@world-engines/scenario-review-snapshot 0.1.4 → 1.0.0

package/dist/artifact-compiler-witness.d.ts

@@ -0,0 +1,21 @@
+import { type CompileTargetProfile } from "@world-engines/tmw/compile-target-profile";
+import { type NeutralSourceCompilerReceiptCore } from "@world-engines/tmw/neutral-source-compiler";
+export interface ArtifactCompilerWitnessBlob {
+    readonly bytes: Uint8Array;
+    readonly sha256: string;
+}
+export interface ArtifactCompilerWitnessVerificationInput {
+    readonly scenario_id: string;
+    readonly source_manifest_sha256: string;
+    readonly target_profile: ArtifactCompilerWitnessBlob;
+    readonly compiler_receipt: ArtifactCompilerWitnessBlob;
+}
+export interface VerifiedArtifactCompilerWitness {
+    readonly target_profile: CompileTargetProfile;
+    readonly compiler_receipt: NeutralSourceCompilerReceiptCore;
+}
+/**
+ * 验证 ArtifactV5 中两份 compiler witness 的共同语义，而不信任生产者
+ * 曾经走过哪个 compile path。三个 Player reader 与 bundle parser 共用此门。
+ */
+export declare function verifyArtifactCompilerWitness(input: ArtifactCompilerWitnessVerificationInput): VerifiedArtifactCompilerWitness;

package/dist/artifact-compiler-witness.js

@@ -0,0 +1,75 @@
+import { canonicalCompileTargetProfileBytes, parseCompileTargetProfile, } from "@world-engines/tmw/compile-target-profile";
+import { canonicalNeutralSourceCompilerReceiptCoreBytes, parseNeutralSourceCompilerReceiptCore, } from "@world-engines/tmw/neutral-source-compiler";
+import { sha256Hex } from "./canonical.js";
+const strictDecoder = new TextDecoder("utf-8", { fatal: true });
+const SHA256_PATTERN = /^[0-9a-f]{64}$/u;
+function bytesEqual(left, right) {
+    if (left.byteLength !== right.byteLength)
+        return false;
+    let difference = 0;
+    for (let index = 0; index < left.byteLength; index += 1) {
+        difference |= (left[index] ?? 0) ^ (right[index] ?? 0);
+    }
+    return difference === 0;
+}
+function parseJson(bytes, kind) {
+    try {
+        return JSON.parse(strictDecoder.decode(bytes));
+    }
+    catch (cause) {
+        throw new Error(`artifact_compiler_witness_json_invalid:${kind}`, { cause });
+    }
+}
+function requireBlobIdentity(blob, kind) {
+    if (!(blob.bytes instanceof Uint8Array)
+        || !SHA256_PATTERN.test(blob.sha256)
+        || sha256Hex(blob.bytes) !== blob.sha256) {
+        throw new Error(`artifact_compiler_witness_identity_invalid:${kind}`);
+    }
+}
+/**
+ * 验证 ArtifactV5 中两份 compiler witness 的共同语义，而不信任生产者
+ * 曾经走过哪个 compile path。三个 Player reader 与 bundle parser 共用此门。
+ */
+export function verifyArtifactCompilerWitness(input) {
+    if (input.scenario_id.length === 0
+        || input.scenario_id !== input.scenario_id.trim().normalize("NFC")
+        || !SHA256_PATTERN.test(input.source_manifest_sha256)) {
+        throw new Error("artifact_compiler_witness_scope_invalid");
+    }
+    requireBlobIdentity(input.target_profile, "compile_target_profile");
+    requireBlobIdentity(input.compiler_receipt, "compiler_receipt");
+    const targetProfile = parseCompileTargetProfile(parseJson(input.target_profile.bytes, "compile_target_profile"));
+    if (!bytesEqual(input.target_profile.bytes, canonicalCompileTargetProfileBytes(targetProfile))) {
+        throw new Error("artifact_compiler_witness_target_profile_noncanonical");
+    }
+    const compilerReceipt = parseNeutralSourceCompilerReceiptCore(parseJson(input.compiler_receipt.bytes, "compiler_receipt"));
+    if (!bytesEqual(input.compiler_receipt.bytes, canonicalNeutralSourceCompilerReceiptCoreBytes(compilerReceipt))) {
+        throw new Error("artifact_compiler_witness_compiler_receipt_noncanonical");
+    }
+    if (compilerReceipt.scenario_id !== input.scenario_id) {
+        throw new Error("artifact_compiler_witness_scenario_mismatch");
+    }
+    if (compilerReceipt.source_manifest_sha256 !== input.source_manifest_sha256) {
+        throw new Error("artifact_compiler_witness_source_manifest_mismatch");
+    }
+    if (compilerReceipt.compiler_release !== targetProfile.compiler_release) {
+        throw new Error("artifact_compiler_witness_compiler_release_mismatch");
+    }
+    if (compilerReceipt.target_profile_sha256 !== input.target_profile.sha256) {
+        throw new Error("artifact_compiler_witness_target_profile_digest_mismatch");
+    }
+    const receiptVersions = new Map(compilerReceipt.stages.map((stage) => [stage.stage_id, stage.stage_version]));
+    if (receiptVersions.size !== targetProfile.stage_versions.length
+        || compilerReceipt.stages.length !== targetProfile.stage_versions.length
+        || targetProfile.stage_versions.some((stage) => receiptVersions.get(stage.stage_id) !== stage.stage_version)) {
+        throw new Error("artifact_compiler_witness_stage_set_mismatch");
+    }
+    if (compilerReceipt.stages.some((stage) => stage.dependency_outputs.some((dependency) => !receiptVersions.has(dependency.stage_id)))) {
+        throw new Error("artifact_compiler_witness_stage_dependency_unknown");
+    }
+    return Object.freeze({
+        target_profile: targetProfile,
+        compiler_receipt: compilerReceipt,
+    });
+}

package/dist/artifact-digest.d.ts

@@ -1,10 +1,18 @@
 import type { JsonValue } from "./types.js";
-import { type ArtifactV5, type FrozenPublishInput, type FrozenArtifactBundle, type FrozenRuntimeIdentity, type LegacyArtifactV5Package2Read, type PublishedArtifactHead, type PublishedArtifactHeadCore } from "./artifact.js";
+import { type ArtifactV5, type BinaryIdentity, type FrozenPublishInput, type FrozenArtifactBundle, type FrozenViewPublicationCapture, type FrozenRuntimeIdentity, type LegacyArtifactV5Package2Read, type PublishedArtifactHead, type PublishedArtifactHeadCore } from "./artifact.js";
 export declare function canonicalBytes(value: JsonValue): Uint8Array;
 export declare function canonicalSha256(value: JsonValue): string;
 export declare function buildArtifactV5(input: FrozenPublishInput): ArtifactV5;
 export declare function buildFrozenArtifactBundle(input: FrozenPublishInput): FrozenArtifactBundle;
 export declare function parseFrozenArtifactBundle(value: unknown): FrozenArtifactBundle;
+/**
+ * 解码后 submit、恢复 ledger 与 bundle parser 共用的唯一 HTML capture 校验器。
+ * 未携带旧字段只兼容两端均为空的历史 bundle；非空 manifest 必须 fail closed。
+ */
+export declare function parseFrozenViewPublications(value: unknown, views: Readonly<{
+    publish_mobile: BinaryIdentity;
+    publish_pc: BinaryIdentity;
+}>): readonly FrozenViewPublicationCapture[];
 export declare function canonicalArtifactV5Bytes(artifact: ArtifactV5): Uint8Array;
 export declare function artifactV5ManifestSha256(artifact: ArtifactV5): string;
 export declare function parseArtifactV5(value: unknown): ArtifactV5;

package/dist/artifact-digest.js

@@ -2,6 +2,7 @@ import { canonicalJson, compareUtf8, sha256Hex, toJsonValue } from "./canonical.
 import { parsePublishedDeviceViewReceipt, assertDeviceViewsMatchArtifact } from "./device-view-receipt.js";
 import { parseViewInteractionManifestV3, } from "@world-engines/tmw/view-interaction-manifest-v3";
 import { parseMusicCandidateSourceV3, } from "@world-engines/tmw/music-candidate-set";
+import { verifyArtifactCompilerWitness } from "./artifact-compiler-witness.js";
 import { ARTIFACT_COMPILER_WITNESS_OBJECTS, ARTIFACT_COMPILER_WITNESS_PATHS, ARTIFACT_COMPILER_WITNESS_RESERVED_PREFIX, ARTIFACT_MANIFEST_VERSION_V5, ARTIFACT_PACKAGE_FORMAT_VERSION_V5, CAPTURED_REVISION_SCHEMA_VERSION, FROZEN_PUBLISH_INPUT_SCHEMA_VERSION, FROZEN_ARTIFACT_OBJECT_COUNT, FROZEN_DATABASE_DELIVERY_CODEC, FROZEN_DATABASE_DELIVERY_MEDIA_TYPE, FROZEN_DATABASE_DELIVERY_MAGIC, FROZEN_DATABASE_DELIVERY_RELATIVE_PATH, EARLIER_LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, PUBLISHED_ARTIFACT_HEAD_SCHEMA_VERSION, } from "./artifact.js";
 const encoder = new TextEncoder();
 const strictDecoder = new TextDecoder("utf-8", { fatal: true });
@@ -111,11 +112,18 @@ export function buildFrozenArtifactBundle(input) {
     ].sort((left, right) => compareUtf8(left.relative_path, right.relative_path));
     assertStrictlySortedUnique(objects.map((object) => object.relative_path), "frozen_artifact_object_path_duplicate");
     assertBundleMatchesArtifact(artifact, objects);
-    return parseFrozenArtifactBundle({ artifact, objects });
+    const viewPublications = parseFrozenViewPublications([
+        ...(normalized.view_publish_mobile_bytes.byteLength === 0 ? [] : [frozenViewPublication("mobile", normalized.view_publish_mobile_bytes)]),
+        ...(normalized.view_publish_pc_bytes.byteLength === 0 ? [] : [frozenViewPublication("pc", normalized.view_publish_pc_bytes)]),
+    ], artifact.views);
+    return parseFrozenArtifactBundle({ artifact, objects, view_publications: viewPublications });
 }
 export function parseFrozenArtifactBundle(value) {
     const root = plainObject(value, "frozen_artifact_bundle_object_required");
-    exactKeys(root, ["artifact", "objects"], "frozen_artifact_bundle");
+    const bundleKeys = Object.hasOwn(root, "view_publications")
+        ? ["artifact", "objects", "view_publications"]
+        : ["artifact", "objects"];
+    exactKeys(root, bundleKeys, "frozen_artifact_bundle");
     const artifact = parseArtifactV5(root.artifact);
     if (!Array.isArray(root.objects))
         throw new Error("frozen_artifact_bundle_objects_invalid");
@@ -123,7 +131,102 @@ export function parseFrozenArtifactBundle(value) {
     assertStrictlySortedUnique(objects.map((object) => object.relative_path), "frozen_artifact_object_order_invalid");
     assertBundleMatchesArtifact(artifact, objects);
     assertCanonicalBundlePayloads(artifact, objects);
-    return Object.freeze({ artifact, objects: Object.freeze(objects) });
+    const viewPublications = parseFrozenViewPublications(root.view_publications, artifact.views);
+    return Object.freeze({
+        artifact,
+        objects: Object.freeze(objects),
+        view_publications: viewPublications,
+    });
+}
+const FROZEN_VIEW_PUBLICATION_SPECS = Object.freeze({
+    mobile: Object.freeze({ relative_path: "view-publish-mobile.html" }),
+    pc: Object.freeze({ relative_path: "view-publish-pc.html" }),
+});
+const FROZEN_VIEW_PUBLICATION_MEDIA_TYPE = "text/html; charset=utf-8";
+function frozenViewPublication(device, value) {
+    const bytes = requireBytes(value, `frozen_view_publication_${device}_bytes_invalid`);
+    return Object.freeze({
+        device,
+        relative_path: FROZEN_VIEW_PUBLICATION_SPECS[device].relative_path,
+        media_type: FROZEN_VIEW_PUBLICATION_MEDIA_TYPE,
+        ...binaryIdentity(bytes),
+        bytes,
+    });
+}
+/**
+ * 解码后 submit、恢复 ledger 与 bundle parser 共用的唯一 HTML capture 校验器。
+ * 未携带旧字段只兼容两端均为空的历史 bundle；非空 manifest 必须 fail closed。
+ */
+export function parseFrozenViewPublications(value, views) {
+    const expected = Object.freeze({
+        mobile: parseBinaryIdentity(views.publish_mobile),
+        pc: parseBinaryIdentity(views.publish_pc),
+    });
+    const emptySha256 = sha256Hex(new Uint8Array());
+    for (const device of ["mobile", "pc"]) {
+        if (expected[device].size_bytes === 0 && expected[device].sha256 !== emptySha256) {
+            throw new Error(`frozen_view_publication_empty_identity_mismatch:${device}`);
+        }
+    }
+    if (value === undefined) {
+        if (expected.mobile.size_bytes !== 0 || expected.pc.size_bytes !== 0) {
+            throw new Error("frozen_view_publications_missing");
+        }
+        return Object.freeze([]);
+    }
+    if (!Array.isArray(value))
+        throw new Error("frozen_view_publications_invalid");
+    const captures = [];
+    const seen = new Set();
+    for (const entry of value) {
+        const object = plainObject(entry, "frozen_view_publication_invalid");
+        exactKeys(object, [
+            "device", "relative_path", "media_type", "encoding", "size_bytes", "sha256", "bytes",
+        ], "frozen_view_publication");
+        if (object.device !== "mobile" && object.device !== "pc") {
+            throw new Error("frozen_view_publication_device_invalid");
+        }
+        const device = object.device;
+        if (seen.has(device))
+            throw new Error(`frozen_view_publication_device_duplicate:${device}`);
+        seen.add(device);
+        if (object.relative_path !== FROZEN_VIEW_PUBLICATION_SPECS[device].relative_path) {
+            throw new Error(`frozen_view_publication_path_mismatch:${device}`);
+        }
+        if (object.media_type !== FROZEN_VIEW_PUBLICATION_MEDIA_TYPE) {
+            throw new Error(`frozen_view_publication_media_type_mismatch:${device}`);
+        }
+        if (object.encoding !== "bytes") {
+            throw new Error(`frozen_view_publication_encoding_invalid:${device}`);
+        }
+        const capture = frozenViewPublication(device, requireBytes(object.bytes, `frozen_view_publication_${device}_bytes_invalid`));
+        try {
+            strictDecoder.decode(capture.bytes);
+        }
+        catch {
+            throw new Error(`frozen_view_publication_utf8_invalid:${device}`);
+        }
+        if (object.size_bytes !== capture.size_bytes || object.sha256 !== capture.sha256) {
+            throw new Error(`frozen_view_publication_readback_mismatch:${device}`);
+        }
+        const identity = expected[device];
+        if (capture.size_bytes !== identity.size_bytes || capture.sha256 !== identity.sha256) {
+            throw new Error(`frozen_view_publication_artifact_mismatch:${device}`);
+        }
+        if (capture.size_bytes === 0) {
+            throw new Error(`frozen_view_publication_empty_must_be_omitted:${device}`);
+        }
+        captures.push(capture);
+    }
+    for (const device of ["mobile", "pc"]) {
+        const hasCapture = seen.has(device);
+        const isRequired = expected[device].size_bytes > 0;
+        if (hasCapture !== isRequired) {
+            throw new Error(`frozen_view_publication_capture_count_mismatch:${device}`);
+        }
+    }
+    captures.sort((left, right) => left.device === right.device ? 0 : left.device === "mobile" ? -1 : 1);
+    return Object.freeze(captures);
 }
 function canonicalArtifactV5CoreBytes(core) {
     if (core.package_format_version === LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5) {
@@ -805,8 +908,17 @@ function assertCanonicalBundlePayloads(artifact, objects) {
     const viewInteractionMobile = assertCanonicalJsonObject(one("view_interaction_mobile"));
     const viewInteractionPc = assertCanonicalJsonObject(one("view_interaction_pc"));
     const musicCandidateSource = assertCanonicalJsonObject(one("music_candidate_source"));
-    assertCanonicalJsonObject(one("compile_target_profile"));
-    assertCanonicalJsonObject(one("compiler_receipt"));
+    const sourceManifest = one("source_manifest");
+    const targetProfile = one("compile_target_profile");
+    const compilerReceipt = one("compiler_receipt");
+    assertCanonicalJsonObject(targetProfile);
+    assertCanonicalJsonObject(compilerReceipt);
+    verifyArtifactCompilerWitness({
+        scenario_id: artifact.scenario_id,
+        source_manifest_sha256: sourceManifest.sha256,
+        target_profile: { bytes: targetProfile.bytes, sha256: targetProfile.sha256 },
+        compiler_receipt: { bytes: compilerReceipt.bytes, sha256: compilerReceipt.sha256 },
+    });
     normalizeViewInteractionManifest(viewInteractionMobile, artifact.epoch, artifact.runtime_contract_hash, artifact.views.publish_mobile.sha256, "mobile");
     normalizeViewInteractionManifest(viewInteractionPc, artifact.epoch, artifact.runtime_contract_hash, artifact.views.publish_pc.sha256, "pc");
     if (parseMusicCandidateSourceV3(musicCandidateSource) === null) {

package/dist/artifact.d.ts

@@ -215,6 +215,17 @@ export interface FrozenArtifactObjectIdentity extends BinaryIdentity {
 export interface FrozenArtifactObject extends FrozenArtifactObjectIdentity {
     readonly bytes: Uint8Array;
 }
+export type FrozenViewPublicationDevice = "mobile" | "pc";
+/**
+ * 审核提交随 Artifact 一次性携带的发布 HTML 原始字节。该对象不参与
+ * ArtifactV5 digest；其身份已由 `artifact.views.publish_*` 固定。
+ */
+export interface FrozenViewPublicationCapture extends BinaryIdentity {
+    readonly device: FrozenViewPublicationDevice;
+    readonly relative_path: "view-publish-mobile.html" | "view-publish-pc.html";
+    readonly media_type: "text/html; charset=utf-8";
+    readonly bytes: Uint8Array;
+}
 export interface ArtifactCompilerWitnessIdentity {
     readonly source_manifest: FrozenArtifactObjectIdentity & {
         readonly kind: "source_manifest";
@@ -236,6 +247,7 @@ export interface ArtifactCompilerWitnessIdentity {
 export interface FrozenArtifactBundle {
     readonly artifact: ArtifactV5;
     readonly objects: readonly FrozenArtifactObject[];
+    readonly view_publications: readonly FrozenViewPublicationCapture[];
 }
 export interface PublishedArtifactHeadCore {
     readonly head_schema_version: typeof PUBLISHED_ARTIFACT_HEAD_SCHEMA_VERSION;

package/dist/index.d.ts

@@ -1,9 +1,11 @@
 export { appendJsonPointer, canonicalJson, compareUtf8, escapeJsonPointerToken, parseJsonPointer, sha256Hex, toJsonValue, unescapeJsonPointerToken, utf8ByteLength, } from "./canonical.js";
 export { buildScenarioReviewSnapshot, DEFAULT_SCENARIO_REVIEW_SNAPSHOT_LIMITS, reconstructRecordPayload, stableRelationId, } from "./snapshot.js";
-export { ARTIFACT_MANIFEST_VERSION_V5, ARTIFACT_PACKAGE_FORMAT_VERSION_V5, LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, EARLIER_LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, CAPTURED_REVISION_SCHEMA_VERSION, FROZEN_PUBLISH_INPUT_SCHEMA_VERSION, FROZEN_DATABASE_DELIVERY_CODEC, FROZEN_DATABASE_DELIVERY_MEDIA_TYPE, FROZEN_DATABASE_DELIVERY_MAGIC, FROZEN_DATABASE_DELIVERY_RELATIVE_PATH, PUBLISHED_ARTIFACT_HEAD_SCHEMA_VERSION, } from "./artifact.js";
-export { artifactV5ManifestSha256, buildArtifactV5, buildFrozenArtifactBundle, buildPublishedArtifactHead, canonicalArtifactV5Bytes, canonicalBytes, canonicalPublishedArtifactHeadCoreBytes, canonicalSha256, digestPublishedArtifactHeadCore, parseArtifactV5, parseFrozenArtifactBundle, parseLegacyArtifactV5Package2, parsePublishedArtifactHead, } from "./artifact-digest.js";
+export { ARTIFACT_MANIFEST_VERSION_V5, ARTIFACT_COMPILER_WITNESS_OBJECTS, ARTIFACT_PACKAGE_FORMAT_VERSION_V5, LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, EARLIER_LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, CAPTURED_REVISION_SCHEMA_VERSION, FROZEN_PUBLISH_INPUT_SCHEMA_VERSION, FROZEN_DATABASE_DELIVERY_CODEC, FROZEN_DATABASE_DELIVERY_MEDIA_TYPE, FROZEN_DATABASE_DELIVERY_MAGIC, FROZEN_DATABASE_DELIVERY_RELATIVE_PATH, PUBLISHED_ARTIFACT_HEAD_SCHEMA_VERSION, } from "./artifact.js";
+export { artifactV5ManifestSha256, buildArtifactV5, buildFrozenArtifactBundle, buildPublishedArtifactHead, canonicalArtifactV5Bytes, canonicalBytes, canonicalPublishedArtifactHeadCoreBytes, canonicalSha256, digestPublishedArtifactHeadCore, parseArtifactV5, parseFrozenArtifactBundle, parseFrozenViewPublications, parseLegacyArtifactV5Package2, parsePublishedArtifactHead, } from "./artifact-digest.js";
+export { verifyArtifactCompilerWitness } from "./artifact-compiler-witness.js";
+export type { ArtifactCompilerWitnessBlob, ArtifactCompilerWitnessVerificationInput, VerifiedArtifactCompilerWitness, } from "./artifact-compiler-witness.js";
 export type { CoverageManifest, CoverageManifestCore, CoverageRecordEntry, CoverageSectionEntry, JsonPrimitive, JsonValue, ReviewFragmentValueKind, ReviewRecordKind, ReviewSection, ScenarioReviewChunk, ScenarioReviewFragment, ScenarioReviewRecord, ScenarioReviewSnapshot, ScenarioReviewSnapshotCore, ScenarioReviewSnapshotInput, ScenarioReviewSnapshotLimits, ScenarioReviewSupplementalRecordInput, } from "./types.js";
-export type { ArtifactV5, ArtifactV5Core, BinaryIdentity, CanonicalJsonIdentity, CapturedRevision, FrozenPublishInput, FrozenDatabaseDelivery, FrozenDatabaseDeliveryIdentity, FrozenArtifactBundle, FrozenArtifactObject, FrozenArtifactObjectIdentity, FrozenArtifactObjectKind, FrozenPublishResource, FrozenResourceIdentity, FrozenRuntimeIdentity, PublishedViewBuildReceipt, PublishedViewBuildHtmlReceipt, FrozenSystemPrompt, LegacyArtifactV5Package2Read, PublishedArtifactHead, PublishedArtifactHeadCore, Sha256Hex, } from "./artifact.js";
+export type { ArtifactV5, ArtifactV5Core, BinaryIdentity, CanonicalJsonIdentity, CapturedRevision, FrozenPublishInput, FrozenDatabaseDelivery, FrozenDatabaseDeliveryIdentity, FrozenArtifactBundle, FrozenArtifactObject, FrozenArtifactObjectIdentity, FrozenArtifactObjectKind, FrozenViewPublicationCapture, FrozenViewPublicationDevice, FrozenPublishResource, FrozenResourceIdentity, FrozenRuntimeIdentity, PublishedViewBuildReceipt, PublishedViewBuildHtmlReceipt, FrozenSystemPrompt, LegacyArtifactV5Package2Read, PublishedArtifactHead, PublishedArtifactHeadCore, Sha256Hex, } from "./artifact.js";
 export type { ArtifactObjectReadbackReceipt, FinalizeApprovedArtifactInput, FinalizeApprovedArtifactResult, PublishOperationKey, PublishAttemptState, PublishAttemptCoordinator, PublishedArtifactObjectReader, ResolvePublishedArtifactInput, ResolvedPublishedArtifact, SubmitFrozenArtifactInput, SubmittedPublishAttempt, WriteOnceArtifactObject, WriteOnceArtifactStore, WriteOncePutResult, } from "./publish-attempt.js";
 export { buildFrozenArtifactObjectKey, publishOperationKey, } from "./publish-attempt.js";
 export * from "./neutral-artifact-assembler.js";

package/dist/index.js

@@ -1,7 +1,8 @@
 export { appendJsonPointer, canonicalJson, compareUtf8, escapeJsonPointerToken, parseJsonPointer, sha256Hex, toJsonValue, unescapeJsonPointerToken, utf8ByteLength, } from "./canonical.js";
 export { buildScenarioReviewSnapshot, DEFAULT_SCENARIO_REVIEW_SNAPSHOT_LIMITS, reconstructRecordPayload, stableRelationId, } from "./snapshot.js";
-export { ARTIFACT_MANIFEST_VERSION_V5, ARTIFACT_PACKAGE_FORMAT_VERSION_V5, LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, EARLIER_LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, CAPTURED_REVISION_SCHEMA_VERSION, FROZEN_PUBLISH_INPUT_SCHEMA_VERSION, FROZEN_DATABASE_DELIVERY_CODEC, FROZEN_DATABASE_DELIVERY_MEDIA_TYPE, FROZEN_DATABASE_DELIVERY_MAGIC, FROZEN_DATABASE_DELIVERY_RELATIVE_PATH, PUBLISHED_ARTIFACT_HEAD_SCHEMA_VERSION, } from "./artifact.js";
-export { artifactV5ManifestSha256, buildArtifactV5, buildFrozenArtifactBundle, buildPublishedArtifactHead, canonicalArtifactV5Bytes, canonicalBytes, canonicalPublishedArtifactHeadCoreBytes, canonicalSha256, digestPublishedArtifactHeadCore, parseArtifactV5, parseFrozenArtifactBundle, parseLegacyArtifactV5Package2, parsePublishedArtifactHead, } from "./artifact-digest.js";
+export { ARTIFACT_MANIFEST_VERSION_V5, ARTIFACT_COMPILER_WITNESS_OBJECTS, ARTIFACT_PACKAGE_FORMAT_VERSION_V5, LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, EARLIER_LEGACY_ARTIFACT_PACKAGE_FORMAT_VERSION_V5, CAPTURED_REVISION_SCHEMA_VERSION, FROZEN_PUBLISH_INPUT_SCHEMA_VERSION, FROZEN_DATABASE_DELIVERY_CODEC, FROZEN_DATABASE_DELIVERY_MEDIA_TYPE, FROZEN_DATABASE_DELIVERY_MAGIC, FROZEN_DATABASE_DELIVERY_RELATIVE_PATH, PUBLISHED_ARTIFACT_HEAD_SCHEMA_VERSION, } from "./artifact.js";
+export { artifactV5ManifestSha256, buildArtifactV5, buildFrozenArtifactBundle, buildPublishedArtifactHead, canonicalArtifactV5Bytes, canonicalBytes, canonicalPublishedArtifactHeadCoreBytes, canonicalSha256, digestPublishedArtifactHeadCore, parseArtifactV5, parseFrozenArtifactBundle, parseFrozenViewPublications, parseLegacyArtifactV5Package2, parsePublishedArtifactHead, } from "./artifact-digest.js";
+export { verifyArtifactCompilerWitness } from "./artifact-compiler-witness.js";
 export { buildFrozenArtifactObjectKey, publishOperationKey, } from "./publish-attempt.js";
 export * from "./neutral-artifact-assembler.js";
 export * from "./bound-view-freeze.js";

package/dist/neutral-artifact-assembler.d.ts

@@ -93,6 +93,13 @@ export interface NeutralArtifactRuntimeDefinitions {
     readonly achievement_defs: readonly JsonValue[];
     readonly transaction_defs: readonly JsonValue[];
 }
+/** 发布时由 compiler 从 prompt_retrieval.retrieval.play_config 固化的生成合同。 */
+export interface FrozenGenerationPolicyV1 {
+    readonly schema_version: 1;
+    readonly model: string;
+    readonly temperature: number;
+    readonly policy_sha256: string;
+}
 export interface NeutralArtifactSourceModel<TViewProject = unknown> {
     readonly metadata: JsonValue;
     readonly protagonist: JsonValue;
@@ -111,6 +118,7 @@ export interface NeutralArtifactSourceModel<TViewProject = unknown> {
     readonly view_interaction_pc: ViewInteractionSourceV3 | null;
     readonly music_candidate_source: MusicCandidateSourceV3;
     readonly retrieval: JsonValue;
+    readonly generation_policy: FrozenGenerationPolicyV1 | null;
     readonly runtime_definitions: NeutralArtifactRuntimeDefinitions;
     readonly source_metadata: Readonly<Record<string, JsonValue>>;
     readonly resources: readonly FrozenPublishResource[];

package/dist/neutral-artifact-assembler.js

@@ -1,13 +1,14 @@
 import { canonicalScenarioSourceManifestDigestInputBytes, canonicalScenarioSourceSectionBytes, } from "@world-engines/scenario-author-source";
-import { CURRENT_NEUTRAL_COMPILER_STAGE_VERSIONS, NEUTRAL_SPATIAL_WORLD_STAGE_ID, NEUTRAL_SPATIAL_WORLD_STAGE_VERSION, canonicalCompileTargetProfileBytes, canonicalNeutralSourceCompilerReceiptBytes, compileTargetProfileDigest, canonicalTmwBytes, digestViewInteractionManifestV3, materializeTmw3TriggerDocument, initialTmwSceneFromMetadata, parseMusicCandidateSourceV3, parseTmwBlueprintProgramV1, parseViewInteractionManifestV3, parseViewInteractionSourceV3, runtimeContractHashV3, } from "@world-engines/tmw";
+import { NEUTRAL_SPATIAL_WORLD_STAGE_ID, canonicalCompileTargetProfileBytes, canonicalNeutralSourceCompilerReceiptBytes, compileTargetProfileDigest, canonicalTmwBytes, digestViewInteractionManifestV3, materializeTmw3TriggerDocument, initialTmwSceneFromMetadata, parseMusicCandidateSourceV3, parseTmwBlueprintProgramV1, parseViewInteractionManifestV3, parseViewInteractionSourceV3, runtimeContractHashV3, } from "@world-engines/tmw";
 import { decodeTrustedCompiledBlueprintArtifactV1 } from "@world-engines/tmw/compiled-blueprint-artifact";
+import { TMW_RELATION_ID_ALIASES_METADATA_KEY, createTmwRelationIdAliasesMetadataValue, createTmwRelationIdAliasResolver } from "@world-engines/tmw/relation-id-aliases";
 import { canonicalLadybugRelationId, createViewAccessPolicySubject, sealViewAccessPolicy, VIEW_ACCESS_POLICY_DENY_ROOT, VIEW_ACCESS_POLICY_ROOT_SUBJECT_ID, } from "@world-engines/ladybug-bridge";
 import { validateRoadGeneration } from "@world-engines/spatial-authoring/road-generation";
 import { validateSpatialTemplateConfiguration } from "@world-engines/spatial-authoring/spatial-templates";
 import { validateGpsPosition, validateSpatialCoordinateSystem } from "@world-engines/spatial-authoring";
 import { canonicalJson, sha256Hex, toJsonValue } from "./canonical.js";
 import { ARTIFACT_COMPILER_WITNESS_PATHS, ARTIFACT_COMPILER_WITNESS_RESERVED_PREFIX, FROZEN_PUBLISH_INPUT_SCHEMA_VERSION, } from "./artifact.js";
-import { buildArtifactV5 } from "./artifact-digest.js";
+import { buildArtifactV5, canonicalSha256 } from "./artifact-digest.js";
 export const NEUTRAL_ARTIFACT_EMBEDDING_INDEX_PATH = "__derived__/embedding-index-v1.json";
 export const FRESH_RUNTIME3_PLAYER_TURN_POLICY_SCHEMA_VERSION = 1;
 export const FROZEN_DATABASE_VIEW_ACCESS_POLICY_SCHEMA_VERSION = 3;
@@ -100,14 +101,37 @@ function embeddingSafeField(key) {
     const compact = key.toLocaleLowerCase("en-US").replaceAll(/[^a-z0-9]/gu, "");
     return !/(?:raw|original|archive|source|binary|blob).*(?:base64|bytes)|(?:base64|bytes).*(?:raw|original|archive|source|binary|blob)/u.test(compact);
 }
+/**
+ * Review input historically used `kind`; the locked r14b source uses
+ * `relation_kind`. Source endpoints remain `from_id`/`to_id`; no caller may
+ * silently choose between conflicting kind fields.
+ */
+function normalizeAuthorRelation(relation) {
+    const from = text(relation.from_id, "neutral_artifact_embedding_relation_from_invalid");
+    const to = text(relation.to_id, "neutral_artifact_embedding_relation_to_invalid");
+    const sourceKind = relation.kind;
+    const r14bKind = relation.relation_kind;
+    const kind = sourceKind !== undefined && r14bKind !== undefined
+        ? (() => {
+            const current = text(sourceKind, "neutral_artifact_embedding_relation_kind_invalid");
+            const blocked = text(r14bKind, "neutral_artifact_embedding_relation_kind_invalid");
+            if (current !== blocked)
+                throw new Error("neutral_artifact_embedding_relation_kind_conflict");
+            return current;
+        })()
+        : text(sourceKind ?? r14bKind, "neutral_artifact_embedding_relation_kind_invalid");
+    return Object.freeze({
+        from,
+        to,
+        kind,
+    });
+}
 function relationSourceText(relation) {
     const props = record(relation.props ?? {}, "neutral_artifact_embedding_relation_props_invalid");
     const fields = relation.fields === undefined
         ? {}
         : record(relation.fields, "neutral_artifact_embedding_relation_fields_invalid");
-    const from = text(relation.from_id, "neutral_artifact_embedding_relation_from_invalid");
-    const to = text(relation.to_id, "neutral_artifact_embedding_relation_to_invalid");
-    const kind = text(relation.kind, "neutral_artifact_embedding_relation_kind_invalid");
+    const { from, to, kind } = normalizeAuthorRelation(relation);
     const propText = Object.keys(props).filter(embeddingSafeField).sort().map((key) => {
         const value = props[key];
         const rendered = value === undefined ? "" : stableText(value);
@@ -143,11 +167,9 @@ function buildNeutralArtifactEmbeddingSourceTextIndex(graph) {
         const relation = record(value, "neutral_artifact_embedding_relation_invalid");
         if (relation.disabled === true)
             continue;
-        const from = relation.from_id;
-        const to = relation.to_id;
-        if (typeof from === "string")
-            append(from, relation);
-        if (typeof to === "string" && to !== from)
+        const { from, to } = normalizeAuthorRelation(relation);
+        append(from, relation);
+        if (to !== from)
             append(to, relation);
     }
     const incidentByEntityId = new Map();
@@ -168,8 +190,9 @@ function deriveNeutralArtifactEntityEmbeddingSourceTextFromIndex(entityValue, in
     }).filter(Boolean).join(" ");
     const base = `names=${names(entity.name).join("|")} ${kind} ${entityId} ${baseProps}`.trim();
     const incident = (index.incidentByEntityId.get(entityId) ?? []).map((relation) => {
-        const outgoing = relation.from_id === entityId;
-        const counterpartId = text(outgoing ? relation.to_id : relation.from_id, "neutral_artifact_embedding_counterpart_invalid");
+        const normalized = normalizeAuthorRelation(relation);
+        const outgoing = normalized.from === entityId;
+        const counterpartId = outgoing ? normalized.to : normalized.from;
         const counterpart = index.entityById.get(counterpartId);
         return [
             `relation=${text(relation.relation_id, "neutral_artifact_embedding_relation_id_invalid")}`,
@@ -278,22 +301,36 @@ function base64Bytes(value, field) {
         throw new Error(`neutral_artifact_${field}_base64_noncanonical`);
     return Uint8Array.from(decoded, (character) => character.charCodeAt(0));
 }
-function derivedObjectMap(objects) {
-    const byStage = new Map(objects.map((object) => [object.stage_id, object]));
-    const spatial = byStage.get(NEUTRAL_SPATIAL_WORLD_STAGE_ID);
-    const expectedSize = CURRENT_NEUTRAL_COMPILER_STAGE_VERSIONS.length + (spatial === undefined ? 0 : 1);
-    if (byStage.size !== expectedSize) {
+function derivedObjectMap(objects, profile) {
+    const expectedByStage = new Map();
+    for (const stage of profile.stage_versions) {
+        if (expectedByStage.has(stage.stage_id)) {
+            throw new Error(`neutral_artifact_target_profile_stage_duplicate:${stage.stage_id}`);
+        }
+        expectedByStage.set(stage.stage_id, stage.stage_version);
+    }
+    const byStage = new Map();
+    for (const object of objects) {
+        if (byStage.has(object.stage_id)) {
+            throw new Error(`neutral_artifact_derived_object_duplicate:${object.stage_id}`);
+        }
+        const expectedVersion = expectedByStage.get(object.stage_id);
+        if (expectedVersion === undefined) {
+            throw new Error(`neutral_artifact_derived_object_unexpected:${object.stage_id}`);
+        }
+        if (object.stage_version !== expectedVersion) {
+            throw new Error(`neutral_artifact_derived_object_version_mismatch:${object.stage_id}`);
+        }
+        byStage.set(object.stage_id, object);
+    }
+    if (objects.length !== profile.stage_versions.length) {
         throw new Error("neutral_artifact_derived_object_set_mismatch");
     }
-    for (const stage of CURRENT_NEUTRAL_COMPILER_STAGE_VERSIONS) {
-        const object = byStage.get(stage.stage_id);
-        if (object === undefined || object.stage_version !== stage.stage_version) {
+    for (const stage of profile.stage_versions) {
+        if (!byStage.has(stage.stage_id)) {
             throw new Error(`neutral_artifact_derived_object_missing:${stage.stage_id}`);
         }
     }
-    if (spatial !== undefined && spatial.stage_version !== NEUTRAL_SPATIAL_WORLD_STAGE_VERSION) {
-        throw new Error(`neutral_artifact_derived_object_missing:${NEUTRAL_SPATIAL_WORLD_STAGE_ID}`);
-    }
     return byStage;
 }
 function requiredDerivedJson(byStage, stageId) {
@@ -307,6 +344,14 @@ function optionalSpatialBase(byStage) {
     if (object === undefined)
         return null;
     const root = record(parseCanonicalJson(object.bytes, "neutral_spatial_world"), "neutral_artifact_spatial_world_object_required");
+    if (root.spatial_world_present !== undefined) {
+        exactKeys(root, ["spatial_world_present"], "spatial_world_absent");
+        if (object.stage_version !== "2"
+            || root.spatial_world_present !== false) {
+            throw new Error("neutral_artifact_spatial_world_absence_invalid");
+        }
+        return null;
+    }
     if (root.player_programmatic_supported === false) {
         exactKeys(root, ["player_programmatic_supported", "reason", ...(root.playerMap === undefined ? [] : ["playerMap"]), ...(root.spatialAuthority === undefined ? [] : ["spatialAuthority"])], "spatial_world_unsupported");
         if (root.reason !== "topology_missing"
@@ -327,6 +372,7 @@ function optionalSpatialBase(byStage) {
         ...(root.templates === undefined ? [] : ["templates"]),
         ...(root.controlledActorId === undefined ? [] : ["controlledActorId"]),
         ...(root.playerMap === undefined ? [] : ["playerMap"]),
+        ...(root.spatialAuthority === undefined ? [] : ["spatialAuthority"]),
     ], "spatial_world");
     const baseDigest = text(root.baseDigest, "neutral_artifact_spatial_world_base_digest_invalid");
     if (!SHA256.test(baseDigest))
@@ -657,6 +703,27 @@ function parseLayoutModel(value) {
     }
     return Object.freeze({ view_interaction_mobile: mobile, view_interaction_pc: pc });
 }
+function parseGenerationPolicy(playConfig) {
+    if (playConfig === null)
+        return null;
+    const root = record(playConfig, "neutral_artifact_play_config_object_required");
+    const raw = root.generation_policy;
+    if (raw === undefined || raw === null)
+        return null;
+    const policy = record(raw, "neutral_artifact_generation_policy_object_required");
+    exactKeys(policy, ["schema_version", "model", "temperature"], "generation_policy");
+    const model = text(policy.model, "neutral_artifact_generation_policy_model_invalid");
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:/-]{0,255}$/u.test(model)) {
+        throw new Error("neutral_artifact_generation_policy_model_invalid");
+    }
+    const temperature = policy.temperature;
+    if (typeof temperature !== "number" || !Number.isFinite(temperature)
+        || temperature < 0 || temperature > 2) {
+        throw new Error("neutral_artifact_generation_policy_temperature_invalid");
+    }
+    const core = toJsonValue({ schema_version: 1, model, temperature });
+    return Object.freeze({ schema_version: 1, model, temperature, policy_sha256: canonicalSha256(core) });
+}
 function parsePromptRetrievalModel(value) {
     const root = record(value, "neutral_artifact_prompt_retrieval_object_required");
     exactKeys(root, ["retrieval", "music_candidates", "runtime_definitions"], "prompt_retrieval");
@@ -673,6 +740,7 @@ function parsePromptRetrievalModel(value) {
         throw new Error("neutral_artifact_music_candidate_source_invalid");
     return Object.freeze({
         retrieval: retrieval.retrieval_config ?? null,
+        generation_policy: parseGenerationPolicy(retrieval.play_config ?? null),
         music_candidate_source: music,
         runtime_definitions: Object.freeze({
             triggers: array(runtime.triggers, "runtime_triggers"),
@@ -704,7 +772,7 @@ function parseResourcesModel(value) {
  * gzip-tar 解包是唯一外部 seam；调用方不能重写 compiler derived-object 解释规则。
  */
 export async function materializeNeutralArtifactCompilation(source, profile, outcome, unpackViewProject) {
-    const byStage = derivedObjectMap(outcome.derived_objects);
+    const byStage = derivedObjectMap(outcome.derived_objects, profile);
     const metadata = parseMetadataModel(requiredDerivedJson(byStage, "neutral.metadata"));
     const graph = parseGraphModel(requiredDerivedJson(byStage, "neutral.logical-graph"));
     const layout = parseLayoutModel(requiredDerivedJson(byStage, "neutral.layout"));
@@ -934,7 +1002,8 @@ function snapshotEntities(values) {
         if (ids.has(id))
             throw new Error(`neutral_artifact_entity_id_duplicate:${id}`);
         ids.add(id);
-        const rawNames = Array.isArray(entity.name) ? entity.name : [];
+        // 中性作者源允许单名称字符串；仅在数据库投影时转成名称数组，原源不变。
+        const rawNames = typeof entity.name === "string" ? [entity.name] : Array.isArray(entity.name) ? entity.name : [];
         if (rawNames.length === 0 || rawNames.some((name) => typeof name !== "string"
             || name.length === 0 || name !== name.trim().normalize("NFC"))) {
             throw new Error(`neutral_artifact_entity_name_invalid:${id}`);
@@ -954,17 +1023,22 @@ function snapshotEntities(values) {
 }
 function snapshotRelations(values) {
     const ids = new Set();
+    const sourceIds = new Set();
     return Object.freeze(values.map((value, index) => {
         const relation = record(value, `neutral_artifact_relation_${index}_invalid`);
         if (relation.disabled === true)
             return null;
-        const src = text(relation.from_id, `neutral_artifact_relation_from_${index}_invalid`);
-        const dst = text(relation.to_id, `neutral_artifact_relation_to_${index}_invalid`);
-        const kind = text(relation.kind, `neutral_artifact_relation_kind_${index}_invalid`);
+        const normalized = normalizeAuthorRelation(relation);
+        const src = normalized.from;
+        const dst = normalized.to;
+        const kind = normalized.kind;
+        const sourceId = text(relation.relation_id, `neutral_artifact_relation_id_invalid:${index}`);
+        // 作者 ID 属于中性源；数据库关系按两端与类型生成 identity，不能要求作者预先使用物理 ID。
         const relationId = canonicalLadybugRelationId(src, dst, kind);
-        if (relation.relation_id !== relationId || ids.has(relationId)) {
+        if (sourceIds.has(sourceId) || ids.has(relationId)) {
             throw new Error(`neutral_artifact_relation_id_invalid:${index}`);
         }
+        sourceIds.add(sourceId);
         ids.add(relationId);
         const mode = viewAccess(relation.view_access, `relation_view_access_${relationId}`);
         return Object.freeze({
@@ -1018,9 +1092,10 @@ function buildViewAccessPolicy(graphEntities, entities, graphRelations, relation
         const input = record(value, "neutral_artifact_policy_relation_invalid");
         if (input.disabled === true)
             continue;
-        const src = text(input.from_id, "neutral_artifact_policy_relation_from_invalid");
-        const dst = text(input.to_id, "neutral_artifact_policy_relation_to_invalid");
-        const kind = text(input.kind, "neutral_artifact_policy_relation_kind_invalid");
+        const normalized = normalizeAuthorRelation(input);
+        const src = normalized.from;
+        const dst = normalized.to;
+        const kind = normalized.kind;
         if (!entityById.has(src) || !entityById.has(dst))
             throw new Error("neutral_artifact_policy_relation_endpoint_missing");
         const id = canonicalLadybugRelationId(src, dst, kind);
@@ -1169,6 +1244,22 @@ export async function encodeNeutralReviewDatabaseSnapshot(input) {
     const graphEntities = deliveryGraphEntities(model.graph.entities);
     const entities = snapshotEntities(graphEntities);
     const relations = snapshotRelations(model.graph.relations);
+    if (Object.hasOwn(model.source_metadata, TMW_RELATION_ID_ALIASES_METADATA_KEY)) {
+        throw new Error("neutral_artifact_relation_alias_metadata_reserved");
+    }
+    const relationAliases = createTmwRelationIdAliasesMetadataValue(model.graph.relations.flatMap(value => {
+        const relation = record(value, "neutral_artifact_relation_alias_source_invalid");
+        if (relation.disabled === true)
+            return [];
+        const normalized = normalizeAuthorRelation(relation);
+        const sourceId = text(relation.relation_id, "neutral_artifact_relation_alias_source_id_invalid");
+        const canonicalId = canonicalLadybugRelationId(normalized.from, normalized.to, normalized.kind);
+        return sourceId === canonicalId ? [] : [{ source_relation_id: sourceId, canonical_relation_id: canonicalId }];
+    }));
+    const sourceMetadata = relationAliases.length === 0 ? model.source_metadata : {
+        ...model.source_metadata, [TMW_RELATION_ID_ALIASES_METADATA_KEY]: relationAliases,
+    };
+    createTmwRelationIdAliasResolver({ sourceMetadata, canonicalRelationIds: new Set(relations.map(relation => relation.relation_id)) });
     const entityIds = new Set(entities.map((entity) => entity.id));
     for (const relation of relations) {
         if (!entityIds.has(relation.src) || !entityIds.has(relation.dst)) {
@@ -1184,6 +1275,7 @@ export async function encodeNeutralReviewDatabaseSnapshot(input) {
     const sidecar = toJsonValue({
         initial_scene: initialTmwSceneFromMetadata(model.metadata == null ? {} : record(model.metadata, "neutral_artifact_metadata_object_required")),
         retrieval_config: model.retrieval,
+        generation_policy: model.generation_policy,
         triggers: model.runtime_definitions.triggers,
         trigger_variables_schema: model.runtime_definitions.trigger_variables_schema,
         cg_defs: model.runtime_definitions.cg_defs,
@@ -1218,7 +1310,7 @@ export async function encodeNeutralReviewDatabaseSnapshot(input) {
             view_interaction_mobile: model.view_interaction_mobile,
             view_interaction_pc: model.view_interaction_pc,
             music_candidate_source: model.music_candidate_source,
-            source_metadata: model.source_metadata,
+            source_metadata: sourceMetadata,
         },
         view_access_policy: buildDerivedViewAccessPolicyV3(graphEntities, entities, model.graph.relations, relations),
     });
@@ -1286,16 +1378,17 @@ export async function assembleNeutralFrozenPublishInput(input) {
         database_bytes: input.database_bytes.slice(),
         database_delivery: Object.freeze({ codec: "scnb-v2", bytes: input.database_delivery_bytes.slice() }),
         trigger_document: toJsonValue(compilation.model.trigger_document),
-        compiled_plan: compilation.model.trigger_semantics_kind === "blueprint-program"
-            ? compilation.model.compiled_plan
-            : attachFreshRuntime3PlayerTurnPolicy(compilation.model.compiled_plan, compilation.model.system_prompts, input.runtime_identity.runtime_contract_hash),
+        compiled_plan: attachFreshRuntime3PlayerTurnPolicy(compilation.model.compiled_plan, compilation.model.system_prompts, input.runtime_identity.runtime_contract_hash),
         view_source_bytes: compilation.model.view_source_bytes.slice(),
         view_publish_mobile_bytes: input.view_publish_mobile_bytes.slice(),
         view_publish_pc_bytes: input.view_publish_pc_bytes.slice(),
         view_interaction_mobile: mobile,
         view_interaction_pc: pc,
         music_candidate_source: compilation.model.music_candidate_source,
-        retrieval: compilation.model.retrieval,
+        retrieval: toJsonValue({
+            retrieval_config: compilation.model.retrieval,
+            generation_policy: compilation.model.generation_policy,
+        }),
         resources: mergeNeutralArtifactResources(compilation.model.resources, compilation.witness_resources, [embedding.index_resource]),
         runtime_identity: Object.freeze({ ...input.runtime_identity }),
         ...(input.published_view === undefined ? {} : { published_view: input.published_view }),

package/dist/server-bound-view-compiler.js

@@ -7,7 +7,7 @@ import { materializeNeutralArtifactCompilation, } from "./neutral-artifact-assem
  * 只能运行在 sandbox Node build worker，不能进入 Cloudflare Worker isolate。
  */
 export function createSandboxNodeBoundViewCompiler(options) {
-    const stages = buildCurrentTmw3NeutralCompilerStageRegistry();
+    const stages = buildCurrentTmw3NeutralCompilerStageRegistry(options.target_profile);
     const cache = new InMemoryCompilerStageCache();
     const codec = Object.freeze({
         decode_svp(bytes) {

package/dist/submit-wire.d.ts

@@ -36,6 +36,15 @@ export declare function buildFrozenArtifactLegacySubmitWire(frozen: FrozenPublis
             sha256: string;
             bytes_base64: string;
         }>[];
+        view_publications: readonly Readonly<{
+            device: import("./artifact.js").FrozenViewPublicationDevice;
+            relative_path: "view-publish-mobile.html" | "view-publish-pc.html";
+            media_type: "text/html; charset=utf-8";
+            encoding: "bytes";
+            size_bytes: number;
+            sha256: string;
+            bytes_base64: string;
+        }>[];
         resources: readonly Readonly<{
             path: string;
             media_type: string;

package/dist/submit-wire.js

@@ -38,6 +38,15 @@ export function buildFrozenArtifactLegacySubmitWire(frozen, operation_key, revie
                 encoding: object.encoding, size_bytes: object.size_bytes, sha256: object.sha256,
                 bytes_base64: base64(object.bytes),
             }))),
+            view_publications: Object.freeze(artifactBundle.view_publications.map((publication) => Object.freeze({
+                device: publication.device,
+                relative_path: publication.relative_path,
+                media_type: publication.media_type,
+                encoding: publication.encoding,
+                size_bytes: publication.size_bytes,
+                sha256: publication.sha256,
+                bytes_base64: base64(publication.bytes),
+            }))),
             resources: Object.freeze(frozen.resources.filter((resource) => !Object.values(ARTIFACT_COMPILER_WITNESS_OBJECTS)
                 .some((witness) => witness.resource_path === resource.path)).map((resource) => Object.freeze({
                 path: resource.path, media_type: resource.media_type, encoding: "bytes",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@world-engines/scenario-review-snapshot",
   "private": false,
-  "version": "0.1.4",
+  "version": "1.0.0",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "exports": {
@@ -26,24 +26,24 @@
     "dist"
   ],
   "dependencies": {
-    "@world-engines/chatplay-vite-plugin": "0.1.4",
-    "@world-engines/ladybug-bridge": "0.1.4",
-    "@world-engines/protocol-ts": "0.1.4",
-    "@world-engines/scenario-author-source": "0.1.4",
-    "@world-engines/tmw": "0.1.4",
-    "@world-engines/spatial-authoring": "0.1.4"
+    "@world-engines/chatplay-vite-plugin": "1.0.0",
+    "@world-engines/ladybug-bridge": "1.0.0",
+    "@world-engines/protocol-ts": "1.0.0",
+    "@world-engines/scenario-author-source": "1.0.0",
+    "@world-engines/tmw": "1.0.0",
+    "@world-engines/spatial-authoring": "1.0.0"
   },
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
   },
-  "worldengine_source_sha256": "89298a941a8b4da31f62d81274baef2e65f6f24fefed09c12564c3af300f2e2b",
+  "worldengine_source_sha256": "1d697deb5b085043a98d155e563e16c1f034945cb40f0786b00d274c967e1ffc",
   "worldengine_source_identity_provenance": {
     "schema": "worldengine-public-namespace-projection/v1",
     "kind": "composite-source-identity; namespace projection; not-full-source-recompile",
     "original_name": "@chat/scenario-review-snapshot",
-    "original_archive_sha256": "1f56d330fd1f64c6a8aa57578a76c690c734c58f80e23be47ad0d8c891982101",
-    "original_source_sha256": "6618e6cea8bdba745bca0e9be2771796030d11f670a6f49b5848ebe1585c36bd",
+    "original_archive_sha256": "152fbcbd8a9f7ecb458600a333708db8b42fed71f8238d3ad6b8ad3b1b19613b",
+    "original_source_sha256": "6742170897a854c1c859d642e5ac3cc77c874ec13263928abead5c30572b01ec",
     "projected_name": "@world-engines/scenario-review-snapshot",
     "package_name_mapping": {
       "@chat/blocks-editor": "@world-engines/blocks-editor",
@@ -55,7 +55,7 @@
       "@chat/scenario-review-snapshot": "@world-engines/scenario-review-snapshot",
       "@chat/tmw": "@world-engines/tmw",
       "@chat/view-exposure": "@world-engines/view-exposure",
-      "@world-engines/chatplay-vite-plugin": "0.1.4",
+      "@world-engines/chatplay-vite-plugin": "@world-engines/chatplay-vite-plugin",
       "@worldengine/agent-kit": "@world-engines/agent-kit",
       "@worldengine/authoring-bridge": "@world-engines/authoring-bridge",
       "@worldengine/authoring-ui": "@world-engines/authoring-ui",