@webskill/sdk 0.7.0 → 0.8.0

package/dist/{dist-D0qW6e40.js → dist-DmI5SBBF.js}

@@ -1,7 +1,69 @@
-import { A as parseSkillMarkdown, L as resolveInsideRoot, O as messageOf, P as renderAvailableSkillsXml, V as validateSkills, f as SkillDiscovery, g as assertSafePathSegment, m as WebSkillError, p as SkillReader, v as buildCatalog } from "./dist-8oQRa8Xz.js";
-import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { A as messageOf, I as renderAvailableSkillsXml, M as parseSkillMarkdown, W as validateSkills, f as SkillDiscovery, g as assertSafePathSegment, m as WebSkillError, p as SkillReader, v as buildCatalog, z as resolveInsideRoot } from "./dist-59XlqDuv.js";
+import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
 
 //#region ../runtime/dist/index.js
+/** 与正常工具结果同构：模型读到的是「这次调用被中断了」，而不是一个凭空消失的调用 */
+function interruptedToolResult(call, options = {}) {
+	const code = options.code ?? "RUN_INTERRUPTED";
+	const because = options.reason === void 0 ? "" : ` (${options.reason})`;
+	return {
+		ok: false,
+		content: [],
+		error: {
+			code,
+			message: `Tool call "${call.name}" produced no result: the run ended before it finished${because}.`
+		}
+	};
+}
+/** 尚无 `role:'tool'` 应答的工具调用，按消息顺序 */
+function findUnpairedToolCalls(messages) {
+	const answered = new Set(messages.filter((m) => m.role === "tool").map((m) => m.toolCallId));
+	return messages.filter((m) => m.role === "assistant" && m.toolCalls?.length).flatMap((m) => m.toolCalls ?? []).filter((call) => !answered.has(call.id));
+}
+/**
+* 为每个未应答的工具调用补一条结构化的中断说明。
+*
+* 补齐消息紧跟在该 assistant 已有的 tool 兄弟之后——供应商装配按相邻块分组，
+* 插到序列末尾会让它归属到别的 assistant 消息上。
+* 本函数**不改写入参**，也不写盘（AC-11.8）。
+*/
+function sealToolCallPairs(messages, options = {}) {
+	const answered = new Set(messages.filter((m) => m.role === "tool").map((m) => m.toolCallId));
+	const code = options.code ?? "RUN_INTERRUPTED";
+	const sealed = [];
+	const out = [];
+	for (let i = 0; i < messages.length; i += 1) {
+		const message = messages[i];
+		out.push(message);
+		if (message.role !== "assistant" || !message.toolCalls?.length) continue;
+		const missing = message.toolCalls.filter((call) => !answered.has(call.id));
+		if (missing.length === 0) continue;
+		while (i + 1 < messages.length && messages[i + 1].role === "tool") {
+			out.push(messages[i + 1]);
+			i += 1;
+		}
+		for (const call of missing) {
+			out.push({
+				role: "tool",
+				toolCallId: call.id,
+				content: textParts(JSON.stringify(interruptedToolResult(call, {
+					...options,
+					code
+				})))
+			});
+			answered.add(call.id);
+			sealed.push({
+				callId: call.id,
+				toolName: call.name,
+				code
+			});
+		}
+	}
+	return {
+		messages: sealed.length === 0 ? [...messages] : out,
+		sealed
+	};
+}
 /**
 * $defs 必须与 type / properties 同级，位于每个工具 inputSchema 的根。
 * 已验证：放进 properties.spec 内层会得到同样的 "Unsupported ref: #" ——
@@ -1617,7 +1679,9 @@ function schemaToForm(schema, providedArgs) {
 function mapFieldType(prop) {
 	if (Array.isArray(prop.enum)) return "select";
 	switch (prop.type) {
-		case "string": return prop["format"] === "binary" || prop["contentEncoding"] === "base64" ? "file" : "text";
+		case "string":
+			if (prop["format"] === "binary" || prop["contentEncoding"] === "base64") return "file";
+			return prop["format"] === "password" || prop["writeOnly"] === true ? "password" : "text";
 		case "number":
 		case "integer": return "number";
 		case "boolean": return "boolean";
@@ -1965,7 +2029,7 @@ const DEFAULT_LOOP_LIMITS = {
 	totalTimeoutMs: 12e4,
 	toolTimeoutMs: 3e4
 };
-const RUN_SNAPSHOT_SCHEMA_VERSION = 2;
+const RUN_SNAPSHOT_SCHEMA_VERSION = 3;
 /** @experimental */
 function isUnsupportedRunSnapshot(entry) {
 	return entry.unsupported === true;
@@ -2010,7 +2074,7 @@ var FsRunSnapshotStore = class {
 			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
 		}
 		const schemaVersion = typeof snapshot.schemaVersion === "number" ? snapshot.schemaVersion : 0;
-		if (schemaVersion !== 2) throw new WebSkillError("RUN_SNAPSHOT_SCHEMA_UNSUPPORTED", `Snapshot for run "${runId}" uses schema version ${schemaVersion}; this runtime reads version 2. The file was kept for read-only inspection.`);
+		if (schemaVersion !== 3) throw new WebSkillError("RUN_SNAPSHOT_SCHEMA_UNSUPPORTED", `Snapshot for run "${runId}" uses schema version ${schemaVersion}; this runtime reads version 3. The file was kept for read-only inspection.`);
 		if (snapshot.runId !== runId) {
 			await this.#fs.remove(path).catch(() => void 0);
 			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
@@ -2030,7 +2094,7 @@ var FsRunSnapshotStore = class {
 			try {
 				const parsed = JSON.parse(await this.#fs.readText(entry.path));
 				const schemaVersion = typeof parsed.schemaVersion === "number" ? parsed.schemaVersion : 0;
-				if (schemaVersion === 2) {
+				if (schemaVersion === 3) {
 					out.push(parsed);
 					continue;
 				}
@@ -2143,6 +2207,21 @@ const redactFileValue = (value) => {
 	return rest;
 };
 /**
+* 密码字段名集合（FR-23.7）。
+*
+* 既有的三处脱敏各有各的判别口径（看 request.type、看值是否标量、看值里有没有 data/mimeType），
+* 没有一处按**字段类型**判。行为记录那处尤其危险：它的安全假设是「标量是安全的」，
+* 而密码恰好是字符串标量——假设失效了。
+*/
+const passwordFieldNames = (request) => new Set(request.type === "form" ? request.fields.filter((f) => f.type === "password").map((f) => f.name) : []);
+/** 去掉密码字段的值；不是掩码而是**不存**，掩码存下来仍然泄露长度与存在性 */
+const withoutPasswords = (value, passwords) => {
+	if (passwords.size === 0 || typeof value !== "object" || value === null || Array.isArray(value)) return value;
+	const out = {};
+	for (const [key, entry] of Object.entries(value)) if (!passwords.has(key)) out[key] = entry;
+	return out;
+};
+/**
 * 触顶失败的结构化细节（FR-21.2）。由终止原因推出上限字段，而不是在每个终止点各写一遍——
 * 终止点有四个，写四遍就迟早有一处对不上。
 */
@@ -2156,6 +2235,16 @@ const limitDetails = (state, reason) => {
 		value: state.maxTurns
 	};
 };
+/** 补齐消息里带的错误码：能说清「为什么没结果」的，就不要退化成 RUN_INTERRUPTED（设计 11 §2.5） */
+const sealCodeFor = (reason, errorCode) => {
+	switch (reason) {
+		case "interaction-timeout": return "RUN_INTERACTION_TIMEOUT";
+		case "user-cancelled": return "RUN_CANCELLED";
+		case "timeout": return "RUN_TIMEOUT";
+		case "tool-resolution-exhausted": return "TOOL_RESOLUTION_EXHAUSTED";
+		default: return errorCode ?? "RUN_INTERRUPTED";
+	}
+};
 /**
 * 多轮 Agent 循环。
 * 工具失败一律转为 ToolResult{ok:false} 回喂 LLM 继续循环；
@@ -2487,6 +2576,7 @@ var AgentLoop = class {
 		} catch (e) {
 			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf(e)}` });
 		}
+		await this.#sealToolCalls(state, reason, errorCode);
 		run.trace = trace.list();
 		return {
 			output,
@@ -2494,12 +2584,45 @@ var AgentLoop = class {
 			messages: state.messages.map((m) => ({ ...m }))
 		};
 	}
+	/**
+	* S1 出口守卫（FR-11.1）：中断留下的未应答工具调用在这里补齐。
+	*
+	* 放在 `#finish` 而不是四个早退点：它是唯一的汇流出口，写四遍就迟早漏一处。
+	* 补齐产物只进 `LlmMessage[]`（下一轮请求装配用），不进 chatbot 的消息流（AC-11.2）。
+	*/
+	async #sealToolCalls(state, reason, errorCode) {
+		const pending = findUnpairedToolCalls(state.messages);
+		if (pending.length === 0) return;
+		const code = sealCodeFor(reason, errorCode);
+		for (const call of pending) {
+			const result = interruptedToolResult(call, {
+				code,
+				reason
+			});
+			state.messages.push({
+				role: "tool",
+				toolCallId: call.id,
+				content: await this.#toolResultParts(call, result, state)
+			});
+			state.trace.record("run.warning", {
+				message: `Sealed unanswered tool call "${call.name}": the run ended before it produced a result.`,
+				data: {
+					kind: "tool-call-sealed",
+					callId: call.id,
+					toolName: call.name,
+					side: "write",
+					reason,
+					code
+				}
+			});
+		}
+	}
 	/** D3 快照写入（含 pendingInteraction 与过期时间；写失败降级 run.warning） */
 	async #saveSnapshot(state, pending) {
 		const store = this.#deps.snapshotStore;
 		if (!store) return;
 		const snapshot = {
-			schemaVersion: 2,
+			schemaVersion: 3,
 			runId: state.runId,
 			sessionId: state.run.sessionId,
 			userPrompt: state.run.userPrompt,
@@ -2674,6 +2797,15 @@ var AgentLoop = class {
 			throw e;
 		}
 	}
+	/**
+	* 工具的技能归属。内置工具与外部工具没有归属，返回 `undefined`——
+	* 拿 `activated[0]` 顶替会把内置工具的失败栽给一个无关技能，比不归因更糟（设计 26 §2.3）。
+	*/
+	#skillOf(call, state) {
+		if (call.name === "read_skill_file" || call.name === "ask_user") return void 0;
+		const resolution = resolveToolName(call.name, state.activated, state.activatedTools.keys());
+		return resolution.kind === "script" ? resolution.skillName : void 0;
+	}
 	/** 最后一条 assistant 消息里第一个尚无 tool 响应的工具调用（即中断时正在处理的那个） */
 	#findPendingToolCall(messages) {
 		const lastAssistant = [...messages].reverse().find((m) => m.role === "assistant" && m.toolCalls?.length);
@@ -2864,11 +2996,14 @@ var AgentLoop = class {
 	}
 	async #executeCall(call, state) {
 		const argsSummary = summarizeArgs(call.arguments);
+		const owner = this.#skillOf(call, state);
+		const attribution = owner === void 0 ? {} : { skillName: owner };
 		const callStartMs = Date.parse(state.now());
 		state.trace.record("tool.started", { data: {
 			name: call.name,
 			callId: call.id,
-			args: argsSummary
+			args: argsSummary,
+			...attribution
 		} });
 		this.#emitTool(state, "started", call);
 		let result;
@@ -2894,7 +3029,8 @@ var AgentLoop = class {
 				name: call.name,
 				callId: call.id,
 				args: argsSummary,
-				durationMs
+				durationMs,
+				...attribution
 			} });
 			this.#emitTool(state, "completed", call);
 			for (const item of result.content) {
@@ -2928,7 +3064,8 @@ var AgentLoop = class {
 					callId: call.id,
 					code: result.error?.code,
 					args: argsSummary,
-					durationMs
+					durationMs,
+					...attribution
 				}
 			});
 			this.#emitTool(state, "failed", call, result.error?.code);
@@ -3095,10 +3232,17 @@ var AgentLoop = class {
 	async #replaySurfaceEvents(state) {
 		const bridge = this.#deps.uiBridge;
 		if (!bridge?.renderSurface || state.surfaceEvents.length === 0) return;
-		try {
-			for (const event of state.surfaceEvents) await bridge.renderSurface(structuredClone(event));
+		for (const event of state.surfaceEvents) try {
+			await bridge.renderSurface(structuredClone(event));
 		} catch (e) {
-			state.trace.record("run.warning", { message: `Failed to replay UI surfaces: ${messageOf(e)}` });
+			state.trace.record("ui.degraded", {
+				message: `Failed to replay UI surface "${event.id}": ${messageOf(e)}`,
+				data: {
+					kind: "replay-failed",
+					surfaceId: event.id,
+					eventType: event.type
+				}
+			});
 		}
 	}
 	/**
@@ -3662,7 +3806,8 @@ var AgentLoop = class {
 		if (!this.#deps.memory) return;
 		const scope = `session:${state.run.sessionId}`;
 		const limit = this.#config.paramHistoryLimit;
-		const recorded = request.type === "file-pick" ? redactFileValue(value) : value;
+		const passwords = passwordFieldNames(request);
+		const recorded = request.type === "file-pick" ? redactFileValue(value) : withoutPasswords(value, passwords);
 		await this.#memoryMutate(scope, "paramHistory", state, (current) => {
 			const history = current ?? [];
 			history.push({
@@ -3729,6 +3874,7 @@ var AgentLoop = class {
 		else if (request.type === "form" && typeof value === "object" && value !== null) {
 			const submitted = value;
 			for (const field of request.fields) {
+				if (field.type === "password") continue;
 				const next = submitted[field.name];
 				if (typeof next !== "string" && typeof next !== "number" && typeof next !== "boolean") continue;
 				if (next === "") continue;
@@ -3882,6 +4028,7 @@ var WebSkillRuntime = class {
 		if (!this.#catalogCache) await this.discover();
 		const cache = this.#catalogCache;
 		if (!cache) throw new Error("discover() did not populate the catalog cache");
+		const sealedHistory = options.history ? sealToolCallPairs(options.history) : void 0;
 		const providerFailures = [];
 		const providerEntries = (await Promise.all((this.#deps.skillProviders ?? []).map(async (p) => {
 			try {
@@ -3928,11 +4075,25 @@ var WebSkillRuntime = class {
 				userPrompt,
 				route,
 				runId,
-				...options.history ? { history: options.history } : {}
+				...sealedHistory ? { history: sealedHistory.messages } : {}
 			});
 		} finally {
 			this.#loops.delete(runId);
 		}
+		for (const record of sealedHistory?.sealed ?? []) result.run.trace.push({
+			id: `evt-seal-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+			runId: result.run.id,
+			ts: (/* @__PURE__ */ new Date()).toISOString(),
+			type: "run.warning",
+			message: `Sealed unanswered tool call "${record.toolName}" carried over from an earlier interrupted run.`,
+			data: {
+				kind: "tool-call-sealed",
+				callId: record.callId,
+				toolName: record.toolName,
+				side: "read",
+				code: record.code
+			}
+		});
 		for (const failure of providerFailures) result.run.trace.push({
 			id: `evt-provider-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
 			runId: result.run.id,
@@ -4428,7 +4589,6 @@ function parseUserProfileExport(raw) {
 		entries
 	};
 }
-/** 导入前给用户看的差异（FR-19.7）：新增哪些、覆盖哪些 @experimental */
 function diffUserProfile(current, incoming) {
 	const byId = new Map(current.entries.map((entry) => [entry.id, entry]));
 	const added = [];
@@ -4990,6 +5150,7 @@ const toMeta = (record) => ({
 	...record.title !== void 0 ? { title: record.title } : {},
 	...record.titleLocked === true ? { titleLocked: true } : {},
 	...record.archived === true ? { archived: true } : {},
+	...record.modelId !== void 0 ? { modelId: record.modelId } : {},
 	messageCount: record.messages.length
 });
 const newSessionId = () => `session-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
@@ -5036,6 +5197,7 @@ function parseSessionFile(raw, path) {
 		...typeof file.title === "string" ? { title: file.title } : {},
 		...file.titleLocked === true ? { titleLocked: true } : {},
 		...file.archived === true ? { archived: true } : {},
+		...typeof file.modelId === "string" ? { modelId: file.modelId } : {},
 		messages: Array.isArray(file.messages) ? file.messages : [],
 		messageCount: Array.isArray(file.messages) ? file.messages.length : 0
 	};
@@ -5077,6 +5239,7 @@ var FsSessionStore = class {
 			...record.title !== void 0 ? { title: record.title } : {},
 			...record.titleLocked === true ? { titleLocked: true } : {},
 			...record.archived === true ? { archived: true } : {},
+			...record.modelId !== void 0 ? { modelId: record.modelId } : {},
 			messages: record.messages
 		};
 		await this.#fs.writeText(this.#path(record.id), JSON.stringify(file, null, 2));
@@ -5170,6 +5333,18 @@ var FsSessionStore = class {
 			await this.#write(record);
 		});
 	}
+	async setModel(id, modelId) {
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			if (modelId === void 0) delete record.modelId;
+			else record.modelId = modelId;
+			await this.#write(record);
+		});
+	}
+	async getMeta(id) {
+		const record = await this.get(id);
+		return record === void 0 ? void 0 : toMeta(record);
+	}
 	async delete(id) {
 		await this.#serialize(id, async () => {
 			const path = this.#path(id);
@@ -5179,4 +5354,4 @@ var FsSessionStore = class {
 };
 
 //#endregion
-export { isNetworkAllowed as $, SerializingMemoryStore as A, bridgeError as B, ProgressiveRouter as C, toRecordDigests as Ct, RUN_SNAPSHOT_SCHEMA_VERSION as D, READ_SKILL_FILE_TOOL_NAME as E, validateUiSpecNode as Et, USER_PROFILE_PROMPT_HEADER as F, exportUserProfile as G, createScriptContext as H, USER_PROFILE_REFINE_PROMPT as I, extractTodoTraceEvents as J, extractChartSpec as K, WebSkillRuntime as L, USER_PROFILE_EXPORT_VERSION as M, USER_PROFILE_KEY as N, RUN_TRACE_SCHEMA_VERSION as O, USER_PROFILE_NO_INVENTION_RULE as P, fromVercelStreamPart as Q, appendBehaviorRecords as R, OpenAiCompatibleClient as S, toLlmToolSpec as St, READ_SKILL_FILE_TOOL as T, validateUiSpecEvent as Tt, createWebSkillApi as U, buildRenderResult as V, diffUserProfile as W, formatSkillScriptManifest as X, extractUiSpecEvents as Y, fromVercelResult as Z, FsRunTraceStore as _, sampleBehaviorRecords as _t, AgentLoop as a, networkUrlHost as at, GoogleGenAiClient as b, scriptToolName as bt, CapabilityApproval as c, normalizeToolError as ct, EMPTY_USER_PROFILE as d, readBehaviorRecords as dt, isUnsupportedRunSnapshot as et, EventBus as f, readProfileEntries as ft, FsRunSnapshotStore as g, resolveToolName as gt, FsMemoryStore as h, renderUserProfileContext as ht, ASK_USER_TOOL_NAME as i, networkPolicyLibSource as it, TraceRecorder as j, SESSION_SCHEMA_VERSION as k, DEFAULT_LOOP_LIMITS as l, parseBridgeRequest as lt, FsArtifactStore as m, refineUserProfile as mt, ASK_USER_INPUT_SCHEMA as n, mergeCatalogEntries as nt, AnthropicClient as o, normalizeErrorCode as ot, FS_SESSION_PAGE_SIZE as p, readUserProfile as pt, extractSkillCandidate as q, ASK_USER_TOOL as r, mergeProfileEntries as rt, BEHAVIOR_RECORDS_KEY as s, normalizeToolContent as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, listSkillScripts as tt, DEFAULT_USER_PROFILE_LIMITS as u, parseUserProfileExport as ut, FsSessionStore as v, schemaSourceLabel as vt, READ_SKILL_FILE_INPUT_SCHEMA as w, toVercelToolSpecs as wt, HookRunner as x, summarizeToolCalls as xt, FullDisclosureRouter as y, schemaToForm as yt, applyUserProfileImport as z };
+export { fromVercelStreamPart as $, SerializingMemoryStore as A, bridgeError as B, ProgressiveRouter as C, sealToolCallPairs as Ct, RUN_SNAPSHOT_SCHEMA_VERSION as D, toVercelToolSpecs as Dt, READ_SKILL_FILE_TOOL_NAME as E, toRecordDigests as Et, USER_PROFILE_PROMPT_HEADER as F, exportUserProfile as G, createScriptContext as H, USER_PROFILE_REFINE_PROMPT as I, extractTodoTraceEvents as J, extractChartSpec as K, WebSkillRuntime as L, USER_PROFILE_EXPORT_VERSION as M, USER_PROFILE_KEY as N, RUN_TRACE_SCHEMA_VERSION as O, validateUiSpecEvent as Ot, USER_PROFILE_NO_INVENTION_RULE as P, fromVercelResult as Q, appendBehaviorRecords as R, OpenAiCompatibleClient as S, scriptToolName as St, READ_SKILL_FILE_TOOL as T, toLlmToolSpec as Tt, createWebSkillApi as U, buildRenderResult as V, diffUserProfile as W, findUnpairedToolCalls as X, extractUiSpecEvents as Y, formatSkillScriptManifest as Z, FsRunTraceStore as _, renderUserProfileContext as _t, AgentLoop as a, mergeProfileEntries as at, GoogleGenAiClient as b, schemaSourceLabel as bt, CapabilityApproval as c, normalizeErrorCode as ct, EMPTY_USER_PROFILE as d, parseBridgeRequest as dt, interruptedToolResult as et, EventBus as f, parseUserProfileExport as ft, FsRunSnapshotStore as g, refineUserProfile as gt, FsMemoryStore as h, readUserProfile as ht, ASK_USER_TOOL_NAME as i, mergeCatalogEntries as it, TraceRecorder as j, SESSION_SCHEMA_VERSION as k, validateUiSpecNode as kt, DEFAULT_LOOP_LIMITS as l, normalizeToolContent as lt, FsArtifactStore as m, readProfileEntries as mt, ASK_USER_INPUT_SCHEMA as n, isUnsupportedRunSnapshot as nt, AnthropicClient as o, networkPolicyLibSource as ot, FS_SESSION_PAGE_SIZE as p, readBehaviorRecords as pt, extractSkillCandidate as q, ASK_USER_TOOL as r, listSkillScripts as rt, BEHAVIOR_RECORDS_KEY as s, networkUrlHost as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, isNetworkAllowed as tt, DEFAULT_USER_PROFILE_LIMITS as u, normalizeToolError as ut, FsSessionStore as v, resolveToolName as vt, READ_SKILL_FILE_INPUT_SCHEMA as w, summarizeToolCalls as wt, HookRunner as x, schemaToForm as xt, FullDisclosureRouter as y, sampleBehaviorRecords as yt, applyUserProfileImport as z };

package/dist/{eventTypes-DjIQpt8Y-Bj3vghj4.js → eventTypes-g1BXL6x5-CibcOftR.js}

@@ -1,4 +1,4 @@
-//#region ../governance/dist/eventTypes-DjIQpt8Y.js
+//#region ../governance/dist/eventTypes-g1BXL6x5.js
 /**
 * 审计事件类型常量（FR-13.4）。
 *
@@ -21,9 +21,14 @@ const AUDIT_EVENT_TYPES = {
 	trustKeyRemoved: "trust.key_removed",
 	policyNetworkChanged: "policy.network_changed",
 	policyPrivacyChanged: "policy.privacy_changed",
+	policySecurityChanged: "policy.security_changed",
+	policySandboxChanged: "policy.sandbox_changed",
+	policyAgentCapabilitiesChanged: "policy.agent_capabilities_changed",
+	profileChanged: "profile.changed",
 	mcpEndpointChanged: "mcp.endpoint_changed",
 	mcpPolicyRelaxed: "mcp.policy_relaxed",
-	providerChanged: "provider.changed"
+	providerChanged: "provider.changed",
+	candidateGenerated: "candidate.generated"
 };
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */
 const AUDIT_EVENT_TYPE_LIST = Object.values(AUDIT_EVENT_TYPES);

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { H as PageQuery, I as FileSystemProvider, V as Page, et as SkillCatalogEntry, f as LlmMessage, l as LlmClient, nt as SkillDocument, ot as SkillManagerPort, x as UiBridge } from "./types-CcxRLdJG-DCXyw1US.js";
-import { H as IntegrityVerdict, Nt as SkillIntegrityGuard, Pt as SkillOutcomeReporter, Rt as SkillStateGuard, bt as RuntimeRun, ln as WebSkillRuntime } from "./index-DkbABR43.js";
-import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-Bl-ElD45-CWPvGvoq.js";
+import { H as PageQuery, I as FileSystemProvider, V as Page, ct as SkillManagerPort, f as LlmMessage, it as SkillDocument, l as LlmClient, nt as SkillCatalogEntry, x as UiBridge } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { H as IntegrityVerdict, It as SkillIntegrityGuard, Lt as SkillOutcomeReporter, Vt as SkillStateGuard, bt as RuntimeRun, pn as WebSkillRuntime } from "./index-K-eewlGL.js";
+import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-Bl-ElD45-gRfSaAby.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -110,6 +110,14 @@ interface AuditChainVerification {
 interface AuditPage extends Page<AuditEvent> {
   chainBrokenAt?: number;
   chainReason?: string;
+  /**
+   * 解析失败的行。长度 > 0 即「读不动」，但已解析的记录仍在 `items` 里——
+   * 不给这个字段的话，坏行被吞掉后的返回值与「真的没有事件」完全一样（FR-18.3）。
+   */
+  malformed?: {
+    count: number;
+    firstLine: number;
+  };
 }
 /**
  * JSONL 追加式审计日志（<managedRoot>/.webskill/audit.jsonl）：
@@ -171,9 +179,14 @@ declare const AUDIT_EVENT_TYPES: {
   readonly trustKeyRemoved: "trust.key_removed";
   readonly policyNetworkChanged: "policy.network_changed";
   readonly policyPrivacyChanged: "policy.privacy_changed";
+  readonly policySecurityChanged: "policy.security_changed";
+  readonly policySandboxChanged: "policy.sandbox_changed";
+  readonly policyAgentCapabilitiesChanged: "policy.agent_capabilities_changed";
+  readonly profileChanged: "profile.changed";
   readonly mcpEndpointChanged: "mcp.endpoint_changed";
   readonly mcpPolicyRelaxed: "mcp.policy_relaxed";
   readonly providerChanged: "provider.changed";
+  readonly candidateGenerated: "candidate.generated";
 };
 type AuditEventType = (typeof AUDIT_EVENT_TYPES)[keyof typeof AUDIT_EVENT_TYPES];
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */

package/dist/governance.js

@@ -1,6 +1,6 @@
-import { O as messageOf, T as isValidSkillName, g as assertSafePathSegment, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
-import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-DjIQpt8Y-Bj3vghj4.js";
+import { A as messageOf, D as isValidSkillName, g as assertSafePathSegment, m as WebSkillError } from "./dist-59XlqDuv.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
+import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-g1BXL6x5-CibcOftR.js";
 
 //#region ../governance/dist/index.js
 const invalid = (message, details) => {
@@ -443,15 +443,21 @@ var FsAuditLog = class {
 		/** 按文件行序保留（含解析失败的洞）：链校验必须在文件行序上做，不能在筛选结果上做 */
 		const records = [];
 		let skippedLines = 0;
+		let firstMalformedLine = -1;
 		for (const line of raw.split("\n")) {
 			if (line.trim() === "") continue;
 			try {
 				records.push(JSON.parse(line));
 			} catch {
+				if (firstMalformedLine < 0) firstMalformedLine = records.length;
 				skippedLines += 1;
 				records.push(void 0);
 			}
 		}
+		const malformed = skippedLines > 0 ? {
+			count: skippedLines,
+			firstLine: firstMalformedLine
+		} : void 0;
 		if (skippedLines > 0) console.warn(`[webskill] Audit log at ${path} contains ${skippedLines} unparsable line(s) skipped by query; run verifyChain() to check integrity`);
 		const matched = [];
 		for (let i = 0; i < records.length; i++) {
@@ -493,7 +499,8 @@ var FsAuditLog = class {
 			...broken !== void 0 ? {
 				chainBrokenAt: broken.at,
 				chainReason: broken.reason
-			} : {}
+			} : {},
+			...malformed !== void 0 ? { malformed } : {}
 		};
 	}
 	/** 单行的链自洽：本行 hash 重算相符，且 prevHash 指向前一行的 hash。自洽时返回 undefined */
@@ -1025,14 +1032,17 @@ var EvaluationRunner = class {
 /** 失败 trace → 回归评估任务建议（prompt 复现 + expected 错误模式） */
 function suggestFromFailedRun(run) {
 	const errorPatterns = run.trace.filter((e) => e.type === "tool.failed" || e.type === "run.failed").map((e) => String(e.data?.["code"] ?? e.message ?? "")).filter(Boolean);
+	const failedSkills = [...new Set(run.trace.filter((e) => e.type === "tool.failed").map((e) => e.data?.["skillName"]).filter((name) => typeof name === "string" && name !== ""))];
 	return {
 		id: `regression-${run.id}`,
 		prompt: run.userPrompt,
+		...run.activeSkillNames.length > 0 ? { skillNames: [...run.activeSkillNames] } : {},
 		expected: (output, rerun) => rerun.status === "completed" && !rerun.trace.some((e) => (e.type === "tool.failed" || e.type === "run.failed") && errorPatterns.includes(String(e.data?.["code"] ?? ""))),
 		metadata: {
 			source: "test-suggestion",
 			failureReason: run.terminationReason ?? "unknown",
-			errorPatterns
+			errorPatterns,
+			failedSkills
 		}
 	};
 }
@@ -1208,6 +1218,15 @@ function createMissHook(deps) {
 			source: "runtime-miss"
 		});
 		await deps.store.save(candidate);
+		await deps.audit?.append({
+			type: AUDIT_EVENT_TYPES.candidateGenerated,
+			actor: "system",
+			target: candidate.name,
+			data: {
+				source: "runtime-miss",
+				candidateId: candidate.id
+			}
+		});
 	};
 }