TRUST 5 质量框架

def calculate_discount(price: float, discount_rate: float) -> float:
    """计算折扣价。

    Args:
        price: 原价(0 以上)
        discount_rate: 折扣率(0.0 ~ 1.0)

    Returns:
        折后价

    Raises:
        ValueError: 无效的输入值
    """
    if price < 0:
        raise ValueError("价格不能小于 0")
    if not 0 <= discount_rate <= 1:
        raise ValueError("折扣率必须在 0.0 到 1.0 之间")
    return price * (1 - discount_rate)

# 测试: 正常情况与异常情况都验证
def test_calculate_discount_normal():
    assert calculate_discount(10000, 0.1) == 9000
    assert calculate_discount(5000, 0.5) == 2500
    assert calculate_discount(0, 0.5) == 0

def test_calculate_discount_invalid_price():
    with pytest.raises(ValueError, match="价格不能"):
        calculate_discount(-1000, 0.1)

def test_calculate_discount_invalid_rate():
    with pytest.raises(ValueError, match="折扣率"):
        calculate_discount(10000, 1.5)

# 坏例子: 仅凭名称无法知道做什么
def calc(d, r):
    return d * (1 - r)

# 好例子: 只读名称就能知道作用
def calculate_discounted_price(original_price: float, discount_rate: float) -> float:
    """计算从原价按折扣率折算后的价格。"""
    return original_price * (1 - discount_rate)

# 统一的错误处理模式
class AppError(Exception):
    """应用基础错误"""
    def __init__(self, message: str, code: int = 500):
        self.message = message
        self.code = code

class NotFoundError(AppError):
    """找不到资源"""
    def __init__(self, resource: str, id: str):
        super().__init__(f"找不到 {resource} '{id}'", code=404)

class ValidationError(AppError):
    """输入值验证失败"""
    def __init__(self, field: str, reason: str):
        super().__init__(f"'{field}' 验证失败: {reason}", code=400)

# 所有服务使用相同的模式
def get_user(user_id: str) -> User:
    user = user_repository.find_by_id(user_id)
    if not user:
        raise NotFoundError("用户", user_id)
    return user

# 坏例子: SQL Injection 漏洞
def get_user(username: str) -> dict:
    query = f"SELECT * FROM users WHERE username = '{username}'"
    return db.execute(query)

# 好例子: 用参数化查询保证安全
def get_user(username: str) -> dict:
    query = "SELECT * FROM users WHERE username = %s"
    return db.execute(query, (username,))

# 结构: <类型>(<范围>): <说明>
# 示例:

# 添加新功能
$ git commit -m "feat(auth): 添加基于 JWT 的登录 API"

# 修复 bug
$ git commit -m "fix(auth): 修复令牌过期时间计算错误"

# 重构
$ git commit -m "refactor(auth): 把认证逻辑分离到 AuthService"

# 安全改进
$ git commit -m "security(db): 用参数化查询防止 SQL Injection"

# 运行自动修复
> /moai fix

# 自动反复修复直到完成
> /moai loop

constitution:
  # 启用 TRUST 5 质量验证
  enforce_quality: true

  # 目标测试覆盖率
  test_coverage_target: 85

  # LSP 质量门禁设置
  lsp_quality_gates:
    enabled: true

    plan:
      require_baseline: true # Plan 开始时捕获基线

    run:
      max_errors: 0 # Run 阶段允许错误: 0 个
      max_type_errors: 0 # 允许类型错误: 0 个
      max_lint_errors: 0 # 允许 lint 错误: 0 个
      allow_regression: false # 相对基线不可回归

    sync:
      max_errors: 0 # Sync 阶段允许错误: 0 个
      max_warnings: 10 # 允许警告: 最多 10 个
      require_clean_lsp: true # 需要 LSP 干净状态

    cache_ttl_seconds: 5 # LSP 诊断缓存时间
    timeout_seconds: 3 # LSP 诊断超时

# 1. Plan: 生成 SPEC(捕获 LSP 基线)
> /moai plan "实现用户搜索 API"

# 2. Run: 用 DDD 实现(TRUST 5 验证)
> /moai run SPEC-SEARCH-001

# 3. Sync: 生成文档与 PR(最终 LSP 干净确认)
> /moai sync SPEC-SEARCH-001