@webskill/sdk 0.7.0 → 0.9.0

package/dist/{dist-D0qW6e40.js → dist-CFmkV45C.js}

@@ -1,7 +1,69 @@
-import { A as parseSkillMarkdown, L as resolveInsideRoot, O as messageOf, P as renderAvailableSkillsXml, V as validateSkills, f as SkillDiscovery, g as assertSafePathSegment, m as WebSkillError, p as SkillReader, v as buildCatalog } from "./dist-8oQRa8Xz.js";
-import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { K as validateSkills, M as messageOf, P as parseSkillMarkdown, R as renderAvailableSkillsXml, V as resolveInsideRoot, _ as assertSafePathSegment, h as WebSkillError, m as SkillReader, p as SkillDiscovery, v as atomicWriteText, y as buildCatalog } from "./dist-Bev6i6Ip.js";
+import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
 
 //#region ../runtime/dist/index.js
+/** 与正常工具结果同构：模型读到的是「这次调用被中断了」，而不是一个凭空消失的调用 */
+function interruptedToolResult(call, options = {}) {
+	const code = options.code ?? "RUN_INTERRUPTED";
+	const because = options.reason === void 0 ? "" : ` (${options.reason})`;
+	return {
+		ok: false,
+		content: [],
+		error: {
+			code,
+			message: `Tool call "${call.name}" produced no result: the run ended before it finished${because}.`
+		}
+	};
+}
+/** 尚无 `role:'tool'` 应答的工具调用，按消息顺序 */
+function findUnpairedToolCalls(messages) {
+	const answered = new Set(messages.filter((m) => m.role === "tool").map((m) => m.toolCallId));
+	return messages.filter((m) => m.role === "assistant" && m.toolCalls?.length).flatMap((m) => m.toolCalls ?? []).filter((call) => !answered.has(call.id));
+}
+/**
+* 为每个未应答的工具调用补一条结构化的中断说明。
+*
+* 补齐消息紧跟在该 assistant 已有的 tool 兄弟之后——供应商装配按相邻块分组，
+* 插到序列末尾会让它归属到别的 assistant 消息上。
+* 本函数**不改写入参**，也不写盘（AC-11.8）。
+*/
+function sealToolCallPairs(messages, options = {}) {
+	const answered = new Set(messages.filter((m) => m.role === "tool").map((m) => m.toolCallId));
+	const code = options.code ?? "RUN_INTERRUPTED";
+	const sealed = [];
+	const out = [];
+	for (let i = 0; i < messages.length; i += 1) {
+		const message = messages[i];
+		out.push(message);
+		if (message.role !== "assistant" || !message.toolCalls?.length) continue;
+		const missing = message.toolCalls.filter((call) => !answered.has(call.id));
+		if (missing.length === 0) continue;
+		while (i + 1 < messages.length && messages[i + 1].role === "tool") {
+			out.push(messages[i + 1]);
+			i += 1;
+		}
+		for (const call of missing) {
+			out.push({
+				role: "tool",
+				toolCallId: call.id,
+				content: textParts(JSON.stringify(interruptedToolResult(call, {
+					...options,
+					code
+				})))
+			});
+			answered.add(call.id);
+			sealed.push({
+				callId: call.id,
+				toolName: call.name,
+				code
+			});
+		}
+	}
+	return {
+		messages: sealed.length === 0 ? [...messages] : out,
+		sealed
+	};
+}
 /**
 * $defs 必须与 type / properties 同级，位于每个工具 inputSchema 的根。
 * 已验证：放进 properties.spec 内层会得到同样的 "Unsupported ref: #" ——
@@ -835,10 +897,26 @@ var AnthropicClient = class {
 		}
 		return res;
 	}
-	/** 轻量探测（GET /v1/models），集成测试据此决定 skip */
+	/**
+	* 真实调用路径探测（FR-27.1）：`POST /v1/messages` 最小请求（max_tokens=1），200 即可达。
+	* Anthropic 兼容端点（如 LM Studio 的 /anthropic 层）不实现 `GET /v1/models`，
+	* 用 /models 探测会把「能对话」误判为「不可达」——checkAvailability 的语义从
+	* 「/models 可达」改为「能完成一次真实调用」。
+	*/
 	async checkAvailability() {
 		try {
-			return (await this.#fetch(`${this.#baseUrl()}/v1/models`, { headers: this.#headers() })).ok;
+			return (await this.#fetch(`${this.#baseUrl()}/v1/messages`, {
+				method: "POST",
+				headers: this.#headers(),
+				body: JSON.stringify({
+					model: this.#config.model,
+					max_tokens: 1,
+					messages: [{
+						role: "user",
+						content: "ping"
+					}]
+				})
+			})).ok;
 		} catch {
 			return false;
 		}
@@ -1359,6 +1437,16 @@ const ASK_USER_TOOL = {
 	source: "builtin"
 };
 /**
+* 越权 / 绝对路径 / 父级遍历的引用读取：策略拒绝（FS_PERMISSION_DENIED，
+* 计入 POLICY_DENIAL_CODES → 不计入隔离失败计数），
+* 与「references/ 内路径确实不存在 → FS_NOT_FOUND」区分（0.9.0 分册 14，UX-04）。
+*/
+function assertReferencePath(relativePath) {
+	const trimmed = relativePath.trim();
+	if (trimmed === "" || trimmed.startsWith("/") || trimmed.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(trimmed)) throw new WebSkillError("FS_PERMISSION_DENIED", `Reference access denied: absolute or empty path (path: ${JSON.stringify(relativePath)})`);
+	if (trimmed.replace(/\\/g, "/").split("/").includes("..")) throw new WebSkillError("FS_PERMISSION_DENIED", `Reference access denied: parent traversal (path: ${JSON.stringify(relativePath)})`);
+}
+/**
 * 脚本执行上下文：只暴露 readReference / writeArtifact 两个显式能力，
 * 不暴露 fs 本体（沙箱语义，对齐 deferred-items D1）。
 */
@@ -1369,6 +1457,7 @@ function createScriptContext(deps) {
 		skillName,
 		runId,
 		async readReference(relativePath) {
+			assertReferencePath(relativePath);
 			return readFs.readText(resolveInsideRoot(skillRoot, `references/${relativePath}`));
 		},
 		async writeArtifact(path, content, options) {
@@ -1617,7 +1706,9 @@ function schemaToForm(schema, providedArgs) {
 function mapFieldType(prop) {
 	if (Array.isArray(prop.enum)) return "select";
 	switch (prop.type) {
-		case "string": return prop["format"] === "binary" || prop["contentEncoding"] === "base64" ? "file" : "text";
+		case "string":
+			if (prop["format"] === "binary" || prop["contentEncoding"] === "base64") return "file";
+			return prop["format"] === "password" || prop["writeOnly"] === true ? "password" : "text";
 		case "number":
 		case "integer": return "number";
 		case "boolean": return "boolean";
@@ -1965,7 +2056,7 @@ const DEFAULT_LOOP_LIMITS = {
 	totalTimeoutMs: 12e4,
 	toolTimeoutMs: 3e4
 };
-const RUN_SNAPSHOT_SCHEMA_VERSION = 2;
+const RUN_SNAPSHOT_SCHEMA_VERSION = 3;
 /** @experimental */
 function isUnsupportedRunSnapshot(entry) {
 	return entry.unsupported === true;
@@ -1991,7 +2082,7 @@ var FsRunSnapshotStore = class {
 		return resolveInsideRoot(this.#root, `${runId}${SNAPSHOT_SUFFIX}`);
 	}
 	async save(snapshot) {
-		await this.#fs.writeText(this.#path(snapshot.runId), JSON.stringify(snapshot, null, 2));
+		await atomicWriteText(this.#fs, this.#path(snapshot.runId), JSON.stringify(snapshot, null, 2));
 		await this.#pruneExpired();
 	}
 	async load(runId) {
@@ -2010,7 +2101,7 @@ var FsRunSnapshotStore = class {
 			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
 		}
 		const schemaVersion = typeof snapshot.schemaVersion === "number" ? snapshot.schemaVersion : 0;
-		if (schemaVersion !== 2) throw new WebSkillError("RUN_SNAPSHOT_SCHEMA_UNSUPPORTED", `Snapshot for run "${runId}" uses schema version ${schemaVersion}; this runtime reads version 2. The file was kept for read-only inspection.`);
+		if (schemaVersion !== 3) throw new WebSkillError("RUN_SNAPSHOT_SCHEMA_UNSUPPORTED", `Snapshot for run "${runId}" uses schema version ${schemaVersion}; this runtime reads version 3. The file was kept for read-only inspection.`);
 		if (snapshot.runId !== runId) {
 			await this.#fs.remove(path).catch(() => void 0);
 			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
@@ -2030,7 +2121,7 @@ var FsRunSnapshotStore = class {
 			try {
 				const parsed = JSON.parse(await this.#fs.readText(entry.path));
 				const schemaVersion = typeof parsed.schemaVersion === "number" ? parsed.schemaVersion : 0;
-				if (schemaVersion === 2) {
+				if (schemaVersion === 3) {
 					out.push(parsed);
 					continue;
 				}
@@ -2143,6 +2234,21 @@ const redactFileValue = (value) => {
 	return rest;
 };
 /**
+* 密码字段名集合（FR-23.7）。
+*
+* 既有的三处脱敏各有各的判别口径（看 request.type、看值是否标量、看值里有没有 data/mimeType），
+* 没有一处按**字段类型**判。行为记录那处尤其危险：它的安全假设是「标量是安全的」，
+* 而密码恰好是字符串标量——假设失效了。
+*/
+const passwordFieldNames = (request) => new Set(request.type === "form" ? request.fields.filter((f) => f.type === "password").map((f) => f.name) : []);
+/** 去掉密码字段的值；不是掩码而是**不存**，掩码存下来仍然泄露长度与存在性 */
+const withoutPasswords = (value, passwords) => {
+	if (passwords.size === 0 || typeof value !== "object" || value === null || Array.isArray(value)) return value;
+	const out = {};
+	for (const [key, entry] of Object.entries(value)) if (!passwords.has(key)) out[key] = entry;
+	return out;
+};
+/**
 * 触顶失败的结构化细节（FR-21.2）。由终止原因推出上限字段，而不是在每个终止点各写一遍——
 * 终止点有四个，写四遍就迟早有一处对不上。
 */
@@ -2156,6 +2262,16 @@ const limitDetails = (state, reason) => {
 		value: state.maxTurns
 	};
 };
+/** 补齐消息里带的错误码：能说清「为什么没结果」的，就不要退化成 RUN_INTERRUPTED（设计 11 §2.5） */
+const sealCodeFor = (reason, errorCode) => {
+	switch (reason) {
+		case "interaction-timeout": return "RUN_INTERACTION_TIMEOUT";
+		case "user-cancelled": return "RUN_CANCELLED";
+		case "timeout": return "RUN_TIMEOUT";
+		case "tool-resolution-exhausted": return "TOOL_RESOLUTION_EXHAUSTED";
+		default: return errorCode ?? "RUN_INTERRUPTED";
+	}
+};
 /**
 * 多轮 Agent 循环。
 * 工具失败一律转为 ToolResult{ok:false} 回喂 LLM 继续循环；
@@ -2487,6 +2603,7 @@ var AgentLoop = class {
 		} catch (e) {
 			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf(e)}` });
 		}
+		await this.#sealToolCalls(state, reason, errorCode);
 		run.trace = trace.list();
 		return {
 			output,
@@ -2494,12 +2611,45 @@ var AgentLoop = class {
 			messages: state.messages.map((m) => ({ ...m }))
 		};
 	}
+	/**
+	* S1 出口守卫（FR-11.1）：中断留下的未应答工具调用在这里补齐。
+	*
+	* 放在 `#finish` 而不是四个早退点：它是唯一的汇流出口，写四遍就迟早漏一处。
+	* 补齐产物只进 `LlmMessage[]`（下一轮请求装配用），不进 chatbot 的消息流（AC-11.2）。
+	*/
+	async #sealToolCalls(state, reason, errorCode) {
+		const pending = findUnpairedToolCalls(state.messages);
+		if (pending.length === 0) return;
+		const code = sealCodeFor(reason, errorCode);
+		for (const call of pending) {
+			const result = interruptedToolResult(call, {
+				code,
+				reason
+			});
+			state.messages.push({
+				role: "tool",
+				toolCallId: call.id,
+				content: await this.#toolResultParts(call, result, state)
+			});
+			state.trace.record("run.warning", {
+				message: `Sealed unanswered tool call "${call.name}": the run ended before it produced a result.`,
+				data: {
+					kind: "tool-call-sealed",
+					callId: call.id,
+					toolName: call.name,
+					side: "write",
+					reason,
+					code
+				}
+			});
+		}
+	}
 	/** D3 快照写入（含 pendingInteraction 与过期时间；写失败降级 run.warning） */
 	async #saveSnapshot(state, pending) {
 		const store = this.#deps.snapshotStore;
 		if (!store) return;
 		const snapshot = {
-			schemaVersion: 2,
+			schemaVersion: 3,
 			runId: state.runId,
 			sessionId: state.run.sessionId,
 			userPrompt: state.run.userPrompt,
@@ -2674,6 +2824,15 @@ var AgentLoop = class {
 			throw e;
 		}
 	}
+	/**
+	* 工具的技能归属。内置工具与外部工具没有归属，返回 `undefined`——
+	* 拿 `activated[0]` 顶替会把内置工具的失败栽给一个无关技能，比不归因更糟（设计 26 §2.3）。
+	*/
+	#skillOf(call, state) {
+		if (call.name === "read_skill_file" || call.name === "ask_user") return void 0;
+		const resolution = resolveToolName(call.name, state.activated, state.activatedTools.keys());
+		return resolution.kind === "script" ? resolution.skillName : void 0;
+	}
 	/** 最后一条 assistant 消息里第一个尚无 tool 响应的工具调用（即中断时正在处理的那个） */
 	#findPendingToolCall(messages) {
 		const lastAssistant = [...messages].reverse().find((m) => m.role === "assistant" && m.toolCalls?.length);
@@ -2864,11 +3023,14 @@ var AgentLoop = class {
 	}
 	async #executeCall(call, state) {
 		const argsSummary = summarizeArgs(call.arguments);
+		const owner = this.#skillOf(call, state);
+		const attribution = owner === void 0 ? {} : { skillName: owner };
 		const callStartMs = Date.parse(state.now());
 		state.trace.record("tool.started", { data: {
 			name: call.name,
 			callId: call.id,
-			args: argsSummary
+			args: argsSummary,
+			...attribution
 		} });
 		this.#emitTool(state, "started", call);
 		let result;
@@ -2894,7 +3056,8 @@ var AgentLoop = class {
 				name: call.name,
 				callId: call.id,
 				args: argsSummary,
-				durationMs
+				durationMs,
+				...attribution
 			} });
 			this.#emitTool(state, "completed", call);
 			for (const item of result.content) {
@@ -2928,7 +3091,8 @@ var AgentLoop = class {
 					callId: call.id,
 					code: result.error?.code,
 					args: argsSummary,
-					durationMs
+					durationMs,
+					...attribution
 				}
 			});
 			this.#emitTool(state, "failed", call, result.error?.code);
@@ -3095,10 +3259,17 @@ var AgentLoop = class {
 	async #replaySurfaceEvents(state) {
 		const bridge = this.#deps.uiBridge;
 		if (!bridge?.renderSurface || state.surfaceEvents.length === 0) return;
-		try {
-			for (const event of state.surfaceEvents) await bridge.renderSurface(structuredClone(event));
+		for (const event of state.surfaceEvents) try {
+			await bridge.renderSurface(structuredClone(event));
 		} catch (e) {
-			state.trace.record("run.warning", { message: `Failed to replay UI surfaces: ${messageOf(e)}` });
+			state.trace.record("ui.degraded", {
+				message: `Failed to replay UI surface "${event.id}": ${messageOf(e)}`,
+				data: {
+					kind: "replay-failed",
+					surfaceId: event.id,
+					eventType: event.type
+				}
+			});
 		}
 	}
 	/**
@@ -3662,7 +3833,8 @@ var AgentLoop = class {
 		if (!this.#deps.memory) return;
 		const scope = `session:${state.run.sessionId}`;
 		const limit = this.#config.paramHistoryLimit;
-		const recorded = request.type === "file-pick" ? redactFileValue(value) : value;
+		const passwords = passwordFieldNames(request);
+		const recorded = request.type === "file-pick" ? redactFileValue(value) : withoutPasswords(value, passwords);
 		await this.#memoryMutate(scope, "paramHistory", state, (current) => {
 			const history = current ?? [];
 			history.push({
@@ -3729,6 +3901,7 @@ var AgentLoop = class {
 		else if (request.type === "form" && typeof value === "object" && value !== null) {
 			const submitted = value;
 			for (const field of request.fields) {
+				if (field.type === "password") continue;
 				const next = submitted[field.name];
 				if (typeof next !== "string" && typeof next !== "number" && typeof next !== "boolean") continue;
 				if (next === "") continue;
@@ -3882,6 +4055,7 @@ var WebSkillRuntime = class {
 		if (!this.#catalogCache) await this.discover();
 		const cache = this.#catalogCache;
 		if (!cache) throw new Error("discover() did not populate the catalog cache");
+		const sealedHistory = options.history ? sealToolCallPairs(options.history) : void 0;
 		const providerFailures = [];
 		const providerEntries = (await Promise.all((this.#deps.skillProviders ?? []).map(async (p) => {
 			try {
@@ -3928,11 +4102,25 @@ var WebSkillRuntime = class {
 				userPrompt,
 				route,
 				runId,
-				...options.history ? { history: options.history } : {}
+				...sealedHistory ? { history: sealedHistory.messages } : {}
 			});
 		} finally {
 			this.#loops.delete(runId);
 		}
+		for (const record of sealedHistory?.sealed ?? []) result.run.trace.push({
+			id: `evt-seal-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+			runId: result.run.id,
+			ts: (/* @__PURE__ */ new Date()).toISOString(),
+			type: "run.warning",
+			message: `Sealed unanswered tool call "${record.toolName}" carried over from an earlier interrupted run.`,
+			data: {
+				kind: "tool-call-sealed",
+				callId: record.callId,
+				toolName: record.toolName,
+				side: "read",
+				code: record.code
+			}
+		});
 		for (const failure of providerFailures) result.run.trace.push({
 			id: `evt-provider-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
 			runId: result.run.id,
@@ -4237,7 +4425,7 @@ var FsMemoryStore = class {
 		}
 	}
 	async set(scope, key, value) {
-		await this.#fs.writeText(this.#keyPath(scope, key), JSON.stringify(value, null, 2));
+		await atomicWriteText(this.#fs, this.#keyPath(scope, key), JSON.stringify(value, null, 2));
 	}
 	async delete(scope, key) {
 		const path = this.#keyPath(scope, key);
@@ -4428,7 +4616,6 @@ function parseUserProfileExport(raw) {
 		entries
 	};
 }
-/** 导入前给用户看的差异（FR-19.7）：新增哪些、覆盖哪些 @experimental */
 function diffUserProfile(current, incoming) {
 	const byId = new Map(current.entries.map((entry) => [entry.id, entry]));
 	const added = [];
@@ -4474,7 +4661,7 @@ var FsArtifactStore = class {
 	}
 	async createTextArtifact(input) {
 		const size = new TextEncoder().encode(input.content).length;
-		await this.#fs.writeText(this.#artifactPath(input.runId, input.path), input.content);
+		await atomicWriteText(this.#fs, this.#artifactPath(input.runId, input.path), input.content);
 		return this.#persist({
 			...input,
 			type: "text",
@@ -4524,7 +4711,7 @@ var FsArtifactStore = class {
 			metadata: input.metadata
 		};
 		const next = [...(await this.listArtifacts(input.runId)).filter((a) => a.id !== artifact.id), artifact];
-		await this.#fs.writeText(`${this.#root}/${input.runId}/${INDEX_FILE$1}`, JSON.stringify({ artifacts: next }, null, 2));
+		await atomicWriteText(this.#fs, `${this.#root}/${input.runId}/${INDEX_FILE$1}`, JSON.stringify({ artifacts: next }, null, 2));
 		return artifact;
 	}
 };
@@ -4834,7 +5021,7 @@ var FsRunTraceStore = class {
 			events: run.trace
 		};
 		try {
-			await this.#fs.writeText(this.#path(run.id), JSON.stringify(trace, null, 2));
+			await atomicWriteText(this.#fs, this.#path(run.id), JSON.stringify(trace, null, 2));
 		} catch (e) {
 			this.#onError(e, run);
 			return;
@@ -4990,6 +5177,7 @@ const toMeta = (record) => ({
 	...record.title !== void 0 ? { title: record.title } : {},
 	...record.titleLocked === true ? { titleLocked: true } : {},
 	...record.archived === true ? { archived: true } : {},
+	...record.modelId !== void 0 ? { modelId: record.modelId } : {},
 	messageCount: record.messages.length
 });
 const newSessionId = () => `session-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
@@ -5036,6 +5224,7 @@ function parseSessionFile(raw, path) {
 		...typeof file.title === "string" ? { title: file.title } : {},
 		...file.titleLocked === true ? { titleLocked: true } : {},
 		...file.archived === true ? { archived: true } : {},
+		...typeof file.modelId === "string" ? { modelId: file.modelId } : {},
 		messages: Array.isArray(file.messages) ? file.messages : [],
 		messageCount: Array.isArray(file.messages) ? file.messages.length : 0
 	};
@@ -5051,6 +5240,8 @@ var FsSessionStore = class {
 	#fs;
 	/** id → 该 id 上最后一次变更的完成时点，用于串行化读改写 */
 	#writes = /* @__PURE__ */ new Map();
+	/** FR-11.4：损坏文件诊断只报一次，避免 list 轮询刷屏 */
+	#warnedDataLoss = false;
 	constructor(deps) {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
@@ -5077,9 +5268,10 @@ var FsSessionStore = class {
 			...record.title !== void 0 ? { title: record.title } : {},
 			...record.titleLocked === true ? { titleLocked: true } : {},
 			...record.archived === true ? { archived: true } : {},
+			...record.modelId !== void 0 ? { modelId: record.modelId } : {},
 			messages: record.messages
 		};
-		await this.#fs.writeText(this.#path(record.id), JSON.stringify(file, null, 2));
+		await atomicWriteText(this.#fs, this.#path(record.id), JSON.stringify(file, null, 2));
 	}
 	async #require(id) {
 		const record = await this.get(id);
@@ -5099,14 +5291,17 @@ var FsSessionStore = class {
 			let record;
 			try {
 				record = parseSessionFile(await this.#fs.readText(entry.path), entry.path);
-			} catch (e) {
-				console.warn(`Skipping unreadable session file "${entry.path}": ${e instanceof Error ? e.message : String(e)}`);
+			} catch {
 				skipped.push(baseName(entry.path));
 				continue;
 			}
 			if (record.archived === true && options.includeArchived !== true) continue;
 			metas.push(toMeta(record));
 		}
+		if (skipped.length > 0 && !this.#warnedDataLoss) {
+			this.#warnedDataLoss = true;
+			console.warn(`[webskill] ${skipped.length} session file(s) under ${this.#root} are unreadable (possible data loss from an interrupted write): ${skipped.join(", ")}`);
+		}
 		metas.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
 		return {
 			...takeTailPage(metas, options, "session"),
@@ -5170,6 +5365,18 @@ var FsSessionStore = class {
 			await this.#write(record);
 		});
 	}
+	async setModel(id, modelId) {
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			if (modelId === void 0) delete record.modelId;
+			else record.modelId = modelId;
+			await this.#write(record);
+		});
+	}
+	async getMeta(id) {
+		const record = await this.get(id);
+		return record === void 0 ? void 0 : toMeta(record);
+	}
 	async delete(id) {
 		await this.#serialize(id, async () => {
 			const path = this.#path(id);
@@ -5179,4 +5386,4 @@ var FsSessionStore = class {
 };
 
 //#endregion
-export { isNetworkAllowed as $, SerializingMemoryStore as A, bridgeError as B, ProgressiveRouter as C, toRecordDigests as Ct, RUN_SNAPSHOT_SCHEMA_VERSION as D, READ_SKILL_FILE_TOOL_NAME as E, validateUiSpecNode as Et, USER_PROFILE_PROMPT_HEADER as F, exportUserProfile as G, createScriptContext as H, USER_PROFILE_REFINE_PROMPT as I, extractTodoTraceEvents as J, extractChartSpec as K, WebSkillRuntime as L, USER_PROFILE_EXPORT_VERSION as M, USER_PROFILE_KEY as N, RUN_TRACE_SCHEMA_VERSION as O, USER_PROFILE_NO_INVENTION_RULE as P, fromVercelStreamPart as Q, appendBehaviorRecords as R, OpenAiCompatibleClient as S, toLlmToolSpec as St, READ_SKILL_FILE_TOOL as T, validateUiSpecEvent as Tt, createWebSkillApi as U, buildRenderResult as V, diffUserProfile as W, formatSkillScriptManifest as X, extractUiSpecEvents as Y, fromVercelResult as Z, FsRunTraceStore as _, sampleBehaviorRecords as _t, AgentLoop as a, networkUrlHost as at, GoogleGenAiClient as b, scriptToolName as bt, CapabilityApproval as c, normalizeToolError as ct, EMPTY_USER_PROFILE as d, readBehaviorRecords as dt, isUnsupportedRunSnapshot as et, EventBus as f, readProfileEntries as ft, FsRunSnapshotStore as g, resolveToolName as gt, FsMemoryStore as h, renderUserProfileContext as ht, ASK_USER_TOOL_NAME as i, networkPolicyLibSource as it, TraceRecorder as j, SESSION_SCHEMA_VERSION as k, DEFAULT_LOOP_LIMITS as l, parseBridgeRequest as lt, FsArtifactStore as m, refineUserProfile as mt, ASK_USER_INPUT_SCHEMA as n, mergeCatalogEntries as nt, AnthropicClient as o, normalizeErrorCode as ot, FS_SESSION_PAGE_SIZE as p, readUserProfile as pt, extractSkillCandidate as q, ASK_USER_TOOL as r, mergeProfileEntries as rt, BEHAVIOR_RECORDS_KEY as s, normalizeToolContent as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, listSkillScripts as tt, DEFAULT_USER_PROFILE_LIMITS as u, parseUserProfileExport as ut, FsSessionStore as v, schemaSourceLabel as vt, READ_SKILL_FILE_INPUT_SCHEMA as w, toVercelToolSpecs as wt, HookRunner as x, summarizeToolCalls as xt, FullDisclosureRouter as y, schemaToForm as yt, applyUserProfileImport as z };
+export { fromVercelStreamPart as $, SerializingMemoryStore as A, bridgeError as B, ProgressiveRouter as C, sealToolCallPairs as Ct, RUN_SNAPSHOT_SCHEMA_VERSION as D, toVercelToolSpecs as Dt, READ_SKILL_FILE_TOOL_NAME as E, toRecordDigests as Et, USER_PROFILE_PROMPT_HEADER as F, exportUserProfile as G, createScriptContext as H, USER_PROFILE_REFINE_PROMPT as I, extractTodoTraceEvents as J, extractChartSpec as K, WebSkillRuntime as L, USER_PROFILE_EXPORT_VERSION as M, USER_PROFILE_KEY as N, RUN_TRACE_SCHEMA_VERSION as O, validateUiSpecEvent as Ot, USER_PROFILE_NO_INVENTION_RULE as P, fromVercelResult as Q, appendBehaviorRecords as R, OpenAiCompatibleClient as S, scriptToolName as St, READ_SKILL_FILE_TOOL as T, toLlmToolSpec as Tt, createWebSkillApi as U, buildRenderResult as V, diffUserProfile as W, findUnpairedToolCalls as X, extractUiSpecEvents as Y, formatSkillScriptManifest as Z, FsRunTraceStore as _, renderUserProfileContext as _t, AgentLoop as a, mergeProfileEntries as at, GoogleGenAiClient as b, schemaSourceLabel as bt, CapabilityApproval as c, normalizeErrorCode as ct, EMPTY_USER_PROFILE as d, parseBridgeRequest as dt, interruptedToolResult as et, EventBus as f, parseUserProfileExport as ft, FsRunSnapshotStore as g, refineUserProfile as gt, FsMemoryStore as h, readUserProfile as ht, ASK_USER_TOOL_NAME as i, mergeCatalogEntries as it, TraceRecorder as j, SESSION_SCHEMA_VERSION as k, validateUiSpecNode as kt, DEFAULT_LOOP_LIMITS as l, normalizeToolContent as lt, FsArtifactStore as m, readProfileEntries as mt, ASK_USER_INPUT_SCHEMA as n, isUnsupportedRunSnapshot as nt, AnthropicClient as o, networkPolicyLibSource as ot, FS_SESSION_PAGE_SIZE as p, readBehaviorRecords as pt, extractSkillCandidate as q, ASK_USER_TOOL as r, listSkillScripts as rt, BEHAVIOR_RECORDS_KEY as s, networkUrlHost as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, isNetworkAllowed as tt, DEFAULT_USER_PROFILE_LIMITS as u, normalizeToolError as ut, FsSessionStore as v, resolveToolName as vt, READ_SKILL_FILE_INPUT_SCHEMA as w, summarizeToolCalls as wt, HookRunner as x, schemaToForm as xt, FullDisclosureRouter as y, sampleBehaviorRecords as yt, applyUserProfileImport as z };

package/dist/{eventTypes-DjIQpt8Y-Bj3vghj4.js → eventTypes-DbOpAECr-BjcjZVms.js}

@@ -1,4 +1,4 @@
-//#region ../governance/dist/eventTypes-DjIQpt8Y.js
+//#region ../governance/dist/eventTypes-DbOpAECr.js
 /**
 * 审计事件类型常量（FR-13.4）。
 *
@@ -17,13 +17,26 @@ const AUDIT_EVENT_TYPES = {
 	skillPolicyDenied: "skill.policy_denied",
 	skillUninstalled: "skill.uninstalled",
 	skillInstalled: "skill.installed",
+	skillExported: "skill.exported",
+	skillRenamed: "skill.renamed",
+	skillVersioned: "skill.versioned",
 	trustKeyAdded: "trust.key_added",
 	trustKeyRemoved: "trust.key_removed",
 	policyNetworkChanged: "policy.network_changed",
 	policyPrivacyChanged: "policy.privacy_changed",
+	policySecurityChanged: "policy.security_changed",
+	policySandboxChanged: "policy.sandbox_changed",
+	policyAgentCapabilitiesChanged: "policy.agent_capabilities_changed",
+	profileChanged: "profile.changed",
 	mcpEndpointChanged: "mcp.endpoint_changed",
 	mcpPolicyRelaxed: "mcp.policy_relaxed",
-	providerChanged: "provider.changed"
+	webmcpEnabled: "webmcp.enabled",
+	providerChanged: "provider.changed",
+	candidateCreated: "candidate.created",
+	candidateGenerated: "candidate.generated",
+	candidateSubmitted: "candidate.submitted",
+	candidateApproved: "candidate.approved",
+	candidateRejected: "candidate.rejected"
 };
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */
 const AUDIT_EVENT_TYPE_LIST = Object.values(AUDIT_EVENT_TYPES);

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { H as PageQuery, I as FileSystemProvider, V as Page, et as SkillCatalogEntry, f as LlmMessage, l as LlmClient, nt as SkillDocument, ot as SkillManagerPort, x as UiBridge } from "./types-CcxRLdJG-DCXyw1US.js";
-import { H as IntegrityVerdict, Nt as SkillIntegrityGuard, Pt as SkillOutcomeReporter, Rt as SkillStateGuard, bt as RuntimeRun, ln as WebSkillRuntime } from "./index-DkbABR43.js";
-import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-Bl-ElD45-CWPvGvoq.js";
+import { H as Page, L as FileSystemProvider, U as PageQuery, at as SkillDocument, f as LlmMessage, l as LlmClient, lt as SkillManagerPort, rt as SkillCatalogEntry, x as UiBridge } from "./types-B3n0cMZu-BDhheIhX.js";
+import { H as IntegrityVerdict, It as SkillIntegrityGuard, Lt as SkillOutcomeReporter, Vt as SkillStateGuard, bt as RuntimeRun, pn as WebSkillRuntime } from "./index-znZjobkr.js";
+import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-Bl-ElD45-dMJ8Ybhb.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -110,6 +110,14 @@ interface AuditChainVerification {
 interface AuditPage extends Page<AuditEvent> {
   chainBrokenAt?: number;
   chainReason?: string;
+  /**
+   * 解析失败的行。长度 > 0 即「读不动」，但已解析的记录仍在 `items` 里——
+   * 不给这个字段的话，坏行被吞掉后的返回值与「真的没有事件」完全一样（FR-18.3）。
+   */
+  malformed?: {
+    count: number;
+    firstLine: number;
+  };
 }
 /**
  * JSONL 追加式审计日志（<managedRoot>/.webskill/audit.jsonl）：
@@ -167,13 +175,26 @@ declare const AUDIT_EVENT_TYPES: {
   readonly skillPolicyDenied: "skill.policy_denied";
   readonly skillUninstalled: "skill.uninstalled";
   readonly skillInstalled: "skill.installed";
+  readonly skillExported: "skill.exported";
+  readonly skillRenamed: "skill.renamed";
+  readonly skillVersioned: "skill.versioned";
   readonly trustKeyAdded: "trust.key_added";
   readonly trustKeyRemoved: "trust.key_removed";
   readonly policyNetworkChanged: "policy.network_changed";
   readonly policyPrivacyChanged: "policy.privacy_changed";
+  readonly policySecurityChanged: "policy.security_changed";
+  readonly policySandboxChanged: "policy.sandbox_changed";
+  readonly policyAgentCapabilitiesChanged: "policy.agent_capabilities_changed";
+  readonly profileChanged: "profile.changed";
   readonly mcpEndpointChanged: "mcp.endpoint_changed";
   readonly mcpPolicyRelaxed: "mcp.policy_relaxed";
+  readonly webmcpEnabled: "webmcp.enabled";
   readonly providerChanged: "provider.changed";
+  readonly candidateCreated: "candidate.created";
+  readonly candidateGenerated: "candidate.generated";
+  readonly candidateSubmitted: "candidate.submitted";
+  readonly candidateApproved: "candidate.approved";
+  readonly candidateRejected: "candidate.rejected";
 };
 type AuditEventType = (typeof AUDIT_EVENT_TYPES)[keyof typeof AUDIT_EVENT_TYPES];
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */