@webskill/chatbot 0.16.0 → 0.17.0

package/dist/parse-79VbXLl4.js

@@ -0,0 +1,642 @@
+import { a as QUICK_PROMPT_ICON_NAMES, n as defaultRuntimeConfig, t as RUNTIME_RENDERER_IDS } from "./types-C4dzGOPp.js";
+
+//#region ../ui-kit/src/runtime-config/enums.ts
+const RUNTIME_LLM_PROVIDERS = [
+	"openai-compatible",
+	"anthropic",
+	"google",
+	"chrome-builtin"
+];
+const RUNTIME_SANDBOX_EXECUTORS = [
+	"auto",
+	"blob-worker",
+	"iframe-sandbox"
+];
+/**
+* `NetworkPolicy` 里的**标量**取值。
+* 该类型还有 `{ allow: string[] }` 一种对象形态，不属于枚举，由解析器单独处理。
+*/
+const RUNTIME_NETWORK_POLICY_KINDS = ["deny-all", "allow-all"];
+const RUNTIME_ROUTER_STRATEGIES = ["progressive", "full-disclosure"];
+const RUNTIME_MISSING_PARAMS_MODES = ["user", "llm"];
+const RUNTIME_CONFIRMATION_MODES = ["required", "auto-approve"];
+const RUNTIME_APPROVAL_SCOPES = ["once-per-run", "every-call"];
+const RUNTIME_UNSIGNED_SKILL_POLICIES = [
+	"allow",
+	"warn",
+	"deny"
+];
+const RUNTIME_THEMES = ["light", "dark"];
+const RUNTIME_LOCALES = ["zh", "en"];
+/**
+* `CapabilityMode` 里的**字符串**取值。
+* 该类型是三态（`false` / 需批准 / `true`），两个布尔端不属于枚举，由解析器单独处理。
+*/
+const RUNTIME_CAPABILITY_MODES = ["require-approval"];
+
+//#endregion
+//#region ../ui-kit/src/runtime-config/bounds.ts
+const RUNTIME_CONFIG_BOUNDS = {
+	loop: {
+		maxTurns: {
+			min: 1,
+			max: 9999
+		},
+		maxHistoryMessages: {
+			min: 1,
+			max: 1e3
+		},
+		totalTimeoutMs: { min: 1e3 },
+		toolTimeoutMs: { min: 1e3 },
+		toolResultMaxBytes: { min: 1024 },
+		maxDocumentBytes: { min: 1024 },
+		maxDocumentTextBytes: { min: 1024 },
+		temperature: {
+			min: 0,
+			max: 2
+		}
+	},
+	interaction: { interactionTimeoutMs: { min: 1e3 } },
+	hooks: { timeoutMs: { min: 100 } },
+	skillState: { quarantineThreshold: {
+		min: 1,
+		max: 20
+	} },
+	multimodal: {
+		maxImagesPerMessage: {
+			min: 1,
+			max: 100
+		},
+		maxImageBytes: { min: 65536 },
+		minImageArea: { min: 0 }
+	},
+	sandbox: {
+		maxDataSourceBytes: { min: 1024 },
+		maxUploadFileBytes: { min: 1024 }
+	},
+	userProfile: {
+		injectMaxBytes: { min: 1024 },
+		recordLimit: { min: 1 }
+	},
+	/** 单个模型条目的区间；`llm.entries` 是数组，够不到上面的按分区结构 */
+	llmEntry: { requestTimeoutMs: { min: 1e3 } },
+	quickPromptLimit: {
+		min: 1,
+		max: 20
+	}
+};
+
+//#endregion
+//#region ../ui-kit/src/runtime-config/providerDefaults.ts
+/**
+* provider 相关的默认值与切换规则（0.6.0 FR-13.1）。
+* chatbot 设置面板与 console 的 `connections.models` 共用这一份——
+* 0.5.x 时两处各自硬编码，改一处漏一处。
+*/
+/**
+* 各 provider 的官方默认端点。取值必须与客户端内部的 fallback 一致（T-03-2 断言）：
+* 客户端的 fallback 保证「用户没填也能跑」，这张表只服务 UI 预填，两者说的是同一件事。
+* `openai-compatible` 与 `chrome-builtin` 无默认——前者端点任意，后者根本不走 HTTP。
+* @experimental
+*/
+const PROVIDER_DEFAULT_BASE_URL = {
+	"openai-compatible": void 0,
+	anthropic: "https://api.anthropic.com",
+	google: "https://generativelanguage.googleapis.com",
+	"chrome-builtin": void 0
+};
+/**
+* `chrome-builtin` 由浏览器决定用哪个内置模型，调用方填不了模型名。
+* 其余 provider 必须显式指定。 @experimental
+*/
+function providerUsesModelName(provider) {
+	return provider !== "chrome-builtin";
+}
+const KNOWN_DEFAULT_BASE_URLS = new Set(Object.values(PROVIDER_DEFAULT_BASE_URL).filter((url) => url !== void 0));
+
+//#endregion
+//#region src/config/errors.ts
+/**
+* 配置文件校验失败。
+*
+* 校验一律**硬失败**：拼错一个字段名而解析器静默忽略，得到的是「看起来生效了其实没生效」
+* 的构建产物，症状出现在运行时且完全无从反推。
+* @experimental
+*/
+var WebSkillConfigError = class extends Error {
+	code;
+	/** 出问题的位置在配置文件里的路径，如 `agentRuntime.loop.maxTurns` */
+	path;
+	constructor(code, path, message) {
+		super(message);
+		this.name = "WebSkillConfigError";
+		this.code = code;
+		this.path = path;
+	}
+};
+
+//#endregion
+//#region src/config/schema.ts
+/**
+* 分节名与 Console「设置」各页的分组一一对应，字段名与 `RuntimeConfig` 同形，
+* 方便对着界面逐项核对。
+* @experimental
+*/
+const CONFIG_FIELDS = {
+	models: {
+		target: ["llm", "entries"],
+		kind: "custom"
+	},
+	defaultModel: {
+		target: ["llm", "defaultId"],
+		kind: "string"
+	},
+	"agentRuntime.streaming": { target: ["streaming"] },
+	"agentRuntime.renderResult": { target: ["renderResult"] },
+	"agentRuntime.router": {
+		target: ["router", "strategy"],
+		values: RUNTIME_ROUTER_STRATEGIES
+	},
+	"agentRuntime.skillState.quarantineThreshold": { target: ["skillState", "quarantineThreshold"] },
+	"agentRuntime.loop.maxTurns": { target: ["loop", "maxTurns"] },
+	"agentRuntime.loop.maxHistoryMessages": { target: ["loop", "maxHistoryMessages"] },
+	"agentRuntime.loop.totalTimeoutMs": { target: ["loop", "totalTimeoutMs"] },
+	"agentRuntime.loop.toolTimeoutMs": { target: ["loop", "toolTimeoutMs"] },
+	"agentRuntime.loop.toolResultMaxBytes": { target: ["loop", "toolResultMaxBytes"] },
+	"agentRuntime.loop.maxDocumentBytes": { target: ["loop", "maxDocumentBytes"] },
+	"agentRuntime.loop.maxDocumentTextBytes": { target: ["loop", "maxDocumentTextBytes"] },
+	"agentRuntime.loop.temperature": {
+		target: ["loop", "temperature"],
+		kind: "number"
+	},
+	"agentRuntime.interaction.missingParams": {
+		target: ["interaction", "missingParams"],
+		values: RUNTIME_MISSING_PARAMS_MODES
+	},
+	"agentRuntime.interaction.confirmations": {
+		target: ["interaction", "confirmations"],
+		values: RUNTIME_CONFIRMATION_MODES
+	},
+	"agentRuntime.interaction.approvalScope": {
+		target: ["interaction", "approvalScope"],
+		values: RUNTIME_APPROVAL_SCOPES
+	},
+	"agentRuntime.interaction.interactionTimeoutMs": { target: ["interaction", "interactionTimeoutMs"] },
+	"agentRuntime.hooks.timeoutMs": { target: ["hooks", "timeoutMs"] },
+	"agentRuntime.hooks.failOnHookError": { target: ["hooks", "failOnHookError"] },
+	"agentRuntime.agentCapabilities.todo": { target: ["agentCapabilities", "todo"] },
+	"agentRuntime.agentCapabilities.generativeUi": { target: ["agentCapabilities", "generativeUi"] },
+	"agentRuntime.agentCapabilities.skillGeneration": { target: ["agentCapabilities", "skillGeneration"] },
+	"agentRuntime.agentCapabilities.delegation": { target: ["agentCapabilities", "delegation"] },
+	"agentRuntime.agentCapabilities.uiPresets": { target: ["agentCapabilities", "uiPresets"] },
+	"agentRuntime.multimodal.imageAttachments": { target: ["multimodal", "imageAttachments"] },
+	"agentRuntime.multimodal.pageImageCapture": { target: ["multimodal", "pageImageCapture"] },
+	"agentRuntime.multimodal.maxImagesPerMessage": { target: ["multimodal", "maxImagesPerMessage"] },
+	"agentRuntime.multimodal.maxImageBytes": { target: ["multimodal", "maxImageBytes"] },
+	"agentRuntime.multimodal.minImageArea": { target: ["multimodal", "minImageArea"] },
+	"sandbox.executor": {
+		target: ["sandbox", "executor"],
+		values: RUNTIME_SANDBOX_EXECUTORS
+	},
+	"sandbox.networkPolicy": {
+		target: ["sandbox", "networkPolicy"],
+		kind: "custom",
+		values: RUNTIME_NETWORK_POLICY_KINDS
+	},
+	"sandbox.typescript": {
+		target: ["sandbox", "typescript"],
+		kind: "custom",
+		covers: [
+			[
+				"sandbox",
+				"typescript",
+				"enabled"
+			],
+			[
+				"sandbox",
+				"typescript",
+				"esbuildUrl"
+			],
+			[
+				"sandbox",
+				"typescript",
+				"wasmUrl"
+			]
+		]
+	},
+	"sandbox.downloadedFiles": { target: ["sandbox", "downloadedFiles"] },
+	"sandbox.uploadFiles": { target: ["sandbox", "uploadFiles"] },
+	"sandbox.allowHttp": { target: [
+		"sandbox",
+		"remoteUrl",
+		"allowHttp"
+	] },
+	"sandbox.allowPrivateHosts": { target: [
+		"sandbox",
+		"remoteUrl",
+		"allowPrivateHosts"
+	] },
+	"sandbox.capabilities.readReference": {
+		target: [
+			"sandbox",
+			"capabilities",
+			"readReference"
+		],
+		kind: "capability"
+	},
+	"sandbox.capabilities.readAsset": {
+		target: [
+			"sandbox",
+			"capabilities",
+			"readAsset"
+		],
+		kind: "capability"
+	},
+	"sandbox.capabilities.writeArtifact": {
+		target: [
+			"sandbox",
+			"capabilities",
+			"writeArtifact"
+		],
+		kind: "capability"
+	},
+	"sandbox.capabilities.confirm": {
+		target: [
+			"sandbox",
+			"capabilities",
+			"confirm"
+		],
+		kind: "capability"
+	},
+	"sandbox.capabilities.fetchData": {
+		target: [
+			"sandbox",
+			"capabilities",
+			"fetchData"
+		],
+		kind: "capability"
+	},
+	"sandbox.dataSources": {
+		target: ["sandbox", "dataSources"],
+		kind: "custom"
+	},
+	"sandbox.maxDataSourceBytes": { target: ["sandbox", "maxDataSourceBytes"] },
+	"sandbox.maxUploadFileBytes": { target: ["sandbox", "maxUploadFileBytes"] },
+	"sandbox.unsignedSkills": {
+		target: ["security", "unsignedSkills"],
+		values: RUNTIME_UNSIGNED_SKILL_POLICIES
+	},
+	"sandbox.documentSurface": { target: ["documentSurface", "enabled"] },
+	"quickPrompts.limit": { target: ["quickPromptLimit"] },
+	"quickPrompts.items": {
+		target: ["quickPrompts"],
+		kind: "custom"
+	},
+	"privacy.userProfile": { target: ["userProfile", "enabled"] },
+	"privacy.encryptProfile": { target: ["userProfile", "encrypted"] },
+	"privacy.injectMaxBytes": { target: ["userProfile", "injectMaxBytes"] },
+	"privacy.recordLimit": { target: ["userProfile", "recordLimit"] },
+	"appearance.theme": {
+		target: ["appearance", "theme"],
+		values: RUNTIME_THEMES
+	},
+	"appearance.locale": {
+		target: ["appearance", "locale"],
+		values: RUNTIME_LOCALES
+	},
+	"appearance.renderer": {
+		target: ["appearance", "renderer"],
+		values: RUNTIME_RENDERER_IDS
+	},
+	"appearance.dictationLang": {
+		target: ["appearance", "dictationLang"],
+		allowEmpty: true
+	}
+};
+/** 快捷指令图标的合法取值；`quickPrompts.items` 的专用解析器要用 */
+const QUICK_PROMPT_ICONS = QUICK_PROMPT_ICON_NAMES;
+/** 模型条目的 provider 取值；`models` 的专用解析器要用 */
+const LLM_PROVIDERS = RUNTIME_LLM_PROVIDERS;
+/**
+* `RuntimeConfig` 里**不可配置**的字段（DV-5）。
+*
+* 它们不是出厂设置：`quickPromptsSeeded` 是写了 `quickPrompts.items` 之后的派生值，
+* `dismissedAutoEntries` 是用户点掉过哪几条模型的运行时状态。
+* 完整性测试要读这张表来算排除项——把排除项内联进测试就是造下一个手抄副本。
+* @experimental
+*/
+const NON_CONFIGURABLE_RUNTIME_PATHS = ["quickPromptsSeeded", "dismissedAutoEntries"];
+/** 配置文件覆盖到的全部 `RuntimeConfig` 路径（点号形式），供完整性测试使用 @experimental */
+const CONFIGURED_RUNTIME_PATHS = Object.values(CONFIG_FIELDS).flatMap((spec) => (spec.covers ?? [spec.target]).map((path) => path.join("."))).sort();
+function valueAt(root, path) {
+	let current = root;
+	for (const segment of path) {
+		if (typeof current !== "object" || current === null) return void 0;
+		current = current[segment];
+	}
+	return current;
+}
+/**
+* 叶子类型：显式声明优先，否则看 `defaultRuntimeConfig()` 里那个位置放的是什么。
+* 推不出来（默认值缺席）时抛错——这是开发期错误，表里补一个 `kind` 即可。
+*/
+function leafKindOf(spec, path) {
+	if (spec.kind !== void 0) return spec.kind;
+	if (spec.values !== void 0) return "string";
+	const fallback = valueAt(defaultRuntimeConfig(), spec.target);
+	if (typeof fallback === "boolean") return "boolean";
+	if (typeof fallback === "number") return "integer";
+	if (typeof fallback === "string") return "string";
+	if (Array.isArray(fallback)) return "string[]";
+	throw new Error(`config field "${path}" has no default to derive its type from; declare "kind" explicitly`);
+}
+/** 取值区间：与 Console 的 `NumberSetting` 同一张表，避免烘焙出界面调不回来的值 */
+function boundOf(spec) {
+	const [head, tail] = spec.target;
+	if (head === "quickPromptLimit") return RUNTIME_CONFIG_BOUNDS.quickPromptLimit;
+	if (tail === void 0 || spec.target.length !== 2) return void 0;
+	return RUNTIME_CONFIG_BOUNDS[head]?.[tail];
+}
+/** 单个模型条目的区间（`llm.entries` 是数组，够不到按分区组织的主表） */
+const LLM_ENTRY_BOUNDS = RUNTIME_CONFIG_BOUNDS.llmEntry;
+const FIELD_PATHS = Object.keys(CONFIG_FIELDS);
+/**
+* 某一层的合法子键。由字段表的前缀关系算出来，不另存一份 allowlist——
+* 0.20.0 之前扩展侧那 20 多个手写 allowlist 正是这么漂移的。
+*/
+function legalKeysAt(prefix) {
+	const head = prefix === "" ? "" : `${prefix}.`;
+	const keys = /* @__PURE__ */ new Set();
+	for (const path of FIELD_PATHS) {
+		if (!path.startsWith(head)) continue;
+		const rest = path.slice(head.length);
+		if (rest === "") continue;
+		keys.add(rest.split(".")[0]);
+	}
+	return [...keys];
+}
+function specAt(path) {
+	return CONFIG_FIELDS[path];
+}
+
+//#endregion
+//#region src/config/parse.ts
+function fail(code, path, message) {
+	throw new WebSkillConfigError(code, path, message);
+}
+function isPlainObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function expectObject(value, path) {
+	if (!isPlainObject(value)) fail("CONFIG_SHAPE", path, `${path} must be an object`);
+	return value;
+}
+/** 未知键一律报错，并把合法键列出来——拼错字段是这套配置最容易犯也最难发现的错 */
+function rejectUnknownKeys(value, allowed, path) {
+	for (const key of Object.keys(value)) {
+		if (allowed.includes(key)) continue;
+		const at = path === "" ? key : `${path}.${key}`;
+		fail("CONFIG_UNKNOWN_KEY", at, `${at} is not a recognized option (allowed: ${allowed.join(", ")})`);
+	}
+}
+function readBool(value, path) {
+	if (typeof value !== "boolean") fail("CONFIG_TYPE", path, `${path} must be a boolean`);
+	return value;
+}
+function readString(value, path, allowEmpty = false) {
+	if (typeof value !== "string") fail("CONFIG_TYPE", path, `${path} must be a string`);
+	if (!allowEmpty && value.trim() === "") fail("CONFIG_TYPE", path, `${path} must not be empty`);
+	return value;
+}
+function checkRange(value, path, bound) {
+	const min = bound?.min ?? 0;
+	const max = bound?.max ?? Number.MAX_SAFE_INTEGER;
+	if (value < min || value > max) fail("CONFIG_RANGE", path, `${path} must be between ${min} and ${max}`);
+	return value;
+}
+function readInt(value, path, bound) {
+	if (typeof value !== "number" || !Number.isInteger(value)) fail("CONFIG_TYPE", path, `${path} must be an integer`);
+	return checkRange(value, path, bound);
+}
+function readNumber(value, path, bound) {
+	if (typeof value !== "number" || !Number.isFinite(value)) fail("CONFIG_TYPE", path, `${path} must be a number`);
+	return checkRange(value, path, bound);
+}
+function readEnum(value, path, allowed) {
+	if (typeof value !== "string" || !allowed.includes(value)) fail("CONFIG_ENUM", path, `${path} must be one of: ${allowed.join(", ")}`);
+	return value;
+}
+/** `CapabilityMode` 是三态：布尔，或 {@link RUNTIME_CAPABILITY_MODES} 里的字符串档位 */
+function readCapability(value, path) {
+	if (typeof value === "boolean") return value;
+	if (typeof value === "string" && RUNTIME_CAPABILITY_MODES.includes(value)) return value;
+	return fail("CONFIG_TYPE", path, `${path} must be a boolean or ${RUNTIME_CAPABILITY_MODES.map((mode) => `"${mode}"`).join(" or ")}`);
+}
+function readStringArray(value, path) {
+	if (!Array.isArray(value)) fail("CONFIG_SHAPE", path, `${path} must be an array`);
+	return value.map((item, index) => readString(item, `${path}[${index}]`));
+}
+function setAt(root, target, value) {
+	let node = root;
+	for (const segment of target.slice(0, -1)) {
+		const next = node[segment];
+		if (!isPlainObject(next)) node[segment] = {};
+		node = node[segment];
+	}
+	node[target[target.length - 1]] = value;
+}
+/**
+* 模型条目与 SDK 的 `RuntimeLlmEntry` **同形**：不做字段改名，
+* 少一层映射就少一处长期漂移的来源。
+* `apiKey` 是唯一的例外——它被摘出去单独处理，不进解析结果。
+*/
+function parseModels(raw, secrets, root) {
+	if (!Array.isArray(raw)) fail("CONFIG_SHAPE", root, `${root} must be an array`);
+	const entries = [];
+	const seen = /* @__PURE__ */ new Set();
+	raw.forEach((item, index) => {
+		const path = `${root}[${index}]`;
+		const source = expectObject(item, path);
+		rejectUnknownKeys(source, [
+			"id",
+			"label",
+			"provider",
+			"baseUrl",
+			"apiKey",
+			"model",
+			"requestTimeoutMs",
+			"capabilities",
+			"thinkingBudgetTokens"
+		], path);
+		const id = readString(source["id"], `${path}.id`);
+		if (seen.has(id)) fail("CONFIG_REFERENCE", `${path}.id`, `${path}.id duplicates an earlier entry: ${id}`);
+		seen.add(id);
+		const provider = readEnum(source["provider"], `${path}.provider`, LLM_PROVIDERS);
+		const entry = {
+			id,
+			label: readString(source["label"], `${path}.label`),
+			provider,
+			model: providerUsesModelName(provider) ? readString(source["model"], `${path}.model`) : source["model"] ?? ""
+		};
+		if (source["baseUrl"] !== void 0) entry.baseUrl = readString(source["baseUrl"], `${path}.baseUrl`);
+		if (source["requestTimeoutMs"] !== void 0) entry.requestTimeoutMs = readInt(source["requestTimeoutMs"], `${path}.requestTimeoutMs`, LLM_ENTRY_BOUNDS.requestTimeoutMs);
+		if (source["thinkingBudgetTokens"] !== void 0) entry.thinkingBudgetTokens = readInt(source["thinkingBudgetTokens"], `${path}.thinkingBudgetTokens`);
+		if (source["capabilities"] !== void 0) {
+			const caps = expectObject(source["capabilities"], `${path}.capabilities`);
+			rejectUnknownKeys(caps, ["tools", "image"], `${path}.capabilities`);
+			entry.capabilities = {
+				tools: caps["tools"] === void 0 ? true : readBool(caps["tools"], `${path}.capabilities.tools`),
+				image: caps["image"] === void 0 ? false : readBool(caps["image"], `${path}.capabilities.image`)
+			};
+		}
+		if (source["apiKey"] !== void 0) {
+			const key = readString(source["apiKey"], `${path}.apiKey`, true);
+			if (key !== "") secrets[id] = key;
+		}
+		entries.push(entry);
+	});
+	return entries;
+}
+function parseQuickPromptItems(raw, path) {
+	if (!Array.isArray(raw)) fail("CONFIG_SHAPE", path, `${path} must be an array`);
+	const seen = /* @__PURE__ */ new Set();
+	return raw.map((item, index) => {
+		const at = `${path}[${index}]`;
+		const entry = expectObject(item, at);
+		rejectUnknownKeys(entry, [
+			"id",
+			"text",
+			"icon"
+		], at);
+		const id = readString(entry["id"], `${at}.id`);
+		if (seen.has(id)) fail("CONFIG_REFERENCE", `${at}.id`, `${at}.id duplicates an earlier entry: ${id}`);
+		seen.add(id);
+		const text = expectObject(entry["text"], `${at}.text`);
+		rejectUnknownKeys(text, RUNTIME_LOCALES, `${at}.text`);
+		const parsed = {
+			id,
+			text: Object.fromEntries(RUNTIME_LOCALES.map((locale) => [locale, readString(text[locale], `${at}.text.${locale}`)]))
+		};
+		if (entry["icon"] !== void 0) parsed.icon = readEnum(entry["icon"], `${at}.icon`, QUICK_PROMPT_ICONS);
+		return parsed;
+	});
+}
+function parseDataSources(raw, path) {
+	if (!Array.isArray(raw)) fail("CONFIG_SHAPE", path, `${path} must be an array`);
+	return raw.map((item, index) => {
+		const at = `${path}[${index}]`;
+		const entry = expectObject(item, at);
+		rejectUnknownKeys(entry, [
+			"id",
+			"url",
+			"description"
+		], at);
+		return {
+			id: readString(entry["id"], `${at}.id`),
+			url: readString(entry["url"], `${at}.url`),
+			description: readString(entry["description"], `${at}.description`, true)
+		};
+	});
+}
+/** 白名单形态：`{ "allow": ["https://example.com"] }` */
+function parseNetworkPolicy(raw, allowed, path) {
+	if (isPlainObject(raw)) {
+		rejectUnknownKeys(raw, ["allow"], path);
+		return { allow: readStringArray(raw["allow"], `${path}.allow`) };
+	}
+	return readEnum(raw, path, allowed);
+}
+/** 布尔简写等价于 `{ enabled: <bool> }`——只想开关时不必写整个对象 */
+function parseTypeScript(raw, path) {
+	if (!isPlainObject(raw)) return { enabled: readBool(raw, path) };
+	rejectUnknownKeys(raw, [
+		"enabled",
+		"esbuildUrl",
+		"wasmUrl"
+	], path);
+	const parsed = { enabled: readBool(raw["enabled"], `${path}.enabled`) };
+	if (raw["esbuildUrl"] !== void 0) parsed.esbuildUrl = readString(raw["esbuildUrl"], `${path}.esbuildUrl`);
+	if (raw["wasmUrl"] !== void 0) parsed.wasmUrl = readString(raw["wasmUrl"], `${path}.wasmUrl`);
+	return parsed;
+}
+/**
+* `path` 是字段表用的无前缀路径（决定走哪个解析器），`at` 是报给人看的带前缀路径。
+* 两者分开传，免得为了错误信息好看而把 switch 的匹配串一起改掉。
+*/
+function readLeaf(value, path, at, spec, secrets) {
+	if (spec.values !== void 0 && spec.kind === void 0) return readEnum(value, at, spec.values);
+	switch (leafKindOf(spec, path)) {
+		case "boolean": return readBool(value, at);
+		case "integer": return readInt(value, at, boundOf(spec));
+		case "number": return readNumber(value, at, boundOf(spec));
+		case "string": return readString(value, at, spec.allowEmpty === true);
+		case "string[]": return readStringArray(value, at);
+		case "capability": return readCapability(value, at);
+		case "custom": return parseCustom(value, path, at, spec, secrets);
+	}
+}
+function parseCustom(value, path, at, spec, secrets) {
+	switch (path) {
+		case "models": return parseModels(value, secrets, at);
+		case "sandbox.networkPolicy": return parseNetworkPolicy(value, spec.values ?? [], at);
+		case "sandbox.typescript": return parseTypeScript(value, at);
+		case "sandbox.dataSources": return parseDataSources(value, at);
+		case "quickPrompts.items": return parseQuickPromptItems(value, at);
+		default: throw new Error(`config field "${path}" is declared custom but has no parser`);
+	}
+}
+/**
+* 报错路径。根一层叫 `config`（未知键会拼成 `config.<key>`），其余层直接用点号路径——
+* 与扩展现行解析器**逐字一致**，AC-10.2 断言的就是这个串。
+*/
+const label = (path) => path === "" ? "config" : path;
+/**
+* 逐层下钻。合法子键由字段表的前缀关系算出来，因此不存在
+* 「加了字段忘了往某个 allowlist 里补一行」这种漏。
+*/
+function walk(raw, prefix, out, secrets, extraKeys) {
+	const source = expectObject(raw, label(prefix));
+	rejectUnknownKeys(source, [...extraKeys, ...legalKeysAt(prefix)], label(prefix));
+	for (const [key, value] of Object.entries(source)) {
+		if (value === void 0 || extraKeys.includes(key)) continue;
+		const path = prefix === "" ? key : `${prefix}.${key}`;
+		const spec = specAt(path);
+		if (spec === void 0) {
+			walk(value, path, out, secrets, []);
+			continue;
+		}
+		setAt(out, spec.target, readLeaf(value, path, label(path), spec, secrets));
+	}
+}
+/**
+* 把一份已解析的配置 JSON 校验并映射成 `RuntimeConfig` 缺省值。
+*
+* 任何不合法的字段都抛 `WebSkillConfigError`（带稳定错误码与完整路径），
+* 不做任何静默忽略。`apiKey` 被摘到 `secrets` 里，不进 `defaults`。
+* @experimental
+*/
+function parseWebSkillConfig(raw, options = {}) {
+	const hostSections = options.hostSections ?? [];
+	const source = expectObject(raw, "config");
+	const defaults = {};
+	const secrets = {};
+	walk(source, "", defaults, secrets, hostSections);
+	const host = {};
+	for (const section of hostSections) if (source[section] !== void 0) host[section] = source[section];
+	const llm = defaults["llm"];
+	if (llm?.defaultId !== void 0) {
+		if (llm.entries === void 0) fail("CONFIG_REFERENCE", "defaultModel", "defaultModel requires models to be declared");
+		if (!llm.entries.some((entry) => entry.id === llm.defaultId)) fail("CONFIG_REFERENCE", "defaultModel", `defaultModel must reference an id declared in models: ${llm.defaultId}`);
+	}
+	if (defaults["quickPrompts"] !== void 0) defaults["quickPromptsSeeded"] = true;
+	return {
+		defaults,
+		secrets,
+		host
+	};
+}
+/** 配置文件的顶层分节名，供宿主生成文档或校验示例文件 @experimental */
+const CONFIG_TOP_LEVEL_SECTIONS = legalKeysAt("");
+
+//#endregion
+export { NON_CONFIGURABLE_RUNTIME_PATHS as a, CONFIG_FIELDS as i, parseWebSkillConfig as n, WebSkillConfigError as o, CONFIGURED_RUNTIME_PATHS as r, CONFIG_TOP_LEVEL_SECTIONS as t };