@gt-fe/eap-runtime 0.0.25 → 0.0.27

package/dist/registry/deployment-snapshot.d.ts

@@ -28,7 +28,7 @@ export interface SnapshotSkillRef {
     name?: string;
     version?: string;
     description?: string;
-    /** 可选：对应 skill 清单文件内容 sha256 */
+    /** 可选；Runtime 加载不比对。完整性由 Agent 包 / Hosting 预装负责 */
     sha256?: string;
 }
 export interface AgentSnapshotMeta {

package/dist/registry/deployment-snapshot.js

@@ -583,15 +583,6 @@ export class FileSystemDeploymentSnapshot {
             }
             if (!manifest || !manifestPath)
                 continue;
-            const isUserOverridePath = bundlePath.includes('/users/') || bundlePath.includes('\\users\\');
-            const isAuthorOverlay = extraRoots.some((root) => root && isPathInside(root, bundlePath));
-            if (ref.sha256 &&
-                !isUserOverridePath &&
-                !isAuthorOverlay &&
-                manifestPath.endsWith('.json')) {
-                const actual = await sha256OfFile(manifestPath);
-                await warnIfDigestMismatch(ref.sha256, actual, `skill ${ref.skillId}`, { path: manifestPath }, this.flags.requireChecksum || isRequireChecksum());
-            }
             const skillId = String(ref.skillId);
             return {
                 skillId,

package/dist/tool/harness-primitives.js

@@ -34,16 +34,29 @@ function harnessDefinitions() {
             manifest: {
                 id: 'builtin:read_file',
                 name: 'read_file',
-                description: '读取当前用户目录或预装 tools/skills 内的文本。要用某个技能时读该技能文件夹下的 SKILL.md。超限会截断并注明。',
+                description: '读取文本文件，成功时工具结果就是文件正文（纯文本，不是 JSON）。可读当前用户目录或预装 tools/skills；要用技能时读该技能目录下的 SKILL.md。大文件先整段读，若被截断（正文末尾会注明 truncated），再用 offset/limit 分段。路径越权或文件不存在会失败。不要用来读图/PDF 等二进制。写文件请用 write_file 或 append_to_file。',
                 ...common,
             },
             inputSchema: {
                 type: 'object',
+                additionalProperties: false,
                 required: ['path'],
                 properties: {
-                    path: { type: 'string', description: '相对工作目录或技能根的路径' },
-                    offset: { type: 'integer', description: '从第几行开始读，从 1 起。省略则从头。' },
-                    limit: { type: 'integer', description: '最多读多少行。省略则读到末尾或字节上限。' },
+                    path: {
+                        type: 'string',
+                        minLength: 1,
+                        description: '相对路径，例如 notes/todo.md 或 some-skill/SKILL.md。不能用 .. 跳出允许目录。',
+                    },
+                    offset: {
+                        type: 'integer',
+                        minimum: 1,
+                        description: '从第几行开始读，从 1 起。省略则从头。只在大文件分段时用。',
+                    },
+                    limit: {
+                        type: 'integer',
+                        minimum: 1,
+                        description: '最多读多少行。省略则读到末尾或字节上限。只在大文件分段时用。',
+                    },
                 },
             },
         },
@@ -53,15 +66,49 @@ function harnessDefinitions() {
             manifest: {
                 id: 'builtin:write_file',
                 name: 'write_file',
-                description: '写入当前用户目录（含用户自己的 skills）。预装 tools / skills 只读。',
+                description: '把文本整份写入当前用户目录（含用户自己的 skills）。没有该文件则创建；已有文件会整份换成 content，不是改某一行。只要在末尾加内容请用 append_to_file。不能写预装 tools/skills，不能写 .assembly.json 等平台文件。成功时工具结果是 JSON：{"ok":true,"path":"相对用户目录的路径","bytesWritten":字节数}。路径越权或禁写文件名会失败。',
                 ...common,
             },
             inputSchema: {
                 type: 'object',
+                additionalProperties: false,
                 required: ['path', 'content'],
                 properties: {
-                    path: { type: 'string' },
-                    content: { type: 'string' },
+                    path: {
+                        type: 'string',
+                        minLength: 1,
+                        description: '相对当前用户目录的路径，例如 notes/todo.md。不能写预装 tools/skills。',
+                    },
+                    content: {
+                        type: 'string',
+                        description: '文件的完整新内容。会覆盖原文件全部内容。',
+                    },
+                },
+            },
+        },
+        {
+            toolId: 'builtin:append_to_file',
+            name: 'append_to_file',
+            manifest: {
+                id: 'builtin:append_to_file',
+                name: 'append_to_file',
+                description: '在当前用户目录的文件末尾追加文本，不覆盖已有内容。没有该文件则创建。不要用它整份改写文件，那是 write_file。不能写预装 tools/skills，不能写 .assembly.json 等平台文件。成功时工具结果是 JSON：{"ok":true,"path":"相对用户目录的路径","bytesWritten":本次追加字节数}。路径越权或禁写文件名会失败。',
+                ...common,
+            },
+            inputSchema: {
+                type: 'object',
+                additionalProperties: false,
+                required: ['path', 'content'],
+                properties: {
+                    path: {
+                        type: 'string',
+                        minLength: 1,
+                        description: '相对当前用户目录的路径，例如 notes/todo.md。不能写预装 tools/skills。',
+                    },
+                    content: {
+                        type: 'string',
+                        description: '接到文件末尾的文本。不会删除或替换原有内容。',
+                    },
                 },
             },
         },
@@ -199,10 +246,10 @@ export function resolveJailRoots(options) {
     }
     return roots;
 }
-async function writeFileNoFollow(target, content) {
+async function writeFileNoFollow(target, content, append = false) {
     const flags = fsConstants.O_WRONLY |
         fsConstants.O_CREAT |
-        fsConstants.O_TRUNC |
+        (append ? fsConstants.O_APPEND : fsConstants.O_TRUNC) |
         (fsConstants.O_NOFOLLOW ?? 0);
     let handle;
     try {
@@ -216,7 +263,8 @@ async function writeFileNoFollow(target, content) {
         throw err;
     }
     try {
-        await handle.writeFile(content, 'utf8');
+        const { bytesWritten } = await handle.write(content, undefined, 'utf8');
+        return bytesWritten;
     }
     finally {
         await handle.close();
@@ -408,7 +456,9 @@ export class HarnessPrimitiveExecutor {
                 case 'read_file':
                     return await this.readFile(request);
                 case 'write_file':
-                    return await this.writeFile(request);
+                    return await this.writeFile(request, false);
+                case 'append_to_file':
+                    return await this.writeFile(request, true);
                 case 'execute_command':
                     return await this.executeCommand(request);
                 default:
@@ -420,7 +470,7 @@ export class HarnessPrimitiveExecutor {
         }
     }
     async readFile(request) {
-        const filePath = String(request.arguments.path ?? request.arguments.file ?? '');
+        const filePath = String(request.arguments.path ?? '');
         const workdir = this.workdirFor(request);
         const located = locateSkillRelativeRead(filePath, workdir, request.skillDir, this.extraRootsFor(request));
         const target = resolveJailedPath(located.path, this.rootsFor(request), {
@@ -459,7 +509,7 @@ export class HarnessPrimitiveExecutor {
         }
         return ok(request, text);
     }
-    async writeFile(request) {
+    async writeFile(request, append) {
         const filePath = String(request.arguments.path ?? '');
         const content = String(request.arguments.content ?? '');
         const workdir = this.requireWorkdir(request);
@@ -474,8 +524,8 @@ export class HarnessPrimitiveExecutor {
         if (PROTECTED_WRITE_NAMES.has(path.basename(recast))) {
             throw new Error(`禁止写入平台文件：${path.basename(recast)}`);
         }
-        await writeFileNoFollow(recast, content);
-        return ok(request, JSON.stringify({ ok: true, path: path.relative(workdir, recast) }));
+        const bytesWritten = await writeFileNoFollow(recast, content, append);
+        return ok(request, JSON.stringify({ ok: true, path: path.relative(workdir, recast), bytesWritten }));
     }
     async executeCommand(request) {
         const command = substituteSkillDir(String(request.arguments.command ?? '').trim(), request.skillDir);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gt-fe/eap-runtime",
-  "version": "0.0.25",
+  "version": "0.0.27",
   "description": "Enterprise Agent Platform — Runtime核心：Graph执行引擎、Task生命周期、Session管理、Checkpoint持久化",
   "type": "module",
   "main": "dist/index.js",
@@ -20,7 +20,7 @@
     "ioredis": "^5.4.0",
     "pg": "^8.13.0",
     "yaml": "^2.6.1",
-    "@gt-fe/eap-contracts": "0.0.14"
+    "@gt-fe/eap-contracts": "0.0.15"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",