
+        return "high_risk_operation";
+    if (/docker|容器|端口.*暴露|port.*expose/.test(intent))
+        return "high_risk_operation";
+    // 路由推断
+    if (route === "code_change")
+        return "code_change";
+    if (route === "analysis")
+        return "read_only_analysis";
+    if (route === "operation")
+        return "local_acceptance";
+    if (route === "review")
+        return "test_or_review";
+    // 内容推断
+    if (/修改.*代码|写.*代码|实现|开发|fix|feat/.test(intent))
+        return "code_change";
+    if (/修改.*文件|编辑|写.*文件|新增.*文件/.test(intent))
+        return "file_edit";
+    if (/架构|设计|方案/.test(intent))
+        return "architecture_design";
+    if (/现有.*系统|已有.*项目/.test(intent))
+        return "existing_system_development";
+    if (/审查|review|检查/.test(intent))
+        return "test_or_review";
+    if (/测试|test|验证/.test(intent))
+        return "test_or_review";
+    if (/文档|doc|batch.*文档/.test(intent))
+        return "batch_documentation_update";
+    if (/验收|browser|浏览器|docker.*accept/.test(intent))
+        return "local_acceptance";
+    // 默认
+    if (/分析|查看|阅读|read|search|find/.test(intent) || !/修改|写|改|创建|删除|构建|运行/.test(intent)) {
+        return "read_only_analysis";
+    }
+    return "code_change";
+}
+/**
+ * 检查是否为 "只要求 review" 场景 — 如是，不得擅自修复。
+ */
+export function isReviewOnlyIntent(intent) {
+    const lower = intent.toLowerCase();
+    const reviewWords = /审查|review|检查|代码审查|code review|只看|只读|不修复|不修改|不修改代码/;
+    const fixWords = /修复|fix|修|改|修改.*代码/;
+    return reviewWords.test(lower) && !fixWords.test(lower);
+}
+/**
+ * 确认参数 — 计划确认后，旧确认只能覆盖原计划范围。
+ */
+export function validateConfirmationScope(originalConfirmation, newScope) {
+    const newScopeStr = JSON.stringify(newScope.sort());
+    const origScopeStr = JSON.stringify(originalConfirmation.scope.sort());
+    if (newScopeStr === origScopeStr) {
+        return { valid: true, reason_zh: "scope 未变，旧确认有效" };
+    }
+    const expanded = newScope.filter((s) => !originalConfirmation.scope.includes(s));
+    if (expanded.length > 0) {
+        return {
+            valid: false,
+            reason_zh: `scope 扩大: 新增 ${expanded.join(", ")}，需要重新确认`,
+        };
+    }
+    return { valid: true, reason_zh: "scope 未扩大，旧确认有效" };
+}
+// ── 诊断码注册 ──
+export const PLAN_GATE_DIAGNOSTIC_CODES = {
+    "SF-PLAN-5001": "执行前缺少计划",
+    "SF-PLAN-5002": "计划等级不足",
+    "SF-PLAN-5003": "高风险动作缺少用户确认",
+    "SF-PLAN-5004": "执行动作超出已确认计划",
+    "SF-PLAN-5005": "计划未记录验证方式",
+    "SF-PLAN-5006": "计划未进入 evidence refs",
+    "SF-PLAN-5007": "计划只存在于最终报告，未在执行前生效",
+    "SF-PLAN-5008": "用户项目 adapter 未注入计划前置规则",
+    "SF-PLAN-5009": "机制层未接入，只有模板或知识描述",
+    "SF-PLAN-5010": "none_with_reason 被用于写入或高风险任务",
+};
+//# sourceMappingURL=plan_proposal_gate.js.map

package/dist/engine/plan_proposal_gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan_proposal_gate.js","sourceRoot":"","sources":["../../src/engine/plan_proposal_gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0HH,uBAAuB;AAEvB,MAAM,cAAc,GAA4C;IAC9D,aAAa,EAAE,kBAAkB;IACjC,kBAAkB,EAAE,YAAY;IAChC,WAAW,EAAE,gBAAgB;IAC7B,SAAS,EAAE,gBAAgB;IAC3B,cAAc,EAAE,gBAAgB;IAChC,mBAAmB,EAAE,iBAAiB;IACtC,2BAA2B,EAAE,gBAAgB;IAC7C,gBAAgB,EAAE,gBAAgB;IAClC,0BAA0B,EAAE,gBAAgB;IAC5C,SAAS,EAAE,6BAA6B;IACxC,mBAAmB,EAAE,6BAA6B;IAClD,mBAAmB,EAAE,6BAA6B;CACnD,CAAC;AAEF,kBAAkB;AAClB,MAAM,wBAAwB,GAA0B,IAAI,GAAG,CAAC;IAC9D,WAAW;IACX,qBAAqB;IACrB,qBAAqB;CACtB,CAAC,CAAC;AAEH,sBAAsB;AACtB,MAAM,YAAY,GAAkC;IAClD,gBAAgB,EAAE,CAAC;IACnB,UAAU,EAAE,CAAC;IACb,cAAc,EAAE,CAAC;IACjB,eAAe,EAAE,CAAC;IAClB,2BAA2B,EAAE,CAAC;CAC/B,CAAC;AAEF,uCAAuC;AACvC,MAAM,qBAAqB,GAAoE;IAC7F,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC5F,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAClF,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC1F,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE;CAC7F,CAAC;AAEF,6BAA6B;AAC7B,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa;IACjD,IAAI,EAAE,YAAY,EAAE,SAAS;IAC7B,KAAK,EAAE,UAAU,EAAE,QAAQ;IAC3B,IAAI,EAAE,YAAY,EAAE,MAAM;IAC1B,KAAK,EAAE,WAAW,EAAE,WAAW;IAC/B,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;IACpC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM;IAChC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY;IACnC,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF,iCAAiC;AACjC,MAAM,0BAA0B,GAA0B,IAAI,GAAG,CAAC;IAChE,aAAa,EAAE,WAAW,EAAE,gBAAgB;IAC5C,kBAAkB,EAAE,4BAA4B;IAChD,WAAW,EAAE,qBAAqB,EAAE,qBAAqB;CAC1D,CAAC,CAAC;AAEH,aAAa;AAEb;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAA4B;IACnE,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,WAAW;IACX,IAAI,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC;IAExE,6BAA6B;IAC7B,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9C,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvC,OAAO,qBAAqB,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACvD,IAAI,aAAa,GAAG,aAAa,EAAE,CAAC;gBAClC,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACvD,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAC3D,CAAC;IACF,IAAI,iBAAiB,IAAI,YAAY,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtF,aAAa,GAAG,gBAAgB,CAAC;IACnC,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAChD,IAAI,YAAY,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC9E,aAAa,GAAG,6BAA6B,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAE5D,8BAA8B;IAC9B,IAAI,YAAY,KAAK,kBAAkB,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3F,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,sCAAsC;YAC5C,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,QAAQ,KAAK,CAAC,SAAS,sCAAsC;YACxE,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,eAAe;IACf,IAAI,YAAY,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,QAAQ,YAAY,YAAY,KAAK,CAAC,SAAS,SAAS,aAAa,EAAE;YAClF,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,eAAe;IACf,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAClF,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,QAAQ,KAAK,CAAC,SAAS,mCAAmC;YACrE,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,iBAAiB;IACjB,IAAI,iBAAiB,IAAI,CAAC,KAAK,CAAC,qBAAqB;QACnD,YAAY,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,kBAAkB;YAC7B,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,eAAe;IACf,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,YAAY,KAAK,kBAAkB,EAAE,CAAC;QAClE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,SAAS;YACpB,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,gBAAgB,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;YACtB,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,qBAAqB;YAChC,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3F,qBAAqB;QACrB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,oBAAoB;gBAC/B,eAAe,EAAE,cAAc;aAChC,CAAC,CAAC;QACL,CAAC;QACD,qBAAqB;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;IAEtC,OAAO;QACL,MAAM;QACN,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QACjI,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,UAAU;QACV,eAAe,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAChF,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QACxC,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAkC,EAClC,MAAuB;IAEvB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,kBAAkB,UAAU,CAAC,SAAS,EAAE;YACnD,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,cAAc;SAC9D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,MAAM,MAAM,iBAAiB;YACxC,eAAe,EAAE,cAAc;SAChC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAsB,EACtB,YAAoB,EACpB,SAAwB;IAExB,0BAA0B;IAC1B,IAAI,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,QAAQ,YAAY,qBAAqB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA4B;IACrE,MAAM,UAAU,GAAG,iBAAiB,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAClE,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,QAAQ,KAAK,CAAC,OAAO,EAAE;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,gBAAgB;QAChD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;QAC1C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,EAAE;QAChD,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,IAAI,KAAK;QAC/D,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QACxC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,KAAc;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAEnC,UAAU;IACV,IAAI,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACtF,IAAI,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/E,IAAI,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACnG,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAE/E,OAAO;IACP,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,oBAAoB,CAAC;IACtD,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,kBAAkB,CAAC;IACrD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC;IAEhD,OAAO;IACP,IAAI,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,aAAa,CAAC;IACrE,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC1D,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,6BAA6B,CAAC;IACvE,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACzD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACzE,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAE5E,KAAK;IACL,IAAI,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,mDAAmD,CAAC;IACxE,MAAM,QAAQ,GAAG,mBAAmB,CAAC;IACrC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,oBAAyC,EACzC,QAAkB;IAElB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvE,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;SACxD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AACvD,CAAC;AAED,cAAc;AAEd,MAAM,CAAC,MAAM,0BAA0B,GAA2B;IAChE,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,WAAW;IAC3B,cAAc,EAAE,qBAAqB;IACrC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,wBAAwB;IACxC,cAAc,EAAE,kBAAkB;IAClC,cAAc,EAAE,8BAA8B;CAC/C,CAAC"}

package/dist/engine/platform_context.d.ts

@@ -0,0 +1,44 @@
+/**
+ * 问题四十: Platform Compatibility — 跨平台路径安全、规范化与兼容性。
+ *
+ * 强制执行:
+ * - symlink / case sensitivity / path separator / shell 差异不得绕过 scope
+ * - 跨平台兼容不得以降低安全边界为代价
+ * - 路径判定必须使用 path.resolve + path.relative，禁止 startsWith 字符串边界判断
+ */
+import type { PlatformContext, NormalizedPathRef, PlatformCompatibilityReport, PathSafetyCheck } from "./extension_platform_contracts.js";
+/**
+ * 路径解析器 — 可注入以支持测试环境和 CI。
+ * 默认使用 Node.js path.resolve + fs.realpathSync.native。
+ */
+export interface PathResolver {
+    resolve: (...pathSegments: string[]) => string;
+    realpath: (p: string) => string;
+}
+/**
+ * 检测当前平台上下文。
+ */
+export declare function detectPlatformContext(workspacePath: string): PlatformContext;
+/**
+ * 规范化路径引用。
+ *
+ * 安全策略:
+ * - 使用 path.resolve 解析 .. / ~ / 相对路径
+ * - 使用 path.relative + startsWith('..') 判断是否逃逸 scope
+ * - 禁止 startsWith 字符串边界判断作为 scope 判定方式
+ * - realpath 解析 symlink，文件不存在时回退到 resolved 路径
+ */
+export declare function normalizePathRef(rawPath: string, platform: PlatformContext, scopeBoundary: string, resolver?: PathResolver): NormalizedPathRef;
+/**
+ * 执行路径安全检查。
+ */
+export declare function checkPathSafety(pathRef: NormalizedPathRef, scopeBoundary: string): PathSafetyCheck;
+/**
+ * 生成平台兼容性报告。
+ */
+export declare function generatePlatformReport(platform: PlatformContext, pathsToCheck: string[], scopeBoundary: string): PlatformCompatibilityReport;
+/**
+ * 创建测试用的平台上下文。
+ */
+export declare function createTestPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
+//# sourceMappingURL=platform_context.d.ts.map

package/dist/engine/platform_context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform_context.d.ts","sourceRoot":"","sources":["../../src/engine/platform_context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,2BAA2B,EAC3B,eAAe,EAGhB,MAAM,mCAAmC,CAAC;AAE3C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CACjC;AAcD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,CAY5E;AAaD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,eAAe,EACzB,aAAa,EAAE,MAAM,EACrB,QAAQ,GAAE,YAA+B,GACxC,iBAAiB,CA+CnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,aAAa,EAAE,MAAM,GACpB,eAAe,CAoBjB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,MAAM,EAAE,EACtB,aAAa,EAAE,MAAM,GACpB,2BAA2B,CAuB7B;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAY/F"}

package/dist/engine/platform_context.js

@@ -0,0 +1,169 @@
+/**
+ * 问题四十: Platform Compatibility — 跨平台路径安全、规范化与兼容性。
+ *
+ * 强制执行:
+ * - symlink / case sensitivity / path separator / shell 差异不得绕过 scope
+ * - 跨平台兼容不得以降低安全边界为代价
+ * - 路径判定必须使用 path.resolve + path.relative，禁止 startsWith 字符串边界判断
+ */
+import path from "node:path";
+import fs from "node:fs";
+/** 默认解析器 — 使用 Node.js 原生 path + fs */
+const DEFAULT_RESOLVER = {
+    resolve: (...segments) => path.resolve(...segments),
+    realpath: (p) => {
+        try {
+            return fs.realpathSync.native(p);
+        }
+        catch {
+            return p;
+        }
+    },
+};
+/**
+ * 检测当前平台上下文。
+ */
+export function detectPlatformContext(workspacePath) {
+    const platform = process.platform;
+    return {
+        os: platform === "win32" ? "win32" : platform === "darwin" ? "darwin" : "linux",
+        arch: process.arch,
+        shell: detectShell(),
+        path_case_sensitive: platform !== "win32" && platform !== "darwin",
+        path_separator: platform === "win32" ? "\\" : "/",
+        line_ending: platform === "win32" ? "crlf" : "lf",
+        supports_symlink: platform !== "win32",
+        workspace_realpath: workspacePath,
+    };
+}
+function detectShell() {
+    const shell = process.env.SHELL ?? "";
+    if (shell.includes("zsh"))
+        return "zsh";
+    if (shell.includes("bash"))
+        return "bash";
+    if (shell.includes("fish"))
+        return "fish";
+    if (process.platform === "win32") {
+        return process.env.COMSPEC?.includes("cmd") ? "cmd" : "powershell";
+    }
+    return "unknown";
+}
+/**
+ * 规范化路径引用。
+ *
+ * 安全策略:
+ * - 使用 path.resolve 解析 .. / ~ / 相对路径
+ * - 使用 path.relative + startsWith('..') 判断是否逃逸 scope
+ * - 禁止 startsWith 字符串边界判断作为 scope 判定方式
+ * - realpath 解析 symlink，文件不存在时回退到 resolved 路径
+ */
+export function normalizePathRef(rawPath, platform, scopeBoundary, resolver = DEFAULT_RESOLVER) {
+    // 跨平台分隔符归一化: Windows 反斜杠统一为正斜杠后再 resolve
+    const normalizedRaw = platform.os === "win32" ? rawPath.replace(/\\/g, "/") : rawPath;
+    const normalizedScope = platform.os === "win32" ? scopeBoundary.replace(/\\/g, "/") : scopeBoundary;
+    // path.resolve 解析所有 .. / . / 相对路径段
+    const resolved = resolver.resolve(normalizedRaw);
+    const resolvedScope = resolver.resolve(normalizedScope);
+    // realpath 解析 symlink — 文件不存在时回退到 resolved
+    const realPath = resolver.realpath(resolved);
+    const realScope = resolver.realpath(resolvedScope);
+    // 使用 path.relative 判断包含关系:
+    // relative 结果不以 .. 开头且不是绝对路径 → 在 scope 内
+    const relative = path.relative(realScope, realPath);
+    const isWithinWorkspace = relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative);
+    let pathSafetyStatus = "safe";
+    // symlink / 逃逸检测
+    const hasSymlinkIndicator = rawPath.includes("..") || rawPath.includes("~");
+    // 大小写别名冲突: 仅当 resolved 与 realpath 大小写不一致时才标记
+    // 普通保留大小写路径（如 /tmp/Project/src/App.ts）在 macOS 上是安全的，
+    // 仅当请求路径与磁盘真实路径存在大小写别名歧义时才为冲突
+    const caseNormalized = !platform.path_case_sensitive
+        && resolved.toLowerCase() === realPath.toLowerCase()
+        && resolved !== realPath;
+    if (!isWithinWorkspace && hasSymlinkIndicator) {
+        pathSafetyStatus = "symlink_escape";
+    }
+    else if (!isWithinWorkspace) {
+        pathSafetyStatus = "outside_scope";
+    }
+    else if (caseNormalized) {
+        pathSafetyStatus = "case_conflict";
+    }
+    return {
+        original: rawPath,
+        normalized: resolved,
+        is_within_workspace: isWithinWorkspace,
+        case_normalized: caseNormalized,
+        symlink_resolved: realPath !== resolved,
+        platform: platform.os,
+        path_safety_status: pathSafetyStatus,
+    };
+}
+/**
+ * 执行路径安全检查。
+ */
+export function checkPathSafety(pathRef, scopeBoundary) {
+    const passes = pathRef.is_within_workspace && pathRef.path_safety_status === "safe";
+    let reason = "";
+    if (pathRef.path_safety_status === "symlink_escape") {
+        reason = "路径包含 .. 或 ~，可能逃逸工作区范围";
+    }
+    else if (pathRef.path_safety_status === "outside_scope") {
+        reason = "路径在工作区范围外";
+    }
+    else if (pathRef.path_safety_status === "case_conflict") {
+        reason = "不区分大小写的平台存在大小写冲突风险";
+    }
+    else if (passes) {
+        reason = "路径安全";
+    }
+    return {
+        path_ref: pathRef,
+        scope_boundary: scopeBoundary,
+        passes,
+        reason,
+    };
+}
+/**
+ * 生成平台兼容性报告。
+ */
+export function generatePlatformReport(platform, pathsToCheck, scopeBoundary) {
+    const issues = [];
+    let status = "compatible";
+    for (const rawPath of pathsToCheck) {
+        const ref = normalizePathRef(rawPath, platform, scopeBoundary);
+        if (ref.path_safety_status !== "safe") {
+            issues.push(`路径不安全: ${rawPath} (${ref.path_safety_status})`);
+        }
+    }
+    if (issues.some(i => i.includes("symlink_escape"))) {
+        status = "blocked";
+    }
+    else if (issues.length > 0) {
+        status = "needs_normalization";
+    }
+    return {
+        platform_context: platform,
+        path_refs_checked: pathsToCheck.length,
+        issues_found: issues,
+        platform_compatibility_status: status,
+    };
+}
+/**
+ * 创建测试用的平台上下文。
+ */
+export function createTestPlatformContext(overrides) {
+    return {
+        os: "darwin",
+        arch: "arm64",
+        shell: "zsh",
+        path_case_sensitive: false,
+        path_separator: "/",
+        line_ending: "lf",
+        supports_symlink: true,
+        workspace_realpath: "/tmp/test-workspace",
+        ...overrides,
+    };
+}
+//# sourceMappingURL=platform_context.js.map

package/dist/engine/platform_context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform_context.js","sourceRoot":"","sources":["../../src/engine/platform_context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAmBzB,sCAAsC;AACtC,MAAM,gBAAgB,GAAiB;IACrC,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAiC,CAAC;IAC3D,OAAO;QACL,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QAC/E,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,WAAW,EAAE;QACpB,mBAAmB,EAAE,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;QAClE,cAAc,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;QACjD,WAAW,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACjD,gBAAgB,EAAE,QAAQ,KAAK,OAAO;QACtC,kBAAkB,EAAE,aAAa;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAyB,EACzB,aAAqB,EACrB,WAAyB,gBAAgB;IAEzC,yCAAyC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACtF,MAAM,eAAe,GAAG,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAEpG,mCAAmC;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAExD,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAEnD,2BAA2B;IAC3B,yCAAyC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEtG,IAAI,gBAAgB,GAAqB,MAAM,CAAC;IAEhD,iBAAiB;IACjB,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE5E,6CAA6C;IAC7C,qDAAqD;IACrD,8BAA8B;IAC9B,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,mBAAmB;WAC/C,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;WACjD,QAAQ,KAAK,QAAQ,CAAC;IAE3B,IAAI,CAAC,iBAAiB,IAAI,mBAAmB,EAAE,CAAC;QAC9C,gBAAgB,GAAG,gBAAgB,CAAC;IACtC,CAAC;SAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9B,gBAAgB,GAAG,eAAe,CAAC;IACrC,CAAC;SAAM,IAAI,cAAc,EAAE,CAAC;QAC1B,gBAAgB,GAAG,eAAe,CAAC;IACrC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,QAAQ;QACpB,mBAAmB,EAAE,iBAAiB;QACtC,eAAe,EAAE,cAAc;QAC/B,gBAAgB,EAAE,QAAQ,KAAK,QAAQ;QACvC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,kBAAkB,EAAE,gBAAgB;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,aAAqB;IAErB,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,kBAAkB,KAAK,MAAM,CAAC;IAEpF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,OAAO,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;QACpD,MAAM,GAAG,uBAAuB,CAAC;IACnC,CAAC;SAAM,IAAI,OAAO,CAAC,kBAAkB,KAAK,eAAe,EAAE,CAAC;QAC1D,MAAM,GAAG,WAAW,CAAC;IACvB,CAAC;SAAM,IAAI,OAAO,CAAC,kBAAkB,KAAK,eAAe,EAAE,CAAC;QAC1D,MAAM,GAAG,oBAAoB,CAAC;IAChC,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,aAAa;QAC7B,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAyB,EACzB,YAAsB,EACtB,aAAqB;IAErB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAgC,YAAY,CAAC;IAEvD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,KAAK,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,qBAAqB,CAAC;IACjC,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,QAAQ;QAC1B,iBAAiB,EAAE,YAAY,CAAC,MAAM;QACtC,YAAY,EAAE,MAAM;QACpB,6BAA6B,EAAE,MAAM;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAoC;IAC5E,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,KAAK;QACZ,mBAAmB,EAAE,KAAK;QAC1B,cAAc,EAAE,GAAG;QACnB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,IAAI;QACtB,kBAAkB,EAAE,qBAAqB;QACzC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC"}

package/dist/engine/policy_drift_detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy_drift_detector.d.ts","sourceRoot":"","sources":["../../src/engine/policy_drift_detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,SAAS,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,sBAAsB,GACtB,sBAAsB,GACtB,uBAAuB,GACvB,kCAAkC,GAClC,wBAAwB,CAAC;AAE7B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3E,KAAK,SAAS,GAAG,aAAa,CAAC;AAE/B,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;CACpC;AAgBD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,WAAW,CAyIpE;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAChC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,aAAa,EAAE,EACzB,MAAM,EAAE,WAAW,GAClB,kBAAkB,CAyCpB;AAID,OAAO,KAAK,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/F,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,GAAG,yBAAyB,GAAG,kBAAkB,GAAG,6BAA6B,GAAG,6BAA6B,CAAC;IACjI,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,mBAAmB,EAAE,yBAAyB,EAAE,CAAC;CAClD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAAE,EAClC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,iBAAiB,CAAC,EAAE,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,GAC1E,mBAAmB,CA+ErB"}
+{"version":3,"file":"policy_drift_detector.d.ts","sourceRoot":"","sources":["../../src/engine/policy_drift_detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,SAAS,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,sBAAsB,GACtB,sBAAsB,GACtB,uBAAuB,GACvB,kCAAkC,GAClC,wBAAwB,CAAC;AAE7B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3E,KAAK,SAAS,GAAG,aAAa,CAAC;AAE/B,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;CACpC;AAgBD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,WAAW,CAyIpE;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAChC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,aAAa,EAAE,EACzB,MAAM,EAAE,WAAW,GAClB,kBAAkB,CAyCpB;AAID,OAAO,KAAK,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAG/F,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,GAAG,yBAAyB,GAAG,kBAAkB,GAAG,6BAA6B,GAAG,6BAA6B,CAAC;IACjI,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,mBAAmB,EAAE,yBAAyB,EAAE,CAAC;CAClD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAAE,EAClC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,iBAAiB,CAAC,EAAE,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,GAC1E,mBAAmB,CA+ErB"}