@webskill/sdk 0.0.3 → 0.0.5

package/dist/browser.d.ts

@@ -1,4 +1,4 @@
-import { $t as VerifyResult, C as InteractionRequest, M as LlmResponse, Mt as FileStat, N as LlmStreamEvent, Nt as FileSystemProvider, S as InteractionPolicy, Tt as parseBridgeRequest, Wt as SkillInstallSource, X as RenderResultRequest, Zt as SkillsLockfile, at as ScriptExecutor, d as BridgeResponse, it as ScriptExecutionContext, k as LlmClient, l as BridgeCapabilities, lt as ToolResult, m as ExternalToolSource, mt as UiBridge, p as ExternalSkillProvider, qt as SkillManifest, st as ToolDefinition, u as BridgeRequest, vt as bridgeError, w as InteractionResponse } from "./index-DnI0BTEp.js";
+import { A as InteractionResponse, F as LlmClient, Gt as FileSystemProvider, Lt as parseBridgeRequest, O as InteractionPolicy, Ot as bridgeError, R as LlmResponse, Wt as FileStat, Y as NetworkPolicy, _t as ToolDefinition, an as SkillManifest, c as ApprovalScope, d as BridgeCapabilities, dn as VerifyResult, ht as ScriptExecutor, it as RenderResultRequest, k as InteractionRequest, ln as SkillsLockfile, m as BridgeResponse, mt as ScriptExecutionContext, nn as SkillInstallSource, p as BridgeRequest, v as ExternalSkillProvider, wt as UiBridge, y as ExternalToolSource, yt as ToolResult, z as LlmStreamEvent } from "./index-BQDc-U1x.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -28,17 +28,22 @@ declare class OpfsProvider implements FileSystemProvider {
 //#region src/executor/workerBootstrap.d.ts
 /**
  * Worker 引导源码（字符串 → Blob URL → new Worker(url, {type:'module'})）。
- * 注意：内容为纯 JS，不能含反引号与 ${ 占位（外层用模板字符串内嵌）。
+ * 注意：内容为纯 JS，不能含反引号与 ${ 占位（外层用模板字符串内嵌）；
+ * isNetworkAllowed/networkUrlHost 经函数源码注入（匹配逻辑单一来源在
+ * runtime/sandbox/networkPolicy.ts，此处禁止复制实现）。
  *
  * 协议（宿主 ↔ Worker）：
- * - 宿主 → Worker：{type:'load', id, source} 请求加载脚本定义
- * - 宿主 → Worker：{type:'execute', id, skillName, runId, source, args} 请求执行
+ * - 宿主 → Worker：{type:'load', id, source, networkPolicy?} 请求加载脚本定义
+ * - 宿主 → Worker：{type:'execute', id, skillName, runId, source, args, networkPolicy?} 请求执行
  * - Worker → 宿主：{type:'load-result', id, ok, definition?, error?}
  * - Worker → 宿主：{type:'execute-result', id, ok, value?, stdout, stderr, error?}
  * - Worker → 宿主：{type:'bridge', request} 能力桥 RPC（readReference/writeArtifact/confirm）
  * - 宿主 → Worker：{type:'bridge-response', response}
+ * - Worker → 宿主：{type:'network-blocked', host} 网络阻断通知（宿主记 run.warning，URL 脱敏只记 host）
  *
  * .js 源码经 data: URL 动态 import；主线程从不 import 技能脚本。
+ * 网络管控：包装 fetch / XMLHttpRequest / WebSocket / EventSource，
+ * 策略默认 deny-all，由 load/execute 消息携带更新。
  */
 declare const WORKER_BOOTSTRAP_SOURCE: string;
 //#endregion
@@ -116,6 +121,12 @@ declare class BrowserWorkerScriptExecutor implements ScriptExecutor {
     fs: FileSystemProvider;
     workerFactory?: WorkerFactory;
     capabilities?: BridgeCapabilities;
+    /** 网络策略：默认 'deny-all'（白名单见 runtime/sandbox/networkPolicy） */
+    networkPolicy?: NetworkPolicy;
+    /** require-approval 模式的授权询问出口（缺失时 require-approval 一律拒绝） */
+    uiBridge?: UiBridge;
+    /** 授权粒度：默认 'once-per-run' */
+    approvalScope?: ApprovalScope;
     /** D4 opt-in：配置 esbuild-wasm 资产 URL 后 .ts 经宿主侧转译执行（未配置 .ts → TOOL_UNSUPPORTED） */
     typescript?: TypeScriptSupportOptions;
   });
@@ -165,6 +176,13 @@ type WorkerRequest = {
   type: 'cancel';
   id: string;
   runId: string;
+} | {
+  type: 'list-interrupted';
+  id: string;
+} | {
+  type: 'resume';
+  id: string;
+  runId: string;
 } | {
   type: 'status';
   id: string;
@@ -260,6 +278,10 @@ declare class WorkerRuntimeClient {
   run(prompt: string, runId?: string): Promise<WorkerEvent>;
   status(runId: string): Promise<WorkerEvent>;
   cancel(runId: string): Promise<WorkerEvent>;
+  /** D3：列出可恢复的 interrupted run */
+  listInterrupted(): Promise<WorkerEvent>;
+  /** D3：恢复 interrupted run（新 Worker 重建后重新发起等待中的交互） */
+  resume(runId: string): Promise<WorkerEvent>;
   dispose(): void;
 }
 //#endregion

package/dist/browser.js

@@ -1,4 +1,4 @@
-import { $ as validateSkills, B as WebSkillError, D as normalizeToolContent, E as mergeCatalogEntries, F as SKILL_MANIFEST_FILE, H as buildManifest, K as isValidSkillName, O as parseBridgeRequest, P as SKILLS_LOCKFILE, Q as resolveInsideRoot, R as SkillDiscovery, V as buildCatalog, Y as parseSkillMarkdown, et as verifyManifest, f as MockLlmClient, h as ProgressiveRouter, i as AgentLoop, m as OpenAiCompatibleClient, o as FsArtifactStore, s as FsMemoryStore, x as bridgeError } from "./dist-hMMxARXK.js";
+import { A as mergeCatalogEntries, B as SKILL_MANIFEST_FILE, G as WebSkillError, K as buildCatalog, M as normalizeToolContent, N as parseBridgeRequest, U as SkillDiscovery, Z as isValidSkillName, _ as ProgressiveRouter, a as CapabilityApproval, at as verifyManifest, c as FsMemoryStore, et as parseSkillMarkdown, g as OpenAiCompatibleClient, i as AgentLoop, it as validateSkills, j as networkUrlHost, k as isNetworkAllowed, l as FsRunSnapshotStore, m as MockLlmClient, q as buildManifest, rt as resolveInsideRoot, s as FsArtifactStore, w as bridgeError, x as RUN_SNAPSHOT_SCHEMA_VERSION, z as SKILLS_LOCKFILE } from "./dist-D405AlPD.js";
 import { unzipSync } from "fflate";
 
 //#region ../browser/dist/index.js
@@ -134,23 +134,92 @@ var OpfsProvider = class {
 };
 /**
 * Worker 引导源码（字符串 → Blob URL → new Worker(url, {type:'module'})）。
-* 注意：内容为纯 JS，不能含反引号与 ${ 占位（外层用模板字符串内嵌）。
+* 注意：内容为纯 JS，不能含反引号与 ${ 占位（外层用模板字符串内嵌）；
+* isNetworkAllowed/networkUrlHost 经函数源码注入（匹配逻辑单一来源在
+* runtime/sandbox/networkPolicy.ts，此处禁止复制实现）。
 *
 * 协议（宿主 ↔ Worker）：
-* - 宿主 → Worker：{type:'load', id, source} 请求加载脚本定义
-* - 宿主 → Worker：{type:'execute', id, skillName, runId, source, args} 请求执行
+* - 宿主 → Worker：{type:'load', id, source, networkPolicy?} 请求加载脚本定义
+* - 宿主 → Worker：{type:'execute', id, skillName, runId, source, args, networkPolicy?} 请求执行
 * - Worker → 宿主：{type:'load-result', id, ok, definition?, error?}
 * - Worker → 宿主：{type:'execute-result', id, ok, value?, stdout, stderr, error?}
 * - Worker → 宿主：{type:'bridge', request} 能力桥 RPC（readReference/writeArtifact/confirm）
 * - 宿主 → Worker：{type:'bridge-response', response}
+* - Worker → 宿主：{type:'network-blocked', host} 网络阻断通知（宿主记 run.warning，URL 脱敏只记 host）
 *
 * .js 源码经 data: URL 动态 import；主线程从不 import 技能脚本。
+* 网络管控：包装 fetch / XMLHttpRequest / WebSocket / EventSource，
+* 策略默认 deny-all，由 load/execute 消息携带更新。
 */
 const WORKER_BOOTSTRAP_SOURCE = String.raw`
 'use strict';
 
 var pending = new Map();
 var bridgeSeq = 0;
+var networkPolicy = 'deny-all';
+
+${isNetworkAllowed.toString()}
+
+${networkUrlHost.toString()}
+
+function resolveUrl(raw) {
+  try {
+    return new URL(raw, self.location.href).href;
+  } catch (e) {
+    return String(raw);
+  }
+}
+
+function networkGate(rawUrl) {
+  var url = resolveUrl(rawUrl);
+  if (isNetworkAllowed(networkPolicy, url)) return null;
+  var host = networkUrlHost(url);
+  self.postMessage({ type: 'network-blocked', host: host });
+  var err = new Error('Network request blocked by sandbox network policy: ' + host);
+  err.code = 'NETWORK_BLOCKED';
+  return err;
+}
+
+if (typeof self.fetch === 'function') {
+  var originalFetch = self.fetch;
+  self.fetch = function (input, init) {
+    var raw = typeof input === 'string' ? input : input && input.url ? input.url : String(input);
+    var blocked = networkGate(raw);
+    if (blocked) return Promise.reject(blocked);
+    return originalFetch.call(this, input, init);
+  };
+}
+
+if (typeof XMLHttpRequest !== 'undefined') {
+  var originalXhrOpen = XMLHttpRequest.prototype.open;
+  XMLHttpRequest.prototype.open = function (method, url) {
+    var blocked = networkGate(url);
+    if (blocked) throw blocked;
+    return originalXhrOpen.apply(this, arguments);
+  };
+}
+
+if (typeof WebSocket !== 'undefined') {
+  var OriginalWebSocket = WebSocket;
+  self.WebSocket = function (url, protocols) {
+    var blocked = networkGate(url);
+    if (blocked) throw blocked;
+    return protocols === undefined
+      ? new OriginalWebSocket(url)
+      : new OriginalWebSocket(url, protocols);
+  };
+  self.WebSocket.prototype = OriginalWebSocket.prototype;
+}
+
+if (typeof EventSource !== 'undefined') {
+  var OriginalEventSource = EventSource;
+  self.EventSource = function (url, config) {
+    var blocked = networkGate(url);
+    if (blocked) throw blocked;
+    return config === undefined ? new OriginalEventSource(url) : new OriginalEventSource(url, config);
+  };
+  self.EventSource.prototype = OriginalEventSource.prototype;
+}
 
 function loadModule(source) {
   var url = 'data:text/javascript;charset=utf-8,' + encodeURIComponent(source);
@@ -212,6 +281,7 @@ self.onmessage = async function (event) {
   }
 
   if (msg.type === 'load') {
+    if (msg.networkPolicy !== undefined) networkPolicy = msg.networkPolicy;
     try {
       var mod = await loadModule(msg.source);
       self.postMessage({
@@ -225,12 +295,13 @@ self.onmessage = async function (event) {
         },
       });
     } catch (e) {
-      postError('load-result', msg.id, 'TOOL_EXECUTION_FAILED', String((e && e.message) || e));
+      postError('load-result', msg.id, (e && e.code) || 'TOOL_EXECUTION_FAILED', String((e && e.message) || e));
     }
     return;
   }
 
   if (msg.type === 'execute') {
+    if (msg.networkPolicy !== undefined) networkPolicy = msg.networkPolicy;
     var stdout = [];
     var stderr = [];
     var originals = {
@@ -543,6 +614,8 @@ var BrowserWorkerScriptExecutor = class {
 	#fs;
 	#workerFactory;
 	#capabilities;
+	#networkPolicy;
+	#approval;
 	#transpiler;
 	constructor(deps) {
 		this.#fs = deps.fs;
@@ -556,6 +629,11 @@ var BrowserWorkerScriptExecutor = class {
 			writeArtifact: deps.capabilities?.writeArtifact ?? true,
 			confirm: deps.capabilities?.confirm ?? true
 		};
+		this.#networkPolicy = deps.networkPolicy ?? "deny-all";
+		this.#approval = new CapabilityApproval({
+			...deps.uiBridge ? { uiBridge: deps.uiBridge } : {},
+			...deps.approvalScope ? { scope: deps.approvalScope } : {}
+		});
 	}
 	/** 定位 scripts/<name>.js；.ts → TOOL_UNSUPPORTED（D4）；冲突/缺失结构化报错 */
 	async #locateScript(skillRoot, scriptName) {
@@ -584,7 +662,8 @@ var BrowserWorkerScriptExecutor = class {
 			const data = await this.#request(worker, {
 				type: "load",
 				id: "load-1",
-				source: script.source
+				source: script.source,
+				networkPolicy: this.#networkPolicy
 			});
 			if (!data.ok) throw new WebSkillError("TOOL_EXECUTION_FAILED", `Failed to load script "${scriptName}": ${data.error?.message ?? "unknown error"}`);
 			return {
@@ -621,8 +700,9 @@ var BrowserWorkerScriptExecutor = class {
 				skillName: context.skillName,
 				runId: context.runId,
 				source: script.source,
-				args
-			}, timeoutMs, (bridgeRequest) => this.#handleBridge(bridgeRequest, context));
+				args,
+				networkPolicy: this.#networkPolicy
+			}, timeoutMs, (bridgeRequest) => this.#handleBridge(bridgeRequest, context), (host) => context.onWarning?.(`Network request blocked by sandbox network policy: ${host}`));
 			if (!response.ok) {
 				const stderrSummary = response.stderr?.length ? ` | stderr: ${response.stderr.join(" | ").slice(0, 500)}` : "";
 				return {
@@ -656,8 +736,8 @@ var BrowserWorkerScriptExecutor = class {
 			worker.terminate();
 		}
 	}
-	/** 发消息并按 id 等回包；可选超时；onBridge 处理执行期间的能力桥请求 */
-	#request(worker, message, timeoutMs, onBridge) {
+	/** 发消息并按 id 等回包；可选超时；onBridge 处理执行期间的能力桥请求；onNetworkBlocked 收网络阻断通知 */
+	#request(worker, message, timeoutMs, onBridge, onNetworkBlocked) {
 		const id = String(message["id"]);
 		return new Promise((resolve, reject) => {
 			let settled = false;
@@ -670,6 +750,10 @@ var BrowserWorkerScriptExecutor = class {
 			worker.addEventListener("message", (event) => {
 				const data = event.data;
 				if (!data || typeof data !== "object") return;
+				if (data.type === "network-blocked") {
+					if (typeof data.host === "string") onNetworkBlocked?.(data.host);
+					return;
+				}
 				if (data.type === "bridge" && onBridge) {
 					const request = parseBridgeRequest(data.request);
 					const respond = (response) => worker.postMessage({
@@ -691,20 +775,36 @@ var BrowserWorkerScriptExecutor = class {
 			worker.postMessage(message);
 		});
 	}
-	/** 能力桥宿主侧处理：能力关闭即 TOOL_UNSUPPORTED；readReference/writeArtifact/confirm 委托 context */
+	/** 能力桥宿主侧处理：能力关闭/授权拒绝即 TOOL_UNSUPPORTED；判定逻辑共用 runtime/sandbox/approval */
 	async #handleBridge(request, context) {
-		const unsupported = (capability) => bridgeError(request.id, "TOOL_UNSUPPORTED", `Capability "${capability}" is disabled`);
+		const gate = async (capability, message, details) => {
+			const decision = await this.#approval.authorize({
+				runId: context.runId,
+				capability,
+				mode: this.#capabilities[capability],
+				message,
+				...details !== void 0 ? { details } : {}
+			});
+			if (decision === "allowed") return void 0;
+			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled` : `Capability "${capability}" was denied by the user`);
+		};
 		try {
 			switch (request.kind) {
-				case "readReference":
-					if (!this.#capabilities.readReference) return unsupported("readReference");
+				case "readReference": {
+					const denied = await gate("readReference", `Script "${context.skillName}" wants to read reference "${request.path}"`, { path: request.path });
+					if (denied) return denied;
 					return {
 						id: request.id,
 						ok: true,
 						value: await context.readReference(request.path)
 					};
+				}
 				case "writeArtifact": {
-					if (!this.#capabilities.writeArtifact) return unsupported("writeArtifact");
+					const denied = await gate("writeArtifact", `Script "${context.skillName}" wants to write artifact "${request.path}"`, {
+						path: request.path,
+						mimeType: request.mimeType
+					});
+					if (denied) return denied;
 					const content = typeof request.content === "string" ? request.content : new Uint8Array(request.content);
 					const artifact = await context.writeArtifact(request.path, content, { ...request.mimeType ? { mimeType: request.mimeType } : {} });
 					return {
@@ -713,13 +813,16 @@ var BrowserWorkerScriptExecutor = class {
 						value: artifact
 					};
 				}
-				case "confirm":
-					if (!this.#capabilities.confirm || !context.confirm) return unsupported("confirm");
+				case "confirm": {
+					if (!context.confirm) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"confirm\" is disabled");
+					const denied = await gate("confirm", `Script "${context.skillName}" asks for confirmation: ${request.message}`);
+					if (denied) return denied;
 					return {
 						id: request.id,
 						ok: true,
 						value: await context.confirm(request.message)
 					};
+				}
 			}
 		} catch (e) {
 			return bridgeError(request.id, e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", messageOf(e));
@@ -744,11 +847,16 @@ function parseMainMessage(data) {
 			...isNonEmptyString(data["runId"]) ? { runId: data["runId"] } : {}
 		} : void 0;
 		case "cancel":
-		case "status": return isNonEmptyString(data["id"]) && isNonEmptyString(data["runId"]) ? {
+		case "status":
+		case "resume": return isNonEmptyString(data["id"]) && isNonEmptyString(data["runId"]) ? {
 			type: data["type"],
 			id: data["id"],
 			runId: data["runId"]
 		} : void 0;
+		case "list-interrupted": return isNonEmptyString(data["id"]) ? {
+			type: "list-interrupted",
+			id: data["id"]
+		} : void 0;
 		case "interaction-response": {
 			const response = data["response"];
 			return isNonEmptyString(data["workerMessageId"]) && isRecord(response) && isNonEmptyString(response["id"]) ? {
@@ -890,7 +998,11 @@ function startWorkerRuntimeHost(scope, overrides = {}) {
 				...config.typescript ? { typescript: config.typescript } : {}
 			}),
 			...config.interaction ? { interaction: config.interaction } : {},
-			roots: config.roots ?? ["/skills"]
+			roots: config.roots ?? ["/skills"],
+			snapshotStore: new FsRunSnapshotStore({
+				root: "snapshots",
+				fs
+			})
 		};
 		post({
 			type: "ready",
@@ -936,7 +1048,8 @@ function startWorkerRuntimeHost(scope, overrides = {}) {
 				uiBridge,
 				...state.interaction ? { interaction: state.interaction } : {},
 				...overrides.externalTools ? { externalTools: overrides.externalTools } : {},
-				...overrides.skillProviders ? { skillProviders: overrides.skillProviders } : {}
+				...overrides.skillProviders ? { skillProviders: overrides.skillProviders } : {},
+				snapshotStore: state.snapshotStore
 			}).run({
 				sessionId: `session-${runId}`,
 				userPrompt: prompt,
@@ -977,6 +1090,91 @@ function startWorkerRuntimeHost(scope, overrides = {}) {
 				} } });
 				return;
 			}
+			case "list-interrupted":
+				if (!state) {
+					result(message.id, { error: {
+						code: "RUN_FAILED",
+						message: "Host is not initialized"
+					} });
+					return;
+				}
+				state.snapshotStore.list().then((snapshots) => result(message.id, { result: { snapshots } }), (e) => result(message.id, { error: serializeError(e) }));
+				return;
+			case "resume":
+				if (!state) {
+					result(message.id, { error: {
+						code: "RUN_FAILED",
+						message: "Host is not initialized"
+					} });
+					return;
+				}
+				(async () => {
+					const snapshot = await state.snapshotStore.load(message.runId);
+					if (!snapshot) throw new WebSkillError("RUN_SNAPSHOT_NOT_FOUND", `No snapshot found for run "${message.runId}"`);
+					if (snapshot.schemaVersion !== 1) {
+						await state.snapshotStore.delete(message.runId);
+						throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${message.runId}" has incompatible schemaVersion ${String(snapshot.schemaVersion)}`);
+					}
+					if (Date.now() > Date.parse(snapshot.interactionExpiresAt)) {
+						await state.snapshotStore.delete(message.runId);
+						const endedAt = (/* @__PURE__ */ new Date()).toISOString();
+						return {
+							output: "Interaction timed out before the run was resumed",
+							run: {
+								id: message.runId,
+								sessionId: snapshot.sessionId,
+								status: "failed",
+								phase: "fail",
+								userPrompt: snapshot.userPrompt,
+								startedAt: snapshot.startedAt,
+								endedAt,
+								terminationReason: "interaction-timeout",
+								activeSkillNames: snapshot.activeSkillNames,
+								artifacts: [],
+								trace: [{
+									id: `evt-expired-${message.runId}`,
+									runId: message.runId,
+									ts: endedAt,
+									type: "run.failed",
+									message: `Interaction timed out before the run was resumed (expired at ${snapshot.interactionExpiresAt})`,
+									data: {
+										reason: "interaction-timeout",
+										code: "RUN_INTERACTION_TIMEOUT"
+									}
+								}]
+							}
+						};
+					}
+					const resumeUiBridge = new WorkerUiBridge(scope);
+					activeUiBridge = resumeUiBridge;
+					try {
+						return await new AgentLoop({
+							llm: state.llm,
+							executor: state.executor,
+							artifactStore: new FsArtifactStore({
+								root: "artifacts",
+								fs: state.fs
+							}),
+							memory: new FsMemoryStore({
+								root: "memory",
+								fs: state.fs
+							}),
+							fs: state.fs,
+							skillIndex: /* @__PURE__ */ new Map(),
+							uiBridge: resumeUiBridge,
+							...state.interaction ? { interaction: state.interaction } : {},
+							...overrides.externalTools ? { externalTools: overrides.externalTools } : {},
+							...overrides.skillProviders ? { skillProviders: overrides.skillProviders } : {},
+							snapshotStore: state.snapshotStore
+						}).resume(snapshot);
+					} finally {
+						activeUiBridge = void 0;
+					}
+				})().then((runResult) => {
+					runs.set(message.runId, { status: runResult.run.status });
+					result(message.id, { result: runResult });
+				}, (e) => result(message.id, { error: serializeError(e) }));
+				return;
 			case "cancel":
 				if (!runs.get(message.runId)) {
 					result(message.id, { error: {
@@ -1042,6 +1240,21 @@ var WorkerRuntimeClient = class {
 			runId
 		});
 	}
+	/** D3：列出可恢复的 interrupted run */
+	listInterrupted() {
+		return this.#call({
+			type: "list-interrupted",
+			id: this.#nextId()
+		});
+	}
+	/** D3：恢复 interrupted run（新 Worker 重建后重新发起等待中的交互） */
+	resume(runId) {
+		return this.#call({
+			type: "resume",
+			id: this.#nextId(),
+			runId
+		});
+	}
 	dispose() {
 		for (const [id, pending] of this.#pending) {
 			clearTimeout(pending.timer);

package/dist/{dist-RcqvzAGF.js → dist-BM-VcQ90.js}

@@ -5,10 +5,11 @@ function shapeInteractionValue(model, values) {
 		case "ask": return values["answer"];
 		case "confirm": return values["confirmed"] === true;
 		case "select": return values["selected"];
+		case "authorize": return true;
 		case "form": return values;
 	}
 }
-/** 四类 InteractionRequest → 统一中间模型（框架无关） */
+/** 五类 InteractionRequest → 统一中间模型（框架无关） */
 function interactionToFormModel(request) {
 	switch (request.type) {
 		case "ask": return {
@@ -63,6 +64,14 @@ function interactionToFormModel(request) {
 			submitLabel: "Select",
 			cancelLabel: "Cancel"
 		};
+		case "authorize": return {
+			kind: "authorize",
+			title: "Authorization required",
+			message: request.message,
+			controls: [],
+			submitLabel: "Allow",
+			cancelLabel: "Deny"
+		};
 	}
 }
 const isEmpty = (v) => v === void 0 || v === "";
@@ -551,6 +560,15 @@ function toOpenUiLang(request) {
 				options: request.options
 			}];
 			break;
+		case "authorize":
+			title = "Authorization required";
+			fields = [{
+				name: "approved",
+				label: request.message,
+				control: "boolean",
+				defaultValue: false
+			}];
+			break;
 	}
 	lines.push(...fieldStatements(fields));
 	const children = fields.map((_, i) => `f${i}`);
@@ -617,7 +635,11 @@ function toA2uiMessages(request) {
 		components.push(text("title", request.title, "h3"));
 		children.push("title");
 	}
-	const message = request.type === "ask" || request.type === "confirm" || request.type === "select" ? request.message : void 0;
+	if (request.type === "authorize") {
+		components.push(text("title", "Authorization required", "h3"));
+		children.push("title");
+	}
+	const message = request.type === "ask" || request.type === "confirm" || request.type === "select" || request.type === "authorize" ? request.message : void 0;
 	if (message) {
 		components.push(text("message", message));
 		children.push("message");
@@ -632,7 +654,7 @@ function toA2uiMessages(request) {
 		label: request.message,
 		type: "boolean",
 		defaultValue: request.defaultValue ?? true
-	}] : [{
+	}] : request.type === "authorize" ? [] : [{
 		name: "selected",
 		label: request.message,
 		type: "select",
@@ -675,7 +697,7 @@ function toA2uiMessages(request) {
 		});
 		children.push(`field_${field.name}`);
 	}
-	components.push(text("submit_label", "Submit"));
+	components.push(text("submit_label", request.type === "authorize" ? "Allow" : "Submit"));
 	components.push({
 		id: "submit",
 		component: "Button",
@@ -686,7 +708,7 @@ function toA2uiMessages(request) {
 			context: { requestId: request.id }
 		} }
 	});
-	components.push(text("cancel_label", "Cancel"));
+	components.push(text("cancel_label", request.type === "authorize" ? "Deny" : "Cancel"));
 	components.push({
 		id: "cancel",
 		component: "Button",
@@ -15359,13 +15381,15 @@ var LitRendererBridge = class {
 				const surfaces = processor.getClientDataModel("v0.9.1")?.surfaces;
 				const formValues = typeof surfaces?.[surfaceId] === "object" && surfaces[surfaceId] !== null ? surfaces[surfaceId]["form"] ?? action.context : action.context;
 				cleanup(surfaceEl);
-				resolve(fromA2uiAction({
+				const response = fromA2uiAction({
 					...action,
 					context: {
 						...action.context,
 						values: formValues
 					}
-				}));
+				});
+				if (input.type === "authorize" && !response.cancelled) response.value = true;
+				resolve(response);
 			}, { version: "v0.9.1" });
 			processor.onSurfaceCreated((surface) => {
 				const el = this.#doc.createElement("a2ui-surface");