@gt-fe/eap-runtime 0.0.15 → 0.0.16

package/README.md

@@ -163,7 +163,7 @@ DSL / 契约细节见 `.kiro/specs/04-runtime-core/design.md` §1.4 与 `src/gra
 |------|------|------|
 | `EAP_PREINSTALL_ROOT` | — | 预装根；也可用 `GraphLoader({ preinstallRoot })` |
 | `EAP_PRELOAD_REQUIRE_READY` | 关 | 缺 `.ready` → `runtime.preload.missing` |
-| `EAP_PRELOAD_REQUIRE_CHECKSUM` | 关 | snapshot 须含 sha256 或 artifacts |
+| `EAP_PRELOAD_REQUIRE_CHECKSUM` | 关 | snapshot 须含 sha256 或 artifacts。加载期比对文件摘要，不匹配则 warn、不中断 |
 | `EAP_PRELOAD_USER_SKILL_OVERRIDE` | 关 | `users` 优先于 `shared` |
 | `EAP_PRELOAD_VALIDATE_SKILL_IO` | 关 | 校验 Skill `inputDef.required`（`state.skillInput`） |
 | `EAP_PRELOAD_DEFINITION_CACHE` | 有预装时开 | 定义缓存；`0`/`false` 关闭，`1`/`true` 强制开 |

package/dist/registry/deployment-snapshot.js

@@ -17,6 +17,7 @@ import { parseSkillMd } from '@gt-fe/eap-contracts';
 import { findSkillEntryFile } from './skill-tree.js';
 import { preloadMissing, preloadPackageCorrupt, } from './preload-errors.js';
 import { isRequireChecksum, resolvePreloadBehaviorFlags, } from './preload-flags.js';
+import { emitRuntimeLog } from '../common/logger.js';
 async function pathExists(p) {
     try {
         await access(p, fsConstants.F_OK);
@@ -115,17 +116,19 @@ async function findDigestMatch(items, expectedRaw) {
     }
     return undefined;
 }
-async function assertDigestMatch(expectedRaw, actualHex, label, details) {
+async function warnIfDigestMismatch(expectedRaw, actualHex, label, details) {
     const expected = normalizeDigest(expectedRaw);
     if (!expected)
         return;
-    if (expected !== actualHex.toLowerCase()) {
-        throw preloadPackageCorrupt(`预装校验和不匹配: ${label}`, {
-            expected,
-            actual: actualHex.toLowerCase(),
-            ...details,
-        });
-    }
+    const actual = actualHex.toLowerCase();
+    if (expected === actual)
+        return;
+    emitRuntimeLog('warn', 'preload', `预装校验和不匹配: ${label}`, {
+        event: 'runtime.preload.digest_mismatch',
+        expected,
+        actual,
+        ...details,
+    });
 }
 async function pickLatestVersionDir(parent) {
     if (!(await pathExists(parent)))
@@ -358,10 +361,14 @@ export class FileSystemDeploymentSnapshot {
                 const raw = (await readTextFile(pkgFile))?.trim() ?? '';
                 const fileDigest = normalizeDigest(raw);
                 if (!fileDigest) {
-                    throw preloadPackageCorrupt(`.package.sha256 内容非法`, { path: pkgFile });
+                    emitRuntimeLog('warn', 'preload', '.package.sha256 内容非法', {
+                        event: 'runtime.preload.digest_mismatch',
+                        path: pkgFile,
+                    });
                 }
-                if (fileDigest !== expectedPkg) {
-                    throw preloadPackageCorrupt(`snapshot.sha256 与 .package.sha256 不一致（以 snapshot 为准核对）`, {
+                else if (fileDigest !== expectedPkg) {
+                    emitRuntimeLog('warn', 'preload', 'snapshot.sha256 与 .package.sha256 不一致', {
+                        event: 'runtime.preload.digest_mismatch',
                         expected: expectedPkg,
                         actual: fileDigest,
                         path: pkgFile,
@@ -387,7 +394,7 @@ export class FileSystemDeploymentSnapshot {
                 throw preloadPackageCorrupt(`artifacts 指向的文件不存在: ${rel}`, { path: full });
             }
             const actual = await sha256OfFile(full);
-            await assertDigestMatch(expected, actual, `artifact ${rel}`, { path: full });
+            await warnIfDigestMismatch(expected, actual, `artifact ${rel}`, { path: full });
         }
     }
     async resolveAgentDir(agentCode, version) {
@@ -492,7 +499,7 @@ export class FileSystemDeploymentSnapshot {
             if (ref.sha256) {
                 const matched = await findDigestMatch(existingManifests, ref.sha256);
                 if (!matched) {
-                    await assertDigestMatch(ref.sha256, await sha256OfFile(existingManifests[0].path), `tool ${ref.name}`, { path: existingManifests[0].path });
+                    await warnIfDigestMismatch(ref.sha256, await sha256OfFile(existingManifests[0].path), `tool ${ref.name}`, { path: existingManifests[0].path });
                 }
                 chosen = matched ?? existingManifests[0];
             }
@@ -564,9 +571,12 @@ export class FileSystemDeploymentSnapshot {
                 continue;
             const isUserOverridePath = bundlePath.includes('/users/') || bundlePath.includes('\\users\\');
             const isAuthorOverlay = extraRoots.some((root) => root && isPathInside(root, bundlePath));
-            if (ref.sha256 && !isUserOverridePath && !isAuthorOverlay && manifestPath.endsWith('.json')) {
+            if (ref.sha256 &&
+                !isUserOverridePath &&
+                !isAuthorOverlay &&
+                manifestPath.endsWith('.json')) {
                 const actual = await sha256OfFile(manifestPath);
-                await assertDigestMatch(ref.sha256, actual, `skill ${ref.skillId}`, { path: manifestPath });
+                await warnIfDigestMismatch(ref.sha256, actual, `skill ${ref.skillId}`, { path: manifestPath });
             }
             const skillId = String(ref.skillId);
             return {

package/dist/registry/preload-flags.d.ts

@@ -5,7 +5,7 @@
  * |------|------|------|
  * | EAP_PRELOAD_REQUIRE_READY | 关 | 强制校验 .ready |
  * | EAP_PRELOAD_VALIDATE_SKILL_IO | **开** | 执行子图前校验 skill inputDef.required；`0`/`false` 关闭 |
- * | EAP_PRELOAD_REQUIRE_CHECKSUM | 关 | snapshot 必须带 sha256 或 artifacts[] |
+ * | EAP_PRELOAD_REQUIRE_CHECKSUM | 关 | snapshot 必须带 sha256 或 artifacts[]（字段存在性）。加载期摘要不匹配为 warn |
  * | EAP_PRELOAD_DEFINITION_CACHE | 有预装时开 | 进程内定义缓存；`0`/`false` 关闭 |
  * | EAP_SKILL_HOT_RELOAD | **dev 开 / server 关** | 已装配 Skill 的目录 mtime 变化则丢缓存；未写入装配名单的目录不进清单 |
  * | EAP_LOCAL_SKILLS_DIR | 关 | 开发态作者源 Skill 根；查找优先于 preinstall，低于 users/ |

package/dist/registry/preload-flags.js

@@ -5,7 +5,7 @@
  * |------|------|------|
  * | EAP_PRELOAD_REQUIRE_READY | 关 | 强制校验 .ready |
  * | EAP_PRELOAD_VALIDATE_SKILL_IO | **开** | 执行子图前校验 skill inputDef.required；`0`/`false` 关闭 |
- * | EAP_PRELOAD_REQUIRE_CHECKSUM | 关 | snapshot 必须带 sha256 或 artifacts[] |
+ * | EAP_PRELOAD_REQUIRE_CHECKSUM | 关 | snapshot 必须带 sha256 或 artifacts[]（字段存在性）。加载期摘要不匹配为 warn |
  * | EAP_PRELOAD_DEFINITION_CACHE | 有预装时开 | 进程内定义缓存；`0`/`false` 关闭 |
  * | EAP_SKILL_HOT_RELOAD | **dev 开 / server 关** | 已装配 Skill 的目录 mtime 变化则丢缓存；未写入装配名单的目录不进清单 |
  * | EAP_LOCAL_SKILLS_DIR | 关 | 开发态作者源 Skill 根；查找优先于 preinstall，低于 users/ |

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gt-fe/eap-runtime",
-  "version": "0.0.15",
-  "description": "Enterprise Agent Platform — Runtime核心：Graph执行引擎、Task生命周期、Session管理、Checkpoint持久化",
+  "version": "0.0.16",
+  "description": "Enterprise Agent Platform \u2014 Runtime\u6838\u5fc3\uff1aGraph\u6267\u884c\u5f15\u64ce\u3001Task\u751f\u547d\u5468\u671f\u3001Session\u7ba1\u7406\u3001Checkpoint\u6301\u4e45\u5316",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",