@webskill/sdk 0.2.7 → 0.2.8

package/dist/{dist-BdOW8N4V.js → dist-B9VLwOME.js}

@@ -125,13 +125,17 @@ var OpenAiCompatibleClient = class {
 			type: "tool-calls",
 			toolCalls: [...toolCallsByIndex.entries()].sort(([a], [b]) => a - b).map(([index, acc]) => {
 				let args = {};
+				let parseError;
 				try {
 					args = JSON.parse(acc.arguments || "{}");
-				} catch {}
+				} catch (e) {
+					parseError = e instanceof Error ? e.message : String(e);
+				}
 				return {
 					id: acc.id || `call-${index}`,
 					name: acc.name,
-					arguments: args
+					arguments: args,
+					...parseError ? { argumentsParseError: parseError } : {}
 				};
 			})
 		};
@@ -358,13 +362,17 @@ var AnthropicClient = class {
 			type: "tool-calls",
 			toolCalls: [...toolCallsByIndex.entries()].sort(([a], [b]) => a - b).map(([index, acc]) => {
 				let args = {};
+				let parseError;
 				try {
 					args = JSON.parse(acc.arguments || "{}");
-				} catch {}
+				} catch (e) {
+					parseError = e instanceof Error ? e.message : String(e);
+				}
 				return {
 					id: acc.id || `call-${index}`,
 					name: acc.name,
-					arguments: args
+					arguments: args,
+					...parseError ? { argumentsParseError: parseError } : {}
 				};
 			})
 		};
@@ -1896,7 +1904,8 @@ var AgentLoop = class {
 		} });
 		this.#emitTool(state, "started", call);
 		let result;
-		if (call.name === "read_skill_file") result = await this.#handleReadSkillFile(call, state);
+		if (call.argumentsParseError) result = toolError("VALIDATION_FAILED", `Tool arguments were not valid JSON: ${call.argumentsParseError}`);
+		else if (call.name === "read_skill_file") result = await this.#handleReadSkillFile(call, state);
 		else if (call.name === "ask_user") result = await this.#handleAskUser(call, state);
 		else {
 			const resolution = resolveToolName(call.name, state.activated);
@@ -2264,8 +2273,9 @@ var AgentLoop = class {
 			let scriptFiles;
 			try {
 				scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
-			} catch {
+			} catch (e) {
 				scriptFiles = [];
+				if (!(e instanceof WebSkillError && e.code === "FS_NOT_FOUND")) state.trace.record("run.warning", { message: `Failed to list scripts of skill "${skillName}": ${messageOf(e)}` });
 			}
 			for (const file of scriptFiles) {
 				const match = /^(.*)\.(ts|js)$/.exec(file);
@@ -2402,10 +2412,11 @@ var AgentLoop = class {
 	#nextInteractionId(state) {
 		return `int-${++state.interactionSeq}`;
 	}
-	async #memoryGet(scope, key) {
+	async #memoryGet(scope, key, state) {
 		try {
 			return await this.#deps.memory?.get(scope, key);
-		} catch {
+		} catch (e) {
+			state.trace.record("run.warning", { message: `Memory read failed: ${messageOf(e)}` });
 			return;
 		}
 	}
@@ -2430,7 +2441,7 @@ var AgentLoop = class {
 			}
 			return;
 		}
-		await this.#memorySet(scope, key, mutate(await this.#memoryGet(scope, key)), state);
+		await this.#memorySet(scope, key, mutate(await this.#memoryGet(scope, key, state)), state);
 	}
 	async #writeActivationMemory(skillName, state) {
 		if (!this.#deps.memory) return;
@@ -2962,9 +2973,26 @@ const encode = (s) => encodeURIComponent(s);
 var FsMemoryStore = class {
 	#root;
 	#fs;
+	#onWarning;
 	constructor(deps) {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
+		this.#onWarning = deps.onWarning ?? ((message) => console.warn(message));
+	}
+	/**
+	* 0.2.8 G2：损坏条目此前直接 remove——静默销毁用户数据，且对调用方伪装成「没有这条记忆」。
+	* 改为隔离到 .corrupt 并告警：run 照常继续，但数据留存、故障可见。
+	*/
+	async #quarantine(path, error) {
+		const reason = error instanceof Error ? error.message : String(error);
+		const target = `${path}.corrupt`;
+		try {
+			await this.#fs.rename(path, target);
+			this.#onWarning(`[webskill] Corrupted memory entry quarantined to ${target}: ${reason}`);
+		} catch (renameError) {
+			const detail = renameError instanceof Error ? renameError.message : String(renameError);
+			this.#onWarning(`[webskill] Corrupted memory entry at ${path} could not be quarantined (${detail}): ${reason}`);
+		}
 	}
 	#scopeDir(scope) {
 		return `${this.#root}/${encode(scope)}`;
@@ -2977,8 +3005,8 @@ var FsMemoryStore = class {
 		if (!await this.#fs.exists(path)) return void 0;
 		try {
 			return JSON.parse(await this.#fs.readText(path));
-		} catch {
-			await this.#fs.remove(path);
+		} catch (e) {
+			await this.#quarantine(path, e);
 			return;
 		}
 	}
@@ -3002,8 +3030,8 @@ var FsMemoryStore = class {
 					key,
 					value: JSON.parse(await this.#fs.readText(entry.path))
 				});
-			} catch {
-				await this.#fs.remove(entry.path);
+			} catch (e) {
+				await this.#quarantine(entry.path, e);
 			}
 		}
 		return out.sort((a, b) => a.key.localeCompare(b.key));
@@ -3027,9 +3055,11 @@ const INDEX_FILE = "index.json";
 var FsArtifactStore = class {
 	#root;
 	#fs;
+	#onWarning;
 	constructor(deps) {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
+		this.#onWarning = deps.onWarning ?? ((message) => console.warn(message));
 	}
 	async createTextArtifact(input) {
 		const size = new TextEncoder().encode(input.content).length;
@@ -3055,8 +3085,15 @@ var FsArtifactStore = class {
 		const raw = await this.#fs.readText(indexPath);
 		try {
 			return JSON.parse(raw).artifacts ?? [];
-		} catch {
-			await this.#fs.remove(indexPath);
+		} catch (e) {
+			const reason = e instanceof Error ? e.message : String(e);
+			try {
+				await this.#fs.rename(indexPath, `${indexPath}.corrupt`);
+				this.#onWarning(`[webskill] Corrupted artifact index for run ${runId} quarantined to ${indexPath}.corrupt: ${reason}`);
+			} catch (renameError) {
+				const detail = renameError instanceof Error ? renameError.message : String(renameError);
+				this.#onWarning(`[webskill] Corrupted artifact index for run ${runId} could not be quarantined (${detail}): ${reason}`);
+			}
 			return [];
 		}
 	}
@@ -3170,6 +3207,20 @@ function networkUrlHost(url) {
 		return "(unparseable-url)";
 	}
 }
+/**
+* 网络策略判定逻辑的可注入源码（单一来源）。
+*
+* 0.2.8 C4：此前各注入点直接拼 `isNetworkAllowed.toString()`，依赖**函数名在产物里保持不变**。
+* SDK 自身不压缩，但消费方一旦跑生产构建，打包器会把导出函数改名（`function Ke(...)`），
+* 注入后的沙箱里 `isNetworkAllowed` 就是 undefined —— 沙箱内任何 fetch 直接
+* TOOL_EXECUTION_FAILED，网络白名单形同虚设。dev server 不压缩，所以只在真实产物上暴露。
+*
+* 因此改为把函数源码绑定到**固定的变量名**上：`var isNetworkAllowed = function Ke(...) {…};`
+* ——名字随便压缩，绑定名恒定。两个函数都自包含（不引用模块内其它符号），故可独立绑定。
+*/
+function networkPolicyLibSource() {
+	return `var isNetworkAllowed = ${isNetworkAllowed.toString()};\nvar networkUrlHost = ${networkUrlHost.toString()};`;
+}
 /** WebSkillErrorCode 全量白名单（错误码归一用；与 core errors.ts 保持同步） */
 const WHITELIST = /* @__PURE__ */ new Set([
 	"FS_NOT_FOUND",
@@ -3283,4 +3334,4 @@ var CapabilityApproval = class CapabilityApproval {
 };
 
 //#endregion
-export { fromVercelStreamPart as A, toLlmToolSpec as B, bridgeError as C, extractChartSpec as D, createWebSkillApi as E, normalizeToolContent as F, validateUiSurface as H, normalizeToolError as I, parseBridgeRequest as L, mergeCatalogEntries as M, networkUrlHost as N, extractUiSurfaceEvents as O, normalizeErrorCode as P, resolveToolName as R, WebSkillRuntime as S, createScriptContext as T, validateUiSurfaceEvent as U, toVercelToolSpecs as V, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, SerializingMemoryStore as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, isNetworkAllowed as j, fromVercelResult as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, buildRenderResult as w, TraceRecorder as x, RUN_SNAPSHOT_SCHEMA_VERSION as y, schemaToForm as z };
+export { fromVercelStreamPart as A, schemaToForm as B, bridgeError as C, extractChartSpec as D, createWebSkillApi as E, normalizeErrorCode as F, toVercelToolSpecs as H, normalizeToolContent as I, normalizeToolError as L, mergeCatalogEntries as M, networkPolicyLibSource as N, extractUiSurfaceEvents as O, networkUrlHost as P, parseBridgeRequest as R, WebSkillRuntime as S, createScriptContext as T, validateUiSurface as U, toLlmToolSpec as V, validateUiSurfaceEvent as W, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, SerializingMemoryStore as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, isNetworkAllowed as j, fromVercelResult as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, buildRenderResult as w, TraceRecorder as x, RUN_SNAPSHOT_SCHEMA_VERSION as y, resolveToolName as z };

package/dist/governance.d.ts

@@ -1,85 +1,37 @@
-import { G as SkillDocument, N as FileSystemProvider, U as SkillCatalogEntry, Y as SkillManifest, c as LlmClient, u as LlmMessage, v as UiBridge } from "./types-7fnqDVrf-BnRQjVU3.js";
-import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, q as RuntimeRun, tt as SkillStateGuard } from "./index-BpIK7tJM.js";
-import { d as SkillManager } from "./index-BHL5FWGw.js";
-//#region ../governance/dist/documentSource-9dhqKIVQ.d.ts
-//#region src/types.d.ts
-type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
-type CandidateSource = 'runtime-miss' | 'document' | 'manual';
-type CandidateRisk = 'low' | 'medium' | 'high';
-interface CandidateFile {
+import { G as SkillDocument, N as FileSystemProvider, U as SkillCatalogEntry, c as LlmClient, u as LlmMessage, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
+import { dt as WebSkillRuntime, q as RuntimeRun, tt as SkillStateGuard } from "./index-QrHtAudz.js";
+import { D as SkillManager, a as AuditLog, c as CandidateSkill, d as CandidateStore, f as CompositeApprovalPolicy, g as candidateToCatalogEntry, h as SkillVersionStore, i as AuditEvent, l as CandidateSource, m as SkillVersion, n as ApprovalDecision, o as CandidateFile, p as SkillState, r as ApprovalPolicy, s as CandidateRisk, t as AlwaysHumanApprovalPolicy, u as CandidateStatus } from "./skillVersionStore-B7rGjtMi-BgnQho9v.js";
+//#region ../governance/dist/index.d.ts
+//#region src/candidate/candidateNormalizer.d.ts
+/** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
+declare function parseJsonObject(raw: string): Record<string, unknown>;
+/** 小写连字符化、≤64、过 isValidSkillName */
+declare function sanitizeCandidateName(raw: string): string;
+/**
+ * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
+ * scripts/ 下必须是 .ts/.js。
+ */
+declare function normalizeCandidateFiles(files: Array<{
   path: string;
-  kind: 'skill-md' | 'script' | 'reference' | 'asset';
   content: string;
-}
-interface CandidateSkill {
-  id: string;
-  name: string;
-  description: string;
-  status: CandidateStatus;
-  source: CandidateSource;
+}>, name: string, description: string): CandidateFile[];
+/** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
+declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
   risk: CandidateRisk;
-  riskReasons: string[];
-  files: CandidateFile[];
-  suggestedTests?: string[];
-  createdAt: string;
-  updatedAt: string;
-  metadata?: Record<string, unknown>;
-}
-interface AuditEvent {
-  id: string;
-  type: string;
-  target: string;
-  actor?: string;
-  ts: string;
-  data?: Record<string, unknown>;
-  /** hash 链：上一条事件的 hash（首条为 GENESIS） */
-  prevHash?: string;
-  /** 本事件规范化载荷 + prevHash 的 sha256 */
-  hash?: string;
-}
-interface AuditLog {
-  append(event: Omit<AuditEvent, 'id' | 'ts'> & {
-    id?: string;
-    ts?: string;
-  }): Promise<AuditEvent>;
-  query(filter: {
-    target?: string;
-    type?: string;
-    since?: string;
-  }): Promise<AuditEvent[]>;
-}
-interface SkillVersion {
-  versionId: string;
-  parentVersionId?: string;
-  createdAt: string;
-  reason: string;
-  manifest: SkillManifest;
-  auditEventId?: string;
-  /** 发布时捕获的技能归档（zip 相对路径，applyRollback 恢复用；0.2.0 起记录） */
-  archivePath?: string;
-}
-type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
+  reasons: string[];
+};
+/** 不信任归一化管线全链路；状态恒为 draft */
+declare function normalizeCandidate(input: {
+  raw: Record<string, unknown>;
+  source: CandidateSource;
+  now?: () => string;
+  createId?: () => string;
+}): CandidateSkill;
 //#endregion
 //#region src/candidate/candidateValidator.d.ts
 /** 候选校验：缺 SKILL.md / 非法扩展名 → CANDIDATE_INVALID */
 declare function validateCandidate(candidate: CandidateSkill): void;
 //#endregion
-//#region src/candidate/candidateStore.d.ts
-/** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
-declare class CandidateStore {
-  #private;
-  constructor(deps: {
-    root: string;
-    fs: FileSystemProvider;
-  });
-  save(candidate: CandidateSkill): Promise<void>;
-  get(id: string): Promise<CandidateSkill>;
-  list(): Promise<CandidateSkill[]>;
-  updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
-}
-/** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
-declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;
-//#endregion
 //#region src/candidate/llmCandidateGenerator.d.ts
 /** LLM 候选生成器：prompt 强制约束 + 不信任归一化管线 + candidate.created 审计 */
 declare class LlmCandidateGenerator {
@@ -97,37 +49,6 @@ declare class LlmCandidateGenerator {
   }): Promise<CandidateSkill>;
 }
 //#endregion
-//#region src/versioning/skillVersionStore.d.ts
-/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
- *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
-declare class SkillVersionStore {
-  #private;
-  constructor(deps: {
-    root: string;
-    fs: FileSystemProvider;
-    now?: () => string;
-    createId?: () => string;
-    audit?: AuditLog;
-    /** 每技能保留的版本/归档上限（默认 5，超出清理最旧） */
-    maxArchivesPerSkill?: number;
-  });
-  add(skillName: string, input: {
-    reason: string;
-    manifest: SkillManifest;
-    parentVersionId?: string;
-    archive?: Uint8Array;
-  }): Promise<SkillVersion>;
-  /** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
-  readArchive(skillName: string, versionId: string): Promise<Uint8Array>;
-  list(skillName: string): Promise<SkillVersion[]>;
-  get(skillName: string, versionId: string): Promise<SkillVersion>;
-  /** 回滚：基于旧 manifest 追加新版本 + skill.rolled_back 审计 */
-  rollback(skillName: string, targetVersionId: string, input: {
-    actor?: string;
-    reason?: string;
-  }): Promise<SkillVersion>;
-}
-//#endregion
 //#region src/audit/fsAuditLog.d.ts
 interface AuditChainVerification {
   ok: boolean;
@@ -167,6 +88,8 @@ interface FailureDiagnosis {
   cause: string;
   suggestedFix: string;
   errorCode?: string;
+  /** 诊断来源：'llm' 为模型输出，'rules' 为错误码归类兑底 */
+  source: 'llm' | 'rules';
 }
 /** 失败诊断：trace 摘要 → LLM 诊断（JSON）；无 LLM 时规则版（错误码归类） */
 declare class FailureAnalyzer {
@@ -359,96 +282,6 @@ interface SourceDocument {
 /** 读文档 + sha256 hash（变更检测用） */
 declare function readDocument(fs: FileSystemProvider, path: string): Promise<SourceDocument>;
 //#endregion
-//#region ../governance/dist/index.d.ts
-//#region src/candidate/candidateNormalizer.d.ts
-/** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
-declare function parseJsonObject(raw: string): Record<string, unknown>;
-/** 小写连字符化、≤64、过 isValidSkillName */
-declare function sanitizeCandidateName(raw: string): string;
-/**
- * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
- * scripts/ 下必须是 .ts/.js。
- */
-declare function normalizeCandidateFiles(files: Array<{
-  path: string;
-  content: string;
-}>, name: string, description: string): CandidateFile[];
-/** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
-declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
-  risk: CandidateRisk;
-  reasons: string[];
-};
-/** 不信任归一化管线全链路；状态恒为 draft */
-declare function normalizeCandidate(input: {
-  raw: Record<string, unknown>;
-  source: CandidateSource;
-  now?: () => string;
-  createId?: () => string;
-}): CandidateSkill;
-//#endregion
-//#region src/approval/policies.d.ts
-interface ApprovalDecision {
-  needsHuman: boolean;
-  reason: string;
-}
-interface ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 默认策略：任何候选都必须人工审批 */
-declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-declare class CompositeApprovalPolicy implements ApprovalPolicy {
-  #private;
-  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-//#endregion
-//#region src/approval/approvalWorkflow.d.ts
-/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
-declare class ApprovalWorkflow {
-  #private;
-  constructor(deps: {
-    policy: ApprovalPolicy;
-    audit: AuditLog;
-    store: CandidateStore;
-    skillManager: SkillManager;
-    versions: SkillVersionStore;
-    fs?: FileSystemProvider;
-  });
-  /** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
-  review(candidateId: string, input: {
-    actor: string;
-    uiBridge?: UiBridge;
-  }): Promise<CandidateSkill>;
-  /** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
-  publish(candidateId: string, input: {
-    actor: string;
-  }): Promise<SkillManifest>;
-  /**
-   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
-   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
-   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
-   */
-  applyRollback(skillName: string, versionId: string, input: {
-    actor: string;
-    reason?: string;
-  }): Promise<SkillManifest>;
-}
-//#endregion
-//#region src/evaluation/evaluationRuntime.d.ts
-/**
- * 治理评估专用 runtime 装配（不可信技能试用路径）：
- * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
- * env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
- * 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
- * 非安全边界；envWhitelist 同样适用于该执行器）。
- */
-declare function createEvaluationRuntime(deps: WebSkillRuntimeDeps & {
-  executor?: ScriptExecutor;
-}): WebSkillRuntime;
-//#endregion
 //#region src/documents/documentSkillExtractor.d.ts
 /** 文档 → LLM 抽取 → 完整防御管线 → draft 候选（source: document） */
 declare class DocumentSkillExtractor {
@@ -495,4 +328,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, ApprovalWorkflow, type AuditEvent, type AuditLog, type CandidateFile, type CandidateRisk, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, LlmCandidateGenerator, type RepairOption, RepairPlanner, SCORING_WEIGHTS, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createEvaluationRuntime, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditEvent, type AuditLog, type CandidateFile, type CandidateRisk, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, LlmCandidateGenerator, type RepairOption, RepairPlanner, SCORING_WEIGHTS, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };