@qing3a/flow-rpa-app 0.5.12 → 0.7.0

package/dist/registry.js

@@ -1,17 +1,66 @@
-import { readdirSync, readFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { parseFlow } from '@qing3a/flow-rpa-engine/src/validate.js';
 import { FlowPatchSchema } from '@qing3a/flow-rpa-engine/src/schema.js';
-/** 读取用户覆盖层（flows/<name>/flow.patch.json；不存在 → undefined；解析失败 → 警告信息 + undefined） */
-function loadPatch(flowDir, name, warnings) {
-    const patchPath = join(flowDir, 'flow.patch.json');
+/** 基线文件名（与流程目录同级，即 flows/ 下） */
+export const BASELINE_FILE = 'baseline.json';
+/** 解析基线清单（缺失/损坏/格式不符 → undefined = 无校验；**绝不抛错**） */
+export function loadBaseline(flowsDir) {
     let raw;
     try {
-        raw = readFileSync(patchPath, 'utf8');
+        raw = readFileSync(join(flowsDir, BASELINE_FILE), 'utf8');
     }
     catch {
-        return undefined; // 无 patch（正常）
+        return undefined; // 无基线文件（老版本流程目录 / 用户自建目录）
     }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || typeof parsed.flows !== 'object' || parsed.flows === null)
+            return undefined;
+        return {
+            version: typeof parsed.version === 'number' ? parsed.version : 0,
+            generatedAt: typeof parsed.generatedAt === 'string' ? parsed.generatedAt : '',
+            flows: parsed.flows,
+        };
+    }
+    catch {
+        return undefined; // 基线损坏 → 退化为无校验（fail-soft：它只是「来源可见性」，不是执行前置）
+    }
+}
+/** sha256（十六进制小写） */
+function sha256(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/** 流程目录下的文件名（小写排序；目录/子目录不进清单——starter 包只有平铺文件） */
+function listFlowFiles(flowDir) {
+    try {
+        return readdirSync(flowDir)
+            .filter((f) => {
+            try {
+                return statSync(join(flowDir, f)).isFile();
+            }
+            catch {
+                return false;
+            }
+        })
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+/** 读取用户覆盖层（`flow.patch.json` 的**原始字节**；不存在 → undefined） */
+function readPatchRaw(flowDir) {
+    try {
+        return readFileSync(join(flowDir, 'flow.patch.json'), 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+}
+/** 解析覆盖层原始字节（语法/结构错误 → 警告 + undefined；原流程生效） */
+function parsePatch(raw, name, warnings) {
     try {
         return FlowPatchSchema.parse(JSON.parse(raw));
     }
@@ -41,7 +90,7 @@ export class FlowRegistry {
     flowsDir;
     /** flow_id → 已解析的流程定义（缓存；flow 为 patch 合并后的最终形态） */
     cache = new Map();
-    /** 最近一次扫描的流程加载警告（坏 flow.json / 坏 patch 等；fail-loud 警告态，get_status 呈现） */
+    /** 最近一次扫描的流程加载警告（坏 flow.json / 坏 patch / 偏离内置基线等；fail-loud 警告态，get_status 呈现） */
     _warnings = [];
     constructor(flowsDir) {
         this.flowsDir = flowsDir;
@@ -50,9 +99,10 @@ export class FlowRegistry {
     warnings() {
         return this._warnings;
     }
-    /** 扫描 flows/ 下各子目录的 flow.json（含 D5 patch 合并） */
+    /** 扫描 flows/ 下各子目录的 flow.json（含 D5 patch 合并 + T035-2 基线比对） */
     list() {
         this._warnings = [];
+        this.cache.clear(); // 每次扫描重建缓存：来源标注不做陈旧缓存（文件可能刚被改）
         const out = [];
         let entries;
         try {
@@ -63,6 +113,9 @@ export class FlowRegistry {
         catch {
             return [];
         }
+        // T035-2：基线只读一次（每目录都读会浪费；缺失 → 无校验降级）
+        const baseline = loadBaseline(this.flowsDir);
+        let modifiedCount = 0;
         for (const name of entries) {
             const flowDir = join(this.flowsDir, name);
             const flowPath = join(flowDir, 'flow.json');
@@ -74,7 +127,27 @@ export class FlowRegistry {
                 continue;
             }
             try {
-                const flow = applyPatch(parseFlow(raw), loadPatch(flowDir, name, this._warnings));
+                const patchRaw = readPatchRaw(flowDir);
+                const flow = applyPatch(parseFlow(raw), patchRaw !== undefined ? parsePatch(patchRaw, name, this._warnings) : undefined);
+                // T035-2（S6）：来源判定——基线声称认得这个 id 吗？逐文件哈希一致吗？
+                // 目录名与 flow.id 都可作为基线键（starter 同步后两者一致；用户改名后仍能认出来）
+                const base = baseline?.flows?.[name] ?? baseline?.flows?.[flow.id];
+                let origin = 'local';
+                if (base && base.files && typeof base.files === 'object') {
+                    const actual = new Map();
+                    for (const f of listFlowFiles(flowDir))
+                        actual.set(f, sha256(readFileSync(join(flowDir, f))));
+                    const expected = base.files;
+                    const expectedNames = Object.keys(expected);
+                    const sameFileSet = expectedNames.length === actual.size && expectedNames.every((f) => actual.has(f));
+                    const sameContent = sameFileSet && expectedNames.every((f) => actual.get(f) === expected[f]);
+                    origin = sameContent ? 'builtin' : 'builtin-modified';
+                    if (origin === 'builtin-modified') {
+                        modifiedCount++;
+                        // 不阻断执行（用户有权改自己的流程）；只在 doctor / get_status / 启动日志呈现
+                        this._warnings.push(`流程 ${flow.id} 与内置基线不一致（本地已改动）`);
+                    }
+                }
                 out.push({
                     id: flow.id,
                     name: flow.name,
@@ -84,9 +157,12 @@ export class FlowRegistry {
                         name: i.name,
                         required: i.required === true,
                         ...(i.description ? { description: i.description } : {}),
+                        // T031C-1：default 一并透传（Agent 不必靠猜缺省值；executor 侧同源注入）
+                        ...(i.default !== undefined ? { default: String(i.default) } : {}),
                     })),
+                    origin,
                 });
-                this.cache.set(flow.id, { version: flow.version, raw, flow });
+                this.cache.set(flow.id, { version: flow.version, raw, flow, origin });
             }
             catch (e) {
                 // D1：解析失败不静默跳过——收集警告（启动/状态页呈现），等 run_flow 才暴露太晚
@@ -94,6 +170,14 @@ export class FlowRegistry {
                 continue;
             }
         }
+        // T035-2：无基线（或基线里一个流程都不认得）→ **一行降级日志**（可校验性本身要可见，
+        // 但「包内 baseline.json 缺失」不是用户的问题，故用日志而不用警告——见 brief「不报错」）
+        if (baseline === undefined && out.length > 0) {
+            console.log(`[flow-rpa] 无内置流程基线（${BASELINE_FILE} 缺失或损坏），跳过来源校验（不阻断执行）`);
+        }
+        else if (baseline !== undefined && modifiedCount > 0) {
+            console.log(`[flow-rpa] ${modifiedCount} 个内置流程与基线不一致（本地已改动，仅告警不阻断）`);
+        }
         out.sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
         return out;
     }

package/dist/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAa,MAAM,yCAAyC,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAkB,MAAM,uCAAuC,CAAA;AA0BvF,oFAAoF;AACpF,SAAS,SAAS,CAAC,OAAe,EAAE,IAAY,EAAE,QAAkB;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;IAClD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA,CAAC,cAAc;IACjC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAc,CAAA;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uCAAuC;QACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,oCAAoC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACtG,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,KAA4B;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC3B,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,CAAA;QAChB,OAAO;YACL,GAAG,CAAC;YACJ,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC;AAED,MAAM,OAAO,YAAY;IACN,QAAQ,CAAQ;IACjC,mDAAmD;IAC3C,KAAK,GAAG,IAAI,GAAG,EAAwD,CAAA;IAC/E,yEAAyE;IACjE,SAAS,GAAa,EAAE,CAAA;IAEhC,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED,6CAA6C;IAC7C,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,gDAAgD;IAChD,IAAI;QACF,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;QACnB,MAAM,GAAG,GAAkB,EAAE,CAAA;QAC7B,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAC3C,IAAI,GAAW,CAAA;YACf,IAAI,CAAC;gBACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;gBACjF,GAAG,CAAC,IAAI,CAAC;oBACP,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACtC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;wBAC7B,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzD,CAAC,CAAC;iBACJ,CAAC,CAAA;gBACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,gDAAgD;gBAChD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC5F,SAAQ;YACV,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAA;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,2BAA2B;IAC3B,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;CACF"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAa,MAAM,yCAAyC,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAkB,MAAM,uCAAuC,CAAA;AAoDvF,gCAAgC;AAChC,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAA;AAE5C,oDAAoD;AACpD,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA,CAAC,0BAA0B;IAC7C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAA;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACxH,OAAO;YACL,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChE,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YAC7E,KAAK,EAAE,MAAM,CAAC,KAA8B;SAC7C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA,CAAC,6CAA6C;IAChE,CAAC;AACH,CAAC;AAED,qBAAqB;AACrB,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,kDAAkD;AAClD,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,OAAO,CAAC;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC,CAAC;aACD,IAAI,EAAE,CAAA;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,QAAkB;IAC/D,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAc,CAAA;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uCAAuC;QACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,oCAAoC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACtG,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,KAA4B;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC3B,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,CAAA;QAChB,OAAO;YACL,GAAG,CAAC;YACJ,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC;AAED,MAAM,OAAO,YAAY;IACN,QAAQ,CAAQ;IACjC,mDAAmD;IAC3C,KAAK,GAAG,IAAI,GAAG,EAA4E,CAAA;IACnG,iFAAiF;IACzE,SAAS,GAAa,EAAE,CAAA;IAEhC,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED,6CAA6C;IAC7C,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,8DAA8D;IAC9D,IAAI;QACF,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;QACnB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA,CAAC,+BAA+B;QAClD,MAAM,GAAG,GAAkB,EAAE,CAAA;QAC7B,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;QACD,qCAAqC;QACrC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,aAAa,GAAG,CAAC,CAAA;QACrB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAC3C,IAAI,GAAW,CAAA;YACf,IAAI,CAAC;gBACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;gBACtC,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;gBACxH,2CAA2C;gBAC3C,mDAAmD;gBACnD,MAAM,IAAI,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAClE,IAAI,MAAM,GAAe,OAAO,CAAA;gBAChC,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;oBACxC,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAA;oBAC3B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;oBAC3C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;oBACrG,MAAM,WAAW,GAAG,WAAW,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC5F,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAA;oBACrD,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;wBAClC,aAAa,EAAE,CAAA;wBACf,oDAAoD;wBACpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAA;oBACtD,CAAC;gBACH,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC;oBACP,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACtC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;wBAC7B,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxD,qDAAqD;wBACrD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnE,CAAC,CAAC;oBACH,MAAM;iBACP,CAAC,CAAA;gBACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACvE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,gDAAgD;gBAChD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC5F,SAAQ;YACV,CAAC;QACH,CAAC;QACD,kDAAkD;QAClD,yDAAyD;QACzD,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,aAAa,uBAAuB,CAAC,CAAA;QACzE,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,4BAA4B,CAAC,CAAA;QACtE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAA;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,2BAA2B;IAC3B,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;CACF"}

package/dist/runner.d.ts

@@ -3,12 +3,13 @@ import type { EnvCheck } from '@qing3a/flow-rpa-engine/src/schema.js';
 import { type DomSnapshot } from '@qing3a/flow-rpa-engine/src/export.js';
 import { SuggestionStore, type FlowPatchApplier } from '@qing3a/flow-rpa-engine/src/learning.js';
 import { RunStore } from '@qing3a/flow-rpa-engine/src/storage.js';
-import { LocalPlatform } from '@qing3a/flow-rpa-engine/src/export.js';
+import { ObservationExporter } from '@qing3a/flow-rpa-engine/src/export.js';
 import { PerfGate } from '@qing3a/flow-rpa-engine/src/bench.js';
 import { CooldownGate, SiteGate } from '@qing3a/flow-rpa-engine/src/gate.js';
 import { BehaviorArchive } from '@qing3a/flow-rpa-engine/src/behavior.js';
-import { FlowRegistry } from './registry.js';
+import { FlowRegistry, type FlowOrigin } from './registry.js';
 import type { RunConfig } from './config.js';
+import { type GateKeyResolution, type GateKeySource } from './gate-key.js';
 /**
  * run_flow 异步执行层（移植 Rust `server.rs` 的 execute_run/spawn_run + M9 D-R1/D-R2）。
  *
@@ -30,7 +31,21 @@ export interface RunFlowResult {
     pausedAt?: string;
     /** T015 P0-1：暂停原因（login / env_check / paused） */
     pauseReason?: 'login' | 'env_check' | 'paused';
+    /** T027/B2：结构化下一步指引（暂停/预检拒绝时；只进工具返回与 CLI 输出，不落 run.json——data/ 格式冻结） */
+    pauseGuidance?: string;
+    /** T027/B2：登录态预检拒绝（run 保持 paused 未执行；CLI 据此退出码 1，与「resume 后再次 paused」区分） */
+    precheckRejected?: boolean;
+    /** T035-2（S6）：流程来源（builtin / builtin-modified / local）——**只进工具面/CLI 输出，不落 run.json** */
+    origin?: FlowOrigin;
+    /** T035-1（S2）：本次 run 实际使用的同站闸门 key（`site:<host>` / `flow:<id>`）与维度——只进工具面 */
+    gateKey?: string;
+    gateKeySource?: GateKeySource;
 }
+/**
+ * T027/B2：pauseReason → 结构化下一步指引（人工接管交接，bsk human-in-the-loop 借鉴）。
+ * 只进工具返回 message / CLI 输出，绝不落 run.json（data/ 格式冻结）；绝不自动 resume（无人值守边界）。
+ */
+export declare function pauseGuidance(reason: 'login' | 'env_check' | 'paused' | undefined, runId: string): string;
 export interface RunFlowArgs {
     flowId: string;
     vars: Record<string, string>;
@@ -45,6 +60,12 @@ export interface RunFlowArgs {
         loopIter?: number;
         loopSub?: number;
     };
+    /**
+     * T035-1（S2）：调用方**已解析过**的闸门 key（server/CLI 的 run 前 acquire 用过的那一个）。
+     * 传入 = 同一 run 的 acquire 与 penalize 记同一个 key（不重复探测页面、不产生二次口径漂移）；
+     * 不传（如 resume_run）= run 内按「运行时 host → 流程声明 host → flow 维度」现解析。
+     */
+    gateKeyResolved?: GateKeyResolution;
 }
 /** 执行上下文（runner 持有全部共享状态） */
 export interface ExecCtx {
@@ -52,7 +73,7 @@ export interface ExecCtx {
     store: RunStore;
     runs: Map<string, RunFlowResult>;
     suggestions: SuggestionStore;
-    platform: LocalPlatform;
+    platform: ObservationExporter;
     siteGate: SiteGate;
     coolGate: CooldownGate;
     perf: PerfGate;
@@ -106,7 +127,17 @@ export declare class MockPage implements PageOps {
     private extracted;
     /** 测试用：waitMs 真实阻塞时长（默认 0 = no-op；设 >0 可让 run 慢下来验证队列忙） */
     slowWaitMs: number;
+    /** 测试用：注入的非拟人兜底事件（takeFallbacks 取走并清空；默认空 = 纯拟人路径） */
+    fallbackEvents: Array<{
+        kind: string;
+        selector?: string;
+    }>;
     setEnvCheck(config: EnvCheck | undefined): void;
+    /** 兜底计量（PageOps.takeFallbacks）：取走并清空 */
+    takeFallbacks(): Array<{
+        kind: string;
+        selector?: string;
+    }>;
     navigate(url: string): Promise<void>;
     click(sel: string, index: number): Promise<void>;
     input(_sel: string, v: string): Promise<void>;
@@ -123,29 +154,45 @@ export declare class MockPage implements PageOps {
     /** mock 的 snapshotDom（D-S1 验收：mock 模式不采集 → 返回 undefined 语义由 executeRun 跳过处理） */
     snapshotDom(): Promise<DomSnapshot>;
 }
-/**
- * 自动上报（自动注册闭环）：平台已配置时，run 结束后自动 deliver + 上传观察包到 md-forge。
- * 失败记台账 Failed（sync_pending_uploads / 启动 bootstrap 可重试）；平台未配置 → 零开销 no-op。
- */
-export declare function autoUploadRun(ctx: ExecCtx, runId: string): Promise<void>;
 /**
  * T020 P0-2：run 完成后顺带清理——超窗 runs 归档到 data/archive、snapshots/extracted 删除、
- * 残留 *.tmp 清扫；upload-ledger.json 保留全量；失败仅日志（不阻断 run 收尾）。
+ * 残留 *.tmp 清扫；失败仅日志（不阻断 run 收尾）。
+ * T029：观察包自动上传已随 md-forge 退役移除（export_observation 仍可本地导出）。
  */
 export declare function housekeepingAfterRun(ctx: ExecCtx): Promise<void>;
 /** 同步执行一个 run（构造驱动 → 解释执行 → 落盘 → 自动上报 → 更新运行状态） */
-export declare function executeRun(ctx: ExecCtx, args: RunFlowArgs, runId: string): Promise<RunFlowResult>;
+export declare function executeRun(ctx: ExecCtx, args: RunFlowArgs, runId: string, 
+/**
+ * 测试注入的页面驱动（**仅 mock 模式生效**；缺省 new MockPage()）。
+ * 真实模式恒用 CdpPage —— 注入值被忽略，测试缝隙不会漏进真实执行路径。
+ */
+pageOverride?: PageOps): Promise<RunFlowResult>;
+/**
+ * T027/B2：登录态探测器（真实模式缺省实现）——连 9222 现有标签页，
+ * 用 engine region.ts 登录区双重特征（isLoginSignal：路由特征 + 页面文本强标记，与 executor 每步复查同源）判定是否已登录。
+ * 标签页选择：优先与暂停流程同 host（用户在该站登录的页）；无同 host → 首个 page 标签。
+ * 返回 true = 已登录（预检通过）；false = 仍在登录区。
+ * 任何失败（浏览器不可达/无标签页/evaluate 失败）→ 抛错（调用方视为「预检不可判定」放行——评审定案 Q2）。
+ */
+export declare function probeLoginState(ctx: ExecCtx, flowId: string): Promise<boolean>;
+/** T027/B2：resume 预检配置（detectLogin 注入式——mock/测试替换；缺省真实模式用 probeLoginState） */
+export interface ResumePrecheck {
+    detectLogin?: () => Promise<boolean>;
+}
 /**
  * T015 P0-2：resume_run——从暂停点继续执行（人工接管后调用）。
  * 语义：
  * - 仅接受 status=paused 的 run（执行中/非 paused → 明确拒绝；不重跑已完成步骤）；
  * - 先校验暂停超时（缺省 5 分钟可配置）→ 超时转 failed（防无限挂起）；
+ * - T027/B2 登录态预检：pauseReason=login 时先探测引擎浏览器登录态——仍在登录区 → 拒绝本次 resume
+ *   （返回 precheckRejected，run 保持 paused，不消耗真实执行轮次——防封视角：真实站点的无谓失败本身就是风险信号）；
+ *   预检不可判定（浏览器不可达等）→ 放行走原路径（executor 每步登录复查兜底）；mock 模式不预检；
  * - 复用 vars（暂停时已持久化）与 resumeStepIndex/resumeLoop* 上下文，从暂停点继续；
  *   executor 每步前自动重新校验登录区/验证码（仍异常 → 再次 paused 并提示，不自动重试——防封不变）；
  * - 完成后正常走 done/failed 落盘 + L2 学习 + 自动上报（与普通 run 一致）。
  * 返回 RunFlowResult（status: running / done / failed / paused）。
  */
-export declare function resumeRun(ctx: ExecCtx, runId: string): Promise<RunFlowResult>;
+export declare function resumeRun(ctx: ExecCtx, runId: string, precheck?: ResumePrecheck): Promise<RunFlowResult>;
 /**
  * T009 P0-1：会话轮换——重启引擎浏览器进程（同 profile data/edge-profile，登录态持久保留）。
  * 语义：kill 当前 9222 Edge 调试实例 → 用同一 user-data-dir 重新拉起新会话（新进程/新 CDP 连接）。
@@ -153,9 +200,7 @@ export declare function resumeRun(ctx: ExecCtx, runId: string): Promise<RunFlowR
  * 不破坏 open-browser/懒加载登录：登录态在 profile（重启保留）；下次 open-browser/run 重新拉起。
  */
 export declare function rotateBrowserSession(port: number, edgePath: string, userDataDir: string): Promise<void>;
-/** 版本演进闭环：把本次 run 涉及的建议上传 md-forge（POST /api/suggestions，幂等）；失败仅日志 */
-export declare function autoUploadSuggestions(ctx: ExecCtx, flowId: string, suggestionIds: string[]): Promise<void>;
-/** 流程的目标站点 host（取首个 navigate 步骤的 url；无 navigate 返回 undefined —— 不节流 mock） */
+/** 流程声明的目标站点 host（T035-1 起 = **全部** navigate 步骤里最后一个；无 navigate → undefined） */
 export declare function flowHost(ctx: ExecCtx, flowId: string): string | undefined;
 /** 队列当前状态（自描述聚合用 D-S1；只读） */
 export declare function queueState(): {