@webskill/sdk 0.2.7 → 0.3.0

package/dist/governance.d.ts

@@ -1,85 +1,37 @@
-import { G as SkillDocument, N as FileSystemProvider, U as SkillCatalogEntry, Y as SkillManifest, c as LlmClient, u as LlmMessage, v as UiBridge } from "./types-7fnqDVrf-BnRQjVU3.js";
-import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, q as RuntimeRun, tt as SkillStateGuard } from "./index-BpIK7tJM.js";
-import { d as SkillManager } from "./index-BHL5FWGw.js";
-//#region ../governance/dist/documentSource-9dhqKIVQ.d.ts
-//#region src/types.d.ts
-type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
-type CandidateSource = 'runtime-miss' | 'document' | 'manual';
-type CandidateRisk = 'low' | 'medium' | 'high';
-interface CandidateFile {
+import { P as FileSystemProvider, Q as SkillDocument, X as SkillCatalogEntry, c as LlmClient, nt as SkillManagerPort, u as LlmMessage, v as UiBridge } from "./types-AmKCKJn_-VGabeXK4.js";
+import { mt as SkillStateGuard, nt as RuntimeRun, wt as WebSkillRuntime } from "./index-8d-oEDww.js";
+import { a as AuditLog, c as CandidateSkill, d as CandidateStore, f as CompositeApprovalPolicy, g as candidateToCatalogEntry, h as SkillVersionStore, i as AuditEvent, l as CandidateSource, m as SkillVersion, n as ApprovalDecision, o as CandidateFile, p as SkillState, r as ApprovalPolicy, s as CandidateRisk, t as AlwaysHumanApprovalPolicy, u as CandidateStatus } from "./skillVersionStore-DOEI9ptb-BxbYL70B.js";
+//#region ../governance/dist/index.d.ts
+//#region src/candidate/candidateNormalizer.d.ts
+/** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
+declare function parseJsonObject(raw: string): Record<string, unknown>;
+/** 小写连字符化、≤64、过 isValidSkillName */
+declare function sanitizeCandidateName(raw: string): string;
+/**
+ * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
+ * scripts/ 下必须是 .ts/.js。
+ */
+declare function normalizeCandidateFiles(files: Array<{
   path: string;
-  kind: 'skill-md' | 'script' | 'reference' | 'asset';
   content: string;
-}
-interface CandidateSkill {
-  id: string;
-  name: string;
-  description: string;
-  status: CandidateStatus;
-  source: CandidateSource;
+}>, name: string, description: string): CandidateFile[];
+/** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
+declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
   risk: CandidateRisk;
-  riskReasons: string[];
-  files: CandidateFile[];
-  suggestedTests?: string[];
-  createdAt: string;
-  updatedAt: string;
-  metadata?: Record<string, unknown>;
-}
-interface AuditEvent {
-  id: string;
-  type: string;
-  target: string;
-  actor?: string;
-  ts: string;
-  data?: Record<string, unknown>;
-  /** hash 链：上一条事件的 hash（首条为 GENESIS） */
-  prevHash?: string;
-  /** 本事件规范化载荷 + prevHash 的 sha256 */
-  hash?: string;
-}
-interface AuditLog {
-  append(event: Omit<AuditEvent, 'id' | 'ts'> & {
-    id?: string;
-    ts?: string;
-  }): Promise<AuditEvent>;
-  query(filter: {
-    target?: string;
-    type?: string;
-    since?: string;
-  }): Promise<AuditEvent[]>;
-}
-interface SkillVersion {
-  versionId: string;
-  parentVersionId?: string;
-  createdAt: string;
-  reason: string;
-  manifest: SkillManifest;
-  auditEventId?: string;
-  /** 发布时捕获的技能归档（zip 相对路径，applyRollback 恢复用；0.2.0 起记录） */
-  archivePath?: string;
-}
-type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
+  reasons: string[];
+};
+/** 不信任归一化管线全链路；状态恒为 draft */
+declare function normalizeCandidate(input: {
+  raw: Record<string, unknown>;
+  source: CandidateSource;
+  now?: () => string;
+  createId?: () => string;
+}): CandidateSkill;
 //#endregion
 //#region src/candidate/candidateValidator.d.ts
 /** 候选校验：缺 SKILL.md / 非法扩展名 → CANDIDATE_INVALID */
 declare function validateCandidate(candidate: CandidateSkill): void;
 //#endregion
-//#region src/candidate/candidateStore.d.ts
-/** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
-declare class CandidateStore {
-  #private;
-  constructor(deps: {
-    root: string;
-    fs: FileSystemProvider;
-  });
-  save(candidate: CandidateSkill): Promise<void>;
-  get(id: string): Promise<CandidateSkill>;
-  list(): Promise<CandidateSkill[]>;
-  updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
-}
-/** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
-declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;
-//#endregion
 //#region src/candidate/llmCandidateGenerator.d.ts
 /** LLM 候选生成器：prompt 强制约束 + 不信任归一化管线 + candidate.created 审计 */
 declare class LlmCandidateGenerator {
@@ -97,37 +49,6 @@ declare class LlmCandidateGenerator {
   }): Promise<CandidateSkill>;
 }
 //#endregion
-//#region src/versioning/skillVersionStore.d.ts
-/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
- *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
-declare class SkillVersionStore {
-  #private;
-  constructor(deps: {
-    root: string;
-    fs: FileSystemProvider;
-    now?: () => string;
-    createId?: () => string;
-    audit?: AuditLog;
-    /** 每技能保留的版本/归档上限（默认 5，超出清理最旧） */
-    maxArchivesPerSkill?: number;
-  });
-  add(skillName: string, input: {
-    reason: string;
-    manifest: SkillManifest;
-    parentVersionId?: string;
-    archive?: Uint8Array;
-  }): Promise<SkillVersion>;
-  /** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
-  readArchive(skillName: string, versionId: string): Promise<Uint8Array>;
-  list(skillName: string): Promise<SkillVersion[]>;
-  get(skillName: string, versionId: string): Promise<SkillVersion>;
-  /** 回滚：基于旧 manifest 追加新版本 + skill.rolled_back 审计 */
-  rollback(skillName: string, targetVersionId: string, input: {
-    actor?: string;
-    reason?: string;
-  }): Promise<SkillVersion>;
-}
-//#endregion
 //#region src/audit/fsAuditLog.d.ts
 interface AuditChainVerification {
   ok: boolean;
@@ -167,6 +88,8 @@ interface FailureDiagnosis {
   cause: string;
   suggestedFix: string;
   errorCode?: string;
+  /** 诊断来源：'llm' 为模型输出，'rules' 为错误码归类兑底 */
+  source: 'llm' | 'rules';
 }
 /** 失败诊断：trace 摘要 → LLM 诊断（JSON）；无 LLM 时规则版（错误码归类） */
 declare class FailureAnalyzer {
@@ -241,7 +164,7 @@ declare class SkillStatePolicy {
   uninstall(skillName: string, input: {
     actor: string;
     uiBridge: UiBridge;
-    skillManager: SkillManager;
+    skillManager: SkillManagerPort;
   }): Promise<void>;
 }
 //#endregion
@@ -359,96 +282,6 @@ interface SourceDocument {
 /** 读文档 + sha256 hash（变更检测用） */
 declare function readDocument(fs: FileSystemProvider, path: string): Promise<SourceDocument>;
 //#endregion
-//#region ../governance/dist/index.d.ts
-//#region src/candidate/candidateNormalizer.d.ts
-/** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
-declare function parseJsonObject(raw: string): Record<string, unknown>;
-/** 小写连字符化、≤64、过 isValidSkillName */
-declare function sanitizeCandidateName(raw: string): string;
-/**
- * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
- * scripts/ 下必须是 .ts/.js。
- */
-declare function normalizeCandidateFiles(files: Array<{
-  path: string;
-  content: string;
-}>, name: string, description: string): CandidateFile[];
-/** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
-declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
-  risk: CandidateRisk;
-  reasons: string[];
-};
-/** 不信任归一化管线全链路；状态恒为 draft */
-declare function normalizeCandidate(input: {
-  raw: Record<string, unknown>;
-  source: CandidateSource;
-  now?: () => string;
-  createId?: () => string;
-}): CandidateSkill;
-//#endregion
-//#region src/approval/policies.d.ts
-interface ApprovalDecision {
-  needsHuman: boolean;
-  reason: string;
-}
-interface ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 默认策略：任何候选都必须人工审批 */
-declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-declare class CompositeApprovalPolicy implements ApprovalPolicy {
-  #private;
-  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-//#endregion
-//#region src/approval/approvalWorkflow.d.ts
-/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
-declare class ApprovalWorkflow {
-  #private;
-  constructor(deps: {
-    policy: ApprovalPolicy;
-    audit: AuditLog;
-    store: CandidateStore;
-    skillManager: SkillManager;
-    versions: SkillVersionStore;
-    fs?: FileSystemProvider;
-  });
-  /** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
-  review(candidateId: string, input: {
-    actor: string;
-    uiBridge?: UiBridge;
-  }): Promise<CandidateSkill>;
-  /** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
-  publish(candidateId: string, input: {
-    actor: string;
-  }): Promise<SkillManifest>;
-  /**
-   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
-   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
-   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
-   */
-  applyRollback(skillName: string, versionId: string, input: {
-    actor: string;
-    reason?: string;
-  }): Promise<SkillManifest>;
-}
-//#endregion
-//#region src/evaluation/evaluationRuntime.d.ts
-/**
- * 治理评估专用 runtime 装配（不可信技能试用路径）：
- * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
- * env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
- * 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
- * 非安全边界；envWhitelist 同样适用于该执行器）。
- */
-declare function createEvaluationRuntime(deps: WebSkillRuntimeDeps & {
-  executor?: ScriptExecutor;
-}): WebSkillRuntime;
-//#endregion
 //#region src/documents/documentSkillExtractor.d.ts
 /** 文档 → LLM 抽取 → 完整防御管线 → draft 候选（source: document） */
 declare class DocumentSkillExtractor {
@@ -495,4 +328,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, ApprovalWorkflow, type AuditEvent, type AuditLog, type CandidateFile, type CandidateRisk, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, LlmCandidateGenerator, type RepairOption, RepairPlanner, SCORING_WEIGHTS, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createEvaluationRuntime, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditEvent, type AuditLog, type CandidateFile, type CandidateRisk, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, LlmCandidateGenerator, type RepairOption, RepairPlanner, SCORING_WEIGHTS, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/governance.js

@@ -1,11 +1,6 @@
-import { C as messageOf, M as unzipWithLimits, N as validateSkills, f as assertSafePathSegment, j as resolveInsideRoot, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { S as WebSkillRuntime } from "./dist-BdOW8N4V.js";
-import { i as NodeFS, s as ProcessSandboxExecutor, u as exportArchive } from "./dist-CcMIUXeZ.js";
-import path from "node:path";
-import { tmpdir } from "node:os";
-import { mkdtemp } from "node:fs/promises";
+import { O as messageOf, T as isValidSkillName, g as assertSafePathSegment, m as WebSkillError } from "./dist-8oQRa8Xz.js";
 
-//#region ../governance/dist/documentSource-C6gq6pbk.js
+//#region ../governance/dist/index.js
 const invalid = (message, details) => {
 	throw new WebSkillError("CANDIDATE_INVALID", message, details);
 };
@@ -216,6 +211,31 @@ var LlmCandidateGenerator = class {
 		return candidate;
 	}
 };
+/** 默认策略：任何候选都必须人工审批 */
+var AlwaysHumanApprovalPolicy = class {
+	evaluate(candidate) {
+		return {
+			needsHuman: true,
+			reason: `Candidate "${candidate.name}" requires human approval (risk: ${candidate.risk})`
+		};
+	}
+};
+/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
+var CompositeApprovalPolicy = class {
+	#rules;
+	#fallback;
+	constructor(rules, fallback) {
+		this.#rules = rules;
+		this.#fallback = fallback ?? new AlwaysHumanApprovalPolicy();
+	}
+	evaluate(candidate) {
+		for (const rule of this.#rules) {
+			const decision = rule(candidate);
+			if (decision) return decision;
+		}
+		return this.#fallback.evaluate(candidate);
+	}
+};
 const fileOf$1 = (root) => `${root}/.webskill/audit.jsonl`;
 /** 环境无关 sha256（WebCrypto；Node ≥17 与浏览器均有 globalThis.crypto.subtle） */
 const sha256Hex$1 = async (text) => {
@@ -289,12 +309,14 @@ var FsAuditLog = class {
 		if (!await this.#fs.exists(path)) return [];
 		const raw = await this.#fs.readText(path);
 		const events = [];
+		let skippedLines = 0;
 		for (const line of raw.split("\n")) {
 			if (line.trim() === "") continue;
 			let event;
 			try {
 				event = JSON.parse(line);
 			} catch {
+				skippedLines += 1;
 				continue;
 			}
 			if (filter.target !== void 0 && event.target !== filter.target) continue;
@@ -302,6 +324,7 @@ var FsAuditLog = class {
 			if (filter.since !== void 0 && event.ts < filter.since) continue;
 			events.push(event);
 		}
+		if (skippedLines > 0) console.warn(`[webskill] Audit log at ${path} contains ${skippedLines} unparsable line(s) skipped by query; run verifyChain() to check integrity`);
 		return events;
 	}
 	/** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接 */
@@ -461,14 +484,18 @@ var FailureAnalyzer = class {
 				return {
 					cause: String(parsed["cause"] ?? "Unknown cause"),
 					suggestedFix: String(parsed["suggestedFix"] ?? "Manual inspection required"),
-					...typeof parsed["errorCode"] === "string" ? { errorCode: parsed["errorCode"] } : firstCode ? { errorCode: firstCode } : {}
+					...typeof parsed["errorCode"] === "string" ? { errorCode: parsed["errorCode"] } : firstCode ? { errorCode: firstCode } : {},
+					source: "llm"
 				};
-			} catch {}
+			} catch (e) {
+				console.warn(`[webskill] LLM diagnosis output was not valid JSON, falling back to rule-based diagnosis: ${e instanceof Error ? e.message : String(e)}`);
+			}
 		}
 		return {
 			cause: firstCode ? ERROR_CAUSES[firstCode] ?? `Failure with code ${firstCode}` : "Unknown failure (no error code in trace)",
 			suggestedFix: firstCode ? `Inspect the component responsible for ${firstCode}` : "Inspect the run trace manually",
-			...firstCode ? { errorCode: firstCode } : {}
+			...firstCode ? { errorCode: firstCode } : {},
+			source: "rules"
 		};
 	}
 };
@@ -809,194 +836,6 @@ async function readDocument(fs, path) {
 		hash: await sha256Hex(content)
 	};
 }
-
-//#endregion
-//#region ../governance/dist/index.js
-/** 默认策略：任何候选都必须人工审批 */
-var AlwaysHumanApprovalPolicy = class {
-	evaluate(candidate) {
-		return {
-			needsHuman: true,
-			reason: `Candidate "${candidate.name}" requires human approval (risk: ${candidate.risk})`
-		};
-	}
-};
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-var CompositeApprovalPolicy = class {
-	#rules;
-	#fallback;
-	constructor(rules, fallback) {
-		this.#rules = rules;
-		this.#fallback = fallback ?? new AlwaysHumanApprovalPolicy();
-	}
-	evaluate(candidate) {
-		for (const rule of this.#rules) {
-			const decision = rule(candidate);
-			if (decision) return decision;
-		}
-		return this.#fallback.evaluate(candidate);
-	}
-};
-/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
-var ApprovalWorkflow = class {
-	#policy;
-	#audit;
-	#store;
-	#skillManager;
-	#versions;
-	#fs;
-	constructor(deps) {
-		this.#policy = deps.policy;
-		this.#audit = deps.audit;
-		this.#store = deps.store;
-		this.#skillManager = deps.skillManager;
-		this.#versions = deps.versions;
-		this.#fs = deps.fs ?? new NodeFS();
-	}
-	/** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
-	async review(candidateId, input) {
-		const candidate = await this.#store.get(candidateId);
-		if (candidate.status !== "draft" && candidate.status !== "pending-review") throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidateId}" cannot be reviewed from status "${candidate.status}"`);
-		const decision = this.#policy.evaluate(candidate);
-		let approved;
-		if (decision.needsHuman) {
-			if (!input.uiBridge) {
-				await this.#store.updateStatus(candidateId, "pending-review");
-				throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" requires human approval: ${decision.reason}`);
-			}
-			await this.#store.updateStatus(candidateId, "pending-review");
-			const response = await input.uiBridge.request({
-				type: "confirm",
-				id: `approval-${candidateId}`,
-				message: `Approve candidate "${candidate.name}" (risk: ${candidate.risk})? ${decision.reason}`,
-				defaultValue: false
-			});
-			approved = response.cancelled !== true && response.value === true;
-		} else approved = true;
-		const updated = await this.#store.updateStatus(candidateId, approved ? "approved" : "rejected");
-		await this.#audit.append({
-			type: "candidate.reviewed",
-			target: candidateId,
-			actor: input.actor,
-			data: {
-				approved,
-				reason: decision.reason
-			}
-		});
-		return updated;
-	}
-	/** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
-	async publish(candidateId, input) {
-		const candidate = await this.#store.get(candidateId);
-		if (candidate.status !== "approved") throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" must be approved before publishing (status: ${candidate.status})`);
-		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-candidate-"))).split(path.sep).join("/");
-		try {
-			const skillDir = `${stagingRoot}/${candidate.name}`;
-			for (const file of candidate.files) await this.#fs.writeText(resolveInsideRoot(skillDir, file.path), file.content);
-			const report = await validateSkills(this.#fs, [stagingRoot]);
-			if (!report.ok) {
-				const errors = report.issues.filter((i) => i.severity === "error");
-				throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
-			}
-			const manifest = await this.#skillManager.install({
-				type: "local",
-				path: skillDir
-			});
-			const archiveOut = `${stagingRoot}/version-archive.zip`;
-			await exportArchive(this.#fs, `${this.#skillManager.managedRoot}/${candidate.name}`, {
-				format: "zip",
-				outPath: archiveOut
-			});
-			await this.#versions.add(candidate.name, {
-				reason: `Publish candidate ${candidateId}`,
-				manifest,
-				archive: await this.#fs.readBinary(archiveOut)
-			});
-			await this.#store.updateStatus(candidateId, "published");
-			await this.#audit.append({
-				type: "skill.published",
-				target: candidate.name,
-				actor: input.actor,
-				data: {
-					candidateId,
-					digest: manifest.integrity.digest
-				}
-			});
-			return manifest;
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to publish candidate "${candidateId}": ${messageOf(e)}`, e);
-		} finally {
-			try {
-				await this.#fs.remove(stagingRoot, { recursive: true });
-			} catch {}
-		}
-	}
-	/**
-	* 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
-	* 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
-	* RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
-	*/
-	async applyRollback(skillName, versionId, input) {
-		assertSafePathSegment(skillName, "skill name");
-		assertSafePathSegment(versionId, "version id");
-		const version = await this.#versions.get(skillName, versionId);
-		const archive = await this.#versions.readArchive(skillName, versionId);
-		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-rollback-"))).split(path.sep).join("/");
-		try {
-			const skillDir = `${stagingRoot}/${skillName}`;
-			for (const [rel, content] of await unzipWithLimits(archive)) {
-				if (rel.endsWith("/")) continue;
-				await this.#fs.writeBinary(resolveInsideRoot(skillDir, rel), content);
-			}
-			const report = await validateSkills(this.#fs, [stagingRoot]);
-			if (!report.ok) {
-				const errors = report.issues.filter((i) => i.severity === "error");
-				throw new WebSkillError("GOVERNANCE_FAILED", `Rollback archive of "${skillName}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
-			}
-			const manifest = await this.#skillManager.install({
-				type: "local",
-				path: skillDir
-			});
-			if (manifest.integrity.digest !== version.manifest.integrity.digest) throw new WebSkillError("GOVERNANCE_FAILED", `Rollback of "${skillName}" to version "${versionId}" produced a digest mismatch: expected ${version.manifest.integrity.digest}, got ${manifest.integrity.digest}`);
-			await this.#versions.add(skillName, {
-				reason: input.reason ?? `Rollback to version ${versionId}`,
-				manifest,
-				archive
-			});
-			await this.#audit.append({
-				type: "skill.rolled_back",
-				target: skillName,
-				actor: input.actor,
-				data: {
-					targetVersionId: versionId,
-					reason: input.reason
-				}
-			});
-			return manifest;
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to roll back "${skillName}" to version "${versionId}": ${messageOf(e)}`, e);
-		} finally {
-			try {
-				await this.#fs.remove(stagingRoot, { recursive: true });
-			} catch {}
-		}
-	}
-};
-/**
-* 治理评估专用 runtime 装配（不可信技能试用路径）：
-* 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
-* env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
-* 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
-* 非安全边界；envWhitelist 同样适用于该执行器）。
-*/
-function createEvaluationRuntime(deps) {
-	return new WebSkillRuntime({
-		...deps,
-		executor: deps.executor ?? new ProcessSandboxExecutor(deps.fs)
-	});
-}
 const EXTRACT_PROMPT = (doc, nameHint) => [
 	"Extract an executable skill from the following document as STRICT JSON only.",
 	"Schema: {\"name\": string, \"description\": string, \"risk\": \"low\"|\"medium\"|\"high\",",
@@ -1080,4 +919,4 @@ function createMissHook(deps) {
 }
 
 //#endregion
-export { AlwaysHumanApprovalPolicy, ApprovalWorkflow, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, RepairPlanner, SCORING_WEIGHTS, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createEvaluationRuntime, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AlwaysHumanApprovalPolicy, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, RepairPlanner, SCORING_WEIGHTS, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };