@webskill/sdk 0.9.0 → 0.11.0

package/dist/{eventTypes-DbOpAECr-BjcjZVms.js → eventTypes-FllCrX-Z-DNDeHWoG.js}

@@ -1,4 +1,4 @@
-//#region ../governance/dist/eventTypes-DbOpAECr.js
+//#region ../governance/dist/eventTypes-FllCrX-Z.js
 /**
 * 审计事件类型常量（FR-13.4）。
 *
@@ -15,6 +15,7 @@ const AUDIT_EVENT_TYPES = {
 	skillRepairApplied: "skill.repair_applied",
 	skillQuarantined: "skill.quarantined",
 	skillPolicyDenied: "skill.policy_denied",
+	skillUserCaused: "skill.user_caused",
 	skillUninstalled: "skill.uninstalled",
 	skillInstalled: "skill.installed",
 	skillExported: "skill.exported",
@@ -36,7 +37,13 @@ const AUDIT_EVENT_TYPES = {
 	candidateGenerated: "candidate.generated",
 	candidateSubmitted: "candidate.submitted",
 	candidateApproved: "candidate.approved",
-	candidateRejected: "candidate.rejected"
+	candidateRejected: "candidate.rejected",
+	pagePerceived: "page.perceived",
+	pageAction: "page.action",
+	documentRead: "document.read",
+	documentSurfaceOpen: "document.surface.open",
+	/** 脚本按宿主声明的数据源取数（分册 16）；被拒也记，否则反复试探看不见 */
+	dataFetched: "data.fetch"
 };
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */
 const AUDIT_EVENT_TYPE_LIST = Object.values(AUDIT_EVENT_TYPES);

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { H as Page, L as FileSystemProvider, U as PageQuery, at as SkillDocument, f as LlmMessage, l as LlmClient, lt as SkillManagerPort, rt as SkillCatalogEntry, x as UiBridge } from "./types-B3n0cMZu-BDhheIhX.js";
-import { H as IntegrityVerdict, It as SkillIntegrityGuard, Lt as SkillOutcomeReporter, Vt as SkillStateGuard, bt as RuntimeRun, pn as WebSkillRuntime } from "./index-znZjobkr.js";
-import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-Bl-ElD45-dMJ8Ybhb.js";
+import { R as FileSystemProvider, S as UiBridge, U as Page, W as PageQuery, f as LlmMessage, it as SkillCatalogEntry, l as LlmClient, ot as SkillDocument, ut as SkillManagerPort } from "./types-C26b05fW-CdrRCRDb.js";
+import { At as RuntimeRun, En as WebSkillRuntime, J as IntegrityVerdict, Jt as SkillOutcomeReporter, Qt as SkillStateGuard, qt as SkillIntegrityGuard } from "./index-D3mONFHD.js";
+import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-D-qHk9ZE-BcmFLykd.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -108,6 +108,8 @@ interface AuditChainVerification {
 }
 /** 带断链报告的分页结果（`tolerateBrokenChain` 打开时才可能带上后两个字段） */
 interface AuditPage extends Page<AuditEvent> {
+  /** 筛选后的匹配总数（不分页截断）：页码分页需要它算总页数 */
+  total: number;
   chainBrokenAt?: number;
   chainReason?: string;
   /**
@@ -150,6 +152,13 @@ declare class FsAuditLog implements AuditLog {
    * 本页范围内的 hash 链必须自洽：逐条重算 hash 并核对与前一行的 `prevHash` 链接，
    * 任一处对不上以 `GOVERNANCE_FAILED` 报错。范围之外的断链不在本方法职责内——
    * 那是 `verifyChain()` 的事（全量 O(N) 校验不该压在每次翻页上）。
+   *
+   * 边界语义（0.10.0 复核后固化）：
+   * - `cursor` 是「匹配序列的结束下标」而非稳定指针：翻页间隔内有新事件追加时，
+   *   页间可能漂移一条，属追加型数据的固有边界，调用方不要按「稳定快照」实现导出；
+   * - `tolerateBrokenChain` 打开且本页检测到断链时，`total` 收缩到断点前
+   *   （断点及其之后的记录不再可翻出，页码不会指向空页）；断点在更后面的页时
+   *   本页的 `total` 仍按全量匹配数返回。
    */
   query(filter?: AuditQueryFilter & PageQuery): Promise<AuditPage>;
   /** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接。**只读**，绝不改写历史 */
@@ -173,6 +182,7 @@ declare const AUDIT_EVENT_TYPES: {
   readonly skillRepairApplied: "skill.repair_applied";
   readonly skillQuarantined: "skill.quarantined";
   readonly skillPolicyDenied: "skill.policy_denied";
+  readonly skillUserCaused: "skill.user_caused";
   readonly skillUninstalled: "skill.uninstalled";
   readonly skillInstalled: "skill.installed";
   readonly skillExported: "skill.exported";
@@ -195,6 +205,12 @@ declare const AUDIT_EVENT_TYPES: {
   readonly candidateSubmitted: "candidate.submitted";
   readonly candidateApproved: "candidate.approved";
   readonly candidateRejected: "candidate.rejected";
+  readonly pagePerceived: "page.perceived";
+  readonly pageAction: "page.action";
+  readonly documentRead: "document.read";
+  readonly documentSurfaceOpen: "document.surface.open";
+  /** 脚本按宿主声明的数据源取数（分册 16）；被拒也记，否则反复试探看不见 */
+  readonly dataFetched: "data.fetch";
 };
 type AuditEventType = (typeof AUDIT_EVENT_TYPES)[keyof typeof AUDIT_EVENT_TYPES];
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */
@@ -245,9 +261,19 @@ declare class RepairPlanner {
 /**
  * 用户策略主动拒绝的错误码（FR-12.4）：这是配置生效的证据，不是技能有问题，不计入隔离阈值。
  *
- * 集中在这一份常量里而不散在条件判断里，是为了让「哪些码不计数」只有一个事实源。
+ * 集中在这一份常量里而不散在条件判断里，是为了让「哪些策略拒绝码不计数」只有一个事实源。
+ * （用户自身原因的豁免码见 `USER_CAUSED_CODES`，两类语义不同，不并在一起。）
  */
 declare const POLICY_DENIAL_CODES: ReadonlySet<string>;
+/**
+ * 用户自身原因的错误码（0.10.0 UI-UX5 #49-2）：交互等待超时（用户没处理）与
+ * 用户自行取消（ask_user / 交互卡取消）都不是技能的错，不计入隔离阈值。
+ *
+ * loop 里这两类结局走 RunTerminated 旁路、本来到不了上报口；这里再挡一道，
+ * 是因为宿主执行器也可能把「等用户时被取消/超时」包成 ok:false 的失败结果交回来——
+ * 「算不算技能的错」的判定口径必须在上报侧只有这一处。
+ */
+declare const USER_CAUSED_CODES: ReadonlySet<string>;
 /** 自动隔离的原因判别式（FR-12.6）；人工隔离仍写自由文本 */
 declare const QUARANTINE_REASONS: {
   readonly integrity: "integrity";
@@ -274,7 +300,7 @@ declare class SkillStatePolicy {
     detail?: string;
   }): Promise<void>;
   /**
-   * 失败计数；达阈值（默认 3）→ quarantined + 审计。
+   * 失败计数；达阈值（默认 5）→ quarantined + 审计。
    *
    * 计数是**连续**而非累计（0.7.0 FR-12.5）：一次成功执行经 `clearFailures` 归零，
    * `setState(name, 'active')` 同样清零。
@@ -320,6 +346,7 @@ declare class SkillStatePolicy {
   toSkillOutcomeReporter(input?: {
     actor?: string;
     policyDenialCodes?: ReadonlySet<string>;
+    userCausedCodes?: ReadonlySet<string>;
   }): SkillOutcomeReporter;
   /** disabled → SKILL_DISABLED；quarantined → SKILL_QUARANTINED */
   assertExecutable(skillName: string): Promise<void>;
@@ -493,4 +520,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidatePage, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, type SkillVersionPage, SkillVersionStore, type SourceDocument, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/governance.js

@@ -1,6 +1,6 @@
 import { M as messageOf, _ as assertSafePathSegment, h as WebSkillError, k as isValidSkillName, v as atomicWriteText } from "./dist-Bev6i6Ip.js";
 import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-DbOpAECr-BjcjZVms.js";
+import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-FllCrX-Z-DNDeHWoG.js";
 
 //#region ../governance/dist/index.js
 const invalid = (message, details) => {
@@ -105,6 +105,9 @@ function validateCandidate(candidate) {
 * 治理侧各列表共用的游标切片，形状与会话消息（C1）完全一致：
 * 无游标给**最新**一页，`nextCursor` 指向更早的历史，页内按时间升序。
 *
+* 返回值附带筛选后匹配总数 `total`（0.10.0 UI-UX5 #40.12）：页码分页的总页数依据，
+* 与 `AuditPage.total` 同一语义（`all` 是已过滤集合，length 即匹配总数）。
+*
 * 缺省页长由各 store 传入——缺省属于实现，不属于调用方。
 */
 function takeTailPage(all, options, defaultLimit, what) {
@@ -118,6 +121,7 @@ function takeTailPage(all, options, defaultLimit, what) {
 	const start = Math.max(0, end - limit);
 	return {
 		items: all.slice(start, end),
+		total: all.length,
 		...start > 0 ? { nextCursor: String(start) } : {}
 	};
 }
@@ -150,7 +154,10 @@ var CandidateStore = class {
 	*/
 	async list(options = {}) {
 		const dir = dirOf$1(this.#root);
-		if (!await this.#fs.exists(dir)) return { items: [] };
+		if (!await this.#fs.exists(dir)) return {
+			items: [],
+			total: 0
+		};
 		const out = [];
 		for (const entry of await this.#fs.list(dir)) {
 			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
@@ -435,10 +442,20 @@ var FsAuditLog = class {
 	* 本页范围内的 hash 链必须自洽：逐条重算 hash 并核对与前一行的 `prevHash` 链接，
 	* 任一处对不上以 `GOVERNANCE_FAILED` 报错。范围之外的断链不在本方法职责内——
 	* 那是 `verifyChain()` 的事（全量 O(N) 校验不该压在每次翻页上）。
+	*
+	* 边界语义（0.10.0 复核后固化）：
+	* - `cursor` 是「匹配序列的结束下标」而非稳定指针：翻页间隔内有新事件追加时，
+	*   页间可能漂移一条，属追加型数据的固有边界，调用方不要按「稳定快照」实现导出；
+	* - `tolerateBrokenChain` 打开且本页检测到断链时，`total` 收缩到断点前
+	*   （断点及其之后的记录不再可翻出，页码不会指向空页）；断点在更后面的页时
+	*   本页的 `total` 仍按全量匹配数返回。
 	*/
 	async query(filter = {}) {
 		const path = fileOf$1(this.#root);
-		if (!await this.#fs.exists(path)) return { items: [] };
+		if (!await this.#fs.exists(path)) return {
+			items: [],
+			total: 0
+		};
 		const raw = await this.#fs.readText(path);
 		/** 按文件行序保留（含解析失败的洞）：链校验必须在文件行序上做，不能在筛选结果上做 */
 		const records = [];
@@ -495,6 +512,7 @@ var FsAuditLog = class {
 		}
 		return {
 			items,
+			total: broken !== void 0 ? start + items.length : matched.length,
 			...start > 0 ? { nextCursor: String(start) } : {},
 			...broken !== void 0 ? {
 				chainBrokenAt: broken.at,
@@ -734,13 +752,23 @@ const fileOf = (root) => `${root}/.webskill/states.json`;
 /**
 * 用户策略主动拒绝的错误码（FR-12.4）：这是配置生效的证据，不是技能有问题，不计入隔离阈值。
 *
-* 集中在这一份常量里而不散在条件判断里，是为了让「哪些码不计数」只有一个事实源。
+* 集中在这一份常量里而不散在条件判断里，是为了让「哪些策略拒绝码不计数」只有一个事实源。
+* （用户自身原因的豁免码见 `USER_CAUSED_CODES`，两类语义不同，不并在一起。）
 */
 const POLICY_DENIAL_CODES = /* @__PURE__ */ new Set([
 	"NETWORK_BLOCKED",
 	"TOOL_NOT_ALLOWED",
 	"FS_PERMISSION_DENIED"
 ]);
+/**
+* 用户自身原因的错误码（0.10.0 UI-UX5 #49-2）：交互等待超时（用户没处理）与
+* 用户自行取消（ask_user / 交互卡取消）都不是技能的错，不计入隔离阈值。
+*
+* loop 里这两类结局走 RunTerminated 旁路、本来到不了上报口；这里再挡一道，
+* 是因为宿主执行器也可能把「等用户时被取消/超时」包成 ok:false 的失败结果交回来——
+* 「算不算技能的错」的判定口径必须在上报侧只有这一处。
+*/
+const USER_CAUSED_CODES = /* @__PURE__ */ new Set(["RUN_INTERACTION_TIMEOUT", "RUN_CANCELLED"]);
 /** 自动隔离的原因判别式（FR-12.6）；人工隔离仍写自由文本 */
 const QUARANTINE_REASONS = {
 	integrity: "integrity",
@@ -763,7 +791,7 @@ var SkillStatePolicy = class {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
 		this.#audit = deps.audit;
-		this.#failureThreshold = deps.failureThreshold ?? 3;
+		this.#failureThreshold = deps.failureThreshold ?? 5;
 	}
 	async #load() {
 		const path = fileOf(this.#root);
@@ -819,7 +847,7 @@ var SkillStatePolicy = class {
 		});
 	}
 	/**
-	* 失败计数；达阈值（默认 3）→ quarantined + 审计。
+	* 失败计数；达阈值（默认 5）→ quarantined + 审计。
 	*
 	* 计数是**连续**而非累计（0.7.0 FR-12.5）：一次成功执行经 `clearFailures` 归零，
 	* `setState(name, 'active')` 同样清零。
@@ -921,9 +949,19 @@ var SkillStatePolicy = class {
 	*/
 	toSkillOutcomeReporter(input = {}) {
 		const denied = input.policyDenialCodes ?? POLICY_DENIAL_CODES;
+		const userCaused = input.userCausedCodes ?? USER_CAUSED_CODES;
 		const actor = input.actor !== void 0 ? { actor: input.actor } : {};
 		return {
 			onSkillFailed: async (report) => {
+				if (userCaused.has(report.code)) {
+					await this.#audit?.append({
+						type: AUDIT_EVENT_TYPES.skillUserCaused,
+						target: report.skillName,
+						...actor,
+						data: { code: report.code }
+					});
+					return;
+				}
 				if (denied.has(report.code)) {
 					await this.#audit?.append({
 						type: AUDIT_EVENT_TYPES.skillPolicyDenied,
@@ -1231,4 +1269,4 @@ function createMissHook(deps) {
 }
 
 //#endregion
-export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, CANDIDATE_PAGE_SIZE, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, CANDIDATE_PAGE_SIZE, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };