@gt-fe/eap-runtime 0.0.8 → 0.0.11

package/dist/runtime/storage-profile.js

@@ -6,16 +6,19 @@
  */
 // @ts-expect-error pg 无内置类型；Hosting 侧同样按 any 使用
 import pg from 'pg';
+import path from 'node:path';
 import { Redis } from 'ioredis';
 import { FileCheckpointSaver } from '../checkpoint/file-checkpoint-saver.js';
 import { PostgresCheckpointSaver } from '../checkpoint/pg-checkpoint-saver.js';
 import { RedisCheckpointSaver } from '../checkpoint/redis-checkpoint-saver.js';
 import { CompositeCheckpointSaver } from '../checkpoint/composite-checkpoint-saver.js';
-import { InMemoryCheckpointSaver } from '../checkpoint/in-memory-checkpoint-saver.js';
 import { FileSessionRepository } from '../session/file-session.repository.js';
-import { InMemoryFullMessageRepository } from '../session/message.service.js';
 import { FileMessageRepository } from '../session/file-message.repository.js';
 import { PostgresMessageRepository } from '../session/pg-message.repository.js';
+import { FileLlmTurnLog, resolveLlmTurnDir } from '../debug/llm-turn-log.js';
+import { PostgresLlmTurnLog } from '../debug/pg-llm-turn-log.js';
+import { InMemoryTokenBudgetRepository } from '../token/token-budget.service.js';
+import { PostgresTokenBudgetRepository } from '../token/pg-token-budget.repository.js';
 const { Pool } = pg;
 const VALID_PROFILES = new Set([
     'test',
@@ -23,11 +26,20 @@ const VALID_PROFILES = new Set([
     'integration',
     'production',
 ]);
+function hasDbEnv(env) {
+    return Boolean(env.DATABASE_URL?.trim() || (env.DB_HOST && env.DB_NAME && env.DB_USER));
+}
+function hasRedisEnv(env) {
+    return Boolean(env.REDIS_URL?.trim() || env.REDIS_HOST);
+}
 export function resolveRuntimeStorageProfile(explicit, defaultProfile, env = process.env) {
     const raw = explicit ?? env.EAP_RUNTIME_STORAGE_PROFILE;
     if (raw && VALID_PROFILES.has(raw)) {
         return raw;
     }
+    if (hasDbEnv(env) || hasRedisEnv(env)) {
+        return 'integration';
+    }
     return defaultProfile;
 }
 function requireDbEnv(env) {
@@ -39,12 +51,12 @@ function requireDbEnv(env) {
     if (!env.DB_USER && !env.DATABASE_URL)
         missing.push('DB_USER 或 DATABASE_URL');
     if (missing.length > 0) {
-        throw new Error(`[EAP_RUNTIME_STORAGE_PROFILE] integration/production 缺少数据库配置: ${missing.join(', ')}`);
+        throw new Error(`[EAP_RUNTIME_STORAGE_PROFILE] Redis+PostgreSQL 路径缺少数据库配置: ${missing.join(', ')}`);
     }
 }
 function requireRedisEnv(env) {
     if (!env.REDIS_HOST && !env.REDIS_URL) {
-        throw new Error('[EAP_RUNTIME_STORAGE_PROFILE] integration/production 缺少 REDIS_HOST 或 REDIS_URL（禁止回退 File Checkpoint）');
+        throw new Error('[EAP_RUNTIME_STORAGE_PROFILE] Redis+PostgreSQL 路径缺少 REDIS_HOST 或 REDIS_URL');
     }
 }
 function createPgPoolFromEnv(env) {
@@ -73,44 +85,41 @@ function createRedisFromEnv(env) {
         maxRetriesPerRequest: 1,
     });
 }
+/** 本地 File 存储默认落工程 `.eap/`，可用 EAP_DATA_DIR / EAP_*_DIR 覆盖。 */
+export function resolveDevStorageDirs(env = process.env, cwd = process.cwd()) {
+    const root = env.EAP_DATA_DIR?.trim() || path.join(cwd, '.eap');
+    const checkpointDir = env.EAP_CHECKPOINT_DIR?.trim() || path.join(root, 'checkpoints');
+    const sessionDir = env.EAP_SESSION_DIR?.trim() || path.join(root, 'sessions');
+    const messageDir = env.EAP_MESSAGE_DIR?.trim() || path.join(sessionDir, 'messages');
+    return { checkpointDir, sessionDir, messageDir };
+}
 /**
- * 按 profile 装配 Checkpoint / Session / Message 存储
- *
- * - test: 全内存
- * - dev: File Checkpoint + File Session + File Message
- * - integration/production: Message=PG；Checkpoint=Redis 热 + PG 备；
- *   Session 仓储不落 PG（sessionId 权威在 Hosting.sessions，Runtime 内存采纳）
+ * 按 profile 装配 Checkpoint / Message / Token / LLM 回合存储。
+ * `dev`：文件。其余 profile：Redis + PostgreSQL（缺配置则抛错）。
+ * 未设 profile 时：已配置 DB 或 Redis 则按 Redis+PostgreSQL；否则使用 defaultProfile。
  */
 export function assembleRuntimeStorage(options, env = process.env) {
     const profile = resolveRuntimeStorageProfile(options.profile, options.defaultProfile, env);
-    const checkpointDir = options.checkpointDir ?? env.EAP_CHECKPOINT_DIR ?? '/tmp/eap-checkpoints';
-    const sessionDir = options.sessionDir ?? env.EAP_SESSION_DIR ?? '/tmp/eap-sessions';
-    const messageDir = options.messageDir ?? env.EAP_MESSAGE_DIR ?? `${sessionDir.replace(/\/$/, '')}/messages`;
-    if (profile === 'test') {
-        return {
-            profile,
-            checkpointSaver: new InMemoryCheckpointSaver(),
-            sessionRepository: undefined,
-            messageRepository: new InMemoryFullMessageRepository(),
-            diagnostics: {
-                profile,
-                checkpointKind: 'memory',
-                sessionKind: 'memory',
-                messageKind: 'memory',
-            },
-        };
-    }
-    if (profile === 'dev') {
+    const defaults = resolveDevStorageDirs(env);
+    const checkpointDir = options.checkpointDir ?? defaults.checkpointDir;
+    const sessionDir = options.sessionDir ?? defaults.sessionDir;
+    const messageDir = options.messageDir ?? defaults.messageDir;
+    const useFiles = profile === 'dev';
+    if (useFiles) {
         return {
             profile,
             checkpointSaver: new FileCheckpointSaver(checkpointDir),
             sessionRepository: new FileSessionRepository({ baseDir: sessionDir }),
             messageRepository: new FileMessageRepository({ baseDir: messageDir }),
+            turnLog: new FileLlmTurnLog(resolveLlmTurnDir(env)),
+            tokenBudgetRepository: new InMemoryTokenBudgetRepository(),
             diagnostics: {
                 profile,
                 checkpointKind: 'file',
                 sessionKind: 'file',
                 messageKind: 'file',
+                llmTurnKind: 'file',
+                tokenBudgetKind: 'process',
             },
         };
     }
@@ -128,11 +137,15 @@ export function assembleRuntimeStorage(options, env = process.env) {
         checkpointSaver,
         sessionRepository: undefined,
         messageRepository: new PostgresMessageRepository(pool),
+        turnLog: new PostgresLlmTurnLog(pool),
+        tokenBudgetRepository: new PostgresTokenBudgetRepository(pool),
         diagnostics: {
             profile,
             checkpointKind: 'redis+pg',
-            sessionKind: 'memory',
+            sessionKind: 'hosting',
             messageKind: 'postgres',
+            llmTurnKind: 'postgres',
+            tokenBudgetKind: 'postgres',
         },
     };
 }

package/dist/runtime/types.d.ts

@@ -6,18 +6,14 @@
  *
  * @see 04-runtime-core/design.md §1.5
  */
-import type { ExecutionContext, InvokeConfig, ResumeHitlResult } from '@gt-fe/eap-contracts';
+import type { ExecutionContext, InvokeConfig, ResumeHitlResult } from '@eap/contracts';
 import type { InvokeResponseData } from '../api/routes/agent.routes.js';
 import type { GraphMessage } from '../graph/contracts/executable-graph.js';
 import type { SSEEvent } from '../sse/contracts/sse-emitter.contract.js';
 /** 同步/流式执行参数 */
 export interface ExecuteParams {
-    /**
-     * @deprecated 使用 agentCode；保留仅为迁移双读
-     */
-    agentId?: string;
-    /** 对外主键（优先） */
-    agentCode?: string;
+    /** 对外主键 */
+    agentCode: string;
     input: string;
     /** 平台执行上下文（Hosting / eap dev 注入，对齐 04 R15） */
     executionContext?: ExecutionContext;
@@ -35,7 +31,7 @@ export interface ExecuteParams {
 }
 /** 同步执行结果 */
 export type ExecuteResult = InvokeResponseData;
-/** HITL 恢复结果（与 @gt-fe/eap-contracts ResumeHitlResult 对齐） */
+/** HITL 恢复结果（与 @eap/contracts ResumeHitlResult 对齐） */
 export type { ResumeHitlResult };
 /** HITL 用户响应 */
 export interface HitlResponse {
@@ -48,6 +44,16 @@ export interface HitlResponse {
      */
     threadId?: string;
 }
+/** Fork 入参：上层先发 taskId / traceId，Runtime 不再 createFlow */
+export interface ForkParams {
+    checkpointId: string;
+    /** 上层已发号的 Task ID（Hosting createTask / 本地 UUID） */
+    taskId: string;
+    /** 上层已创建的 Trace id（Hosting createTrace / 本地 UUID） */
+    traceId: string;
+    executionContext?: ExecutionContext;
+    overrides?: ForkOverrides;
+}
 /** Fork 参数覆盖 */
 export interface ForkOverrides {
     model?: string;
@@ -56,11 +62,7 @@ export interface ForkOverrides {
     state?: Record<string, unknown>;
     /** 源 Trace ID（未提供时从 checkpoint 元数据读取） */
     originalTraceId?: string;
-    /**
-     * @deprecated 使用 agentCode
-     */
-    agentId?: string;
-    /** 执行所用 Agent（未提供时从 checkpoint state 读取） */
+    /** 执行所用 Agent（未提供时从 checkpoint state.agentCode 读取） */
     agentCode?: string;
     /** 预装版本（未提供时从 checkpoint state.agentVersion 读取） */
     agentVersion?: string;
@@ -95,12 +97,8 @@ export interface ForkResult {
  * - 该 session 已有历史时，视作已种入，跳过写入（exactly-once 幂等）。
  */
 export interface SeedSessionMessagesParams {
-    /**
-     * @deprecated 使用 agentCode；保留仅为迁移双读
-     */
-    agentId?: string;
-    /** 对外主键（优先） */
-    agentCode?: string;
+    /** 对外主键 */
+    agentCode: string;
     /** 预装版本（写入 session.metadata.agentVersion，续聊回退） */
     agentVersion?: string;
     /** 会话 ID；未提供时新建 session */

package/dist/server.js

@@ -7,7 +7,7 @@
  * TODO: Phase 2 将本文件迁移至 dev-tools/cli（作为 `eap dev` 命令实现），
  *       runtime 包不再包含 HTTP 服务代码，仅作为纯库导出。
  */
-import { ErrorCodes } from '@gt-fe/eap-contracts';
+import { ErrorCodes } from '@eap/contracts';
 import { createServer } from 'node:http';
 import { URL } from 'node:url';
 import { resolveExecutionContext } from './governance/index.js';
@@ -49,7 +49,7 @@ const server = createServer(async (req, res) => {
     if (req.method === 'GET' && url.pathname === '/metrics') {
         sendJson(res, 200, {
             mode: 'standalone',
-            checkpointDir: process.env.EAP_CHECKPOINT_DIR ?? '/tmp/eap-checkpoints',
+            checkpointDir: process.env.EAP_CHECKPOINT_DIR ?? '.eap/checkpoints',
             foundationUrl: process.env.FOUNDATION_SERVICE_URL ?? 'http://localhost:3100',
         });
         return;

package/dist/session/session.service.d.ts

@@ -102,6 +102,8 @@ export interface ISessionRepository {
     findById(id: string): Promise<SessionRecord | null>;
     findByUserId(userId: string, limit?: number, offset?: number): Promise<SessionRecord[]>;
     update(session: SessionRecord): Promise<void>;
+    /** 本地排查：列出全部未删除会话（File / 内存实现；PG 可不提供） */
+    listAll?(): Promise<SessionRecord[]>;
 }
 /**
  * IMessageRepository — Message 查询接口（最小定义）
@@ -143,6 +145,7 @@ export declare class InMemorySessionRepository implements ISessionRepository {
     findById(id: string): Promise<SessionRecord | null>;
     findByUserId(userId: string, limit?: number, offset?: number): Promise<SessionRecord[]>;
     update(session: SessionRecord): Promise<void>;
+    listAll(): Promise<SessionRecord[]>;
 }
 /**
  * InMemoryMessageRepository — 内存 Message 存储（stub）
@@ -181,6 +184,8 @@ export declare class SessionService {
         limit?: number;
         offset?: number;
     }): Promise<SessionRecord[]>;
+    /** 本地排查：列出全部会话（仓储未实现 listAll 时返回空） */
+    listAllSessions(): Promise<SessionRecord[]>;
     /**
      * 归档 Session（标记为 archived）
      */

package/dist/session/session.service.js

@@ -35,6 +35,11 @@ export class InMemorySessionRepository {
     async update(session) {
         this.store.set(session.id, { ...session });
     }
+    async listAll() {
+        return Array.from(this.store.values())
+            .filter((s) => !s.isDeleted)
+            .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+    }
 }
 /**
  * InMemoryMessageRepository — 内存 Message 存储（stub）
@@ -138,6 +143,13 @@ export class SessionService {
     async listSessions(userId, options) {
         return this.sessionRepository.findByUserId(userId, options?.limit, options?.offset);
     }
+    /** 本地排查：列出全部会话（仓储未实现 listAll 时返回空） */
+    async listAllSessions() {
+        if (typeof this.sessionRepository.listAll !== 'function') {
+            return [];
+        }
+        return this.sessionRepository.listAll();
+    }
     /**
      * 归档 Session（标记为 archived）
      */

package/dist/sse/events/index.d.ts

@@ -39,13 +39,13 @@ export declare const CORE_SSE_EVENTS: readonly ["session.created", "task.started
 /**
  * 可选事件类型（Agent 按需支持）
  */
-export declare const OPTIONAL_SSE_EVENTS: readonly ["skill.matched", "skill.unmatched", "skill.started", "skill.completed", "skill.failed", "reasoning.step", "tool.progress", "file.created", "file.updated", "code.executed", "collaboration.handed_off", "collaboration.subtask.started", "collaboration.subtask.completed", "plan.created", "plan.step.started", "plan.step.completed", "response.max_iterations_reached", "stats.node_token_usage"];
+export declare const OPTIONAL_SSE_EVENTS: readonly ["skill.matched", "skill.unmatched", "skill.started", "skill.completed", "skill.failed", "skill.loaded", "skill.resource_read", "reasoning.step", "tool.progress", "file.created", "file.updated", "code.executed", "collaboration.handed_off", "collaboration.subtask.started", "collaboration.subtask.completed", "plan.created", "plan.step.started", "plan.step.completed", "response.max_iterations_reached", "stats.node_token_usage"];
 /**
  * SSEEventType — SSE 事件类型字符串联合类型
  */
-export type SSEEventType = 'session.created' | 'task.started' | 'task.completed' | 'task.error' | 'reasoning.started' | 'response.chunk' | 'tool.called' | 'tool.result' | 'tool.error' | 'hitl.waited' | 'hitl.resumed' | 'response.final' | 'stats.token_usage' | 'connection.heartbeat' | 'skill.matched' | 'skill.unmatched' | 'skill.started' | 'skill.completed' | 'skill.failed' | 'reasoning.step' | 'tool.progress' | 'file.created' | 'file.updated' | 'code.executed' | 'collaboration.handed_off' | 'collaboration.subtask.started' | 'collaboration.subtask.completed' | 'plan.created' | 'plan.step.started' | 'plan.step.completed' | 'response.max_iterations_reached' | 'stats.node_token_usage';
+export type SSEEventType = 'session.created' | 'task.started' | 'task.completed' | 'task.error' | 'reasoning.started' | 'response.chunk' | 'tool.called' | 'tool.result' | 'tool.error' | 'hitl.waited' | 'hitl.resumed' | 'response.final' | 'stats.token_usage' | 'connection.heartbeat' | 'skill.matched' | 'skill.unmatched' | 'skill.started' | 'skill.completed' | 'skill.failed' | 'skill.loaded' | 'skill.resource_read' | 'reasoning.step' | 'tool.progress' | 'file.created' | 'file.updated' | 'code.executed' | 'collaboration.handed_off' | 'collaboration.subtask.started' | 'collaboration.subtask.completed' | 'plan.created' | 'plan.step.started' | 'plan.step.completed' | 'response.max_iterations_reached' | 'stats.node_token_usage';
 import type { SessionCreatedPayload, TaskStartedPayload, TaskCompletedPayload, TaskErrorPayload } from './session-events.js';
-import type { SkillMatchedPayload, SkillUnmatchedPayload, SkillStartedPayload, SkillCompletedPayload, SkillFailedPayload } from './skill-events.js';
+import type { SkillMatchedPayload, SkillUnmatchedPayload, SkillStartedPayload, SkillCompletedPayload, SkillFailedPayload, SkillLoadedPayload, SkillResourceReadPayload } from './skill-events.js';
 import type { ReasoningStartedPayload, ReasoningStepPayload, ResponseChunkPayload } from './reasoning-events.js';
 import type { ToolCalledPayload, ToolResultPayload, ToolProgressPayload, ToolErrorPayload } from './tool-events.js';
 import type { FileCreatedPayload, FileUpdatedPayload } from './file-events.js';
@@ -79,6 +79,8 @@ export interface SSEEventPayloadMap {
     'skill.started': SkillStartedPayload;
     'skill.completed': SkillCompletedPayload;
     'skill.failed': SkillFailedPayload;
+    'skill.loaded': SkillLoadedPayload;
+    'skill.resource_read': SkillResourceReadPayload;
     'reasoning.step': ReasoningStepPayload;
     'tool.progress': ToolProgressPayload;
     'file.created': FileCreatedPayload;

package/dist/sse/events/index.js

@@ -59,6 +59,8 @@ export const OPTIONAL_SSE_EVENTS = [
     'skill.started',
     'skill.completed',
     'skill.failed',
+    'skill.loaded',
+    'skill.resource_read',
     'reasoning.step',
     'tool.progress',
     'file.created',

package/dist/sse/events/skill-events.d.ts

@@ -6,7 +6,7 @@
  * - skill.started / skill.completed / skill.failed（子图执行生命周期）
  *
  * @see design.md §1.6 SSE事件协议定义
- * @see @gt-fe/eap-contracts OPTIONAL_SSE_EVENTS
+ * @see @eap/contracts OPTIONAL_SSE_EVENTS
  */
 /** 技能匹配成功 */
 export interface SkillMatchedPayload {
@@ -46,3 +46,14 @@ export interface SkillFailedPayload {
     skillName: string;
     error: string;
 }
+/** 读入 SKILL.md（Harness，不是业务 Tool） */
+export interface SkillLoadedPayload {
+    skillId: string;
+    skillName?: string;
+    path: string;
+}
+/** 读取 Skill 包内附属文件 */
+export interface SkillResourceReadPayload {
+    skillId?: string;
+    path: string;
+}

package/dist/sse/events/skill-events.js

@@ -6,6 +6,6 @@
  * - skill.started / skill.completed / skill.failed（子图执行生命周期）
  *
  * @see design.md §1.6 SSE事件协议定义
- * @see @gt-fe/eap-contracts OPTIONAL_SSE_EVENTS
+ * @see @eap/contracts OPTIONAL_SSE_EVENTS
  */
 export {};

package/dist/sse/trace-collector.d.ts

@@ -32,6 +32,16 @@ export declare class InMemoryTraceCollector implements ITraceCollector {
         status: 'completed' | 'failed';
         error?: string;
     }): Promise<void>;
+    recordCheckpointRef(_input: {
+        checkpointId: string;
+        traceId: string;
+        spanId: string;
+        summary?: {
+            nodeId?: string;
+            threadId?: string;
+            step?: number;
+        };
+    }): Promise<void>;
     /** 获取所有会话（调试用） */
     getAllSessions(): TraceSession[];
 }

package/dist/sse/trace-collector.js

@@ -54,6 +54,7 @@ export class InMemoryTraceCollector {
         return `link-node-${randomUUID()}`;
     }
     async completeLinkNode(_nodeId, _params) { }
+    async recordCheckpointRef(_input) { }
     /** 获取所有会话（调试用） */
     getAllSessions() {
         return Array.from(this.sessions.values());

package/dist/token/token-budget.service.d.ts

@@ -32,7 +32,7 @@ export interface BudgetRecord {
 /**
  * ITokenBudgetRepository — 配额记录持久化抽象
  *
- * 由 InMemoryTokenBudgetRepository（默认）或 MySQL 实现注入。
+ * 由 InMemoryTokenBudgetRepository 或 PostgresTokenBudgetRepository 注入。
  */
 export interface ITokenBudgetRepository {
     /**
@@ -47,7 +47,7 @@ export interface ITokenBudgetRepository {
 /**
  * InMemoryTokenBudgetRepository — 基于 Map 的内存持久化
  *
- * 适用于单进程/测试场景。生产环境应替换为 MySQL 实现。
+ * 用于 `profile=dev` 文件路径及单测。Redis+PostgreSQL 路径使用 PostgresTokenBudgetRepository。
  */
 export declare class InMemoryTokenBudgetRepository implements ITokenBudgetRepository {
     private store;

package/dist/token/token-budget.service.js

@@ -15,7 +15,7 @@
 /**
  * InMemoryTokenBudgetRepository — 基于 Map 的内存持久化
  *
- * 适用于单进程/测试场景。生产环境应替换为 MySQL 实现。
+ * 用于 `profile=dev` 文件路径及单测。Redis+PostgreSQL 路径使用 PostgresTokenBudgetRepository。
  */
 export class InMemoryTokenBudgetRepository {
     store = new Map();

package/dist/tool/create-tool-executor.d.ts

@@ -5,7 +5,7 @@
  * `EAP_TOOL_GATEWAY_TRANSPORT=http` 时用 HttpToolExecutor（仅调试）。
  * desktop 经 ToolExecutionRouter 分流 Local / Gateway。
  */
-import type { ILocalToolInstallStore, LocalToolInstallRecord } from '@gt-fe/eap-contracts';
+import type { ILocalToolInstallStore, LocalToolInstallRecord } from '@eap/contracts';
 import { type DeploymentContext } from './tool-execution-router.js';
 import type { IToolExecutor } from './tool-executor.interface.js';
 export declare class EmptyInstallStore implements ILocalToolInstallStore {

package/dist/tool/create-tool-executor.js

@@ -9,6 +9,7 @@ import { HttpToolExecutor } from './http-tool-executor.js';
 import { McpToolExecutor } from './mcp-tool-executor.js';
 import { LocalToolExecutor } from './local-tool-executor.js';
 import { ToolExecutionRouter, } from './tool-execution-router.js';
+import { withHarnessPrimitives } from './harness-primitives.js';
 export class EmptyInstallStore {
     get() {
         return null;
@@ -48,7 +49,7 @@ export function createToolExecutor(options) {
     const transport = resolveGatewayTransport(options.gatewayTransport);
     const serverExecutor = createServerExecutor(options.foundationUrl, transport, options.httpTimeout);
     const localExecutor = new LocalToolExecutor({ installStore });
-    return new ToolExecutionRouter({
+    return withHarnessPrimitives(new ToolExecutionRouter({
         httpExecutor: serverExecutor,
         localExecutor,
         installStore,
@@ -56,5 +57,5 @@ export function createToolExecutor(options) {
         toolTypes: options.toolTypes,
         toolRuntimes: options.toolRuntimes,
         forceToolServer: options.forceToolServer,
-    });
+    }));
 }

package/dist/tool/dev-http-executor.d.ts

@@ -1,6 +1,6 @@
 /**
  * Dev 下按 type:http 清单直连出站（gateway.baseUrl + pathTemplate）。
- * URL 拼接与 host 白名单与 Tool Gateway 共用 @gt-fe/eap-contracts http-outbound。
+ * URL 拼接与 host 白名单与 Tool Gateway 共用 @eap/contracts http-outbound。
  */
 import type { IToolExecutor, ToolCallRequest, ToolCallResult } from './tool-executor.interface.js';
 export interface DevHttpExecution {

package/dist/tool/dev-http-executor.js

@@ -1,8 +1,9 @@
 /**
  * Dev 下按 type:http 清单直连出站（gateway.baseUrl + pathTemplate）。
- * URL 拼接与 host 白名单与 Tool Gateway 共用 @gt-fe/eap-contracts http-outbound。
+ * URL 拼接与 host 白名单与 Tool Gateway 共用 @eap/contracts http-outbound。
  */
-import { assertHttpHostAllowlisted, buildHttpToolUrl as buildSharedHttpToolUrl } from '@gt-fe/eap-contracts';
+import { assertHttpHostAllowlisted, buildHttpToolUrl as buildSharedHttpToolUrl, ErrorCodes } from '@eap/contracts';
+import { abortOrTimeoutMessage, DEFAULT_HTTP_TOOL_TIMEOUT_SEC, isAbortError, resolveToolTimeoutSec, toToolTimeoutMs, } from './timeout.js';
 export function resolveHttpExecutionFromRequest(request) {
     const raw = request.execution;
     if (!raw || typeof raw !== 'object')
@@ -22,7 +23,7 @@ export function resolveHttpExecutionFromRequest(request) {
         allowedHosts: Array.isArray(e.allowedHosts)
             ? e.allowedHosts.filter((item) => typeof item === 'string')
             : [],
-        timeout: typeof e.timeout === 'number' ? e.timeout : 10000,
+        timeout: resolveToolTimeoutSec(e.timeout, DEFAULT_HTTP_TOOL_TIMEOUT_SEC),
     };
 }
 export function buildHttpToolUrl(spec, args) {
@@ -48,8 +49,9 @@ export class DevHttpExecutor {
             const args = request.arguments ?? {};
             const url = buildHttpToolUrl(spec, args);
             const method = (spec.method ?? 'GET').toUpperCase();
+            const timeoutSec = resolveToolTimeoutSec(spec.timeout, DEFAULT_HTTP_TOOL_TIMEOUT_SEC);
             const controller = new AbortController();
-            const timer = setTimeout(() => controller.abort(), spec.timeout ?? 10000);
+            const timer = setTimeout(() => controller.abort(), toToolTimeoutMs(timeoutSec, DEFAULT_HTTP_TOOL_TIMEOUT_SEC));
             const headers = {
                 Accept: 'application/json, text/plain;q=0.9',
             };
@@ -81,14 +83,15 @@ export class DevHttpExecutor {
             };
         }
         catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
+            const timeoutSec = resolveToolTimeoutSec(spec?.timeout, DEFAULT_HTTP_TOOL_TIMEOUT_SEC);
+            const aborted = isAbortError(err);
             return {
                 toolCallId: request.toolCallId,
                 toolName: request.toolName,
                 content: '',
                 success: false,
-                error: message,
-                errorCode: 'EXECUTION_FAILED',
+                error: abortOrTimeoutMessage(err, timeoutSec),
+                errorCode: aborted ? ErrorCodes.TOOL_TIMEOUT : 'EXECUTION_FAILED',
                 runtime: 'local',
             };
         }

package/dist/tool/dev-mcp-executor.js

@@ -17,6 +17,8 @@
  * @see docs/workflows/local-agent-dev-loop.md
  * @see runtime/src/tool/local-mcp-client.ts
  */
+import { ErrorCodes } from '@eap/contracts';
+import { isAbortError } from './timeout.js';
 import { LocalMcpClient } from './local-mcp-client.js';
 export class DevMcpExecutor {
     client;
@@ -50,14 +52,14 @@ export class DevMcpExecutor {
             };
         }
         catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
+            const aborted = isAbortError(err);
             return {
                 toolCallId: request.toolCallId,
                 toolName: request.toolName,
                 content: '',
                 success: false,
-                error: message,
-                errorCode: 'EXECUTION_FAILED',
+                error: err instanceof Error ? err.message : String(err),
+                errorCode: aborted ? ErrorCodes.TOOL_TIMEOUT : 'EXECUTION_FAILED',
                 runtime: 'local',
             };
         }

package/dist/tool/dev-tool-executor.d.ts

@@ -7,7 +7,7 @@
  * - execution.protocol=mcp → DevMcpExecutor
  * - execution.protocol=http → DevHttpExecutor
  * - 能解析出 code handler → LocalToolExecutor
- * - 其余 → NOT_CONFIGURED（mock 只走显式 `--tool-mode mock`）
+ * - 其余 → NOT_CONFIGURED
  */
 import { DevMcpExecutor } from './dev-mcp-executor.js';
 import type { IToolExecutor, ToolCallRequest, ToolCallResult } from './tool-executor.interface.js';

package/dist/tool/dev-tool-executor.js

@@ -7,7 +7,7 @@
  * - execution.protocol=mcp → DevMcpExecutor
  * - execution.protocol=http → DevHttpExecutor
  * - 能解析出 code handler → LocalToolExecutor
- * - 其余 → NOT_CONFIGURED（mock 只走显式 `--tool-mode mock`）
+ * - 其余 → NOT_CONFIGURED
  */
 import { EmptyInstallStore } from './create-tool-executor.js';
 import { DevMcpExecutor } from './dev-mcp-executor.js';
@@ -42,7 +42,7 @@ export class DevToolExecutor {
             content: '',
             success: false,
             error: `Dev tool "${request.toolName}" is not executable: no MCP server, ` +
-                'HTTP gateway+pathTemplate, or code handler. Use --tool-mode mock for MockToolExecutor.',
+                'HTTP gateway+pathTemplate, or code handler.',
             errorCode: 'NOT_CONFIGURED',
             runtime: 'local',
         };

package/dist/tool/harness-command.d.ts

@@ -0,0 +1,32 @@
+/**
+ * execute_command 的跨 OS 底板：本机壳、沙箱环境、解释器 shim、超时杀树。
+ * 不翻译 ls/dir；命令字符串按当前壳解释。
+ */
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+export interface ShellSpawn {
+    file: string;
+    args: string[];
+    shellName: string;
+    windowsVerbatimArguments?: boolean;
+    windowsHide?: boolean;
+}
+export declare function shellNameFor(platform?: string): string;
+/** system / 工具描述用的本机命令对照（只渲染当前 OS）。 */
+export declare function commandDialectLines(platform?: string): string[];
+export declare function resolveShellSpawn(command: string, platform?: string): ShellSpawn;
+export declare function spawnOptionsFor(shell: ShellSpawn): Pick<SpawnOptions, 'windowsHide' | 'windowsVerbatimArguments'>;
+export declare function findOnPath(names: string[], extraDirs?: string[]): string | undefined;
+export declare function findPythonInterpreter(): string | undefined;
+export declare function findNodeInterpreter(): string | undefined;
+/** 在写根建立 python/node/sh shim。本机一个都没有则返回 undefined。 */
+export declare function ensureInterpreterShims(workdir: string): string | undefined;
+/** @deprecated 使用 ensureInterpreterShims */
+export declare function ensurePythonShims(workdir: string): string | undefined;
+/**
+ * 模型可能从 SKILL.md 抄 `$EAP_SKILL_DIR`（POSIX）或 `%EAP_SKILL_DIR%`（cmd）。
+ * spawn 前替换成绝对路径，不依赖壳去展开。
+ */
+export declare function substituteSkillDir(command: string, skillDir?: string): string;
+export declare function sandboxEnv(workdir: string, cwd: string, allowlist: string[], shimDir?: string, skillDir?: string): NodeJS.ProcessEnv;
+export declare function formatSpawnError(err: unknown, shellFile: string): Error;
+export declare function killProcessTree(child: ChildProcess): void;