@webskill/sdk 0.3.0 → 0.5.0

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { P as FileSystemProvider, Q as SkillDocument, X as SkillCatalogEntry, c as LlmClient, nt as SkillManagerPort, u as LlmMessage, v as UiBridge } from "./types-AmKCKJn_-VGabeXK4.js";
-import { mt as SkillStateGuard, nt as RuntimeRun, wt as WebSkillRuntime } from "./index-8d-oEDww.js";
-import { a as AuditLog, c as CandidateSkill, d as CandidateStore, f as CompositeApprovalPolicy, g as candidateToCatalogEntry, h as SkillVersionStore, i as AuditEvent, l as CandidateSource, m as SkillVersion, n as ApprovalDecision, o as CandidateFile, p as SkillState, r as ApprovalPolicy, s as CandidateRisk, t as AlwaysHumanApprovalPolicy, u as CandidateStatus } from "./skillVersionStore-DOEI9ptb-BxbYL70B.js";
+import { B as PageQuery, P as FileSystemProvider, Q as SkillCatalogEntry, b as UiBridge, et as SkillDocument, f as LlmMessage, it as SkillManagerPort, l as LlmClient, z as Page } from "./types-D_hoCri8-BnNPiZCi.js";
+import { Et as SkillOutcomeReporter, L as IntegrityVerdict, Ot as SkillStateGuard, Tt as SkillIntegrityGuard, Vt as WebSkillRuntime, pt as RuntimeRun } from "./index-vBz_FC9w.js";
+import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-BzLbzFOL-CxwIewHJ.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -32,6 +32,48 @@ declare function normalizeCandidate(input: {
 /** 候选校验：缺 SKILL.md / 非法扩展名 → CANDIDATE_INVALID */
 declare function validateCandidate(candidate: CandidateSkill): void;
 //#endregion
+//#region src/candidate/candidateSink.d.ts
+/**
+ * agent 侧 `SkillCandidateSink.submit()` 的入参形状。
+ * 这里按结构声明而不是 import `@webskill/agent`：治理层是可选层，
+ * 不该因为 agent 策略而多一条运行时依赖（两侧的兼容性由测试钉住）。
+ */
+interface GeneratedSkillSubmission {
+  draft: {
+    name: string;
+    description: string;
+    /** SKILL.md 全文，含 frontmatter */
+    content: string;
+    files?: readonly {
+      path: string;
+      content: string;
+    }[];
+  };
+  /** 触发生成的会话，写进候选 metadata 供 console 溯源 */
+  sessionId?: string;
+  /** 用户确认的时刻（FR-9.7 的「用户确认事实」） */
+  confirmedAt: string;
+}
+interface CandidateSinkOptions {
+  store: CandidateStore;
+  /** 缺省不写审计——但 FR-9.7 要求宿主接上它 */
+  audit?: AuditLog;
+  now?: () => string;
+  createId?: () => string;
+}
+interface CandidateSink {
+  submit(input: GeneratedSkillSubmission): Promise<{
+    id: string;
+  }>;
+}
+/**
+ * 把 agent 生成的技能草稿接进既有的候选管线（设计 02 §5）。
+ *
+ * 走的是与文档抽取、runtime-miss 完全相同的 `normalizeCandidate` → `CandidateStore.save`，
+ * 因此候选恒为 `draft`，审批/发布链路一行都不用改；差别只有 `source: 'generated'`。
+ */
+declare function createCandidateSink(options: CandidateSinkOptions): CandidateSink;
+//#endregion
 //#region src/candidate/llmCandidateGenerator.d.ts
 /** LLM 候选生成器：prompt 强制约束 + 不信任归一化管线 + candidate.created 审计 */
 declare class LlmCandidateGenerator {
@@ -50,6 +92,8 @@ declare class LlmCandidateGenerator {
 }
 //#endregion
 //#region src/audit/fsAuditLog.d.ts
+/** 审计查询的缺省页长。缺省属于实现，不属于调用方 */
+declare const AUDIT_PAGE_SIZE = 100;
 interface AuditChainVerification {
   ok: boolean;
   /** 首个断链位置（行号，0 起；ok 时 undefined） */
@@ -74,11 +118,15 @@ declare class FsAuditLog implements AuditLog {
     id?: string;
     ts?: string;
   }): Promise<AuditEvent>;
-  query(filter: {
-    target?: string;
-    type?: string;
-    since?: string;
-  }): Promise<AuditEvent[]>;
+  /**
+   * 分页 + 筛选下推。整文件读仍在（JSONL 布局未改，备案 D25），
+   * 但**跨出端口的事件数**已由 `limit` 封顶，且筛选是端口参数而非上层 `.filter()`。
+   *
+   * 本页范围内的 hash 链必须自洽：逐条重算 hash 并核对与前一行的 `prevHash` 链接，
+   * 任一处对不上以 `GOVERNANCE_FAILED` 报错。范围之外的断链不在本方法职责内——
+   * 那是 `verifyChain()` 的事（全量 O(N) 校验不该压在每次翻页上）。
+   */
+  query(filter?: AuditQueryFilter & PageQuery): Promise<Page<AuditEvent>>;
   /** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接 */
   verifyChain(): Promise<AuditChainVerification>;
 }
@@ -144,7 +192,11 @@ declare class SkillStatePolicy {
     actor?: string;
     reason?: string;
   }): Promise<void>;
-  /** 失败计数；达阈值（默认 3）→ quarantined + 审计 */
+  /**
+   * 失败计数；达阈值（默认 3）→ quarantined + 审计。
+   *
+   * 计数是**累计**而非「连续」：成功不清零，只有 `setState(name, 'active')` 会清。
+   */
   recordFailure(skillName: string, input?: {
     actor?: string;
   }): Promise<SkillState>;
@@ -156,6 +208,31 @@ declare class SkillStatePolicy {
    * quarantined/disabled 三入口全拦截。
    */
   toSkillStateGuard(): SkillStateGuard;
+  /**
+   * runtime SkillIntegrityGuard 适配（D3）：激活期校验失败 → 置 `quarantined` + 写审计。
+   *
+   * 需求 §3 任务 3 要的是「使技能进入不可用状态，而不是只抛错」——只抛错的话，
+   * 同一个坏技能下一次激活还会再试一遍。置了状态之后，后续激活先被
+   * `toSkillStateGuard().canActivate` 挡住，根本走不到校验。
+   *
+   * `verify` 由宿主传入：完整性校验的实现在 `@webskill/node` / `@webskill/browser`，
+   * governance 与 runtime 都不能依赖它们，装配点只能在宿主。
+   */
+  toSkillIntegrityGuard(verify: (skillName: string) => Promise<IntegrityVerdict>): SkillIntegrityGuard;
+  /**
+   * runtime `SkillOutcomeReporter` 适配（F1）：一次真实的技能脚本执行失败 → `recordFailure`，
+   * 达阈值即自动 `quarantined` + 写审计。
+   *
+   * 0.4.0 之前 `recordFailure` 没有任何生产调用方——`states.json` 的失败计数只在单测里增长，
+   * 于是「失败达阈值自动隔离」在真实部署里从不触发，Console 上那个计数恒为 0。
+   * 这个适配器就是把那一段接上：runtime 不能反向依赖治理，装配点只能在宿主。
+   *
+   * 只上报失败、不上报成功，与 `recordFailure` 的既有语义保持一致（累计计数，
+   * 成功不清零，只有 `setState(name, 'active')` 清零）。
+   */
+  toSkillOutcomeReporter(input?: {
+    actor?: string;
+  }): SkillOutcomeReporter;
   /** disabled → SKILL_DISABLED；quarantined → SKILL_QUARANTINED */
   assertExecutable(skillName: string): Promise<void>;
   /** runtime catalogFilter 实现：quarantined/deprecated/disabled 技能被路由过滤 */
@@ -328,4 +405,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditEvent, type AuditLog, type CandidateFile, type CandidateRisk, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, LlmCandidateGenerator, type RepairOption, RepairPlanner, SCORING_WEIGHTS, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditEvent, type AuditLog, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/governance.js

@@ -1,4 +1,5 @@
 import { O as messageOf, T as isValidSkillName, g as assertSafePathSegment, m as WebSkillError } from "./dist-8oQRa8Xz.js";
+import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
 
 //#region ../governance/dist/index.js
 const invalid = (message, details) => {
@@ -99,7 +100,29 @@ function validateCandidate(candidate) {
 	if (!candidate.files.some((f) => f.kind === "skill-md")) throw new WebSkillError("CANDIDATE_INVALID", `Candidate "${candidate.name}" is missing SKILL.md`);
 	for (const file of candidate.files) if (file.kind === "script" && !/\.(ts|js)$/.test(file.path)) throw new WebSkillError("CANDIDATE_INVALID", `Candidate "${candidate.name}" has an unsupported script file: ${file.path}`);
 }
+/**
+* 治理侧各列表共用的游标切片，形状与会话消息（C1）完全一致：
+* 无游标给**最新**一页，`nextCursor` 指向更早的历史，页内按时间升序。
+*
+* 缺省页长由各 store 传入——缺省属于实现，不属于调用方。
+*/
+function takeTailPage(all, options, defaultLimit, what) {
+	const limit = options.limit ?? defaultLimit;
+	if (!Number.isInteger(limit) || limit <= 0) throw new WebSkillError("VALIDATION_FAILED", `Page limit must be a positive integer, received ${String(limit)}`);
+	let end = all.length;
+	if (options.cursor !== void 0) {
+		end = Number(options.cursor);
+		if (!Number.isInteger(end) || end < 0 || end > all.length) throw new WebSkillError("VALIDATION_FAILED", `Invalid ${what} cursor: ${JSON.stringify(options.cursor)}`);
+	}
+	const start = Math.max(0, end - limit);
+	return {
+		items: all.slice(start, end),
+		...start > 0 ? { nextCursor: String(start) } : {}
+	};
+}
 const dirOf$1 = (root) => `${root}/.webskill/candidates`;
+/** 候选列表的缺省页长。缺省属于实现，不属于调用方 */
+const CANDIDATE_PAGE_SIZE = 50;
 /** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
 var CandidateStore = class {
 	#root;
@@ -119,15 +142,23 @@ var CandidateStore = class {
 		if (!await this.#fs.exists(path)) throw new WebSkillError("GOVERNANCE_FAILED", `Candidate not found: ${id}`);
 		return JSON.parse(await this.#fs.readText(path));
 	}
-	async list() {
+	/**
+	* 候选（= 审批队列）分页。`status` 是端口参数而不是上层 `.filter()`：
+	* 审批页面只看 `pending-review`，没理由把已发布的候选全部拉过端口。
+	* 目录扫描仍是逐文件读（备案 D25），但返回量已由 `limit` 封顶。
+	*/
+	async list(options = {}) {
 		const dir = dirOf$1(this.#root);
-		if (!await this.#fs.exists(dir)) return [];
+		if (!await this.#fs.exists(dir)) return { items: [] };
 		const out = [];
 		for (const entry of await this.#fs.list(dir)) {
 			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
-			out.push(JSON.parse(await this.#fs.readText(entry.path)));
+			const candidate = JSON.parse(await this.#fs.readText(entry.path));
+			if (options.status !== void 0 && candidate.status !== options.status) continue;
+			out.push(candidate);
 		}
-		return out.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+		out.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+		return takeTailPage(out, options, 50, "candidate");
 	}
 	async updateStatus(id, status, now) {
 		const candidate = await this.get(id);
@@ -151,6 +182,49 @@ function candidateToCatalogEntry(candidate) {
 	};
 }
 /**
+* 把 agent 生成的技能草稿接进既有的候选管线（设计 02 §5）。
+*
+* 走的是与文档抽取、runtime-miss 完全相同的 `normalizeCandidate` → `CandidateStore.save`，
+* 因此候选恒为 `draft`，审批/发布链路一行都不用改；差别只有 `source: 'generated'`。
+*/
+function createCandidateSink(options) {
+	return { async submit(input) {
+		const { draft } = input;
+		const candidate = normalizeCandidate({
+			raw: {
+				name: draft.name,
+				description: draft.description,
+				files: [{
+					path: "SKILL.md",
+					content: draft.content
+				}, ...draft.files ?? []]
+			},
+			source: "generated",
+			...options.now ? { now: options.now } : {},
+			...options.createId ? { createId: options.createId } : {}
+		});
+		candidate.metadata = {
+			...candidate.metadata,
+			confirmedAt: input.confirmedAt,
+			...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {}
+		};
+		await options.store.save(candidate);
+		await options.audit?.append({
+			type: "candidate.created",
+			target: candidate.id,
+			data: {
+				name: candidate.name,
+				source: candidate.source,
+				risk: candidate.risk,
+				userConfirmed: true,
+				confirmedAt: input.confirmedAt,
+				...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {}
+			}
+		});
+		return { id: candidate.id };
+	} };
+}
+/**
 * 文本补全：优先走流式（慢速本地模型下非流式整响应缓冲会触发 fetch 头超时，
 * SSE 首包秒到不受此限）；无 stream 的客户端回退 complete。
 */
@@ -162,7 +236,7 @@ async function completeText(llm, messages) {
 		else if (event.type === "done") doneContent = event.content;
 		return doneContent ?? content;
 	}
-	return (await llm.complete({ messages })).content ?? "";
+	return partsToText((await llm.complete({ messages })).content);
 }
 const GENERATION_PROMPT = (task, context) => [
 	"You generate a skill candidate as STRICT JSON only (no markdown, no explanation).",
@@ -193,7 +267,7 @@ var LlmCandidateGenerator = class {
 		const candidate = normalizeCandidate({
 			raw: parseJsonObject(await completeText(this.#llm, [{
 				role: "user",
-				content: GENERATION_PROMPT(input.prompt, input.context)
+				content: textParts(GENERATION_PROMPT(input.prompt, input.context))
 			}])),
 			source: input.source,
 			...this.#now ? { now: this.#now } : {},
@@ -237,6 +311,8 @@ var CompositeApprovalPolicy = class {
 	}
 };
 const fileOf$1 = (root) => `${root}/.webskill/audit.jsonl`;
+/** 审计查询的缺省页长。缺省属于实现，不属于调用方 */
+const AUDIT_PAGE_SIZE = 100;
 /** 环境无关 sha256（WebCrypto；Node ≥17 与浏览器均有 globalThis.crypto.subtle） */
 const sha256Hex$1 = async (text) => {
 	const digest = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(text));
@@ -304,28 +380,67 @@ var FsAuditLog = class {
 		this.#lastHash = full.hash;
 		return full;
 	}
-	async query(filter) {
+	/**
+	* 分页 + 筛选下推。整文件读仍在（JSONL 布局未改，备案 D25），
+	* 但**跨出端口的事件数**已由 `limit` 封顶，且筛选是端口参数而非上层 `.filter()`。
+	*
+	* 本页范围内的 hash 链必须自洽：逐条重算 hash 并核对与前一行的 `prevHash` 链接，
+	* 任一处对不上以 `GOVERNANCE_FAILED` 报错。范围之外的断链不在本方法职责内——
+	* 那是 `verifyChain()` 的事（全量 O(N) 校验不该压在每次翻页上）。
+	*/
+	async query(filter = {}) {
 		const path = fileOf$1(this.#root);
-		if (!await this.#fs.exists(path)) return [];
+		if (!await this.#fs.exists(path)) return { items: [] };
 		const raw = await this.#fs.readText(path);
-		const events = [];
+		/** 按文件行序保留（含解析失败的洞）：链校验必须在文件行序上做，不能在筛选结果上做 */
+		const records = [];
 		let skippedLines = 0;
 		for (const line of raw.split("\n")) {
 			if (line.trim() === "") continue;
-			let event;
 			try {
-				event = JSON.parse(line);
+				records.push(JSON.parse(line));
 			} catch {
 				skippedLines += 1;
-				continue;
+				records.push(void 0);
 			}
+		}
+		if (skippedLines > 0) console.warn(`[webskill] Audit log at ${path} contains ${skippedLines} unparsable line(s) skipped by query; run verifyChain() to check integrity`);
+		const matched = [];
+		for (let i = 0; i < records.length; i++) {
+			const event = records[i];
+			if (event === void 0) continue;
 			if (filter.target !== void 0 && event.target !== filter.target) continue;
 			if (filter.type !== void 0 && event.type !== filter.type) continue;
+			if (filter.actor !== void 0 && event.actor !== filter.actor) continue;
 			if (filter.since !== void 0 && event.ts < filter.since) continue;
-			events.push(event);
+			if (filter.until !== void 0 && event.ts > filter.until) continue;
+			matched.push(i);
 		}
-		if (skippedLines > 0) console.warn(`[webskill] Audit log at ${path} contains ${skippedLines} unparsable line(s) skipped by query; run verifyChain() to check integrity`);
-		return events;
+		const limit = filter.limit ?? 100;
+		if (!Number.isInteger(limit) || limit <= 0) throw new WebSkillError("VALIDATION_FAILED", `Page limit must be a positive integer, received ${String(limit)}`);
+		let end = matched.length;
+		if (filter.cursor !== void 0) {
+			end = Number(filter.cursor);
+			if (!Number.isInteger(end) || end < 0 || end > matched.length) throw new WebSkillError("VALIDATION_FAILED", `Invalid audit cursor: ${JSON.stringify(filter.cursor)}`);
+		}
+		const start = Math.max(0, end - limit);
+		const items = [];
+		for (const line of matched.slice(start, end)) {
+			const event = records[line];
+			await this.#assertChainAt(records, line, path);
+			items.push(event);
+		}
+		return {
+			items,
+			...start > 0 ? { nextCursor: String(start) } : {}
+		};
+	}
+	/** 单行的链自洽：本行 hash 重算相符，且 prevHash 指向前一行的 hash */
+	async #assertChainAt(records, index, path) {
+		const event = records[index];
+		const expectedPrev = index === 0 ? "GENESIS" : records[index - 1]?.hash;
+		if (expectedPrev === void 0 || event.prevHash !== expectedPrev) throw new WebSkillError("GOVERNANCE_FAILED", `Audit chain is broken at line ${index} of ${path}: prevHash link mismatch (events may have been removed, reordered or corrupted)`);
+		if (event.hash !== await sha256Hex$1(canonical(event))) throw new WebSkillError("GOVERNANCE_FAILED", `Audit chain is broken at line ${index} of ${path}: event hash mismatch (event content was tampered)`);
 	}
 	/** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接 */
 	async verifyChain() {
@@ -364,6 +479,8 @@ const dirOf = (root, skillName) => {
 	assertSafePathSegment(skillName, "skill name");
 	return `${root}/.webskill/versions/${skillName}`;
 };
+/** 版本列表的缺省页长。缺省属于实现，不属于调用方 */
+const SKILL_VERSION_PAGE_SIZE = 20;
 /** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
 *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
 var SkillVersionStore = class {
@@ -382,7 +499,7 @@ var SkillVersionStore = class {
 		this.#maxArchives = deps.maxArchivesPerSkill ?? 5;
 	}
 	async add(skillName, input) {
-		const existing = await this.list(skillName);
+		const existing = await this.#readAll(skillName);
 		const version = {
 			versionId: this.#createId?.() ?? `v-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`,
 			parentVersionId: input.parentVersionId ?? existing.at(-1)?.versionId,
@@ -402,7 +519,7 @@ var SkillVersionStore = class {
 	}
 	/** 保留策略：超出 maxArchivesPerSkill 时按 createdAt 清理最旧版本（json + zip） */
 	async #prune(skillName) {
-		const versions = await this.list(skillName);
+		const versions = await this.#readAll(skillName);
 		const excess = versions.length - this.#maxArchives;
 		if (excess <= 0) return;
 		for (const old of versions.slice(0, excess)) {
@@ -416,7 +533,14 @@ var SkillVersionStore = class {
 		if (!version.archivePath || !await this.#fs.exists(version.archivePath)) throw new WebSkillError("GOVERNANCE_FAILED", `Version "${versionId}" of skill "${skillName}" has no captured archive (recorded before archive capture existed)`);
 		return this.#fs.readBinary(version.archivePath);
 	}
-	async list(skillName) {
+	/**
+	* 版本列表分页（方向同 C1：无游标给**最新**一页）。
+	* 保留策略与谱系构建走 `#readAll`：它们必须看到全量，不能被分页截断。
+	*/
+	async list(skillName, options = {}) {
+		return takeTailPage(await this.#readAll(skillName), options, 20, "version");
+	}
+	async #readAll(skillName) {
 		const dir = dirOf(this.#root, skillName);
 		if (!await this.#fs.exists(dir)) return [];
 		const out = [];
@@ -472,15 +596,15 @@ var FailureAnalyzer = class {
 			const summary = failed.slice(0, 10).map((e) => `${e.type}: ${e.message ?? ""} ${JSON.stringify(e.data ?? {})}`).join("\n");
 			const response = await this.#llm.complete({ messages: [{
 				role: "user",
-				content: [
+				content: textParts([
 					"Diagnose this failed agent run as STRICT JSON only:",
 					"{\"cause\": string, \"suggestedFix\": string, \"errorCode\"?: string}",
 					`Run termination: ${run.terminationReason ?? "unknown"}`,
 					`Failures:\n${summary || "(none recorded)"}`
-				].join("\n")
+				].join("\n"))
 			}] });
 			try {
-				const parsed = parseJsonObject(response.content ?? "");
+				const parsed = parseJsonObject(partsToText(response.content));
 				return {
 					cause: String(parsed["cause"] ?? "Unknown cause"),
 					suggestedFix: String(parsed["suggestedFix"] ?? "Manual inspection required"),
@@ -596,7 +720,11 @@ var SkillStatePolicy = class {
 			...input.reason !== void 0 ? { data: { reason: input.reason } } : {}
 		});
 	}
-	/** 失败计数；达阈值（默认 3）→ quarantined + 审计 */
+	/**
+	* 失败计数；达阈值（默认 3）→ quarantined + 审计。
+	*
+	* 计数是**累计**而非「连续」：成功不清零，只有 `setState(name, 'active')` 会清。
+	*/
 	async recordFailure(skillName, input = {}) {
 		assertSafePathSegment(skillName, "skill name");
 		const data = await this.#load();
@@ -640,6 +768,48 @@ var SkillStatePolicy = class {
 			canExecute: async (skillName) => this.canExecute(await this.getState(skillName))
 		};
 	}
+	/**
+	* runtime SkillIntegrityGuard 适配（D3）：激活期校验失败 → 置 `quarantined` + 写审计。
+	*
+	* 需求 §3 任务 3 要的是「使技能进入不可用状态，而不是只抛错」——只抛错的话，
+	* 同一个坏技能下一次激活还会再试一遍。置了状态之后，后续激活先被
+	* `toSkillStateGuard().canActivate` 挡住，根本走不到校验。
+	*
+	* `verify` 由宿主传入：完整性校验的实现在 `@webskill/node` / `@webskill/browser`，
+	* governance 与 runtime 都不能依赖它们，装配点只能在宿主。
+	*/
+	toSkillIntegrityGuard(verify) {
+		return { verifyOnActivate: async (skillName) => {
+			assertSafePathSegment(skillName, "skill name");
+			let verdict;
+			try {
+				verdict = await verify(skillName);
+			} catch (e) {
+				verdict = {
+					ok: false,
+					reason: `integrity check failed: ${e instanceof Error ? e.message : String(e)}`
+				};
+			}
+			if (!verdict.ok) await this.setState(skillName, "quarantined", { reason: verdict.reason ?? "integrity verification failed on activation" });
+			return verdict;
+		} };
+	}
+	/**
+	* runtime `SkillOutcomeReporter` 适配（F1）：一次真实的技能脚本执行失败 → `recordFailure`，
+	* 达阈值即自动 `quarantined` + 写审计。
+	*
+	* 0.4.0 之前 `recordFailure` 没有任何生产调用方——`states.json` 的失败计数只在单测里增长，
+	* 于是「失败达阈值自动隔离」在真实部署里从不触发，Console 上那个计数恒为 0。
+	* 这个适配器就是把那一段接上：runtime 不能反向依赖治理，装配点只能在宿主。
+	*
+	* 只上报失败、不上报成功，与 `recordFailure` 的既有语义保持一致（累计计数，
+	* 成功不清零，只有 `setState(name, 'active')` 清零）。
+	*/
+	toSkillOutcomeReporter(input = {}) {
+		return { onSkillFailed: async (report) => {
+			await this.recordFailure(report.skillName, input);
+		} };
+	}
 	/** disabled → SKILL_DISABLED；quarantined → SKILL_QUARANTINED */
 	async assertExecutable(skillName) {
 		const state = await this.getState(skillName);
@@ -863,7 +1033,7 @@ var DocumentSkillExtractor = class {
 		const candidate = normalizeCandidate({
 			raw: parseJsonObject(await completeText(this.#llm, [{
 				role: "user",
-				content: EXTRACT_PROMPT(input.document, input.nameHint)
+				content: textParts(EXTRACT_PROMPT(input.document, input.nameHint))
 			}])),
 			source: "document",
 			...this.#now ? { now: this.#now } : {},
@@ -919,4 +1089,4 @@ function createMissHook(deps) {
 }
 
 //#endregion
-export { AlwaysHumanApprovalPolicy, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, RepairPlanner, SCORING_WEIGHTS, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, CANDIDATE_PAGE_SIZE, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };