@gt-fe/eap-runtime 0.0.10 → 0.0.11

package/README.md

@@ -28,6 +28,7 @@ Enterprise Agent Platform **执行引擎**（LangGraph.js）：Agent Graph 编
 | 环境变量总表 | [`docs/governance/governance-env-config.md`](../docs/governance/governance-env-config.md) |
 | 预装联调契约 | [`docs/contracts/preload-hosting-runtime-contract.md`](../docs/contracts/preload-hosting-runtime-contract.md) |
 | 预装加载与请求流转 | [`docs/contracts/runtime-preinstall-load-flow.md`](../docs/contracts/runtime-preinstall-load-flow.md) |
+| 技能 FS 待办 | [`docs/TODO-skill-fs.md`](./docs/TODO-skill-fs.md) |
 | 本地 Agent 闭环 | [`docs/workflows/local-agent-dev-loop.md`](../docs/workflows/local-agent-dev-loop.md) |
 
 ---
@@ -197,8 +198,7 @@ node ../fixtures/eap-preinstall-sample/scripts/seal-snapshot.mjs
 
 | 模式 | 何时 | 说明 |
 |------|------|------|
-| `mock` | 本地默认 | 不调真实 Tool |
-| `mcp` / DevMcp | `eap chat --tool-mode mcp` | 本机直连 MCP（`EAP_TOOL_EXECUTION_MODE`，仅 createDevRuntime） |
+| `mcp` / DevToolExecutor | 本地默认（`dev` + `mcp`） | 按清单直连 MCP / HTTP / 本机 code |
 | Gateway | 生产 / Hosting | `EAP_TOOL_GATEWAY_TRANSPORT=mcp`（生产）；`http` 仅调试 |
 
 - 编排：`ToolOrchestrator` + `ToolExecutionRouter`（`deploymentContext`: `server` \| `desktop` \| `dev`）
@@ -254,7 +254,7 @@ FOUNDATION_SERVICE_URL=...
 EAP_DEPLOYMENT_CONTEXT=dev
 EAP_PREINSTALL_ROOT=/abs/path/to/preinstall   # 或 Agent 工程内预装树
 EAP_RUNTIME_STORAGE_PROFILE=dev
-EAP_TOOL_EXECUTION_MODE=mock                 # 或 mcp
+EAP_TOOL_EXECUTION_MODE=mcp                  # 本地默认；http-debug 走 Gateway 调试口
 # OPENAI_BASE_URL / OPENAI_API_KEY / EAP_DEFAULT_MODEL
 ```
 

package/dist/api/handlers/invoke.handler.js

@@ -178,6 +178,9 @@ export class InvokeOrchestrator {
             const promptRoots = this.graphLoader
                 ? await this.graphLoader.resolvePromptRoots(agentCode, req.agentVersion)
                 : [];
+            const agentDir = this.graphLoader
+                ? (await this.graphLoader.resolveAgentDir(agentCode, req.agentVersion)) ?? undefined
+                : undefined;
             // 组装 GraphState：有 Checkpoint 历史则只追加本轮 user，避免双重 append
             const history = messageRecordsToGraphMessages(sessionContext.messages);
             const messages = await buildTurnGraphMessages({
@@ -204,6 +207,7 @@ export class InvokeOrchestrator {
                 skillDefinitions,
                 skillInput,
                 promptRoots,
+                agentDir,
                 traceId: resolveTraceId(req),
                 traceCollector: this.traceCollector,
             });

package/dist/api/handlers/stream.handler.js

@@ -25,7 +25,7 @@ import { TokenBudgetExhaustedError } from '../../token/token-budget-guard.js';
 import { SSEEmitter } from '../../sse/sse-emitter.js';
 import { resolveExecutionContext } from '../../governance/governance-client.js';
 import { resolveSkillInputFromInvokeInput } from '../../registry/skill-io-guard.js';
-import { ErrorCodes } from '@gt-fe/eap-contracts';
+import { ErrorCodes } from '@eap/contracts';
 import { classifyRuntimeError } from '../../utils/http-error.js';
 import { toLoadedToolMap } from '../../tool/loaded-tool-definition.js';
 import { toLoadedSkillMap } from '../../tool/system-prompt-builder.js';
@@ -200,6 +200,9 @@ export class StreamOrchestrator {
         const promptRoots = this.graphLoader
             ? await this.graphLoader.resolvePromptRoots(agentCode, req.agentVersion)
             : [];
+        const agentDir = this.graphLoader
+            ? (await this.graphLoader.resolveAgentDir(agentCode, req.agentVersion)) ?? undefined
+            : undefined;
         // 组装 GraphState：有 Checkpoint 历史则只追加本轮 user，避免双重 append
         const history = messageRecordsToGraphMessages(sessionContext.messages);
         const messages = await buildTurnGraphMessages({
@@ -232,6 +235,7 @@ export class StreamOrchestrator {
                 skillDefinitions,
                 skillInput,
                 promptRoots,
+                agentDir,
                 traceId: resolveTraceId(req),
                 traceCollector: this.traceCollector,
             });

package/dist/api/routes/agent.routes.d.ts

@@ -4,12 +4,12 @@
  * 生产环境由 Hosting 提供对外 HTTP；本模块供 `EAP_DEV_HTTP=1` 本地调试。
  */
 import type { ServerResponse } from 'node:http';
-import type { InvokeRequest as ContractInvokeRequest, InvokeResponse as ContractInvokeResponse } from '@gt-fe/eap-contracts';
+import type { InvokeRequest as ContractInvokeRequest, InvokeResponse as ContractInvokeResponse } from '@eap/contracts';
 import type { ITaskManager } from '../../task/task.service.js';
 import type { SessionService } from '../../session/session.service.js';
 import type { IStateGraphEngine } from '../../graph/contracts/executable-graph.js';
 import type { SSEEmitter } from '../../sse/sse-emitter.js';
-export type { InvokeConfig, InvokeResponseData } from '@gt-fe/eap-contracts';
+export type { InvokeConfig, InvokeResponseData } from '@eap/contracts';
 /**
  * dev HTTP 层 Invoke 请求（扩展 userId，Hosting 从 auth 注入）
  */

package/dist/common/types.d.ts

@@ -1,8 +1,8 @@
 /**
  * eap-runtime 内部共享类型定义
  *
- * 本文件定义 Runtime 模块内部使用的类型，与 @gt-fe/eap-contracts 中的公共协议类型互补但不重复。
- * - @gt-fe/eap-contracts 定义跨模块的公共协议（如 Task 实体、Session 实体、Agent Manifest）
+ * 本文件定义 Runtime 模块内部使用的类型，与 @eap/contracts 中的公共协议类型互补但不重复。
+ * - @eap/contracts 定义跨模块的公共协议（如 Task 实体、Session 实体、Agent Manifest）
  * - 本文件定义 Runtime 执行引擎内部流转的配置、上下文、枚举等
  */
 /**
@@ -32,7 +32,7 @@ export declare const DEFAULT_RUNTIME_CONFIG: RuntimeConfig;
 /**
  * 执行上下文 — 贯穿 Graph 执行生命周期（Runtime 内部）
  *
- * 平台级 ExecutionContext（@gt-fe/eap-contracts）由 Hosting/eap dev 注入；
+ * 平台级 ExecutionContext（@eap/contracts）由 Hosting/eap dev 注入；
  * 本类型在 Task 创建后组装，供引擎子服务使用。
  */
 export interface RuntimeRunContext {
@@ -62,7 +62,7 @@ export type TaskStatus = 'pending' | 'running' | 'waiting_hitl' | 'success' | 'f
 /**
  * Runtime 执行上下文绑定状态（非平台 Session 生命周期）
  *
- * 平台 Session 三态（active/paused/closed）由 Hosting 管理，见 @gt-fe/eap-contracts。
+ * 平台 Session 三态（active/paused/closed）由 Hosting 管理，见 @eap/contracts。
  * Runtime 仅在引擎内标记执行上下文是否仍可绑定：`active` | `archived`。
  */
 export type ExecutionSessionBindingStatus = 'active' | 'archived';
@@ -77,7 +77,7 @@ export type MessageRole = 'user' | 'assistant' | 'system' | 'tool';
 /**
  * 单次 LLM/Tool 调用的 Token 消耗记录
  *
- * 与 @gt-fe/eap-contracts.TokenUsage 的区别：
+ * 与 @eap/contracts.TokenUsage 的区别：
  * - contracts 版本是 Task 级聚合结果（含 byNode/byModel）
  * - 本类型是单次调用粒度的原始记录，用于 Runtime 内部累计和 stats.node_token 事件
  */

package/dist/common/types.js

@@ -1,8 +1,8 @@
 /**
  * eap-runtime 内部共享类型定义
  *
- * 本文件定义 Runtime 模块内部使用的类型，与 @gt-fe/eap-contracts 中的公共协议类型互补但不重复。
- * - @gt-fe/eap-contracts 定义跨模块的公共协议（如 Task 实体、Session 实体、Agent Manifest）
+ * 本文件定义 Runtime 模块内部使用的类型，与 @eap/contracts 中的公共协议类型互补但不重复。
+ * - @eap/contracts 定义跨模块的公共协议（如 Task 实体、Session 实体、Agent Manifest）
  * - 本文件定义 Runtime 执行引擎内部流转的配置、上下文、枚举等
  */
 /** RuntimeConfig 默认值 */

package/dist/contracts/permission-checker.d.ts

@@ -1,7 +1,7 @@
 /**
  * 权限校验器接口（对齐 06-governance R16.8）
  */
-import type { ExecutionContext, GovernancePermissionCheckParams, GovernancePermissionCheckResult } from '@gt-fe/eap-contracts';
+import type { ExecutionContext, GovernancePermissionCheckParams, GovernancePermissionCheckResult } from '@eap/contracts';
 /**
  * IPermissionChecker — Runtime 执行期权限校验
  */

package/dist/contracts/trace-collector.d.ts

@@ -84,7 +84,7 @@ export interface ExecutionNodeEvent {
     /** 节点类型 */
     type: 'start' | 'llm' | 'tool' | 'skill' | 'condition' | 'hitl' | 'end';
     /** 工具运行环境（type=tool） */
-    toolRuntime?: 'local' | 'server' | 'both' | 'mock';
+    toolRuntime?: 'local' | 'server' | 'both';
     /** Agent 对外主键 */
     agentCode?: string;
     /** 输入数据 */

package/dist/governance/governance-client.d.ts

@@ -1,7 +1,7 @@
 /**
  * 治理服务 HTTP 客户端（06-governance validateToken / checkPermission）
  */
-import type { ExecutionContext, GovernancePermissionCheckParams, GovernancePermissionCheckResult } from '@gt-fe/eap-contracts';
+import type { ExecutionContext, GovernancePermissionCheckParams, GovernancePermissionCheckResult } from '@eap/contracts';
 export interface HttpGovernanceClientOptions {
     baseUrl: string;
     timeout?: number;

package/dist/governance/governance-client.js

@@ -40,25 +40,29 @@ export class HttpGovernanceClient {
             if (response.status === 503 || response.status >= 500) {
                 return { allowed: false, reason: 'GOVERNANCE_UNAVAILABLE' };
             }
+            if (response.status === 403) {
+                return { allowed: false, reason: await readDenyReason(response, 'NO_PERMISSION') };
+            }
             if (!response.ok) {
-                if (response.status === 403) {
-                    try {
-                        const errBody = (await response.json());
-                        const errData = errBody.data ?? errBody;
-                        return { allowed: false, reason: errData.reason ?? 'NO_PERMISSION' };
-                    }
-                    catch {
-                        return { allowed: false, reason: 'NO_PERMISSION' };
-                    }
-                }
-                return { allowed: false, reason: 'NO_PERMISSION' };
+                // 401/404/400 等是 Runtime→Foundation hop 失败，不是 C2「没工具权」
+                return { allowed: false, reason: 'GOVERNANCE_UNAVAILABLE' };
+            }
+            let body;
+            try {
+                body = (await response.json());
+            }
+            catch {
+                return { allowed: false, reason: 'GOVERNANCE_UNAVAILABLE' };
             }
-            const body = (await response.json());
             const data = body.data ?? body;
-            return {
-                allowed: data.allowed === true,
-                reason: data.allowed ? undefined : (data.reason ?? 'NO_PERMISSION'),
-            };
+            if (data.allowed === true) {
+                return { allowed: true };
+            }
+            const reason = asDenyReason(data.reason);
+            if (data.allowed === false && reason && reason !== 'GOVERNANCE_UNAVAILABLE') {
+                return { allowed: false, reason };
+            }
+            return { allowed: false, reason: 'GOVERNANCE_UNAVAILABLE' };
         }
         catch {
             clearTimeout(timeoutId);
@@ -66,6 +70,26 @@ export class HttpGovernanceClient {
         }
     }
 }
+const DENY_REASONS = new Set([
+    'NO_PERMISSION',
+    'DATA_SCOPE_DENIED',
+    'GOVERNANCE_UNAVAILABLE',
+]);
+function asDenyReason(value) {
+    return typeof value === 'string' && DENY_REASONS.has(value)
+        ? value
+        : undefined;
+}
+async function readDenyReason(response, fallback) {
+    try {
+        const errBody = (await response.json());
+        const errData = errBody.data ?? errBody;
+        return asDenyReason(errData.reason) ?? fallback;
+    }
+    catch {
+        return fallback;
+    }
+}
 /** 本地/测试：跳过远程校验 */
 export class AllowAllGovernanceClient {
     async checkPermission(_ctx, _params) {

package/dist/governance/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * 权限校验 — 对齐 06-governance R16.8
  */
-export type { CallerType, ExecutionContext, GovernancePermissionCheckParams, GovernancePermissionCheckResult, PermissionAction, PermissionDenyReason, PermissionResourceType, } from '@gt-fe/eap-contracts';
+export type { CallerType, ExecutionContext, GovernancePermissionCheckParams, GovernancePermissionCheckResult, PermissionAction, PermissionDenyReason, PermissionResourceType, } from '@eap/contracts';
 export type { IGovernanceClient } from './governance-client.js';
 export { HttpGovernanceClient, AllowAllGovernanceClient, resolveExecutionContext, } from './governance-client.js';
-export { assertToolPermission, assertSkillPermission, PermissionDeniedError, GovernanceUnavailableError, } from './permission-guard.js';
+export { assertToolPermission, assertSkillPermission, permissionMessage, PermissionDeniedError, GovernanceUnavailableError, } from './permission-guard.js';

package/dist/governance/index.js

@@ -2,4 +2,4 @@
  * 权限校验 — 对齐 06-governance R16.8
  */
 export { HttpGovernanceClient, AllowAllGovernanceClient, resolveExecutionContext, } from './governance-client.js';
-export { assertToolPermission, assertSkillPermission, PermissionDeniedError, GovernanceUnavailableError, } from './permission-guard.js';
+export { assertToolPermission, assertSkillPermission, permissionMessage, PermissionDeniedError, GovernanceUnavailableError, } from './permission-guard.js';

package/dist/governance/permission-guard.d.ts

@@ -1,7 +1,7 @@
 /**
  * 执行期 Tool 权限守卫
  */
-import type { ExecutionContext, PermissionDenyReason } from '@gt-fe/eap-contracts';
+import type { ExecutionContext, PermissionDenyReason } from '@eap/contracts';
 import type { IGovernanceClient } from './governance-client.js';
 export declare class GovernanceUnavailableError extends Error {
     readonly reason: PermissionDenyReason;
@@ -11,6 +11,7 @@ export declare class PermissionDeniedError extends Error {
     readonly reason: PermissionDenyReason;
     constructor(reason?: PermissionDenyReason, message?: string);
 }
+export declare function permissionMessage(kind: 'tool' | 'skill', reason: PermissionDenyReason): string;
 export declare function assertToolPermission(client: IGovernanceClient | undefined, ctx: ExecutionContext, toolId: string, options?: {
     dataScope?: 'user-bound' | 'department-bound' | 'global';
     resourceOwnerId?: string;

package/dist/governance/permission-guard.js

@@ -3,7 +3,7 @@
  */
 export class GovernanceUnavailableError extends Error {
     reason = 'GOVERNANCE_UNAVAILABLE';
-    constructor(message = 'Governance service unavailable') {
+    constructor(message = '治理服务不可用') {
         super(message);
         this.name = 'GovernanceUnavailableError';
     }
@@ -11,11 +11,18 @@ export class GovernanceUnavailableError extends Error {
 export class PermissionDeniedError extends Error {
     reason;
     constructor(reason = 'NO_PERMISSION', message) {
-        super(message ?? reason);
+        super(message ?? permissionMessage('tool', reason));
         this.name = 'PermissionDeniedError';
         this.reason = reason;
     }
 }
+export function permissionMessage(kind, reason) {
+    if (reason === 'DATA_SCOPE_DENIED')
+        return '数据范围不足';
+    if (reason === 'GOVERNANCE_UNAVAILABLE')
+        return '治理服务不可用';
+    return kind === 'skill' ? '用户无该 Skill 使用权限' : '用户无该 Tool 执行权限';
+}
 export async function assertToolPermission(client, ctx, toolId, options) {
     if (!client) {
         return;
@@ -34,7 +41,8 @@ export async function assertToolPermission(client, ctx, toolId, options) {
         throw new GovernanceUnavailableError();
     }
     if (!result.allowed) {
-        throw new PermissionDeniedError(result.reason ?? 'NO_PERMISSION');
+        const reason = result.reason ?? 'NO_PERMISSION';
+        throw new PermissionDeniedError(reason, permissionMessage('tool', reason));
     }
 }
 /** Skill 激活守卫（04 R15.3） */
@@ -54,6 +62,7 @@ export async function assertSkillPermission(client, ctx, skillId) {
         throw new GovernanceUnavailableError();
     }
     if (!result.allowed) {
-        throw new PermissionDeniedError(result.reason ?? 'NO_PERMISSION');
+        const reason = result.reason ?? 'NO_PERMISSION';
+        throw new PermissionDeniedError(reason, permissionMessage('skill', reason));
     }
 }

package/dist/graph/adapters/langgraph.adapter.js

@@ -19,13 +19,13 @@ import { fileArtifactFromToolOutput } from '../../tool/file-artifact.js';
 import { EchoLLMProvider } from '../../providers/echo-llm-provider.js';
 import { ConditionEvaluator } from '../condition-evaluator.js';
 import { SystemPromptBuilder, buildToolCatalog, loadedToolsToApiTools } from '../../tool/system-prompt-builder.js';
-import { resolveJailRoots } from '../../tool/harness-primitives.js';
+import { resolveJailFromState, resolveJailRoots } from '../../tool/harness-primitives.js';
 import os from 'node:os';
 import { bindSelectedSkill } from '../nodes/skill-bind-node.js';
 import { resolveGraphPrompt } from '../resolve-graph-prompt.js';
 import { SkillAuditRecorder } from '../skill-audit-recorder.js';
 import { preloadSkillNotFound } from '../../registry/preload-errors.js';
-import { AppError, ErrorCodes } from '@gt-fe/eap-contracts';
+import { AppError, ErrorCodes } from '@eap/contracts';
 import { isHitlDecision, lastAssistantHasUnansweredToolCalls } from '../hitl/hitl-handler.js';
 import { classifySkillRead } from './skill-read.js';
 import { withGraphSpan } from '../trace-span.js';
@@ -305,6 +305,7 @@ export class LangGraphAdapter {
                 skillRoute: ephemeral(undefined),
                 silentOutput: ephemeral(undefined),
                 promptRoots: ephemeral(undefined),
+                agentDir: ephemeral(undefined),
                 executionContext: ephemeral(undefined),
                 forceToolServer: ephemeral(undefined),
                 traceCollector: ephemeral(undefined),
@@ -799,7 +800,15 @@ export class LangGraphAdapter {
                 const toolCatalog = disableTools ? undefined : buildToolCatalog(loadedTools);
                 const execCtx = state['executionContext'];
                 const userId = (typeof execCtx?.userId === 'string' && execCtx.userId) || state['userId'];
-                const workingDirectory = typeof process.cwd === 'function' ? process.cwd() : undefined;
+                const jail = resolveJailFromState({
+                    agentDir: state['agentDir'],
+                    userId,
+                    executionContext: execCtx,
+                    loadedTools,
+                    skillDefinitions: skillDefs,
+                });
+                const workingDirectory = jail.workdir;
+                const jailRoots = resolveJailRoots(jail);
                 const skillDirs = Object.values(skillDefs ?? {})
                     .filter((skill) => Boolean(skill.bundlePath))
                     .map((skill) => ({
@@ -807,10 +816,6 @@ export class LangGraphAdapter {
                     bundlePath: skill.bundlePath,
                     entryFile: skill.entryFile,
                 }));
-                const jailRoots = resolveJailRoots({
-                    workdir: workingDirectory,
-                    extraRoots: skillDirs.map((s) => s.bundlePath),
-                });
                 const assembled = this.systemPromptBuilder.build({
                     developerPrompt: resolvedPrompt || undefined,
                     skillCatalog: catalog,

package/dist/graph/contracts/executable-graph.d.ts

@@ -2,17 +2,17 @@
  * Executable Graph 类型定义
  *
  * 定义 Graph 引擎核心的可执行图、DSL、节点、边等类型。
- * 与 @gt-fe/eap-contracts 的 GraphDSL 基础类型互补，在 Runtime 层提供更丰富的类型支持。
+ * 与 @eap/contracts 的 GraphDSL 基础类型互补，在 Runtime 层提供更丰富的类型支持。
  *
  * @see design.md §1.4 StateGraph Contract
  * @see requirements.md Requirement 1 AC1-AC2
  */
-import type { GraphDSL as BaseGraphDSL, GraphNode as BaseGraphNode, GraphEdge as BaseGraphEdge, GraphNodeType, GraphConfig } from '@gt-fe/eap-contracts';
+import type { GraphDSL as BaseGraphDSL, GraphNode as BaseGraphNode, GraphEdge as BaseGraphEdge, GraphNodeType, GraphConfig } from '@eap/contracts';
 export type { GraphNodeType, GraphConfig };
 /**
  * RuntimeGraphConfig — Runtime 层扩展的 Graph 配置
  *
- * 在 @gt-fe/eap-contracts GraphConfig 基础上增加 Runtime 执行所需的 maxRetries。
+ * 在 @eap/contracts GraphConfig 基础上增加 Runtime 执行所需的 maxRetries。
  */
 export interface RuntimeGraphConfig extends GraphConfig {
     /** Graph 级默认重试次数（节点级 retry 可覆盖） */
@@ -21,7 +21,7 @@ export interface RuntimeGraphConfig extends GraphConfig {
 /**
  * GraphNode — Runtime 层扩展的节点定义
  *
- * 继承 @gt-fe/eap-contracts 基础 GraphNode，增加 Runtime 执行所需的字段：
+ * 继承 @eap/contracts 基础 GraphNode，增加 Runtime 执行所需的字段：
  * - 重试配置（节点级 maxRetries + 退避策略）
  * - HITL 标记（interrupt_before / interrupt_after）
  * - 描述信息（调试/Trace 用）
@@ -79,7 +79,7 @@ export interface ConditionalBranch {
 /**
  * GraphDSL — Runtime 层扩展的声明式工作流定义
  *
- * 扩展 @gt-fe/eap-contracts 的 BaseGraphDSL，增加条件路由、入口/终止节点等。
+ * 扩展 @eap/contracts 的 BaseGraphDSL，增加条件路由、入口/终止节点等。
  */
 export interface GraphDSL extends Omit<BaseGraphDSL, 'config' | 'nodes' | 'edges'> {
     /** 覆盖节点类型为 Runtime 扩展版本 */
@@ -163,7 +163,7 @@ export interface ExecutableGraph {
     /** 底层引擎内部实例引用（opaque，由 adapter 管理） */
     _engineInstance?: unknown;
 }
-import type { ExecutionContext as PlatformExecutionContext } from '@gt-fe/eap-contracts';
+import type { ExecutionContext as PlatformExecutionContext } from '@eap/contracts';
 /**
  * GraphState — 传入 stream/invoke 的上下文数据
  */
@@ -195,6 +195,8 @@ export interface GraphState {
     silentOutput?: string;
     /** 解析 graph 内 ./prompts/*.md 的根目录（agentDir + 工程根） */
     promptRoots?: string[];
+    /** 预装 Agent 包目录：`{EAP_PREINSTALL_ROOT}/agents/<code>/<ver>` */
+    agentDir?: string;
     activatedSkill?: string | null;
     skillRoute?: string;
     /** bind / invoke 解析出的 Skill 入参；子图 IO 校验读取 */

package/dist/graph/contracts/executable-graph.js

@@ -2,7 +2,7 @@
  * Executable Graph 类型定义
  *
  * 定义 Graph 引擎核心的可执行图、DSL、节点、边等类型。
- * 与 @gt-fe/eap-contracts 的 GraphDSL 基础类型互补，在 Runtime 层提供更丰富的类型支持。
+ * 与 @eap/contracts 的 GraphDSL 基础类型互补，在 Runtime 层提供更丰富的类型支持。
  *
  * @see design.md §1.4 StateGraph Contract
  * @see requirements.md Requirement 1 AC1-AC2

package/dist/graph/hitl/hitl-handler.d.ts

@@ -16,6 +16,9 @@ import type { ISSEEmitter } from '../../sse/contracts/sse-emitter.contract.js';
 import type { GraphState } from '../contracts/executable-graph.js';
 /** HITL 默认等待时长（毫秒）= 300 秒。SSE `hitl.waited.timeout` 对外用秒。 */
 export declare const DEFAULT_HITL_TIMEOUT_MS = 300000;
+/** 超时收口对外文案（Task / Trace / AppError）；枚举走 `hitl_timeout`。 */
+export declare const HITL_TIMEOUT_MESSAGE = "HITL \u786E\u8BA4\u8D85\u65F6";
+export declare const HITL_TIMEOUT_ERROR_CODE = "hitl_timeout";
 /** HITL 超时行为 */
 export type HitlTimeoutBehavior = 'error' | 'cancel' | 'auto-confirm';
 /** HITL 中断配置 */

package/dist/graph/hitl/hitl-handler.js

@@ -17,6 +17,9 @@ import { startGraphSpan, completeGraphSpan } from '../trace-span.js';
 // ─────────────────────────────────────────────
 /** HITL 默认等待时长（毫秒）= 300 秒。SSE `hitl.waited.timeout` 对外用秒。 */
 export const DEFAULT_HITL_TIMEOUT_MS = 300_000;
+/** 超时收口对外文案（Task / Trace / AppError）；枚举走 `hitl_timeout`。 */
+export const HITL_TIMEOUT_MESSAGE = 'HITL 确认超时';
+export const HITL_TIMEOUT_ERROR_CODE = 'hitl_timeout';
 /** HITL 超时错误（保留类型；timer 不再 throw，resume 逾期改走 AppError） */
 export class HitlTimeoutError extends Error {
     taskId;
@@ -444,7 +447,7 @@ export class HitlHandler {
                     const hitlSpanId = waiting.hitlSpanId ?? persisted.hitlSpanId;
                     await completeGraphSpan(checkpoint.state, hitlSpanId, {
                         status: 'failed',
-                        error: 'hitl_timeout',
+                        error: HITL_TIMEOUT_MESSAGE,
                     }, liveCollector);
                 }
                 return timeoutEvent;

package/dist/graph/nodes/tool-node.js

@@ -9,6 +9,7 @@
  * @see design.md §1.4 ToolNode: LangGraph的ToolNode封装
  * @see requirements.md Requirement 8 AC1, AC3, AC5
  */
+import { resolveJailFromState } from '../../tool/harness-primitives.js';
 import { isHitlDecision, unwrapHitlPaused } from '../hitl/hitl-handler.js';
 import { ToolConfirmationInterceptor } from '../../tool/tool-confirmation.js';
 import { resolveCheckpointThreadId } from '../../session/persist-turn-messages.js';
@@ -19,6 +20,19 @@ function skillDirsFromState(state) {
         .filter((skill) => Boolean(skill.bundlePath))
         .map((skill) => ({ skillId: skill.skillId, bundlePath: skill.bundlePath }));
 }
+function resolveActiveSkillDir(state) {
+    const defs = state['skillDefinitions'];
+    if (!defs)
+        return undefined;
+    const activated = state['activatedSkill'];
+    if (typeof activated === 'string' && defs[activated]?.bundlePath) {
+        return defs[activated].bundlePath;
+    }
+    const paths = Object.values(defs)
+        .map((skill) => skill.bundlePath)
+        .filter((p) => Boolean(p));
+    return paths.length === 1 ? paths[0] : undefined;
+}
 export class ToolNode {
     orchestrator;
     injector;
@@ -53,7 +67,15 @@ export class ToolNode {
         }
         const loadedTools = state['loadedTools'];
         const skillDirs = skillDirsFromState(state);
-        const jailExtraRoots = skillDirs.map((dir) => dir.bundlePath);
+        const jail = resolveJailFromState({
+            agentDir: state['agentDir'],
+            userId: state['userId'],
+            executionContext: state['executionContext'],
+            loadedTools,
+            skillDefinitions: state['skillDefinitions'],
+        });
+        const jailExtraRoots = jail.extraRoots ?? [];
+        const skillDir = resolveActiveSkillDir(state);
         // 4. 转换为 ToolCallRequest[]（附带 manifest 路由字段）
         const requests = lastAssistantMessage.toolCalls.map((tc) => {
             const loaded = loadedTools?.[tc.name];
@@ -73,7 +95,9 @@ export class ToolNode {
                 ...(loaded?.manifest.version ? { toolVersion: loaded.manifest.version } : {}),
                 correlationId,
                 taskId,
+                ...(jail.workdir ? { jailWorkdir: jail.workdir } : {}),
                 ...(jailExtraRoots.length > 0 ? { jailExtraRoots } : {}),
+                ...(skillDir ? { skillDir } : {}),
             };
         });
         const executionContext = state['executionContext'];
@@ -161,7 +185,8 @@ export class ToolNode {
                                 toolName: req.toolName,
                                 content: `用户拒绝执行工具 ${req.toolName}`,
                                 success: false,
-                                error: 'hitl_rejected',
+                                error: `用户拒绝执行工具 ${req.toolName}`,
+                                errorCode: 'hitl_rejected',
                             };
                 }
                 else {

package/dist/index.d.ts

@@ -16,8 +16,8 @@ export * from './common/index.js';
 export * from './registry/index.js';
 export * from './providers/index.js';
 export type { ITraceCollector, TraceEvent, TraceSession, ExecutionFlowEvent, ExecutionNodeEvent, TraceLinkEvent, TraceLinkNodeEvent, } from './contracts/trace-collector.js';
-export type { ExecutionContext, CallerType, GovernancePermissionCheckParams, GovernancePermissionCheckResult, PermissionDenyReason, } from '@gt-fe/eap-contracts';
-export { HttpGovernanceClient, AllowAllGovernanceClient, resolveExecutionContext, assertToolPermission, assertSkillPermission, PermissionDeniedError, GovernanceUnavailableError, } from './governance/index.js';
+export type { ExecutionContext, CallerType, GovernancePermissionCheckParams, GovernancePermissionCheckResult, PermissionDenyReason, } from '@eap/contracts';
+export { HttpGovernanceClient, AllowAllGovernanceClient, resolveExecutionContext, assertToolPermission, assertSkillPermission, permissionMessage, PermissionDeniedError, GovernanceUnavailableError, } from './governance/index.js';
 export type { IGovernanceClient } from './governance/index.js';
 export { FileLlmTurnLog, InMemoryLlmTurnLog, createFileLlmTurnLogFromEnv, maskApiKey, resolveLlmTurnDir, } from './debug/llm-turn-log.js';
 export { PostgresLlmTurnLog } from './debug/pg-llm-turn-log.js';

package/dist/index.js

@@ -29,6 +29,6 @@ export * from './common/index.js';
 export * from './registry/index.js';
 // LLM Providers
 export * from './providers/index.js';
-export { HttpGovernanceClient, AllowAllGovernanceClient, resolveExecutionContext, assertToolPermission, assertSkillPermission, PermissionDeniedError, GovernanceUnavailableError, } from './governance/index.js';
+export { HttpGovernanceClient, AllowAllGovernanceClient, resolveExecutionContext, assertToolPermission, assertSkillPermission, permissionMessage, PermissionDeniedError, GovernanceUnavailableError, } from './governance/index.js';
 export { FileLlmTurnLog, InMemoryLlmTurnLog, createFileLlmTurnLogFromEnv, maskApiKey, resolveLlmTurnDir, } from './debug/llm-turn-log.js';
 export { PostgresLlmTurnLog } from './debug/pg-llm-turn-log.js';

package/dist/providers/echo-llm-provider.js

@@ -7,8 +7,8 @@
  * - `call:echo-tool {"text":"hi"}` → arguments 使用解析后的 JSON
  * - `call:echo-tool hi` → arguments 兜底为 `{ text: 'hi' }`
  *
- * 仅用于本地闭环 (`EAP_TOOL_EXECUTION_MODE=mock`) 下驱动 ToolNode，
- * 让开发者无需接入真实 LLM 即可完成 tool 调用链路验证。
+ * 仅用于本地闭环（无真实 LLM）下驱动 ToolNode，
+ * 让开发者无需接入模型即可完成 tool 调用链路验证。
  */
 function parseSyntheticToolCall(content) {
     if (!content)

package/dist/providers/local-llm-provider.d.ts

@@ -4,7 +4,7 @@
  */
 import type { ILLMProvider } from '../graph/nodes/llm-node.js';
 import type { ILlmTurnLog } from '../debug/llm-turn-log.js';
-import { type ModelCallDefaults } from '@gt-fe/eap-contracts';
+import { type ModelCallDefaults } from '@eap/contracts';
 export interface LocalLlmConnection {
     baseUrl: string;
     apiKey: string;

package/dist/providers/local-llm-provider.js

@@ -2,7 +2,7 @@
  * 本地多模型 LLM：按节点 model 选网关。仅 dev。
  * 连接表里只带 apiKeyEnv，密钥从 process.env 读取，不进 JSON。
  */
-import { mergeModelCallParams } from '@gt-fe/eap-contracts';
+import { mergeModelCallParams } from '@eap/contracts';
 import { HttpLLMProvider } from './http-llm-provider.js';
 export const LLM_CONNECTIONS_ENV = 'EAP_LLM_CONNECTIONS';
 export function parseLocalLlmConnectionRefs(env = process.env) {

package/dist/providers/routing-llm-provider.js

@@ -11,7 +11,7 @@
  * - 支持任意 OpenAI 兼容 API（OpenAI / DeepSeek / 本地 Ollama 等）
  * - 连接配置由 Foundation 统一管理，Runtime 无感知
  */
-import { mergeModelCallParams } from '@gt-fe/eap-contracts';
+import { mergeModelCallParams } from '@eap/contracts';
 import { EchoLLMProvider } from './echo-llm-provider.js';
 import { HttpLLMProvider } from './http-llm-provider.js';
 export class RoutingLLMProvider {

package/dist/registry/agent-models.d.ts

@@ -1 +1 @@
-export { resolveDeclaredModels, resolveAgentDefaultModel, resolveAgentModelAllowlist, } from '@gt-fe/eap-contracts';
+export { resolveDeclaredModels, resolveAgentDefaultModel, resolveAgentModelAllowlist, } from '@eap/contracts';

package/dist/registry/agent-models.js

@@ -1 +1 @@
-export { resolveDeclaredModels, resolveAgentDefaultModel, resolveAgentModelAllowlist, } from '@gt-fe/eap-contracts';
+export { resolveDeclaredModels, resolveAgentDefaultModel, resolveAgentModelAllowlist, } from '@eap/contracts';

package/dist/registry/agent-registry-client.d.ts

@@ -1,7 +1,7 @@
 /**
  * Agent Registry 客户端 — 从 foundation-service 拉取 Agent 定义
  */
-/** Agent 清单（与 @gt-fe/eap-contracts AgentManifest 对齐） */
+/** Agent 清单（与 @eap/contracts AgentManifest 对齐） */
 export interface AgentManifest {
     id: string;
     name: string;