npm - autosnippet - Versions diffs - 2.4.0 → 2.6.0 - Mend

autosnippet 2.4.0 → 2.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (29) hide show

package/bin/cli.js +35 -0
package/dashboard/dist/assets/{icons-B5rs8uNb.js → icons-rnn04CvH.js} +100 -85
package/dashboard/dist/assets/index-BBKa3Dgi.js +195 -0
package/dashboard/dist/assets/index-DLsECfzW.css +1 -0
package/dashboard/dist/assets/{react-markdown-Bp8u1wRC.js → react-markdown-CWxUbOf4.js} +1 -1
package/dashboard/dist/assets/{syntax-highlighter-C6bvFtpx.js → syntax-highlighter-CJ2drQQb.js} +1 -1
package/dashboard/dist/assets/{vendor-Cky7Jynh.js → vendor-f83ah6cm.js} +13 -13
package/dashboard/dist/index.html +6 -6
package/lib/cli/SetupService.js +30 -4
package/lib/core/gateway/Gateway.js +19 -4
package/lib/external/ai/AiProvider.js +94 -10
package/lib/external/mcp/McpServer.js +2 -1
package/lib/external/mcp/handlers/skill.js +76 -18
package/lib/external/mcp/tools.js +21 -0
package/lib/http/HttpServer.js +4 -0
package/lib/http/routes/search.js +5 -3
package/lib/http/routes/skills.js +108 -0
package/lib/infrastructure/audit/AuditStore.js +18 -0
package/lib/injection/ServiceContainer.js +8 -2
package/lib/service/chat/ChatAgent.js +281 -33
package/lib/service/chat/ConversationStore.js +377 -0
package/lib/service/chat/Memory.js +40 -10
package/lib/service/chat/tools.js +104 -7
package/lib/service/skills/EventAggregator.js +187 -0
package/lib/service/skills/SignalCollector.js +524 -0
package/lib/service/skills/SkillAdvisor.js +323 -0
package/package.json +1 -1
package/dashboard/dist/assets/index-0YzLw2ga.css +0 -1
package/dashboard/dist/assets/index-B9py3ybr.js +0 -154

package/dashboard/dist/index.html CHANGED Viewed

@@ -5,14 +5,14 @@
     <link rel="icon" type="image/svg+xml" href="/vite.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>AutoSnippet Dashboard</title>
-    <script type="module" crossorigin src="/assets/index-B9py3ybr.js"></script>
+    <script type="module" crossorigin src="/assets/index-BBKa3Dgi.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/yaml-qRaU8Ldn.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-Cky7Jynh.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-f83ah6cm.js">
     <link rel="modulepreload" crossorigin href="/assets/axios-C0Zqfgkc.js">
-    <link rel="modulepreload" crossorigin href="/assets/icons-B5rs8uNb.js">
-    <link rel="modulepreload" crossorigin href="/assets/syntax-highlighter-C6bvFtpx.js">
-    <link rel="modulepreload" crossorigin href="/assets/react-markdown-Bp8u1wRC.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-0YzLw2ga.css">
+    <link rel="modulepreload" crossorigin href="/assets/icons-rnn04CvH.js">
+    <link rel="modulepreload" crossorigin href="/assets/syntax-highlighter-CJ2drQQb.js">
+    <link rel="modulepreload" crossorigin href="/assets/react-markdown-CWxUbOf4.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-DLsECfzW.css">
   </head>
   <body>
     <div id="root"></div>

package/lib/cli/SetupService.js CHANGED Viewed

@@ -623,11 +623,37 @@ export class SetupService {
     let content = existsSync(giPath) ? readFileSync(giPath, 'utf8') : '';
     let changed = false;
-    // ── 必须忽略：.autosnippet/（运行时缓存、DB、向量索引）──
-    if (!content.includes('.autosnippet/')) {
-      content += `\n# AutoSnippet 运行时缓存（不入库）\n.autosnippet/\n`;
+    // ── v2.4.0 迁移：旧格式 ".autosnippet/" → 新格式 ".autosnippet/*" ──
+    // 旧格式会忽略整个目录（git 不遍历内部），导致 skills/ 和 config.json 无法被 negation 恢复
+    // 新格式忽略目录内所有文件，允许 negation 模式取消特定子路径
+    if (content.includes('.autosnippet/') && !content.includes('.autosnippet/*')) {
+      content = content.replace(
+        /^\.autosnippet\/$/m,
+        '.autosnippet/*',
+      );
       changed = true;
-      console.log('   ✅ .gitignore += .autosnippet/');
+      console.log('   ✅ .gitignore: .autosnippet/ → .autosnippet/*（升级为精细忽略）');
+    }
+    // ── 必须忽略：.autosnippet/*（运行时缓存、DB、向量索引、memory） ──
+    if (!content.includes('.autosnippet/') && !content.includes('.autosnippet/*')) {
+      content += `\n# AutoSnippet 运行时缓存（不入库）\n.autosnippet/*\n`;
+      changed = true;
+      console.log('   ✅ .gitignore += .autosnippet/*');
+    }
+    // ── 必须跟踪：.autosnippet/config.json（项目配置） ──
+    if (!content.includes('!.autosnippet/config.json')) {
+      content += `!.autosnippet/config.json\n`;
+      changed = true;
+      console.log('   ✅ .gitignore += !.autosnippet/config.json');
+    }
+    // ── 必须跟踪：.autosnippet/skills/（项目级 Skill 文档） ──
+    if (!content.includes('!.autosnippet/skills/')) {
+      content += `!.autosnippet/skills/\n`;
+      changed = true;
+      console.log('   ✅ .gitignore += !.autosnippet/skills/');
     }
     // ── 必须跟踪：AutoSnippet/（知识库子仓库）──

package/lib/core/gateway/Gateway.js CHANGED Viewed

@@ -22,6 +22,7 @@ export class Gateway extends EventEmitter {
     this.constitutionValidator = null;
     this.permissionManager = null;
     this.auditLogger = null;
+    this.eventBus = null; // 可选：外部注入 EventBus 实例
   }
   /**
@@ -219,7 +220,7 @@ export class Gateway extends EventEmitter {
   async auditSuccess(context, result) {
     if (!this.auditLogger) return;
-    await this.auditLogger.log({
+    const entry = {
       requestId: context.requestId,
       actor: context.actor,
       action: context.action,
@@ -227,7 +228,14 @@ export class Gateway extends EventEmitter {
       result: 'success',
       duration: Date.now() - context.startTime,
       context: { session: context.session },
-    });
+    };
+    await this.auditLogger.log(entry);
+    // 向 EventBus 发送 Gateway 操作完成事件（供 SignalCollector 等监听）
+    if (this.eventBus) {
+      this.emit('gateway:action:completed', { ...entry, timestamp: Date.now() });
+      this.eventBus.emit('gateway:action:completed', { ...entry, timestamp: Date.now() });
+    }
   }
   /**
@@ -236,7 +244,7 @@ export class Gateway extends EventEmitter {
   async auditFailure(context, error) {
     if (!this.auditLogger) return;
-    await this.auditLogger.log({
+    const entry = {
       requestId: context.requestId,
       actor: context.actor,
       action: context.action,
@@ -245,7 +253,14 @@ export class Gateway extends EventEmitter {
       error: error.message,
       duration: Date.now() - context.startTime,
       context: { session: context.session },
-    });
+    };
+    await this.auditLogger.log(entry);
+    // 向 EventBus 发送 Gateway 操作失败事件
+    if (this.eventBus) {
+      this.emit('gateway:action:failed', { ...entry, timestamp: Date.now() });
+      this.eventBus.emit('gateway:action:failed', { ...entry, timestamp: Date.now() });
+    }
   }
   /**

package/lib/external/ai/AiProvider.js CHANGED Viewed

@@ -11,6 +11,13 @@ export class AiProvider {
     this.timeout = config.timeout || 300_000; // 5min
     this.maxRetries = config.maxRetries || 3;
     this.name = 'abstract';
+    // ── CircuitBreaker 状态 ──
+    this._circuitState = 'CLOSED';       // 'CLOSED' | 'OPEN' | 'HALF_OPEN'
+    this._circuitFailures = 0;           // 连续失败计数
+    this._circuitThreshold = config.circuitThreshold || 5;  // 触发熔断的连续失败次数
+    this._circuitOpenedAt = 0;           // 熔断打开时间
+    this._circuitCooldownMs = 30_000;    // 初始冷却 30 秒
   }
   /**
@@ -472,11 +479,25 @@ ${items}`;
   /**
    * 修复被截断的 JSON 数组 — 回收已完成的对象
-   * 策略：找到最后一个完整的 {...} 对象，截断后闭合数组
+   * 策略 1（主路径）: 字符级解析找到最后一个完整的顶层 {...} 对象
+   * 策略 2（回退路径）: 正则 + 渐进 JSON.parse 尝试（应对代码段中未转义引号导致 inString 追踪失效）
    */
   _repairTruncatedArray(text) {
-    // 找到最后一个完整对象的结尾 "},"  或  "}\n" 或直接 "}"
-    // 从后向前搜索最后一个顶层 "}" 后跟 "," 或空白
+    // ── 策略 1：字符级深度追踪 ──
+    const charResult = this._repairByCharTracking(text);
+    if (charResult) return charResult;
+    // ── 策略 2：正则回退 — 找所有 "}," 或 "}\n" 位置，从后向前逐一尝试 JSON.parse ──
+    const regexResult = this._repairByRegexFallback(text);
+    if (regexResult) return regexResult;
+    return null;
+  }
+  /**
+   * 字符级深度追踪修复（原逻辑，处理标准 JSON）
+   */
+  _repairByCharTracking(text) {
     let depth = 0;
     let inString = false;
     let escape = false;
@@ -500,13 +521,39 @@ ${items}`;
     }
     if (lastCompleteObjEnd === -1) return null;
+    return this._tryRepairAt(text, lastCompleteObjEnd);
+  }
-    // 截取到最后一个完整对象，闭合数组
-    let repaired = text.slice(0, lastCompleteObjEnd + 1);
+  /**
+   * 正则回退修复 — 不依赖 inString 追踪
+   * 寻找所有 "},\s*{" 或 "}\s*]" 边界，从后往前尝试 JSON.parse
+   */
+  _repairByRegexFallback(text) {
+    // 收集所有 "}" 后跟 "," 或空白的位置（可能是对象边界）
+    const candidates = [];
+    const re = /\}[\s,]*(?=\s*[\[{]|$)/g;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+      candidates.push(m.index); // "}" 的位置
+    }
+    // 从后往前尝试
+    for (let i = candidates.length - 1; i >= 0; i--) {
+      const result = this._tryRepairAt(text, candidates[i]);
+      if (result) return result;
+    }
+    return null;
+  }
+  /**
+   * 在指定位置截断并尝试闭合 JSON 数组
+   */
+  _tryRepairAt(text, endPos) {
+    let repaired = text.slice(0, endPos + 1);
     // 去掉尾逗号
     repaired = repaired.replace(/,\s*$/, '');
     repaired += ']';
-    // 修复尾逗号
+    // 修复尾逗号（对象/数组末尾多余逗号）
     repaired = repaired.replace(/,\s*([}\]])/g, '$1');
     try {
@@ -515,17 +562,40 @@ ${items}`;
         this._log('warn', `[extractJSON] Repaired truncated JSON array: recovered ${result.length} items from truncated response`);
         return result;
       }
-    } catch { /* repair failed */ }
+    } catch { /* this position didn't work, try next */ }
     return null;
   }
   /**
-   * 指数退避重试
+   * 指数退避重试 + 熔断器（受 Cline 三级错误恢复启发）
+   *
+   * 熔断器三态:
+   *   CLOSED  — 正常工作，计数连续失败
+   *   OPEN    — 连续 N 次失败，直接拒绝请求（快速失败），持续 cooldownMs
+   *   HALF_OPEN — 冷却期后尝试一次，成功则恢复，失败则重新 OPEN
+   *
+   * 这避免了 AI 服务宕机时无意义的重试风暴。
    */
   async _withRetry(fn, retries = this.maxRetries, baseDelay = 2000) {
+    // ── 熔断器检查 ──
+    if (this._circuitState === 'OPEN') {
+      const elapsed = Date.now() - (this._circuitOpenedAt || 0);
+      if (elapsed < (this._circuitCooldownMs || 30000)) {
+        const err = new Error(`AI 服务熔断中 (连续 ${this._circuitFailures} 次失败)，${Math.ceil(((this._circuitCooldownMs || 30000) - elapsed) / 1000)}s 后恢复`);
+        err.code = 'CIRCUIT_OPEN';
+        throw err;
+      }
+      // 冷却期结束 → HALF_OPEN
+      this._circuitState = 'HALF_OPEN';
+    }
     for (let attempt = 0; attempt <= retries; attempt++) {
       try {
-        return await fn();
+        const result = await fn();
+        // 成功 → 重置熔断器
+        this._circuitFailures = 0;
+        this._circuitState = 'CLOSED';
+        return result;
       } catch (err) {
         // 连接超时提示代理配置
         if (err.cause?.code === 'UND_ERR_CONNECT_TIMEOUT' || err.code === 'UND_ERR_CONNECT_TIMEOUT') {
@@ -535,7 +605,21 @@ ${items}`;
           }
         }
         const isRetryable = err.status === 429 || err.status === 503 || err.code === 'ECONNRESET';
-        if (attempt >= retries || !isRetryable) throw err;
+        if (attempt >= retries || !isRetryable) {
+          // 累计熔断失败计数
+          this._circuitFailures = (this._circuitFailures || 0) + 1;
+          if (this._circuitFailures >= (this._circuitThreshold || 5)) {
+            this._circuitState = 'OPEN';
+            this._circuitOpenedAt = Date.now();
+            // 逐级递增冷却时间: 30s → 60s → 120s（最大 5 分钟）
+            this._circuitCooldownMs = Math.min(
+              (this._circuitCooldownMs || 15000) * 2,
+              300_000,
+            );
+            this._log?.('warn', `[CircuitBreaker] OPEN — ${this._circuitFailures} consecutive failures, cooldown ${this._circuitCooldownMs / 1000}s`);
+          }
+          throw err;
+        }
         const delay = baseDelay * Math.pow(2, attempt) + Math.random() * 1000;
         await new Promise(r => setTimeout(r, delay));
       }

package/lib/external/mcp/McpServer.js CHANGED Viewed

@@ -143,10 +143,11 @@ export class McpServer {
       // Bootstrap 冷启动
       case 'autosnippet_bootstrap_knowledge': return bootstrapHandlers.bootstrapKnowledge(ctx, args);
       case 'autosnippet_bootstrap_refine':    return bootstrapHandlers.bootstrapRefine(ctx, args);
-      // Skills 加载 & 创建
+      // Skills 加载 & 创建 & 推荐
       case 'autosnippet_list_skills':         return skillHandlers.listSkills();
       case 'autosnippet_load_skill':          return skillHandlers.loadSkill(ctx, args);
       case 'autosnippet_create_skill':        return skillHandlers.createSkill(ctx, args);
+      case 'autosnippet_suggest_skills':      return skillHandlers.suggestSkills(ctx);
       default: throw new Error(`Unknown tool: ${name}`);
     }
   }

package/lib/external/mcp/handlers/skill.js CHANGED Viewed

@@ -20,27 +20,34 @@ const SKILLS_DIR = path.resolve(PROJECT_ROOT, 'skills');
 const PROJECT_SKILLS_DIR = path.resolve(PROJECT_ROOT, '.autosnippet', 'skills');
 /**
- * Skill 名称 → 摘要描述映射（用于 list_skills 返回）
+ * 解析 SKILL.md frontmatter 全部元数据
  *
- * 从 SKILL.md 的 frontmatter description 提取。
- * 如果解析失败，返回 Skill 名称本身。
+ * 返回 { description, createdBy, createdAt }，缺失字段为 null。
+ * 同时兼容旧格式（无 createdBy 的 SKILL.md）。
  */
-function _parseSkillSummary(skillName, baseDir = SKILLS_DIR) {
+function _parseSkillMeta(skillName, baseDir = SKILLS_DIR) {
   try {
     const content = fs.readFileSync(
       path.join(baseDir, skillName, 'SKILL.md'), 'utf8',
     );
-    // 提取 frontmatter 的 description 字段
-    const descMatch = content.match(/^description:\s*(.+?)(?:\n|$)/m);
-    if (descMatch) {
-      // 截断到第一句或 120 字符
-      const desc = descMatch[1].trim();
-      const firstSentence = desc.split(/\.\s/)[0];
-      return firstSentence.length < desc.length ? `${firstSentence}.` : desc.substring(0, 120);
+    const fmMatch = content.match(/^---\n([\s\S]*?)\n---/);
+    const meta = { description: skillName, createdBy: null, createdAt: null };
+    if (fmMatch) {
+      const fm = fmMatch[1];
+      const descMatch = fm.match(/^description:\s*(.+?)$/m);
+      if (descMatch) {
+        const desc = descMatch[1].trim();
+        const firstSentence = desc.split(/\.\s/)[0];
+        meta.description = firstSentence.length < desc.length ? `${firstSentence}.` : desc.substring(0, 120);
+      }
+      const cbMatch = fm.match(/^createdBy:\s*(.+?)$/m);
+      if (cbMatch) meta.createdBy = cbMatch[1].trim();
+      const caMatch = fm.match(/^createdAt:\s*(.+?)$/m);
+      if (caMatch) meta.createdAt = caMatch[1].trim();
     }
-    return skillName;
+    return meta;
   } catch {
-    return skillName;
+    return { description: skillName, createdBy: null, createdAt: null };
   }
 }
@@ -80,7 +87,8 @@ export function listSkills() {
     const builtinDirs = fs.readdirSync(SKILLS_DIR, { withFileTypes: true })
       .filter(d => d.isDirectory()).map(d => d.name);
     for (const name of builtinDirs) {
-      skillMap.set(name, { name, source: 'builtin', summary: _parseSkillSummary(name, SKILLS_DIR), useCase: SKILL_USE_CASES[name] || null });
+      const meta = _parseSkillMeta(name, SKILLS_DIR);
+      skillMap.set(name, { name, source: 'builtin', summary: meta.description, createdBy: null, createdAt: null, useCase: SKILL_USE_CASES[name] || null });
     }
     // 项目级 Skills（覆盖同名内置）
@@ -88,18 +96,29 @@ export function listSkills() {
       const projectDirs = fs.readdirSync(PROJECT_SKILLS_DIR, { withFileTypes: true })
         .filter(d => d.isDirectory()).map(d => d.name);
       for (const name of projectDirs) {
-        skillMap.set(name, { name, source: 'project', summary: _parseSkillSummary(name, PROJECT_SKILLS_DIR), useCase: SKILL_USE_CASES[name] || null });
+        const meta = _parseSkillMeta(name, PROJECT_SKILLS_DIR);
+        skillMap.set(name, { name, source: 'project', summary: meta.description, createdBy: meta.createdBy, createdAt: meta.createdAt, useCase: SKILL_USE_CASES[name] || null });
       }
     } catch { /* no project skills */ }
     const skills = [...skillMap.values()].sort((a, b) => a.name.localeCompare(b.name));
+    // _meta：附带 SignalCollector 推荐计数（如果后台服务可用）
+    let suggestionCount = 0;
+    try {
+      if (global._signalCollector) {
+        const snapshot = global._signalCollector.getSnapshot();
+        suggestionCount = snapshot?.lastResult?.newSuggestions || 0;
+      }
+    } catch { /* silent */ }
     return JSON.stringify({
       success: true,
       data: {
         skills,
         total: skills.length,
         hint: '根据当前任务选择合适的 Skill 加载（load_skill）。不确定时先加载 autosnippet-intent 做意图路由。',
+        _meta: { signalSuggestions: suggestionCount },
       },
     });
   } catch (err) {
@@ -152,6 +171,9 @@ export function loadSkill(_ctx, args) {
       }
     }
+    // 提取 createdBy/createdAt
+    const meta = _parseSkillMeta(skillName, source === 'project' ? PROJECT_SKILLS_DIR : SKILLS_DIR);
     return JSON.stringify({
       success: true,
       data: {
@@ -159,6 +181,8 @@ export function loadSkill(_ctx, args) {
         source,
         content,
         charCount: content.length,
+        createdBy: source === 'project' ? meta.createdBy : null,
+        createdAt: source === 'project' ? meta.createdAt : null,
         useCase: SKILL_USE_CASES[skillName] || null,
         relatedSkills: _getRelatedSkills(skillName),
       },
@@ -193,7 +217,7 @@ export function loadSkill(_ctx, args) {
  * @returns {string} JSON envelope
  */
 export function createSkill(_ctx, args) {
-  const { name, description, content, overwrite = false } = args || {};
+  const { name, description, content, overwrite = false, createdBy = 'external-ai' } = args || {};
   // ── 参数校验 ──
   if (!name || !description || !content) {
@@ -247,6 +271,8 @@ export function createSkill(_ctx, args) {
       '---',
       `name: ${name}`,
       `description: ${description}`,
+      `createdBy: ${createdBy}`,
+      `createdAt: ${new Date().toISOString()}`,
       '---',
       '',
     ].join('\n');
@@ -289,8 +315,8 @@ function _regenerateEditorIndex() {
         .filter(d => d.isDirectory())
         .map(d => d.name);
       for (const name of dirs) {
-        const summary = _parseSkillSummary(name, PROJECT_SKILLS_DIR);
-        projectSkills.push({ name, summary });
+        const meta = _parseSkillMeta(name, PROJECT_SKILLS_DIR);
+        projectSkills.push({ name, summary: meta.description });
       }
     } catch { /* no project skills dir */ }
@@ -332,6 +358,38 @@ function _regenerateEditorIndex() {
   }
 }
+// ═══════════════════════════════════════════════════════════
+// Handler: suggestSkills
+// ═══════════════════════════════════════════════════════════
+/**
+ * 基于项目使用模式分析，推荐创建 Skill
+ *
+ * 分析维度：Guard 违规模式、Memory 偏好积累、Recipe 分布缺口、候选积压
+ * Agent 可根据推荐结果自行决定是否调用 createSkill 创建
+ *
+ * @param {object} ctx  MCP context（含 container）
+ * @returns {string} JSON envelope
+ */
+export async function suggestSkills(ctx) {
+  try {
+    const { SkillAdvisor } = await import('../../../service/skills/SkillAdvisor.js');
+    const database = ctx?.container?.get?.('database') || null;
+    const advisor = new SkillAdvisor(PROJECT_ROOT, { database });
+    const result = advisor.suggest();
+    return JSON.stringify({
+      success: true,
+      data: result,
+    });
+  } catch (err) {
+    return JSON.stringify({
+      success: false,
+      error: { code: 'SUGGEST_ERROR', message: err.message },
+    });
+  }
+}
 /**
  * 推荐相关 Skills（基于静态映射）
  */

package/lib/external/mcp/tools.js CHANGED Viewed

@@ -658,10 +658,31 @@ export const TOOLS = [
           default: false,
           description: '如果同名 Skill 已存在，是否覆盖（默认 false）',
         },
+        createdBy: {
+          type: 'string',
+          enum: ['manual', 'user-ai', 'system-ai', 'external-ai'],
+          default: 'external-ai',
+          description: '创建者类型：manual=用户手动 | user-ai=用户调用AI | system-ai=系统自动 | external-ai=外部AI Agent',
+        },
       },
       required: ['name', 'description', 'content'],
     },
   },
+  // 36. Skill 推荐：基于使用模式分析，推荐创建 Skill
+  {
+    name: 'autosnippet_suggest_skills',
+    description:
+      '基于项目使用模式分析，推荐创建 Skill。\n' +
+      '分析 4 个维度：Guard 违规模式、Memory 偏好积累、Recipe 分布缺口、候选积压率。\n' +
+      '返回推荐列表（含 name / description / rationale / priority），Agent 可据此直接调用 autosnippet_create_skill 创建。\n' +
+      '\n' +
+      '使用时机：\n' +
+      '  • 项目使用一段时间后，定期调用检查是否有新的 Skill 需求\n' +
+      '  • 用户反复说"我们项目不用…"、"以后都…"等偏好表述时\n' +
+      '  • Guard 违规频繁出现同一规则时\n' +
+      '  • 候选被大量驳回时',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
   // 36. ② 内容润色：Bootstrap 候选 AI 精炼（Phase 6）
   {
     name: 'autosnippet_bootstrap_refine',

package/lib/http/HttpServer.js CHANGED Viewed

@@ -26,6 +26,7 @@ import commandsRouter from './routes/commands.js';
 import spmRouter from './routes/spm.js';
 import violationsRouter from './routes/violations.js';
 import authRouter from './routes/auth.js';
+import skillsRouter from './routes/skills.js';
 import apiSpec from './api-spec.js';
 import { initRedisService } from '../infrastructure/cache/RedisService.js';
 import { initCacheAdapter } from '../infrastructure/cache/UnifiedCacheAdapter.js';
@@ -258,6 +259,9 @@ export class HttpServer {
     // 命令路由
     this.app.use(`${apiPrefix}/commands`, commandsRouter);
+    // Skills 路由
+    this.app.use(`${apiPrefix}/skills`, skillsRouter);
     // SPM 路由
     this.app.use(`${apiPrefix}/spm`, spmRouter);

package/lib/http/routes/search.js CHANGED Viewed

@@ -173,15 +173,17 @@ router.get('/graph/all', asyncHandler(async (req, res) => {
   const nodeCategories = {};  // id → category/target 名（供前端分组布局）
   if (nodeMap.size > 0) {
     const recipeService = container.get('recipeService');
+    // 使用 repository.findById 避免 RecipeService.getRecipe 在找不到时记录 error 日志
+    const recipeRepo = recipeService?.recipeRepository ?? null;
     for (const [id, types] of nodeMap) {
       // 记录节点主要类型
       const primaryType = types.has('recipe') ? 'recipe' : [...types][0];
       nodeTypes[id] = primaryType;
-      if (primaryType === 'recipe' && recipeService) {
-        // 仅 recipe 类型才查 recipeService
+      if (primaryType === 'recipe' && recipeRepo) {
+        // 仅 recipe 类型才查 DB；直接用 repo 避免 NotFoundError 日志噪音
         try {
-          const r = await recipeService.getRecipe(id);
+          const r = await recipeRepo.findById(id);
           if (r) {
             nodeLabels[id] = r.title || r.name || id;
             nodeCategories[id] = r.category || '';

package/lib/http/routes/skills.js ADDED Viewed

@@ -0,0 +1,108 @@
+/**
+ * Skills API 路由
+ * 管理 Agent Skills 的查询、加载和创建（项目级）
+ */
+import express from 'express';
+import { asyncHandler } from '../middleware/errorHandler.js';
+import { listSkills, loadSkill, createSkill, suggestSkills } from '../../external/mcp/handlers/skill.js';
+import { ValidationError } from '../../shared/errors/index.js';
+const router = express.Router();
+/**
+ * GET /api/v1/skills
+ * 列出所有可用 Skills（内置 + 项目级）
+ */
+router.get('/', asyncHandler(async (_req, res) => {
+  const raw = listSkills();
+  const parsed = JSON.parse(raw);
+  if (!parsed.success) {
+    return res.status(500).json(parsed);
+  }
+  res.json({ success: true, data: parsed.data });
+}));
+/**
+ * GET /api/v1/skills/signal-status
+ * 获取 SignalCollector 后台服务状态
+ */
+router.get('/signal-status', asyncHandler(async (_req, res) => {
+  const { _signalCollector } = global;
+  if (!_signalCollector) {
+    return res.json({ success: true, data: { running: false, mode: 'off', snapshot: null } });
+  }
+  res.json({
+    success: true,
+    data: {
+      running: true,
+      mode: _signalCollector.getMode(),
+      snapshot: _signalCollector.getSnapshot(),
+    },
+  });
+}));
+/**
+ * GET /api/v1/skills/suggest
+ * 基于使用模式分析，推荐创建 Skill
+ */
+router.get('/suggest', asyncHandler(async (req, res) => {
+  const ctx = { container: req.app.locals?.container || null };
+  const raw = await suggestSkills(ctx);
+  const parsed = JSON.parse(raw);
+  if (!parsed.success) {
+    return res.status(500).json(parsed);
+  }
+  res.json({ success: true, data: parsed.data });
+}));
+/**
+ * GET /api/v1/skills/:name
+ * 加载指定 Skill 的完整文档
+ * Query: ?section=xxx 可只返回指定章节
+ */
+router.get('/:name', asyncHandler(async (req, res) => {
+  const { name } = req.params;
+  const { section } = req.query;
+  const raw = loadSkill(null, { skillName: name, section });
+  const parsed = JSON.parse(raw);
+  if (!parsed.success) {
+    const status = parsed.error?.code === 'SKILL_NOT_FOUND' ? 404 : 400;
+    return res.status(status).json(parsed);
+  }
+  res.json({ success: true, data: parsed.data });
+}));
+/**
+ * POST /api/v1/skills
+ * 创建项目级 Skill
+ * Body: { name, description, content, overwrite? }
+ */
+router.post('/', asyncHandler(async (req, res) => {
+  const { name, description, content, overwrite, createdBy } = req.body;
+  if (!name || !description || !content) {
+    throw new ValidationError('name, description, content are all required');
+  }
+  const raw = createSkill(null, { name, description, content, overwrite, createdBy: createdBy || 'manual' });
+  const parsed = JSON.parse(raw);
+  if (!parsed.success) {
+    const status = parsed.error?.code === 'BUILTIN_CONFLICT' ? 409
+      : parsed.error?.code === 'ALREADY_EXISTS' ? 409
+        : parsed.error?.code === 'INVALID_NAME' ? 400 : 500;
+    return res.status(status).json(parsed);
+  }
+  res.status(201).json({ success: true, data: parsed.data });
+}));
+export default router;

package/lib/infrastructure/audit/AuditStore.js CHANGED Viewed

@@ -193,6 +193,24 @@ export class AuditStore {
       byAction,
     };
   }
+  /**
+   * 清理过期审计日志
+   * @param {object} [opts]
+   * @param {number} [opts.maxAgeDays=90] — 保留天数，超过此天数的记录将被删除
+   * @returns {{ deleted: number }}
+   */
+  cleanup({ maxAgeDays = 90 } = {}) {
+    try {
+      const cutoff = Date.now() - maxAgeDays * 86400000;
+      const result = this.db.prepare(
+        'DELETE FROM audit_logs WHERE timestamp < ?'
+      ).run(cutoff);
+      return { deleted: result.changes || 0 };
+    } catch {
+      return { deleted: 0 };
+    }
+  }
 }
 export default AuditStore;