优化

scripts/java-quality-summary.test.mjs

@@ -21,6 +21,11 @@ test('parses JaCoCo line coverage and SpotBugs findings without quality threshol
     byPriority: { 1: 1, 2: 1 },
     byCategory: { CORRECTNESS: 1, STYLE: 1 }
   })
+  assert.deepEqual(parseSpotbugsReport("<BugCollection><BugInstance priority='2' category='MALICIOUS_CODE'/></BugCollection>"), {
+    findings: 1,
+    byPriority: { 2: 1 },
+    byCategory: { MALICIOUS_CODE: 1 }
+  })
   assert.throws(() => parseJacocoReport('<report/>'), /not a JaCoCo report/)
   assert.throws(() => parseSpotbugsReport('<BugCollection/>'), /not a SpotBugs report/)
 })
@@ -58,10 +63,15 @@ test('aggregates code modules, report presence and the OpenAPI service matrix',
 
 test('repository freezes the current topology and non-blocking aggregate summary wiring', async () => {
   const summary = await buildQualitySummary(repositoryRoot)
+  const baseline = JSON.parse(await readFile(path.join(repositoryRoot, 'scripts', 'java-quality-baseline.json'), 'utf8'))
   assert.deepEqual(summary.topology, { modules: 22, codeModules: 21, services: 15 })
   assert.equal(summary.openapi.documents, 26)
   assert.equal(summary.openapi.coveredServices.length, 7)
   assert.equal(summary.openapi.codeFirstServices.length, 8)
+  assert.equal(baseline.mode, 'report-only')
+  assert.deepEqual(baseline.topology, summary.topology)
+  assert.equal(baseline.modules.length, 21)
+  assert.equal(baseline.modules.reduce((total, row) => total + row.spotbugsFindings, 0), baseline.reports.spotbugsFindings)
 
   const gitlab = (await readFile(path.join(repositoryRoot, '.gitlab-ci.yml'), 'utf8')).replaceAll('\r\n', '\n')
   const job = gitlab.match(/^质量摘要:\n([\s\S]*?)(?=^[^\s#].*:\n)/m)?.[1] ?? ''