@webskill/sdk 0.2.8 → 0.4.0

package/dist/node.js

@@ -1,5 +1,5 @@
-import { A as resolveArchiveLimits, C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, M as unzipWithLimits, N as validateSkills, P as verifyManifest, T as parseSkillMarkdown, b as exportSkills, d as assertRemoteUrlAllowed, f as assertSafePathSegment, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { C as bridgeError, I as normalizeToolContent, L as normalizeToolError, N as networkPolicyLibSource, R as parseBridgeRequest, S as WebSkillRuntime, T as createScriptContext, c as FsArtifactStore, l as FsMemoryStore, o as CapabilityApproval } from "./dist-B9VLwOME.js";
+import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
+import { A as createScriptContext, D as WebSkillRuntime, H as normalizeToolContent, O as bridgeError, U as normalizeToolError, W as parseBridgeRequest, l as FsArtifactStore, o as CapabilityApproval, u as FsMemoryStore, z as networkPolicyLibSource } from "./dist-C-Sh0MDU.js";
 import { i as probeLlmCapabilities } from "./env--jJB-TSX-04klhTYi.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
@@ -10,7 +10,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { format, promisify } from "node:util";
 import { Worker } from "node:worker_threads";
 import { mkdtemp, rm } from "node:fs/promises";
-import { execFile, fork } from "node:child_process";
+import { execFile, fork, spawn } from "node:child_process";
 import { createInterface } from "node:readline/promises";
 import { createHash } from "node:crypto";
 
@@ -1597,7 +1597,6 @@ async function removeLockEntry(fs, managedRoot, name) {
 async function writeLockfileAtomic(fs, managedRoot, lockfile) {
 	await atomicWriteText(fs, `${managedRoot}/${SKILLS_LOCKFILE}`, JSON.stringify(lockfile, null, 2));
 }
-const EXCLUDED_FILES = /* @__PURE__ */ new Set([SKILL_MANIFEST_FILE, SKILLS_LOCKFILE]);
 /** 递归收集技能目录内的文件（相对路径，posix 分隔） */
 async function walkFiles(fs, root, prefix = "") {
 	const out = [];
@@ -1605,7 +1604,7 @@ async function walkFiles(fs, root, prefix = "") {
 		const name = entry.path.split("/").pop() ?? "";
 		const rel = prefix === "" ? name : `${prefix}/${name}`;
 		if (entry.type === "directory") out.push(...await walkFiles(fs, entry.path, rel));
-		else if (!EXCLUDED_FILES.has(name)) out.push(rel);
+		else if (!MANIFEST_EXCLUDED_FILES.has(name)) out.push(rel);
 	}
 	return out;
 }
@@ -1649,7 +1648,29 @@ async function verifyIntegrity(fs, skillRoot) {
 	for (const rel of actualFiles) actualHashes.set(rel, sha256Hex(await fs.readBinary(`${skillRoot}/${rel}`)));
 	return verifyManifest(manifest, actualHashes, actualFiles);
 }
-const asInstallFailed = (e) => e instanceof WebSkillError && e.code === "INSTALL_FAILED" ? e : new WebSkillError("INSTALL_FAILED", `Install failed: ${messageOf(e)}`, e);
+/**
+* 验签失败不能被折叠成 INSTALL_FAILED：四种失败的宿主处置完全不同
+* （引导选策略 / 提示重下 / 引导添加密钥 / 安全事件），见 design 03 §3.1。
+*/
+const PRESERVED_INSTALL_CODES = /* @__PURE__ */ new Set([
+	"SIGNATURE_MISSING",
+	"SIGNATURE_MALFORMED",
+	"SIGNATURE_UNTRUSTED_KEY",
+	"SIGNATURE_MISMATCH",
+	"SIGNATURE_UNSUPPORTED"
+]);
+const asInstallFailed = (e) => e instanceof WebSkillError && (e.code === "INSTALL_FAILED" || PRESERVED_INSTALL_CODES.has(e.code)) ? e : new WebSkillError("INSTALL_FAILED", `Install failed: ${messageOf(e)}`, e);
+/** 未注入信任库时的空库：任何签名都不受信，比「验不了就放行」安全 */
+const EMPTY_TRUSTED_KEYS = {
+	list: async () => [],
+	get: async () => void 0,
+	add: async () => {
+		throw new WebSkillError("SIGNATURE_UNTRUSTED_KEY", "This SkillManager has no trusted key store configured");
+	},
+	remove: async () => {
+		throw new WebSkillError("SIGNATURE_UNTRUSTED_KEY", "This SkillManager has no trusted key store configured");
+	}
+};
 /**
 * 技能管理门面：统一安装管线（staging → 解析 name → 校验 → 拷贝 → manifest → lockfile），
 * 任何失败清理现场抛 INSTALL_FAILED。
@@ -1662,6 +1683,10 @@ var SkillManager = class {
 	#schemaInference;
 	#archiveLimits;
 	#onChanged;
+	#trustedKeys;
+	#unsignedPolicy;
+	#signatureAudit;
+	#onWarning;
 	#schemaInferer = new OxcSchemaInferer();
 	constructor(deps) {
 		this.#managedRoot = deps.managedRoot.replace(/\/+$/, "");
@@ -1670,6 +1695,10 @@ var SkillManager = class {
 		this.#schemaInference = deps.schemaInference ?? true;
 		this.#archiveLimits = deps.archiveLimits;
 		this.#onChanged = deps.onChanged;
+		this.#trustedKeys = deps.signature?.trustedKeys ?? EMPTY_TRUSTED_KEYS;
+		this.#unsignedPolicy = deps.signature?.unsigned ?? "warn";
+		this.#signatureAudit = deps.signature?.audit;
+		this.#onWarning = deps.onWarning;
 	}
 	/** 托管根目录（治理发布归档捕获等只读场景） */
 	get managedRoot() {
@@ -1728,6 +1757,7 @@ var SkillManager = class {
 				...version ? { version } : {},
 				source: staged.source
 			});
+			await this.#verifySignature(finalDir, manifest);
 			targetDir = `${this.#managedRoot}/${name}`;
 			const backupDir = `${stagingRoot}/backup`;
 			const hadPrevious = await fs.exists(targetDir);
@@ -1797,6 +1827,7 @@ var SkillManager = class {
 					source
 				});
 				if (manifest.integrity.digest !== entry.digest) throw new WebSkillError("INSTALL_FAILED", `Skill "${entry.name}" digest mismatch: expected ${entry.digest}, got ${manifest.integrity.digest}`);
+				await this.#verifySignature(`${finalRoot}/${entry.name}`, manifest);
 				manifests.push(manifest);
 			}
 			const swapped = [];
@@ -1836,6 +1867,33 @@ var SkillManager = class {
 		}
 	}
 	/**
+	* 安装期验签（design 03 §5.1）：manifest 生成之后、lockfile 提交之前。
+	* 失败直接抛出，暂存目录由 install 的 finally 清理，不落盘。
+	* 未签名且策略放行时也记一条审计——「当时是 warn 放过去的」事后必须查得到。
+	*/
+	async #verifySignature(skillDir, manifest) {
+		const verdict = await verifySkillSignature({
+			manifest,
+			signature: await readSkillSignature(this.#fs, skillDir),
+			trustedKeys: this.#trustedKeys,
+			policy: { unsigned: this.#unsignedPolicy }
+		});
+		if (verdict.warning !== void 0) this.#onWarning?.({
+			skill: manifest.name,
+			message: verdict.warning
+		});
+		await this.#signatureAudit?.append({
+			type: "skill.signature-verified",
+			target: manifest.name,
+			data: {
+				...verdict.keyId !== void 0 ? { keyId: verdict.keyId } : {},
+				verdict: verdict.unsigned ? "unsigned-allowed" : "signed",
+				policy: this.#unsignedPolicy,
+				at: (/* @__PURE__ */ new Date()).toISOString()
+			}
+		});
+	}
+	/**
 	* D2 安装期预推导：scripts/ 下无显式 inputSchema 导出且无 sidecar 的脚本，
 	* 经 OXC 推导写 sidecar（计入 manifest.files；重装重新生成）
 	*/
@@ -1898,6 +1956,222 @@ var SkillManager = class {
 		return options.outPath;
 	}
 };
+async function loadMcpSdk() {
+	try {
+		const [client, stdio] = await Promise.all([import("./client-BCM6Z3yq-qUQNkKrK.js"), import("./stdio-CFMoANJJ-BxrTeXh7.js")]);
+		return {
+			Client: client.Client,
+			ReadBuffer: stdio.ReadBuffer,
+			serializeMessage: stdio.serializeMessage
+		};
+	} catch (e) {
+		throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", "The \"@modelcontextprotocol/sdk\" package is required for stdio MCP endpoints; install it first (npm i @modelcontextprotocol/sdk)", e);
+	}
+}
+/** SIGTERM 后等待自行退出的宽限期，超时改 SIGKILL */
+const KILL_GRACE_MS = 2e3;
+function describeExit(exit) {
+	return exit.signal !== null ? `signal ${exit.signal}` : `exit code ${exit.code}`;
+}
+async function spawnServer(config) {
+	const child = spawn(config.command, [...config.args ?? []], {
+		...config.cwd !== void 0 ? { cwd: config.cwd } : {},
+		env: { ...config.env },
+		stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		],
+		shell: false,
+		windowsHide: true
+	});
+	let tail = "";
+	child.stderr?.on("data", (chunk) => {
+		const text = chunk.toString("utf8");
+		config.onStderr?.(text);
+		tail = (tail + text).slice(-4096);
+	});
+	child.stdin?.on("error", () => {});
+	child.stderr?.on("error", () => {});
+	let exit;
+	const exited = new Promise((resolve) => {
+		child.once("exit", (code, signal) => {
+			exit = {
+				code,
+				signal
+			};
+			resolve();
+		});
+	});
+	try {
+		await new Promise((resolve, reject) => {
+			child.once("spawn", resolve);
+			child.once("error", reject);
+		});
+	} catch (e) {
+		throw new WebSkillError("MCP_STDIO_SPAWN_FAILED", `Failed to spawn stdio MCP endpoint "${config.endpoint}" (${config.command}): ${messageOf(e)}`, e);
+	}
+	child.on("error", () => {});
+	return {
+		child,
+		stderrTail: () => tail,
+		exit: () => exit,
+		terminate: async () => {
+			if (exit !== void 0) return;
+			child.kill("SIGTERM");
+			const killer = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
+			try {
+				await exited;
+			} finally {
+				clearTimeout(killer);
+			}
+		}
+	};
+}
+/**
+* 子进程 stdio 上的 MCP transport。帧解析复用 SDK 的 ReadBuffer / serializeMessage，
+* 不自己写协议解析；进程由 connectStdioEndpoint 先行 spawn，
+* 好把「命令起不来」和「起来后立刻退出」分成两个错误码。
+*/
+var ChildStdioTransport = class {
+	onclose;
+	onerror;
+	onmessage;
+	#child;
+	#sdk;
+	#readBuffer;
+	constructor(child, sdk) {
+		this.#child = child;
+		this.#sdk = sdk;
+		this.#readBuffer = new sdk.ReadBuffer();
+	}
+	async start() {
+		if (this.#child.exitCode !== null || this.#child.signalCode !== null) {
+			this.onclose?.();
+			return;
+		}
+		this.#child.stdout?.on("data", (chunk) => {
+			this.#readBuffer.append(chunk);
+			for (;;) {
+				let message;
+				try {
+					message = this.#readBuffer.readMessage();
+				} catch (e) {
+					this.onerror?.(e instanceof Error ? e : new Error(String(e)));
+					return;
+				}
+				if (message === null) return;
+				this.onmessage?.(message);
+			}
+		});
+		this.#child.stdout?.on("error", (e) => this.onerror?.(e));
+		this.#child.once("exit", () => this.onclose?.());
+	}
+	async send(message) {
+		const stdin = this.#child.stdin;
+		if (!stdin || stdin.destroyed) throw new WebSkillError("MCP_STDIO_EXITED", "The stdio MCP server process is no longer writable");
+		await new Promise((resolve, reject) => {
+			stdin.write(this.#sdk.serializeMessage(message), (e) => e ? reject(e) : resolve());
+		});
+	}
+	async close() {
+		this.#child.stdin?.end();
+		this.#readBuffer.clear();
+	}
+};
+function withTimeout(work, timeoutMs, onTimeout) {
+	if (timeoutMs <= 0) return work;
+	let timer;
+	const timeout = new Promise((_resolve, reject) => {
+		timer = setTimeout(() => reject(onTimeout()), timeoutMs);
+	});
+	return Promise.race([work, timeout]).finally(() => clearTimeout(timer));
+}
+const CLIENT_METHODS = [
+	"listTools",
+	"callTool",
+	"listPrompts",
+	"getPrompt",
+	"listResources",
+	"readResource"
+];
+/**
+* 给每次调用套上 timeoutMs。超时按「server 挂住了」处理：先终止进程再上抛，
+* 免得留下一个谁都不再理会的子进程。
+*/
+function guardCalls(client, config, abort) {
+	const timeoutMs = config.timeoutMs ?? 0;
+	if (timeoutMs <= 0) return client;
+	const source = client;
+	const guarded = {};
+	for (const method of CLIENT_METHODS) guarded[method] = async (input) => {
+		try {
+			return await withTimeout(source[method](input), timeoutMs, () => new WebSkillError("MCP_STDIO_TIMEOUT", `Call "${method}" on stdio MCP endpoint "${config.endpoint}" timed out after ${timeoutMs}ms`));
+		} catch (e) {
+			if (e instanceof WebSkillError && e.code === "MCP_STDIO_TIMEOUT") await abort();
+			throw e;
+		}
+	};
+	return guarded;
+}
+/**
+* stdio MCP endpoint 装配：spawn 宿主配置的可执行程序，经 stdin/stdout 说 MCP，
+* 注册进 EndpointRegistry——endpoint:tool 解析、TTL+版本缓存、临时技能消费自动生效。
+* 返回 close 句柄：断开后 unregister 并确保子进程真的退出（不留僵尸）。
+*
+* registry 参数写成结构型而非 `EndpointRegistry<McpClientLike>`：只要从 `@webskill/mcp`
+* `import type`，tsdown 就会把整个 mcp 的 d.ts chunk 拖进 `@webskill/sdk/node`，
+* 把 optional peer `@modelcontextprotocol/sdk` 变成 node 子路径的类型硬依赖
+* （install-smoke 的消费方 typecheck 探针会因此变红）。结构类型保证真实的
+* `EndpointRegistry<McpClientLike>` 仍可直接传入。
+*/
+async function connectStdioEndpoint(registry, config) {
+	const sdk = await loadMcpSdk();
+	const proc = await spawnServer(config);
+	const transport = new ChildStdioTransport(proc.child, sdk);
+	const client = new sdk.Client({
+		name: "webskill-stdio-client",
+		version: "0.1.0"
+	});
+	let timedOut = false;
+	try {
+		await withTimeout(client.connect(transport), config.timeoutMs ?? 0, () => {
+			timedOut = true;
+			return new WebSkillError("MCP_STDIO_TIMEOUT", `Timed out after ${config.timeoutMs}ms connecting stdio MCP endpoint "${config.endpoint}"`);
+		});
+	} catch (e) {
+		await proc.terminate();
+		if (timedOut) throw e;
+		const exit = proc.exit();
+		if (exit !== void 0) {
+			const tail = proc.stderrTail().trim();
+			throw new WebSkillError("MCP_STDIO_EXITED", `Stdio MCP endpoint "${config.endpoint}" exited before it was ready (${describeExit(exit)})` + (tail === "" ? "" : `; stderr: ${tail}`), e);
+		}
+		throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to connect stdio MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
+	}
+	let closed = false;
+	const close = async () => {
+		if (closed) return;
+		closed = true;
+		registry.unregister(config.endpoint);
+		try {
+			await client.close();
+		} finally {
+			await proc.terminate();
+		}
+	};
+	try {
+		registry.register(config.endpoint, guardCalls(client, config, close));
+	} catch (e) {
+		try {
+			await client.close();
+		} finally {
+			await proc.terminate();
+		}
+		throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to register stdio MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
+	}
+	return { close };
+}
 
 //#endregion
 //#region ../governance/dist/node.js
@@ -2063,4 +2337,4 @@ function createEvaluationRuntime(deps) {
 }
 
 //#endregion
-export { ApprovalWorkflow, CliUiBridge, FileArtifactStore, FileMemoryStore, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SandboxedScriptExecutor, SkillManager, createEvaluationRuntime, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };
+export { ApprovalWorkflow, CliUiBridge, FileArtifactStore, FileMemoryStore, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SandboxedScriptExecutor, SkillManager, connectStdioEndpoint, createEvaluationRuntime, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };

package/dist/{openUiLibrary-B8-Cvou9-D3RsU2EB.js → openUiLibrary-YLS-cxyT-C96jWDQq.js}

@@ -1,5 +1,5 @@
-import { ft as uiCatalog } from "./dist-CtBLBbEz.js";
-import { n as catalogComponentImpls } from "./catalogComponents-C_V39rbF-BOHveMWa.js";
+import { q as uiCatalog } from "./dist-D9Lcn5Pp.js";
+import { t as CatalogNode } from "./catalogComponents-KsujmL4b-Clx1kCnU.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3761,7 +3761,7 @@ function Renderer({ response, library, isStreaming = false, onAction, onStateUpd
 const FormValidationContext = createContext(null);
 
 //#endregion
-//#region ../ui-react/dist/openUiLibrary-B8-Cvou9.js
+//#region ../ui-react/dist/openUiLibrary-YLS-cxyT.js
 const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
 /**
 * catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，
@@ -3773,10 +3773,11 @@ const webskillOpenUiLibrary = createLibrary({
 		name: def.name,
 		description: def.description,
 		props: propsFor(def.props, def.children !== void 0),
-		component: ((input) => catalogComponentImpls[def.name]?.({
+		component: ((input) => /* @__PURE__ */ jsx(CatalogNode, {
+			name: def.name,
 			props: input.props,
 			children: input.renderNode(input.props["children"])
-		}) ?? null)
+		}))
 	}))
 });
 const OPEN_UI_COMPONENTS = Object.keys(webskillOpenUiLibrary.components);

package/dist/skillVersionStore-uyefLPR1-DXOzbksv.d.ts

@@ -0,0 +1,158 @@
+import { N as FileSystemProvider, R as Page, Z as SkillCatalogEntry, it as SkillManifest, z as PageQuery } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+//#region ../governance/dist/skillVersionStore-uyefLPR1.d.ts
+//#region src/types.d.ts
+type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
+type CandidateSource = 'runtime-miss' | 'document' | 'manual';
+type CandidateRisk = 'low' | 'medium' | 'high';
+interface CandidateFile {
+  path: string;
+  kind: 'skill-md' | 'script' | 'reference' | 'asset';
+  content: string;
+}
+interface CandidateSkill {
+  id: string;
+  name: string;
+  description: string;
+  status: CandidateStatus;
+  source: CandidateSource;
+  risk: CandidateRisk;
+  riskReasons: string[];
+  files: CandidateFile[];
+  suggestedTests?: string[];
+  createdAt: string;
+  updatedAt: string;
+  metadata?: Record<string, unknown>;
+}
+interface AuditEvent {
+  id: string;
+  type: string;
+  target: string;
+  actor?: string;
+  ts: string;
+  data?: Record<string, unknown>;
+  /** hash 链：上一条事件的 hash（首条为 GENESIS） */
+  prevHash?: string;
+  /** 本事件规范化载荷 + prevHash 的 sha256 */
+  hash?: string;
+}
+/**
+ * 审计查询的筛选条件。刻意是**具名字段**而不是谓词函数：
+ * 谓词无法被存储层用索引优化，下推一个谓词等于把 `.filter()` 换了个位置。
+ * @stable
+ */
+interface AuditQueryFilter {
+  target?: string;
+  type?: string;
+  actor?: string;
+  /** 含端点（`ts >= since`） */
+  since?: string;
+  /** 含端点（`ts <= until`） */
+  until?: string;
+}
+interface AuditLog {
+  append(event: Omit<AuditEvent, 'id' | 'ts'> & {
+    id?: string;
+    ts?: string;
+  }): Promise<AuditEvent>;
+  /**
+   * 分页查询。方向与会话消息一致：无游标给**最新**一页，`nextCursor` 指向更早的历史。
+   *
+   * 分页是性能优化，不是绕过完整性检查的通道：本页范围内的 hash 链断裂
+   * 必须以 `GOVERNANCE_FAILED` 报出，不得安静地把那一页返回。
+   */
+  query(filter?: AuditQueryFilter & PageQuery): Promise<Page<AuditEvent>>;
+}
+interface SkillVersion {
+  versionId: string;
+  parentVersionId?: string;
+  createdAt: string;
+  reason: string;
+  manifest: SkillManifest;
+  auditEventId?: string;
+  /** 发布时捕获的技能归档（zip 相对路径，applyRollback 恢复用；0.2.0 起记录） */
+  archivePath?: string;
+}
+type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
+//#endregion
+//#region src/candidate/candidateStore.d.ts
+/** 候选列表的缺省页长。缺省属于实现，不属于调用方 */
+declare const CANDIDATE_PAGE_SIZE = 50;
+/** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
+declare class CandidateStore {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+  });
+  save(candidate: CandidateSkill): Promise<void>;
+  get(id: string): Promise<CandidateSkill>;
+  /**
+   * 候选（= 审批队列）分页。`status` 是端口参数而不是上层 `.filter()`：
+   * 审批页面只看 `pending-review`，没理由把已发布的候选全部拉过端口。
+   * 目录扫描仍是逐文件读（备案 D25），但返回量已由 `limit` 封顶。
+   */
+  list(options?: {
+    status?: CandidateStatus;
+  } & PageQuery): Promise<Page<CandidateSkill>>;
+  updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
+}
+/** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
+declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;
+//#endregion
+//#region src/approval/policies.d.ts
+interface ApprovalDecision {
+  needsHuman: boolean;
+  reason: string;
+}
+interface ApprovalPolicy {
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+/** 默认策略：任何候选都必须人工审批 */
+declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
+declare class CompositeApprovalPolicy implements ApprovalPolicy {
+  #private;
+  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+//#endregion
+//#region src/versioning/skillVersionStore.d.ts
+/** 版本列表的缺省页长。缺省属于实现，不属于调用方 */
+declare const SKILL_VERSION_PAGE_SIZE = 20;
+/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
+ *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
+declare class SkillVersionStore {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+    now?: () => string;
+    createId?: () => string;
+    audit?: AuditLog;
+    /** 每技能保留的版本/归档上限（默认 5，超出清理最旧） */
+    maxArchivesPerSkill?: number;
+  });
+  add(skillName: string, input: {
+    reason: string;
+    manifest: SkillManifest;
+    parentVersionId?: string;
+    archive?: Uint8Array;
+  }): Promise<SkillVersion>;
+  /** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
+  readArchive(skillName: string, versionId: string): Promise<Uint8Array>;
+  /**
+   * 版本列表分页（方向同 C1：无游标给**最新**一页）。
+   * 保留策略与谱系构建走 `#readAll`：它们必须看到全量，不能被分页截断。
+   */
+  list(skillName: string, options?: PageQuery): Promise<Page<SkillVersion>>;
+  get(skillName: string, versionId: string): Promise<SkillVersion>;
+  /** 回滚：基于旧 manifest 追加新版本 + skill.rolled_back 审计 */
+  rollback(skillName: string, targetVersionId: string, input: {
+    actor?: string;
+    reason?: string;
+  }): Promise<SkillVersion>;
+}
+//#endregion
+export { SkillVersion as _, AuditLog as a, CandidateFile as c, CandidateSource as d, CandidateStatus as f, SkillState as g, SKILL_VERSION_PAGE_SIZE as h, AuditEvent as i, CandidateRisk as l, CompositeApprovalPolicy as m, ApprovalDecision as n, AuditQueryFilter as o, CandidateStore as p, ApprovalPolicy as r, CANDIDATE_PAGE_SIZE as s, AlwaysHumanApprovalPolicy as t, CandidateSkill as u, SkillVersionStore as v, candidateToCatalogEntry as y };

package/dist/stdio-CFMoANJJ-BxrTeXh7.js

@@ -0,0 +1,31 @@
+import { y as JSONRPCMessageSchema } from "./types-WovEf4ED-CZSDiiBU.js";
+
+//#region ../node/dist/stdio-CFMoANJJ.js
+/**
+* Buffers a continuous stdio stream into discrete JSON-RPC messages.
+*/
+var ReadBuffer = class {
+	append(chunk) {
+		this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
+	}
+	readMessage() {
+		if (!this._buffer) return null;
+		const index = this._buffer.indexOf("\n");
+		if (index === -1) return null;
+		const line = this._buffer.toString("utf8", 0, index).replace(/\r$/, "");
+		this._buffer = this._buffer.subarray(index + 1);
+		return deserializeMessage(line);
+	}
+	clear() {
+		this._buffer = void 0;
+	}
+};
+function deserializeMessage(line) {
+	return JSONRPCMessageSchema.parse(JSON.parse(line));
+}
+function serializeMessage(message) {
+	return JSON.stringify(message) + "\n";
+}
+
+//#endregion
+export { ReadBuffer, deserializeMessage, serializeMessage };

package/dist/{testing-BUoXvm1u.js → testing-DDCJWvgA.js}

@@ -1,4 +1,5 @@
-import { u as WebSkillError } from "./dist-BQzncxXg.js";
+import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
+import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
 
 //#region ../runtime/dist/testing.js
 /**
@@ -27,7 +28,7 @@ var MockLlmClient = class {
 			else if (event.type === "tool-calls") toolCalls = event.toolCalls;
 			else if (event.type === "done" && event.content !== void 0) content = event.content;
 			return {
-				content,
+				content: content === "" ? void 0 : textParts(content),
 				toolCalls
 			};
 		}
@@ -43,11 +44,12 @@ var MockLlmClient = class {
 			return;
 		}
 		const response = typeof next === "function" ? await next(input) : next;
-		if (response.content) {
-			const chunkSize = Math.max(1, Math.ceil(response.content.length / 3));
-			for (let i = 0; i < response.content.length; i += chunkSize) yield {
+		const text = partsToText(response.content);
+		if (text !== "") {
+			const chunkSize = Math.max(1, Math.ceil(text.length / 3));
+			for (let i = 0; i < text.length; i += chunkSize) yield {
 				type: "text-delta",
-				delta: response.content.slice(i, i + chunkSize)
+				delta: text.slice(i, i + chunkSize)
 			};
 		}
 		if (response.toolCalls?.length) yield {

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { c as LlmClient, d as LlmResponse, f as LlmStreamEvent, h as MemoryStore, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, s as InteractionResponse, t as Artifact, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
+import { c as LlmClient, f as LlmResponse, g as MemoryStore, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, p as LlmStreamEvent, s as InteractionResponse, t as Artifact, y as UiBridge } from "./types-7Wcg--Vh-1YlQ4jF9.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-BPUBZCwJ-4jat_SVG.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/testing.js

@@ -1,5 +1,5 @@
-import { t as MemoryArtifactStore } from "./memoryArtifactStore-C9lFVqPF-yFz6yJj0.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
 import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env--jJB-TSX-04klhTYi.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-BUoXvm1u.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-DDCJWvgA.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };