@lmzhen/dsh-evolution-skill-history 0.26.26 → 0.27.0

package/lib/client.js

@@ -5,25 +5,146 @@ window.__ModuleLoader__.load({
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
+		//#region src/client/routes.generated.ts
+		/**
+		* Every family host path, generated from evolution-core's HOST_ROUTES (the ONE declaration).
+		* A browser half cannot import the host package at runtime (client bundles keep @deepseek-ai/*
+		* external), so the table is mirrored here mechanically; a rename in core regenerates all three
+		* client copies, and the generator's --check makes a stale copy red.
+		*/
+		const ROUTES = {
+			approval: {
+				pending: "/api/dsh-evolution/approval/pending",
+				preview: "/api/dsh-evolution/approval/preview",
+				approve: "/api/dsh-evolution/approval/approve",
+				reject: "/api/dsh-evolution/approval/reject"
+			},
+			"skill-history": {
+				skills: "/api/dsh-evolution/skill-history/skills",
+				versions: "/api/dsh-evolution/skill-history/versions",
+				diff: "/api/dsh-evolution/skill-history/versions/diff",
+				body: "/api/dsh-evolution/skill-history/versions/body",
+				undo: "/api/dsh-evolution/skill-history/undo",
+				health: "/api/dsh-evolution/skill-history/health"
+			},
+			"skill-health": { rows: "/api/dsh-evolution/skill-health/rows" },
+			diagnostics: { view: "/api/dsh-evolution/diagnostics" }
+		};
+		//#endregion
+		//#region src/client/route-client.generated.ts
+		/** Classify a non-2xx status: 401/403/404 keep their own kind, everything else is a server answer. */
+		function classify(status) {
+			if (status === 401) return {
+				kind: "unauthenticated",
+				status: 401
+			};
+			if (status === 403) return {
+				kind: "forbidden",
+				status: 403
+			};
+			if (status === 404) return {
+				kind: "unmounted",
+				status: 404
+			};
+			return {
+				kind: "server",
+				status
+			};
+		}
+		/**
+		* One request, no retries and no body parsing for the platform's admission answers.
+		* @param doFetch - the fetch in use (the browser's, or a spec's stub).
+		* @param path - the exact route path from the generated ROUTES table.
+		* @param init - standard RequestInit.
+		* @returns the data, or the classified failure (network/parse failures read as 'server').
+		*/
+		async function requestJson(doFetch, path, init) {
+			let response;
+			try {
+				response = await doFetch(path, init);
+			} catch (error) {
+				return {
+					ok: false,
+					failure: {
+						kind: "server",
+						status: 0,
+						detail: error instanceof Error ? error.message : String(error)
+					}
+				};
+			}
+			if (!response.ok) return {
+				ok: false,
+				failure: classify(response.status)
+			};
+			let body;
+			try {
+				body = await response.json();
+			} catch {
+				return {
+					ok: false,
+					failure: {
+						kind: "server",
+						status: response.status
+					}
+				};
+			}
+			if (typeof body === "object" && body !== null) {
+				const record = body;
+				if (record.ok === true) return {
+					ok: true,
+					data: record.data
+				};
+				if (record.ok === false && typeof record.message === "string" && record.message !== "") return {
+					ok: false,
+					failure: {
+						kind: "refused",
+						code: typeof record.code === "string" && record.code !== "" ? record.code : "refused",
+						message: record.message
+					}
+				};
+			}
+			return {
+				ok: false,
+				failure: {
+					kind: "server",
+					status: response.status
+				}
+			};
+		}
+		/** The one-sentence rendering legacy callers attach to a classified failure. */
+		function failureMessage(failure) {
+			switch (failure.kind) {
+				case "refused": return failure.message;
+				case "server": return failure.status === 0 ? failure.detail === void 0 || failure.detail === "" ? "网络错误：无法连接宿主" : failure.detail : "HTTP " + String(failure.status);
+				case "unauthenticated": return "HTTP 401";
+				case "forbidden": return "HTTP 403";
+				case "unmounted": return "HTTP 404";
+			}
+		}
+		//#endregion
 		//#region src/client/api.ts
 		/**
 		* The host routes this bundle calls, and the ONE place a request is made.
 		*
-		* The paths mirror the host half's `SKILL_HISTORY_ROUTES` (a spec asserts the two sides agree). Every
-		* refusal arrives as `ok:false` plus the curator's own sentence, so the panel shows the same words the
-		* slash command prints instead of inventing a second vocabulary.
+		* G5/W7: the paths come from the generated client route table (rendered from evolution-core
+		* HOST_ROUTES), and the transport classifier is the shared generated route-client — the browser half
+		* can no longer drift from the host table or grow a second HTTP vocabulary.
 		* @module @lmzhen/dsh-evolution-skill-history/client
 		*/
-		/** Route paths, mirrored from the host half. */
-		const HOST_ROUTES = {
-			skills: "/api/dsh-evolution/skill-history/skills",
-			versions: "/api/dsh-evolution/skill-history/versions",
-			diff: "/api/dsh-evolution/skill-history/versions/diff",
-			body: "/api/dsh-evolution/skill-history/versions/body",
-			undo: "/api/dsh-evolution/skill-history/undo"
+		/** Route paths: the generated mirror of the host's HOST_ROUTES (one declaration in core). */
+		const HOST_ROUTES = ROUTES["skill-history"];
+		/**
+		* A refusal the host reported, carrying its own sentence (the curator's, not ours) and the classified
+		* four-state failure so the panel can render the shared failure block (G5/W7 S6b).
+		*/
+		var SkillHistoryRefusal = class extends Error {
+			failure;
+			constructor(failure) {
+				super(failureMessage(failure));
+				this.name = "SkillHistoryRefusal";
+				this.failure = failure;
+			}
 		};
-		/** A refusal the host reported, carrying its own sentence (the curator's, not ours). */
-		var SkillHistoryRefusal = class extends Error {};
 		/**
 		* Build the panel's face over one fetch implementation.
 		* @param fetchImpl - the fetch to use; a spec passes a stub.
@@ -31,11 +152,9 @@ window.__ModuleLoader__.load({
 		*/
 		function createSkillHistoryApi(fetchImpl = fetch) {
 			const request = async (path, init) => {
-				const response = await fetchImpl(path, init);
-				if (!response.ok) throw new SkillHistoryRefusal("HTTP " + String(response.status));
-				const body = await response.json();
-				if (body.ok !== true) throw new SkillHistoryRefusal(body.message ?? "request refused");
-				return body.data;
+				const answer = await requestJson(fetchImpl, path, init);
+				if (!answer.ok) throw new SkillHistoryRefusal(answer.failure);
+				return answer.data;
 			};
 			return {
 				skills: async () => await request(HOST_ROUTES.skills),
@@ -83,6 +202,11 @@ window.__ModuleLoader__.load({
 			loading: "读取中…",
 			refresh: "刷新",
 			undo: "回退到此版",
+			"failure.unauthorized": "需要登录：重新打开这个页面完成登录后再试。",
+			"failure.forbidden": "平台拒绝了这个请求（身份不是 owner）。",
+			"failure.unmounted": "该功能没有挂载。",
+			"failure.server": "读取失败，可以重试。",
+			"fallback.hint": "可以改用命令：{command}",
 			"undo.confirm": "确认回退",
 			"undo.no": "取消",
 			current: "当前",
@@ -158,6 +282,11 @@ window.__ModuleLoader__.load({
 			loading: "Loading…",
 			refresh: "Refresh",
 			undo: "Restore this version",
+			"failure.unauthorized": "Sign-in is required: reopen this page and sign in, then retry.",
+			"failure.forbidden": "The platform refused this request (not the owner principal).",
+			"failure.unmounted": "This feature is not mounted.",
+			"failure.server": "The read failed; you can retry.",
+			"fallback.hint": "Command fallback: {command}",
 			"undo.confirm": "Confirm restore",
 			"undo.no": "Cancel",
 			current: "Current",
@@ -848,6 +977,51 @@ window.__ModuleLoader__.load({
 			] }), toggle), diffView(face, diff.diff, mode));
 		}
 		//#endregion
+		//#region src/client/states.generated.ts
+		/** A neutral/ warn/ fail block; a fail block is role=alert so assistive tech announces it. */
+		function Block(props) {
+			const tone = props.tone ?? "neutral";
+			return (0, react.createElement)("div", {
+				"data-tone": tone,
+				...tone === "fail" ? { role: "alert" } : {}
+			}, props.title === void 0 ? null : (0, react.createElement)("div", { "data-tone-title": tone }, props.title), props.children);
+		}
+		/** One classified failure as a reader-facing sentence. */
+		function failureText(failure, t) {
+			switch (failure.kind) {
+				case "unauthenticated": return t("failureUnauthorized");
+				case "forbidden": return t("failureForbidden");
+				case "unmounted": return t("failureUnmounted");
+				case "server": return failure.status === 0 ? t("failureServer") : t("failureServer") + " (HTTP " + String(failure.status) + ")";
+				case "refused": return failure.message;
+			}
+		}
+		/** The failed-state block: sentence + (when the surface exists but is unreachable) the command fallback. */
+		function FailureBlock(props) {
+			const hint = props.fallback === void 0 ? null : (0, react.createElement)("div", { "data-tone-hint": "true" }, props.t("fallbackHint", { command: props.fallback.command }));
+			return Block({
+				tone: "fail",
+				title: failureText(props.failure, props.t),
+				children: hint
+			});
+		}
+		//#endregion
+		//#region src/client/fallbacks.generated.ts
+		/**
+		* The command-face fallback for every Host surface, generated from evolution-commands'
+		* COMMAND_FALLBACKS (the ONE home). When the platform's connection carrier is absent (E-325) the
+		* panels render this hint instead of a bare HTTP failure — same use case, command face.
+		*/
+		const FALLBACKS = {
+			approval: { command: "/evolution pending … /evolution approve <id> … /evolution reject <id> … /evolution release <id>" },
+			"skill-history": { command: "/evolution restore <name> [v]（查看：/evolution skills history <name>）" },
+			"skill-health": { command: "/evolution skills refresh（健康行：/evolution doctor）" },
+			diagnostics: {
+				command: "/evolution doctor",
+				platformCli: "dsh --json /evolution doctor"
+			}
+		};
+		//#endregion
 		//#region src/client/Panel.ts
 		/**
 		* The panel: one read, one open skill, one open row — and the faces that draw them.
@@ -865,9 +1039,29 @@ window.__ModuleLoader__.load({
 		* @param face - copy plus the data callbacks.
 		* @returns the panel element.
 		*/
+		/** Fill the generated block's `{slot}` copies with this bundle's dictionary. */
+		function fillCopy(template, values) {
+			return template.replace(/\{(\w+)\}/g, (match, slot) => {
+				const value = values[slot];
+				return value === void 0 ? match : String(value);
+			});
+		}
+		/** The shared four-state failure block, spoken through this bundle's keys. */
+		function failureBlock(t, failure) {
+			const translate = (key, values) => {
+				const text = t(key);
+				return values === void 0 ? text : fillCopy(text, values);
+			};
+			return FailureBlock({
+				failure,
+				t: translate,
+				fallback: FALLBACKS["skill-history"]
+			});
+		}
 		function SkillHistoryPanel(face) {
 			const [skills, setSkills] = (0, react.useState)([]);
 			const [skillsLoaded, setSkillsLoaded] = (0, react.useState)(false);
+			const [failure, setFailure] = (0, react.useState)(void 0);
 			const [selected, setSelected] = (0, react.useState)(void 0);
 			const [payload, setPayload] = (0, react.useState)(void 0);
 			const [versionsFailed, setVersionsFailed] = (0, react.useState)(void 0);
@@ -882,6 +1076,10 @@ window.__ModuleLoader__.load({
 			const failed = (error) => {
 				setNoteError(true);
 				setNoteText(face.t("error.hint") + "\n" + face.t("error") + ": " + (error instanceof Error ? error.message : String(error)));
+				setFailure(error instanceof SkillHistoryRefusal ? error.failure : {
+					kind: "server",
+					status: 0
+				});
 			};
 			const succeeded = (message) => {
 				setNoteError(false);
@@ -1055,7 +1253,7 @@ window.__ModuleLoader__.load({
 			};
 			return (0, react.createElement)("div", { className: "evo-hist-root" }, (0, react.createElement)("aside", { className: "evo-hist-aside" }, searchField(face, query, setQuery), (0, react.createElement)("div", { className: "evo-hist-list" }, skills.length === 0 ? emptyState(face.t(skillsLoaded ? "empty.skills" : "loading")) : visible.length === 0 ? emptyState(face.t("search.none")) : visible.map((skill) => skillLine(face, skill, skill.name === selected, () => {
 				open(skill.name);
-			})))), (0, react.createElement)("div", { className: "evo-hist-main" }, panelHead(face, refresh), notice(noteText, noteError), selected === void 0 ? [emptyState(face.t(skills.length === 0 ? skillsLoaded ? "empty.skills" : "loading" : "empty.pick"), "empty"), (0, react.createElement)("p", {
+			})))), (0, react.createElement)("div", { className: "evo-hist-main" }, panelHead(face, refresh), notice(noteText, noteError), failure === void 0 ? null : (0, react.createElement)("div", { className: "evo-hist-failure" }, failureBlock(face.t, failure)), selected === void 0 ? [emptyState(face.t(skills.length === 0 ? skillsLoaded ? "empty.skills" : "loading" : "empty.pick"), "empty"), (0, react.createElement)("p", {
 				key: "hint",
 				className: "evo-hist-hint"
 			}, face.t("hint"))] : loaded ? null : emptyState(versionsFailed === void 0 ? face.t("loading") : `${face.t("empty.versions.failed")} — ${versionsFailed}`), loaded ? (0, react.createElement)("div", null, group(face.t("group.content"), payload.content, void 0), group(face.t("group.support"), payload.support, face.t("group.support.note")), payload.content.length === 0 && payload.support.length === 0 ? (0, react.createElement)("p", { className: "evo-hist-hint" }, face.t("empty.versions")) : null) : null));

package/lib/index.js

@@ -1,4 +1,5 @@
-import { contentHash, displayBodyOf, elapsedSince, errorText, isLandmark, isLoopbackRequest, latestVersionAt, partitionVersions, readJsonObject, skillRowCells, textDiffFacts, versionActionKind, versionRowCells, writeJson } from "@lmzhen/dsh-evolution-core";
+import { HOST_ROUTES, json, methodNotAllowed, readJsonObject, registerHostRoutes } from "@lmzhen/dsh-evolution-core/http-routes";
+import { contentHash, displayBodyOf, elapsedSince, errorText, isLandmark, latestVersionAt, partitionVersions, skillRowCells, textDiffFacts, versionActionKind, versionRowCells } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/unit-undoable.js
 /**
 * G3b: undoability is a property of the UNIT, not of one entry.
@@ -36,22 +37,20 @@ function undoableFor(entry, flags, liveHash) {
 //#endregion
 //#region lib/types/routes.js
 /**
-* The skill-history HTTP surface: six loopback routes over the curator's read/write seam (five reads plus the one write).
+* The skill-history HTTP surface: six exact Fetch routes over the curator's read/write seam (five
+* reads plus the one write).
+*
+* W6/G4: the carrier is the platform's Host connection data plane — the fence, browser auth and
+* owner-only admission are applied by the platform BEFORE `fetch(request)` runs, so this module has
+* no 403/401 branch. The wire envelope the browser half reads is unchanged.
 *
 * Layering: this module maps a route to a USE CASE and does nothing else. "Which artifact does this
 * version hold" and "how do the two chains split" live in evolution-core; the only write is
 * curator.undo. The panel never writes the skill tree itself.
 * @module @lmzhen/dsh-evolution-skill-history/routes
 */
-/** Route paths. The client bundle mirrors these literals; a spec asserts the two sides agree. */
-const SKILL_HISTORY_ROUTES = {
-	skills: "/api/dsh-evolution/skill-history/skills",
-	versions: "/api/dsh-evolution/skill-history/versions",
-	diff: "/api/dsh-evolution/skill-history/versions/diff",
-	body: "/api/dsh-evolution/skill-history/versions/body",
-	undo: "/api/dsh-evolution/skill-history/undo",
-	health: "/api/dsh-evolution/skill-history/health"
-};
+/** Route paths: the ONE declaration lives in core (W1); the client constants are generated from it. */
+const SKILL_HISTORY_ROUTES = HOST_ROUTES.skillHistory;
 /**
 * How much of one version's body the read route hands back. A bound on the ANSWER, not on what the
 * deployment may store: a long skill arrives as its head plus `truncated`, so the reader is told.
@@ -60,49 +59,29 @@ const MAX_BODY_CHARS = 2e4;
 /**
 * Build the six routes over the curator seam.
 * @param services - the host services the handlers read.
-* @returns the route list for ctx.webServer.register.
+* @param _audit - the registration audit (read routes record nothing; undo's decision stays the
+*   curator's own — W6 keeps the ledger to the approval surface).
+* @returns the route list for `registerHostRoutes`.
 */
-function makeSkillHistoryRoutes(services) {
+function makeSkillHistoryRoutes(services, _audit) {
 	/** Run one handler body with the curator, or answer the family's E-302 sentence when it is absent. */
-	const withCurator = async (res, run) => {
+	const withCurator = async (run) => {
 		const curator = services.getCurator();
-		if (curator === void 0) {
-			writeJson(res, 200, {
-				ok: false,
-				code: "curator-not-mounted",
-				message: errorText("e-302-curator-service-not-mounted")
-			});
-			return;
-		}
-		await run(curator);
-	};
-	/** Guard: trust fence, then method. Every refusal is a JSON body, never an empty response. */
-	const guard = (req, res, method) => {
-		if (!isLoopbackRequest(req)) {
-			writeJson(res, 403, {
-				ok: false,
-				code: "forbidden",
-				message: "禁止访问：仅限回环地址"
-			});
-			return false;
-		}
-		if (req.method !== method) {
-			writeJson(res, 405, {
-				ok: false,
-				code: "method-not-allowed",
-				message: "方法不允许：" + (req.method ?? "")
-			});
-			return false;
-		}
-		return true;
+		if (curator === void 0) return json(200, {
+			ok: false,
+			code: "curator-not-mounted",
+			message: errorText("e-302-curator-service-not-mounted")
+		});
+		return await run(curator);
 	};
 	return [
 		{
-			kind: "exact",
 			path: SKILL_HISTORY_ROUTES.skills,
-			handler: async (req, res) => {
-				if (!guard(req, res, "GET")) return;
-				await withCurator(res, async (curator) => {
+			methods: ["GET"],
+			requestBody: "buffered",
+			fetch: (request) => {
+				if (request.method !== "GET") return Promise.resolve(methodNotAllowed(["GET"]));
+				return withCurator(async (curator) => {
 					const listed = await curator.skills.list();
 					const withHistory = [];
 					const now = Date.now();
@@ -125,7 +104,7 @@ function makeSkillHistoryRoutes(services) {
 							cells: skillRowCells(row)
 						});
 					}
-					writeJson(res, 200, {
+					return json(200, {
 						ok: true,
 						data: withHistory
 					});
@@ -133,20 +112,18 @@ function makeSkillHistoryRoutes(services) {
 			}
 		},
 		{
-			kind: "exact",
 			path: SKILL_HISTORY_ROUTES.versions,
-			handler: async (req, res) => {
-				if (!guard(req, res, "GET")) return;
-				const name = new URL(req.url ?? "/", "http://loopback").searchParams.get("name")?.trim() ?? "";
-				if (name === "") {
-					writeJson(res, 400, {
-						ok: false,
-						code: "bad-request",
-						message: "缺少 name"
-					});
-					return;
-				}
-				await withCurator(res, async (curator) => {
+			methods: ["GET"],
+			requestBody: "buffered",
+			fetch: (request) => {
+				if (request.method !== "GET") return Promise.resolve(methodNotAllowed(["GET"]));
+				const name = new URL(request.url).searchParams.get("name")?.trim() ?? "";
+				if (name === "") return Promise.resolve(json(400, {
+					ok: false,
+					code: "bad-request",
+					message: "缺少 name"
+				}));
+				return withCurator(async (curator) => {
 					const groups = partitionVersions(await curator.history(name));
 					const live = await curator.skills.read(name);
 					const liveHash = live === null ? null : contentHash(live);
@@ -161,7 +138,7 @@ function makeSkillHistoryRoutes(services) {
 						};
 					};
 					const unitFlags = unitUndoableFlags([...groups.content, ...groups.support], liveHash);
-					writeJson(res, 200, {
+					return json(200, {
 						ok: true,
 						data: {
 							content: groups.content.map((entry, index) => {
@@ -189,47 +166,39 @@ function makeSkillHistoryRoutes(services) {
 			}
 		},
 		{
-			kind: "exact",
 			path: SKILL_HISTORY_ROUTES.diff,
-			handler: async (req, res) => {
-				if (!guard(req, res, "GET")) return;
-				const params = new URL(req.url ?? "/", "http://loopback").searchParams;
+			methods: ["GET"],
+			requestBody: "buffered",
+			fetch: (request) => {
+				if (request.method !== "GET") return Promise.resolve(methodNotAllowed(["GET"]));
+				const params = new URL(request.url).searchParams;
 				const name = params.get("name")?.trim() ?? "";
 				const rawV = params.get("v")?.trim() ?? "";
 				const v = Number.parseInt(rawV, 10);
-				if (name === "" || !/^\d+$/.test(rawV) || !Number.isInteger(v) || v < 1) {
-					writeJson(res, 400, {
-						ok: false,
-						code: "bad-request",
-						message: "需要 name 与正整数 v"
-					});
-					return;
-				}
-				await withCurator(res, async (curator) => {
+				if (name === "" || !/^\d+$/.test(rawV) || !Number.isInteger(v) || v < 1) return Promise.resolve(json(400, {
+					ok: false,
+					code: "bad-request",
+					message: "需要 name 与正整数 v"
+				}));
+				return withCurator(async (curator) => {
 					const groups = partitionVersions(await curator.history(name));
 					const index = groups.content.findIndex((entry) => entry.v === v);
-					if (index === -1) {
-						writeJson(res, 404, {
-							ok: false,
-							code: "not-found",
-							message: "该版本不在「" + name + "」的记录历史里"
-						});
-						return;
-					}
+					if (index === -1) return json(404, {
+						ok: false,
+						code: "not-found",
+						message: "该版本不在「" + name + "」的记录历史里"
+					});
 					const entry = groups.content[index];
 					const previous = (entry === void 0 || entry.beforeHash === void 0 ? void 0 : groups.content.find((candidate) => candidate.hash === entry.beforeHash)) ?? (index === 0 ? void 0 : groups.content[index - 1]);
 					const after = entry === void 0 ? null : await curator.skills.readVersion(name, v);
 					const before = previous === void 0 ? "" : await curator.skills.readVersion(name, previous.v);
-					if (after === null || before === null) {
-						writeJson(res, 404, {
-							ok: false,
-							code: "not-found",
-							message: "该版本的存储内容读不出来"
-						});
-						return;
-					}
+					if (after === null || before === null) return json(404, {
+						ok: false,
+						code: "not-found",
+						message: "该版本的存储内容读不出来"
+					});
 					const facts = textDiffFacts(before, after, "SKILL.md");
-					writeJson(res, 200, {
+					return json(200, {
 						ok: true,
 						data: {
 							v,
@@ -241,34 +210,29 @@ function makeSkillHistoryRoutes(services) {
 			}
 		},
 		{
-			kind: "exact",
 			path: SKILL_HISTORY_ROUTES.body,
-			handler: async (req, res) => {
-				if (!guard(req, res, "GET")) return;
-				const params = new URL(req.url ?? "/", "http://loopback").searchParams;
+			methods: ["GET"],
+			requestBody: "buffered",
+			fetch: (request) => {
+				if (request.method !== "GET") return Promise.resolve(methodNotAllowed(["GET"]));
+				const params = new URL(request.url).searchParams;
 				const name = params.get("name")?.trim() ?? "";
 				const rawV = params.get("v")?.trim() ?? "";
 				const v = Number.parseInt(rawV, 10);
-				if (name === "" || !/^\d+$/.test(rawV) || !Number.isInteger(v) || v < 1) {
-					writeJson(res, 400, {
+				if (name === "" || !/^\d+$/.test(rawV) || !Number.isInteger(v) || v < 1) return Promise.resolve(json(400, {
+					ok: false,
+					code: "bad-request",
+					message: "需要 name 与正整数 v"
+				}));
+				return withCurator(async (curator) => {
+					const text = await curator.skills.readVersion(name, v);
+					if (text === null) return json(404, {
 						ok: false,
-						code: "bad-request",
-						message: "需要 name 与正整数 v"
+						code: "not-found",
+						message: "该版本的存储内容读不出来"
 					});
-					return;
-				}
-				await withCurator(res, async (curator) => {
-					const text = await curator.skills.readVersion(name, v);
-					if (text === null) {
-						writeJson(res, 404, {
-							ok: false,
-							code: "not-found",
-							message: "该版本的存储内容读不出来"
-						});
-						return;
-					}
 					const truncated = text.length > MAX_BODY_CHARS;
-					writeJson(res, 200, {
+					return json(200, {
 						ok: true,
 						data: {
 							v,
@@ -281,89 +245,66 @@ function makeSkillHistoryRoutes(services) {
 			}
 		},
 		{
-			kind: "exact",
 			path: SKILL_HISTORY_ROUTES.undo,
-			handler: async (req, res) => {
-				if (!guard(req, res, "POST")) return;
-				const payload = await readJsonObject(req);
-				const name = typeof payload?.name === "string" ? payload.name.trim() : "";
-				if (name === "") {
-					writeJson(res, 400, {
+			methods: ["POST"],
+			requestBody: "buffered",
+			fetch: (request) => {
+				if (request.method !== "POST") return Promise.resolve(methodNotAllowed(["POST"]));
+				return (async () => {
+					const payload = await readJsonObject(request);
+					const name = typeof payload?.name === "string" ? payload.name.trim() : "";
+					if (name === "") return json(400, {
 						ok: false,
 						code: "bad-request",
 						message: "缺少 name"
 					});
-					return;
-				}
-				const raw = payload?.v;
-				if (raw !== void 0 && (typeof raw !== "number" || !Number.isInteger(raw) || raw < 1)) {
-					writeJson(res, 400, {
+					const raw = payload?.v;
+					if (raw !== void 0 && (typeof raw !== "number" || !Number.isInteger(raw) || raw < 1)) return json(400, {
 						ok: false,
 						code: "bad-request",
 						message: "v 必须是正整数"
 					});
-					return;
-				}
-				await withCurator(res, async (curator) => {
-					const result = raw === void 0 ? await curator.undo(name) : await curator.undo(name, raw);
-					writeJson(res, 200, result.ok ? {
-						ok: true,
-						data: result
-					} : {
-						ok: false,
-						code: "undo-refused",
-						message: result.message
+					return withCurator(async (curator) => {
+						const result = raw === void 0 ? await curator.undo(name) : await curator.undo(name, raw);
+						return json(200, result.ok ? {
+							ok: true,
+							data: result
+						} : {
+							ok: false,
+							code: "undo-refused",
+							message: result.message
+						});
 					});
-				});
+				})();
 			}
 		},
 		{
-			kind: "exact",
 			path: SKILL_HISTORY_ROUTES.health,
-			handler: (req, res) => {
-				if (!guard(req, res, "GET")) return;
-				writeJson(res, 200, {
+			methods: ["GET"],
+			requestBody: "buffered",
+			fetch: (request) => {
+				if (request.method !== "GET") return Promise.resolve(methodNotAllowed(["GET"]));
+				return Promise.resolve(json(200, {
 					ok: true,
 					data: { surface: "skill-history" }
-				});
+				}));
 			}
 		}
 	];
 }
 //#endregion
 //#region lib/types/index.js
-/**
-* Host half of the skill-history surface: it mounts the four loopback routes the sidebar panel reads
-* and writes, and it owns nothing else.
-*
-* The version FACTS come from evolution-core (which artifact a version holds, how the body chain and
-* the support-file chain split) and the only write is the curator's undo, so this row carries no state
-* of its own: unloading it removes the routes and leaves the feature's data untouched.
-* @module @lmzhen/dsh-evolution-skill-history
-*/
 const name = "evolution-skill-history";
 /** No declared service: a headless profile must not leave a pending row, and the curator is resolved
-* per request. The web server is waited on INSIDE apply (see below), not declared here. */
+* per request; `connection` is waited on inside registerHostRoutes, not demanded here. */
 const inject = [];
 /**
-* Wait for the web server, then mount the routes as ONE effect (disposers run on unload and on HMR).
-*
-* **Why `ctx.inject` and not `ctx.get`**: profile rows apply in file order, so at this row's apply time
-* the web server may not exist yet — `ctx.get('webServer')` returning undefined is a TIMING fact, not a
-* verdict, and acting on it (0.11.1 shipped that way) left the routes permanently unregistered while the
-* panel rendered and every call answered HTTP 404. Waiting on the service mounts the routes whenever it
-* arrives, and a profile that never gets one simply never runs this callback — inert, never pending.
-* @param ctx - the host context; the web server and curator arrive through it.
+* Mount the routes as ONE owner effect (disposers run on unload and on HMR). A profile whose host has
+* no connection service simply never runs the callback — inert, never pending.
+* @param ctx - the host context; the connection and curator arrive through it.
 */
 function apply(ctx) {
-	ctx.inject(["webServer"], (scope) => {
-		scope.effect(() => {
-			const disposers = makeSkillHistoryRoutes({ getCurator: () => scope.get("evolutionCurator") }).map((route) => scope.webServer.register(route));
-			return () => {
-				for (const dispose of disposers) dispose();
-			};
-		}, "evolution-skill-history: routes");
-	});
+	registerHostRoutes(ctx, (audit) => makeSkillHistoryRoutes({ getCurator: () => ctx.get("evolutionCurator") }, audit));
 }
 //#endregion
 export { apply, inject, name };

package/lib/types/client/Panel.d.ts

@@ -11,7 +11,7 @@
  */
 import { type ReactNode } from 'react';
 import { type Copy } from './chrome.ts';
-import type { SkillRow, VersionBodyRow, VersionDiffRow, VersionsPayload } from './api.ts';
+import { type SkillRow, type VersionBodyRow, type VersionDiffRow, type VersionsPayload } from './api.ts';
 import type { MarkdownWords } from './markdown.ts';
 /** What the panel is handed: the dictionary seat, the renderer's words, and the host's callbacks. */
 export interface PanelFace extends Copy {
@@ -23,10 +23,5 @@ export interface PanelFace extends Copy {
     readonly loadBody: (name: string, v: number) => Promise<VersionBodyRow>;
     readonly undo: (name: string, v?: number) => Promise<string>;
 }
-/**
- * The panel body.
- * @param face - copy plus the data callbacks.
- * @returns the panel element.
- */
 export declare function SkillHistoryPanel(face: PanelFace): ReactNode;
 //# sourceMappingURL=Panel.d.ts.map

package/lib/types/client/api.d.ts

@@ -1,18 +1,12 @@
-/**
- * The host routes this bundle calls, and the ONE place a request is made.
- *
- * The paths mirror the host half's `SKILL_HISTORY_ROUTES` (a spec asserts the two sides agree). Every
- * refusal arrives as `ok:false` plus the curator's own sentence, so the panel shows the same words the
- * slash command prints instead of inventing a second vocabulary.
- * @module @lmzhen/dsh-evolution-skill-history/client
- */
-/** Route paths, mirrored from the host half. */
+import type { RouteFailure } from './route-client.generated.ts';
+/** Route paths: the generated mirror of the host's HOST_ROUTES (one declaration in core). */
 export declare const HOST_ROUTES: {
     readonly skills: "/api/dsh-evolution/skill-history/skills";
     readonly versions: "/api/dsh-evolution/skill-history/versions";
     readonly diff: "/api/dsh-evolution/skill-history/versions/diff";
     readonly body: "/api/dsh-evolution/skill-history/versions/body";
     readonly undo: "/api/dsh-evolution/skill-history/undo";
+    readonly health: "/api/dsh-evolution/skill-history/health";
 };
 /** One changed region, as the host reports it (the platform diff card's own shape). */
 export interface DiffHunkRow {
@@ -129,8 +123,13 @@ export interface SkillHistoryApi {
     readonly diff: (name: string, v: number) => Promise<VersionDiffRow>;
     readonly body: (name: string, v: number) => Promise<VersionBodyRow>;
 }
-/** A refusal the host reported, carrying its own sentence (the curator's, not ours). */
+/**
+ * A refusal the host reported, carrying its own sentence (the curator's, not ours) and the classified
+ * four-state failure so the panel can render the shared failure block (G5/W7 S6b).
+ */
 export declare class SkillHistoryRefusal extends Error {
+    readonly failure: RouteFailure;
+    constructor(failure: RouteFailure);
 }
 /**
  * Build the panel's face over one fetch implementation.

package/lib/types/client/contracts.generated.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Literal mirror of the frozen Host diagnostics contract (W1 §2.8 / core diagnostics.ts). The browser
+ * build keeps every @deepseek-ai/* specifier external, so the client CANNOT import the host type — the
+ * shape is mirrored mechanically here instead. The key unions are rendered from core diagnostics.ts by
+ * the generator, so a key change regenerates all three copies (a stale copy fails --check).
+ */
+export type DiagnosticsSchemaVersion = 2;
+export type DiagnosticsFactKey = 'platform-line' | 'family-version' | 'install-form' | 'preset-ids' | 'readonly-contract' | 'upgrade-order' | 'fallback-map';
+export type DiagnosticsRuntimeKey = 'subagent-channel' | 'restricted-preset' | 'host-surface' | 'session-fold' | 'platform-services' | 'runs' | 'platform-pairing' | 'install-form-detected';
+export type DiagnosticStatus = 'ok' | 'warn' | 'fail' | 'unknown';
+export interface DocFactRow {
+    readonly key: DiagnosticsFactKey;
+    readonly label: string;
+    readonly value: string;
+    readonly home: string;
+}
+export interface DiagnosticRow {
+    readonly key: DiagnosticsRuntimeKey;
+    readonly label: string;
+    readonly status: DiagnosticStatus;
+    readonly detail?: string;
+    readonly remedy?: string;
+}
+export interface DiagnosticsView {
+    readonly schemaVersion: DiagnosticsSchemaVersion;
+    readonly generatedAt: string;
+    readonly facts: readonly DocFactRow[];
+    readonly runtime: readonly DiagnosticRow[];
+}
+/** The installation form the doctor reports (W8 install-form-detected row). */
+export type InstallFormId = 'M1' | 'M2' | 'M3' | 'M4';
+/** One surface's command-face path(s) — the client `fallbacks.generated.ts` table's row type. */
+export interface FallbackHint {
+    readonly command: string;
+    readonly platformCli?: string;
+}
+//# sourceMappingURL=contracts.generated.d.ts.map

package/lib/types/client/fallbacks.generated.d.ts

@@ -0,0 +1,8 @@
+import type { FallbackHint } from './contracts.generated.ts';
+/**
+ * The command-face fallback for every Host surface, generated from evolution-commands'
+ * COMMAND_FALLBACKS (the ONE home). When the platform's connection carrier is absent (E-325) the
+ * panels render this hint instead of a bare HTTP failure — same use case, command face.
+ */
+export declare const FALLBACKS: Readonly<Record<'approval' | 'skill-history' | 'skill-health' | 'diagnostics', FallbackHint>>;
+//# sourceMappingURL=fallbacks.generated.d.ts.map

package/lib/types/client/route-client.generated.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The four-state transport classifier every family client shares (W7 §2). The platform owns
+ * admission (401/403/404 are its answers, not ours), so the client reads the STATUS only for those
+ * three and never tries to interpret a platform body. Everything the family route itself answers
+ * keeps its business envelope: 2xx + {ok:true,data} or 2xx + {ok:false,code,message}.
+ */
+export type RouteFailure = {
+    readonly kind: 'unauthenticated';
+    readonly status: 401;
+} | {
+    readonly kind: 'forbidden';
+    readonly status: 403;
+} | {
+    readonly kind: 'unmounted';
+    readonly status: 404;
+} | {
+    readonly kind: 'server';
+    readonly status: number;
+    readonly detail?: string;
+} | {
+    readonly kind: 'refused';
+    readonly code: string;
+    readonly message: string;
+};
+/** One route answer: the data, or the classified failure. */
+export type RouteAnswer<T> = {
+    readonly ok: true;
+    readonly data: T;
+} | {
+    readonly ok: false;
+    readonly failure: RouteFailure;
+};
+/** Classify a non-2xx status: 401/403/404 keep their own kind, everything else is a server answer. */
+export declare function classify(status: number): RouteFailure;
+/**
+ * One request, no retries and no body parsing for the platform's admission answers.
+ * @param doFetch - the fetch in use (the browser's, or a spec's stub).
+ * @param path - the exact route path from the generated ROUTES table.
+ * @param init - standard RequestInit.
+ * @returns the data, or the classified failure (network/parse failures read as 'server').
+ */
+export declare function requestJson<T>(doFetch: typeof fetch, path: string, init?: RequestInit): Promise<RouteAnswer<T>>;
+/** The one-sentence rendering legacy callers attach to a classified failure. */
+export declare function failureMessage(failure: RouteFailure): string;
+//# sourceMappingURL=route-client.generated.d.ts.map

package/lib/types/client/routes.generated.d.ts

@@ -0,0 +1,31 @@
+/** One host data-plane surface the browser half can call. */
+export type SurfaceId = 'approval' | 'skill-history' | 'skill-health' | 'diagnostics';
+/**
+ * Every family host path, generated from evolution-core's HOST_ROUTES (the ONE declaration).
+ * A browser half cannot import the host package at runtime (client bundles keep @deepseek-ai/*
+ * external), so the table is mirrored here mechanically; a rename in core regenerates all three
+ * client copies, and the generator's --check makes a stale copy red.
+ */
+export declare const ROUTES: {
+    readonly approval: {
+        readonly pending: "/api/dsh-evolution/approval/pending";
+        readonly preview: "/api/dsh-evolution/approval/preview";
+        readonly approve: "/api/dsh-evolution/approval/approve";
+        readonly reject: "/api/dsh-evolution/approval/reject";
+    };
+    readonly 'skill-history': {
+        readonly skills: "/api/dsh-evolution/skill-history/skills";
+        readonly versions: "/api/dsh-evolution/skill-history/versions";
+        readonly diff: "/api/dsh-evolution/skill-history/versions/diff";
+        readonly body: "/api/dsh-evolution/skill-history/versions/body";
+        readonly undo: "/api/dsh-evolution/skill-history/undo";
+        readonly health: "/api/dsh-evolution/skill-history/health";
+    };
+    readonly 'skill-health': {
+        readonly rows: "/api/dsh-evolution/skill-health/rows";
+    };
+    readonly diagnostics: {
+        readonly view: "/api/dsh-evolution/diagnostics";
+    };
+};
+//# sourceMappingURL=routes.generated.d.ts.map

package/lib/types/client/states.generated.d.ts

@@ -0,0 +1,43 @@
+import { type ReactNode } from 'react';
+import type { RouteAnswer, RouteFailure } from './route-client.generated.ts';
+import type { FallbackHint } from './contracts.generated.ts';
+/**
+ * The four-state base of every family card (W7 §2). Load states are read from the generated
+ * route-client's answer — a card owns no HTTP vocabulary and no second state machine.
+ */
+export type LoadState<T> = {
+    readonly phase: 'loading';
+} | {
+    readonly phase: 'ready';
+    readonly data: T;
+} | {
+    readonly phase: 'empty';
+} | {
+    readonly phase: 'failed';
+    readonly failure: RouteFailure;
+};
+/** Map one classified answer onto the card's four states. */
+export declare function loadStateOf<T>(answer: RouteAnswer<T>, isEmpty: (data: T) => boolean): LoadState<T>;
+/** The locale lookup every block calls (the platform's own `t`). */
+export interface Translate {
+    (key: string, values?: Readonly<Record<string, string | number>>): string;
+}
+export type BlockTone = 'neutral' | 'warn' | 'fail';
+export interface BlockProps {
+    readonly tone?: BlockTone;
+    readonly title?: string;
+    readonly children?: ReactNode;
+}
+/** A neutral/ warn/ fail block; a fail block is role=alert so assistive tech announces it. */
+export declare function Block(props: BlockProps): ReactNode;
+export interface FailureBlockProps {
+    readonly failure: RouteFailure;
+    readonly t: Translate;
+    /** The command-face fallback for this surface (rendered on unmounted/failed answers). */
+    readonly fallback?: FallbackHint | undefined;
+}
+/** One classified failure as a reader-facing sentence. */
+export declare function failureText(failure: RouteFailure, t: Translate): string;
+/** The failed-state block: sentence + (when the surface exists but is unreachable) the command fallback. */
+export declare function FailureBlock(props: FailureBlockProps): ReactNode;
+//# sourceMappingURL=states.generated.d.ts.map

package/lib/types/index.d.ts

@@ -1,6 +1,10 @@
 /**
- * Host half of the skill-history surface: it mounts the four loopback routes the sidebar panel reads
- * and writes, and it owns nothing else.
+ * Host half of the skill-history surface: it mounts the six routes the sidebar panel reads and
+ * writes, and it owns nothing else.
+ *
+ * W6/G4: the carrier is the platform's Host connection data plane. `registerHostRoutes` waits on the
+ * `connection` service (it may apply after this row), registers via one owner effect and captures the
+ * DecisionAudit there; the old webServer + loopback fence path is gone.
  *
  * The version FACTS come from evolution-core (which artifact a version holds, how the body chain and
  * the support-file chain split) and the only write is the curator's undo, so this row carries no state
@@ -10,17 +14,12 @@
 import type { Context } from '@deepseek-ai/cordis';
 export declare const name = "evolution-skill-history";
 /** No declared service: a headless profile must not leave a pending row, and the curator is resolved
- * per request. The web server is waited on INSIDE apply (see below), not declared here. */
+ * per request; `connection` is waited on inside registerHostRoutes, not demanded here. */
 export declare const inject: string[];
 /**
- * Wait for the web server, then mount the routes as ONE effect (disposers run on unload and on HMR).
- *
- * **Why `ctx.inject` and not `ctx.get`**: profile rows apply in file order, so at this row's apply time
- * the web server may not exist yet — `ctx.get('webServer')` returning undefined is a TIMING fact, not a
- * verdict, and acting on it (0.11.1 shipped that way) left the routes permanently unregistered while the
- * panel rendered and every call answered HTTP 404. Waiting on the service mounts the routes whenever it
- * arrives, and a profile that never gets one simply never runs this callback — inert, never pending.
- * @param ctx - the host context; the web server and curator arrive through it.
+ * Mount the routes as ONE owner effect (disposers run on unload and on HMR). A profile whose host has
+ * no connection service simply never runs the callback — inert, never pending.
+ * @param ctx - the host context; the connection and curator arrive through it.
  */
 export declare function apply(ctx: Context): void;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/routes.d.ts

@@ -1,5 +1,10 @@
 /**
- * The skill-history HTTP surface: six loopback routes over the curator's read/write seam (five reads plus the one write).
+ * The skill-history HTTP surface: six exact Fetch routes over the curator's read/write seam (five
+ * reads plus the one write).
+ *
+ * W6/G4: the carrier is the platform's Host connection data plane — the fence, browser auth and
+ * owner-only admission are applied by the platform BEFORE `fetch(request)` runs, so this module has
+ * no 403/401 branch. The wire envelope the browser half reads is unchanged.
  *
  * Layering: this module maps a route to a USE CASE and does nothing else. "Which artifact does this
  * version hold" and "how do the two chains split" live in evolution-core; the only write is
@@ -7,8 +12,8 @@
  * @module @lmzhen/dsh-evolution-skill-history/routes
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { WebRoute } from '@deepseek-ai/dsh-host-webserver';
-/** Route paths. The client bundle mirrors these literals; a spec asserts the two sides agree. */
+import type { ConnectionFetchRouteLike, DecisionAudit } from '@lmzhen/dsh-evolution-core/http-routes';
+/** Route paths: the ONE declaration lives in core (W1); the client constants are generated from it. */
 export declare const SKILL_HISTORY_ROUTES: {
     readonly skills: "/api/dsh-evolution/skill-history/skills";
     readonly versions: "/api/dsh-evolution/skill-history/versions";
@@ -37,7 +42,9 @@ export interface RouteServices {
 /**
  * Build the six routes over the curator seam.
  * @param services - the host services the handlers read.
- * @returns the route list for ctx.webServer.register.
+ * @param _audit - the registration audit (read routes record nothing; undo's decision stays the
+ *   curator's own — W6 keeps the ledger to the approval surface).
+ * @returns the route list for `registerHostRoutes`.
  */
-export declare function makeSkillHistoryRoutes(services: RouteServices): WebRoute[];
+export declare function makeSkillHistoryRoutes(services: RouteServices, _audit: DecisionAudit): ConnectionFetchRouteLike[];
 //# sourceMappingURL=routes.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-skill-history",
   "description": "Web surface for skill content history: loopback host routes plus the sidebar panel (community build)",
-  "version": "0.26.26",
+  "version": "0.27.0",
   "publishConfig": {
     "access": "public"
   },
@@ -30,23 +30,22 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@lmzhen/dsh-evolution-core": "^0.26.26"
+    "@lmzhen/dsh-evolution-core": "^0.27.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
+    "@deepseek-ai/cordis": "^4.0.5",
     "react": "^18.2.0",
-    "@lmzhen/dsh-evolution-curator": "^0.26.26"
+    "@lmzhen/dsh-evolution-core": "^0.27.0",
+    "@lmzhen/dsh-evolution-curator": "^0.27.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
+    "@deepseek-ai/cordis": "^4.0.5",
     "@types/react": "~18.3.1",
     "react": "^18.2.0",
-    "@lmzhen/dsh-evolution-core": "^0.26.26",
-    "@lmzhen/dsh-evolution-curator": "^0.26.26",
-    "@lmzhen/dsh-evolution-io": "^0.26.26",
-    "@lmzhen/dsh-evolution-io-node": "^0.26.26"
+    "@lmzhen/dsh-evolution-core": "^0.27.0",
+    "@lmzhen/dsh-evolution-curator": "^0.27.0",
+    "@lmzhen/dsh-evolution-io": "^0.27.0",
+    "@lmzhen/dsh-evolution-io-node": "^0.27.0"
   },
   "dsh": {
     "client": {
@@ -57,5 +56,8 @@
         "@deepseek-ai/dsh-client-locale"
       ]
     }
+  },
+  "engines": {
+    "dsh": ">=0.2.1-rc.1 <0.2.2-0"
   }
 }