@x-otto/coding 0.0.1-alpha.16 → 0.0.1-alpha.18

package/README.md

@@ -9,9 +9,9 @@ The application assembly layer, wiring subsystems together into the complete ott
 | Module                | Function                                              |
 | -------------------- | ------------------------------------------------ |
 | App           | Dependency-injection container, assembles all subsystems     |
-| AgentSession         | Conversation lifecycle: message persistence + event stream forwarding + tool gateway |
-| CodingSessionManager | Multi-session container (InMemory / Disk / Remote)           |
-| Runner               | 4 run modes (Print / JSON / RPC / Interactive) |
+| AgentSession         | Conversation lifecycle (re-exported from `@x-otto/runtime`) |
+| CodingSessionPool    | Session pool (InMemory / Disk / Remote, re-exported from `@x-otto/runtime`) |
+| AgentJobService      | Background agent job lifecycle (isolated worktrees, diff apply) |
 
 ## Installation
 
@@ -25,14 +25,14 @@ pnpm add @x-otto/coding
 import { App } from '@x-otto/coding'
 
 const app = new App({
-  model: 'claude-sonnet-4-5-20250929',
+  modelId: 'claude-sonnet-4-5-20250929',
   workspaceDir: process.cwd(),
-  apiKey: process.env.ANTHROPIC_API_KEY,
+  logger: { name: 'app', level: 'info', destination: 'stderr' },
 })
 
 const session = await app.createSession()
 await session.prompt('Write a fibonacci function')
-await app.dispose()
+await app.stop()
 ```
 
 ## API
@@ -40,30 +40,33 @@ await app.dispose()
 | Export | Type | Description |
 |---|---|---|
 | `App` | `class` | Dependency-injection container, assembles all subsystems |
-| `AgentSession` | `class` | Conversation lifecycle management |
-| `CodingSessionManager` | `class` | Multi-session container |
-| `createPrintRunner` | `function` | Print-mode runner |
-| `createInteractiveRunner` | `function` | Interactive-mode runner |
-| `createJsonRunner` | `function` | JSON-mode runner |
-| `createRpcRunner` | `function` | RPC-mode runner |
+| `createApp` | `function` | App factory (from `./app/app`) |
+| `createFrontendPort` | `function` | Frontend port factory |
+| `ExtensionManager` | `class` | Bundled/user extension management |
+| `AgentSession` | `class` | Conversation lifecycle (re-exported from `@x-otto/runtime`) |
+| `CodingSessionPool` | `class` | Session pool alias (re-exported from `@x-otto/runtime`) |
+| `AgentJobService` | `class` | Background agent job lifecycle |
+| `readSkillLoopStatus` | `function` | Skill loop status query (RFC-318) |
+
+Full export surface is dominated by plugin lifecycle utilities (manifest parsing, discovery, panel compilation, module loading) — see `src/index.ts`.
 
 ## Directory Overview
 
 ```
 src/
-  types.ts                    # core types
-  app.ts                      # application container
-  agent-session.ts            # conversation lifecycle
-  coding-session-manager.ts   # multi-session management
-  run/
-    print.ts                  # Print mode
-    json.ts                   # JSON mode
-    rpc.ts                    # RPC mode
-    interactive.ts            # interactive REPL
-  index.ts
-tests/                        # 29 test files
-example/
-docs/
+  index.ts                    # barrel export
+  types.ts                    # AppOptions / AppContext / StorageOptions
+  engine-main.ts              # engine 独立进程入口 (RFC-091)
+  app/                        # App composition root (app.ts / storage-wiring.ts / tool-callbacks.ts / sandbox-controller.ts / ...)
+  agent/                      # declarative agents/teams + swarm runtime
+  session/                    # session config resolution + task runner
+  hooks/                      # coding business hooks (tool-guidance / lesson / skill-catalog / phase / session-learning)
+  input/                      # sigil input system (builtin-resolvers / sigil-expand / sigil-resolver-registry)
+  plugin/                     # plugin lifecycle / panel compiler / module loader / esbuild lifecycle
+  skill-loop/                 # skill loop status (RFC-318)
+  feedback/                   # pulse survey sink
+  vision/                     # vision delegate service
+tests/                        # 233 test files
 ```
 
 ## Development Commands

package/dist/index.d.ts

@@ -3,32 +3,32 @@ import * as _$_x_otto_env0 from "@x-otto/env";
 import { ResilienceConfig, ResilienceConfigOverride, UserIdentity, findWorkspaceRoot } from "@x-otto/env";
 import { Api, AuthStore, IsModelUsable, Message, Model, ModelCatalogStore, ModelRegistry, ModelSpec, ProviderRegistry, WireProtocolRegistry, WorkflowSlot, apiCredentialId } from "@x-otto/ai";
 import { Diagnoser, EditFileCallback, FailureSignalStore, HookRegistry, HookSpec, PermissionAuditLog, PermissionMode, PermissionPolicyRegistry } from "@x-otto/hooks";
-import { SandboxConfig, SandboxStrategy, SearchEcosystem, ToolRegistry } from "@x-otto/tools";
+import { CapabilityGapReportRecorder, CapabilityGapReportStore, SandboxConfig, SandboxStrategy, SearchEcosystem, ToolRegistry } from "@x-otto/tools";
 import { LogLevel, Logger, attachLogListener } from "@x-otto/shared";
-import { AutoMemory, FileStateManager, MemoryStore, OperationalLearningStore } from "@x-otto/memory";
+import { AutoMemory, EvolutionSignalRecord, EvolutionSignalSink, EvolutionSignalStore, FileStateManager, MemoryStore, OperationalLearningStore } from "@x-otto/memory";
+import { AgentMessage, AgentTool, ClockPort, DescribeImagesPort, TraceEvent } from "@x-otto/agent";
 import * as _$_x_otto_runtime0 from "@x-otto/runtime";
-import { AgentJobRegistry, AgentJobStatus, AgentObservationSnapshot, AgentRuntime, AgentSession, AgentSession as AgentSession$1, AgentSessionInfo, AgentSessionInfo as AgentSessionInfo$1, AgentSessionJob, AgentSessionJob as AgentSessionJob$1, AgentSessionOptions, AgentSessionOptions as AgentSessionOptions$1, BackgroundProcess, Checkpoint, CheckpointData, CheckpointData as CheckpointData$1, FileEntrySnapshot, FileSnapshot, FleetMonitor, MemoryGovernor, MemoryPressureLevel, MemorySample, MemorySubsystem, PromptOptions, ReplayLevel, ResidencyGovernor, ResolvedSessionConfig, RestoreMode, SandboxRunner, SandboxToolCall, SandboxToolResult, SandboxUnavailableError, SessionPool, SessionPool as CodingSessionPool, SessionPoolOptions, TracebackView, captureFiles, createSessionStableInjectionHooks, defaultMaxToolTurnExtensions, deriveSessionTitle, globalAgentJobRegistry, globalAgentObservability, globalProcessRegistry, messagesFromSnapshot, reconstructMessages, resolveSessionTitle, restoreFiles } from "@x-otto/runtime";
+import { AgentJobRegistry, AgentJobStatus, AgentObservationSnapshot, AgentRuntime, AgentSession, AgentSession as AgentSession$1, AgentSessionInfo, AgentSessionInfo as AgentSessionInfo$1, AgentSessionJob, AgentSessionJob as AgentSessionJob$1, AgentSessionOptions, AgentSessionOptions as AgentSessionOptions$1, ApplySignals, BackgroundProcess, Checkpoint, CheckpointData, CheckpointData as CheckpointData$1, FileEntrySnapshot, FileSnapshot, FleetMonitor, HostRegistry, MemoryGovernor, MemoryPressureLevel, MemorySample, MemorySubsystem, PromptOptions, ReplayLevel, ResidencyGovernor, ResolvedSessionConfig, RestoreMode, SandboxRunner, SandboxToolCall, SandboxToolResult, SandboxUnavailableError, SessionPool, SessionPool as CodingSessionPool, SessionPoolOptions, TracebackView, captureFiles, createSessionStableInjectionHooks, defaultMaxToolTurnExtensions, deriveSessionTitle, globalAgentJobRegistry, globalAgentObservability, globalProcessRegistry, messagesFromSnapshot, reconstructMessages, resolveSessionTitle, restoreFiles } from "@x-otto/runtime";
 import { AppendLog, LiveTap, StorageHost } from "@x-otto/persistence";
 import { FrontendPort, ResidencyBudgetConfig } from "@x-otto/session-contract";
 import { SkillProvider, SkillRegistry } from "@x-otto/skill";
 import { AgentProfile, PromptManager, PromptPreset, PromptProviderOptions, SubAgentPromptContext } from "@x-otto/prompt";
 import * as _$_x_otto_plugin0 from "@x-otto/plugin";
-import { CommandRef, ContextMap, ContextMap as ContextMap$1, DiscoverPluginsOptions, DiscoveredPlugin, DiscoveredPlugin as DiscoveredPlugin$1, DispatchCaps, FeedbackIssueInput, FeedbackProvider, FileProviderOptions, HIGH_RISK_CAPABILITIES, MonitorEvent, PLUGIN_MANIFEST_FILENAME, POINT, PluginContext, PluginContributes, PluginExecutableSurface, PluginFileViewerEntry, PluginI18nRegistry, PluginInputRegistry, PluginInputRegistry as PluginInputRegistry$1, PluginManifest, PluginModule, PluginRendererEntry, PluginServiceNotification, PluginTrustVerdict, PluginTrustVerdict as PluginTrustVerdict$1, PulseSurveyEntry, PulseSurveyEntry as PulseSurveyEntry$1, PulseSurveyRating, ResolvedAction, ResolvedAction as ResolvedAction$1, SessionIdleNotification, SigilEntry, SigilKind, SigilPrefix, SigilProvider, SigilSource, TranscriptMessage, createBuiltinHashtags, createFileProvider, createPluginInputRegistry, detectPluginExecutableSurface, discoverPlugins, dispatch, evaluatePluginTrust, grantPluginCapabilities, grantedPluginCapabilities, isPluginTrusted, parsePluginManifest, pluginTrustStorePath, readHighRiskCapabilities, resolveActions, sigilOf, trustPlugin, untrustPlugin } from "@x-otto/plugin";
+import { CommandRef, ContextMap, ContextMap as ContextMap$1, DiscoverPluginsOptions, DiscoveredPlugin, DiscoveredPlugin as DiscoveredPlugin$1, DispatchCaps, FeedbackIssueInput, FeedbackProvider, FileProviderOptions, HIGH_RISK_CAPABILITIES, MonitorEvent, PLUGIN_MANIFEST_FILENAME, POINT, PluginContext, PluginContributes, PluginExecutableSurface, PluginFileViewerEntry, PluginI18nRegistry, PluginInputRegistry, PluginInputRegistry as PluginInputRegistry$1, PluginLoadFailureReason, PluginManifest, PluginModule, PluginRendererEntry, PluginServiceNotification, PluginTrustVerdict, PluginTrustVerdict as PluginTrustVerdict$1, PulseSurveyEntry, PulseSurveyEntry as PulseSurveyEntry$1, PulseSurveyRating, ResolvedAction, ResolvedAction as ResolvedAction$1, SessionIdleNotification, SigilEntry, SigilKind, SigilPrefix, SigilProvider, SigilSource, TranscriptMessage, createBuiltinHashtags, createFileProvider, createPluginInputRegistry, detectPluginExecutableSurface, discoverPlugins, dispatch, evaluatePluginTrust, grantPluginCapabilities, grantPluginCapabilitiesWithVersion, grantedPluginCapabilities, grantedPluginCapabilitiesForVersion, isPluginTrusted, parsePluginManifest, pluginTrustStorePath, readHighRiskCapabilities, resolveActions, sigilOf, trustPlugin, untrustPlugin } from "@x-otto/plugin";
 import { ClaudeExecutableSurface, ClaudeHookBridgeDeps, ClaudeHooksConfig, ClaudeTrustVerdict, ExpandOptions, FileCommand, FileCommand as FileCommand$1, HookRunner, ProjectConfigGating, ProjectConfigTrustContext, WorkspaceTrustAction, WorkspaceTrustPromptDecision, claudeTrustStorePath, createClaudeHookBridgeHooks, defaultHookRunner, detectClaudeExecutableSurface, detectProjectConfigGating, discoverFileCommands, evaluateClaudeTrust, evaluateWorkspaceTrustPrompt, expandCommandBody, interpretPreToolUse, isProjectTrusted, isStrictProjectConfigEnabled, loadClaudeHooksConfig, matchesHookMatcher, parseClaudeHooks, parseDotMcpJson, resolveClaudeMcpServers, resolveProjectConfigTrusted, trustProject, untrustProject } from "@x-otto/claude-compat";
 import { McpClient, McpManager, McpServerConfig } from "@x-otto/mcp";
-import { SqliteSessionRepository } from "@x-otto/session";
+import { EntryRow, SessionEntry, SqliteSessionRepository } from "@x-otto/session";
 import { OrchestrationPattern, Orchestrator, RunSessionOptions } from "@x-otto/orchestrator";
 import * as _$_x_otto_setting0 from "@x-otto/setting";
 import { InstalledPluginEntry, Setting, SettingsManager } from "@x-otto/setting";
-import { AgentMessage, AgentTool, ClockPort, DescribeImagesPort, TraceEvent } from "@x-otto/agent";
 import { NotificationChannel, NotificationDispatcher, NotificationKind, NotificationKind as NotificationKind$1, PresenceTracker } from "@x-otto/notification";
 import * as _$_x_otto_workspace0 from "@x-otto/workspace";
 import { WorkspaceRef } from "@x-otto/workspace";
 import { WriteTodos } from "@x-otto/orchestration-contracts";
 import { FireOwnership, SCHEDULE_LEASE_MIGRATIONS, ScheduleRegistry, ScheduleStore, ScheduleSubscriber, ScheduledTask, ScheduledTask as ScheduledTask$1, ScheduledTaskInput, SchedulerDeps, SchedulerService, SchedulerService as SchedulerService$1, createLocalFireOwnership, createRemoteFireOwnership, createRemoteScheduleStore, createScheduleStore } from "@x-otto/schedule";
-import { ContentType, GitUpgradeCheckResult, InstallManager, InstallOptions, InstallProgress, InstallResult, InstallScope, InstallScope as InstallScope$1, InstallSourceMetadata, InstalledItem, ListInstalledOptions, LoadedRegistry, ParsedRegistry, PostInstallContext, PostInstallResult, ProgressPhase, RegistryClient, RegistryEntry, RegistrySourceConfig, ResolvedSource, SourceType, UninstallOptions, UninstallResult, UninstallTarget, UpgradeCheckOptions, UpgradeCheckResult, VersionInfo, builtinOfficialSource, checkArchiveBomb, checkGitUpgrades, checkUpgrades, cleanTempDir, createArchive, createTempDir, detectUninstallTarget, extractArchive, listInstalledItems, parseRegistry, scanInstalledVersions, uninstall, validateExtractedPaths } from "@x-otto/install";
 import * as _$_x_otto_interchange0 from "@x-otto/interchange";
 import { A2uiComponent, AgentTool as AgentTool$1, GrillAnswer, GrillQuestion, PluginInputRegistry as PluginInputRegistry$2, PluginPerfMetricResult, PluginPerfMetricResult as PluginPerfMetricResult$1, SigilResolver } from "@x-otto/interchange";
+import { ContentType, GitUpgradeCheckResult, InstallManager, InstallOptions, InstallProgress, InstallResult, InstallScope, InstallScope as InstallScope$1, InstallSourceMetadata, InstalledItem, ListInstalledOptions, LoadedRegistry, ParsedRegistry, PostInstallContext, PostInstallResult, ProgressPhase, RegistryClient, RegistryEntry, RegistrySourceConfig, ResolvedSource, SourceType, UninstallOptions, UninstallResult, UninstallTarget, UpgradeCheckOptions, UpgradeCheckResult, VersionInfo, builtinOfficialSource, checkArchiveBomb, checkGitUpgrades, checkUpgrades, cleanTempDir, createArchive, createTempDir, detectUninstallTarget, extractArchive, listInstalledItems, parseRegistry, scanInstalledVersions, uninstall, validateExtractedPaths } from "@x-otto/install";
 
 //#region src/plugin/plugin-health-tracker.d.ts
 /** Plugin health tracker: crash/restart/hang detection + circuit breaker. */
@@ -582,8 +582,17 @@ declare class AgentJobService {
   dispose(): void;
   private onRunComplete;
   private onRunFailed;
-  /** 把作业产物 apply 到主仓（带冲突检测；冲突不强改）。 */
-  apply(jobId: string): ApplyOutcome;
+  /**
+   * 把作业产物 apply 到主仓（带冲突检测；冲突不强改）。
+   *
+   * 自主 apply 闸（governance/apply-policy）：本方法是人手 `/job apply` 触发的落地路径，默认
+   * origin='user'（人即闸）——L0 默认策略下 decideApply 恒返 advise，照常 applyDiff，行为与
+   * 接入前逐字节一致。未来自主 apply 回路传 origin='main'/'plugin' 时：触治理禁区（铁律）返
+   * forbid，本方法拒绝落地并回明确错误；其余 verdict（gate/advise/auto）仍走 applyDiff。
+   */
+  apply(jobId: string, opts?: {
+    origin?: ApplySignals['origin'];
+  }): ApplyOutcome;
   /**
    * 撤销一次已 apply 的作业改动（反向 diff，check-first 不强撤）。
    * 工作树自 apply 后漂移 → 返回 partial + 冲突路径，不强撤。撤成则该 diff 不再可 revert。
@@ -598,6 +607,25 @@ declare class AgentJobService {
 declare function createToolGuidanceHook(toolRegistry: ToolRegistry, getPreset: () => 'minimal' | 'standard' | 'full'): HookSpec;
 //#endregion
 //#region src/hooks/lesson-injection.d.ts
+interface GovernanceDecision {
+  key: string;
+  id: string;
+  scope: 'workspace' | 'local';
+  class: 'norm' | 'fact' | 'case' | 'ephemeral';
+  subclass?: string;
+  state: string;
+  supersededBy?: string;
+}
+/** RFC-327 M3-03/M3-04：lesson 注入 hooks 的可选接线点。 */
+interface LessonInjectionHooksOptions {
+  /**
+   * governance plan 注入点（测试/宿主用）——缺省从仓库固定路径加载。
+   * 传空 Map 即模拟 plan 缺失 → relevant-hints 启用安全默认（而非关闭）。
+   */
+  governanceDecisions?: ReadonlyMap<string, GovernanceDecision>;
+  /** 进化信号出口——relevantHitCount 消费投影（只读真源，不双写，R3'）。缺省不投影。 */
+  evolutionSignals?: EvolutionSignalSink;
+}
 /**
  * `localLearningStore`（RFC-164 M164-1 D3）：机器特定经验（scope='local'）的独立 store。
  *
@@ -606,7 +634,7 @@ declare function createToolGuidanceHook(toolRegistry: ToolRegistry, getPreset: (
  * local pack 仍待后续里程碑落地，因此 local lessons 暂保留为独立 legacy block，不与可提交
  * workspace pack 混合，避免破坏 RFC-164 local-only 语义。
  */
-declare function createLessonInjectionHooks(learningStore: OperationalLearningStore, promptManager: PromptManager, localLearningStore?: OperationalLearningStore): HookSpec[];
+declare function createLessonInjectionHooks(learningStore: OperationalLearningStore, promptManager: PromptManager, localLearningStore?: OperationalLearningStore, options?: LessonInjectionHooksOptions): HookSpec[];
 //#endregion
 //#region src/hooks/skill-catalog-injection.d.ts
 declare function createSkillCatalogInjectionHooks(registry: SkillRegistry): HookSpec[];
@@ -1781,7 +1809,7 @@ interface PluginModuleManagerDeps {
   /** RFC-105 D9：是否对声明了 `tools` 能力的插件启用 worker 隔离加载（默认 true——隔离）。 */
   useIsolatedLoading?: boolean;
   /** RFC-153 D3：插件加载/编译/工厂失败的旁路通知（可选，不传则不记录健康度）。 */
-  onPluginLoadError?: (pluginId: string, message: string) => void;
+  onPluginLoadError?: (pluginId: string, message: string, reason: PluginLoadFailureReason) => void;
   workspaceDir: string;
   activePlugins: () => DiscoveredPlugin$1[];
   /**
@@ -1849,6 +1877,13 @@ interface PluginModuleManagerDeps {
   /** RFC-287 M3：工作区稳定标识（service 是 per-workspace 一实例）。缺省 'default'（storageDirFor 兜底）；
    *  RFC-303 M5 复用同一字段做 scoped persistence 的 workspaceKey 来源，惰性未就位时用 DEFAULT_WORKSPACE_KEY 兜底。 */
   getWorkspaceKey?: () => string | undefined;
+  /**
+   * RFC-327 修订 D2（M2）：双平面注册边界——进程级 HostRegistry（可选）。
+   * 注入后插件在 reload 时按 manifest plane 分桶注册（host 平面 / PRESET workspace 格），
+   * 含 R6' 版本绑定与 M1/M2 汇合项（waterfall 贡献归 PRESET workspace 格）；插件
+   * removed/changed/停用时撤销对应条目。未注入 = 平面注册不接线（既有行为不变）。
+   */
+  planeRegistry?: _$_x_otto_runtime0.HostRegistry;
   callMcpTool: (server: string, tool: string, params?: Record<string, unknown>) => Promise<{
     content: {
       type: string;
@@ -1945,6 +1980,24 @@ declare class PluginModuleManager {
   private callOnDeactivate;
   /** 撤销全部轴上一轮的注册（cleanup() 进程退出路径用）。 */
   private unregisterAllAxes;
+  /**
+   * RFC-327 修订 D2（M2）：按 manifest plane 分桶注册插件平面条目（T-327-M2-04/06）。
+   *
+   * 归属决策（M1/M2 汇合项 T-327-M2-06 定案）：
+   * - 插件身份条目（kind:'plugin'）：manifest `plane:'host'` → host 平面
+   *   （`host.register()`）；`plane:'preset'`（缺省）→ PRESET workspace 格
+   *   （`workspace.preset.register()`，workspaceKey 由格盖章——插件生命周期是
+   *   workspace 维度，service 是 per-workspace 一实例）。
+   * - waterfall 贡献条目（kind:'waterfall'）：M1 的 PluginHooks.waterfall 是插件
+   *   贡献，经 PRESET 的 workspace 格注册（不随会话 dispose 清理——插件贡献的
+   *   生命周期是 workspace 维度），随插件启用/停用清理（撤销在 unregisterPluginAxes）。
+   *
+   * R6'（版本绑定）：条目携带 pluginVersion（manifest.version）；注册前先
+   * revalidatePlugin 检出上一轮残留的版本漂移条目（脏插件/撤销失败等异常路径——
+   * 正常 reload 走 unregister→register 全量替换，无漂移残留），warn 提示需重新
+   * 评估白名单（trust 不跨版本自动存续）。
+   */
+  private registerPluginPlaneEntries;
   /**
    * RFC-216 D2：撤销**指定插件**在全部轴上一轮的注册（差量 reload 的 removed/changed 分支）。
    *
@@ -1996,6 +2049,119 @@ declare class PluginModuleManager {
   cleanup(): Promise<void>;
 }
 //#endregion
+//#region src/trajectory-capture.d.ts
+type TrajectoryEventKind = 'turn.start' | 'user.message' | 'assistant.message' | 'tool.call' | 'tool.result' | 'compaction' | 'signal';
+/** 每行一个轨迹事件（JSONL 追加式、不可变、seq 单调可回放排序）。 */
+interface TrajectoryRecord {
+  sessionId: string;
+  /** 轨迹事件单调序号（0 起；按 session_entries 序 + 派生序展开）。 */
+  seq: number;
+  /** 事件原始时刻（数据派生：entry.timestamp / signal.at）。 */
+  at: number;
+  kind: TrajectoryEventKind;
+  /** turn 边界编号（0 起；user 消息开新 turn）。signal/compaction 不带。 */
+  turnIndex?: number;
+  text?: string;
+  model?: string;
+  usage?: {
+    input: number;
+    output: number;
+  };
+  stopReason?: string;
+  toolCallId?: string;
+  toolName?: string;
+  arguments?: Record<string, unknown>;
+  isError?: boolean;
+  summary?: string;
+  boundaryId?: string;
+  compactedCount?: number;
+  signalKind?: string;
+  key?: string;
+  value?: number;
+  detail?: Record<string, unknown>;
+}
+interface TrajectoryCaptureInput {
+  sessionId: string;
+  entries: ReadonlyArray<SessionEntry<AgentMessage>>;
+  /**
+   * 进化信号全集（跨会话）。内部按 sessionId 过滤做 turn 级质量标注联结
+   * （RFC-385 D4 方案 A：EvolutionSignalRecord.sessionId）。
+   */
+  signals?: ReadonlyArray<EvolutionSignalRecord>;
+}
+declare function captureTrajectory(input: TrajectoryCaptureInput): TrajectoryRecord[];
+//#endregion
+//#region src/trajectory-export.d.ts
+/** JSONL 输出端口（与 Node `Writable` 结构兼容的最小面）。 */
+interface TrajectoryOutput {
+  write(chunk: string): unknown;
+}
+/** 脱敏监听器：undefined = 抑制；抛异常 = 抑制（fail-closed）；返回 record = 替换。 */
+type TrajectoryRedactFn = (record: TrajectoryRecord) => TrajectoryRecord | undefined;
+interface TrajectoryExportInput {
+  records: ReadonlyArray<TrajectoryRecord>;
+  redact?: TrajectoryRedactFn;
+  output: TrajectoryOutput;
+}
+interface TrajectoryExportResult {
+  /** 实际写出的行数（被 redaction 抑制的不计）。 */
+  written: number;
+  /** 被 redaction 抑制的行数（undefined 返回或抛异常）。 */
+  suppressed: number;
+}
+/**
+ * 把轨迹记录流式写成 JSONL（每行一个事件）。
+ *
+ * 纯函数（对 records/output 只读；排序用副本，不原地改写输入）。不直呼 Date.now/
+ * Math.random/randomUUID——序列化本身无时钟需求。
+ */
+declare function exportTrajectory(input: TrajectoryExportInput): TrajectoryExportResult;
+/** 会话读取端口（导出所需的两个仓储原语；SqliteSessionRepository 结构满足）。 */
+interface TrajectorySessionReadPort {
+  loadEntries(sessionId: string, sinceSeq?: number): Promise<EntryRow[]>;
+  getEntryCount(sessionId: string): Promise<number>;
+}
+/**
+ * 快照有界选择（并发一致性核心纯函数）：只保留 `sinceSeq < seq < upperSeq` 的行。
+ * `seq >= upperSeq` 是导出开始后被并发 append 的超界事件，归下一批。
+ */
+declare function selectTrajectoryEntries(rows: ReadonlyArray<EntryRow>, sinceSeq: number | undefined, upperSeq: number): EntryRow[];
+interface TrajectorySessionExportInput {
+  sessionId: string;
+  repo: TrajectorySessionReadPort;
+  /** 增量游标：仅导出 seq > sinceSeq 的条目（缺省 = 全量）。 */
+  sinceSeq?: number;
+  redact?: TrajectoryRedactFn;
+  output: TrajectoryOutput;
+  /** 进化信号（内存态）；缺省 = 空（EvolutionSignalStore 未持久化时无会话信号）。 */
+  signals?: ReadonlyArray<EvolutionSignalRecord>;
+}
+interface TrajectorySessionExportResult extends TrajectoryExportResult {
+  /** 快照 seq 上界（= 导出开始时的 next_seq）；seq >= upperSeq 归下一批。 */
+  upperSeq: number;
+  /** 本次实际导出的 session_entries 行数（快照有界后）。 */
+  entryCount: number;
+}
+/**
+ * 从会话仓储读 entries → capture → export 的完整管道（on-demand 导出主路径）。
+ *
+ * 并发一致性顺序（先快照后裁剪）：先 `getEntryCount` 取上界，再 `loadEntries`，再
+ * `selectTrajectoryEntries` 裁掉超界行——即使 load 期间有并发 append，本次也不导出
+ * 半截/超界事件（归下一批）。
+ */
+declare function exportTrajectoryFromSession(input: TrajectorySessionExportInput): Promise<TrajectorySessionExportResult>;
+//#endregion
+//#region src/app/app-export.d.ts
+/** 活 App 导出的结果：既有管线结果 + output 缺省时收集到内存的导出行。 */
+interface AppTrajectoryExportResult extends TrajectorySessionExportResult {
+  /** output 缺省时收集到内存的 JSONL 导出行（每行一个事件，含换行）。显式传 output 时 undefined。 */
+  lines?: string[];
+}
+interface AppTrajectoryExportOptions {
+  redact?: TrajectoryRedactFn;
+  output?: TrajectoryOutput;
+}
+//#endregion
 //#region src/app/plugin-provider-manager.d.ts
 /** PluginProviderManager 依赖面（同 PluginModuleManager 的 DI 范式，M100）。 */
 interface PluginProviderManagerDeps {
@@ -2007,6 +2173,16 @@ interface PluginProviderManagerDeps {
   activePlugins: () => DiscoveredPlugin$1[];
   /** RFC-124 C1/C2：信任门拒绝时的结构化告警（同 PluginModuleManagerDeps.logger 范式）。 */
   logger: Logger;
+  /**
+   * 08-13 终局复核 B1 扩展：声明式 provider/oauth 装载拒绝的旁路通知（可选），宿主据此
+   * emit `plugin.load-failed`（reason='provider-rejected'）。与 PluginModuleManagerDeps.
+   * onPluginLoadError 同范式。
+   */
+  onProviderRejected?: (failure: {
+    pluginId: string;
+    id: string;
+    reason: string;
+  }) => void;
 }
 /**
  * 插件声明式 provider（`contributes.providers`）的加载/卸载单源（RFC-105 M105-2-03b）。
@@ -2249,6 +2425,13 @@ declare class App implements AppContext, SessionPort, ModelPort, PermissionPort,
   readonly settings: SettingsManager;
   readonly toolRegistry: ToolRegistry;
   readonly hookRegistry: HookRegistry;
+  /**
+   * RFC-327 修订 D2（M2）：双平面注册边界——进程级 HostRegistry（生命周期=进程）。
+   * App 构造期建（对齐 app-builder.ts Phase 7 插件装载处）：host 平面注册 + PRESET
+   * workspace 格（workspace 挂载时建，start() workspaceRef 就位）+ PRESET 会话格
+   * （runtime 会话池在会话创建时派生，会话 dispose 清理）。stop() 时 dispose 清空。
+   */
+  readonly planeRegistry: HostRegistry;
   readonly providerRegistry: ProviderRegistry;
   /** RFC-148 D2b：Wire 协议实现注册表（key space = wireApi，与 providerRegistry 职责正交）。 */
   readonly wireProtocolRegistry: WireProtocolRegistry;
@@ -2474,6 +2657,13 @@ declare class App implements AppContext, SessionPort, ModelPort, PermissionPort,
    * registry 客户端住在 cli 侧，coding 不反向依赖 cli。缺省 → 该工具不注册。
    */
   searchEcosystem?: SearchEcosystem;
+  /**
+   * RFC-327 M3（终局 review P1）：进化观测层统一出口——进程级单例 EvolutionSignalStore。
+   * 经 registerHooks → createLessonInjectionHooks 第四参注入 lesson-relevant-hints 投影；
+   * capability_gap recorder 注入 tool-callbacks。消费侧（内化决策/训练语料）缓议。
+   * RFC-388 M1：构造期接 SignalLog 持久化端口。
+   */
+  readonly evolutionSignals: EvolutionSignalStore;
   readonly notificationDispatcher: NotificationDispatcher;
   readonly presenceTracker: PresenceTracker;
   private followUpPendingProbe?;
@@ -2557,6 +2747,10 @@ declare class App implements AppContext, SessionPort, ModelPort, PermissionPort,
   private readonly pluginTopology;
   /** 插件代码模块（plugin.ts）的加载/接线/卸载——三段 computed 状态 + reload + cleanup（ARCH-083-01）。 */
   readonly pluginModuleManager: PluginModuleManager;
+  /** capability_gap 跨会话聚合存储（recorder 底层实现）。 */
+  readonly capabilityGapStore: CapabilityGapReportStore;
+  /** RFC-327 M3-02 + 08-13 B2：缺口计数 + monitor 桥接（构造器接线，工厂见 app-evolution-wiring）。 */
+  readonly capabilityGapRecorder: CapabilityGapReportRecorder;
   /** 插件声明式 provider（`contributes.providers`）的加载/卸载单源（RFC-105 M105-2-03b）。 */
   readonly pluginProviderManager: PluginProviderManager;
   /** 五轴能力热重载编排器（RFC-107 D4）。 */
@@ -2772,6 +2966,8 @@ declare class App implements AppContext, SessionPort, ModelPort, PermissionPort,
   removeSession(id: string): Promise<boolean>;
   /** 委托 app-session-export.ts（RFC-199 M1 提取）。 */
   exportSessionArchive(sessionId: string, outPath: string): Promise<SessionArchiveExport>;
+  /** RFC-388 M2：活 App 内联轨迹导出（委托 app-export.ts；output 缺省=内存收集 lines）。 */
+  exportTrajectory(sessionId: string, options?: AppTrajectoryExportOptions): Promise<AppTrajectoryExportResult>;
   /** 委托 app-session-methods.ts。 */
   archiveSession(id: string): Promise<boolean>;
   /** 委托 app-session-methods.ts。 */
@@ -3217,9 +3413,11 @@ declare function rewriteArtifactSourceHash(pluginDir: string, contentDir?: strin
  */
 declare function loadPluginModule(plugin: DiscoveredPlugin$1, ctx: PluginContext,
 /** RFC-153 D3：加载/编译/工厂失败的旁路通知（可选，宿主层注入），供
- *  `PluginHealthTracker.recordError` 写入。不改变现有 fail-soft 返回 null 的控制流。 */
+ *  `PluginHealthTracker.recordError` 写入。不改变现有 fail-soft 返回 null 的控制流。
+ *  reason 为结构化失败分类（08-13 终局 review B1）——本路径全部失败点均为
+ *  'module-error'，宿主层据此进入 `plugin.load-failed` monitor 事件面。 */
 
-onLoadError?: (pluginId: string, message: string) => void): Promise<LoadedPluginModule | null>;
+onLoadError?: (pluginId: string, message: string, reason: PluginLoadFailureReason) => void): Promise<LoadedPluginModule | null>;
 //#endregion
 //#region src/plugin/artifact-portability.d.ts
 /**
@@ -3565,5 +3763,5 @@ interface PluginThemePresetEntry {
  */
 declare function collectPluginThemePresets(plugins: readonly DiscoveredPlugin$1[]): PluginThemePresetEntry[];
 //#endregion
-export { AgentJobService, type AgentJobStatus, type AgentObservationSnapshot, AgentSession, type AgentSessionInfo, type AgentSessionJob, type AgentSessionOptions, App, type AppContext, type AppOptions, type ApplyOutcome, type AuthorizePluginOptions, type AuthorizePluginResult, type BackgroundProcess, type BuiltinResolverDeps, type Checkpoint, type CheckpointData, type ClaudeExecutableSurface, type ClaudeHookBridgeDeps, type ClaudeHooksConfig, type ClaudeTrustVerdict, CodingSessionPool, type CommandRef, type CompilePanelsResult, type ContentType, type ContextMap, DEFAULT_WORKSPACE_KEY, type DiscoverPluginsOptions, type DiscoveredPlugin, type DispatchCaps, type ExpandOptions, type ExpandSigilChipsOptions, type ExtensionApplies, type ExtensionCategory, type ExtensionItem, ExtensionManager, type FileCommand, type FileEntrySnapshot, type FileProviderOptions, type FileSnapshot, type FireOwnership, type GitUpgradeCheckResult, HIGH_RISK_CAPABILITIES, type HookRunner, INDUCTOR_PLUGIN_ID, InstallManager, type InstallOptions, type InstallPluginFromPackageOptions, type InstallPluginResult, type InstallProgress, type InstallResult, type InstallScope, type InstallSourceMetadata, type InstalledItem, type ListInstalledOptions, type LoadedRegistry, type MemoryPressureLevel, type MemorySample, type NotificationKind, PLUGIN_LOG_TAIL_LINES, PLUGIN_MANIFEST_FILENAME, POINT, type ParsedRegistry, type PluginConsistencyWarning, type PluginContributes, type PluginExecutableSurface, type PluginHealthStats, type PluginInputRegistry, type PluginLogEntry, type PluginManifest, type PluginPerfMetricResult, type PluginThemePresetEntry, type PluginTrustVerdict, type PortabilityViolations, type PostInstallContext, type PostInstallResult, type ProgressPhase, type ProjectConfigGating, type ProjectConfigTrustContext, type PromptOptions, type PulseSurveyEntry, type PulseSurveyRating, RegistryClient, type RegistryEntry, type RegistrySourceConfig, type ReplayLevel, type ResolvedAction, type ResolvedSource, type RestoreMode, SANDBOX_ESCALATION_MARKER, SCHEDULE_LEASE_MIGRATIONS, type SandboxRunner, type SandboxToolCall, type SandboxToolResult, SandboxUnavailableError, ScheduleRegistry, type ScheduleStore, type ScheduledTask, type ScheduledTaskInput, type SchedulerDeps, SchedulerService, type ServiceHostPort, type SessionArchiveExport, type SessionPoolOptions, type SigilEntry, type SigilKind, type SigilPrefix, type SigilProvider, SigilResolverRegistry, type SigilSource, type SkillLoopStatus, type SourceType, type StorageHostBinding, type StorageLocation, type StorageOptions, type TracebackView, type UninstallOptions, type UninstallResult, type UninstallTarget, type UpgradeCheckOptions, type UpgradeCheckResult, type VersionInfo, type WorkspaceTrustAction, type WorkspaceTrustPromptDecision, apiCredentialId, assertPortableArtifact, authorizePlugin, buildExtensionContext, buildMemoryStore, buildPluginCliRegistry, builtinOfficialSource, captureFiles, checkArchiveBomb, checkGitUpgrades, checkPluginConsistency, checkUpgrades, claudeTrustStorePath, cleanTempDir, collectPluginPerfMetrics, collectPluginThemePresets, compilePluginModule, compilePluginPanels, computeSourceHash, createApp, createArchive, createBuiltinHashtags, createBuiltinResolvers, createClaudeHookBridgeHooks, createFileProvider, createFrontendPort, createLessonInjectionHooks, createLocalFireOwnership, createPluginInputRegistry, createRemoteFireOwnership, createRemoteScheduleStore, createScheduleStore, createSessionStableInjectionHooks, createSkillCatalogInjectionHooks, createTempDir, createToolGuidanceHook, defaultHookRunner, defaultMaxToolTurnExtensions, executePostInstall as defaultPostInstallExecutor, deriveSessionTitle, detectClaudeExecutableSurface, detectPluginExecutableSurface, detectProjectConfigGating, detectUninstallTarget, discoverFileCommands, discoverPlugins, dispatch, evaluateClaudeTrust, evaluatePluginTrust, evaluateWorkspaceTrustPrompt, expandCommandBody, expandSigilChips, extractArchive, findPluginCliNameConflict, findPortabilityViolations, findWorkspaceRoot, getEsbuildModule, getIncompleteSubagentReason, getLastAssistantText, globalAgentJobRegistry, globalAgentObservability, globalProcessRegistry, grantPluginCapabilities, grantedPluginCapabilities, hasPortabilityViolations, inspectPluginAuthorization, installEsbuildExitHook, installEsbuildSignalBridges, installPluginFromDir, installPluginFromPackage, installPluginHostExternals, interpretPreToolUse, isInternalDelegatedSession, isPluginTrusted, isProjectTrusted, isStrictProjectConfigEnabled, listInstalledItems, loadClaudeHooksConfig, loadPluginModule, markEsbuildStarted, matchesHookMatcher, messagesFromSnapshot, openTarget, parseClaudeHooks, parseDotMcpJson, parsePluginManifest, parseRegistry, pluginTrustStorePath, purgePluginState, readHighRiskCapabilities, readPluginLogTail, readSkillLoopStatus, readTaskOutputTail, reconstructMessages, recordPluginInstalled, recordPluginUninstalled, removeInstalledPluginEntry, resolveActions, resolveClaudeMcpServers, resolveHostExternalPaths, resolvePackageDir, resolvePluginCliBin, resolvePluginMcpServers, resolveProjectConfigTrusted, resolveSessionTitle, restoreFiles, revokePluginAuthorization, rewriteArtifactSourceHash, runPluginScript, scanInstalledVersions, sigilOf, spawnPluginCli, stopEsbuildService, trustPlugin, trustProject, uninstall, untrustPlugin, untrustProject, upsertInstalledPluginEntry, validateExtractedPaths, withBuildTimeout };
+export { AgentJobService, type AgentJobStatus, type AgentObservationSnapshot, AgentSession, type AgentSessionInfo, type AgentSessionJob, type AgentSessionOptions, App, type AppContext, type AppOptions, type ApplyOutcome, type AuthorizePluginOptions, type AuthorizePluginResult, type BackgroundProcess, type BuiltinResolverDeps, type Checkpoint, type CheckpointData, type ClaudeExecutableSurface, type ClaudeHookBridgeDeps, type ClaudeHooksConfig, type ClaudeTrustVerdict, CodingSessionPool, type CommandRef, type CompilePanelsResult, type ContentType, type ContextMap, DEFAULT_WORKSPACE_KEY, type DiscoverPluginsOptions, type DiscoveredPlugin, type DispatchCaps, type ExpandOptions, type ExpandSigilChipsOptions, type ExtensionApplies, type ExtensionCategory, type ExtensionItem, ExtensionManager, type FileCommand, type FileEntrySnapshot, type FileProviderOptions, type FileSnapshot, type FireOwnership, type GitUpgradeCheckResult, HIGH_RISK_CAPABILITIES, type HookRunner, INDUCTOR_PLUGIN_ID, InstallManager, type InstallOptions, type InstallPluginFromPackageOptions, type InstallPluginResult, type InstallProgress, type InstallResult, type InstallScope, type InstallSourceMetadata, type InstalledItem, type ListInstalledOptions, type LoadedRegistry, type MemoryPressureLevel, type MemorySample, type NotificationKind, PLUGIN_LOG_TAIL_LINES, PLUGIN_MANIFEST_FILENAME, POINT, type ParsedRegistry, type PluginConsistencyWarning, type PluginContributes, type PluginExecutableSurface, type PluginHealthStats, type PluginInputRegistry, type PluginLogEntry, type PluginManifest, type PluginPerfMetricResult, type PluginThemePresetEntry, type PluginTrustVerdict, type PortabilityViolations, type PostInstallContext, type PostInstallResult, type ProgressPhase, type ProjectConfigGating, type ProjectConfigTrustContext, type PromptOptions, type PulseSurveyEntry, type PulseSurveyRating, RegistryClient, type RegistryEntry, type RegistrySourceConfig, type ReplayLevel, type ResolvedAction, type ResolvedSource, type RestoreMode, SANDBOX_ESCALATION_MARKER, SCHEDULE_LEASE_MIGRATIONS, type SandboxRunner, type SandboxToolCall, type SandboxToolResult, SandboxUnavailableError, ScheduleRegistry, type ScheduleStore, type ScheduledTask, type ScheduledTaskInput, type SchedulerDeps, SchedulerService, type ServiceHostPort, type SessionArchiveExport, type SessionPoolOptions, type SigilEntry, type SigilKind, type SigilPrefix, type SigilProvider, SigilResolverRegistry, type SigilSource, type SkillLoopStatus, type SourceType, type StorageHostBinding, type StorageLocation, type StorageOptions, type TracebackView, type TrajectoryCaptureInput, type TrajectoryEventKind, type TrajectoryExportInput, type TrajectoryExportResult, type TrajectoryOutput, type TrajectoryRecord, type TrajectoryRedactFn, type TrajectorySessionExportInput, type TrajectorySessionExportResult, type TrajectorySessionReadPort, type UninstallOptions, type UninstallResult, type UninstallTarget, type UpgradeCheckOptions, type UpgradeCheckResult, type VersionInfo, type WorkspaceTrustAction, type WorkspaceTrustPromptDecision, apiCredentialId, assertPortableArtifact, authorizePlugin, buildExtensionContext, buildMemoryStore, buildPluginCliRegistry, builtinOfficialSource, captureFiles, captureTrajectory, checkArchiveBomb, checkGitUpgrades, checkPluginConsistency, checkUpgrades, claudeTrustStorePath, cleanTempDir, collectPluginPerfMetrics, collectPluginThemePresets, compilePluginModule, compilePluginPanels, computeSourceHash, createApp, createArchive, createBuiltinHashtags, createBuiltinResolvers, createClaudeHookBridgeHooks, createFileProvider, createFrontendPort, createLessonInjectionHooks, createLocalFireOwnership, createPluginInputRegistry, createRemoteFireOwnership, createRemoteScheduleStore, createScheduleStore, createSessionStableInjectionHooks, createSkillCatalogInjectionHooks, createTempDir, createToolGuidanceHook, defaultHookRunner, defaultMaxToolTurnExtensions, executePostInstall as defaultPostInstallExecutor, deriveSessionTitle, detectClaudeExecutableSurface, detectPluginExecutableSurface, detectProjectConfigGating, detectUninstallTarget, discoverFileCommands, discoverPlugins, dispatch, evaluateClaudeTrust, evaluatePluginTrust, evaluateWorkspaceTrustPrompt, expandCommandBody, expandSigilChips, exportTrajectory, exportTrajectoryFromSession, extractArchive, findPluginCliNameConflict, findPortabilityViolations, findWorkspaceRoot, getEsbuildModule, getIncompleteSubagentReason, getLastAssistantText, globalAgentJobRegistry, globalAgentObservability, globalProcessRegistry, grantPluginCapabilities, grantPluginCapabilitiesWithVersion, grantedPluginCapabilities, grantedPluginCapabilitiesForVersion, hasPortabilityViolations, inspectPluginAuthorization, installEsbuildExitHook, installEsbuildSignalBridges, installPluginFromDir, installPluginFromPackage, installPluginHostExternals, interpretPreToolUse, isInternalDelegatedSession, isPluginTrusted, isProjectTrusted, isStrictProjectConfigEnabled, listInstalledItems, loadClaudeHooksConfig, loadPluginModule, markEsbuildStarted, matchesHookMatcher, messagesFromSnapshot, openTarget, parseClaudeHooks, parseDotMcpJson, parsePluginManifest, parseRegistry, pluginTrustStorePath, purgePluginState, readHighRiskCapabilities, readPluginLogTail, readSkillLoopStatus, readTaskOutputTail, reconstructMessages, recordPluginInstalled, recordPluginUninstalled, removeInstalledPluginEntry, resolveActions, resolveClaudeMcpServers, resolveHostExternalPaths, resolvePackageDir, resolvePluginCliBin, resolvePluginMcpServers, resolveProjectConfigTrusted, resolveSessionTitle, restoreFiles, revokePluginAuthorization, rewriteArtifactSourceHash, runPluginScript, scanInstalledVersions, selectTrajectoryEntries, sigilOf, spawnPluginCli, stopEsbuildService, trustPlugin, trustProject, uninstall, untrustPlugin, untrustProject, upsertInstalledPluginEntry, validateExtractedPaths, withBuildTimeout };
 //# sourceMappingURL=index.d.ts.map