nextclaw 0.46.0 → 0.47.0

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-focus.panel/index.html

@@ -32,6 +32,7 @@
       <details class="behind-scenes">
         <summary>关闭页面后，为什么计时还会继续？</summary>
         <p>计时不属于这个页面，而是由 NextClaw 宿主持续向一个常驻 Rust/WASM Component 投递事件；完成点同时写入持久数据 Component。Panel 只负责查看和控制，所以页面关闭、重新打开，甚至宿主恢复后都能继续。</p>
+        <p><strong>已验证能力</strong>：<span data-verification-status>读取中…</span></p>
         <dl><div><dt>本次实例</dt><dd data-proof-epoch>等待读取</dd></div><div><dt>持久事件</dt><dd data-proof-events>等待读取</dd></div></dl>
       </details>
     </main>

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-notes.panel/assets/app.js

@@ -23,6 +23,12 @@ function serviceActions() {
   return bridge;
 }
 
+function verificationRecords() {
+  const bridge = window.nextclaw?.verificationRecords;
+  if (!bridge) throw new Error("验收记录桥尚未就绪。");
+  return bridge;
+}
+
 async function invoke(actionId, input = {}) {
   return await serviceActions().invoke(actionId, input);
 }
@@ -115,3 +121,18 @@ elements.grid.addEventListener("click", (event) => {
 });
 
 void refresh().catch((error) => setNotice(error instanceof Error ? error.message : String(error), "error"));
+async function refreshVerificationStatus() {
+  const element = document.querySelector("[data-verification-status]");
+  if (!element) return;
+  try {
+    const payload = await verificationRecords().list({ appId: "nextclaw.portable-runtime-lab", limit: 500 });
+    const entry = (payload?.entries || []).find((candidate) => candidate.acceptanceId === "PRT-ENTRY-001");
+    element.textContent = entry
+      ? `${entry.status === "passed" ? "已有局部证据" : entry.status} · ${new Date(entry.finishedAt).toLocaleString()}`
+      : "未验证（暂无 PRT-ENTRY-001 记录）";
+  } catch {
+    element.textContent = "暂时无法读取验收记录";
+  }
+}
+
+void refreshVerificationStatus();

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-notes.panel/index.html

@@ -33,6 +33,7 @@
       <details class="behind-scenes">
         <summary>为什么它也是运行时 Demo？</summary>
         <p>便签和“今日清单”是两个独立 Panel，却复用同一个底层数据 Component。产品可以变，稳定的存储与授权能力不用为每个页面重新实现。</p>
+        <p><strong>已验证能力</strong>：<span data-verification-status>读取中…</span></p>
         <dl><div><dt>当前数据版本</dt><dd data-proof-revision>等待读取</dd></div><div><dt>可被 Agent 使用</dt><dd>是，同一 Service Action</dd></div></dl>
       </details>
     </main>

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-panel.panel/assets/app.js

@@ -20,6 +20,190 @@ const actions = {
   providerDenied: "nextclaw-portable-runtime-lab-composition.provider_denied",
 };
 
+const APP_ID = "nextclaw.portable-runtime-lab";
+const verificationElements = {
+  root: document.querySelector(".verification"),
+  list: document.querySelector("[data-verification-list]"),
+  app: document.querySelector("[data-verification-app]"),
+  runtime: document.querySelector("[data-verification-runtime]"),
+  count: document.querySelector("[data-verification-count]"),
+  environment: document.querySelector("[data-verification-environment]"),
+  implementation: document.querySelector("[data-verification-implementation]"),
+  contract: document.querySelector("[data-verification-contract]"),
+  sources: document.querySelector("[data-verification-sources]"),
+  evidence: document.querySelector("[data-verification-evidence]"),
+};
+
+let acceptanceStatus = null;
+
+const statusLabels = {
+  "current-passed": "当前通过",
+  failed: "失败",
+  stale: "证据已过期",
+  missing: "尚无证据",
+  "not-applicable": "当前平台不适用",
+};
+
+const categoryLabels = {
+  execution: "执行",
+  capability: "基础能力",
+  lifecycle: "生命周期",
+  entry: "入口",
+  quality: "质量与交付",
+  release: "发布",
+};
+
+async function fetchAcceptanceStatus() {
+  const payload = await portableRuntimeAcceptance().status({ locale: "zh-CN" });
+  if (!Array.isArray(payload?.entries) || !payload?.contract || !payload?.identity) {
+    throw new Error("验收状态返回格式无效。");
+  }
+  return payload;
+}
+
+function portableRuntimeAcceptance() {
+  const bridge = window.nextclaw?.portableRuntimeAcceptance;
+  if (!bridge) throw new Error("NextClaw 验收桥尚未就绪，请刷新后重试。");
+  return bridge;
+}
+
+function formatTime(value) {
+  if (!value) return "—";
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? String(value) : date.toLocaleString();
+}
+
+function renderVerificationList() {
+  verificationElements.list.replaceChildren();
+  const groups = new Map();
+  for (const entry of acceptanceStatus.entries) {
+    const group = groups.get(entry.category) || [];
+    group.push(entry);
+    groups.set(entry.category, group);
+  }
+  for (const [category, entries] of groups) {
+    const group = document.createElement("section");
+    group.className = "verification-category";
+    const groupHeading = document.createElement("h3");
+    groupHeading.textContent = categoryLabels[category] || category;
+    group.append(groupHeading);
+    const cards = document.createElement("div");
+    cards.className = "verification-category-cards";
+    for (const item of entries) {
+      const acceptanceId = item.id;
+      const evidence = item.result.latestRecord;
+      const status = item.result.status;
+      const card = document.createElement("article");
+      card.className = "verification-item";
+      card.dataset.status = status;
+
+      const heading = document.createElement("div");
+      heading.className = "verification-item-heading";
+    const titleBlock = document.createElement("div");
+    const id = document.createElement("code");
+    id.textContent = acceptanceId;
+    const name = document.createElement("h3");
+    name.textContent = item.presentation.title;
+    const copy = document.createElement("p");
+    copy.textContent = item.presentation.description;
+    titleBlock.append(id, name, copy);
+    const badge = document.createElement("span");
+    badge.className = "status-badge";
+    badge.textContent = statusLabels[status] || status;
+    heading.append(titleBlock, badge);
+      card.append(heading);
+
+    const meta = document.createElement("dl");
+    meta.className = "verification-meta";
+    for (const [label, value] of [
+      ["最近运行", formatTime(evidence?.finishedAt)],
+      ["环境", evidence?.environment || acceptanceStatus.identity.environment || "尚未验证"],
+      ["来源", item.evidenceSource],
+      ["动作", evidence?.actionOrEvent || "尚未验证"],
+    ]) {
+      const wrapper = document.createElement("div");
+      const term = document.createElement("dt");
+      term.textContent = label;
+      const detail = document.createElement("dd");
+      detail.textContent = value;
+      wrapper.append(term, detail);
+      meta.append(wrapper);
+    }
+      card.append(meta);
+
+    const controls = document.createElement("div");
+    controls.className = "verification-controls";
+    if (evidence) {
+      const viewButton = document.createElement("button");
+      viewButton.type = "button";
+      viewButton.className = "text-button";
+      viewButton.dataset.viewEvidence = evidence.verificationRunId;
+      viewButton.textContent = "查看证据";
+      controls.append(viewButton);
+    } else {
+      const note = document.createElement("span");
+      note.className = "verification-note";
+      note.textContent = "尚无可展示的当前证据";
+      controls.append(note);
+    }
+      card.append(controls);
+      cards.append(card);
+    }
+    group.append(cards);
+    verificationElements.list.append(group);
+  }
+}
+
+async function refreshVerification() {
+  verificationElements.root.dataset.state = "pending";
+  try {
+    acceptanceStatus = await fetchAcceptanceStatus();
+    const { identity, contract, summary } = acceptanceStatus;
+    verificationElements.app.textContent = acceptanceStatus.appId;
+    verificationElements.runtime.textContent = identity.available
+      ? `${identity.context.productVersion} / ${identity.context.runtimeVersion} (${identity.runtimeVersionSource})`
+      : "身份不可用";
+    verificationElements.count.textContent = `${summary["current-passed"]}/${acceptanceStatus.entries.length}`;
+    verificationElements.environment.textContent = identity.available ? identity.context.environment : (identity.environment || "尚未验证");
+    verificationElements.implementation.textContent = identity.available ? identity.context.implementationFingerprint : identity.reason;
+    verificationElements.contract.textContent = contract.contractFingerprint;
+    verificationElements.sources.textContent = acceptanceStatus.entries.map((entry) => entry.evidenceSource).filter((value, index, values) => values.indexOf(value) === index).join(", ");
+    renderVerificationList();
+    verificationElements.root.dataset.state = "ready";
+  } catch (error) {
+    verificationElements.list.replaceChildren();
+    const message = document.createElement("p");
+    message.className = "verification-empty error-copy";
+    message.textContent = error instanceof Error ? error.message : String(error);
+    verificationElements.list.append(message);
+    verificationElements.runtime.textContent = "无法读取";
+    verificationElements.root.dataset.state = "error";
+  }
+}
+
+function showEvidence(runId) {
+  const entry = acceptanceStatus?.entries
+    .map((candidate) => candidate.result.latestRecord)
+    .find((candidate) => candidate?.verificationRunId === runId);
+  if (!entry) return;
+  verificationElements.evidence.textContent = JSON.stringify(entry, null, 2);
+  const details = document.querySelector("[data-evidence-details]");
+  details?.setAttribute("open", "");
+  details?.scrollIntoView({ behavior: "smooth", block: "nearest" });
+}
+
+async function exportVerification() {
+  const payload = await portableRuntimeAcceptance().export({ locale: "zh-CN" });
+  const blob = new Blob([`${JSON.stringify(payload, null, 2)}\n`], { type: "application/json" });
+  const url = URL.createObjectURL(blob);
+  const link = document.createElement("a");
+  link.href = url;
+  link.download = `${payload.appId}.portable-runtime-acceptance.json`;
+  link.click();
+  URL.revokeObjectURL(url);
+}
+
+
 const scenarios = {
   shared: document.querySelector('[data-scenario="shared"]'),
   data: document.querySelector('[data-scenario="data"]'),
@@ -249,6 +433,23 @@ for (const button of document.querySelectorAll("[data-run]")) {
   button.addEventListener("click", () => operations[button.dataset.run]?.());
 }
 
+document.querySelector("[data-refresh-verification]")?.addEventListener("click", () => {
+  void refreshVerification();
+});
+document.querySelector("[data-export-verification]")?.addEventListener("click", () => {
+  void exportVerification().catch((error) => {
+    verificationElements.root.dataset.state = "error";
+    verificationElements.evidence.textContent = JSON.stringify(errorValue(error), null, 2);
+  });
+});
+verificationElements.list.addEventListener("click", (event) => {
+  const target = event.target;
+  if (!(target instanceof HTMLElement)) return;
+  const viewButton = target.closest("[data-view-evidence]");
+  if (viewButton instanceof HTMLElement) showEvidence(viewButton.dataset.viewEvidence);
+});
+void refreshVerification();
+
 void refreshResident().then((result) => {
   setState("resident", "success", result);
 }).catch((error) => {

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-panel.panel/assets/style.css

@@ -42,6 +42,45 @@ button.secondary:hover:not(:disabled) { background: #16304b; }
 button.danger { border-color: #9f3b52; background: #7f1d36; }
 button.danger:hover:not(:disabled) { background: #9f2444; }
 button:disabled { cursor: wait; opacity: .55; }
+.verification { margin: 32px 0 34px; border: 1px solid #25516a; border-radius: 18px; padding: 20px; background: #0b1d2ddd; }
+.verification[data-state="pending"] { border-color: #38bdf866; }
+.verification[data-state="error"] { border-color: #fb718566; }
+.section-heading { display: flex; align-items: flex-end; justify-content: space-between; gap: 16px; }
+.section-heading h2 { font-size: 21px; }
+.section-heading p { margin: 7px 0 0; color: #8099b5; font-size: 13px; line-height: 1.55; }
+.verification-actions, .verification-controls { display: flex; flex-wrap: wrap; gap: 8px; }
+.verification-summary { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 9px; margin: 18px 0 12px; }
+.verification-summary div { min-width: 0; border: 1px solid #183c55; border-radius: 11px; padding: 10px 12px; background: #071522; }
+.verification-summary dt { color: #7892ae; font-size: 10px; }
+.verification-summary dd { overflow: hidden; margin: 5px 0 0; color: #c4d9ed; font-family: "SFMono-Regular", Consolas, monospace; font-size: 12px; text-overflow: ellipsis; white-space: nowrap; }
+.verification-list { display: grid; gap: 16px; }
+.verification-category { min-width: 0; }
+.verification-category > h3 { margin: 0 0 8px; color: #87a6c3; font-size: 12px; letter-spacing: .05em; }
+.verification-category-cards { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 9px; }
+.verification-empty { grid-column: 1 / -1; margin: 10px 0; color: #91a8c2; font-size: 13px; }
+.error-copy { color: #fda4af; }
+.verification-item { min-width: 0; border: 1px solid #18314c; border-radius: 12px; padding: 13px; background: #071522; }
+.verification-item[data-status="current-passed"] { border-color: #2dd4bf66; }
+.verification-item[data-status="failed"] { border-color: #fb718566; }
+.verification-item-heading { display: flex; align-items: flex-start; justify-content: space-between; gap: 10px; }
+.verification-item code { color: #b4c3d3; font-family: "SFMono-Regular", Consolas, monospace; font-size: 10px; font-weight: 700; }
+.verification-item[data-status="current-passed"] code { color: #5eead4; }
+.verification-item h3 { margin: 5px 0 0; color: #dce9f8; font-size: 14px; }
+.verification-item p { margin: 5px 0 0; color: #7892ae; font-size: 11px; line-height: 1.45; }
+.status-badge { flex: none; border: 1px solid #2b4866; border-radius: 999px; padding: 4px 7px; color: #9eb6ce; font-size: 10px; white-space: nowrap; }
+.verification-item[data-status="current-passed"] .status-badge { border-color: #2dd4bf66; color: #9be8dc; }
+.verification-item[data-status="failed"] .status-badge { border-color: #fb718566; color: #fda4af; }
+.verification-meta { display: grid; grid-template-columns: 1fr 1fr; gap: 7px 10px; margin: 11px 0; }
+.verification-meta div:last-child { grid-column: 1 / -1; }
+.verification-meta dt { color: #66829f; font-size: 9px; }
+.verification-meta dd { overflow: hidden; margin: 3px 0 0; color: #aac1d8; font-family: "SFMono-Regular", Consolas, monospace; font-size: 10px; text-overflow: ellipsis; white-space: nowrap; }
+.verification-controls button { min-height: 30px; padding: 6px 9px; font-size: 11px; }
+.verification-note { align-self: center; color: #607b97; font-size: 10px; }
+.text-button { border-color: transparent; padding-right: 0; padding-left: 0; color: #7dd3fc; background: transparent; }
+.text-button:hover:not(:disabled) { border-color: transparent; color: #bae6fd; background: transparent; }
+.evidence-details { margin-top: 12px; border-top: 1px solid #183c55; padding-top: 11px; }
+.evidence-details summary { color: #aac1d8; cursor: pointer; font-size: 12px; }
+.evidence-details pre { max-height: 260px; overflow: auto; margin: 10px 0 0; border: 1px solid #142a40; border-radius: 9px; padding: 11px; color: #9eb6ce; background: #050d17; font-family: "SFMono-Regular", Consolas, monospace; font-size: 10px; line-height: 1.5; white-space: pre-wrap; overflow-wrap: anywhere; }
 .data-editor { display: grid; grid-template-columns: minmax(120px, .7fr) minmax(220px, 2fr) minmax(110px, .6fr); gap: 10px; }
 .data-editor label { display: grid; gap: 6px; color: #7892ae; font-size: 11px; font-weight: 650; }
 .data-editor input, .data-editor select { width: 100%; min-height: 38px; border: 1px solid #23425f; border-radius: 9px; padding: 8px 10px; color: #dce9f8; background: #071321; font: inherit; font-size: 13px; }
@@ -77,6 +116,9 @@ footer strong { color: #a8bfd7; }
   .topology { grid-template-columns: 1fr; }
   .topology > span { transform: rotate(90deg); text-align: center; }
   .scenario-grid { grid-template-columns: 1fr; }
+  .section-heading { align-items: flex-start; flex-direction: column; }
+  .verification-summary, .verification-category-cards { grid-template-columns: 1fr; }
+  .verification-empty { grid-column: auto; }
   .data-editor { grid-template-columns: 1fr; }
   .metric-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
   .resident-metrics { grid-template-columns: repeat(2, minmax(0, 1fr)); }

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-panel.panel/index.html

@@ -3,7 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>开发者验证台</title>
+    <title>运行时验收与证据</title>
     <link rel="stylesheet" href="assets/style.css" />
   </head>
   <body>
@@ -11,25 +11,55 @@
       <header class="hero">
         <div>
           <p class="eyebrow">RUST · WASM COMPONENT · HOST CAPABILITIES</p>
-          <h1>开发者验证台</h1>
-          <p class="lead">这里是四个日常小应用背后的技术证据。普通体验请直接打开「今日清单」「灵感便签」「专注小钟」或「联系人整理」。</p>
+          <h1>运行时验收与证据</h1>
+          <p class="lead">查看当前安装实例真实产生的验收记录。没有记录就显示“未验证”，不会把静态说明当成通过。</p>
         </div>
         <span class="live-badge"><i></i> 可交互 Demo</span>
       </header>
 
+      <section class="verification" aria-labelledby="verification-title">
+        <div class="section-heading">
+          <div>
+            <p class="eyebrow">EVIDENCE CENTER</p>
+            <h2 id="verification-title">能力验收矩阵</h2>
+            <p>每条状态都由当前产品、当前 runner 指纹和实际证据共同判定；只有“当前通过”是绿色。</p>
+          </div>
+          <div class="verification-actions">
+            <button type="button" data-refresh-verification class="secondary">刷新记录</button>
+            <button type="button" data-export-verification>导出证据</button>
+          </div>
+        </div>
+        <dl class="verification-summary" aria-label="验收摘要">
+          <div><dt>验收应用</dt><dd data-verification-app>读取中…</dd></div>
+          <div><dt>产品 / Runtime</dt><dd data-verification-runtime>读取中…</dd></div>
+          <div><dt>当前通过</dt><dd data-verification-count>0</dd></div>
+          <div><dt>环境</dt><dd data-verification-environment>尚未验证</dd></div>
+          <div><dt>实现指纹</dt><dd data-verification-implementation>读取中…</dd></div>
+          <div><dt>合同指纹</dt><dd data-verification-contract>读取中…</dd></div>
+          <div><dt>证据来源</dt><dd data-verification-sources>读取中…</dd></div>
+        </dl>
+        <div class="verification-list" data-verification-list aria-live="polite">
+          <p class="verification-empty">正在读取真实验收记录…</p>
+        </div>
+        <details class="evidence-details" data-evidence-details>
+          <summary>查看最近证据</summary>
+          <pre data-verification-evidence>选择上方已有证据即可查看详情；该页不会把手动点击包装成验收通过。</pre>
+        </details>
+      </section>
+
       <section class="topology" aria-label="运行拓扑">
         <div class="node guest">Action Components<small>State + Capability</small></div>
         <span aria-hidden="true">→</span>
-        <div class="node host">Shared Runner<small>Wasmtime + WIT</small></div>
+        <div class="node host">Shared Runner<small>Spin + Wasmtime + WIT</small></div>
         <span aria-hidden="true">←</span>
         <div class="node guest">Resident Component<small>Retained instance + events</small></div>
       </section>
 
-      <section class="scenario-grid" aria-label="验证场景">
+      <section class="scenario-grid" aria-label="运行时交互场景">
         <article class="scenario" data-scenario="shared">
           <div class="scenario-copy">
             <span class="number">01</span>
-            <div><h2>共享宿主</h2><p>分别调用两个 Component，比较 runner PID 与已加载模块数。</p></div>
+          <div><h2>共享宿主</h2><p>分别调用两个 Component，比较 runner PID 与已加载模块数。</p></div>
           </div>
           <button type="button" data-run="shared">验证同一进程</button>
           <pre class="result" aria-live="polite">尚未执行</pre>
@@ -130,23 +160,14 @@
         <article class="scenario benchmark-evidence">
           <div class="scenario-copy">
             <span class="number">07</span>
-            <div><h2>内存密度基准</h2><p>Apple Silicon、Node 22.16 上重复三轮；每个 Component 使用独立 artifact 路径，每个 Node Service 使用独立进程。</p></div>
-          </div>
-          <dl class="metric-grid">
-            <div><dt>空 runner</dt><dd>7.70–7.73 <small>MiB</small></dd></div>
-            <div><dt>1 Component</dt><dd>34.17–36.77 <small>MiB</small></dd></div>
-            <div><dt>5 Components</dt><dd>43.86–44.72 <small>MiB</small></dd></div>
-            <div><dt>10 Components</dt><dd>50.84–53.17 <small>MiB</small></dd></div>
-            <div><dt>1 Node Service</dt><dd>39.88–39.91 <small>MiB</small></dd></div>
-            <div><dt>5 Node Services</dt><dd>199.61–199.70 <small>MiB</small></dd></div>
-            <div><dt>10 Node Services</dt><dd>399.25–399.47 <small>MiB</small></dd></div>
-          </dl>
-          <p class="benchmark-note">这是开发机上的密度证据，不是等价业务 workload 的最终结论；Resident 密度、CPU/延迟和跨平台仍待验证。</p>
+            <div><h2>性能与资源证据</h2><p>发布流水线在三个目标平台运行同一套持久计数 workload，记录冷/热延迟、吞吐、CPU、RSS/PSS、1/5/10 实例密度和卸载回收。</p></div>
+          </div>
+          <p class="benchmark-note">该页不内置容易过期的开发机数字。请在上方选择 <code>PRT-PERF-001</code> 查看与当前产品、当前 runner 指纹一致的结构化证据；没有当前证据时会明确显示“尚无证据”。</p>
         </article>
       </section>
 
       <footer>
-        <strong>当前覆盖：</strong>Action、Agent Tool、真实数据、Resident、后台事件、Component Provider、跨组件组合、网络权限、故障恢复与共享宿主。
+        <strong>说明：</strong>下方交互场景用于复验当前已安装应用；上方矩阵只显示后端真实写入的 PRT 记录。
       </footer>
     </main>
     <script src="assets/app.js"></script>

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-panel.panel/panel-app.json

@@ -1,7 +1,7 @@
 {
   "id": "nextclaw-portable-runtime-lab-panel",
-  "title": "开发者验证台",
-  "description": "查看四个日常小应用背后的 Rust/WASM 运行链证据。",
+  "title": "运行时验收与证据",
+  "description": "查看已安装应用真实产生的 PRT 验收记录、环境和证据。",
   "entry": "index.html",
   "actions": [
     "nextclaw-portable-runtime-lab-state.counter_read",

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-todos.panel/assets/app.js

@@ -22,6 +22,12 @@ function serviceActions() {
   return bridge;
 }
 
+function verificationRecords() {
+  const bridge = window.nextclaw?.verificationRecords;
+  if (!bridge) throw new Error("验收记录桥尚未就绪。");
+  return bridge;
+}
+
 async function invoke(actionId, input = {}) {
   return await serviceActions().invoke(actionId, input);
 }
@@ -141,3 +147,18 @@ const now = new Date();
 document.querySelector("[data-date-day]").textContent = String(now.getDate()).padStart(2, "0");
 document.querySelector("[data-date-label]").textContent = now.toLocaleDateString("zh-CN", { month: "long", weekday: "short" });
 void refresh().catch((error) => setNotice(error instanceof Error ? error.message : String(error), "error"));
+async function refreshVerificationStatus() {
+  const element = document.querySelector("[data-verification-status]");
+  if (!element) return;
+  try {
+    const payload = await verificationRecords().list({ appId: "nextclaw.portable-runtime-lab", limit: 500 });
+    const entry = (payload?.entries || []).find((candidate) => candidate.acceptanceId === "PRT-ENTRY-001");
+    element.textContent = entry
+      ? `${entry.status === "passed" ? "已有局部证据" : entry.status} · ${new Date(entry.finishedAt).toLocaleString()}`
+      : "未验证（暂无 PRT-ENTRY-001 记录）";
+  } catch {
+    element.textContent = "暂时无法读取验收记录";
+  }
+}
+
+void refreshVerificationStatus();

package/resources/apps/nextclaw-portable-runtime-lab/panels/nextclaw-portable-runtime-lab-todos.panel/index.html

@@ -37,6 +37,7 @@
       <details class="behind-scenes">
         <summary>这个小应用背后发生了什么？</summary>
         <p>每次添加、完成和删除都会调用同一组 Rust/WASM Service Action，并写入 NextClaw 管理的持久数据。关掉再打开，清单仍然存在；授权后的 Agent 也可以操作同一份数据。</p>
+        <p><strong>已验证能力</strong>：<span data-verification-status>读取中…</span></p>
         <dl><div><dt>数据</dt><dd data-proof-revision>等待读取</dd></div><div><dt>存储</dt><dd>NextClaw Host KV</dd></div></dl>
       </details>
     </main>

package/resources/apps/nextclaw-portable-runtime-lab/service-components/nextclaw-portable-runtime-lab-capabilities/service-app.json

@@ -1,20 +1,127 @@
 {
   "id": "nextclaw-portable-runtime-lab-capabilities",
   "title": "Portable Capability Component",
-  "description": "Rust/WASM 网络、拒绝、错误与超时演示模块。",
+  "description": "Rust/WASM 网络、文件权限、拒绝、错误与超时演示模块。",
   "protocol": "wasi-component",
   "component": {
     "entry": "service.wasm"
   },
+  "requires": {
+    "modelSlots": [
+      {
+        "id": "summary",
+        "title": "摘要模型",
+        "description": "用于验证受限的 Guest 模型调用。",
+        "required": false,
+        "maxTokens": 256,
+        "timeoutMs": 10000
+      }
+    ],
+    "agentSlots": [
+      {
+        "id": "review",
+        "title": "审阅 Agent",
+        "description": "用于验证异步 Guest Agent 调用。",
+        "required": false
+      }
+    ]
+  },
   "actions": {
-    "network_allowed": { "risk": "external", "title": "访问允许的网络" },
+    "network_standard_http": {
+      "risk": "external",
+      "title": "通过标准 WASI HTTP 访问网络",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "url": { "type": "string", "format": "uri" },
+          "timeoutMs": { "type": "integer", "minimum": 1, "maximum": 30000 },
+          "maxResponseBytes": { "type": "integer", "minimum": 1, "maximum": 65536 }
+        },
+        "additionalProperties": false
+      }
+    },
+    "network_allowed": { "risk": "external", "title": "访问允许的网络（旧兼容接口）" },
     "network_denied": { "risk": "read", "title": "验证网络拒绝" },
+    "network_private_denied": { "risk": "read", "title": "验证私网拒绝" },
+    "network_redirect_denied": { "risk": "read", "title": "验证越权重定向拒绝" },
     "structured_failure": { "risk": "dangerous", "title": "触发结构化失败" },
     "simulate_timeout": {
       "risk": "dangerous",
       "title": "触发执行超时",
       "timeoutMs": 1200
     },
-    "runtime_info": { "risk": "read", "title": "查看共享宿主" }
+    "long_task": {
+      "risk": "write",
+      "title": "运行可观测长任务",
+      "timeoutMs": 10000
+    },
+    "stream_overflow": {
+      "risk": "dangerous",
+      "title": "验证流背压边界",
+      "timeoutMs": 10000
+    },
+    "memory_pressure": {
+      "risk": "dangerous",
+      "title": "验证内存边界",
+      "timeoutMs": 10000
+    },
+    "runtime_info": { "risk": "read", "title": "查看共享宿主" },
+    "filesystem_read": {
+      "risk": "read",
+      "title": "读取已授权文件"
+    },
+    "filesystem_write": {
+      "risk": "write",
+      "title": "写入已授权文件",
+      "inputSchema": {
+        "type": "object",
+        "required": ["path", "content"],
+        "properties": {
+          "path": { "type": "string", "minLength": 1 },
+          "content": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    },
+    "secret_verify": {
+      "risk": "read",
+      "title": "验证已绑定 Secret",
+      "inputSchema": {
+        "type": "object",
+        "required": ["slot"],
+        "properties": {
+          "slot": { "type": "string", "minLength": 1 },
+          "expectedSha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+        },
+        "additionalProperties": false
+      }
+    },
+    "model_complete": {
+      "risk": "external",
+      "title": "调用已授权模型",
+      "inputSchema": {
+        "type": "object",
+        "required": ["slotId", "messages"],
+        "properties": {
+          "slotId": { "type": "string", "minLength": 1 },
+          "messages": { "type": "array", "minItems": 1 },
+          "maxTokens": { "type": "integer", "minimum": 1, "maximum": 4096 }
+        },
+        "additionalProperties": false
+      }
+    },
+    "agent_start": {
+      "risk": "external",
+      "title": "启动已授权 Agent",
+      "inputSchema": {
+        "type": "object",
+        "required": ["slotId", "input"],
+        "properties": {
+          "slotId": { "type": "string", "minLength": 1 },
+          "input": { "type": "object" }
+        },
+        "additionalProperties": false
+      }
+    }
   }
 }

package/resources/apps/nextclaw-portable-runtime-lab/service-components/nextclaw-portable-runtime-lab-composition/service-app.json

@@ -6,9 +6,18 @@
   "component": {
     "entry": "service.wasm"
   },
-  "providers": [
-    "nextclaw-portable-runtime-lab-provider"
-  ],
+  "requires": {
+    "capabilities": [{
+      "id": "nextclaw.contacts.normalize",
+      "version": "1",
+      "provider": "nextclaw-portable-runtime-lab-provider",
+      "wit": {
+        "package": "nextclaw:portable-service",
+        "interface": "host",
+        "version": "^0.1.0"
+      }
+    }]
+  },
   "actions": {
     "compose_contact": {
       "risk": "write",

package/resources/apps/nextclaw-portable-runtime-lab/service-components/nextclaw-portable-runtime-lab-provider/service-app.json

@@ -9,6 +9,17 @@
   "lifecycle": {
     "mode": "provider"
   },
+  "provides": {
+    "capabilities": [{
+      "id": "nextclaw.contacts.normalize",
+      "version": "1",
+      "wit": {
+        "package": "nextclaw:portable-service",
+        "interface": "host",
+        "version": "0.1.0"
+      }
+    }]
+  },
   "actions": {
     "contact_normalize": {
       "risk": "write",