^j= dZddlZddlZdZgdZgdZej dZej dZej dej d ej d ej d ejej d ejgZ ej d ejej dej dgZ ej dej dejej dejej dejej dgZ ej dej dej dej dej dej dejej dejgZ ej dejZej dZdZededZd Zej eed!ejZej d"ejZej d#Zej d$Zej d%Zd&ed'eefd(Zd&ed'efd)Zej d*ejZej d+Zej d,ejej d-ejej d.ejgZ ej d/ejgZ!ej d0ejZ"d1ed'ee#eeffd2Z$d3eed4ed'efd5Z%d=d3eed1ed'ee#eeffd6Z&d3eed7ed'efd8Z'd=d9ed:ed'e(fd;Z)d&ed'efd<Z*y)>u critical_gap.py - 보고서 CRITICAL 이슈 미수정 검증 verifier 보고서에서 CRITICAL 이슈가 보고되었으나 수정이 확인되지 않으면 FAIL. Nz"/home/jay/workspace/memory/reports)CRITICALcriticalu심각u 블로커)u 수정 완료u해결fixedresolvedz\b(CRITICAL|critical)\bu:(?:^|[\s,。、!?])(?:심각|블로커)(?:[\s,。、!?]|$)u5^\s*#{1,6}\s+.*(?:CRITICAL|critical|심각|블로커)u3^\s*[-*]\s+.*(?:CRITICAL|critical|심각|블로커)u4^\s*\d+\.\s+.*(?:CRITICAL|critical|심각|블로커)zseverity\s*[:=]\s*criticalz(!\[(?:security-critical|critical|high)\]z\*\*\[.*resolved.*\]\*\*u✅\s*RESOLVEDu~~.*(critical|심각).*~~u수정\s*완료z \bfixed\bz \bresolved\bu>해결(?:됨|되었|되었음|됐|책|책을|책이|\s*완료)u 미\s*해결u 미\s*완료u해결\s*되지\s*않u해결\s*안\s*됨u 해결\s*못 unresolvedznot\s+(?:fixed|resolved)zP\[(?:CRITICAL|HIGH)\]|!\[(?:critical|high)\]|severity\s*[:=]\s*(?:critical|high)uu(?:인증|권한\s*검증|권한|암호화|패치|수정|조치|해결)\s*없음|(?:secure_mode|timeout|port)\s*=\s*0u"(?:CRITICAL|HIGH|심각|블로커)z (?:\s*/\s*z)*u=(?:\s*[:=]\s*|\s+)(?:(?:신규|총|new|fresh|unresolved)\s*)*u(\d+)\s*(?:건|개)?us(?:HIGH|CRITICAL|심각|블로커|이슈|issue|finding|findings|취약점|건수|count|미해결|unresolved|신규)u없음|없습니다|없다u(? [0, 1] "CRITICAL 0개, HIGH 2개" -> [0, 2] "HIGH/CRITICAL 0건" -> [0] "fresh unresolved HIGH/CRITICAL = 0" -> [0] "CRITICAL=0" -> [0] ) _ZC_BIND_REfinditerintgroup)rms &teams/shared/verifiers/critical_gap.pyparse_severity_countsrks/&1%9%9$%? @C O @@ @s!<cFtj|rytj|ryt|}|rt d|DSt j|rAt j|rytj|rtj|syy)u,줄의 모든 severity count 가 0(이슈 0건) 맥락이면 True(=이슈 후보에서 제외). redesign(task-2723+3): 줄 전체 suppress 가 아니라 severity-count 구조 파싱. 하나라도 count>0 이면 실제 이슈로 보고 suppress 하지 않는다(False → 탐지 유지). Fc3&K|] }|dk( yw)rN).0cs r z)_is_zero_count_context..s*a16*sT) _ZC_STRONG_ISSUE_MARKERsearch_ZC_VULN_NEGATION_DENYLISTrall_ZC_COUNT_ANCHOR_ZC_ABSENCE_EXPR _ZC_ZERO_UNIT_ZC_NONZERO_UNIT)rcountss r_is_zero_count_contextr"xs%%d+!((. "4 (F *6***t$  " "4 (    %.>.E.Ed.K ur^#{1,6}\s+(?:CRITICAL\s*이슈|발견된?\s*이슈|발견된?\s*문제|미해결\s*항목|문제점|이슈|issues)z ^#{1,6}\s+ul^\s*(?:-\s*)?(?:우선순위|priority|level|발사\s*우선순위|dispatch\s*level|작업\s*레벨)\s*[:：]z"^\s*(?:#{1,6}\s+)?\[CRITICAL\]\s*$z--level\s+criticalz:\bcritical\s+(?:path|chain|section|mass|period|thinking)\buGlevel|priority|우선순위|\[CRITICAL\]|--level|dispatch|발사|발행contentc"g}d}t|jdD]l\}}tj|j rd}|j ||f?|sBt j|rd}Z|j ||fn|S)uu 보고서 전체 문자열에서 이슈 섹션 안의 줄들만 추출한다. Args: content: 보고서 전체 문자열 Returns: (line_num, line) 튜플 리스트 — 이슈 섹션 헤더 제외, 섹션 내 모든 줄 포함. 이슈 섹션 헤더를 만나면 수집 시작, 다른 마크다운 헤더를 만나면 수집 종료. Fr startT) enumerate splitlines_ISSUE_SECTION_HEADERSmatchstripappend _ANY_HEADER)r$resultin_issue_sectionirs r_extract_issue_sectionsr2s%'FW//1; %4 ! ' ' 5#  MM1d) $    &#(  MM1d) $ % Mr#linesline_numc|dz }td|dz }tt||dz}t||D]"}||k(r tj ||s"yy)u line_num(1-based) 줄 앞뒤 ±2 줄에 메타 키워드가 있으면 True. Args: lines: 전체 줄 목록 (0-indexed) line_num: 검사 기준 줄 번호 (1-based) Returns: True if metadata context detected in surrounding ±2 lines. r rTF)maxminlenrange_METADATA_CONTEXT_KEYWORDSr)r3r4idxr'endjs r_is_metadata_contextr@sj Q,C 37OE c%j#' "C 5#  8  % , ,U1X 6  r#c g}|rt|}|sgS|}ntt|d}|D]\} tj st j s2t fdtDrKttj }|rt}tD]n}|j D]X} | jdjjd} | dk\s7|j| j| zZp|D chc]} | j} } | r| j!|rt#||r,t fdt$DsFt' rSt fdt(Drm|j+| j-f|Scc} w)Nr r&c3@K|]}|jywNrrprs rrz)_detect_critical_lines..s.sAa188D>ArGc3@K|]}|jywrCrDrEs rrz)_detect_critical_lines..s@!qxx~@rG)r2listr(_CRITICAL_RE_ENr_CRITICAL_RE_KOany_META_LABEL_PATTERNSr set_GENERIC_PHRASE_PATTERNSrlowerfindaddr'issubsetr@ISSUE_MARKER_PATTERNSr"RESOLVED_INLINE_PATTERNSr-r,) r3r$found issue_lines candidatesr4critical_matches generic_spansgprcicritical_positionsrs @r_detect_critical_linesr_s#%E-g6 I )E34 $!/$&&t,0F0Ft0L  <';< <  8 8 >? EM. :T*:A))+00.3s9!qxx~9rGc3@K|]}|jywrCrDrEs rrz)_detect_resolved_after..6s:!qxx~:rGTF)rM_UNRESOLVED_HINTS_RESOLVED_PATTERNS)r3r`rs @r_detect_resolved_afterrf$sF'() 9'89 9  :'9: :  r#task_id report_pathcx|sddgdS|r|}n'tjjt|d}tjj |s dd|gdS t |dd5}|j }d d d j}|r|jsd d gdSt||}|s d d|gdSg}g} |D]d\} } t|| } t| } | r|jd| d| 7|jd| d| | jd| d | f| r$|j!ddt#| dd|dS|j!ddt#|dd |dS#1swYxYw#t$r)}dd t|jd |gdcYd }~Sd }~wwxYw)u 보고서에서 CRITICAL 이슈 확인 + 수정 여부 검증. 보고서 경로: /home/jay/workspace/memory/reports/{task_id}.md - CRITICAL 이슈가 있는데 수정 확인이 없으면 FAIL - CRITICAL 이슈가 있고 수정 확인도 있으면 PASS - CRITICAL 이슈가 없으면 PASS (이슈 없음) - 보고서 파일 없으면 SKIP - 빈 보고서 → PASS Returns: {"status": "PASS"|"FAIL"|"WARN"|"SKIP", "details": [...]} SKIPzNo task_id provided)statusdetailsz.mdzReport not found: rzutf-8)encodingNzFailed to read report: z: PASSu&Report is empty — no CRITICAL issuesz$No CRITICAL issues found in report: zCRITICAL (line z ) RESOLVED: z) UNRESOLVED: zline ru FAIL — z CRITICAL issue(s) not resolvedFAILu PASS — z CRITICAL issue(s) all resolved)ospathjoinDEFAULT_REPORTS_DIRexistsopenreadOSErrortype__name__r)r,r_rf_extract_issue_descriptionr-insertr:)rgrhrrfr$er3critical_linesrlrr4 line_contentr issue_descs rverifyr;s   .C-DEEww||/G9CA 77>>$ ,TF34   $g . !ffhG     E   .V-WXX,E7;N >tfEF  GJ"0@,)%:/ =  NN_XJl:,O P NN_XJnZLQ R   hZr*> ?@qIc*o%66UVW W55 NN1 #n"5!66UVW 11S    1$q'2B2B1C2aSIJ   s6F,E;=F;FF F9F4.F94F9ctjdd|j}t|dkDr|dddzS|r|S|ddS)uACRITICAL 이슈 줄에서 설명 텍스트 추출 (최대 80자).z^[#\-*\d\.\s]+PNu…)resubr,r:)rcleaneds rr{r{sPff&D1779G 7|bs|e##7,49,r#)r)+__doc__rqrrtCRITICAL_KEYWORDSRESOLVED_KEYWORDScompilerKrL IGNORECASErUrVrerdrr _ZC_SEVERITY_ZC_SEVERITY_CLUSTER_ZC_GAPr rrrr strrJrrboolr"r*r.rNrPr<tupler2r@r_rfdictrr{rr#rrsL  :DE"**78"**Z[BJJGHBJJEFBJJFGBJJ,bmm<BJJ:BMMJ BJJ*BMM:BJJ !BJJ+,BJJ!"BJJ|R]]+BJJ .BJJ "--0BJJPQ BJJBJJBJJ'(BJJ$%BJJBJJ}bmm,BJJ*BMM:"%"**WMM (RZZ- 5 '. <.C KbjjgY&:;MM 2::%MM 2::;< 45 2::>? A AS A6$ MM bjj' BJJw BJJ4bmmDBJJ$bmm4 BJJE (RZZNMM ST%S/-B<S ST0/$s)/c/4cSVhCX/d$s).I2CI2cI24I2X-S-S-r#