@webskill/sdk 0.0.4 → 0.0.6

package/dist/{dist-COsE72Ct.js → dist-nXiR40hi.js}

@@ -1,4 +1,5 @@
 import { parse } from "yaml";
+import { zipSync } from "fflate";
 
 //#region ../core/dist/index.js
 /** 所有公开 API 抛出的结构化错误，code 供上层可编程处理 */
@@ -259,8 +260,137 @@ function checkSkillRules(input) {
 		severity: "error",
 		message: `Unsupported script file in scripts/ of directory ${dirName}: ${fileName} (only .ts/.js and .schema.json sidecars allowed)`
 	});
+	const allowedTools = metadata?.["allowed-tools"];
+	if (Array.isArray(allowedTools)) {
+		const scriptNames = new Set((input.scriptFileNames ?? []).filter((f) => SCRIPT_EXTENSION_RE.test(f)).map((f) => f.replace(SCRIPT_EXTENSION_RE, "")));
+		for (const entry of allowedTools) if (typeof entry === "string" && !scriptNames.has(entry)) issues.push({
+			code: "SKILL_UNKNOWN_ALLOWED_TOOL",
+			severity: "warning",
+			message: `allowed-tools entry ${JSON.stringify(entry)} of directory ${dirName} does not match any script in scripts/`
+		});
+	}
+	if (metadata && input.knownSkillNames) {
+		const dependencies = metadata["dependencies"];
+		if (Array.isArray(dependencies)) {
+			for (const dep of dependencies) if (typeof dep === "string" && !input.knownSkillNames.has(dep)) issues.push({
+				code: "SKILL_UNKNOWN_DEPENDENCY",
+				severity: "error",
+				message: `Skill ${JSON.stringify(metadata.name)} depends on unknown skill ${JSON.stringify(dep)}`
+			});
+		}
+	}
 	return issues;
 }
+/**
+* 循环依赖检测（全量邻接表，discovery 两趟扫描第二趟调用）。
+* 每个环只报一次（error 级，阻断进 Catalog）；自引用视为长度 1 的环。
+*/
+function checkDependencyCycles(adjacency) {
+	const issues = [];
+	const involved = /* @__PURE__ */ new Set();
+	const reported = /* @__PURE__ */ new Set();
+	const state = /* @__PURE__ */ new Map();
+	const stack = [];
+	const visit = (node) => {
+		if (state.get(node) === "done") return;
+		if (state.get(node) === "visiting") {
+			const cycle = [...stack.slice(stack.indexOf(node)), node];
+			const key = cycle.slice(0, -1).sort().join("");
+			if (!reported.has(key)) {
+				reported.add(key);
+				for (const name of cycle.slice(0, -1)) involved.add(name);
+				issues.push({
+					code: "SKILL_CIRCULAR_DEPENDENCY",
+					severity: "error",
+					message: `Circular skill dependency detected: ${cycle.join(" -> ")}`
+				});
+			}
+			return;
+		}
+		state.set(node, "visiting");
+		stack.push(node);
+		for (const dep of adjacency.get(node) ?? []) visit(dep);
+		stack.pop();
+		state.set(node, "done");
+	};
+	for (const node of adjacency.keys()) visit(node);
+	return {
+		issues,
+		involved
+	};
+}
+/**
+* 技能包集（skill pack）格式与打包逻辑（node/browser 共用单一来源）：
+*   webskill.skill-pack.json   { schemaVersion: 1, skills: [{ name, digest }] }
+*   <skill-a>/SKILL.md … webskill.skill-manifest.json
+*   <skill-b>/SKILL.md …
+* fflate 环境无关；文件读取经 FileSystemProvider 抽象。
+*/
+/** 包级清单文件名（位于 zip 根，不参与各技能 digest） */
+const SKILL_PACK_FILE = "webskill.skill-pack.json";
+const messageOf$2 = (e) => e instanceof Error ? e.message : String(e);
+const baseName$1 = (p) => p.split("/").pop() ?? p;
+async function listFilesRecursive(fs, root, prefix = "") {
+	const out = [];
+	for (const entry of await fs.list(root)) {
+		const rel = prefix === "" ? baseName$1(entry.path) : `${prefix}/${baseName$1(entry.path)}`;
+		if (entry.type === "directory") out.push(...await listFilesRecursive(fs, entry.path, rel));
+		else out.push(rel);
+	}
+	return out;
+}
+/**
+* 多技能打包为单一 zip（包级清单 + 各技能目录含自身 manifest）。
+* manifestBuilder 负责确保技能目录内 manifest 文件存在并返回之（digest 入包级清单）。
+*/
+async function exportSkills(fs, input) {
+	if (input.roots.length === 0) throw new WebSkillError("EXPORT_FAILED", "exportSkills requires at least one skill root");
+	const files = {};
+	const skills = [];
+	try {
+		for (const root of input.roots) {
+			const base = root.replace(/\/+$/, "");
+			const manifest = await input.manifestBuilder(base);
+			skills.push({
+				name: manifest.name,
+				digest: manifest.integrity.digest
+			});
+			for (const rel of await listFilesRecursive(fs, base)) files[`${manifest.name}/${rel}`] = await fs.readBinary(`${base}/${rel}`);
+		}
+	} catch (e) {
+		if (e instanceof WebSkillError) throw e;
+		throw new WebSkillError("EXPORT_FAILED", `Failed to export skill pack: ${messageOf$2(e)}`, e);
+	}
+	const pack = {
+		schemaVersion: 1,
+		skills
+	};
+	files[SKILL_PACK_FILE] = new TextEncoder().encode(JSON.stringify(pack, null, 2));
+	return zipSync(files, { level: 6 });
+}
+/** 包级清单解析 + 形状校验；损坏 → INSTALL_FAILED（安装侧保证零残留） */
+function parseSkillPackManifest(text) {
+	let raw;
+	try {
+		raw = JSON.parse(text);
+	} catch (e) {
+		throw new WebSkillError("INSTALL_FAILED", `Skill pack manifest is not valid JSON: ${messageOf$2(e)}`, e);
+	}
+	const invalid = (detail) => {
+		throw new WebSkillError("INSTALL_FAILED", `Skill pack manifest is corrupted: ${detail}`);
+	};
+	if (typeof raw !== "object" || raw === null) invalid("not an object");
+	const record = raw;
+	if (record["schemaVersion"] !== 1) invalid("schemaVersion must be 1");
+	if (!Array.isArray(record["skills"]) || record["skills"].length === 0) invalid("\"skills\" must be a non-empty array");
+	for (const entry of record["skills"]) {
+		if (typeof entry !== "object" || entry === null) invalid("skill entry is not an object");
+		const { name, digest } = entry;
+		if (typeof name !== "string" || name === "") invalid("skill entry missing a valid \"name\"");
+		if (typeof digest !== "string" || digest === "") invalid(`skill "${name}" missing a valid "digest"`);
+	}
+	return raw;
+}
 /** 由条目列表构建 Catalog，保证按名称排序 */
 function buildCatalog(entries) {
 	return { skills: [...entries].sort((a, b) => a.name.localeCompare(b.name)) };
@@ -288,7 +418,7 @@ var SkillReader = class {
 		return this.#fs.readBinary(resolveInsideRoot(this.#rootFor(skillName), relativePath));
 	}
 };
-const baseName$1 = (path) => path.split("/").pop() ?? path;
+const baseName$2 = (path) => path.split("/").pop() ?? path;
 var SkillDiscovery = class {
 	#fs;
 	#roots;
@@ -304,7 +434,9 @@ var SkillDiscovery = class {
 		this.#index.clear();
 		const entries = [];
 		const issues = [];
-		const claimedNames = /* @__PURE__ */ new Set();
+		const candidates = [];
+		const knownSkillNames = /* @__PURE__ */ new Set();
+		const adjacency = /* @__PURE__ */ new Map();
 		for (const root of this.#roots) {
 			if (!await this.#fs.exists(root)) {
 				issues.push({
@@ -317,7 +449,7 @@ var SkillDiscovery = class {
 			}
 			for (const child of await this.#fs.list(root)) {
 				if (child.type !== "directory") continue;
-				const dirName = baseName$1(child.path);
+				const dirName = baseName$2(child.path);
 				const skillRoot = `${root}/${dirName}`;
 				const skillMdPath = `${skillRoot}/SKILL.md`;
 				const hasSkillMd = await this.#fs.exists(skillMdPath);
@@ -328,33 +460,53 @@ var SkillDiscovery = class {
 				} catch (e) {
 					parseError = e instanceof WebSkillError ? e : new WebSkillError("SKILL_INVALID_METADATA", String(e));
 				}
-				const scriptFileNames = await this.#listScriptFileNames(skillRoot);
-				const candidateIssues = checkSkillRules({
+				candidates.push({
 					dirName,
+					skillRoot,
 					hasSkillMd,
 					metadata,
 					parseError,
-					scriptFileNames,
-					existingNames: claimedNames
-				});
-				for (const issue of candidateIssues) issue.path ??= skillRoot;
-				issues.push(...candidateIssues);
-				if (metadata) claimedNames.add(metadata.name);
-				if (candidateIssues.some((i) => i.severity === "error") || !metadata) continue;
-				this.#index.set(metadata.name, skillRoot);
-				entries.push({
-					name: metadata.name,
-					description: metadata.description,
-					version: typeof metadata["version"] === "string" ? metadata["version"] : void 0,
-					license: typeof metadata["license"] === "string" ? metadata["license"] : void 0,
-					root: skillRoot,
-					source: "local",
-					hasScripts: scriptFileNames.length > 0,
-					hasReferences: await this.#fs.exists(`${skillRoot}/references`),
-					hasAssets: await this.#fs.exists(`${skillRoot}/assets`)
+					scriptFileNames: await this.#listScriptFileNames(skillRoot)
 				});
+				if (metadata) {
+					knownSkillNames.add(metadata.name);
+					const dependencies = metadata["dependencies"];
+					adjacency.set(metadata.name, Array.isArray(dependencies) ? dependencies.filter((d) => typeof d === "string") : []);
+				}
 			}
 		}
+		const cycles = checkDependencyCycles(adjacency);
+		const claimedNames = /* @__PURE__ */ new Set();
+		for (const candidate of candidates) {
+			const { metadata } = candidate;
+			const candidateIssues = checkSkillRules({
+				dirName: candidate.dirName,
+				hasSkillMd: candidate.hasSkillMd,
+				metadata,
+				parseError: candidate.parseError,
+				scriptFileNames: candidate.scriptFileNames,
+				existingNames: claimedNames,
+				knownSkillNames
+			});
+			for (const issue of candidateIssues) issue.path ??= candidate.skillRoot;
+			issues.push(...candidateIssues);
+			if (metadata) claimedNames.add(metadata.name);
+			const excludedByCycle = metadata !== void 0 && cycles.involved.has(metadata.name);
+			if (candidateIssues.some((i) => i.severity === "error") || !metadata || excludedByCycle) continue;
+			this.#index.set(metadata.name, candidate.skillRoot);
+			entries.push({
+				name: metadata.name,
+				description: metadata.description,
+				version: typeof metadata["version"] === "string" ? metadata["version"] : void 0,
+				license: typeof metadata["license"] === "string" ? metadata["license"] : void 0,
+				root: candidate.skillRoot,
+				source: "local",
+				hasScripts: candidate.scriptFileNames.length > 0,
+				hasReferences: await this.#fs.exists(`${candidate.skillRoot}/references`),
+				hasAssets: await this.#fs.exists(`${candidate.skillRoot}/assets`)
+			});
+		}
+		issues.push(...cycles.issues);
 		entries.sort((a, b) => a.name.localeCompare(b.name));
 		return {
 			entries,
@@ -386,7 +538,7 @@ var SkillDiscovery = class {
 	async #listScriptFileNames(skillRoot) {
 		const scriptsDir = `${skillRoot}/scripts`;
 		if (!await this.#fs.exists(scriptsDir)) return [];
-		return (await this.#fs.list(scriptsDir)).filter((s) => s.type === "file").map((s) => baseName$1(s.path));
+		return (await this.#fs.list(scriptsDir)).filter((s) => s.type === "file").map((s) => baseName$2(s.path));
 	}
 };
 /**
@@ -908,7 +1060,7 @@ const ASK_USER_TOOL = {
 * 不暴露 fs 本体（沙箱语义，对齐 deferred-items D1）。
 */
 function createScriptContext(deps) {
-	const { fs, artifactStore, skillName, skillRoot, runId, confirm } = deps;
+	const { fs, artifactStore, skillName, skillRoot, runId, confirm, onWarning } = deps;
 	return {
 		skillName,
 		runId,
@@ -928,15 +1080,46 @@ function createScriptContext(deps) {
 				mimeType: options?.mimeType
 			});
 		},
-		...confirm ? { confirm } : {}
+		...confirm ? { confirm } : {},
+		...onWarning ? { onWarning } : {}
+	};
+}
+const isRecord$1 = (v) => typeof v === "object" && v !== null;
+/**
+* $chart 约定的形状校验：JSON content 的 data 含 $chart 键且形状合法 → ChartSpec；
+* 任何畸形（kind 非法 / labels 非字符串数组 / series 项缺数值 data）→ undefined（忽略不炸）。
+*/
+function extractChartSpec(data) {
+	if (!isRecord$1(data)) return void 0;
+	const raw = data["$chart"];
+	if (!isRecord$1(raw)) return void 0;
+	const { kind, labels, series } = raw;
+	if (kind !== "bar" && kind !== "line" && kind !== "pie") return void 0;
+	if (!Array.isArray(labels) || !labels.every((l) => typeof l === "string")) return void 0;
+	if (!Array.isArray(series)) return void 0;
+	const validSeries = [];
+	for (const item of series) {
+		if (!isRecord$1(item) || !Array.isArray(item["data"]) || !item["data"].every((n) => typeof n === "number")) return;
+		const name = item["name"];
+		validSeries.push({
+			...typeof name === "string" ? { name } : {},
+			data: item["data"]
+		});
+	}
+	const title = raw["title"];
+	return {
+		kind,
+		labels,
+		series: validSeries,
+		...typeof title === "string" ? { title } : {}
 	};
 }
 /**
-* 默认的结果渲染构造：LLM 最终输出 → markdown block，
-* run.artifacts → file blocks；summary 取 terminationReason。
+* 默认的结果渲染构造：run 内收集的 renderBlocks（chart 等）在前，
+* LLM 最终输出 → markdown block，run.artifacts → file blocks 在后；summary 取 terminationReason。
 */
-function buildRenderResult(run, output) {
-	const blocks = [];
+function buildRenderResult(run, output, renderBlocks = []) {
+	const blocks = [...renderBlocks];
 	if (output.trim() !== "") blocks.push({
 		type: "markdown",
 		text: output
@@ -1043,131 +1226,6 @@ var EventBus = class {
 		for (const listener of this.#listeners.get("*") ?? []) listener(frozen);
 	}
 };
-const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
-/** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
-var HookRunner = class {
-	#hooks = /* @__PURE__ */ new Map();
-	timeoutMs;
-	failOnHookError;
-	onWarning;
-	constructor(options = {}) {
-		this.timeoutMs = options.timeoutMs ?? 5e3;
-		this.failOnHookError = options.failOnHookError ?? false;
-		this.onWarning = options.onWarning;
-	}
-	register(phase, hook) {
-		const key = phase;
-		const list = this.#hooks.get(key) ?? [];
-		list.push(hook);
-		this.#hooks.set(key, list);
-		return this;
-	}
-	async run(phase, ctx) {
-		const hooks = [...this.#hooks.get(phase) ?? [], ...this.#hooks.get("*") ?? []];
-		for (const hook of hooks) try {
-			await this.#withTimeout(Promise.resolve().then(() => hook(ctx)), phase);
-		} catch (e) {
-			if (this.failOnHookError) throw e instanceof WebSkillError ? e : new WebSkillError("RUN_FAILED", messageOf$1(e), e);
-			this.onWarning?.(messageOf$1(e));
-		}
-	}
-	#withTimeout(promise, phase) {
-		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => reject(new WebSkillError("RUN_TIMEOUT", `Lifecycle hook for phase "${phase}" timed out after ${this.timeoutMs}ms`)), this.timeoutMs);
-			promise.then((v) => {
-				clearTimeout(timer);
-				resolve(v);
-			}, (e) => {
-				clearTimeout(timer);
-				reject(e instanceof Error ? e : new Error(String(e)));
-			});
-		});
-	}
-};
-/** 内存 MemoryStore：测试与浏览器降级用 */
-var InMemoryStore = class {
-	#data = /* @__PURE__ */ new Map();
-	async get(scope, key) {
-		return this.#data.get(scope)?.get(key);
-	}
-	async set(scope, key, value) {
-		let bucket = this.#data.get(scope);
-		if (!bucket) {
-			bucket = /* @__PURE__ */ new Map();
-			this.#data.set(scope, bucket);
-		}
-		bucket.set(key, value);
-	}
-	async delete(scope, key) {
-		this.#data.get(scope)?.delete(key);
-	}
-	async list(scope) {
-		return [...(this.#data.get(scope) ?? /* @__PURE__ */ new Map()).entries()].map(([key, value]) => ({
-			key,
-			value
-		}));
-	}
-	async clear(scope) {
-		if (scope === void 0) this.#data.clear();
-		else this.#data.delete(scope);
-	}
-};
-const encode = (s) => encodeURIComponent(s);
-/**
-* 基于 FileSystemProvider 的 MemoryStore：
-* <root>/<encodeURIComponent(scope)>/<encodeURIComponent(key)>.json
-* scope/key 全部编码防路径穿越；环境无关，构造必须显式传 fs。
-*/
-var FsMemoryStore = class {
-	#root;
-	#fs;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-	}
-	#scopeDir(scope) {
-		return `${this.#root}/${encode(scope)}`;
-	}
-	#keyPath(scope, key) {
-		return `${this.#scopeDir(scope)}/${encode(key)}.json`;
-	}
-	async get(scope, key) {
-		const path = this.#keyPath(scope, key);
-		if (!await this.#fs.exists(path)) return void 0;
-		return JSON.parse(await this.#fs.readText(path));
-	}
-	async set(scope, key, value) {
-		await this.#fs.writeText(this.#keyPath(scope, key), JSON.stringify(value, null, 2));
-	}
-	async delete(scope, key) {
-		const path = this.#keyPath(scope, key);
-		if (await this.#fs.exists(path)) await this.#fs.remove(path);
-	}
-	async list(scope) {
-		const dir = this.#scopeDir(scope);
-		if (!await this.#fs.exists(dir)) return [];
-		const out = [];
-		for (const entry of await this.#fs.list(dir)) {
-			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
-			const fileName = entry.path.split("/").pop() ?? "";
-			const key = decodeURIComponent(fileName.replace(/\.json$/, ""));
-			out.push({
-				key,
-				value: JSON.parse(await this.#fs.readText(entry.path))
-			});
-		}
-		return out.sort((a, b) => a.key.localeCompare(b.key));
-	}
-	async clear(scope) {
-		if (scope !== void 0) {
-			const dir = this.#scopeDir(scope);
-			if (await this.#fs.exists(dir)) await this.#fs.remove(dir, { recursive: true });
-			return;
-		}
-		if (!await this.#fs.exists(this.#root)) return;
-		for (const entry of await this.#fs.list(this.#root)) await this.#fs.remove(entry.path, { recursive: true });
-	}
-};
 /** 内存 ArtifactStore：测试与浏览器降级用；索引随进程生命周期存在 */
 var MemoryArtifactStore = class {
 	#byRun = /* @__PURE__ */ new Map();
@@ -1212,142 +1270,44 @@ var MemoryArtifactStore = class {
 		return artifact;
 	}
 };
-const INDEX_FILE = "index.json";
-/**
-* 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
-* 每次写入同步更新 <root>/<runId>/index.json，新实例可凭索引恢复列表。
-* 环境无关（OPFS/Node 均可），构造必须显式传 fs。
-*/
-var FsArtifactStore = class {
-	#root;
-	#fs;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-	}
-	async createTextArtifact(input) {
-		const size = new TextEncoder().encode(input.content).length;
-		await this.#fs.writeText(this.#artifactPath(input.runId, input.path), input.content);
-		return this.#persist({
-			...input,
-			type: "text",
-			size
-		});
-	}
-	async createBinaryArtifact(input) {
-		await this.#fs.writeBinary(this.#artifactPath(input.runId, input.path), input.content);
-		return this.#persist({
-			...input,
-			type: "binary",
-			size: input.content.length
-		});
+/** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
+var TraceRecorder = class {
+	#runId;
+	#clock;
+	#events = [];
+	#seq = 0;
+	constructor(runId, clock = {}) {
+		this.#runId = runId;
+		this.#clock = clock;
 	}
-	async listArtifacts(runId) {
-		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
-		if (!await this.#fs.exists(indexPath)) return [];
-		const raw = await this.#fs.readText(indexPath);
-		return JSON.parse(raw).artifacts ?? [];
+	record(type, opts) {
+		const event = {
+			id: this.#clock.createId?.() ?? `evt-${++this.#seq}`,
+			runId: this.#runId,
+			ts: this.#clock.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
+			type,
+			...opts?.message !== void 0 ? { message: opts.message } : {},
+			...opts?.data !== void 0 ? { data: opts.data } : {}
+		};
+		this.#events.push(event);
+		return event;
 	}
-	#artifactPath(runId, artifactPath) {
-		return resolveInsideRoot(`${this.#root}/${runId}`, artifactPath);
+	list() {
+		return [...this.#events];
 	}
-	async #persist(input) {
-		const artifact = {
-			id: `${input.runId}/${input.path}`,
-			runId: input.runId,
-			path: input.path,
-			type: input.type,
-			mimeType: input.mimeType,
-			size: input.size,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			metadata: input.metadata
-		};
-		const next = [...(await this.listArtifacts(input.runId)).filter((a) => a.id !== artifact.id), artifact];
-		await this.#fs.writeText(`${this.#root}/${input.runId}/${INDEX_FILE}`, JSON.stringify({ artifacts: next }, null, 2));
-		return artifact;
-	}
-};
-const isRecord = (v) => typeof v === "object" && v !== null;
-const isNonEmptyString = (v) => typeof v === "string" && v !== "";
-/** 入站校验：非法 kind / 缺 id / 缺字段 → undefined（调用方忽略并记 warning） */
-function parseBridgeRequest(data) {
-	if (!isRecord(data)) return void 0;
-	const { kind, id } = data;
-	if (!isNonEmptyString(id)) return void 0;
-	switch (kind) {
-		case "readReference": return isNonEmptyString(data["path"]) ? {
-			kind,
-			id,
-			path: data["path"]
-		} : void 0;
-		case "writeArtifact": {
-			const { path, content, mimeType } = data;
-			const validContent = typeof content === "string" || Array.isArray(content) && content.every((n) => typeof n === "number");
-			if (!isNonEmptyString(path) || !validContent) return void 0;
-			return {
-				kind,
-				id,
-				path,
-				content,
-				...isNonEmptyString(mimeType) ? { mimeType } : {}
-			};
-		}
-		case "confirm": return isNonEmptyString(data["message"]) ? {
-			kind,
-			id,
-			message: data["message"]
-		} : void 0;
-		default: return;
-	}
-}
-function bridgeError(id, code, message) {
-	return {
-		id,
-		ok: false,
-		error: {
-			code,
-			message
-		}
-	};
-}
-/** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
-var TraceRecorder = class {
-	#runId;
-	#clock;
-	#events = [];
-	#seq = 0;
-	constructor(runId, clock = {}) {
-		this.#runId = runId;
-		this.#clock = clock;
-	}
-	record(type, opts) {
-		const event = {
-			id: this.#clock.createId?.() ?? `evt-${++this.#seq}`,
-			runId: this.#runId,
-			ts: this.#clock.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
-			type,
-			...opts?.message !== void 0 ? { message: opts.message } : {},
-			...opts?.data !== void 0 ? { data: opts.data } : {}
-		};
-		this.#events.push(event);
-		return event;
-	}
-	list() {
-		return [...this.#events];
-	}
-};
-/** 交互终态（取消/超时）：从工具执行深处直接终止 run */
-var RunTerminated = class extends Error {
-	outcome;
-	constructor(outcome) {
-		super(outcome.message);
-		this.outcome = outcome;
+};
+/** 交互终态（取消/超时）：从工具执行深处直接终止 run */
+var RunTerminated = class extends Error {
+	outcome;
+	constructor(outcome) {
+		super(outcome.message);
+		this.outcome = outcome;
 	}
 };
 /** bridge.request 自身异常（非超时）：恢复 running 后转为工具错误回喂 */
 var BridgeRequestError = class extends Error {};
 const baseName = (p) => p.split("/").pop() ?? p;
-const messageOf = (e) => e instanceof Error ? e.message : String(e);
+const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
 const toolError = (code, message) => ({
 	ok: false,
 	content: [],
@@ -1412,7 +1372,8 @@ var AgentLoop = class {
 			now,
 			interactionSeq: 0,
 			messages: [],
-			turn: 0
+			turn: 0,
+			renderBlocks: []
 		};
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		const route = this.#deps.catalogFilter ? {
@@ -1428,7 +1389,7 @@ var AgentLoop = class {
 			try {
 				return await source.listToolSpecs();
 			} catch (e) {
-				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf(e)}` });
+				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf$1(e)}` });
 				return [];
 			}
 		}))).flat();
@@ -1442,7 +1403,7 @@ var AgentLoop = class {
 		try {
 			return await this.#turnLoop(state, startMs, 1, externalSpecs);
 		} catch (e) {
-			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf(e), "RUN_FAILED");
+			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf$1(e), "RUN_FAILED");
 			throw e;
 		}
 	}
@@ -1481,7 +1442,7 @@ var AgentLoop = class {
 				});
 			} catch (e) {
 				const code = e instanceof WebSkillError && (e.code === "LLM_UNAVAILABLE" || e.code === "LLM_REQUEST_FAILED") ? e.code : "LLM_REQUEST_FAILED";
-				return finish("failed", "llm-error", messageOf(e), code);
+				return finish("failed", "llm-error", messageOf$1(e), code);
 			}
 			trace.record("llm.response", { data: {
 				turn,
@@ -1533,21 +1494,21 @@ var AgentLoop = class {
 		});
 		const bridge = this.#deps.uiBridge;
 		if (status === "completed" && bridge?.renderResult && this.#config.renderResult !== "off") try {
-			const request = buildRenderResult(run, output);
+			const request = buildRenderResult(run, output, state.renderBlocks);
 			await bridge.renderResult(request);
 			trace.record("ui.rendered", { data: { blockCount: request.blocks.length } });
 		} catch (e) {
-			trace.record("run.warning", { message: `renderResult failed: ${messageOf(e)}` });
+			trace.record("run.warning", { message: `renderResult failed: ${messageOf$1(e)}` });
 		}
 		if (this.#deps.snapshotStore) try {
 			await this.#deps.snapshotStore.delete(state.runId);
 		} catch (e) {
-			trace.record("run.warning", { message: `Failed to delete run snapshot: ${messageOf(e)}` });
+			trace.record("run.warning", { message: `Failed to delete run snapshot: ${messageOf$1(e)}` });
 		}
 		try {
 			await this.#lifecycle(status === "completed" ? "complete" : "fail", state, { reason });
 		} catch (e) {
-			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf(e)}` });
+			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf$1(e)}` });
 		}
 		run.trace = trace.list();
 		return {
@@ -1582,7 +1543,7 @@ var AgentLoop = class {
 		try {
 			await store.save(snapshot);
 		} catch (e) {
-			state.trace.record("run.warning", { message: `Failed to save run snapshot: ${messageOf(e)}` });
+			state.trace.record("run.warning", { message: `Failed to save run snapshot: ${messageOf$1(e)}` });
 		}
 	}
 	/**
@@ -1615,7 +1576,8 @@ var AgentLoop = class {
 			now,
 			interactionSeq: 0,
 			messages: snapshot.messages.map((m) => ({ ...m })),
-			turn: snapshot.turn
+			turn: snapshot.turn,
+			renderBlocks: []
 		};
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		trace.record("run.resumed", { data: {
@@ -1681,14 +1643,14 @@ var AgentLoop = class {
 			try {
 				return await source.listToolSpecs();
 			} catch (e) {
-				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf(e)}` });
+				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf$1(e)}` });
 				return [];
 			}
 		}))).flat();
 		try {
 			return await this.#turnLoop(state, startMs, snapshot.turn + 1, externalSpecs);
 		} catch (e) {
-			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf(e), "RUN_FAILED");
+			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf$1(e), "RUN_FAILED");
 			throw e;
 		}
 	}
@@ -1780,8 +1742,8 @@ var AgentLoop = class {
 				message: e.message,
 				code: "RUN_INTERACTION_TIMEOUT"
 			});
-			state.trace.record("run.warning", { message: `UiBridge request failed: ${messageOf(e)}` });
-			throw new BridgeRequestError(messageOf(e));
+			state.trace.record("run.warning", { message: `UiBridge request failed: ${messageOf$1(e)}` });
+			throw new BridgeRequestError(messageOf$1(e));
 		}
 		if (response.cancelled) throw new RunTerminated({
 			status: "cancelled",
@@ -1827,11 +1789,20 @@ var AgentLoop = class {
 				result = source ? await source.call(call.name, call.arguments) : toolError(resolution.code, resolution.message);
 			}
 		}
-		if (result.ok) state.trace.record("tool.completed", { data: {
-			name: call.name,
-			callId: call.id
-		} });
-		else state.trace.record("tool.failed", {
+		if (result.ok) {
+			state.trace.record("tool.completed", { data: {
+				name: call.name,
+				callId: call.id
+			} });
+			for (const item of result.content) {
+				if (item.type !== "json") continue;
+				const chart = extractChartSpec(item.data);
+				if (chart) state.renderBlocks.push({
+					type: "chart",
+					chart
+				});
+			}
+		} else state.trace.record("tool.failed", {
 			message: result.error?.message,
 			data: {
 				name: call.name,
@@ -1885,7 +1856,7 @@ var AgentLoop = class {
 			};
 		} catch (e) {
 			if (e instanceof WebSkillError && e.code === "SKILL_NOT_FOUND" && (this.#deps.skillProviders?.length ?? 0) > 0) return this.#handleReadExternalSkill(skillName, pathArg, state);
-			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `read_skill_file failed: ${messageOf(e)}`);
+			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `read_skill_file failed: ${messageOf$1(e)}`);
 		}
 	}
 	/** 经外部技能提供者读取技能文档/资源；skillKey 为技能名或 mcp:// URI */
@@ -1928,34 +1899,58 @@ var AgentLoop = class {
 		}
 		return toolError("SKILL_NOT_FOUND", `Skill not found via external providers: ${skillKey}`);
 	}
-	/** 首次读到 SKILL.md 时激活技能：加载其 scripts 工具定义，供后续轮次使用 */
-	async #activateSkill(skillName, state) {
+	/** 首次读到 SKILL.md 时激活技能：加载其 scripts 工具定义，供后续轮次使用；dependencies 级联激活（via 记录来源） */
+	async #activateSkill(skillName, state, via) {
 		state.activated.add(skillName);
-		state.trace.record("skill.activated", { data: { skillName } });
+		state.trace.record("skill.activated", { data: {
+			skillName,
+			...via ? { via } : {}
+		} });
 		await this.#lifecycle("activate", state, { skillName });
 		await this.#writeActivationMemory(skillName, state);
 		const root = this.#deps.skillIndex.get(skillName);
 		if (!root) return "";
+		let allowedTools;
+		let dependencies = [];
+		try {
+			const { metadata } = parseSkillMarkdown(await this.#deps.fs.readText(`${root}/SKILL.md`));
+			const rawDeps = metadata["dependencies"];
+			if (Array.isArray(rawDeps)) dependencies = rawDeps.filter((d) => typeof d === "string");
+			const raw = metadata["allowed-tools"];
+			if (raw !== void 0) if (Array.isArray(raw)) allowedTools = raw.filter((e) => typeof e === "string");
+			else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "allowed-tools" metadata entry; ignored` });
+		} catch {}
 		const executor = this.#deps.executor;
-		if (!executor) return "";
 		const loaded = [];
-		let scriptFiles = [];
-		try {
-			scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
-		} catch {
-			return "";
-		}
-		for (const file of scriptFiles) {
-			const match = /^(.*)\.(ts|js)$/.exec(file);
-			if (!match?.[1]) continue;
+		if (executor) {
+			let scriptFiles = [];
 			try {
-				const def = await executor.loadDefinition(root, match[1]);
-				await this.#enrichDefinition(root, match[1], def, state);
-				state.activatedTools.set(def.name, def);
-				loaded.push(def.name);
-			} catch {}
+				scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
+			} catch {
+				scriptFiles = [];
+			}
+			for (const file of scriptFiles) {
+				const match = /^(.*)\.(ts|js)$/.exec(file);
+				if (!match?.[1]) continue;
+				if (allowedTools && !allowedTools.includes(match[1])) continue;
+				try {
+					const def = await executor.loadDefinition(root, match[1]);
+					await this.#enrichDefinition(root, match[1], def, state);
+					state.activatedTools.set(def.name, def);
+					loaded.push(def.name);
+				} catch {}
+			}
+		}
+		let note = loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "";
+		for (const dep of dependencies) {
+			if (state.activated.has(dep)) continue;
+			if (!this.#deps.skillIndex.has(dep)) {
+				state.trace.record("run.warning", { message: `Skill "${skillName}" depends on unknown skill "${dep}"; skipped` });
+				continue;
+			}
+			note += await this.#activateSkill(dep, state, skillName);
 		}
-		return loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "";
+		return note;
 	}
 	/**
 	* D2 Schema 兜底链（同一 run 内激活时只算一次）：
@@ -1968,7 +1963,7 @@ var AgentLoop = class {
 			def.inputSchema = JSON.parse(await this.#deps.fs.readText(sidecar));
 			return;
 		} catch (e) {
-			state.trace.record("run.warning", { message: `Failed to parse schema sidecar ${sidecar}: ${messageOf(e)}` });
+			state.trace.record("run.warning", { message: `Failed to parse schema sidecar ${sidecar}: ${messageOf$1(e)}` });
 		}
 		if (!this.#deps.schemaInferer) return;
 		for (const ext of ["ts", "js"]) {
@@ -1982,10 +1977,12 @@ var AgentLoop = class {
 	async #handleScriptTool(call, skillName, scriptName, state) {
 		const root = this.#deps.skillIndex.get(skillName);
 		if (!root) return toolError("TOOL_NOT_FOUND", `Skill "${skillName}" is not in the catalog`);
-		let args = call.arguments;
+		if (!this.#deps.executor) return toolError("TOOL_UNSUPPORTED", `No script executor is configured; script tool "${call.name}" cannot run`);
 		const def = state.activatedTools.get(call.name);
-		const missing = (def?.inputSchema?.required ?? []).filter((key) => args[key] === void 0);
-		if (missing.length > 0 && this.#deps.uiBridge && this.#policy.missingParams === "user" && def?.inputSchema) try {
+		if (!def) return toolError("TOOL_NOT_FOUND", `Tool "${call.name}" is not available for skill "${skillName}"`);
+		let args = call.arguments;
+		const missing = (def.inputSchema?.required ?? []).filter((key) => args[key] === void 0);
+		if (missing.length > 0 && this.#deps.uiBridge && this.#policy.missingParams === "user" && def.inputSchema) try {
 			const value = await this.#interact(state, {
 				type: "form",
 				id: this.#nextInteractionId(state),
@@ -2003,14 +2000,14 @@ var AgentLoop = class {
 			if (e instanceof BridgeRequestError) return toolError("UI_UNAVAILABLE", `Parameter form failed: ${e.message}`);
 			throw e;
 		}
-		if (!this.#deps.executor) return toolError("TOOL_UNSUPPORTED", `No script executor is configured; script tool "${call.name}" cannot run`);
 		const context = createScriptContext({
 			fs: this.#deps.fs,
 			artifactStore: this.#deps.artifactStore,
 			skillName,
 			skillRoot: root,
 			runId: state.runId,
-			confirm: (message) => this.#confirm(message, state)
+			confirm: (message) => this.#confirm(message, state),
+			onWarning: (message) => state.trace.record("run.warning", { message })
 		});
 		try {
 			const before = new Set((await this.#deps.artifactStore.listArtifacts(state.runId)).map((a) => a.id));
@@ -2028,7 +2025,7 @@ var AgentLoop = class {
 		} catch (e) {
 			if (e instanceof RunTerminated) throw e;
 			await this.#bumpSkillStat(skillName, "failures", state);
-			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `Tool "${call.name}" failed: ${messageOf(e)}`);
+			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `Tool "${call.name}" failed: ${messageOf$1(e)}`);
 		}
 	}
 	/** context.confirm 触发点：默认真实询问；auto-approve 直通；无 bridge 降级直通 + warning */
@@ -2067,7 +2064,7 @@ var AgentLoop = class {
 		try {
 			await this.#deps.memory?.set(scope, key, value);
 		} catch (e) {
-			state.trace.record("run.warning", { message: `Memory write failed: ${messageOf(e)}` });
+			state.trace.record("run.warning", { message: `Memory write failed: ${messageOf$1(e)}` });
 		}
 	}
 	async #writeActivationMemory(skillName, state) {
@@ -2323,6 +2320,393 @@ var WebSkillRuntime = class {
 		}, this.#deps.config).resume(snapshot);
 	}
 };
+/**
+* navigator.webskill 门面装配层：零新业务逻辑，全部直转
+* SkillDiscovery / validateSkills / WebSkillRuntime / SkillManager。
+*/
+function createWebSkillApi(deps) {
+	const { fs, roots } = deps;
+	let runtime;
+	const lazyRuntime = () => {
+		runtime ??= new WebSkillRuntime({
+			fs,
+			roots,
+			llm: deps.llm,
+			...deps.executor ? { executor: deps.executor } : {},
+			...deps.artifactStore ? { artifactStore: deps.artifactStore } : {},
+			...deps.loopConfig ? { config: deps.loopConfig } : {}
+		});
+		return runtime;
+	};
+	const requireManager = () => {
+		if (!deps.skillManager) throw new WebSkillError("TOOL_UNSUPPORTED", "No skill manager is configured; install/uninstall is unavailable");
+		return deps.skillManager;
+	};
+	return {
+		async discover(path) {
+			const { entries } = await new SkillDiscovery(fs, [path]).discover();
+			return buildCatalog(entries);
+		},
+		async read(name) {
+			const { entries } = await new SkillDiscovery(fs, roots).discover();
+			const entry = entries.find((e) => e.name === name);
+			if (!entry) throw new WebSkillError("SKILL_NOT_FOUND", `Unknown skill: ${name}`);
+			const skillMdPath = `${entry.root}/SKILL.md`;
+			const { metadata, body } = parseSkillMarkdown(await fs.readText(skillMdPath));
+			return {
+				metadata,
+				body,
+				location: {
+					skillRoot: entry.root,
+					skillMdPath,
+					source: entry.source
+				}
+			};
+		},
+		validate(path) {
+			return validateSkills(fs, [path]);
+		},
+		async run(prompt) {
+			return (await lazyRuntime().run(prompt)).run;
+		},
+		async install(url) {
+			const manifest = await requireManager().install(sourceFromUrl(url));
+			return {
+				name: manifest.name,
+				...manifest.version !== void 0 ? { version: manifest.version } : {},
+				installedAt: manifest.installedAt,
+				integrity: manifest.integrity
+			};
+		},
+		async uninstall(name) {
+			await requireManager().uninstall(name);
+		}
+	};
+}
+/** install URL 分派：http(s)…​.zip → http；…​.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；其余 → local */
+function sourceFromUrl(url) {
+	const bare = url.split("?")[0] ?? url;
+	if (/^https?:\/\//.test(url) && bare.endsWith(".zip")) return {
+		type: "http",
+		url
+	};
+	if (bare.endsWith(".git")) return {
+		type: "git",
+		url
+	};
+	return {
+		type: "local",
+		path: url
+	};
+}
+const messageOf = (e) => e instanceof Error ? e.message : String(e);
+/** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
+var HookRunner = class {
+	#hooks = /* @__PURE__ */ new Map();
+	timeoutMs;
+	failOnHookError;
+	onWarning;
+	constructor(options = {}) {
+		this.timeoutMs = options.timeoutMs ?? 5e3;
+		this.failOnHookError = options.failOnHookError ?? false;
+		this.onWarning = options.onWarning;
+	}
+	register(phase, hook) {
+		const key = phase;
+		const list = this.#hooks.get(key) ?? [];
+		list.push(hook);
+		this.#hooks.set(key, list);
+		return this;
+	}
+	async run(phase, ctx) {
+		const hooks = [...this.#hooks.get(phase) ?? [], ...this.#hooks.get("*") ?? []];
+		for (const hook of hooks) try {
+			await this.#withTimeout(Promise.resolve().then(() => hook(ctx)), phase);
+		} catch (e) {
+			if (this.failOnHookError) throw e instanceof WebSkillError ? e : new WebSkillError("RUN_FAILED", messageOf(e), e);
+			this.onWarning?.(messageOf(e));
+		}
+	}
+	#withTimeout(promise, phase) {
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => reject(new WebSkillError("RUN_TIMEOUT", `Lifecycle hook for phase "${phase}" timed out after ${this.timeoutMs}ms`)), this.timeoutMs);
+			promise.then((v) => {
+				clearTimeout(timer);
+				resolve(v);
+			}, (e) => {
+				clearTimeout(timer);
+				reject(e instanceof Error ? e : new Error(String(e)));
+			});
+		});
+	}
+};
+/** 内存 MemoryStore：测试与浏览器降级用 */
+var InMemoryStore = class {
+	#data = /* @__PURE__ */ new Map();
+	async get(scope, key) {
+		return this.#data.get(scope)?.get(key);
+	}
+	async set(scope, key, value) {
+		let bucket = this.#data.get(scope);
+		if (!bucket) {
+			bucket = /* @__PURE__ */ new Map();
+			this.#data.set(scope, bucket);
+		}
+		bucket.set(key, value);
+	}
+	async delete(scope, key) {
+		this.#data.get(scope)?.delete(key);
+	}
+	async list(scope) {
+		return [...(this.#data.get(scope) ?? /* @__PURE__ */ new Map()).entries()].map(([key, value]) => ({
+			key,
+			value
+		}));
+	}
+	async clear(scope) {
+		if (scope === void 0) this.#data.clear();
+		else this.#data.delete(scope);
+	}
+};
+const encode = (s) => encodeURIComponent(s);
+/**
+* 基于 FileSystemProvider 的 MemoryStore：
+* <root>/<encodeURIComponent(scope)>/<encodeURIComponent(key)>.json
+* scope/key 全部编码防路径穿越；环境无关，构造必须显式传 fs。
+*/
+var FsMemoryStore = class {
+	#root;
+	#fs;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
+	}
+	#scopeDir(scope) {
+		return `${this.#root}/${encode(scope)}`;
+	}
+	#keyPath(scope, key) {
+		return `${this.#scopeDir(scope)}/${encode(key)}.json`;
+	}
+	async get(scope, key) {
+		const path = this.#keyPath(scope, key);
+		if (!await this.#fs.exists(path)) return void 0;
+		return JSON.parse(await this.#fs.readText(path));
+	}
+	async set(scope, key, value) {
+		await this.#fs.writeText(this.#keyPath(scope, key), JSON.stringify(value, null, 2));
+	}
+	async delete(scope, key) {
+		const path = this.#keyPath(scope, key);
+		if (await this.#fs.exists(path)) await this.#fs.remove(path);
+	}
+	async list(scope) {
+		const dir = this.#scopeDir(scope);
+		if (!await this.#fs.exists(dir)) return [];
+		const out = [];
+		for (const entry of await this.#fs.list(dir)) {
+			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
+			const fileName = entry.path.split("/").pop() ?? "";
+			const key = decodeURIComponent(fileName.replace(/\.json$/, ""));
+			out.push({
+				key,
+				value: JSON.parse(await this.#fs.readText(entry.path))
+			});
+		}
+		return out.sort((a, b) => a.key.localeCompare(b.key));
+	}
+	async clear(scope) {
+		if (scope !== void 0) {
+			const dir = this.#scopeDir(scope);
+			if (await this.#fs.exists(dir)) await this.#fs.remove(dir, { recursive: true });
+			return;
+		}
+		if (!await this.#fs.exists(this.#root)) return;
+		for (const entry of await this.#fs.list(this.#root)) await this.#fs.remove(entry.path, { recursive: true });
+	}
+};
+const INDEX_FILE = "index.json";
+/**
+* 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
+* 每次写入同步更新 <root>/<runId>/index.json，新实例可凭索引恢复列表。
+* 环境无关（OPFS/Node 均可），构造必须显式传 fs。
+*/
+var FsArtifactStore = class {
+	#root;
+	#fs;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
+	}
+	async createTextArtifact(input) {
+		const size = new TextEncoder().encode(input.content).length;
+		await this.#fs.writeText(this.#artifactPath(input.runId, input.path), input.content);
+		return this.#persist({
+			...input,
+			type: "text",
+			size
+		});
+	}
+	async createBinaryArtifact(input) {
+		await this.#fs.writeBinary(this.#artifactPath(input.runId, input.path), input.content);
+		return this.#persist({
+			...input,
+			type: "binary",
+			size: input.content.length
+		});
+	}
+	async listArtifacts(runId) {
+		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
+		if (!await this.#fs.exists(indexPath)) return [];
+		const raw = await this.#fs.readText(indexPath);
+		return JSON.parse(raw).artifacts ?? [];
+	}
+	#artifactPath(runId, artifactPath) {
+		return resolveInsideRoot(`${this.#root}/${runId}`, artifactPath);
+	}
+	async #persist(input) {
+		const artifact = {
+			id: `${input.runId}/${input.path}`,
+			runId: input.runId,
+			path: input.path,
+			type: input.type,
+			mimeType: input.mimeType,
+			size: input.size,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			metadata: input.metadata
+		};
+		const next = [...(await this.listArtifacts(input.runId)).filter((a) => a.id !== artifact.id), artifact];
+		await this.#fs.writeText(`${this.#root}/${input.runId}/${INDEX_FILE}`, JSON.stringify({ artifacts: next }, null, 2));
+		return artifact;
+	}
+};
+const isRecord = (v) => typeof v === "object" && v !== null;
+const isNonEmptyString = (v) => typeof v === "string" && v !== "";
+/** 入站校验：非法 kind / 缺 id / 缺字段 → undefined（调用方忽略并记 warning） */
+function parseBridgeRequest(data) {
+	if (!isRecord(data)) return void 0;
+	const { kind, id } = data;
+	if (!isNonEmptyString(id)) return void 0;
+	switch (kind) {
+		case "readReference": return isNonEmptyString(data["path"]) ? {
+			kind,
+			id,
+			path: data["path"]
+		} : void 0;
+		case "writeArtifact": {
+			const { path, content, mimeType } = data;
+			const validContent = typeof content === "string" || Array.isArray(content) && content.every((n) => typeof n === "number");
+			if (!isNonEmptyString(path) || !validContent) return void 0;
+			return {
+				kind,
+				id,
+				path,
+				content,
+				...isNonEmptyString(mimeType) ? { mimeType } : {}
+			};
+		}
+		case "confirm": return isNonEmptyString(data["message"]) ? {
+			kind,
+			id,
+			message: data["message"]
+		} : void 0;
+		default: return;
+	}
+}
+function bridgeError(id, code, message) {
+	return {
+		id,
+		ok: false,
+		error: {
+			code,
+			message
+		}
+	};
+}
+/**
+* 判定 URL 是否被策略放行：
+* - 'deny-all'（默认）全拒；'allow-all' 全放
+* - { allow } 条目支持三种写法：
+*   - 精确域名 'api.example.com'（忽略端口与路径）
+*   - 通配 '*.example.com'（含 apex 与任意深度子域）
+*   - 源 'http://localhost:3000'（协议 + host + port 全等）
+* - URL 解析失败一律拒绝
+*/
+function isNetworkAllowed(policy, url) {
+	if (policy === "allow-all") return true;
+	if (policy === "deny-all" || !policy || typeof policy !== "object") return false;
+	var allow = policy.allow;
+	if (!Array.isArray(allow)) return false;
+	var parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return false;
+	}
+	var host = parsed.hostname.toLowerCase();
+	for (var i = 0; i < allow.length; i++) {
+		var entry = allow[i];
+		if (typeof entry !== "string" || entry === "") continue;
+		if (entry.indexOf("://") !== -1) {
+			try {
+				if (new URL(entry).origin === parsed.origin) return true;
+			} catch {}
+			continue;
+		}
+		var rule = entry.toLowerCase();
+		if (rule.indexOf("*.") === 0) {
+			var suffix = rule.slice(2);
+			if (host === suffix || host.endsWith("." + suffix)) return true;
+		} else if (host === rule) return true;
+	}
+	return false;
+}
+/** 阻断 trace 用的脱敏 host（解析失败返回占位，不记录完整 URL） */
+function networkUrlHost(url) {
+	try {
+		return new URL(url).hostname;
+	} catch {
+		return "(unparseable-url)";
+	}
+}
+/**
+* Per-capability 强制授权判定（宿主侧，browser/node 执行器共用单一来源）。
+* 'require-approval' 模式下经注入的 UiBridge 发 authorize 交互；
+* once-per-run（默认）在 run 内记忆已批准能力，every-call 每次调用都问。
+*/
+var CapabilityApproval = class {
+	#uiBridge;
+	#scope;
+	/** runId → 已批准能力集合（once-per-run 记忆） */
+	#approved = /* @__PURE__ */ new Map();
+	#seq = 0;
+	constructor(deps = {}) {
+		this.#uiBridge = deps.uiBridge;
+		this.#scope = deps.scope ?? "once-per-run";
+	}
+	async authorize(input) {
+		const { runId, capability, mode } = input;
+		if (mode === false) return "disabled";
+		if (mode !== "require-approval") return "allowed";
+		if (this.#scope === "once-per-run" && this.#approved.get(runId)?.has(capability)) return "allowed";
+		if (!this.#uiBridge) return "denied";
+		if ((await this.#uiBridge.request({
+			type: "authorize",
+			id: `authorize-${runId}-${capability}-${++this.#seq}`,
+			capability,
+			message: input.message,
+			...input.details !== void 0 ? { details: input.details } : {}
+		})).value !== true) return "denied";
+		if (this.#scope === "once-per-run") {
+			let set = this.#approved.get(runId);
+			if (!set) {
+				set = /* @__PURE__ */ new Set();
+				this.#approved.set(runId, set);
+			}
+			set.add(capability);
+		}
+		return "allowed";
+	}
+};
 
 //#endregion
-export { renderCatalogJson as $, parseBridgeRequest as A, SkillDiscovery as B, bridgeError as C, fromVercelStreamPart as D, fromVercelResult as E, MemoryFS as F, checkSkillRules as G, WebSkillError as H, SKILLS_LOCKFILE as I, isValidSkillName as J, computeDigest as K, SKILL_MANIFEST_FILE as L, schemaToForm as M, toLlmToolSpec as N, mergeCatalogEntries as O, toVercelToolSpecs as P, renderAvailableSkillsXml as Q, SKILL_NAME_MAX_LENGTH as R, WebSkillRuntime as S, createScriptContext as T, buildCatalog as U, SkillReader as V, buildManifest as W, normalizePath as X, jsonRenderer as Y, parseSkillMarkdown as Z, READ_SKILL_FILE_INPUT_SCHEMA as _, EventBus as a, RUN_SNAPSHOT_SCHEMA_VERSION as b, FsRunSnapshotStore as c, InMemoryStore as d, resolveInsideRoot as et, MemoryArtifactStore as f, ProgressiveRouter as g, OpenAiCompatibleClient as h, AgentLoop as i, resolveToolName as j, normalizeToolContent as k, FullDisclosureRouter as l, MockUiBridge as m, ASK_USER_TOOL as n, verifyManifest as nt, FsArtifactStore as o, MockLlmClient as p, escapeXml as q, ASK_USER_TOOL_NAME as r, xmlRenderer as rt, FsMemoryStore as s, ASK_USER_INPUT_SCHEMA as t, validateSkills as tt, HookRunner as u, READ_SKILL_FILE_TOOL as v, buildRenderResult as w, TraceRecorder as x, READ_SKILL_FILE_TOOL_NAME as y, SKILL_NAME_PATTERN as z };
+export { computeDigest as $, fromVercelStreamPart as A, MemoryFS as B, WebSkillRuntime as C, createWebSkillApi as D, createScriptContext as E, parseBridgeRequest as F, SKILL_PACK_FILE as G, SKILL_MANIFEST_FILE as H, resolveToolName as I, WebSkillError as J, SkillDiscovery as K, schemaToForm as L, mergeCatalogEntries as M, networkUrlHost as N, extractChartSpec as O, normalizeToolContent as P, checkSkillRules as Q, toLlmToolSpec as R, TraceRecorder as S, buildRenderResult as T, SKILL_NAME_MAX_LENGTH as U, SKILLS_LOCKFILE as V, SKILL_NAME_PATTERN as W, buildManifest as X, buildCatalog as Y, checkDependencyCycles as Z, ProgressiveRouter as _, CapabilityApproval as a, parseSkillMarkdown as at, READ_SKILL_FILE_TOOL_NAME as b, FsMemoryStore as c, renderCatalogJson as ct, HookRunner as d, verifyManifest as dt, escapeXml as et, InMemoryStore as f, xmlRenderer as ft, OpenAiCompatibleClient as g, MockUiBridge as h, AgentLoop as i, normalizePath as it, isNetworkAllowed as j, fromVercelResult as k, FsRunSnapshotStore as l, resolveInsideRoot as lt, MockLlmClient as m, ASK_USER_TOOL as n, isValidSkillName as nt, EventBus as o, parseSkillPackManifest as ot, MemoryArtifactStore as p, SkillReader as q, ASK_USER_TOOL_NAME as r, jsonRenderer as rt, FsArtifactStore as s, renderAvailableSkillsXml as st, ASK_USER_INPUT_SCHEMA as t, exportSkills as tt, FullDisclosureRouter as u, validateSkills as ut, READ_SKILL_FILE_INPUT_SCHEMA as v, bridgeError as w, RUN_SNAPSHOT_SCHEMA_VERSION as x, READ_SKILL_FILE_TOOL as y, toVercelToolSpecs as z };