@webskill/chatbot 0.1.0 → 0.2.0

package/dist/index.js

@@ -6,10 +6,11 @@ import { t as yaml } from "./yaml-C888tCbJ.js";
 import { t as json } from "./json-BOcU6nei.js";
 import { t as typescript } from "./typescript-DAau_Qyl.js";
 import { t as jsx$1 } from "./jsx-D2Jv0wvt.js";
-import { AnthropicClient, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FullDisclosureRouter, GoogleGenAiClient, OpenAiCompatibleClient, SkillDiscovery, WebSkillError, WebSkillRuntime, isUnsupportedRunSnapshot, messageOf, summarizeToolCalls, textParts } from "@webskill/sdk";
-import { BrowserWorkerScriptExecutor } from "@webskill/sdk/browser";
+import { EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FullDisclosureRouter, SkillDiscovery, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, clearStoredFormValues, isUnsupportedRunSnapshot, messageOf, summarizeToolCalls, textParts } from "@webskill/sdk";
+import { BrowserWorkerScriptExecutor, checkDictationAvailability, createLlmClient, probeChromeBuiltinAvailability, startDictation } from "@webskill/sdk/browser";
 import { JsonRenderSpecSurface, NativeSpecSurface, OpenUiSpecSurface, ReactBridgeState, SpecInteractionChannel, UiSurfaceList, UiSurfaceSnapshotList, probeJsonRenderAvailability } from "@webskill/sdk/ui-react";
 import { A2UI_SPEC_FORM_PATH, createUiCatalogToolSource, fromA2uiSpecAction, fromA2uiSurfaceAction, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, renderMiniChart, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toVercelToolInvocation, uiCatalog } from "@webskill/sdk/ui";
+import { TodoStore, createDelegationToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
 import * as React$1 from "react";
 import React, { Children, Component, Fragment, createContext, createElement, forwardRef, isValidElement, memo, useCallback, useContext, useDeferredValue, useEffect, useEffectEvent, useId, useInsertionEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -191,7 +192,7 @@ const createLucideIcon = (iconName, iconNode) => {
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$33 = [
+const __iconNode$36 = [
 	["rect", {
 		width: "20",
 		height: "5",
@@ -217,7 +218,7 @@ const __iconNode$33 = [
 		key: "192myk"
 	}]
 ];
-const ArchiveRestore = createLucideIcon("archive-restore", __iconNode$33);
+const ArchiveRestore = createLucideIcon("archive-restore", __iconNode$36);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/archive.mjs
@@ -227,7 +228,7 @@ const ArchiveRestore = createLucideIcon("archive-restore", __iconNode$33);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$32 = [
+const __iconNode$35 = [
 	["rect", {
 		width: "20",
 		height: "5",
@@ -245,7 +246,7 @@ const __iconNode$32 = [
 		key: "a56b0p"
 	}]
 ];
-const Archive = createLucideIcon("archive", __iconNode$32);
+const Archive = createLucideIcon("archive", __iconNode$35);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/arrow-up.mjs
@@ -255,14 +256,14 @@ const Archive = createLucideIcon("archive", __iconNode$32);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$31 = [["path", {
+const __iconNode$34 = [["path", {
 	d: "m5 12 7-7 7 7",
 	key: "hav0vg"
 }], ["path", {
 	d: "M12 19V5",
 	key: "x0mq9r"
 }]];
-const ArrowUp = createLucideIcon("arrow-up", __iconNode$31);
+const ArrowUp = createLucideIcon("arrow-up", __iconNode$34);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/check.mjs
@@ -272,11 +273,11 @@ const ArrowUp = createLucideIcon("arrow-up", __iconNode$31);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$30 = [["path", {
+const __iconNode$33 = [["path", {
 	d: "M20 6 9 17l-5-5",
 	key: "1gmf2c"
 }]];
-const Check = createLucideIcon("check", __iconNode$30);
+const Check = createLucideIcon("check", __iconNode$33);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/chevron-down.mjs
@@ -286,11 +287,11 @@ const Check = createLucideIcon("check", __iconNode$30);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$29 = [["path", {
+const __iconNode$32 = [["path", {
 	d: "m6 9 6 6 6-6",
 	key: "qrunsl"
 }]];
-const ChevronDown = createLucideIcon("chevron-down", __iconNode$29);
+const ChevronDown = createLucideIcon("chevron-down", __iconNode$32);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/circle-check.mjs
@@ -300,7 +301,7 @@ const ChevronDown = createLucideIcon("chevron-down", __iconNode$29);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$28 = [["circle", {
+const __iconNode$31 = [["circle", {
 	cx: "12",
 	cy: "12",
 	r: "10",
@@ -309,7 +310,7 @@ const __iconNode$28 = [["circle", {
 	d: "m9 12 2 2 4-4",
 	key: "dzmm74"
 }]];
-const CircleCheck = createLucideIcon("circle-check", __iconNode$28);
+const CircleCheck = createLucideIcon("circle-check", __iconNode$31);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/circle-question-mark.mjs
@@ -319,7 +320,7 @@ const CircleCheck = createLucideIcon("circle-check", __iconNode$28);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$27 = [
+const __iconNode$30 = [
 	["circle", {
 		cx: "12",
 		cy: "12",
@@ -335,7 +336,7 @@ const __iconNode$27 = [
 		key: "p32p05"
 	}]
 ];
-const CircleQuestionMark = createLucideIcon("circle-question-mark", __iconNode$27);
+const CircleQuestionMark = createLucideIcon("circle-question-mark", __iconNode$30);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/circle-x.mjs
@@ -345,7 +346,7 @@ const CircleQuestionMark = createLucideIcon("circle-question-mark", __iconNode$2
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$26 = [
+const __iconNode$29 = [
 	["circle", {
 		cx: "12",
 		cy: "12",
@@ -361,7 +362,7 @@ const __iconNode$26 = [
 		key: "z0biqf"
 	}]
 ];
-const CircleX = createLucideIcon("circle-x", __iconNode$26);
+const CircleX = createLucideIcon("circle-x", __iconNode$29);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/clipboard-list.mjs
@@ -371,7 +372,7 @@ const CircleX = createLucideIcon("circle-x", __iconNode$26);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$25 = [
+const __iconNode$28 = [
 	["rect", {
 		width: "8",
 		height: "4",
@@ -402,7 +403,7 @@ const __iconNode$25 = [
 		key: "18s6g9"
 	}]
 ];
-const ClipboardList = createLucideIcon("clipboard-list", __iconNode$25);
+const ClipboardList = createLucideIcon("clipboard-list", __iconNode$28);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/copy.mjs
@@ -412,7 +413,7 @@ const ClipboardList = createLucideIcon("clipboard-list", __iconNode$25);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$24 = [["rect", {
+const __iconNode$27 = [["rect", {
 	width: "14",
 	height: "14",
 	x: "8",
@@ -424,7 +425,7 @@ const __iconNode$24 = [["rect", {
 	d: "M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2",
 	key: "zix9uf"
 }]];
-const Copy = createLucideIcon("copy", __iconNode$24);
+const Copy = createLucideIcon("copy", __iconNode$27);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/download.mjs
@@ -434,7 +435,7 @@ const Copy = createLucideIcon("copy", __iconNode$24);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$23 = [
+const __iconNode$26 = [
 	["path", {
 		d: "M12 15V3",
 		key: "m9g1x1"
@@ -448,7 +449,7 @@ const __iconNode$23 = [
 		key: "brsn70"
 	}]
 ];
-const Download = createLucideIcon("download", __iconNode$23);
+const Download = createLucideIcon("download", __iconNode$26);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/external-link.mjs
@@ -458,7 +459,7 @@ const Download = createLucideIcon("download", __iconNode$23);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$22 = [
+const __iconNode$25 = [
 	["path", {
 		d: "M15 3h6v6",
 		key: "1q9fwt"
@@ -472,7 +473,26 @@ const __iconNode$22 = [
 		key: "a6xqqp"
 	}]
 ];
-const ExternalLink = createLucideIcon("external-link", __iconNode$22);
+const ExternalLink = createLucideIcon("external-link", __iconNode$25);
+
+//#endregion
+//#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/eye.mjs
+/**
+* @license lucide-react v1.27.0 - ISC
+*
+* This source code is licensed under the ISC license.
+* See the LICENSE file in the root directory of this source tree.
+*/
+const __iconNode$24 = [["path", {
+	d: "M2.062 12.348a1 1 0 0 1 0-.696 10.75 10.75 0 0 1 19.876 0 1 1 0 0 1 0 .696 10.75 10.75 0 0 1-19.876 0",
+	key: "1nclc0"
+}], ["circle", {
+	cx: "12",
+	cy: "12",
+	r: "3",
+	key: "1v7zrd"
+}]];
+const Eye = createLucideIcon("eye", __iconNode$24);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/file.mjs
@@ -482,14 +502,14 @@ const ExternalLink = createLucideIcon("external-link", __iconNode$22);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$21 = [["path", {
+const __iconNode$23 = [["path", {
 	d: "M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z",
 	key: "1oefj6"
 }], ["path", {
 	d: "M14 2v5a1 1 0 0 0 1 1h5",
 	key: "wfsgrz"
 }]];
-const File = createLucideIcon("file", __iconNode$21);
+const File = createLucideIcon("file", __iconNode$23);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/list-checks.mjs
@@ -499,7 +519,7 @@ const File = createLucideIcon("file", __iconNode$21);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$20 = [
+const __iconNode$22 = [
 	["path", {
 		d: "M13 5h8",
 		key: "a7qcls"
@@ -521,7 +541,7 @@ const __iconNode$20 = [
 		key: "1obspn"
 	}]
 ];
-const ListChecks = createLucideIcon("list-checks", __iconNode$20);
+const ListChecks = createLucideIcon("list-checks", __iconNode$22);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/loader-circle.mjs
@@ -531,11 +551,11 @@ const ListChecks = createLucideIcon("list-checks", __iconNode$20);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$19 = [["path", {
+const __iconNode$21 = [["path", {
 	d: "M21 12a9 9 0 1 1-6.219-8.56",
 	key: "13zald"
 }]];
-const LoaderCircle = createLucideIcon("loader-circle", __iconNode$19);
+const LoaderCircle = createLucideIcon("loader-circle", __iconNode$21);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/menu.mjs
@@ -545,7 +565,7 @@ const LoaderCircle = createLucideIcon("loader-circle", __iconNode$19);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$18 = [
+const __iconNode$20 = [
 	["path", {
 		d: "M4 5h16",
 		key: "1tepv9"
@@ -559,7 +579,7 @@ const __iconNode$18 = [
 		key: "1djgab"
 	}]
 ];
-const Menu = createLucideIcon("menu", __iconNode$18);
+const Menu = createLucideIcon("menu", __iconNode$20);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/message-circle-question-mark.mjs
@@ -569,7 +589,7 @@ const Menu = createLucideIcon("menu", __iconNode$18);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$17 = [
+const __iconNode$19 = [
 	["path", {
 		d: "M2.992 16.342a2 2 0 0 1 .094 1.167l-1.065 3.29a1 1 0 0 0 1.236 1.168l3.413-.998a2 2 0 0 1 1.099.092 10 10 0 1 0-4.777-4.719",
 		key: "1sd12s"
@@ -583,7 +603,35 @@ const __iconNode$17 = [
 		key: "p32p05"
 	}]
 ];
-const MessageCircleQuestionMark = createLucideIcon("message-circle-question-mark", __iconNode$17);
+const MessageCircleQuestionMark = createLucideIcon("message-circle-question-mark", __iconNode$19);
+
+//#endregion
+//#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/mic.mjs
+/**
+* @license lucide-react v1.27.0 - ISC
+*
+* This source code is licensed under the ISC license.
+* See the LICENSE file in the root directory of this source tree.
+*/
+const __iconNode$18 = [
+	["path", {
+		d: "M12 19v3",
+		key: "npa21l"
+	}],
+	["path", {
+		d: "M19 10v2a7 7 0 0 1-14 0v-2",
+		key: "1vc78b"
+	}],
+	["rect", {
+		x: "9",
+		y: "2",
+		width: "6",
+		height: "13",
+		rx: "3",
+		key: "s6n7sd"
+	}]
+];
+const Mic = createLucideIcon("mic", __iconNode$18);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/panel-right-open.mjs
@@ -593,7 +641,7 @@ const MessageCircleQuestionMark = createLucideIcon("message-circle-question-mark
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$16 = [
+const __iconNode$17 = [
 	["rect", {
 		width: "18",
 		height: "18",
@@ -611,7 +659,7 @@ const __iconNode$16 = [
 		key: "1pgupc"
 	}]
 ];
-const PanelRightOpen = createLucideIcon("panel-right-open", __iconNode$16);
+const PanelRightOpen = createLucideIcon("panel-right-open", __iconNode$17);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/paperclip.mjs
@@ -621,11 +669,11 @@ const PanelRightOpen = createLucideIcon("panel-right-open", __iconNode$16);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$15 = [["path", {
+const __iconNode$16 = [["path", {
 	d: "m16 6-8.414 8.586a2 2 0 0 0 2.829 2.829l8.414-8.586a4 4 0 1 0-5.657-5.657l-8.379 8.551a6 6 0 1 0 8.485 8.485l8.379-8.551",
 	key: "1miecu"
 }]];
-const Paperclip = createLucideIcon("paperclip", __iconNode$15);
+const Paperclip = createLucideIcon("paperclip", __iconNode$16);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/pencil.mjs
@@ -635,14 +683,14 @@ const Paperclip = createLucideIcon("paperclip", __iconNode$15);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$14 = [["path", {
+const __iconNode$15 = [["path", {
 	d: "M21.174 6.812a1 1 0 0 0-3.986-3.987L3.842 16.174a2 2 0 0 0-.5.83l-1.321 4.352a.5.5 0 0 0 .623.622l4.353-1.32a2 2 0 0 0 .83-.497z",
 	key: "1a8usu"
 }], ["path", {
 	d: "m15 5 4 4",
 	key: "1mk7zo"
 }]];
-const Pencil = createLucideIcon("pencil", __iconNode$14);
+const Pencil = createLucideIcon("pencil", __iconNode$15);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/play.mjs
@@ -652,11 +700,11 @@ const Pencil = createLucideIcon("pencil", __iconNode$14);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$13 = [["path", {
+const __iconNode$14 = [["path", {
 	d: "M5 5a2 2 0 0 1 3.008-1.728l11.997 6.998a2 2 0 0 1 .003 3.458l-12 7A2 2 0 0 1 5 19z",
 	key: "10ikf1"
 }]];
-const Play = createLucideIcon("play", __iconNode$13);
+const Play = createLucideIcon("play", __iconNode$14);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/plug-zap.mjs
@@ -666,7 +714,7 @@ const Play = createLucideIcon("play", __iconNode$13);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$12 = [
+const __iconNode$13 = [
 	["path", {
 		d: "M6.3 20.3a2.4 2.4 0 0 0 3.4 0L12 18l-6-6-2.3 2.3a2.4 2.4 0 0 0 0 3.4Z",
 		key: "goz73y"
@@ -688,7 +736,7 @@ const __iconNode$12 = [
 		key: "16psg9"
 	}]
 ];
-const PlugZap = createLucideIcon("plug-zap", __iconNode$12);
+const PlugZap = createLucideIcon("plug-zap", __iconNode$13);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/plus.mjs
@@ -698,14 +746,14 @@ const PlugZap = createLucideIcon("plug-zap", __iconNode$12);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$11 = [["path", {
+const __iconNode$12 = [["path", {
 	d: "M5 12h14",
 	key: "1ays0h"
 }], ["path", {
 	d: "M12 5v14",
 	key: "s699le"
 }]];
-const Plus = createLucideIcon("plus", __iconNode$11);
+const Plus = createLucideIcon("plus", __iconNode$12);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/rotate-ccw-clock.mjs
@@ -715,7 +763,7 @@ const Plus = createLucideIcon("plus", __iconNode$11);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$10 = [
+const __iconNode$11 = [
 	["path", {
 		d: "M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8",
 		key: "1357e3"
@@ -729,7 +777,7 @@ const __iconNode$10 = [
 		key: "1fdv2h"
 	}]
 ];
-const RotateCcwClock = createLucideIcon("rotate-ccw-clock", __iconNode$10);
+const RotateCcwClock = createLucideIcon("rotate-ccw-clock", __iconNode$11);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/rotate-ccw.mjs
@@ -739,14 +787,14 @@ const RotateCcwClock = createLucideIcon("rotate-ccw-clock", __iconNode$10);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$9 = [["path", {
+const __iconNode$10 = [["path", {
 	d: "M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8",
 	key: "1357e3"
 }], ["path", {
 	d: "M3 3v5h5",
 	key: "1xhq8a"
 }]];
-const RotateCcw = createLucideIcon("rotate-ccw", __iconNode$9);
+const RotateCcw = createLucideIcon("rotate-ccw", __iconNode$10);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/search.mjs
@@ -756,7 +804,7 @@ const RotateCcw = createLucideIcon("rotate-ccw", __iconNode$9);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$8 = [["path", {
+const __iconNode$9 = [["path", {
 	d: "m21 21-4.34-4.34",
 	key: "14j7rj"
 }], ["circle", {
@@ -765,7 +813,7 @@ const __iconNode$8 = [["path", {
 	r: "8",
 	key: "4ej97u"
 }]];
-const Search = createLucideIcon("search", __iconNode$8);
+const Search = createLucideIcon("search", __iconNode$9);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/settings.mjs
@@ -775,7 +823,7 @@ const Search = createLucideIcon("search", __iconNode$8);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$7 = [["path", {
+const __iconNode$8 = [["path", {
 	d: "M9.671 4.136a2.34 2.34 0 0 1 4.659 0 2.34 2.34 0 0 0 3.319 1.915 2.34 2.34 0 0 1 2.33 4.033 2.34 2.34 0 0 0 0 3.831 2.34 2.34 0 0 1-2.33 4.033 2.34 2.34 0 0 0-3.319 1.915 2.34 2.34 0 0 1-4.659 0 2.34 2.34 0 0 0-3.32-1.915 2.34 2.34 0 0 1-2.33-4.033 2.34 2.34 0 0 0 0-3.831A2.34 2.34 0 0 1 6.35 6.051a2.34 2.34 0 0 0 3.319-1.915",
 	key: "1i5ecw"
 }], ["circle", {
@@ -784,7 +832,7 @@ const __iconNode$7 = [["path", {
 	r: "3",
 	key: "1v7zrd"
 }]];
-const Settings = createLucideIcon("settings", __iconNode$7);
+const Settings = createLucideIcon("settings", __iconNode$8);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/shield-alert.mjs
@@ -794,7 +842,7 @@ const Settings = createLucideIcon("settings", __iconNode$7);
 * This source code is licensed under the ISC license.
 * See the LICENSE file in the root directory of this source tree.
 */
-const __iconNode$6 = [
+const __iconNode$7 = [
 	["path", {
 		d: "M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",
 		key: "oel41y"
@@ -808,7 +856,31 @@ const __iconNode$6 = [
 		key: "1drbdi"
 	}]
 ];
-const ShieldAlert = createLucideIcon("shield-alert", __iconNode$6);
+const ShieldAlert = createLucideIcon("shield-alert", __iconNode$7);
+
+//#endregion
+//#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/shield-off.mjs
+/**
+* @license lucide-react v1.27.0 - ISC
+*
+* This source code is licensed under the ISC license.
+* See the LICENSE file in the root directory of this source tree.
+*/
+const __iconNode$6 = [
+	["path", {
+		d: "m2 2 20 20",
+		key: "1ooewy"
+	}],
+	["path", {
+		d: "M5 5a1 1 0 0 0-1 1v7c0 5 3.5 7.5 7.67 8.94a1 1 0 0 0 .67.01c2.35-.82 4.48-1.97 5.9-3.71",
+		key: "1jlk70"
+	}],
+	["path", {
+		d: "M9.309 3.652A12.252 12.252 0 0 0 11.24 2.28a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1v7a9.784 9.784 0 0 1-.08 1.264",
+		key: "18rp1v"
+	}]
+];
+const ShieldOff = createLucideIcon("shield-off", __iconNode$6);
 
 //#endregion
 //#region ../../node_modules/.pnpm/lucide-react@1.27.0_react@19.2.8/node_modules/lucide-react/dist/esm/icons/sparkles.mjs
@@ -9030,7 +9102,6 @@ function cn(...inputs) {
 //#region ../ui-kit/src/components/Badge.tsx
 const toneClasses = {
 	neutral: "bg-subtle text-muted",
-	primary: "bg-subtle text-ink",
 	success: "bg-success-soft text-success",
 	warning: "bg-warning-soft text-warning",
 	info: "bg-info-soft text-info",
@@ -9628,6 +9699,7 @@ function Select({ options, value, onChange, placeholder, disabled = false, id, l
 				children: placeholder
 			}), options.map((option) => /* @__PURE__ */ jsx("option", {
 				value: option.value,
+				disabled: option.disabled,
 				children: option.label
 			}, option.value))]
 		}), /* @__PURE__ */ jsx(ChevronDown, {
@@ -40531,6 +40603,18 @@ const fadeInUp = {
 
 //#endregion
 //#region ../ui-kit/src/runtime-config/types.ts
+/**
+* 生成式 UI 场景预设的默认开放范围。
+* ui-kit 不依赖 `@webskill/ui`，因此这里只能写字面量；
+* 与目录实际导出的 `UI_PRESET_NAMES` 是否一致由 console 的测试守护。
+*/
+const DEFAULT_UI_PRESETS = [
+	"charts",
+	"cards",
+	"dashboards",
+	"slides",
+	"reports"
+];
 /** SDK 默认值（AgentLoop 10/120s/30s/100KB、interaction user/required/300s、deny-all 等） */
 function defaultRuntimeConfig() {
 	return {
@@ -40565,13 +40649,60 @@ function defaultRuntimeConfig() {
 			remoteUrl: {
 				allowHttp: false,
 				allowPrivateHosts: false
-			}
+			},
+			typescript: { enabled: false }
 		},
-		llm: {
-			provider: "openai-compatible",
-			model: ""
-		}
-	};
+		llm: { entries: [] },
+		agentCapabilities: {
+			todo: true,
+			skillGeneration: false,
+			generativeUi: false,
+			formAutofill: false,
+			delegation: false,
+			uiPresets: [...DEFAULT_UI_PRESETS]
+		},
+		security: { unsignedSkills: "warn" }
+	};
+}
+/** 旧的单对象配置升格成列表时使用的固定 id：每次 load 都重算，随机 id 会让会话里存的归属失效 */
+const MIGRATED_ENTRY_ID = "llm-1";
+function isLlmEntry(value) {
+	const e = value;
+	return typeof e?.id === "string" && e.id !== "" && typeof e.provider === "string";
+}
+/**
+* `llm` 段的迁移（AC-4.2）：旧的单对象升格为单元素列表，原字段一个不丢（含 `apiKey`）。
+* 全空的旧配置等价于「还没配过模型」，不生成占位条目。
+*/
+function mergeLlmSelection(raw) {
+	const value = typeof raw === "object" && raw !== null ? raw : {};
+	const entries = Array.isArray(value["entries"]) ? value["entries"].filter(isLlmEntry).map((entry) => ({
+		...entry,
+		label: entry.label ?? entry.model ?? entry.id
+	})) : upgradeLegacyLlm(value);
+	if (entries.length === 0) return { entries: [] };
+	const requested = typeof value["defaultId"] === "string" ? value["defaultId"] : void 0;
+	const defaultId = entries.some((entry) => entry.id === requested) ? requested : entries[0]?.id;
+	return defaultId !== void 0 ? {
+		entries,
+		defaultId
+	} : { entries };
+}
+function upgradeLegacyLlm(legacy) {
+	const model = typeof legacy.model === "string" ? legacy.model.trim() : "";
+	const baseUrl = typeof legacy.baseUrl === "string" ? legacy.baseUrl.trim() : "";
+	const apiKey = typeof legacy.apiKey === "string" ? legacy.apiKey.trim() : "";
+	if (model === "" && baseUrl === "" && apiKey === "") return [];
+	const provider = typeof legacy.provider === "string" ? legacy.provider : "openai-compatible";
+	return [{
+		id: MIGRATED_ENTRY_ID,
+		label: model !== "" ? model : provider,
+		provider,
+		model,
+		...baseUrl !== "" ? { baseUrl } : {},
+		...apiKey !== "" ? { apiKey } : {},
+		...typeof legacy.requestTimeoutMs === "number" ? { requestTimeoutMs: legacy.requestTimeoutMs } : {}
+	}];
 }
 /** 存储读出的部分配置按默认值补齐（老版本存储缺字段时平滑迁移） */
 function mergeRuntimeConfigDefaults(partial) {
@@ -40597,11 +40728,24 @@ function mergeRuntimeConfigDefaults(partial) {
 			remoteUrl: {
 				...d.sandbox.remoteUrl,
 				...p["sandbox"]?.["remoteUrl"] ?? {}
+			},
+			typescript: {
+				...d.sandbox.typescript,
+				...p["sandbox"]?.["typescript"] ?? {}
 			}
 		},
-		llm: sub("llm", d.llm)
+		llm: mergeLlmSelection(p["llm"]),
+		agentCapabilities: {
+			...sub("agentCapabilities", d.agentCapabilities),
+			uiPresets: readStringList$1(p["agentCapabilities"]?.["uiPresets"], d.agentCapabilities.uiPresets)
+		},
+		security: sub("security", d.security)
 	};
 }
+function readStringList$1(raw, fallback) {
+	if (!Array.isArray(raw)) return [...fallback];
+	return raw.filter((item) => typeof item === "string");
+}
 /**
 * Wraps a store whose load() may return partial/legacy data, normalizing every read
 * through mergeRuntimeConfigDefaults so all consumers share one defaults-filling
@@ -40615,6 +40759,146 @@ function withRuntimeConfigDefaults(store) {
 	};
 }
 
+//#endregion
+//#region ../core/src/errors.ts
+/**
+* 所有公开 API 抛出的结构化错误，code 供上层可编程处理
+* @stable
+*/
+var WebSkillError$1 = class extends Error {
+	code;
+	details;
+	constructor(code, message, details) {
+		super(message);
+		this.name = "WebSkillError";
+		this.code = code;
+		this.details = details;
+	}
+};
+
+//#endregion
+//#region ../ui-kit/src/runtime-config/preferences.ts
+/** 导出结构的版本；导入时逐字校验，不做向前兼容猜测 */
+const PREFERENCE_EXPORT_VERSION = 1;
+/**
+* 判定为凭据的键名片段（归一化后按**子串**匹配）。用子串而不是全等，是因为被污染的
+* 文件不会只带 `apiKey`——`accessToken`、`clientSecret`、`userPassword` 都得拦住。
+* 偏好结构里的合法键（id/label/provider/model/theme/locale/uiPresets…）不含这些片段。
+*/
+const CREDENTIAL_MARKERS = [
+	"apikey",
+	"secret",
+	"token",
+	"password",
+	"passphrase",
+	"credential",
+	"privatekey"
+];
+const normalizeKey = (key) => key.toLowerCase().replace(/[-_\s]/g, "");
+const isCredentialKey = (key) => {
+	const normalized = normalizeKey(key);
+	return CREDENTIAL_MARKERS.some((marker) => normalized.includes(marker));
+};
+/** 深度扫描凭据键；命中返回第一个原始键名 */
+function findCredentialKey(value) {
+	if (Array.isArray(value)) {
+		for (const item of value) {
+			const hit = findCredentialKey(item);
+			if (hit !== void 0) return hit;
+		}
+		return;
+	}
+	if (typeof value !== "object" || value === null) return void 0;
+	for (const [key, child] of Object.entries(value)) {
+		if (isCredentialKey(key)) return key;
+		const hit = findCredentialKey(child);
+		if (hit !== void 0) return hit;
+	}
+}
+/**
+* 导出偏好（FR-5.1）。凭据在类型层面就进不来，这里再加一条运行时断言：
+* 类型可以被 `as` 绕过，而这个文件会被用户发给同事、传网盘（AC-5.1 双保险）。
+* @experimental
+*/
+function exportPreferences(config, options) {
+	const models = config.llm.entries.map((entry) => {
+		const { apiKey: _dropped, ...rest } = entry;
+		return rest;
+	});
+	const result = {
+		version: 1,
+		exportedAt: options?.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
+		preferences: {
+			...options?.appearance ? { appearance: options.appearance } : {},
+			interaction: {
+				missingParams: config.interaction.missingParams,
+				confirmations: config.interaction.confirmations
+			},
+			models,
+			agentCapabilities: {
+				todo: config.agentCapabilities.todo,
+				skillGeneration: config.agentCapabilities.skillGeneration,
+				generativeUi: config.agentCapabilities.generativeUi,
+				formAutofill: config.agentCapabilities.formAutofill,
+				delegation: config.agentCapabilities.delegation,
+				uiPresets: [...config.agentCapabilities.uiPresets]
+			}
+		}
+	};
+	const leaked = findCredentialKey(result);
+	if (leaked !== void 0) throw new WebSkillError$1("PREFERENCE_IMPORT_CREDENTIAL_REJECTED", `Preference export must not contain credentials, but "${leaked}" was present`);
+	return result;
+}
+/**
+* 解析并校验导入内容（FR-5.3 / FR-5.4）。含凭据是**拒绝**而不是忽略：
+* 文件里有密钥说明它可能来自被污染的来源，静默丢弃会掩盖问题。
+* @experimental
+*/
+function importPreferences(raw) {
+	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new WebSkillError$1("PREFERENCE_IMPORT_INVALID", "Preference file must be a JSON object");
+	const record = raw;
+	if (record["version"] !== 1) throw new WebSkillError$1("PREFERENCE_IMPORT_VERSION_UNSUPPORTED", `Unsupported preference file version ${JSON.stringify(record["version"])}; expected ${1}`);
+	const preferences = record["preferences"];
+	if (typeof preferences !== "object" || preferences === null || Array.isArray(preferences)) throw new WebSkillError$1("PREFERENCE_IMPORT_INVALID", "Preference file is missing a \"preferences\" object");
+	const leaked = findCredentialKey(record);
+	if (leaked !== void 0) throw new WebSkillError$1("PREFERENCE_IMPORT_CREDENTIAL_REJECTED", `Preference file contains a credential field "${leaked}"; import was rejected`);
+	return {
+		version: 1,
+		exportedAt: String(record["exportedAt"] ?? ""),
+		preferences
+	};
+}
+/**
+* 把导入的偏好合到当前配置上（FR-5.4）。模型条目的 `apiKey` 一律留空——
+* 导出物里本来就没有，用户须在导入后重新填写。
+* @experimental
+*/
+function applyPreferences(config, imported) {
+	const { interaction, models, agentCapabilities } = imported.preferences;
+	const entries = models?.map((entry) => ({ ...entry }));
+	return {
+		...config,
+		interaction: {
+			...config.interaction,
+			...interaction?.missingParams === "user" || interaction?.missingParams === "llm" ? { missingParams: interaction.missingParams } : {},
+			...interaction?.confirmations === "required" || interaction?.confirmations === "auto-approve" ? { confirmations: interaction.confirmations } : {}
+		},
+		...entries ? { llm: {
+			entries,
+			...entries[0] ? { defaultId: entries[0].id } : {}
+		} } : {},
+		agentCapabilities: {
+			...config.agentCapabilities,
+			...typeof agentCapabilities?.todo === "boolean" ? { todo: agentCapabilities.todo } : {},
+			...typeof agentCapabilities?.skillGeneration === "boolean" ? { skillGeneration: agentCapabilities.skillGeneration } : {},
+			...typeof agentCapabilities?.generativeUi === "boolean" ? { generativeUi: agentCapabilities.generativeUi } : {},
+			...typeof agentCapabilities?.formAutofill === "boolean" ? { formAutofill: agentCapabilities.formAutofill } : {},
+			...typeof agentCapabilities?.delegation === "boolean" ? { delegation: agentCapabilities.delegation } : {},
+			...Array.isArray(agentCapabilities?.uiPresets) ? { uiPresets: agentCapabilities.uiPresets.filter((name) => typeof name === "string") } : {}
+		}
+	};
+}
+
 //#endregion
 //#region src/core/interactionBridge.ts
 /**
@@ -40817,10 +41101,79 @@ var CompositeUiBridge = class {
 	}
 };
 
+//#endregion
+//#region src/core/subAgent.ts
+/**
+* 子 agent 不继承的工具来源（设计 03 §20）：
+* - `delegation`：孙 agent 递归委派不在本版范围；
+* - `todo`：清单归父 agent，子 agent 拿到 `manage_todo` 就能整表替换父级计划。
+*/
+const SUB_AGENT_EXCLUDED_KINDS = /* @__PURE__ */ new Set(["delegation", "todo"]);
+/** 限定子 agent 可用工具名（`allowedTools` 缺省即继承父级全集） */
+function restrict(source, allowed) {
+	return {
+		...source,
+		listToolSpecs: async () => (await source.listToolSpecs()).filter((spec) => allowed.has(spec.name)),
+		canHandle: (name) => allowed.has(name) && source.canHandle(name)
+	};
+}
+/**
+* chatbot 侧的 `SubAgentRunner`（设计 03 §18 注记里欠的那一半装配）。
+*
+* 每次委派新建一个子 `WebSkillRuntime`，而不是复用父实例：
+* 预算（`maxTurns` / `totalTimeoutMs`）是构造期配置，复用就没法按 `input.budget` 收紧；
+* 事件总线也必须是独立的，否则子 run 的 `route` 事件会被 chatbot 当成新的一轮对话。
+*
+* 上下文隔离不靠约定：子 run 不带任何 history，父 agent 只从返回值里拿到 `summary`。
+*/
+function createChatbotSubAgentRunner(options) {
+	const { deps, loopConfig, uiBridge } = options;
+	return async (input) => {
+		const inherited = (deps.externalTools ?? []).filter((source) => !SUB_AGENT_EXCLUDED_KINDS.has(source.kind));
+		const allowed = input.allowedTools ? new Set(input.allowedTools) : void 0;
+		const events = new EventBus();
+		const runtime = new WebSkillRuntime({
+			...deps,
+			eventBus: events,
+			uiBridge: withDelegationOrigin(uiBridge, input.origin),
+			externalTools: allowed ? inherited.map((source) => restrict(source, allowed)) : inherited,
+			config: {
+				...loopConfig,
+				maxTurns: input.budget.maxTurns,
+				totalTimeoutMs: input.budget.timeoutMs
+			}
+		});
+		let subRunId;
+		let abortedBeforeStart = false;
+		events.on("*", (event) => {
+			if (event.phase !== "route") return;
+			subRunId = event.runId;
+			if (abortedBeforeStart) runtime.cancel(event.runId);
+		});
+		const onAbort = () => {
+			if (subRunId === void 0) abortedBeforeStart = true;
+			else runtime.cancel(subRunId);
+		};
+		input.signal.addEventListener("abort", onAbort);
+		try {
+			const result = await runtime.run(input.task);
+			if (result.run.status !== "completed") throw new WebSkillError("RUN_FAILED", result.output);
+			return { summary: result.output };
+		} finally {
+			input.signal.removeEventListener("abort", onAbort);
+		}
+	};
+}
+
 //#endregion
 //#region src/core/chatEngine.ts
 /** 注入模型的单个附件正文上限（超出截断并标注） */
 const ATTACHMENT_TEXT_LIMIT = 32 * 1024;
+/**
+* 表单填写值归属的 user 作用域标识。chatbot 是单人本地应用，没有账号体系，
+* 固定值即可；它只决定 memory 里的作用域名，不参与任何鉴权。
+*/
+const CHATBOT_AUTOFILL_USER_ID = "local";
 /** sdk 的 `SessionMeta` → chatbot 的列表视图类型（跨层适配，非复刻） */
 const toSessionMeta = (session) => ({
 	id: session.id,
@@ -40870,32 +41223,47 @@ const SANDBOX_MODE = {
 	"blob-worker": "worker",
 	"iframe-sandbox": "iframe"
 };
-/** RuntimeConfig.llm → 客户端工厂（provider 三档；缺省 OpenAI 兼容） */
-function createRuntimeLlm(config) {
-	const common = {
-		...config.baseUrl?.trim() ? { baseUrl: config.baseUrl } : {},
-		...config.requestTimeoutMs !== void 0 ? { requestTimeoutMs: config.requestTimeoutMs } : {}
+/** 条目能否真的发请求：云端要有端点或密钥，浏览器内置两者都不需要 */
+const isUsableEntry = (entry) => entry.provider === "chrome-builtin" || Boolean(entry.apiKey?.trim()) || Boolean(entry.baseUrl?.trim());
+/** 选中条目 → 默认条目 → 首条；都没有则返回 undefined（走内置演示） */
+function pickLlmEntry(rc, selectedId) {
+	const entries = rc?.llm.entries ?? [];
+	const byId = (id) => id === void 0 ? void 0 : entries.find((entry) => entry.id === id);
+	const entry = byId(selectedId) ?? byId(rc?.llm.defaultId) ?? entries[0];
+	return entry !== void 0 && isUsableEntry(entry) ? entry : void 0;
+}
+/**
+* 装配时（而非执行时）把 `sandbox.typescript` 转成执行器参数，让配置错误早暴露。
+* 只对绝对 URL 走 `RemoteUrlPolicy`：同源相对路径与打包器 specifier 不是出站请求。
+*/
+function resolveTypeScriptSupport(config, remoteUrl) {
+	if (!config.enabled) return void 0;
+	const esbuildUrl = config.esbuildUrl?.trim() ?? "";
+	if (esbuildUrl === "") throw new WebSkillError("TS_RESOURCE_URL_REJECTED", "TypeScript support is enabled but no esbuild URL is configured (sandbox.typescript.esbuildUrl)");
+	const wasmUrl = config.wasmUrl?.trim() ?? "";
+	assertTsResourceUrl(esbuildUrl, remoteUrl);
+	if (wasmUrl !== "") assertTsResourceUrl(wasmUrl, remoteUrl);
+	return {
+		esbuildUrl,
+		...wasmUrl !== "" ? { wasmUrl } : {}
 	};
-	if (config.provider === "anthropic") return new AnthropicClient({
-		apiKey: config.apiKey ?? "",
-		model: config.model,
-		...common
-	});
-	if (config.provider === "google") return new GoogleGenAiClient({
-		apiKey: config.apiKey ?? "",
-		model: config.model,
-		...common
-	});
-	return new OpenAiCompatibleClient({
-		baseUrl: config.baseUrl,
-		apiKey: config.apiKey,
-		model: config.model,
-		...config.requestTimeoutMs !== void 0 ? { requestTimeoutMs: config.requestTimeoutMs } : {}
-	});
+}
+function assertTsResourceUrl(value, remoteUrl) {
+	let absolute;
+	try {
+		absolute = new URL(value);
+	} catch {
+		return;
+	}
+	try {
+		assertRemoteUrlAllowed(absolute.href, remoteUrl);
+	} catch (e) {
+		throw new WebSkillError("TS_RESOURCE_URL_REJECTED", `TypeScript transpiler resource is not allowed by the remote URL policy: ${messageOf(e)}`, e);
+	}
 }
 /**
 * 对话框引擎：装配 WebSkillRuntime + 会话持久化 + 事件分发。
-* llmConfig.load() 是异步的，runtime 在首次 send 前懒装配（#ensureReady）。
+* RuntimeConfig 的 load() 是异步的，runtime 在首次 send 前懒装配（#ensureReady）。
 * @stable
 */
 var ChatEngine = class {
@@ -40925,6 +41293,27 @@ var ChatEngine = class {
 	#traceStore;
 	/** 会话落盘；缺省是本包内引用 `FsSessionStore` 的唯一处 */
 	#sessions;
+	/**
+	* 待办清单容器（需求 3）。引擎级单例：一份清单属于最近开始的 run，
+	* 与「一次只有一个 agent 在跑」的串行模型一致。
+	*/
+	#todoStore = new TodoStore();
+	/** 当前 run（'route' 事件捕获，终态清理）；清单与页面感知的事件归属共用 */
+	#activeRunId;
+	/**
+	* 会话级模型选择（需求 4）：用户在 composer 里选的条目 id。
+	* 属于会话状态而不是配置——切换只影响后续消息，已发出的消息各自记着当时的模型。
+	*/
+	#selectedModelId;
+	/** 最近一次装配实际用上的条目 id（写进 assistant 消息的 `model`） */
+	#activeModelId;
+	/** runId → 清单快照（随 assistant 消息持久化，供历史重放） */
+	#runTodos = /* @__PURE__ */ new Map();
+	/** 本 run 内的页面感知记录（写进 assistant 消息，供历史回看） */
+	#runPerceptions = /* @__PURE__ */ new Map();
+	/** 父 run 的预算消耗（委派时按「父级剩余」收紧子 agent 预算，FR-11.4） */
+	#runStartedMs = 0;
+	#runTurn = 0;
 	constructor(adapter, options = {}) {
 		this.#adapter = adapter;
 		this.#options = options;
@@ -40954,11 +41343,49 @@ var ChatEngine = class {
 			getInteractionChannel: () => this.#interactionChannel,
 			emit: (event) => this.#emit(event)
 		});
+		this.#todoStore.subscribe(() => {
+			const runId = this.#activeRunId;
+			if (runId === void 0) return;
+			const items = this.#todoStore.snapshot().items;
+			if (items.length > 0) this.#runTodos.set(runId, items);
+			this.#emit({
+				type: "todo-changed",
+				runId,
+				items
+			});
+		});
+		this.#adapter.pagePerception?.subscribe((record) => {
+			const runId = this.#activeRunId;
+			if (runId === void 0) return;
+			this.#runPerceptions.set(runId, [...this.#runPerceptions.get(runId) ?? [], record]);
+			this.#emit({
+				type: "page-perceived",
+				runId,
+				record
+			});
+		});
+	}
+	/** 当前待办清单快照（宿主可直读；实时更新订阅 `todo-changed` 事件） */
+	get todos() {
+		return this.#todoStore.snapshot().items;
 	}
 	/** 当前渲染框架档 */
 	get renderer() {
 		return this.#renderer;
 	}
+	/** 当前会话选中的模型条目 id；未显式切换过时为 undefined（走 `RuntimeConfig.llm.defaultId`） */
+	get modelId() {
+		return this.#selectedModelId;
+	}
+	/**
+	* 切换本会话后续消息使用的模型条目（需求 4）。传 `undefined` 回到配置里的默认项。
+	* 重装配 runtime 以换掉客户端；已落盘的消息不受影响。
+	*/
+	setModel(entryId) {
+		if (entryId === this.#selectedModelId) return;
+		this.#selectedModelId = entryId;
+		this.reloadConfig();
+	}
 	/** 渲染框架热切换：复合桥按档分发，无需重装配 runtime（会话句柄保留） */
 	setRenderer(renderer) {
 		if (renderer === this.#renderer) return;
@@ -40990,10 +41417,6 @@ var ChatEngine = class {
 		this.#handles.clear();
 		this.#maxHistoryMessages = void 0;
 	}
-	/** 旧名保留（与 reloadConfig 同语义，向后兼容） */
-	reloadLlm() {
-		this.reloadConfig();
-	}
 	/**
 	* 会话列表页。归档会话也返回：UI 自己分区展示。
 	* `limit` 不给默认值——缺省属于 `SessionStore` 实现，在这里兜底就等于只下推了一半。
@@ -41011,6 +41434,7 @@ var ChatEngine = class {
 	async createSession() {
 		const session = await this.#sessions.create({ id: newId("session") });
 		this.#currentSessionId = session.id;
+		this.setModel(void 0);
 		return {
 			id: session.id,
 			createdAt: session.createdAt
@@ -41023,6 +41447,7 @@ var ChatEngine = class {
 	async selectSession(id, options = {}) {
 		const page = await this.#sessions.listMessages(id, options);
 		this.#currentSessionId = id;
+		if (options.cursor === void 0) this.setModel([...page.items].reverse().find((message) => message.model !== void 0)?.model);
 		return page;
 	}
 	/** 向历史方向再取一页；`cursor` 只能来自上一页的 `nextCursor` */
@@ -41212,29 +41637,32 @@ var ChatEngine = class {
 		return this.#ready;
 	}
 	/**
-	* LLM 选择链：options.llm（demo/测试）→ RuntimeConfig.llm（apiKey/baseUrl 非空时）
-	* → adapter.llmConfig.load() → 内置演示。streaming=false 时包装掉 stream（AgentLoop 走 complete）。
+	* LLM 选择链：options.llm（demo/测试）→ `RuntimeConfig.llm` 里选中/默认的条目
+	* → 内置演示。streaming=false 时包装掉 stream（AgentLoop 走 complete）。
 	*/
-	async #resolveLlm(rc) {
+	#resolveLlm(rc) {
+		const entry = pickLlmEntry(rc, this.#selectedModelId);
 		let llm;
 		let model;
-		if (this.#options.llm) llm = this.#options.llm;
-		else if (rc && (Boolean(rc.llm.apiKey?.trim()) || Boolean(rc.llm.baseUrl?.trim()))) {
-			llm = createRuntimeLlm(rc.llm);
-			model = rc.llm.model.trim() === "" ? void 0 : rc.llm.model;
-		} else {
-			const saved = await this.#adapter.llmConfig.load();
-			llm = saved !== void 0 && Boolean(saved.baseUrl ?? saved.apiKey ?? saved.model) ? new OpenAiCompatibleClient(saved) : createDemoLlm();
-			model = saved?.model;
-		}
+		let entryId;
+		if (this.#options.llm) {
+			llm = this.#options.llm;
+			entryId = entry?.id;
+		} else if (entry) {
+			llm = createLlmClient(entry);
+			model = entry.model.trim() === "" ? void 0 : entry.model;
+			entryId = entry.id;
+		} else llm = createDemoLlm();
 		if (rc && !rc.streaming && llm.stream) llm = { complete: llm.complete.bind(llm) };
-		return model !== void 0 ? {
+		return {
 			llm,
-			model
-		} : { llm };
+			...model !== void 0 ? { model } : {},
+			...entryId !== void 0 ? { entryId } : {}
+		};
 	}
 	/** 默认沙箱执行器（adapter.executor 未注入时）：RuntimeConfig.sandbox/interaction.approvalScope 映射构造参数 */
 	#createExecutor(fs, rc) {
+		const typescript = rc ? resolveTypeScriptSupport(rc.sandbox.typescript, rc.sandbox.remoteUrl) : void 0;
 		const deps = {
 			fs,
 			...rc ? {
@@ -41243,7 +41671,8 @@ var ChatEngine = class {
 				capabilities: rc.sandbox.capabilities,
 				approvalScope: rc.interaction.approvalScope,
 				uiBridge: this.#uiBridge
-			} : {}
+			} : {},
+			...typescript ? { typescript } : {}
 		};
 		return this.#options.executorFactory?.(deps) ?? new BrowserWorkerScriptExecutor(deps);
 	}
@@ -41270,11 +41699,37 @@ var ChatEngine = class {
 			...g.catalogFilter !== void 0 ? { catalogFilter: g.catalogFilter } : {}
 		};
 	}
+	/**
+	* 清除跨会话表单填写历史（FR-5.11）。不传 `fieldKey` 即整体清空。
+	* 与开关分开：关掉开关只是停止召回，用户往往还想把已存的内容删干净。
+	* @experimental
+	*/
+	async clearFormAutofill(fieldKey) {
+		await clearStoredFormValues(new FsMemoryStore({
+			root: `${this.#chatRoot}/memory`,
+			fs: this.#adapter.storage
+		}), CHATBOT_AUTOFILL_USER_ID, fieldKey);
+	}
+	/**
+	* 父 run 的剩余预算（FR-11.4）：子 agent 拿到的额度不得超过它。
+	* 轮次与耗时从生命周期事件推算——`AgentLoop` 不对外暴露内部计数，
+	* 而 `execute`/`turn` 事件本来就是它逐轮发出来的，够用且不需要改 runtime。
+	* 默认值与 `AgentLoop` 保持一致（maxTurns 10 / totalTimeoutMs 120s）。
+	*/
+	#parentBudget(loopConfig) {
+		const elapsed = this.#runStartedMs > 0 ? Date.now() - this.#runStartedMs : 0;
+		return {
+			remainingTurns: Math.max(0, (loopConfig.maxTurns ?? 10) - this.#runTurn),
+			remainingTimeoutMs: Math.max(0, (loopConfig.totalTimeoutMs ?? 12e4) - elapsed)
+		};
+	}
 	async #assemble() {
 		const fs = this.#adapter.storage;
 		const rc = await this.#runtimeConfigStore()?.load();
-		const { llm, model } = await this.#resolveLlm(rc);
+		const { llm, model, entryId } = this.#resolveLlm(rc);
+		this.#activeModelId = entryId;
 		const pageSkillSource = this.#adapter.pageSkillSource;
+		const pagePerception = this.#adapter.pagePerception;
 		const loopConfig = {
 			...rc ? {
 				maxTurns: rc.loop.maxTurns,
@@ -41287,7 +41742,18 @@ var ChatEngine = class {
 			...this.#options.loopConfig
 		};
 		this.#maxHistoryMessages = rc?.loop.maxHistoryMessages;
-		const runtime = new WebSkillRuntime({
+		const baseTools = [
+			...pageSkillSource ? [pageSkillSource] : [],
+			...(rc === void 0 ? this.#options.generativeUi === true : rc.agentCapabilities.generativeUi) ? [createUiCatalogToolSource(rc ? { presets: rc.agentCapabilities.uiPresets } : {})] : [],
+			...rc?.agentCapabilities.todo === false ? [] : [createTodoToolSource({ store: this.#todoStore })],
+			...rc?.agentCapabilities.skillGeneration === true ? [createSkillGenerationToolSource({
+				ui: this.#uiBridge,
+				...this.#options.skillCandidates ? { sink: this.#options.skillCandidates } : {},
+				sessionId: () => this.#currentSessionId
+			})] : [],
+			...pagePerception ? [createPagePerceptionToolSource({ policy: pagePerception })] : []
+		];
+		const deps = {
 			fs,
 			roots: this.#adapter.skillRoots,
 			llm,
@@ -41308,21 +41774,39 @@ var ChatEngine = class {
 				root: `${this.#chatRoot}/memory`,
 				fs
 			}),
+			...rc?.agentCapabilities.formAutofill === true ? { formAutofill: { userId: CHATBOT_AUTOFILL_USER_ID } } : {},
 			...this.#options.hooks ? { hooks: this.#applyHooksConfig(this.#options.hooks, rc) } : {},
-			externalTools: [...pageSkillSource ? [pageSkillSource] : [], ...this.#options.generativeUi ? [createUiCatalogToolSource()] : []],
+			externalTools: baseTools,
 			skillProviders: pageSkillSource ? [pageSkillSource] : [],
 			...this.#governanceDeps(),
 			...Object.keys(loopConfig).length > 0 ? { config: loopConfig } : {},
 			...model ? { model } : {}
+		};
+		const runtime = new WebSkillRuntime({
+			...deps,
+			externalTools: [...baseTools, ...rc?.agentCapabilities.delegation === true ? [createDelegationToolSource({
+				runner: createChatbotSubAgentRunner({
+					deps,
+					loopConfig,
+					uiBridge: this.#uiBridge
+				}),
+				parentBudget: () => this.#parentBudget(loopConfig),
+				todos: this.#todoStore
+			})] : []]
 		});
 		runtime.events.on("*", (event) => {
 			if (event.phase === "route") {
 				this.#runSkills.set(event.runId, /* @__PURE__ */ new Set());
+				this.#activeRunId = event.runId;
+				this.#runStartedMs = Date.parse(event.ts);
+				this.#runTurn = 0;
+				this.#todoStore.clear();
 				this.#emit({
 					type: "run-started",
 					runId: event.runId
 				});
 			}
+			if (event.phase === "execute" && event.data.kind === "turn") this.#runTurn = event.data.turn;
 			const toolData = event.phase === "execute" && event.data.kind === "tool" ? event.data : void 0;
 			if (!toolData) this.#emit({
 				type: "lifecycle",
@@ -41355,7 +41839,8 @@ var ChatEngine = class {
 					runId: event.runId,
 					callId,
 					name,
-					...args
+					...args,
+					...toolData.errorCode !== void 0 ? { errorCode: toolData.errorCode } : {}
 				});
 			} else if (event.phase === "complete" || event.phase === "fail") this.#runSkills.delete(event.runId);
 		});
@@ -41370,6 +41855,8 @@ var ChatEngine = class {
 		const latest = this.bridge.latestResult;
 		const blocks = latest && latest.runId === run.id ? latest.blocks.filter((block) => block.type !== "markdown" || block.text.trim() !== result.output.trim()) : void 0;
 		const surfaces = this.bridge.surfaceSnapshots.filter((snapshot) => snapshot.runId === run.id);
+		const todos = this.#runTodos.get(run.id);
+		const perceptions = this.#runPerceptions.get(run.id);
 		const assistantMessage = {
 			id: newId("msg"),
 			role: "assistant",
@@ -41379,7 +41866,10 @@ var ChatEngine = class {
 			activeSkillNames: run.activeSkillNames,
 			...blocks && blocks.length > 0 ? { blocks } : {},
 			...surfaces.length > 0 ? { surfaces } : {},
-			...toolCalls.length > 0 ? { toolCalls } : {}
+			...todos && todos.length > 0 ? { todos } : {},
+			...perceptions && perceptions.length > 0 ? { perceptions } : {},
+			...toolCalls.length > 0 ? { toolCalls } : {},
+			...this.#activeModelId !== void 0 ? { model: this.#activeModelId } : {}
 		};
 		await this.#sessions.appendMessages(sessionId, [assistantMessage]);
 		await this.#traceStore.put(run);
@@ -41395,6 +41885,8 @@ var ChatEngine = class {
 			message: assistantMessage
 		});
 		this.#runSkills.delete(run.id);
+		this.#runTodos.delete(run.id);
+		this.#runPerceptions.delete(run.id);
 	}
 	#snapshotStore() {
 		return new FsRunSnapshotStore({
@@ -41481,8 +41973,11 @@ const chatbotDictionary = defineDictionary({
 		"tool.status.running": "Running",
 		"tool.status.completed": "Completed",
 		"tool.status.failed": "Failed",
+		"tool.status.denied": "Blocked by policy",
 		"tool.duration": "{ms} ms",
 		"tool.args": "Arguments",
+		"tool.denied.reason": "Why it was blocked",
+		"tool.failed.reason": "Why it failed",
 		"cot.thinking": "Thinking…",
 		"cot.thought": "Thought for {duration}",
 		"cot.summary": "Run details",
@@ -41490,12 +41985,20 @@ const chatbotDictionary = defineDictionary({
 		"cot.working": "Working…",
 		"trace.title": "Run steps",
 		"trace.skill": "Skill activated: {name}",
+		"perception.reading": "Reading page content (scope: {scope})",
+		"perception.excluded": "Excluded: {scope}",
 		"trace.phase.route": "Route",
 		"trace.phase.activate": "Activate",
 		"trace.phase.execute": "Execute",
 		"trace.phase.interact": "Interact",
 		"trace.phase.complete": "Complete",
 		"trace.phase.fail": "Failed",
+		"todo.title": "Task list",
+		"todo.progress": "{done}/{total}",
+		"todo.status.pending": "Pending",
+		"todo.status.inProgress": "In progress",
+		"todo.status.completed": "Completed",
+		"todo.delegatedTo": "Delegated to {skill}",
 		"interaction.ask.title": "Answer needed",
 		"interaction.confirm.title": "Confirmation",
 		"interaction.form.title": "Information needed",
@@ -41504,6 +42007,7 @@ const chatbotDictionary = defineDictionary({
 		"interaction.authorize.description": "This skill requests a capability. Review what it wants to do, then allow or deny the request. Denying cancels the run step that asked.",
 		"interaction.authorize.capability": "Requested capability",
 		"interaction.authorize.details": "Request details",
+		"interaction.origin": "From: {label}",
 		"interaction.submit": "Submit",
 		"interaction.cancel": "Cancel",
 		"interaction.confirm": "Confirm",
@@ -41531,14 +42035,37 @@ const chatbotDictionary = defineDictionary({
 		"composer.attachments": "Attachments",
 		"composer.addAttachment": "Attach a text file",
 		"composer.removeAttachment": "Remove attachment: {name}",
+		"composer.model": "Model",
+		"composer.model.demo": "Demo model",
+		"composer.dictate": "Voice input",
+		"composer.dictate.stop": "Stop voice input",
+		"composer.dictate.recording": "Recording",
+		"composer.dictate.api-missing": "This browser does not support speech recognition.",
+		"composer.dictate.insecure-context": "Voice input needs a secure connection (https or localhost).",
 		"settings.title": "Settings",
-		"settings.model.title": "Model",
-		"settings.model.description": "Connect any OpenAI-compatible endpoint to chat with a real model. When nothing is configured, a built-in demo model answers so you can explore the interface — its replies are mock text, clearly marked as Demo model.",
+		"settings.model.title": "Models",
+		"settings.model.description": "Configure one or more models and pick a default. The composer lets you switch models per conversation. When no model is configured, a built-in demo model answers so you can explore the interface — its replies are mock text, clearly marked as Demo model.",
+		"settings.model.empty": "No model configured yet.",
+		"settings.model.add": "Add model",
+		"settings.model.edit": "Edit",
+		"settings.model.remove": "Remove",
+		"settings.model.setDefault": "Use as default",
+		"settings.model.default": "Default",
+		"settings.model.label": "Display name",
+		"settings.model.labelNote": "Shown in the composer selector. Leave empty to fall back to the model name.",
+		"settings.model.unavailable": "Unavailable",
+		"settings.model.cancel": "Cancel",
 		"settings.provider": "Provider",
 		"settings.providerNote": "Choose the model protocol. Anthropic and Google use their official endpoints; only OpenAI-compatible endpoints need a custom URL.",
 		"settings.provider.openai-compatible": "OpenAI-compatible",
 		"settings.provider.anthropic": "Anthropic",
 		"settings.provider.google": "Google",
+		"settings.provider.chrome-builtin": "Chrome built-in (experimental)",
+		"settings.provider.chrome-builtin.note": "Runs entirely on this device through the browser Prompt API. No endpoint or API key is needed.",
+		"settings.provider.chrome-builtin.limitation": "The built-in model cannot call tools, so skills that run scripts will not work with it.",
+		"settings.chromeBuiltin.api-missing": "This Chrome build does not expose the Prompt API. Update Chrome, or enable the built-in AI flags.",
+		"settings.chromeBuiltin.model-not-ready": "The on-device model is not ready yet. Chrome has to finish downloading it first.",
+		"settings.chromeBuiltin.unsupported-browser": "The Prompt API is only available in Chromium-based browsers.",
 		"settings.provider.anthropic.note": "The SDK calls the official Anthropic endpoint (api.anthropic.com); only an API key and model are required.",
 		"settings.provider.google.note": "The SDK calls the official Google endpoint (generativelanguage.googleapis.com); only an API key and model are required.",
 		"settings.endpoint": "Endpoint",
@@ -41558,6 +42085,30 @@ const chatbotDictionary = defineDictionary({
 		"settings.demoNote": "No endpoint configured. Replies come from the built-in mock model — connect an endpoint below to chat for real.",
 		"settings.save": "Save",
 		"settings.clear": "Clear",
+		"settings.agent.title": "Agent capabilities",
+		"settings.agent.description": "Turn individual agent behaviours on or off. Changes apply immediately to the next run.",
+		"settings.agent.todo": "Task list",
+		"settings.agent.todoNote": "Lets the model break a multi-step request into a checklist and report progress as it works.",
+		"settings.agent.generativeUi": "Generative UI",
+		"settings.agent.generativeUiNote": "Lets the model design forms, tables and charts instead of answering in plain text. Off by default: the component catalogue adds roughly 14 KB to every request.",
+		"settings.agent.skillGeneration": "Skill generation",
+		"settings.agent.skillGenerationNote": "Lets the model turn a procedure from this conversation into a skill candidate. You confirm every candidate, and a reviewer has to approve it before anyone can use it.",
+		"settings.agent.delegation": "Delegate sub-tasks",
+		"settings.agent.delegationNote": "Lets the agent hand a sub-task to a separate run with its own budget, then continue with the summary it returns. Off by default: one request can turn into several model runs.",
+		"settings.agent.formAutofill": "Remember form entries",
+		"settings.agent.formAutofillNote": "Remembers what you last typed into a skill form and offers it as a suggestion next time. Nothing is filled in for you — you decide whether to use it. Off by default.",
+		"settings.agent.formAutofillClear": "Clear history",
+		"settings.agent.formAutofillCleared": "History cleared",
+		"settings.preferences.title": "Preferences",
+		"settings.preferences.description": "Move your settings to another device. API keys are never included — you will re-enter them after importing.",
+		"settings.preferences.export": "Export",
+		"settings.preferences.import": "Import preference file",
+		"settings.preferences.exported": "Preferences exported without credentials.",
+		"settings.preferences.imported": "Preferences imported. Re-enter your API keys to finish.",
+		"settings.voice.title": "Voice input",
+		"settings.voice.description": "Recognition runs in the browser and only starts when you press the microphone. The transcript lands in the message box so you can edit it before sending.",
+		"settings.voice.lang": "Recognition language",
+		"settings.voice.langFollow": "Follow interface language",
 		"settings.appearance.title": "Appearance",
 		"settings.appearance.description": "Switch theme and language. The host app is notified of every change so it can persist your preference.",
 		"settings.theme": "Theme",
@@ -41623,8 +42174,11 @@ const chatbotDictionary = defineDictionary({
 		"tool.status.running": "运行中",
 		"tool.status.completed": "已完成",
 		"tool.status.failed": "失败",
+		"tool.status.denied": "被策略拒绝",
 		"tool.duration": "{ms} ms",
 		"tool.args": "参数",
+		"tool.denied.reason": "拒绝原因",
+		"tool.failed.reason": "失败原因",
 		"cot.thinking": "思考中…",
 		"cot.thought": "思考耗时 {duration}",
 		"cot.summary": "运行细节",
@@ -41632,12 +42186,20 @@ const chatbotDictionary = defineDictionary({
 		"cot.working": "执行中…",
 		"trace.title": "运行步进",
 		"trace.skill": "已激活技能：{name}",
+		"perception.reading": "正在读取页面内容（区域：{scope}）",
+		"perception.excluded": "已排除：{scope}",
 		"trace.phase.route": "路由",
 		"trace.phase.activate": "激活",
 		"trace.phase.execute": "执行",
 		"trace.phase.interact": "交互",
 		"trace.phase.complete": "完成",
 		"trace.phase.fail": "失败",
+		"todo.title": "任务清单",
+		"todo.progress": "{done}/{total}",
+		"todo.status.pending": "待开始",
+		"todo.status.inProgress": "进行中",
+		"todo.status.completed": "已完成",
+		"todo.delegatedTo": "已委派给 {skill}",
 		"interaction.ask.title": "需要回答",
 		"interaction.confirm.title": "请确认",
 		"interaction.form.title": "需要补充信息",
@@ -41646,6 +42208,7 @@ const chatbotDictionary = defineDictionary({
 		"interaction.authorize.description": "该技能正在请求一项能力授权。请确认它要做什么，然后允许或拒绝。拒绝会取消发起请求的这一步运行。",
 		"interaction.authorize.capability": "请求的能力",
 		"interaction.authorize.details": "请求详情",
+		"interaction.origin": "来自：{label}",
 		"interaction.submit": "提交",
 		"interaction.cancel": "取消",
 		"interaction.confirm": "确认",
@@ -41673,14 +42236,37 @@ const chatbotDictionary = defineDictionary({
 		"composer.attachments": "附件",
 		"composer.addAttachment": "添加文本附件",
 		"composer.removeAttachment": "移除附件：{name}",
+		"composer.model": "模型",
+		"composer.model.demo": "演示模型",
+		"composer.dictate": "语音输入",
+		"composer.dictate.stop": "停止语音输入",
+		"composer.dictate.recording": "录音中",
+		"composer.dictate.api-missing": "当前浏览器不支持语音识别。",
+		"composer.dictate.insecure-context": "语音输入需要安全连接（https 或 localhost）。",
 		"settings.title": "设置",
 		"settings.model.title": "模型",
-		"settings.model.description": "连接任意 OpenAI 兼容端点即可与真实模型对话。未配置时使用内置演示模型应答，便于体验界面——其回复为 Mock 文本，并明确标注 Demo model。",
+		"settings.model.description": "可以配置多个模型并指定默认项，在输入区随时切换。未配置任何模型时由内置演示模型应答，回复为 Mock 文本，并标注为 Demo model。",
+		"settings.model.empty": "还没有配置任何模型。",
+		"settings.model.add": "添加模型",
+		"settings.model.edit": "编辑",
+		"settings.model.remove": "删除",
+		"settings.model.setDefault": "设为默认",
+		"settings.model.default": "默认",
+		"settings.model.label": "显示名称",
+		"settings.model.labelNote": "展示在输入区的选择器里。留空则使用模型名。",
+		"settings.model.unavailable": "不可用",
+		"settings.model.cancel": "取消",
 		"settings.provider": "供应商",
 		"settings.providerNote": "选择模型协议。Anthropic 与 Google 使用官方端点；仅 OpenAI 兼容协议需要自定义端点 URL。",
 		"settings.provider.openai-compatible": "OpenAI 兼容",
 		"settings.provider.anthropic": "Anthropic",
 		"settings.provider.google": "Google",
+		"settings.provider.chrome-builtin": "Chrome 内置（实验）",
+		"settings.provider.chrome-builtin.note": "经浏览器 Prompt API 完全在本机运行，不需要端点与 API Key。",
+		"settings.provider.chrome-builtin.limitation": "内置模型不支持工具调用，需要执行脚本的技能在这一档跑不起来。",
+		"settings.chromeBuiltin.api-missing": "当前 Chrome 未暴露 Prompt API。请升级 Chrome，或开启内置 AI 相关开关。",
+		"settings.chromeBuiltin.model-not-ready": "本机模型尚未就绪，Chrome 需要先完成下载。",
+		"settings.chromeBuiltin.unsupported-browser": "Prompt API 仅在 Chromium 内核的浏览器上可用。",
 		"settings.provider.anthropic.note": "SDK 默认调用 Anthropic 官方端点（api.anthropic.com）；只需 API Key 与模型。",
 		"settings.provider.google.note": "SDK 默认调用 Google 官方端点（generativelanguage.googleapis.com）；只需 API Key 与模型。",
 		"settings.endpoint": "端点",
@@ -41700,6 +42286,30 @@ const chatbotDictionary = defineDictionary({
 		"settings.demoNote": "未配置端点，回复来自内置 Mock 模型——在下方连接端点即可真实对话。",
 		"settings.save": "保存",
 		"settings.clear": "清除",
+		"settings.agent.title": "Agent 能力",
+		"settings.agent.description": "逐项开关 Agent 行为，修改在下一次对话立即生效。",
+		"settings.agent.todo": "待办清单",
+		"settings.agent.todoNote": "允许模型把多步骤任务拆成清单，并在执行过程中回报进度。",
+		"settings.agent.generativeUi": "生成式 UI",
+		"settings.agent.generativeUiNote": "允许模型直接设计表单、表格与图表，而不是只用纯文本回答。默认关闭：组件目录会给每次请求增加约 14 KB 开销。",
+		"settings.agent.skillGeneration": "技能自动生成",
+		"settings.agent.skillGenerationNote": "允许模型把本次对话里的做法整理成技能候选。每个候选都需你当场确认，且经审核通过后才能被使用。",
+		"settings.agent.delegation": "委派子任务",
+		"settings.agent.delegationNote": "允许 Agent 把子任务交给一次独立的运行（有自己的预算），拿到结论后再继续。默认关闭：一句话可能展开成多次模型运行。",
+		"settings.agent.formAutofill": "记住表单填写内容",
+		"settings.agent.formAutofillNote": "记住你上次在技能表单里填的内容，下次以建议形式给出。不会替你填进去——用不用由你决定。默认关闭。",
+		"settings.agent.formAutofillClear": "清除历史",
+		"settings.agent.formAutofillCleared": "已清除",
+		"settings.preferences.title": "偏好迁移",
+		"settings.preferences.description": "把设置搬到另一台设备。导出物永远不含 API Key——导入后需要重新填写。",
+		"settings.preferences.export": "导出",
+		"settings.preferences.import": "导入偏好文件",
+		"settings.preferences.exported": "已导出偏好，其中不含任何凭据。",
+		"settings.preferences.imported": "偏好已导入。请重新填写 API Key 后使用。",
+		"settings.voice.title": "语音输入",
+		"settings.voice.description": "识别在浏览器本地进行，只有你按下麦克风才会开始。转写结果落在输入框里，发送前可以自己改。",
+		"settings.voice.lang": "识别语言",
+		"settings.voice.langFollow": "跟随界面语言",
 		"settings.appearance.title": "外观",
 		"settings.appearance.description": "切换主题与语言。每次变更都会通知宿主应用，以便持久化你的偏好。",
 		"settings.theme": "主题",
@@ -42013,6 +42623,8 @@ const liveMessageId = (runId) => `live-${runId}`;
 /** WebSkill 专有信息走协议内的 data part 通道 */
 const LIFECYCLE_PART = "webskill.lifecycle";
 const SKILL_PART = "webskill.skill";
+/** 页面只读感知提示（需求 10 FR-10.5）：携带实际读取范围 */
+const PERCEPTION_PART = "webskill.perception";
 function parseArgs(args) {
 	if (args === void 0 || args === "") return {};
 	try {
@@ -42041,6 +42653,29 @@ function skillPart(name) {
 		data: { name }
 	};
 }
+function perceptionPart(record) {
+	return {
+		type: "data",
+		name: PERCEPTION_PART,
+		data: {
+			at: record.at,
+			include: [...record.include],
+			...record.exclude && record.exclude.length > 0 ? { exclude: [...record.exclude] } : {},
+			nodeCount: record.nodeCount
+		}
+	};
+}
+/**
+* 失败工具的结构化原因（G7）：走 part 的 `result` 槽，工具行据此把
+* 「被策略拒绝」与「执行出错」分开展示，而不是拿文案去猜。
+*/
+function toolErrorResult(call) {
+	if (call.status !== "failed" || call.errorCode === void 0) return {};
+	return { result: {
+		errorCode: call.errorCode,
+		...call.errorMessage !== void 0 ? { errorMessage: call.errorMessage } : {}
+	} };
+}
 function persistedToolPart(call) {
 	return {
 		type: "tool-call",
@@ -42048,7 +42683,8 @@ function persistedToolPart(call) {
 		toolName: call.name,
 		argsText: call.args ?? "",
 		args: parseArgs(call.args),
-		isError: call.status === "failed"
+		isError: call.status === "failed",
+		...toolErrorResult(call)
 	};
 }
 function liveToolPart(call) {
@@ -42059,6 +42695,7 @@ function liveToolPart(call) {
 		argsText: call.args ?? "",
 		args: parseArgs(call.args),
 		isError: call.status === "failed",
+		...toolErrorResult(call),
 		timing: {
 			startedAt: call.startedAt,
 			...call.endedAt !== void 0 ? { completedAt: call.endedAt } : {}
@@ -42088,6 +42725,7 @@ function userMessage(message) {
 function assistantMessage(message) {
 	const content = [
 		...(message.activeSkillNames ?? []).map(skillPart),
+		...(message.perceptions ?? []).map(perceptionPart),
 		...(message.toolCalls ?? []).map(persistedToolPart),
 		{
 			type: "text",
@@ -42112,6 +42750,7 @@ function assistantMessage(message) {
 				...message.runId !== void 0 ? { runId: message.runId } : {},
 				...message.blocks ? { blocks: message.blocks } : {},
 				...message.surfaces ? { surfaces: message.surfaces } : {},
+				...message.todos ? { todos: message.todos } : {},
 				...message.toolCalls ? { toolCalls: message.toolCalls } : {}
 			}
 		}
@@ -42129,6 +42768,7 @@ function liveMessage(live) {
 	const content = [
 		...live.phases.map(lifecyclePart),
 		...live.skills.map(skillPart),
+		...live.perceptions.map(perceptionPart),
 		...live.tools.map(liveToolPart),
 		{
 			type: "text",
@@ -42147,7 +42787,10 @@ function liveMessage(live) {
 			unstable_data: [],
 			steps: [],
 			timing: liveTiming(live),
-			custom: { runId: live.runId }
+			custom: {
+				runId: live.runId,
+				...live.todos.length > 0 ? { todos: live.todos } : {}
+			}
 		}
 	};
 }
@@ -42221,8 +42864,78 @@ function useWebSkillAui({ messages, live, sessions, currentSessionId, sessionsLo
 	}) });
 }
 
+//#endregion
+//#region src/react/useComposerDictation.ts
+/** 转写片段拼到已有草稿后面：语音只做追加，不覆盖用户已经打好的字 */
+function joinText(base, addition) {
+	const tail = addition.trim();
+	if (tail === "") return base;
+	return base === "" ? tail : `${base.trimEnd()} ${tail}`;
+}
+/**
+* composer 的语音输入接线（需求 7）。转写结果只写进输入框，**不发送**（FR-7.8）——
+* 语音识别不准是常态，自动发送会把识别错误变成不可撤销的操作。
+*/
+function useComposerDictation(lang) {
+	const aui = useAui();
+	const [availability] = useState(() => checkDictationAvailability());
+	const [recording, setRecording] = useState(false);
+	const [error, setError] = useState();
+	const sessionRef = useRef(void 0);
+	/** 本次录音开始时输入框里的内容；中间结果每次都在它后面重画，否则会自我叠加 */
+	const baseRef = useRef("");
+	const stop = useCallback(() => {
+		sessionRef.current?.stop();
+		sessionRef.current = void 0;
+		setRecording(false);
+	}, []);
+	useEffect(() => () => sessionRef.current?.stop(), []);
+	return {
+		availability,
+		recording,
+		toggle: useCallback(() => {
+			if (sessionRef.current) {
+				stop();
+				return;
+			}
+			if (!availability.available) return;
+			const composer = aui.thread.composer();
+			baseRef.current = composer.getState().text;
+			setError(void 0);
+			try {
+				sessionRef.current = startDictation({
+					lang,
+					onInterim: (text) => aui.thread.composer().setText(joinText(baseRef.current, text)),
+					onFinal: (text) => {
+						baseRef.current = joinText(baseRef.current, text);
+						aui.thread.composer().setText(baseRef.current);
+					},
+					onError: (e) => {
+						setError(messageOf(e));
+						stop();
+					}
+				});
+				setRecording(true);
+			} catch (e) {
+				setError(messageOf(e));
+			}
+		}, [
+			aui,
+			availability,
+			lang,
+			stop
+		]),
+		...error !== void 0 ? { error } : {}
+	};
+}
+
 //#endregion
 //#region src/react/AssistantUiShell.tsx
+/** 识别语言默认跟随界面语言（FR-7.7）；SettingsDrawer 里可以覆盖 */
+const DEFAULT_DICTATION_LANG = {
+	en: "en-US",
+	zh: "zh-CN"
+};
 /**
 * assistant-ui only owns the React thread primitives. WebSkill remains the
 * source of truth for messages, sessions, Runtime actions, and UI spec surface data.
@@ -42264,8 +42977,11 @@ function AssistantUiViewport({ children, grow = true }) {
 		children
 	});
 }
-function AssistantUiComposer({ running, disabled = false, placeholder, attachments = false, centered = false }) {
+function AssistantUiComposer({ running, disabled = false, placeholder, attachments = false, centered = false, models, dictationLang }) {
 	const t = useT();
+	const locale = useLocale();
+	const dictation = useComposerDictation(dictationLang ?? DEFAULT_DICTATION_LANG[locale]);
+	const dictationReason = dictation.availability.available ? void 0 : t(`composer.dictate.${dictation.availability.reason}`);
 	return /* @__PURE__ */ jsx(ComposerPrimitive.Root, {
 		"data-testid": "assistant-ui-composer",
 		"data-centered": centered,
@@ -42273,72 +42989,117 @@ function AssistantUiComposer({ running, disabled = false, placeholder, attachmen
 		children: /* @__PURE__ */ jsxs(ComposerPrimitive.AttachmentDropzone, {
 			disabled: !attachments,
 			className: "webskill-aui-composer-shell mx-auto flex w-full max-w-3xl flex-col gap-2 px-3 py-2 transition-colors data-[dragging=true]:border-ring",
-			children: [/* @__PURE__ */ jsx("div", {
-				"aria-label": t("composer.attachments"),
-				className: "flex flex-wrap gap-2 empty:hidden",
-				children: /* @__PURE__ */ jsx(ComposerPrimitive.Attachments, { children: ({ attachment }) => /* @__PURE__ */ jsxs(AttachmentPrimitive.Root, {
-					className: "flex max-w-56 items-center gap-1.5 rounded-md border border-border bg-card px-2 py-1 text-xs text-muted",
+			children: [
+				/* @__PURE__ */ jsx("div", {
+					"aria-label": t("composer.attachments"),
+					className: "flex flex-wrap gap-2 empty:hidden",
+					children: /* @__PURE__ */ jsx(ComposerPrimitive.Attachments, { children: ({ attachment }) => /* @__PURE__ */ jsxs(AttachmentPrimitive.Root, {
+						className: "flex max-w-56 items-center gap-1.5 rounded-md border border-border bg-card px-2 py-1 text-xs text-muted",
+						children: [
+							/* @__PURE__ */ jsx(Paperclip, {
+								className: "size-3 shrink-0",
+								"aria-hidden": true
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "truncate text-ink",
+								children: /* @__PURE__ */ jsx(AttachmentPrimitive.Name, {})
+							}),
+							/* @__PURE__ */ jsx(AttachmentPrimitive.Remove, {
+								"aria-label": t("composer.removeAttachment", { name: attachment.name }),
+								className: "inline-flex size-4 shrink-0 items-center justify-center rounded-sm hover:text-ink",
+								children: /* @__PURE__ */ jsx(X, {
+									className: "size-3",
+									"aria-hidden": true
+								})
+							})
+						]
+					}) })
+				}),
+				/* @__PURE__ */ jsxs("div", {
+					className: "flex w-full items-end gap-2",
 					children: [
-						/* @__PURE__ */ jsx(Paperclip, {
-							className: "size-3 shrink-0",
-							"aria-hidden": true
+						models ? /* @__PURE__ */ jsx("span", {
+							"data-testid": "composer-model-select",
+							className: "shrink-0",
+							children: /* @__PURE__ */ jsx(Select, {
+								className: "w-40",
+								label: t("composer.model"),
+								value: models.value,
+								options: models.options.map((option) => ({
+									value: option.id,
+									label: option.label,
+									...option.disabled === true ? { disabled: true } : {}
+								})),
+								onChange: models.onChange
+							})
+						}) : null,
+						attachments ? /* @__PURE__ */ jsx(ComposerPrimitive.AddAttachment, {
+							"aria-label": t("composer.addAttachment"),
+							className: "inline-flex size-9 shrink-0 items-center justify-center rounded-full text-muted transition-colors hover:bg-accent hover:text-ink",
+							children: /* @__PURE__ */ jsx(Paperclip, {
+								className: "size-4",
+								"aria-hidden": true
+							})
+						}) : null,
+						/* @__PURE__ */ jsxs("button", {
+							type: "button",
+							"data-testid": "composer-dictate",
+							"data-recording": dictation.recording ? "true" : void 0,
+							"aria-pressed": dictation.recording,
+							"aria-label": dictation.recording ? t("composer.dictate.stop") : t("composer.dictate"),
+							title: dictationReason ?? (dictation.recording ? t("composer.dictate.stop") : t("composer.dictate")),
+							disabled: dictationReason !== void 0,
+							onClick: dictation.toggle,
+							className: `inline-flex size-9 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50 ${dictation.recording ? "animate-pulse bg-danger/10 text-danger" : "text-muted hover:bg-accent hover:text-ink"}`,
+							children: [dictation.recording ? /* @__PURE__ */ jsx(Square, {
+								className: "size-3 fill-current",
+								"aria-hidden": true
+							}) : /* @__PURE__ */ jsx(Mic, {
+								className: "size-4",
+								"aria-hidden": true
+							}), /* @__PURE__ */ jsx("span", {
+								className: "sr-only",
+								children: dictation.recording ? t("composer.dictate.recording") : t("composer.dictate")
+							})]
 						}),
-						/* @__PURE__ */ jsx("span", {
-							className: "truncate text-ink",
-							children: /* @__PURE__ */ jsx(AttachmentPrimitive.Name, {})
+						/* @__PURE__ */ jsx(ComposerPrimitive.Input, {
+							"aria-label": t("composer.inputLabel"),
+							disabled: running || disabled,
+							className: "max-h-40 min-w-0 flex-1 resize-none bg-transparent py-2 text-sm text-ink outline-none placeholder:text-muted/70 disabled:cursor-not-allowed disabled:opacity-60",
+							placeholder: placeholder ?? t("composer.placeholder"),
+							rows: 1,
+							submitMode: "enter"
 						}),
-						/* @__PURE__ */ jsx(AttachmentPrimitive.Remove, {
-							"aria-label": t("composer.removeAttachment", { name: attachment.name }),
-							className: "inline-flex size-4 shrink-0 items-center justify-center rounded-sm hover:text-ink",
-							children: /* @__PURE__ */ jsx(X, {
-								className: "size-3",
+						running ? /* @__PURE__ */ jsxs(ComposerPrimitive.Cancel, {
+							"aria-label": t("composer.stop"),
+							className: "inline-flex size-9 shrink-0 items-center justify-center rounded-full border border-border text-ink transition-colors hover:bg-accent",
+							children: [/* @__PURE__ */ jsx(Square, {
+								className: "size-3 fill-current",
 								"aria-hidden": true
-							})
+							}), /* @__PURE__ */ jsx("span", {
+								className: "sr-only",
+								children: t("composer.stop")
+							})]
+						}) : /* @__PURE__ */ jsxs(ComposerPrimitive.Send, {
+							"aria-label": t("composer.send"),
+							className: "webskill-aui-send inline-flex size-9 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50",
+							children: [/* @__PURE__ */ jsx(ArrowUp, {
+								className: "size-4",
+								"aria-hidden": true
+							}), /* @__PURE__ */ jsx("span", {
+								className: "sr-only",
+								children: t("composer.send")
+							})]
 						})
 					]
-				}) })
-			}), /* @__PURE__ */ jsxs("div", {
-				className: "flex w-full items-end gap-2",
-				children: [
-					attachments ? /* @__PURE__ */ jsx(ComposerPrimitive.AddAttachment, {
-						"aria-label": t("composer.addAttachment"),
-						className: "inline-flex size-9 shrink-0 items-center justify-center rounded-full text-muted transition-colors hover:bg-accent hover:text-ink",
-						children: /* @__PURE__ */ jsx(Paperclip, {
-							className: "size-4",
-							"aria-hidden": true
-						})
-					}) : null,
-					/* @__PURE__ */ jsx(ComposerPrimitive.Input, {
-						"aria-label": t("composer.inputLabel"),
-						disabled: running || disabled,
-						className: "max-h-40 min-w-0 flex-1 resize-none bg-transparent py-2 text-sm text-ink outline-none placeholder:text-muted/70 disabled:cursor-not-allowed disabled:opacity-60",
-						placeholder: placeholder ?? t("composer.placeholder"),
-						rows: 1,
-						submitMode: "enter"
-					}),
-					running ? /* @__PURE__ */ jsxs(ComposerPrimitive.Cancel, {
-						"aria-label": t("composer.stop"),
-						className: "inline-flex size-9 shrink-0 items-center justify-center rounded-full border border-border text-ink transition-colors hover:bg-accent",
-						children: [/* @__PURE__ */ jsx(Square, {
-							className: "size-3 fill-current",
-							"aria-hidden": true
-						}), /* @__PURE__ */ jsx("span", {
-							className: "sr-only",
-							children: t("composer.stop")
-						})]
-					}) : /* @__PURE__ */ jsxs(ComposerPrimitive.Send, {
-						"aria-label": t("composer.send"),
-						className: "webskill-aui-send inline-flex size-9 shrink-0 items-center justify-center rounded-full transition-colors disabled:cursor-not-allowed disabled:opacity-50",
-						children: [/* @__PURE__ */ jsx(ArrowUp, {
-							className: "size-4",
-							"aria-hidden": true
-						}), /* @__PURE__ */ jsx("span", {
-							className: "sr-only",
-							children: t("composer.send")
-						})]
-					})
-				]
-			})]
+				}),
+				dictation.error !== void 0 ? /* @__PURE__ */ jsx("p", {
+					"data-testid": "composer-dictate-error",
+					role: "alert",
+					className: "text-xs text-danger",
+					children: dictation.error
+				}) : null
+			]
 		})
 	});
 }
@@ -42608,6 +43369,38 @@ function AssistantUiEmptyState({ title, prompts, disabled, onPrompt }) {
 	});
 }
 
+//#endregion
+//#region src/react/aui/PerceptionNotice.tsx
+function readStringList(source, key) {
+	const value = source?.[key];
+	return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
+}
+/**
+* 页面只读感知提示（需求 10 FR-10.5）。刻意不进思维链折叠区：
+* 「读了页面」这件事必须默认可见，附上实际范围让用户能发现读得比预期多。
+*/
+function PerceptionNotice({ data }) {
+	const t = useT();
+	const include = readStringList(data, "include");
+	if (include.length === 0) return null;
+	const exclude = readStringList(data, "exclude");
+	return /* @__PURE__ */ jsxs("p", {
+		"data-testid": "perception-notice",
+		className: "my-1 flex flex-wrap items-center gap-2 rounded-md border border-border bg-card px-2 py-1 text-[11px] text-muted",
+		children: [
+			/* @__PURE__ */ jsx(Eye, {
+				className: "size-3 shrink-0",
+				"aria-hidden": true
+			}),
+			/* @__PURE__ */ jsx("span", {
+				className: "text-ink",
+				children: t("perception.reading", { scope: include.join(", ") })
+			}),
+			exclude.length > 0 ? /* @__PURE__ */ jsx("span", { children: t("perception.excluded", { scope: exclude.join(", ") }) }) : null
+		]
+	});
+}
+
 //#endregion
 //#region src/react/aui/parts.tsx
 /** 模块顶层稳定引用：GroupedParts 用它做记忆指纹 */
@@ -42754,12 +43547,26 @@ function ToolGroup({ count, running, children }) {
 		}), children]
 	});
 }
+/** 被 `allowed-tools` 拦下时 runtime 回喂的错误码；与执行失败必须分开显示（需求 1 FR-1.6） */
+const DENIED_CODE = "TOOL_NOT_ALLOWED";
+function toolErrorOf(part) {
+	const result = part.result;
+	if (typeof result !== "object" || result === null) return {};
+	const record = result;
+	return {
+		...typeof record["errorCode"] === "string" ? { errorCode: record["errorCode"] } : {},
+		...typeof record["errorMessage"] === "string" ? { errorMessage: record["errorMessage"] } : {}
+	};
+}
 /** 工具行：状态 / 耗时 / 参数摘要。工具返回值不在 chatbot 数据面内，因此不渲染结果区。 */
 function ToolRow({ part }) {
 	const t = useT();
 	const [open, setOpen] = useState(false);
 	const completedAt = part.timing?.completedAt;
-	const status = completedAt === void 0 && isRunning(part.status) ? "running" : part.isError === true ? "failed" : "completed";
+	const running = completedAt === void 0 && isRunning(part.status);
+	const { errorCode, errorMessage } = toolErrorOf(part);
+	const denied = part.isError === true && errorCode === DENIED_CODE;
+	const status = running ? "running" : denied ? "denied" : part.isError === true ? "failed" : "completed";
 	const duration = part.timing && completedAt !== void 0 ? formatDuration(completedAt - part.timing.startedAt) : void 0;
 	return /* @__PURE__ */ jsxs("div", {
 		className: "rounded-md border border-border",
@@ -42775,6 +43582,9 @@ function ToolRow({ part }) {
 				}) : status === "completed" ? /* @__PURE__ */ jsx(CircleCheck, {
 					className: "size-3.5 shrink-0 text-success",
 					"aria-label": t("tool.status.completed")
+				}) : status === "denied" ? /* @__PURE__ */ jsx(ShieldOff, {
+					className: "size-3.5 shrink-0 text-warning",
+					"aria-label": t("tool.status.denied")
 				}) : /* @__PURE__ */ jsx(CircleX, {
 					className: "size-3.5 shrink-0 text-destructive",
 					"aria-label": t("tool.status.failed")
@@ -42783,6 +43593,11 @@ function ToolRow({ part }) {
 					className: "truncate font-mono text-ink",
 					children: part.toolName
 				}),
+				status === "denied" ? /* @__PURE__ */ jsx("span", {
+					"data-testid": "tool-denied",
+					className: "shrink-0 text-[11px] text-warning",
+					children: t("tool.status.denied")
+				}) : null,
 				/* @__PURE__ */ jsx("span", {
 					className: "ms-auto shrink-0",
 					children: duration ?? ""
@@ -42792,15 +43607,22 @@ function ToolRow({ part }) {
 					"aria-hidden": true
 				})
 			]
-		}), open && part.argsText !== "" ? /* @__PURE__ */ jsxs("div", {
+		}), open && (part.argsText !== "" || errorMessage !== void 0) ? /* @__PURE__ */ jsxs("div", {
 			className: "border-t border-border px-2 py-1.5",
-			children: [/* @__PURE__ */ jsx("p", {
+			children: [errorMessage !== void 0 ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("p", {
+				className: "text-[11px] text-muted",
+				children: t(denied ? "tool.denied.reason" : "tool.failed.reason")
+			}), /* @__PURE__ */ jsx("p", {
+				"data-testid": "tool-error-reason",
+				className: "text-[11px] break-words text-ink",
+				children: errorMessage
+			})] }) : null, part.argsText !== "" ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("p", {
 				className: "text-[11px] text-muted",
 				children: t("tool.args")
 			}), /* @__PURE__ */ jsx("pre", {
 				className: "overflow-x-auto font-mono text-[11px] text-ink",
 				children: part.argsText
-			})]
+			})] }) : null]
 		}) : null]
 	});
 }
@@ -42856,6 +43678,7 @@ function WebSkillMessageParts() {
 					if (part.dataRendererUI) return part.dataRendererUI;
 					if (part.name === "webskill.lifecycle") return /* @__PURE__ */ jsx(LifecycleStep, { data: part.data });
 					if (part.name === "webskill.skill") return /* @__PURE__ */ jsx(SkillActivation, { data: part.data });
+					if (part.name === "webskill.perception") return /* @__PURE__ */ jsx(PerceptionNotice, { data: part.data });
 					return null;
 				case "indicator": return /* @__PURE__ */ jsx(WorkingIndicator, {});
 				default: return null;
@@ -42864,6 +43687,104 @@ function WebSkillMessageParts() {
 	});
 }
 
+//#endregion
+//#region src/react/TodoPanel.tsx
+const STATUS_KEY = {
+	pending: "todo.status.pending",
+	"in-progress": "todo.status.inProgress",
+	completed: "todo.status.completed"
+};
+/** 状态标记：✓ 已完成 / ● 进行中（脉冲）/ ○ 待开始（设计 03 §9） */
+function StatusMark({ status }) {
+	if (status === "completed") return /* @__PURE__ */ jsx("span", {
+		"aria-hidden": true,
+		className: "w-3.5 shrink-0 text-center text-success",
+		children: "✓"
+	});
+	if (status === "in-progress") return /* @__PURE__ */ jsx("span", {
+		"aria-hidden": true,
+		className: "w-3.5 shrink-0 animate-pulse text-center text-info",
+		children: "●"
+	});
+	return /* @__PURE__ */ jsx("span", {
+		"aria-hidden": true,
+		className: "w-3.5 shrink-0 text-center text-muted",
+		children: "○"
+	});
+}
+function TodoRow({ item }) {
+	const t = useT();
+	const statusLabel = t(STATUS_KEY[item.status]);
+	return /* @__PURE__ */ jsxs("li", {
+		"data-testid": "todo-item",
+		"data-status": item.status,
+		"aria-label": `${item.title}, ${statusLabel}`,
+		className: "flex items-center gap-2 text-xs",
+		children: [
+			/* @__PURE__ */ jsx(StatusMark, { status: item.status }),
+			/* @__PURE__ */ jsx("span", {
+				className: `min-w-0 truncate ${item.status === "completed" ? "text-muted line-through" : "text-ink"}`,
+				children: item.title
+			}),
+			item.delegatedTo ? /* @__PURE__ */ jsx("span", {
+				className: "ms-auto shrink-0 truncate text-[11px] text-muted",
+				children: t("todo.delegatedTo", { skill: item.delegatedTo })
+			}) : null
+		]
+	});
+}
+/**
+* 待办清单面板：随消息流内联渲染（不是固定侧栏，设计 03 §9）。
+* 全部完成后自动折叠，用户手动切换后不再被自动接管。
+*/
+function TodoPanel({ items }) {
+	const t = useT();
+	const done = items.filter((item) => item.status === "completed").length;
+	const running = done < items.length;
+	const [open, setOpen] = useState(running);
+	const [pinned, setPinned] = useState(false);
+	useEffect(() => {
+		if (!pinned) setOpen(running);
+	}, [running, pinned]);
+	if (items.length === 0) return null;
+	return /* @__PURE__ */ jsxs(Collapsible, {
+		open,
+		onOpenChange: (next) => {
+			setPinned(true);
+			setOpen(next);
+		},
+		"data-testid": "todo-panel",
+		className: "my-2 overflow-hidden rounded-lg border border-border bg-card",
+		children: [/* @__PURE__ */ jsxs(CollapsibleTrigger, {
+			className: "flex w-full items-center gap-2 px-3 py-2 text-left text-xs text-muted transition-colors hover:bg-accent",
+			children: [
+				/* @__PURE__ */ jsx(ChevronDown, {
+					className: `size-3.5 shrink-0 transition-transform ${open ? "rotate-180" : ""}`,
+					"aria-hidden": true
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: "flex-1 truncate text-ink",
+					children: t("todo.title")
+				}),
+				/* @__PURE__ */ jsx("span", {
+					"data-testid": "todo-progress",
+					className: "shrink-0 font-mono",
+					children: t("todo.progress", {
+						done: String(done),
+						total: String(items.length)
+					})
+				})
+			]
+		}), /* @__PURE__ */ jsx(CollapsibleContent, {
+			className: "border-t border-border px-3 py-2",
+			children: /* @__PURE__ */ jsx("ol", {
+				className: "flex flex-col gap-1",
+				children: items.map((item) => /* @__PURE__ */ jsx(TodoRow, { item }, item.id))
+			})
+		})]
+	});
+}
+
 //#endregion
 //#region src/react/OpenUiSurfaceHost.tsx
 /** Renders persisted UI spec snapshots through the OpenUI extension without a live bridge. @experimental */
@@ -53079,7 +54000,7 @@ function SkillBadges({ skills }) {
 				})
 			})
 		}), skills.map((skill) => /* @__PURE__ */ jsx(Badge, {
-			tone: "primary",
+			tone: "neutral",
 			children: skill
 		}, skill))]
 	});
@@ -53243,7 +54164,9 @@ function AssistantUiMessageActions({ message, onRetry, onDelete, onViewTrace })
 /** assistant-ui Base message layout with WebSkill-only capabilities mounted as secondary extensions. */
 function AssistantUiMessage(props) {
 	const { message } = props;
-	if (useAuiState((s) => s.message.role) === "user") return /* @__PURE__ */ jsxs("div", {
+	const role = useAuiState((s) => s.message.role);
+	const todos = useAuiState((s) => s.message.metadata?.custom?.["todos"]);
+	if (role === "user") return /* @__PURE__ */ jsxs("div", {
 		className: "webskill-aui-message webskill-aui-message--user",
 		"data-testid": "assistant-ui-user-message",
 		children: [/* @__PURE__ */ jsx("div", {
@@ -53255,6 +54178,7 @@ function AssistantUiMessage(props) {
 		className: "webskill-aui-message webskill-aui-message--assistant min-w-0",
 		"data-testid": "assistant-ui-assistant-message",
 		children: [
+			Array.isArray(todos) ? /* @__PURE__ */ jsx(TodoPanel, { items: todos }) : null,
 			/* @__PURE__ */ jsx("div", {
 				className: "webskill-aui-assistant-content",
 				children: /* @__PURE__ */ jsx(WebSkillMessageParts, {})
@@ -53389,6 +54313,8 @@ const start = (runId, at) => ({
 	phases: [],
 	skills: [],
 	tools: [],
+	todos: [],
+	perceptions: [],
 	text: "",
 	chunks: 0
 });
@@ -53439,6 +54365,14 @@ function reduceLiveRun(live, event, at) {
 			...live,
 			skills: event.skills
 		};
+		case "todo-changed": return {
+			...live,
+			todos: event.items
+		};
+		case "page-perceived": return {
+			...live,
+			perceptions: [...live.perceptions, event.record]
+		};
 		case "message-delta": return {
 			...live,
 			text: live.text + event.delta,
@@ -53458,12 +54392,14 @@ function reduceLiveRun(live, event, at) {
 		case "tool-completed":
 		case "tool-failed": {
 			const status = event.type === "tool-completed" ? "completed" : "failed";
+			const errorCode = event.type === "tool-failed" ? event.errorCode : void 0;
 			return {
 				...live,
 				tools: live.tools.map((tool) => tool.callId === event.callId && tool.status === "running" ? {
 					...tool,
 					status,
-					endedAt: at
+					endedAt: at,
+					...errorCode !== void 0 ? { errorCode } : {}
 				} : tool)
 			};
 		}
@@ -53576,6 +54512,7 @@ function ActiveInteractionCard({ request, bridge }) {
 	const spec = interactionToUiSpec(request, interactionLabels(request, t));
 	const isAuthorize = request.type === "authorize";
 	const Icon = kindIcons[request.type];
+	const preview = isAuthorize && typeof request.details === "object" && request.details !== null ? request.details["preview"] : void 0;
 	const handleAction = (event) => {
 		if (event.intent !== "submit") {
 			bridge.resolve({
@@ -53593,49 +54530,61 @@ function ActiveInteractionCard({ request, bridge }) {
 	return /* @__PURE__ */ jsxs(motion.div, {
 		...fadeInUp,
 		className: `rounded-card border shadow-card ${isAuthorize ? "border-warning/50 bg-warning-soft" : "border-border bg-surface"}`,
-		children: [/* @__PURE__ */ jsxs("div", {
-			className: "flex items-start gap-3 px-4 pt-4",
-			children: [/* @__PURE__ */ jsx("span", {
-				className: `grid size-8 shrink-0 place-items-center rounded-lg ${isAuthorize ? "bg-warning/15 text-warning" : "bg-subtle text-muted"}`,
-				children: /* @__PURE__ */ jsx(Icon, {
-					className: "size-4",
-					"aria-hidden": true
+		children: [
+			request.origin ? /* @__PURE__ */ jsx("div", {
+				className: "px-4 pt-3",
+				children: /* @__PURE__ */ jsx(Badge, {
+					tone: "info",
+					"data-testid": "interaction-origin",
+					children: t("interaction.origin", { label: request.origin.label })
+				})
+			}) : null,
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-3 px-4 pt-4",
+				children: [/* @__PURE__ */ jsx("span", {
+					className: `grid size-8 shrink-0 place-items-center rounded-lg ${isAuthorize ? "bg-warning/15 text-warning" : "bg-subtle text-muted"}`,
+					children: /* @__PURE__ */ jsx(Icon, {
+						className: "size-4",
+						"aria-hidden": true
+					})
+				}), request.type === "authorize" ? /* @__PURE__ */ jsxs("div", {
+					className: "flex min-w-0 flex-1 flex-col gap-2",
+					children: [
+						/* @__PURE__ */ jsxs("div", {
+							className: "flex items-center gap-2",
+							children: [/* @__PURE__ */ jsx("span", {
+								className: "text-xs font-medium text-muted",
+								children: t("interaction.authorize.capability")
+							}), /* @__PURE__ */ jsx(Badge, {
+								tone: "warning",
+								children: request.capability
+							})]
+						}),
+						/* @__PURE__ */ jsx("p", {
+							className: "text-xs text-muted",
+							children: t("interaction.authorize.description")
+						}),
+						request.details !== void 0 ? /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("div", {
+							className: "mb-1 text-xs font-medium text-muted",
+							children: t("interaction.authorize.details")
+						}), /* @__PURE__ */ jsx("pre", {
+							"data-testid": "interaction-authorize-details",
+							className: "max-h-64 overflow-auto rounded-lg border border-border bg-canvas p-3 font-mono text-xs whitespace-pre-wrap text-ink",
+							children: typeof preview === "string" ? preview : JSON.stringify(request.details, null, 2)
+						})] }) : null
+					]
+				}) : null]
+			}),
+			/* @__PURE__ */ jsx("div", {
+				className: "px-4 py-4",
+				children: /* @__PURE__ */ jsx(NativeSpecSurface, {
+					surfaceId: request.id,
+					spec,
+					actions: INTERACTION_ACTIONS$1,
+					onAction: handleAction
 				})
-			}), request.type === "authorize" ? /* @__PURE__ */ jsxs("div", {
-				className: "flex min-w-0 flex-1 flex-col gap-2",
-				children: [
-					/* @__PURE__ */ jsxs("div", {
-						className: "flex items-center gap-2",
-						children: [/* @__PURE__ */ jsx("span", {
-							className: "text-xs font-medium text-muted",
-							children: t("interaction.authorize.capability")
-						}), /* @__PURE__ */ jsx(Badge, {
-							tone: "warning",
-							children: request.capability
-						})]
-					}),
-					/* @__PURE__ */ jsx("p", {
-						className: "text-xs text-muted",
-						children: t("interaction.authorize.description")
-					}),
-					request.details !== void 0 ? /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("div", {
-						className: "mb-1 text-xs font-medium text-muted",
-						children: t("interaction.authorize.details")
-					}), /* @__PURE__ */ jsx("pre", {
-						className: "max-h-40 overflow-auto rounded-lg border border-border bg-canvas p-3 font-mono text-xs text-ink",
-						children: JSON.stringify(request.details, null, 2)
-					})] }) : null
-				]
-			}) : null]
-		}), /* @__PURE__ */ jsx("div", {
-			className: "px-4 py-4",
-			children: /* @__PURE__ */ jsx(NativeSpecSurface, {
-				surfaceId: request.id,
-				spec,
-				actions: INTERACTION_ACTIONS$1,
-				onAction: handleAction
 			})
-		})]
+		]
 	});
 }
 
@@ -53697,6 +54646,23 @@ function InterruptedBanner({ engine, sessionId }) {
 	});
 }
 
+//#endregion
+//#region src/react/rendererProbes.ts
+/**
+* optional peer 探测：缺包时交互通道据此粘性降级 native，设置面板据此把档位置灰。
+* 两处必须用同一份探测——否则会出现「设置里能选，用完才降级」的假可选项。
+*/
+const RENDERER_PROBES = {
+	a2ui: probeA2uiAvailability,
+	openui: probeOpenUiAvailability,
+	vercel: probeJsonRenderAvailability
+};
+const MISSING_PEER = {
+	a2ui: "@a2ui/lit and @a2ui/web_core are not installed in this host",
+	openui: "@openuidev/react-lang is not installed in this host",
+	vercel: "@json-render/core and @json-render/react are not installed in this host"
+};
+
 //#endregion
 //#region src/react/SpecInteraction.tsx
 /** 交互表单的两个动作：与 surface 侧共用 catalog 的 submit / cancel 语义 */
@@ -53713,17 +54679,6 @@ const SURFACES = {
 	openui: OpenUiSpecSurface,
 	vercel: JsonRenderSpecSurface
 };
-/** optional peer 探测：缺包时通知通道，桥据此粘性降级 native（不悬挂请求、不阻断 run） */
-const PROBES = {
-	a2ui: probeA2uiAvailability,
-	openui: probeOpenUiAvailability,
-	vercel: probeJsonRenderAvailability
-};
-const MISSING_PEER = {
-	a2ui: "@a2ui/lit and @a2ui/web_core are not installed in this host",
-	openui: "@openuidev/react-lang is not installed in this host",
-	vercel: "@json-render/core and @json-render/react are not installed in this host"
-};
 /**
 * 非 native 三档的交互视图（路径 A）：订阅 SpecInteractionChannel（core 产出 catalog
 * 节点树），交给本档 surface 侧同一个渲染入口渲染；提交/取消经 handleAction 回传。
@@ -53742,7 +54697,7 @@ function SpecInteraction({ channel, renderer }) {
 	}, [channel]);
 	useEffect(() => {
 		let cancelled = false;
-		PROBES[renderer]().then((available) => {
+		RENDERER_PROBES[renderer]().then((available) => {
 			if (!cancelled && !available) channel.fail(MISSING_PEER[renderer]);
 		});
 		return () => {
@@ -53764,63 +54719,99 @@ function SpecInteraction({ channel, renderer }) {
 const PROVIDERS = [
 	"openai-compatible",
 	"anthropic",
-	"google"
+	"google",
+	"chrome-builtin"
 ];
-/** 按供应商构造能力探测 client（checkAvailability + stream 存在性） */
-function createProbeClient(provider, form) {
-	if (provider === "anthropic") return new AnthropicClient({
-		apiKey: form.apiKey,
-		model: form.model
-	});
-	if (provider === "google") return new GoogleGenAiClient({
-		apiKey: form.apiKey,
-		model: form.model
-	});
-	return new OpenAiCompatibleClient({
-		baseUrl: form.baseUrl,
-		apiKey: form.apiKey,
-		model: form.model
-	});
-}
-/** 设置抽屉：LLM 配置（三协议供应商 / 能力探测 / Demo model 标识 / 流式与 temperature）+ 外观（主题/语言） @stable */
-function SettingsDrawer({ open, llmConfig, runtimeConfig, theme, locale, renderer, onAppearanceChange, onSaved, onClose }) {
+const EMPTY_FORM = {
+	label: "",
+	provider: "openai-compatible",
+	baseUrl: "",
+	apiKey: "",
+	model: ""
+};
+const toForm = (entry) => ({
+	label: entry.label,
+	provider: entry.provider,
+	baseUrl: entry.baseUrl ?? "",
+	apiKey: entry.apiKey ?? "",
+	model: entry.model
+});
+const RENDERERS = [
+	"native",
+	"a2ui",
+	"openui",
+	"vercel"
+];
+/**
+* 识别语言候选（FR-7.7）。只给常用几种：完整 BCP-47 列表有上百项，
+* 而浏览器实际支持哪些不可探测，列全了反而是假选项。
+*/
+const DICTATION_LANGS = [
+	"en-US",
+	"en-GB",
+	"zh-CN",
+	"zh-TW",
+	"ja-JP",
+	"ko-KR",
+	"de-DE",
+	"fr-FR",
+	"es-ES"
+];
+/** id 只在新建时生成一次：条目被引用后（会话记录里的模型归属）改 id 等于断链 */
+const newEntryId = () => `llm-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 6)}`;
+/** 默认落盘：触发一次浏览器下载。jsdom 等无 `createObjectURL` 的环境下静默跳过 */
+function downloadPreferences(data) {
+	if (typeof URL === "undefined" || typeof URL.createObjectURL !== "function") return;
+	const blob = new Blob([JSON.stringify(data, null, 2)], { type: "application/json" });
+	const url = URL.createObjectURL(blob);
+	const link = document.createElement("a");
+	link.href = url;
+	link.download = "webskill-preferences.json";
+	link.click();
+	URL.revokeObjectURL(url);
+}
+/** 设置抽屉：模型列表（增删改 / 设默认 / 逐条探测）+ 流式与 temperature + Agent 能力 + 外观 @stable */
+function SettingsDrawer({ open, runtimeConfig, theme, locale, renderer, dictationLang = "", onAppearanceChange, onSaved, onClearFormAutofill, onExportPreferences, onClose }) {
 	const t = useT();
-	const [provider, setProvider] = useState("openai-compatible");
-	const [baseUrl, setBaseUrl] = useState("");
-	const [apiKey, setApiKey] = useState("");
-	const [model, setModel] = useState("");
+	const [entries, setEntries] = useState([]);
+	const [defaultId, setDefaultId] = useState();
+	/** 正在编辑的条目 id；'new' 表示新增中；undefined 表示只看列表 */
+	const [editing, setEditing] = useState();
+	const [form, setForm] = useState(EMPTY_FORM);
 	const [streaming, setStreaming] = useState(true);
 	const [temperature, setTemperature] = useState("");
+	const [todoEnabled, setTodoEnabled] = useState(true);
+	const [skillGenerationEnabled, setSkillGenerationEnabled] = useState(false);
+	const [generativeUiEnabled, setGenerativeUiEnabled] = useState(false);
+	const [formAutofillEnabled, setFormAutofillEnabled] = useState(false);
+	const [delegationEnabled, setDelegationEnabled] = useState(false);
+	const [autofillCleared, setAutofillCleared] = useState(false);
+	const [prefNotice, setPrefNotice] = useState();
 	const [loaded, setLoaded] = useState(false);
 	const [error, setError] = useState();
-	const [probe, setProbe] = useState({ kind: "idle" });
+	const [probes, setProbes] = useState({});
+	const [chrome, setChrome] = useState();
+	const [rendererPeers, setRendererPeers] = useState({});
 	const configStore = useMemo(() => runtimeConfig ? withRuntimeConfigDefaults(runtimeConfig) : void 0, [runtimeConfig]);
 	useEffect(() => {
-		if (!open) return;
+		if (!open || !configStore) return;
 		let cancelled = false;
 		setLoaded(false);
-		const load = async () => {
-			if (configStore) {
-				const rc = await configStore.load();
-				setProvider(rc.llm.provider);
-				setBaseUrl(rc.llm.baseUrl ?? "");
-				setApiKey(rc.llm.apiKey ?? "");
-				setModel(rc.llm.model);
-				setStreaming(rc.streaming);
-				setTemperature(rc.loop.temperature !== void 0 ? String(rc.loop.temperature) : "");
-			} else {
-				const config = await llmConfig.load();
-				setProvider("openai-compatible");
-				setBaseUrl(config?.baseUrl ?? "");
-				setApiKey(config?.apiKey ?? "");
-				setModel(config?.model ?? "");
-				setStreaming(true);
-				setTemperature("");
-			}
-		};
-		load().then(() => {
+		configStore.load().then((rc) => {
 			if (cancelled) return;
-			setProbe({ kind: "idle" });
+			setEntries([...rc.llm.entries]);
+			setDefaultId(rc.llm.defaultId);
+			setStreaming(rc.streaming);
+			setTemperature(rc.loop.temperature !== void 0 ? String(rc.loop.temperature) : "");
+			setTodoEnabled(rc.agentCapabilities.todo);
+			setSkillGenerationEnabled(rc.agentCapabilities.skillGeneration);
+			setGenerativeUiEnabled(rc.agentCapabilities.generativeUi);
+			setFormAutofillEnabled(rc.agentCapabilities.formAutofill);
+			setDelegationEnabled(rc.agentCapabilities.delegation);
+			setAutofillCleared(false);
+			setPrefNotice(void 0);
+			setEditing(void 0);
+			setProbes({});
 			setLoaded(true);
 		}).catch((e) => {
 			if (!cancelled) setError(e instanceof Error ? e.message : String(e));
@@ -53828,94 +54819,151 @@ function SettingsDrawer({ open, llmConfig, runtimeConfig, theme, locale, rendere
 		return () => {
 			cancelled = true;
 		};
-	}, [
-		open,
-		llmConfig,
-		configStore
-	]);
+	}, [open, configStore]);
+	useEffect(() => {
+		if (!open) return;
+		let cancelled = false;
+		probeChromeBuiltinAvailability().then((result) => {
+			if (!cancelled) setChrome(result);
+		});
+		return () => {
+			cancelled = true;
+		};
+	}, [open]);
+	useEffect(() => {
+		if (!open) return;
+		let cancelled = false;
+		Promise.all(Object.keys(RENDERER_PROBES).map(async (kind) => [kind, await RENDERER_PROBES[kind]()])).then((results) => {
+			if (!cancelled) setRendererPeers(Object.fromEntries(results));
+		});
+		return () => {
+			cancelled = true;
+		};
+	}, [open]);
 	const fail = (e) => setError(e instanceof Error ? e.message : String(e));
-	const save = () => {
-		if (configStore) {
-			(async () => {
-				const rc = await configStore.load();
-				const loop = { ...rc.loop };
-				delete loop.temperature;
-				const parsed = temperature.trim() === "" ? void 0 : Number(temperature);
-				if (parsed !== void 0 && Number.isFinite(parsed)) loop.temperature = parsed;
-				const next = {
-					...rc,
-					streaming,
-					loop,
-					llm: {
-						provider,
-						model: model.trim(),
-						...baseUrl.trim() ? { baseUrl: baseUrl.trim() } : {},
-						...apiKey.trim() ? { apiKey: apiKey.trim() } : {}
-					}
-				};
-				await configStore.save(next);
-				onSaved();
-				onClose();
-			})().catch(fail);
-			return;
-		}
-		llmConfig.save({
-			...baseUrl.trim() ? { baseUrl: baseUrl.trim() } : {},
-			...apiKey.trim() ? { apiKey: apiKey.trim() } : {},
-			...model.trim() ? { model: model.trim() } : {}
-		}).then(() => {
-			onSaved();
-			onClose();
-		}).catch(fail);
-	};
-	const clear = () => {
-		if (configStore) {
-			(async () => {
-				const rc = await configStore.load();
-				const loop = { ...rc.loop };
-				delete loop.temperature;
-				const next = {
-					...rc,
-					streaming: true,
-					loop,
-					llm: {
-						provider: "openai-compatible",
-						model: ""
-					}
-				};
-				await configStore.save(next);
-				onSaved();
-				onClose();
-			})().catch(fail);
-			return;
-		}
-		llmConfig.clear().then(() => {
+	/** 所有写路径的唯一出口：读最新配置 → 打补丁 → 保存 → 通知宿主重装配 */
+	const persist = (mutate) => {
+		if (!configStore) return;
+		(async () => {
+			const rc = await configStore.load();
+			await configStore.save(mutate(rc));
 			onSaved();
-			onClose();
-		}).catch(fail);
-	};
-	const canProbe = apiKey.trim() !== "" && model.trim() !== "" && (provider !== "openai-compatible" || baseUrl.trim() !== "");
-	const testConnection = () => {
-		const client = createProbeClient(provider, {
-			baseUrl: baseUrl.trim(),
-			apiKey: apiKey.trim(),
-			model: model.trim()
-		});
-		setProbe({ kind: "testing" });
-		client.checkAvailability().then((available) => {
-			setProbe({
+		})().catch(fail);
+	};
+	const persistLlm = (next, nextDefaultId) => {
+		setEntries(next);
+		setDefaultId(nextDefaultId);
+		persist((rc) => ({
+			...rc,
+			llm: {
+				entries: next,
+				...nextDefaultId !== void 0 ? { defaultId: nextDefaultId } : {}
+			}
+		}));
+	};
+	const chromeReason = chrome !== void 0 && !chrome.available ? t(`settings.chromeBuiltin.${chrome.reason}`) : void 0;
+	const entryUnavailable = (entry) => entry.provider === "chrome-builtin" ? chromeReason : void 0;
+	const saveEntry = () => {
+		const provider = form.provider;
+		const isBuiltin = provider === "chrome-builtin";
+		const entry = {
+			id: editing === "new" || editing === void 0 ? newEntryId() : editing,
+			label: form.label.trim() !== "" ? form.label.trim() : form.model.trim() || t(`settings.provider.${provider}`),
+			provider,
+			model: form.model.trim(),
+			...!isBuiltin && form.baseUrl.trim() !== "" ? { baseUrl: form.baseUrl.trim() } : {},
+			...!isBuiltin && form.apiKey.trim() !== "" ? { apiKey: form.apiKey.trim() } : {}
+		};
+		const next = entries.some((item) => item.id === entry.id) ? entries.map((item) => item.id === entry.id ? entry : item) : [...entries, entry];
+		setEditing(void 0);
+		persistLlm(next, defaultId ?? entry.id);
+	};
+	const removeEntry = (id) => {
+		const next = entries.filter((entry) => entry.id !== id);
+		if (editing === id) setEditing(void 0);
+		persistLlm(next, defaultId === id ? next[0]?.id : defaultId);
+	};
+	const probeEntry = (entry) => {
+		const client = createLlmClient(entry);
+		const streamingSupported = typeof client.stream === "function";
+		setProbes((prev) => ({
+			...prev,
+			[entry.id]: { kind: "testing" }
+		}));
+		const done = (available) => setProbes((prev) => ({
+			...prev,
+			[entry.id]: {
 				kind: "done",
 				available,
-				streaming: typeof client.stream === "function"
-			});
-		}).catch(() => {
-			setProbe({
-				kind: "done",
-				available: false,
-				streaming: typeof client.stream === "function"
-			});
+				streaming: streamingSupported
+			}
+		}));
+		client.checkAvailability().then(done, () => done(false));
+	};
+	const setStreamingConfig = (next) => {
+		setStreaming(next);
+		persist((rc) => ({
+			...rc,
+			streaming: next
+		}));
+	};
+	const commitTemperature = () => {
+		const parsed = temperature.trim() === "" ? void 0 : Number(temperature);
+		persist((rc) => {
+			const loop = { ...rc.loop };
+			delete loop.temperature;
+			if (parsed !== void 0 && Number.isFinite(parsed)) loop.temperature = parsed;
+			return {
+				...rc,
+				loop
+			};
 		});
 	};
+	const setAgentCapability = (patch) => persist((rc) => ({
+		...rc,
+		agentCapabilities: {
+			...rc.agentCapabilities,
+			...patch
+		}
+	}));
+	/** 导出偏好（FR-5.1）：凭据在 `exportPreferences` 里就进不来，这里只负责落盘 */
+	const exportPrefs = () => {
+		if (!configStore) return;
+		(async () => {
+			const payload = exportPreferences(await configStore.load(), { appearance: {
+				theme,
+				locale,
+				...renderer ? { renderer } : {}
+			} });
+			if (onExportPreferences) onExportPreferences(payload);
+			else downloadPreferences(payload);
+			setPrefNotice(t("settings.preferences.exported"));
+		})().catch(fail);
+	};
+	/** 导入偏好（FR-5.4）：校验不过就整份拒，不做部分应用 */
+	const importPrefs = (text) => {
+		if (!configStore) return;
+		(async () => {
+			let parsed;
+			try {
+				parsed = JSON.parse(text);
+			} catch {
+				throw new Error("Preference file is not valid JSON");
+			}
+			const imported = importPreferences(parsed);
+			const rc = await configStore.load();
+			await configStore.save(applyPreferences(rc, imported));
+			const appearance = imported.preferences.appearance;
+			if (appearance) onAppearanceChange?.({
+				...appearance.theme === "light" || appearance.theme === "dark" ? { theme: appearance.theme } : {},
+				...appearance.locale === "en" || appearance.locale === "zh" ? { locale: appearance.locale } : {}
+			});
+			setPrefNotice(t("settings.preferences.imported"));
+			onSaved();
+		})().catch(fail);
+	};
+	const formBuiltin = form.provider === "chrome-builtin";
+	const canProbeForm = formBuiltin || form.model.trim() !== "" && (form.apiKey.trim() !== "" || form.baseUrl.trim() !== "");
 	return /* @__PURE__ */ jsx(Sheet, {
 		open,
 		onOpenChange: (next) => !next && onClose(),
@@ -53928,194 +54976,487 @@ function SettingsDrawer({ open, llmConfig, runtimeConfig, theme, locale, rendere
 				children: t("settings.title")
 			}), /* @__PURE__ */ jsxs("div", {
 				className: "flex flex-col gap-6",
-				children: [/* @__PURE__ */ jsxs("section", {
-					className: "flex flex-col gap-4",
-					children: [
-						/* @__PURE__ */ jsx(DescriptionText, {
-							title: t("settings.model.title"),
-							description: t("settings.model.description")
-						}),
-						loaded && apiKey.trim() === "" ? /* @__PURE__ */ jsxs("div", {
-							className: "flex items-start gap-2 rounded-card border border-warning/30 bg-warning-soft px-3 py-2.5",
-							children: [/* @__PURE__ */ jsx(Badge, {
-								tone: "warning",
-								children: t("settings.demoBadge")
-							}), /* @__PURE__ */ jsx("p", {
-								className: "text-xs text-muted",
-								children: t("settings.demoNote")
-							})]
-						}) : null,
-						error ? /* @__PURE__ */ jsx("div", {
-							role: "alert",
-							className: "rounded-lg border border-danger/30 bg-danger-soft px-3 py-2 text-xs text-danger",
-							children: error
-						}) : null,
-						/* @__PURE__ */ jsx(FormField, {
-							label: t("settings.provider"),
-							description: t("settings.providerNote"),
-							htmlFor: "webskill-settings-provider",
-							children: /* @__PURE__ */ jsx(Select, {
-								id: "webskill-settings-provider",
-								className: "w-full",
-								value: provider,
-								disabled: !loaded || !runtimeConfig,
-								options: PROVIDERS.map((value) => ({
-									value,
-									label: t(`settings.provider.${value}`)
-								})),
-								onChange: (value) => setProvider(value)
-							})
-						}),
-						provider === "openai-compatible" ? /* @__PURE__ */ jsx(FormField, {
-							label: t("settings.endpoint"),
-							htmlFor: "webskill-settings-endpoint",
-							children: /* @__PURE__ */ jsx(Input, {
-								id: "webskill-settings-endpoint",
-								value: baseUrl,
-								placeholder: "https://api.example.com/v1",
-								disabled: !loaded,
-								onChange: (event) => setBaseUrl(event.target.value)
-							})
-						}) : /* @__PURE__ */ jsx("p", {
-							className: "text-xs text-muted",
-							children: t(`settings.provider.${provider}.note`)
-						}),
-						/* @__PURE__ */ jsx(FormField, {
-							label: t("settings.apiKey"),
-							htmlFor: "webskill-settings-apikey",
-							children: /* @__PURE__ */ jsx(Input, {
-								id: "webskill-settings-apikey",
-								type: "password",
-								value: apiKey,
-								disabled: !loaded,
-								onChange: (event) => setApiKey(event.target.value)
-							})
-						}),
-						/* @__PURE__ */ jsx(FormField, {
-							label: t("settings.modelName"),
-							htmlFor: "webskill-settings-model",
-							children: /* @__PURE__ */ jsx(Input, {
-								id: "webskill-settings-model",
-								value: model,
-								placeholder: provider === "anthropic" ? "claude-sonnet-4-5" : provider === "google" ? "gemini-2.5-flash" : "gpt-4o-mini",
-								disabled: !loaded,
-								onChange: (event) => setModel(event.target.value)
-							})
-						}),
-						runtimeConfig ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(FormField, {
-							label: t("settings.streaming"),
-							description: t("settings.streamingNote"),
-							children: /* @__PURE__ */ jsx(Switch, {
-								checked: streaming,
-								disabled: !loaded,
-								onCheckedChange: setStreaming
-							})
-						}), /* @__PURE__ */ jsx(FormField, {
-							label: t("settings.temperature"),
-							description: t("settings.temperatureNote"),
-							htmlFor: "webskill-settings-temperature",
-							children: /* @__PURE__ */ jsx(Input, {
-								id: "webskill-settings-temperature",
-								type: "number",
-								value: temperature,
-								placeholder: "1.0",
-								disabled: !loaded,
-								onChange: (event) => setTemperature(event.target.value)
-							})
-						})] }) : null,
-						/* @__PURE__ */ jsxs("div", {
-							className: "flex flex-col gap-2",
-							children: [/* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
-								variant: "secondary",
-								size: "sm",
-								icon: /* @__PURE__ */ jsx(PlugZap, {
-									className: "size-3.5",
-									"aria-hidden": true
-								}),
-								loading: probe.kind === "testing",
-								disabled: !canProbe,
-								onClick: testConnection,
-								children: probe.kind === "testing" ? t("settings.testing") : t("settings.test")
-							}) }), probe.kind === "done" ? /* @__PURE__ */ jsxs("div", {
-								className: "flex flex-col gap-1.5",
-								children: [/* @__PURE__ */ jsxs("div", {
-									className: "flex flex-wrap items-center gap-2",
-									children: [/* @__PURE__ */ jsx(Badge, {
-										tone: probe.available ? "success" : "danger",
-										children: probe.available ? t("settings.available") : t("settings.unavailable")
-									}), probe.available && probe.streaming ? /* @__PURE__ */ jsx(Badge, {
-										tone: "neutral",
-										children: t("settings.streamingSupported")
-									}) : null]
+				children: [
+					/* @__PURE__ */ jsxs("section", {
+						className: "flex flex-col gap-4",
+						children: [
+							/* @__PURE__ */ jsx(DescriptionText, {
+								title: t("settings.model.title"),
+								description: t("settings.model.description")
+							}),
+							loaded && entries.length === 0 ? /* @__PURE__ */ jsxs("div", {
+								className: "flex items-start gap-2 rounded-card border border-warning/30 bg-warning-soft px-3 py-2.5",
+								children: [/* @__PURE__ */ jsx(Badge, {
+									tone: "warning",
+									children: t("settings.demoBadge")
 								}), /* @__PURE__ */ jsx("p", {
 									className: "text-xs text-muted",
-									children: t("settings.nonStreamingFallback")
+									children: t("settings.demoNote")
 								})]
-							}) : null]
-						}),
-						/* @__PURE__ */ jsxs("div", {
-							className: "flex items-center gap-2",
-							children: [/* @__PURE__ */ jsx(Button, {
-								onClick: save,
-								children: t("settings.save")
-							}), /* @__PURE__ */ jsx(Button, {
+							}) : null,
+							error ? /* @__PURE__ */ jsx("div", {
+								role: "alert",
+								className: "rounded-lg border border-danger/30 bg-danger-soft px-3 py-2 text-xs text-danger",
+								children: error
+							}) : null,
+							/* @__PURE__ */ jsx("ul", {
+								className: "flex flex-col gap-2",
+								"data-testid": "settings-model-list",
+								children: entries.map((entry) => {
+									const unavailable = entryUnavailable(entry);
+									const probe = probes[entry.id];
+									return /* @__PURE__ */ jsxs("li", {
+										"data-testid": "settings-model-row",
+										"data-entry-id": entry.id,
+										className: "flex flex-col gap-1.5 rounded-card border border-border px-3 py-2.5",
+										children: [
+											/* @__PURE__ */ jsxs("div", {
+												className: "flex flex-wrap items-center gap-2",
+												children: [
+													/* @__PURE__ */ jsx("span", {
+														className: "text-sm font-medium text-ink",
+														children: entry.label
+													}),
+													entry.id === defaultId ? /* @__PURE__ */ jsx(Badge, {
+														tone: "success",
+														children: t("settings.model.default")
+													}) : null,
+													unavailable ? /* @__PURE__ */ jsx(Badge, {
+														tone: "warning",
+														children: t("settings.model.unavailable")
+													}) : null
+												]
+											}),
+											/* @__PURE__ */ jsxs("p", {
+												className: "text-xs text-muted",
+												children: [t(`settings.provider.${entry.provider}`), entry.model.trim() !== "" ? ` · ${entry.model}` : ""]
+											}),
+											unavailable ? /* @__PURE__ */ jsx("p", {
+												className: "text-xs text-warning",
+												children: unavailable
+											}) : null,
+											entry.provider === "chrome-builtin" ? /* @__PURE__ */ jsx("p", {
+												className: "text-xs text-muted",
+												children: t("settings.provider.chrome-builtin.limitation")
+											}) : null,
+											probe?.kind === "done" ? /* @__PURE__ */ jsxs("div", {
+												className: "flex flex-wrap items-center gap-2",
+												children: [/* @__PURE__ */ jsx(Badge, {
+													tone: probe.available ? "success" : "danger",
+													children: probe.available ? t("settings.available") : t("settings.unavailable")
+												}), probe.available && probe.streaming ? /* @__PURE__ */ jsx(Badge, {
+													tone: "neutral",
+													children: t("settings.streamingSupported")
+												}) : null]
+											}) : null,
+											/* @__PURE__ */ jsxs("div", {
+												className: "flex flex-wrap items-center gap-2 pt-0.5",
+												children: [
+													/* @__PURE__ */ jsx(Button, {
+														variant: "secondary",
+														size: "sm",
+														icon: /* @__PURE__ */ jsx(PlugZap, {
+															className: "size-3.5",
+															"aria-hidden": true
+														}),
+														loading: probe?.kind === "testing",
+														onClick: () => probeEntry(entry),
+														children: probe?.kind === "testing" ? t("settings.testing") : t("settings.test")
+													}),
+													/* @__PURE__ */ jsx(Button, {
+														variant: "ghost",
+														size: "sm",
+														onClick: () => {
+															setForm(toForm(entry));
+															setEditing(entry.id);
+														},
+														children: t("settings.model.edit")
+													}),
+													entry.id === defaultId ? null : /* @__PURE__ */ jsx(Button, {
+														variant: "ghost",
+														size: "sm",
+														onClick: () => persistLlm(entries, entry.id),
+														children: t("settings.model.setDefault")
+													}),
+													/* @__PURE__ */ jsx(Button, {
+														variant: "ghost",
+														size: "sm",
+														onClick: () => removeEntry(entry.id),
+														children: t("settings.model.remove")
+													})
+												]
+											})
+										]
+									}, entry.id);
+								})
+							}),
+							loaded && entries.length === 0 ? /* @__PURE__ */ jsx("p", {
+								className: "text-xs text-muted",
+								children: t("settings.model.empty")
+							}) : null,
+							editing === void 0 ? /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
 								variant: "secondary",
-								onClick: clear,
-								children: t("settings.clear")
-							})]
-						})
-					]
-				}), /* @__PURE__ */ jsxs("section", {
-					className: "flex flex-col gap-4 border-t border-border pt-5",
-					children: [
-						/* @__PURE__ */ jsx(DescriptionText, {
-							title: t("settings.appearance.title"),
-							description: t("settings.appearance.description")
-						}),
-						/* @__PURE__ */ jsx(FormField, {
-							label: t("settings.theme"),
-							htmlFor: "webskill-settings-theme",
-							children: /* @__PURE__ */ jsx(Select, {
-								id: "webskill-settings-theme",
-								className: "w-full",
-								value: theme,
-								options: [{
-									value: "light",
-									label: t("settings.theme.light")
-								}, {
-									value: "dark",
-									label: t("settings.theme.dark")
-								}],
-								onChange: (value) => onAppearanceChange?.({ theme: value })
+								size: "sm",
+								"data-testid": "settings-model-add",
+								disabled: !loaded,
+								onClick: () => {
+									setForm(EMPTY_FORM);
+									setEditing("new");
+								},
+								children: t("settings.model.add")
+							}) }) : /* @__PURE__ */ jsxs("div", {
+								className: "flex flex-col gap-4 rounded-card border border-border p-3",
+								"data-testid": "settings-model-form",
+								children: [
+									/* @__PURE__ */ jsx(FormField, {
+										label: t("settings.model.label"),
+										description: t("settings.model.labelNote"),
+										htmlFor: "webskill-settings-label",
+										children: /* @__PURE__ */ jsx(Input, {
+											id: "webskill-settings-label",
+											value: form.label,
+											onChange: (event) => setForm({
+												...form,
+												label: event.target.value
+											})
+										})
+									}),
+									/* @__PURE__ */ jsx(FormField, {
+										label: t("settings.provider"),
+										description: t("settings.providerNote"),
+										htmlFor: "webskill-settings-provider",
+										children: /* @__PURE__ */ jsx(Select, {
+											id: "webskill-settings-provider",
+											className: "w-full",
+											value: form.provider,
+											options: PROVIDERS.map((value) => ({
+												value,
+												label: t(`settings.provider.${value}`),
+												...value === "chrome-builtin" && chromeReason !== void 0 ? { disabled: true } : {}
+											})),
+											onChange: (value) => setForm({
+												...form,
+												provider: value
+											})
+										})
+									}),
+									chromeReason !== void 0 ? /* @__PURE__ */ jsx("p", {
+										className: "text-xs text-warning",
+										"data-testid": "settings-chrome-unavailable",
+										children: chromeReason
+									}) : null,
+									formBuiltin ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("p", {
+										className: "text-xs text-muted",
+										children: t("settings.provider.chrome-builtin.note")
+									}), /* @__PURE__ */ jsx("p", {
+										className: "text-xs text-warning",
+										children: t("settings.provider.chrome-builtin.limitation")
+									})] }) : /* @__PURE__ */ jsxs(Fragment$1, { children: [
+										form.provider === "openai-compatible" ? /* @__PURE__ */ jsx(FormField, {
+											label: t("settings.endpoint"),
+											htmlFor: "webskill-settings-endpoint",
+											children: /* @__PURE__ */ jsx(Input, {
+												id: "webskill-settings-endpoint",
+												value: form.baseUrl,
+												placeholder: "https://api.example.com/v1",
+												onChange: (event) => setForm({
+													...form,
+													baseUrl: event.target.value
+												})
+											})
+										}) : /* @__PURE__ */ jsx("p", {
+											className: "text-xs text-muted",
+											children: t(`settings.provider.${form.provider}.note`)
+										}),
+										/* @__PURE__ */ jsx(FormField, {
+											label: t("settings.apiKey"),
+											htmlFor: "webskill-settings-apikey",
+											children: /* @__PURE__ */ jsx(Input, {
+												id: "webskill-settings-apikey",
+												type: "password",
+												value: form.apiKey,
+												onChange: (event) => setForm({
+													...form,
+													apiKey: event.target.value
+												})
+											})
+										}),
+										/* @__PURE__ */ jsx(FormField, {
+											label: t("settings.modelName"),
+											htmlFor: "webskill-settings-model",
+											children: /* @__PURE__ */ jsx(Input, {
+												id: "webskill-settings-model",
+												value: form.model,
+												placeholder: form.provider === "anthropic" ? "claude-sonnet-4-5" : form.provider === "google" ? "gemini-2.5-flash" : "gpt-4o-mini",
+												onChange: (event) => setForm({
+													...form,
+													model: event.target.value
+												})
+											})
+										})
+									] }),
+									/* @__PURE__ */ jsxs("div", {
+										className: "flex items-center gap-2",
+										children: [/* @__PURE__ */ jsx(Button, {
+											"data-testid": "settings-model-save",
+											disabled: !canProbeForm,
+											onClick: saveEntry,
+											children: t("settings.save")
+										}), /* @__PURE__ */ jsx(Button, {
+											variant: "secondary",
+											onClick: () => setEditing(void 0),
+											children: t("settings.model.cancel")
+										})]
+									})
+								]
+							}),
+							/* @__PURE__ */ jsx("p", {
+								className: "text-xs text-muted",
+								children: t("settings.nonStreamingFallback")
+							}),
+							runtimeConfig ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.streaming"),
+								description: t("settings.streamingNote"),
+								children: /* @__PURE__ */ jsx(Switch, {
+									checked: streaming,
+									disabled: !loaded,
+									onCheckedChange: setStreamingConfig
+								})
+							}), /* @__PURE__ */ jsx(FormField, {
+								label: t("settings.temperature"),
+								description: t("settings.temperatureNote"),
+								htmlFor: "webskill-settings-temperature",
+								children: /* @__PURE__ */ jsx(Input, {
+									id: "webskill-settings-temperature",
+									type: "number",
+									value: temperature,
+									placeholder: "1.0",
+									disabled: !loaded,
+									onChange: (event) => setTemperature(event.target.value),
+									onBlur: commitTemperature
+								})
+							})] }) : null
+						]
+					}),
+					runtimeConfig ? /* @__PURE__ */ jsxs("section", {
+						className: "flex flex-col gap-4 border-t border-border pt-5",
+						children: [
+							/* @__PURE__ */ jsx(DescriptionText, {
+								title: t("settings.agent.title"),
+								description: t("settings.agent.description")
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.agent.todo"),
+								description: t("settings.agent.todoNote"),
+								children: /* @__PURE__ */ jsx(Switch, {
+									"data-testid": "settings-agent-todo",
+									checked: todoEnabled,
+									disabled: !loaded,
+									onCheckedChange: (next) => {
+										setTodoEnabled(next);
+										setAgentCapability({ todo: next });
+									}
+								})
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.agent.generativeUi"),
+								description: t("settings.agent.generativeUiNote"),
+								children: /* @__PURE__ */ jsx(Switch, {
+									"data-testid": "settings-agent-generative-ui",
+									checked: generativeUiEnabled,
+									disabled: !loaded,
+									onCheckedChange: (next) => {
+										setGenerativeUiEnabled(next);
+										setAgentCapability({ generativeUi: next });
+									}
+								})
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.agent.skillGeneration"),
+								description: t("settings.agent.skillGenerationNote"),
+								children: /* @__PURE__ */ jsx(Switch, {
+									"data-testid": "settings-agent-skill-generation",
+									checked: skillGenerationEnabled,
+									disabled: !loaded,
+									onCheckedChange: (next) => {
+										setSkillGenerationEnabled(next);
+										setAgentCapability({ skillGeneration: next });
+									}
+								})
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.agent.delegation"),
+								description: t("settings.agent.delegationNote"),
+								children: /* @__PURE__ */ jsx(Switch, {
+									"data-testid": "settings-agent-delegation",
+									checked: delegationEnabled,
+									disabled: !loaded,
+									onCheckedChange: (next) => {
+										setDelegationEnabled(next);
+										setAgentCapability({ delegation: next });
+									}
+								})
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.agent.formAutofill"),
+								description: t("settings.agent.formAutofillNote"),
+								children: /* @__PURE__ */ jsxs("div", {
+									className: "flex items-center gap-3",
+									children: [/* @__PURE__ */ jsx(Switch, {
+										"data-testid": "settings-agent-form-autofill",
+										checked: formAutofillEnabled,
+										disabled: !loaded,
+										onCheckedChange: (next) => {
+											setFormAutofillEnabled(next);
+											setAgentCapability({ formAutofill: next });
+										}
+									}), onClearFormAutofill ? /* @__PURE__ */ jsx(Button, {
+										"data-testid": "settings-agent-form-autofill-clear",
+										variant: "ghost",
+										size: "sm",
+										onClick: () => {
+											onClearFormAutofill().then(() => setAutofillCleared(true)).catch(fail);
+										},
+										children: autofillCleared ? t("settings.agent.formAutofillCleared") : t("settings.agent.formAutofillClear")
+									}) : null]
+								})
 							})
-						}),
-						/* @__PURE__ */ jsx(FormField, {
-							label: t("settings.language"),
-							htmlFor: "webskill-settings-locale",
+						]
+					}) : null,
+					/* @__PURE__ */ jsxs("section", {
+						className: "flex flex-col gap-4 border-t border-border pt-5",
+						children: [
+							/* @__PURE__ */ jsx(DescriptionText, {
+								title: t("settings.appearance.title"),
+								description: t("settings.appearance.description")
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.theme"),
+								htmlFor: "webskill-settings-theme",
+								children: /* @__PURE__ */ jsx(Select, {
+									id: "webskill-settings-theme",
+									className: "w-full",
+									value: theme,
+									options: [{
+										value: "light",
+										label: t("settings.theme.light")
+									}, {
+										value: "dark",
+										label: t("settings.theme.dark")
+									}],
+									onChange: (value) => onAppearanceChange?.({ theme: value })
+								})
+							}),
+							/* @__PURE__ */ jsx(FormField, {
+								label: t("settings.language"),
+								htmlFor: "webskill-settings-locale",
+								children: /* @__PURE__ */ jsx(Select, {
+									id: "webskill-settings-locale",
+									className: "w-full",
+									value: locale,
+									options: [{
+										value: "en",
+										label: t("settings.language.en")
+									}, {
+										value: "zh",
+										label: t("settings.language.zh")
+									}],
+									onChange: (value) => onAppearanceChange?.({ locale: value })
+								})
+							}),
+							renderer !== void 0 ? /* @__PURE__ */ jsx(FormField, {
+								label: t("settings.renderer"),
+								description: t("settings.renderer.description"),
+								htmlFor: "webskill-settings-renderer",
+								children: /* @__PURE__ */ jsxs("div", {
+									className: "flex flex-col gap-1.5",
+									children: [/* @__PURE__ */ jsx(Select, {
+										id: "webskill-settings-renderer",
+										className: "w-full",
+										value: renderer,
+										options: RENDERERS.map((kind) => ({
+											value: kind,
+											label: t(`settings.renderer.${kind}`),
+											...kind !== "native" && rendererPeers[kind] === false ? { disabled: true } : {}
+										})),
+										onChange: (value) => onAppearanceChange?.({ renderer: value })
+									}), RENDERERS.filter((kind) => kind !== "native" && rendererPeers[kind] === false).map((kind) => /* @__PURE__ */ jsxs("p", {
+										"data-testid": "settings-renderer-unavailable",
+										className: "text-xs text-muted",
+										children: [
+											t(`settings.renderer.${kind}`),
+											": ",
+											MISSING_PEER[kind]
+										]
+									}, kind))]
+								})
+							}) : null
+						]
+					}),
+					/* @__PURE__ */ jsxs("section", {
+						className: "flex flex-col gap-3 border-t border-border pt-5",
+						children: [/* @__PURE__ */ jsx(DescriptionText, {
+							title: t("settings.voice.title"),
+							description: t("settings.voice.description")
+						}), /* @__PURE__ */ jsx(FormField, {
+							label: t("settings.voice.lang"),
+							htmlFor: "webskill-settings-dictation-lang",
 							children: /* @__PURE__ */ jsx(Select, {
-								id: "webskill-settings-locale",
+								id: "webskill-settings-dictation-lang",
 								className: "w-full",
-								value: locale,
+								value: dictationLang,
 								options: [{
-									value: "en",
-									label: t("settings.language.en")
-								}, {
-									value: "zh",
-									label: t("settings.language.zh")
-								}],
-								onChange: (value) => onAppearanceChange?.({ locale: value })
+									value: "",
+									label: t("settings.voice.langFollow")
+								}, ...DICTATION_LANGS.map((lang) => ({
+									value: lang,
+									label: lang
+								}))],
+								onChange: (value) => onAppearanceChange?.({ dictationLang: value })
 							})
-						}),
-						renderer !== void 0 ? /* @__PURE__ */ jsx(FormField, {
-							label: t("settings.renderer"),
-							description: t("settings.renderer.description"),
-							children: /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Badge, {
-								tone: "neutral",
-								children: t(`settings.renderer.${renderer}`)
-							}) })
-						}) : null
-					]
-				})]
+						})]
+					}),
+					runtimeConfig ? /* @__PURE__ */ jsxs("section", {
+						className: "flex flex-col gap-3 border-t border-border pt-5",
+						children: [
+							/* @__PURE__ */ jsx(DescriptionText, {
+								title: t("settings.preferences.title"),
+								description: t("settings.preferences.description")
+							}),
+							/* @__PURE__ */ jsxs("div", {
+								className: "flex items-center gap-2",
+								children: [/* @__PURE__ */ jsx(Button, {
+									"data-testid": "settings-preferences-export",
+									variant: "secondary",
+									size: "sm",
+									onClick: exportPrefs,
+									children: t("settings.preferences.export")
+								}), /* @__PURE__ */ jsxs("label", {
+									className: "inline-flex",
+									children: [/* @__PURE__ */ jsx("span", {
+										className: "sr-only",
+										children: t("settings.preferences.import")
+									}), /* @__PURE__ */ jsx("input", {
+										"data-testid": "settings-preferences-import",
+										type: "file",
+										accept: "application/json,.json",
+										className: "text-xs",
+										onChange: (event) => {
+											const file = event.target.files?.[0];
+											event.target.value = "";
+											if (file) file.text().then(importPrefs, fail);
+										}
+									})]
+								})]
+							}),
+							prefNotice ? /* @__PURE__ */ jsx("p", {
+								"data-testid": "settings-preferences-notice",
+								className: "text-xs text-muted",
+								children: prefNotice
+							}) : null
+						]
+					}) : null
+				]
 			})]
 		})
 	});
@@ -54176,7 +55517,7 @@ async function downloadArtifactFile(storage, chatRoot, file) {
 * presentation shell and accessible thread primitives.
 * @stable
 */
-function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, renderer: rendererProp, surfaceRegistry, layout = "auto", onAppearanceChange, onEngineReady }) {
+function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, renderer: rendererProp, dictationLang: dictationLangProp, surfaceRegistry, layout = "auto", onAppearanceChange, onEngineReady }) {
 	const engine = useMemo(() => new ChatEngine(adapter, {
 		...config?.chatRoot ? { chatRoot: config.chatRoot } : {},
 		...config?.llm ? { llm: config.llm } : {},
@@ -54185,6 +55526,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		...config?.generativeUi ? { generativeUi: true } : {},
 		...config?.hooks ? { hooks: config.hooks } : {},
 		...config?.governance ? { governance: config.governance } : {},
+		...config?.skillCandidates ? { skillCandidates: config.skillCandidates } : {},
 		...rendererProp ? { renderer: rendererProp } : {}
 	}), [
 		adapter,
@@ -54195,6 +55537,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		config?.generativeUi,
 		config?.hooks,
 		config?.governance,
+		config?.skillCandidates,
 		rendererProp
 	]);
 	useEffect(() => {
@@ -54203,6 +55546,8 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 	const [theme, setTheme] = useState(themeProp ?? "light");
 	const [locale, setLocale] = useState(localeProp ?? "en");
 	const [renderer, setRenderer] = useState(rendererProp ?? "native");
+	/** 空串 = 跟随界面语言，由 composer 自己映射成 BCP-47 */
+	const [dictationLang, setDictationLang] = useState(dictationLangProp ?? "");
 	useEffect(() => {
 		if (themeProp !== void 0) setTheme(themeProp);
 	}, [themeProp]);
@@ -54212,6 +55557,9 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 	useEffect(() => {
 		if (rendererProp !== void 0) setRenderer(rendererProp);
 	}, [rendererProp]);
+	useEffect(() => {
+		if (dictationLangProp !== void 0) setDictationLang(dictationLangProp);
+	}, [dictationLangProp]);
 	useEffect(() => {
 		engine.setRenderer(renderer);
 	}, [engine, renderer]);
@@ -54236,6 +55584,14 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 	const [interactionPending, setInteractionPending] = useState(false);
 	/** pending 交互归属的会话（跨会话查看时隐藏交互卡，防串台） */
 	const [interactionSessionId, setInteractionSessionId] = useState();
+	/** 会话级模型选择（需求 4）：composer 选择器的受控值，权威值在 engine 里 */
+	const [modelId, setModelId] = useState();
+	/** RuntimeConfig.llm 的镜像（选择器选项来源；设置抽屉保存后重取） */
+	const [llmSelection, setLlmSelection] = useState({ entries: [] });
+	/** 设置抽屉每次保存后 +1，触发模型列表重取 */
+	const [configVersion, setConfigVersion] = useState(0);
+	/** Chrome 内置模型可用性（不可用的条目在选择器里置灰，AC-4.6） */
+	const [chromeBuiltin, setChromeBuiltin] = useState();
 	/** currentSessionId 的 ref 镜像（事件订阅闭包 [engine] 内读取最新值） */
 	const sessionRef = useRef(currentSessionId);
 	sessionRef.current = currentSessionId;
@@ -54260,6 +55616,49 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 			cancelled = true;
 		};
 	}, [adapter, engine]);
+	const configStore = config?.runtimeConfig;
+	useEffect(() => {
+		if (!configStore) return;
+		let cancelled = false;
+		withRuntimeConfigDefaults(configStore).load().then((rc) => {
+			if (!cancelled) setLlmSelection({
+				entries: rc.llm.entries,
+				...rc.llm.defaultId ? { defaultId: rc.llm.defaultId } : {}
+			});
+		}).catch(() => void 0);
+		return () => {
+			cancelled = true;
+		};
+	}, [configStore, configVersion]);
+	useEffect(() => {
+		let cancelled = false;
+		probeChromeBuiltinAvailability().then((result) => {
+			if (!cancelled) setChromeBuiltin(result);
+		});
+		return () => {
+			cancelled = true;
+		};
+	}, []);
+	const composerModels = useMemo(() => {
+		if (llmSelection.entries.length === 0) return void 0;
+		return {
+			options: llmSelection.entries.map((entry) => ({
+				id: entry.id,
+				label: entry.label,
+				...entry.provider === "chrome-builtin" && chromeBuiltin?.available === false ? { disabled: true } : {}
+			})),
+			value: modelId ?? llmSelection.defaultId ?? llmSelection.entries[0]?.id ?? "",
+			onChange: (id) => {
+				setModelId(id);
+				engine.setModel(id);
+			}
+		};
+	}, [
+		llmSelection,
+		chromeBuiltin,
+		modelId,
+		engine
+	]);
 	const refreshSessions = useCallback(async () => {
 		const page = await engine.listSessions();
 		setSessions(page.items);
@@ -54364,6 +55763,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 			setMessages(history.items);
 			setMessagesCursor(history.nextCursor);
 			setDrawerOpen(false);
+			setModelId(engine.modelId);
 		}).catch((e) => setError({ message: toErrorMessage(e) }));
 	}, [engine]);
 	/** 向历史方向再取一页：页内升序，所以是**前插**而不是追加 */
@@ -54396,6 +55796,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 			setCurrentSessionId(meta.id);
 			setMessages([]);
 			setMessagesCursor(void 0);
+			setModelId(engine.modelId);
 			await refreshSessions();
 		}).catch((e) => setError({ message: toErrorMessage(e) }));
 	}, [engine, refreshSessions]);
@@ -54425,6 +55826,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		if (next.theme !== void 0) setTheme(next.theme);
 		if (next.locale !== void 0) setLocale(next.locale);
 		if (next.renderer !== void 0) setRenderer(next.renderer);
+		if (next.dictationLang !== void 0) setDictationLang(next.dictationLang);
 		onAppearanceChange?.(next);
 	}, [onAppearanceChange]);
 	const chatRoot = (config?.chatRoot ?? "/chat").replace(/\/+$/, "");
@@ -54570,6 +55972,8 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 									disabled: interactionPending,
 									centered: composerCentered,
 									attachments: attachmentsReady,
+									...dictationLang !== "" ? { dictationLang } : {},
+									...composerModels ? { models: composerModels } : {},
 									...config?.placeholder ? { placeholder: config.placeholder } : {}
 								})]
 							})
@@ -54577,13 +55981,17 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 					}),
 					/* @__PURE__ */ jsx(SettingsDrawer, {
 						open: settingsOpen,
-						llmConfig: adapter.llmConfig,
 						...config?.runtimeConfig ? { runtimeConfig: config.runtimeConfig } : {},
 						theme,
 						locale,
 						renderer,
+						dictationLang,
 						onAppearanceChange: handleAppearanceChange,
-						onSaved: () => engine.reloadConfig(),
+						onClearFormAutofill: () => engine.clearFormAutofill(),
+						onSaved: () => {
+							engine.reloadConfig();
+							setConfigVersion((version) => version + 1);
+						},
 						onClose: () => setSettingsOpen(false)
 					})
 				]