@webskill/sdk 0.1.5 → 0.2.0

package/dist/{dist-LIFS3ZjI.js → dist-Dj6QjHBn.js}

@@ -1,16 +1,15 @@
-import { A as validateSkills, C as parseSkillPackManifest, D as resolveArchiveLimits, O as resolveInsideRoot, S as parseSkillMarkdown, i as SKILL_MANIFEST_FILE, j as verifyManifest, k as unzipWithLimits, p as buildManifest, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, v as exportSkills, w as readResponseWithLimit, y as isValidSkillName } from "./dist-fZFZaf43.js";
-import { M as normalizeToolContent, N as parseBridgeRequest, S as bridgeError, c as FsArtifactStore, j as networkUrlHost, k as isNetworkAllowed, l as FsMemoryStore, o as CapabilityApproval } from "./dist-DuGN5x0v.js";
+import { A as unzipWithLimits, C as parseSkillMarkdown, M as verifyManifest, O as resolveArchiveLimits, T as readResponseWithLimit, b as isValidSkillName, f as atomicWriteText, i as SKILL_MANIFEST_FILE, j as validateSkills, k as resolveInsideRoot, m as buildManifest, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, w as parseSkillPackManifest, y as exportSkills } from "./dist-D0saNPi_.js";
+import { A as isNetworkAllowed, C as bridgeError, M as networkUrlHost, N as normalizeToolContent, P as parseBridgeRequest, c as FsArtifactStore, l as FsMemoryStore, o as CapabilityApproval } from "./dist-BS5OpedX.js";
+import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
-import { existsSync, promises, readFileSync } from "node:fs";
+import { existsSync, promises } from "node:fs";
 import path from "node:path";
 import { tmpdir } from "node:os";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { format, promisify } from "node:util";
 import { Worker } from "node:worker_threads";
-import { parseSync } from "oxc-parser";
 import { createInterface } from "node:readline/promises";
 import { mkdtemp } from "node:fs/promises";
-import * as tar from "tar";
 import { execFile } from "node:child_process";
 import { createHash } from "node:crypto";
 
@@ -122,6 +121,14 @@ var NodeFS = class {
 			throw this.#mapError(e, p);
 		}
 	}
+	async rename(from, to) {
+		await promises.mkdir(path.dirname(toPlatform$3(to)), { recursive: true });
+		try {
+			await promises.rename(toPlatform$3(from), toPlatform$3(to));
+		} catch (e) {
+			throw this.#mapError(e, from);
+		}
+	}
 	#mapError(e, p) {
 		if (isEnoent(e)) return new WebSkillError("FS_NOT_FOUND", `Path not found: ${p}`);
 		return e;
@@ -512,6 +519,16 @@ var SandboxedScriptExecutor = class {
 		}
 	}
 };
+const require_ = createRequire(import.meta.url);
+let parseSyncCache;
+function loadParseSync() {
+	if (!parseSyncCache) try {
+		parseSyncCache = require_("oxc-parser").parseSync;
+	} catch (e) {
+		throw new WebSkillError("TOOL_UNSUPPORTED", "The \"oxc-parser\" package is required for schema inference; install it first (npm i oxc-parser)", e);
+	}
+	return parseSyncCache;
+}
 const PLACEHOLDER_PREFIX = "Inferred placeholder (unsupported type: ";
 const placeholder = (text) => ({
 	type: "string",
@@ -561,7 +578,7 @@ var TypeMapper = class {
 		};
 		return placeholder(this.#text(t));
 	}
-	#union(t, seen) {
+	#union(t, _seen) {
 		const values = [];
 		for (const member of t.types ?? []) {
 			const value = member.literal?.value ?? member.value;
@@ -661,7 +678,7 @@ var OxcSchemaInferer = class {
 		let program;
 		let comments;
 		try {
-			const result = parseSync(options?.fileName ?? "script.ts", source);
+			const result = loadParseSync()(options?.fileName ?? "script.ts", source);
 			if (result.errors?.length > 0) return void 0;
 			program = result.program;
 			comments = result.comments ?? [];
@@ -677,7 +694,7 @@ var OxcSchemaInferer = class {
 		const jsdoc = comments.filter((c) => c.type === "Block" && typeof c.value === "string" && c.value.includes("@param") && typeof c.end === "number" && c.end <= runStart).sort((a, b) => b.end - a.end)[0];
 		if (!jsdoc) return void 0;
 		const reparse = (typeText) => {
-			const r = parseSync("__t.ts", `type __T = ${typeText};`);
+			const r = loadParseSync()("__t.ts", `type __T = ${typeText};`);
 			if (r.errors?.length > 0) return void 0;
 			return r.program.body.find((n) => n.type === "TSTypeAliasDeclaration")?.typeAnnotation;
 		};
@@ -833,6 +850,13 @@ var CliUiBridge = class {
 const messageOf$4 = (e) => e instanceof Error ? e.message : String(e);
 const toPlatform$1 = (p) => p.split("/").join(path.sep);
 const isZipArchive = (data) => data.length > 1 && data[0] === 80 && data[1] === 75;
+let tarModule$1;
+async function loadTar$1() {
+	tarModule$1 ??= await import("tar").catch((e) => {
+		throw new WebSkillError("TOOL_UNSUPPORTED", "The \"tar\" package is required for tar/tar.gz archives; install it first (npm i tar)", e);
+	});
+	return tarModule$1;
+}
 /**
 * zip 解包（fflate 流式，单条目/总解压体积上限）。每个条目路径过 resolveInsideRoot：
 * 拒绝 `..` 段、绝对路径、反斜杠穿越（zip-slip 防护）。
@@ -853,7 +877,8 @@ async function extractTarFile(archivePath, destRoot, limits) {
 	try {
 		const entryPaths = [];
 		let total = 0;
-		await tar.t({
+		const tarMod = await loadTar$1();
+		await tarMod.t({
 			file: toPlatform$1(archivePath),
 			onentry: (entry) => {
 				entryPaths.push(entry.path);
@@ -864,7 +889,7 @@ async function extractTarFile(archivePath, destRoot, limits) {
 			}
 		});
 		for (const p of entryPaths) if (!p.replace(/\\/g, "/").split("/").every((s) => s === "" || s === ".")) resolveInsideRoot(destRoot, p);
-		await tar.x({
+		await tarMod.x({
 			file: toPlatform$1(archivePath),
 			cwd: toPlatform$1(destRoot),
 			filter: (_p, entry) => !("type" in entry) || entry.type !== "SymbolicLink" && entry.type !== "Link"
@@ -916,6 +941,13 @@ async function removeDirQuiet(fs, dir) {
 	} catch {}
 }
 const messageOf$3 = (e) => e instanceof Error ? e.message : String(e);
+let tarModule;
+async function loadTar() {
+	tarModule ??= await import("tar").catch((e) => {
+		throw new WebSkillError("TOOL_UNSUPPORTED", "The \"tar\" package is required for tar/tar.gz archives; install it first (npm i tar)", e);
+	});
+	return tarModule;
+}
 /** 导出技能目录全部文件（含 manifest）为 zip/tar 归档，返回 outPath */
 async function exportArchive(fs, skillRoot, options) {
 	try {
@@ -923,7 +955,7 @@ async function exportArchive(fs, skillRoot, options) {
 			const files = {};
 			for (const rel of await listFiles(fs, skillRoot)) files[rel] = await fs.readBinary(`${skillRoot}/${rel}`);
 			await fs.writeBinary(options.outPath, zipSync(files, { level: 6 }));
-		} else await tar.c({
+		} else await (await loadTar()).c({
 			file: toPlatform$1(options.outPath),
 			cwd: toPlatform$1(skillRoot)
 		}, ["."]);
@@ -945,7 +977,7 @@ async function readArchiveManifest(fs, archivePath) {
 	}
 	let manifestText;
 	try {
-		await tar.t({
+		await (await loadTar()).t({
 			file: toPlatform$1(archivePath),
 			onentry: (entry) => {
 				if (entry.path === "webskill.skill-manifest.json" || entry.path.endsWith(`/${"webskill.skill-manifest.json"}`)) {
@@ -1151,15 +1183,19 @@ async function readLockfile(fs, managedRoot) {
 async function upsertLockEntry(fs, managedRoot, name, entry) {
 	const lockfile = await readLockfile(fs, managedRoot);
 	lockfile.skills[name] = entry;
-	await fs.writeText(`${managedRoot}/${SKILLS_LOCKFILE}`, JSON.stringify(lockfile, null, 2));
+	await writeLockfileAtomic(fs, managedRoot, lockfile);
 	return lockfile;
 }
 async function removeLockEntry(fs, managedRoot, name) {
 	const lockfile = await readLockfile(fs, managedRoot);
 	delete lockfile.skills[name];
-	await fs.writeText(`${managedRoot}/${SKILLS_LOCKFILE}`, JSON.stringify(lockfile, null, 2));
+	await writeLockfileAtomic(fs, managedRoot, lockfile);
 	return lockfile;
 }
+/** 原子写：先写临时文件再 rename（进程崩溃不留下半写 lockfile） */
+async function writeLockfileAtomic(fs, managedRoot, lockfile) {
+	await atomicWriteText(fs, `${managedRoot}/${SKILLS_LOCKFILE}`, JSON.stringify(lockfile, null, 2));
+}
 const EXCLUDED_FILES = /* @__PURE__ */ new Set([SKILL_MANIFEST_FILE, SKILLS_LOCKFILE]);
 /** 递归收集技能目录内的文件（相对路径，posix 分隔） */
 async function walkFiles(fs, root, prefix = "") {
@@ -1235,6 +1271,10 @@ var SkillManager = class {
 		this.#archiveLimits = deps.archiveLimits;
 		this.#onChanged = deps.onChanged;
 	}
+	/** 托管根目录（治理发布归档捕获等只读场景） */
+	get managedRoot() {
+		return this.#managedRoot;
+	}
 	async install(source, options) {
 		const fs = this.#fs;
 		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-install-"))).split(path.sep).join("/");
@@ -1458,142 +1498,6 @@ var SkillManager = class {
 		return options.outPath;
 	}
 };
-/** 解析 .env（简单 KEY=VALUE 行解析，不引依赖）；文件缺失返回 undefined */
-function readEnvVars(dotenvPath) {
-	let raw;
-	try {
-		raw = readFileSync(dotenvPath, "utf8");
-	} catch {
-		return;
-	}
-	const vars = /* @__PURE__ */ new Map();
-	for (const line of raw.split(/\r?\n/)) {
-		const trimmed = line.trim();
-		if (trimmed === "" || trimmed.startsWith("#")) continue;
-		const eq = trimmed.indexOf("=");
-		if (eq <= 0) continue;
-		const key = trimmed.slice(0, eq).trim();
-		let value = trimmed.slice(eq + 1).trim();
-		if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
-		vars.set(key, value);
-	}
-	return vars;
-}
-/**
-* 读取 VITE_BASE_URL / VITE_API_KEY / VITE_MODEL_NAME；缺项返回 undefined 供测试 skip 判断。
-*/
-function loadLlmConfigFromEnv(dotenvPath = ".env") {
-	const vars = readEnvVars(dotenvPath);
-	if (!vars) return void 0;
-	const baseUrl = vars.get("VITE_BASE_URL");
-	const apiKey = vars.get("VITE_API_KEY");
-	const model = vars.get("VITE_MODEL_NAME");
-	if (!baseUrl || !apiKey || !model) return void 0;
-	return {
-		baseUrl,
-		apiKey,
-		model
-	};
-}
-/** ANTHROPIC_API_KEY / ANTHROPIC_MODEL（可选 ANTHROPIC_BASE_URL）；缺项返回 undefined */
-function loadAnthropicConfigFromEnv(dotenvPath = ".env") {
-	const vars = readEnvVars(dotenvPath);
-	if (!vars) return void 0;
-	const apiKey = vars.get("ANTHROPIC_API_KEY");
-	const model = vars.get("ANTHROPIC_MODEL");
-	if (!apiKey || !model) return void 0;
-	const baseUrl = vars.get("ANTHROPIC_BASE_URL");
-	return {
-		apiKey,
-		model,
-		...baseUrl ? { baseUrl } : {}
-	};
-}
-/** GOOGLE_API_KEY / GOOGLE_MODEL（可选 GOOGLE_BASE_URL）；缺项返回 undefined */
-function loadGoogleConfigFromEnv(dotenvPath = ".env") {
-	const vars = readEnvVars(dotenvPath);
-	if (!vars) return void 0;
-	const apiKey = vars.get("GOOGLE_API_KEY");
-	const model = vars.get("GOOGLE_MODEL");
-	if (!apiKey || !model) return void 0;
-	const baseUrl = vars.get("GOOGLE_BASE_URL");
-	return {
-		apiKey,
-		model,
-		...baseUrl ? { baseUrl } : {}
-	};
-}
-let capabilitiesCache;
-/**
-* 探测 LLM 能力（结果模块级缓存）：
-* - available：GET /models 可达（与 checkAvailability 同语义）
-* - nonStreaming：最小非流式 chat completion（max_tokens=1，短超时）；
-*   HTTP 400/404 或明确不支持非流式的错误 → false
-* - streaming 能力由 available 推断（SSE 解析在 SDK 侧实现）
-* 环境变量 VITE_LLM_NON_STREAMING=0 可显式强制 nonStreaming=false（模拟流式-only 回归）。
-*/
-function probeLlmCapabilities(config) {
-	capabilitiesCache ??= doProbeLlmCapabilities(config);
-	return capabilitiesCache;
-}
-async function doProbeLlmCapabilities(config) {
-	const baseUrl = config.baseUrl.replace(/\/+$/, "");
-	const headers = { authorization: `Bearer ${config.apiKey}` };
-	let available = false;
-	try {
-		available = (await fetch(`${baseUrl}/models`, {
-			headers,
-			signal: AbortSignal.timeout(1e4)
-		})).ok;
-	} catch {
-		available = false;
-	}
-	if (!available) return {
-		available: false,
-		nonStreaming: false,
-		reason: "endpoint unreachable or unauthorized"
-	};
-	if (process.env["VITE_LLM_NON_STREAMING"] === "0") return {
-		available: true,
-		nonStreaming: false,
-		reason: "non-streaming disabled via VITE_LLM_NON_STREAMING=0 (simulated)"
-	};
-	try {
-		const res = await fetch(`${baseUrl}/chat/completions`, {
-			method: "POST",
-			headers: {
-				...headers,
-				"content-type": "application/json"
-			},
-			body: JSON.stringify({
-				model: config.model,
-				messages: [{
-					role: "user",
-					content: "OK"
-				}],
-				max_tokens: 1
-			}),
-			signal: AbortSignal.timeout(15e3)
-		});
-		const contentType = res.headers.get("content-type") ?? "";
-		if (res.ok && !contentType.includes("text/event-stream")) return {
-			available: true,
-			nonStreaming: true
-		};
-		const detail = (await res.text().catch(() => "")).slice(0, 200);
-		return {
-			available: true,
-			nonStreaming: false,
-			reason: `endpoint rejects non-streaming chat completions (HTTP ${res.status})${detail ? `: ${detail}` : ""}`
-		};
-	} catch (e) {
-		return {
-			available: true,
-			nonStreaming: false,
-			reason: `non-streaming probe failed: ${e instanceof Error ? e.message : String(e)}`
-		};
-	}
-}
 
 //#endregion
-export { NodeScriptExecutor as a, SkillManager as c, loadLlmConfigFromEnv as d, probeLlmCapabilities as f, NodeFS as i, loadAnthropicConfigFromEnv as l, FileArtifactStore as n, OxcSchemaInferer as o, readArchiveManifest as p, FileMemoryStore as r, SandboxedScriptExecutor as s, CliUiBridge as t, loadGoogleConfigFromEnv as u };
+export { NodeScriptExecutor as a, SkillManager as c, NodeFS as i, exportArchive as l, FileArtifactStore as n, OxcSchemaInferer as o, FileMemoryStore as r, SandboxedScriptExecutor as s, CliUiBridge as t, readArchiveManifest as u };

package/dist/env--jJB-TSX-04klhTYi.js

@@ -0,0 +1,143 @@
+import { readFileSync } from "node:fs";
+
+//#region ../node/dist/env--jJB-TSX.js
+/** 解析 .env（简单 KEY=VALUE 行解析，不引依赖）；文件缺失返回 undefined */
+function readEnvVars(dotenvPath) {
+	let raw;
+	try {
+		raw = readFileSync(dotenvPath, "utf8");
+	} catch {
+		return;
+	}
+	const vars = /* @__PURE__ */ new Map();
+	for (const line of raw.split(/\r?\n/)) {
+		const trimmed = line.trim();
+		if (trimmed === "" || trimmed.startsWith("#")) continue;
+		const eq = trimmed.indexOf("=");
+		if (eq <= 0) continue;
+		const key = trimmed.slice(0, eq).trim();
+		let value = trimmed.slice(eq + 1).trim();
+		if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
+		vars.set(key, value);
+	}
+	return vars;
+}
+/**
+* 读取 LLM_BASE_URL / LLM_API_KEY / LLM_MODEL（优先），
+* 向后兼容 VITE_BASE_URL / VITE_API_KEY / VITE_MODEL_NAME；缺项返回 undefined 供测试 skip 判断。
+*/
+function loadLlmConfigFromEnv(dotenvPath = ".env") {
+	const vars = readEnvVars(dotenvPath);
+	if (!vars) return void 0;
+	const baseUrl = vars.get("LLM_BASE_URL") ?? vars.get("VITE_BASE_URL");
+	const apiKey = vars.get("LLM_API_KEY") ?? vars.get("VITE_API_KEY");
+	const model = vars.get("LLM_MODEL") ?? vars.get("VITE_MODEL_NAME");
+	if (!baseUrl || !apiKey || !model) return void 0;
+	return {
+		baseUrl,
+		apiKey,
+		model
+	};
+}
+/** ANTHROPIC_API_KEY / ANTHROPIC_MODEL（可选 ANTHROPIC_BASE_URL）；缺项返回 undefined */
+function loadAnthropicConfigFromEnv(dotenvPath = ".env") {
+	const vars = readEnvVars(dotenvPath);
+	if (!vars) return void 0;
+	const apiKey = vars.get("ANTHROPIC_API_KEY");
+	const model = vars.get("ANTHROPIC_MODEL");
+	if (!apiKey || !model) return void 0;
+	const baseUrl = vars.get("ANTHROPIC_BASE_URL");
+	return {
+		apiKey,
+		model,
+		...baseUrl ? { baseUrl } : {}
+	};
+}
+/** GOOGLE_API_KEY / GOOGLE_MODEL（可选 GOOGLE_BASE_URL）；缺项返回 undefined */
+function loadGoogleConfigFromEnv(dotenvPath = ".env") {
+	const vars = readEnvVars(dotenvPath);
+	if (!vars) return void 0;
+	const apiKey = vars.get("GOOGLE_API_KEY");
+	const model = vars.get("GOOGLE_MODEL");
+	if (!apiKey || !model) return void 0;
+	const baseUrl = vars.get("GOOGLE_BASE_URL");
+	return {
+		apiKey,
+		model,
+		...baseUrl ? { baseUrl } : {}
+	};
+}
+let capabilitiesCache;
+/**
+* 探测 LLM 能力（结果模块级缓存）：
+* - available：GET /models 可达（与 checkAvailability 同语义）
+* - nonStreaming：最小非流式 chat completion（max_tokens=1，短超时）；
+*   HTTP 400/404 或明确不支持非流式的错误 → false
+* - streaming 能力由 available 推断（SSE 解析在 SDK 侧实现）
+* 环境变量 VITE_LLM_NON_STREAMING=0 可显式强制 nonStreaming=false（模拟流式-only 回归）。
+*/
+function probeLlmCapabilities(config) {
+	capabilitiesCache ??= doProbeLlmCapabilities(config);
+	return capabilitiesCache;
+}
+async function doProbeLlmCapabilities(config) {
+	const baseUrl = config.baseUrl.replace(/\/+$/, "");
+	const headers = { authorization: `Bearer ${config.apiKey}` };
+	let available;
+	try {
+		available = (await fetch(`${baseUrl}/models`, {
+			headers,
+			signal: AbortSignal.timeout(1e4)
+		})).ok;
+	} catch {
+		available = false;
+	}
+	if (!available) return {
+		available: false,
+		nonStreaming: false,
+		reason: "endpoint unreachable or unauthorized"
+	};
+	if (process.env["VITE_LLM_NON_STREAMING"] === "0") return {
+		available: true,
+		nonStreaming: false,
+		reason: "non-streaming disabled via VITE_LLM_NON_STREAMING=0 (simulated)"
+	};
+	try {
+		const res = await fetch(`${baseUrl}/chat/completions`, {
+			method: "POST",
+			headers: {
+				...headers,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				model: config.model,
+				messages: [{
+					role: "user",
+					content: "OK"
+				}],
+				max_tokens: 1
+			}),
+			signal: AbortSignal.timeout(15e3)
+		});
+		const contentType = res.headers.get("content-type") ?? "";
+		if (res.ok && !contentType.includes("text/event-stream")) return {
+			available: true,
+			nonStreaming: true
+		};
+		const detail = (await res.text().catch(() => "")).slice(0, 200);
+		return {
+			available: true,
+			nonStreaming: false,
+			reason: `endpoint rejects non-streaming chat completions (HTTP ${res.status})${detail ? `: ${detail}` : ""}`
+		};
+	} catch (e) {
+		return {
+			available: true,
+			nonStreaming: false,
+			reason: `non-streaming probe failed: ${e instanceof Error ? e.message : String(e)}`
+		};
+	}
+}
+
+//#endregion
+export { probeLlmCapabilities as i, loadGoogleConfigFromEnv as n, loadLlmConfigFromEnv as r, loadAnthropicConfigFromEnv as t };

package/dist/env-BPUBZCwJ-4jat_SVG.d.ts

@@ -0,0 +1,38 @@
+//#region ../node/dist/env-BPUBZCwJ.d.ts
+//#region src/env.d.ts
+interface LlmEnvConfig {
+  baseUrl: string;
+  apiKey: string;
+  model: string;
+}
+/** per-provider env 配置（baseUrl 可选，客户端自带默认） */
+interface ProviderEnvConfig {
+  apiKey: string;
+  model: string;
+  baseUrl?: string;
+}
+/**
+ * 读取 LLM_BASE_URL / LLM_API_KEY / LLM_MODEL（优先），
+ * 向后兼容 VITE_BASE_URL / VITE_API_KEY / VITE_MODEL_NAME；缺项返回 undefined 供测试 skip 判断。
+ */
+declare function loadLlmConfigFromEnv(dotenvPath?: string): LlmEnvConfig | undefined;
+/** ANTHROPIC_API_KEY / ANTHROPIC_MODEL（可选 ANTHROPIC_BASE_URL）；缺项返回 undefined */
+declare function loadAnthropicConfigFromEnv(dotenvPath?: string): ProviderEnvConfig | undefined;
+/** GOOGLE_API_KEY / GOOGLE_MODEL（可选 GOOGLE_BASE_URL）；缺项返回 undefined */
+declare function loadGoogleConfigFromEnv(dotenvPath?: string): ProviderEnvConfig | undefined;
+interface LlmCapabilities {
+  available: boolean;
+  nonStreaming: boolean;
+  reason?: string;
+}
+/**
+ * 探测 LLM 能力（结果模块级缓存）：
+ * - available：GET /models 可达（与 checkAvailability 同语义）
+ * - nonStreaming：最小非流式 chat completion（max_tokens=1，短超时）；
+ *   HTTP 400/404 或明确不支持非流式的错误 → false
+ * - streaming 能力由 available 推断（SSE 解析在 SDK 侧实现）
+ * 环境变量 VITE_LLM_NON_STREAMING=0 可显式强制 nonStreaming=false（模拟流式-only 回归）。
+ */
+declare function probeLlmCapabilities(config: LlmEnvConfig): Promise<LlmCapabilities>;
+//#endregion
+export { loadGoogleConfigFromEnv as a, loadAnthropicConfigFromEnv as i, LlmEnvConfig as n, loadLlmConfigFromEnv as o, ProviderEnvConfig as r, probeLlmCapabilities as s, LlmCapabilities as t };

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { F as SkillDocument, N as SkillCatalogEntry, c as LlmClient, u as LlmMessage, v as UiBridge, w as FileSystemProvider, z as SkillManifest } from "./types-CgNC-oQu-DEcIBJKG.js";
-import { $ as SkillStateGuard, lt as WebSkillRuntime, q as RuntimeRun } from "./index-COuOu6gw.js";
-import { f as SkillManager } from "./index-Bun1aEf4.js";
+import { F as SkillDocument, N as SkillCatalogEntry, c as LlmClient, u as LlmMessage, v as UiBridge, w as FileSystemProvider, z as SkillManifest } from "./types-CKm5G_eQ-8W8FnP4u.js";
+import { dt as WebSkillRuntime, q as RuntimeRun, tt as SkillStateGuard } from "./index-CySxIvRz.js";
+import { l as SkillManager } from "./index-Vn63HJRO.js";
 //#region ../governance/dist/index.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
@@ -32,6 +32,10 @@ interface AuditEvent {
   actor?: string;
   ts: string;
   data?: Record<string, unknown>;
+  /** hash 链：上一条事件的 hash（首条为 GENESIS） */
+  prevHash?: string;
+  /** 本事件规范化载荷 + prevHash 的 sha256 */
+  hash?: string;
 }
 interface AuditLog {
   append(event: Omit<AuditEvent, 'id' | 'ts'> & {
@@ -51,6 +55,8 @@ interface SkillVersion {
   reason: string;
   manifest: SkillManifest;
   auditEventId?: string;
+  /** 发布时捕获的技能归档（zip 相对路径，applyRollback 恢复用；0.2.0 起记录） */
+  archivePath?: string;
 }
 type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
 //#endregion
@@ -151,7 +157,10 @@ declare class SkillVersionStore {
     reason: string;
     manifest: SkillManifest;
     parentVersionId?: string;
+    archive?: Uint8Array;
   }): Promise<SkillVersion>;
+  /** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
+  readArchive(skillName: string, versionId: string): Promise<Uint8Array>;
   list(skillName: string): Promise<SkillVersion[]>;
   get(skillName: string, versionId: string): Promise<SkillVersion>;
   /** 回滚：基于旧 manifest 追加新版本 + skill.rolled_back 审计 */
@@ -182,10 +191,25 @@ declare class ApprovalWorkflow {
   publish(candidateId: string, input: {
     actor: string;
   }): Promise<SkillManifest>;
+  /**
+   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
+   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
+   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
+   */
+  applyRollback(skillName: string, versionId: string, input: {
+    actor: string;
+    reason?: string;
+  }): Promise<SkillManifest>;
 }
 //#endregion
 //#region src/audit/fsAuditLog.d.ts
-/** JSONL 追加的审计日志：<managedRoot>/.webskill/audit.jsonl；跨实例可恢复查询 */
+interface AuditChainVerification {
+  ok: boolean;
+  /** 首个断链位置（行号，0 起；ok 时 undefined） */
+  brokenAt?: number;
+  reason?: string;
+}
+/** JSONL 追加的审计日志：<managedRoot>/.webskill/audit.jsonl；跨实例可恢复查询；prevHash 链可校验完整性 */
 declare class FsAuditLog implements AuditLog {
   #private;
   constructor(deps: {
@@ -194,7 +218,7 @@ declare class FsAuditLog implements AuditLog {
     now?: () => string;
     createId?: () => string;
   });
-  append(event: Omit<AuditEvent, 'id' | 'ts'> & {
+  append(event: Omit<AuditEvent, 'id' | 'ts' | 'prevHash' | 'hash'> & {
     id?: string;
     ts?: string;
   }): Promise<AuditEvent>;
@@ -203,6 +227,8 @@ declare class FsAuditLog implements AuditLog {
     type?: string;
     since?: string;
   }): Promise<AuditEvent[]>;
+  /** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接 */
+  verifyChain(): Promise<AuditChainVerification>;
 }
 //#endregion
 //#region src/repair/failureAnalyzer.d.ts
@@ -234,7 +260,7 @@ interface RepairOption {
 }
 /**
  * 修订选项规划：patch（按诊断给具体文件变更）/ rollback（有旧版本时）/ quarantine。
- * 注意：任何 option 的 apply 都必须经 ApprovalWorkflow 审批后执行。
+ * 注意：任何 option 的 apply 都必须经 ApprovalWorkflow 审批后执行；rollback 选项（targetVersionId）经 ApprovalWorkflow.applyRollback 真实恢复文件。
  */
 declare class RepairPlanner {
   plan(input: {