@webskill/sdk 0.0.5 → 0.1.0

package/dist/{dist-D405AlPD.js → dist-CiYRkm71.js}

@@ -1,502 +1,6 @@
-import { parse } from "yaml";
+import { C as renderAvailableSkillsXml, E as validateSkills, T as resolveInsideRoot, c as SkillDiscovery, d as buildCatalog, l as SkillReader, t as MemoryArtifactStore, u as WebSkillError, x as parseSkillMarkdown } from "./memoryArtifactStore-C9lFVqPF-U8nXvqL9.js";
 
-//#region ../core/dist/index.js
-/** 所有公开 API 抛出的结构化错误，code 供上层可编程处理 */
-var WebSkillError = class extends Error {
-	code;
-	details;
-	constructor(code, message, details) {
-		super(message);
-		this.name = "WebSkillError";
-		this.code = code;
-		this.details = details;
-	}
-};
-/** 技能目录内的安装清单文件名（不参与 files 列表与 digest） */
-const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
-/** managed root 下的锁定文件名（不参与 files 列表与 digest） */
-const SKILLS_LOCKFILE = "skills.lock.json";
-/** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256（hash 由调用方提供，可为 WebCrypto 异步实现） */
-async function computeDigest(files, sha256) {
-	return sha256([...files].sort((a, b) => a.path.localeCompare(b.path)).map((f) => `${f.path}:${f.sha256}\n`).join(""));
-}
-/** 由逐文件清单构建 manifest（digest 由 computeDigest 计算） */
-async function buildManifest(input) {
-	return {
-		schemaVersion: 1,
-		name: input.name,
-		...input.version !== void 0 ? { version: input.version } : {},
-		source: input.source,
-		installedAt: input.installedAt,
-		integrity: {
-			algorithm: "sha256",
-			digest: await computeDigest(input.files, input.sha256)
-		},
-		files: input.files
-	};
-}
-/** 按 manifest.files 比对实际 hash（调用方负责计算 actualHashes） */
-function verifyManifest(manifest, actualHashes) {
-	const mismatches = [];
-	for (const file of manifest.files) {
-		const actual = actualHashes.get(file.path);
-		if (actual === void 0 || actual !== file.sha256) mismatches.push(file.path);
-	}
-	return {
-		ok: mismatches.length === 0,
-		mismatches
-	};
-}
-const ROOT = "/";
-/** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
-var MemoryFS = class {
-	kind = "memory";
-	#entries = /* @__PURE__ */ new Map();
-	constructor() {
-		this.#entries.set(ROOT, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#normalize(path) {
-		const out = [];
-		for (const seg of path.replace(/\\/g, "/").split("/")) {
-			if (seg === "" || seg === ".") continue;
-			if (seg === "..") out.pop();
-			else out.push(seg);
-		}
-		return ROOT + out.join("/");
-	}
-	#parentOf(key) {
-		const i = key.lastIndexOf("/");
-		return i <= 0 ? ROOT : key.slice(0, i);
-	}
-	#ensureParents(key) {
-		const chain = [];
-		let dir = this.#parentOf(key);
-		while (!this.#entries.has(dir)) {
-			chain.push(dir);
-			dir = this.#parentOf(dir);
-		}
-		for (const d of chain.reverse()) this.#entries.set(d, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#getFile(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "file") throw new WebSkillError("FS_NOT_FOUND", `File not found: ${key}`);
-		return entry;
-	}
-	#getDirectory(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "directory") throw new WebSkillError("FS_NOT_FOUND", `Directory not found: ${key}`);
-		return entry;
-	}
-	async readText(path) {
-		return new TextDecoder().decode(this.#getFile(this.#normalize(path)).content);
-	}
-	async writeText(path, content) {
-		await this.writeBinary(path, new TextEncoder().encode(content));
-	}
-	async readBinary(path) {
-		return this.#getFile(this.#normalize(path)).content;
-	}
-	async writeBinary(path, content) {
-		const key = this.#normalize(path);
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "file",
-			content,
-			mtimeMs: Date.now()
-		});
-	}
-	async exists(path) {
-		return this.#entries.has(this.#normalize(path));
-	}
-	async stat(path) {
-		const key = this.#normalize(path);
-		const entry = this.#entries.get(key);
-		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		return {
-			path: key,
-			type: entry.type,
-			size: entry.type === "file" ? entry.content.length : void 0,
-			mtimeMs: entry.mtimeMs
-		};
-	}
-	async list(path) {
-		const key = this.#normalize(path);
-		this.#getDirectory(key);
-		const prefix = key === ROOT ? ROOT : key + "/";
-		const out = [];
-		for (const [k, entry] of this.#entries) {
-			if (k === key || !k.startsWith(prefix)) continue;
-			if (k.slice(prefix.length).includes("/")) continue;
-			out.push({
-				path: k,
-				type: entry.type,
-				size: entry.type === "file" ? entry.content.length : void 0,
-				mtimeMs: entry.mtimeMs
-			});
-		}
-		return out;
-	}
-	async mkdir(path) {
-		const key = this.#normalize(path);
-		if (this.#entries.has(key)) return;
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	async remove(path, options) {
-		const key = this.#normalize(path);
-		if (!this.#entries.get(key)) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		if (key === ROOT) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", "Cannot delete root directory");
-		const prefix = key + "/";
-		const descendants = [...this.#entries.keys()].filter((k) => k.startsWith(prefix));
-		if (descendants.length > 0 && !options?.recursive) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Directory not empty, use recursive: ${key}`);
-		for (const k of descendants) this.#entries.delete(k);
-		this.#entries.delete(key);
-	}
-};
-/** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
-function normalizePath(path) {
-	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
-}
-/**
-* 将相对路径安全地解析到 root 之内。
-* 拒绝空路径、绝对路径（`/`、`\\`、`C:\` 形式）与任何 `..` 段。
-*/
-function resolveInsideRoot(root, relativePath) {
-	const fail = (reason) => {
-		throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Path outside root: ${reason} (path: ${JSON.stringify(relativePath)})`);
-	};
-	if (relativePath.trim() === "") fail("empty path");
-	if (relativePath.startsWith("/") || relativePath.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(relativePath)) fail("absolute paths not allowed");
-	const segments = relativePath.replace(/\\/g, "/").split("/");
-	if (segments.some((s) => s === "..")) fail("`..` segments not allowed");
-	const clean = segments.filter((s) => s !== "" && s !== ".");
-	if (clean.length === 0) fail("path resolves to empty");
-	const normalizedRoot = normalizePath(root);
-	const joined = normalizedRoot === "" ? clean.join("/") : `${normalizedRoot}/${clean.join("/")}`;
-	return root.startsWith("/") || root.startsWith("\\") ? `/${joined}` : joined;
-}
-const FRONTMATTER_RE = /^---[^\S\r\n]*\r?\n([\s\S]*?)\r?\n---[^\S\r\n]*(?:\r?\n|$)([\s\S]*)$/;
-const invalid = (message, details) => {
-	throw new WebSkillError("SKILL_INVALID_METADATA", message, details);
-};
-function parseSkillMarkdown(raw) {
-	const match = FRONTMATTER_RE.exec(raw);
-	if (!match) invalid("SKILL.md missing YAML frontmatter (must start with a `---` line)");
-	const [, yamlText, bodyRaw] = match;
-	let data;
-	try {
-		data = parse(yamlText);
-	} catch (cause) {
-		invalid("frontmatter YAML parse failed", cause);
-	}
-	if (typeof data !== "object" || data === null || Array.isArray(data)) invalid("frontmatter must be a YAML object");
-	const metadata = data;
-	if (typeof metadata["name"] !== "string" || metadata["name"].trim() === "") invalid("frontmatter missing required `name` field");
-	if (typeof metadata["description"] !== "string" || metadata["description"].trim() === "") invalid("frontmatter missing required `description` field");
-	return {
-		metadata,
-		body: bodyRaw.trim()
-	};
-}
-const SKILL_NAME_MAX_LENGTH = 64;
-/** Agent Skills 官方命名规范：小写字母/数字/连字符，不允许首尾或连续连字符 */
-const SKILL_NAME_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;
-function isValidSkillName(name) {
-	return name.length <= 64 && SKILL_NAME_PATTERN.test(name);
-}
-const SCRIPT_EXTENSION_RE = /\.(ts|js)$/;
-/** D2 schema sidecar（scripts/<name>.schema.json）属于协议内文件，不算非法脚本 */
-const SCHEMA_SIDECAR_RE = /\.schema\.json$/;
-/**
-* 技能合规规则的唯一实现。SkillDiscovery 与 validateSkills 都必须调用本函数，
-* 禁止各自重复实现规则（避免两套规则漂移）。
-*/
-function checkSkillRules(input) {
-	const { dirName } = input;
-	if (!input.hasSkillMd) return [{
-		code: "SKILL_NOT_FOUND",
-		severity: "warning",
-		message: `Directory ${dirName} missing SKILL.md, not treated as a skill, skipped`
-	}];
-	if (input.parseError) return [{
-		code: input.parseError.code,
-		severity: "error",
-		message: `SKILL.md parse failed for directory ${dirName}: ${input.parseError.message}`
-	}];
-	const issues = [];
-	const metadata = input.metadata;
-	if (metadata) {
-		if (!isValidSkillName(metadata.name)) issues.push({
-			code: "SKILL_INVALID_NAME",
-			severity: "error",
-			message: `Skill name ${JSON.stringify(metadata.name)} does not conform to naming convention (lowercase letters/digits/hyphens, ≤64 chars)`
-		});
-		if (metadata.name !== dirName) issues.push({
-			code: "SKILL_INVALID_NAME",
-			severity: "error",
-			message: `Skill name ${JSON.stringify(metadata.name)} does not match directory name ${JSON.stringify(dirName)}`
-		});
-		if (input.existingNames?.has(metadata.name)) issues.push({
-			code: "SKILL_DUPLICATE_NAME",
-			severity: "error",
-			message: `Duplicate skill name ${JSON.stringify(metadata.name)}`
-		});
-	}
-	for (const fileName of input.scriptFileNames ?? []) if (!SCRIPT_EXTENSION_RE.test(fileName) && !SCHEMA_SIDECAR_RE.test(fileName)) issues.push({
-		code: "SKILL_UNSUPPORTED_SCRIPT",
-		severity: "error",
-		message: `Unsupported script file in scripts/ of directory ${dirName}: ${fileName} (only .ts/.js and .schema.json sidecars allowed)`
-	});
-	const allowedTools = metadata?.["allowed-tools"];
-	if (Array.isArray(allowedTools)) {
-		const scriptNames = new Set((input.scriptFileNames ?? []).filter((f) => SCRIPT_EXTENSION_RE.test(f)).map((f) => f.replace(SCRIPT_EXTENSION_RE, "")));
-		for (const entry of allowedTools) if (typeof entry === "string" && !scriptNames.has(entry)) issues.push({
-			code: "SKILL_UNKNOWN_ALLOWED_TOOL",
-			severity: "warning",
-			message: `allowed-tools entry ${JSON.stringify(entry)} of directory ${dirName} does not match any script in scripts/`
-		});
-	}
-	return issues;
-}
-/** 由条目列表构建 Catalog，保证按名称排序 */
-function buildCatalog(entries) {
-	return { skills: [...entries].sort((a, b) => a.name.localeCompare(b.name)) };
-}
-/** 按技能名读取技能根目录内的文件，全部读取强制经过路径安全检查 */
-var SkillReader = class {
-	#fs;
-	#index;
-	constructor(fs, index) {
-		this.#fs = fs;
-		this.#index = index;
-	}
-	#rootFor(skillName) {
-		const root = this.#index.get(skillName);
-		if (!root) throw new WebSkillError("SKILL_NOT_FOUND", `Unknown skill: ${skillName}`);
-		return root;
-	}
-	async readSkillMarkdown(skillName) {
-		return this.readSkillFile(skillName, "SKILL.md");
-	}
-	async readSkillFile(skillName, relativePath) {
-		return this.#fs.readText(resolveInsideRoot(this.#rootFor(skillName), relativePath));
-	}
-	async readSkillBinary(skillName, relativePath) {
-		return this.#fs.readBinary(resolveInsideRoot(this.#rootFor(skillName), relativePath));
-	}
-};
-const baseName$1 = (path) => path.split("/").pop() ?? path;
-var SkillDiscovery = class {
-	#fs;
-	#roots;
-	/** name → skillRoot，与 SkillReader 共享同一 Map 引用 */
-	#index = /* @__PURE__ */ new Map();
-	#reader;
-	constructor(fs, roots) {
-		this.#fs = fs;
-		this.#roots = roots;
-		this.#reader = new SkillReader(fs, this.#index);
-	}
-	async discover() {
-		this.#index.clear();
-		const entries = [];
-		const issues = [];
-		const claimedNames = /* @__PURE__ */ new Set();
-		for (const root of this.#roots) {
-			if (!await this.#fs.exists(root)) {
-				issues.push({
-					code: "FS_NOT_FOUND",
-					severity: "warning",
-					message: `Skill root directory not found, skipped: ${root}`,
-					path: root
-				});
-				continue;
-			}
-			for (const child of await this.#fs.list(root)) {
-				if (child.type !== "directory") continue;
-				const dirName = baseName$1(child.path);
-				const skillRoot = `${root}/${dirName}`;
-				const skillMdPath = `${skillRoot}/SKILL.md`;
-				const hasSkillMd = await this.#fs.exists(skillMdPath);
-				let metadata;
-				let parseError;
-				if (hasSkillMd) try {
-					metadata = parseSkillMarkdown(await this.#fs.readText(skillMdPath)).metadata;
-				} catch (e) {
-					parseError = e instanceof WebSkillError ? e : new WebSkillError("SKILL_INVALID_METADATA", String(e));
-				}
-				const scriptFileNames = await this.#listScriptFileNames(skillRoot);
-				const candidateIssues = checkSkillRules({
-					dirName,
-					hasSkillMd,
-					metadata,
-					parseError,
-					scriptFileNames,
-					existingNames: claimedNames
-				});
-				for (const issue of candidateIssues) issue.path ??= skillRoot;
-				issues.push(...candidateIssues);
-				if (metadata) claimedNames.add(metadata.name);
-				if (candidateIssues.some((i) => i.severity === "error") || !metadata) continue;
-				this.#index.set(metadata.name, skillRoot);
-				entries.push({
-					name: metadata.name,
-					description: metadata.description,
-					version: typeof metadata["version"] === "string" ? metadata["version"] : void 0,
-					license: typeof metadata["license"] === "string" ? metadata["license"] : void 0,
-					root: skillRoot,
-					source: "local",
-					hasScripts: scriptFileNames.length > 0,
-					hasReferences: await this.#fs.exists(`${skillRoot}/references`),
-					hasAssets: await this.#fs.exists(`${skillRoot}/assets`)
-				});
-			}
-		}
-		entries.sort((a, b) => a.name.localeCompare(b.name));
-		return {
-			entries,
-			issues
-		};
-	}
-	async catalog() {
-		const { entries, issues } = await this.discover();
-		return {
-			catalog: buildCatalog(entries),
-			issues
-		};
-	}
-	/** 按需加载技能完整文档；技能不存在时抛 SKILL_NOT_FOUND */
-	async loadDocument(skillName) {
-		if (this.#index.size === 0) await this.discover();
-		const { metadata, body } = parseSkillMarkdown(await this.#reader.readSkillMarkdown(skillName));
-		const skillRoot = this.#index.get(skillName);
-		return {
-			metadata,
-			body,
-			location: {
-				skillRoot,
-				skillMdPath: `${skillRoot}/SKILL.md`,
-				source: "local"
-			}
-		};
-	}
-	async #listScriptFileNames(skillRoot) {
-		const scriptsDir = `${skillRoot}/scripts`;
-		if (!await this.#fs.exists(scriptsDir)) return [];
-		return (await this.#fs.list(scriptsDir)).filter((s) => s.type === "file").map((s) => baseName$1(s.path));
-	}
-};
-/**
-* 合规校验。内部直接复用 SkillDiscovery 的扫描逻辑，
-* 规则判定同样落在 checkSkillRules 单一来源上。
-*/
-async function validateSkills(fs, roots) {
-	const { issues } = await new SkillDiscovery(fs, roots).discover();
-	return {
-		ok: !issues.some((i) => i.severity === "error"),
-		issues
-	};
-}
-function renderCatalogJson(catalog) {
-	return JSON.stringify(catalog, null, 2);
-}
-const jsonRenderer = {
-	format: "json",
-	render: renderCatalogJson
-};
-/** 转义 XML 五个特殊字符：& < > " ' */
-function escapeXml(text) {
-	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
-function renderAvailableSkillsXml(catalog) {
-	const lines = ["<available_skills>"];
-	for (const skill of catalog.skills) {
-		lines.push("  <skill>");
-		lines.push(`    <name>${escapeXml(skill.name)}</name>`);
-		lines.push(`    <description>${escapeXml(skill.description)}</description>`);
-		if (skill.version !== void 0) lines.push(`    <version>${escapeXml(skill.version)}</version>`);
-		if (skill.license !== void 0) lines.push(`    <license>${escapeXml(skill.license)}</license>`);
-		lines.push(`    <source>${escapeXml(skill.source)}</source>`);
-		lines.push("  </skill>");
-	}
-	lines.push("</available_skills>");
-	return lines.join("\n");
-}
-const xmlRenderer = {
-	format: "xml",
-	render: renderAvailableSkillsXml
-};
-
-//#endregion
 //#region ../runtime/dist/index.js
-/**
-* 预设响应序列的确定性 LlmClient；handler 形式可按会话状态动态应答。
-* 默认不含 stream（存量行为）；构造传 { streaming: true } 启用流式：
-* 队列项 { stream: [...] } 按预设 delta 序列产出，LlmResponse 项自动合成增量。
-*/
-var MockLlmClient = class {
-	calls = [];
-	stream;
-	#queue;
-	constructor(responses, options) {
-		this.#queue = [...responses];
-		if (options?.streaming) this.stream = (input) => this.#streamImpl(input);
-	}
-	async complete(input) {
-		this.calls.push(input);
-		const next = this.#queue.shift();
-		if (!next) throw new WebSkillError("LLM_REQUEST_FAILED", "MockLlmClient: response queue exhausted");
-		if (typeof next === "function") return next(input);
-		if ("stream" in next) {
-			const events = typeof next.stream === "function" ? next.stream(input) : next.stream;
-			let content = "";
-			let toolCalls;
-			for (const event of events) if (event.type === "text-delta") content += event.delta;
-			else if (event.type === "tool-calls") toolCalls = event.toolCalls;
-			else if (event.type === "done" && event.content !== void 0) content = event.content;
-			return {
-				content,
-				toolCalls
-			};
-		}
-		return next;
-	}
-	async *#streamImpl(input) {
-		this.calls.push(input);
-		const next = this.#queue.shift();
-		if (!next) throw new WebSkillError("LLM_REQUEST_FAILED", "MockLlmClient: response queue exhausted");
-		if (typeof next !== "function" && "stream" in next) {
-			const events = typeof next.stream === "function" ? next.stream(input) : next.stream;
-			for (const event of events) yield event;
-			return;
-		}
-		const response = typeof next === "function" ? await next(input) : next;
-		if (response.content) {
-			const chunkSize = Math.max(1, Math.ceil(response.content.length / 3));
-			for (let i = 0; i < response.content.length; i += chunkSize) yield {
-				type: "text-delta",
-				delta: response.content.slice(i, i + chunkSize)
-			};
-		}
-		if (response.toolCalls?.length) yield {
-			type: "tool-calls",
-			toolCalls: response.toolCalls
-		};
-		yield { type: "done" };
-	}
-};
 const toOpenAiMessage = (msg) => {
 	if (msg.role === "tool") return {
 		role: "tool",
@@ -776,7 +280,7 @@ var FullDisclosureRouter = class {
 	}
 	async route(catalog) {
 		const sections = [];
-		for (const entry of catalog.skills) {
+		for (const entry of catalog.entries) {
 			const doc = await this.#discovery.loadDocument(entry.name);
 			sections.push(`<skill name="${entry.name}">\n${doc.body}\n</skill>`);
 		}
@@ -941,12 +445,42 @@ function createScriptContext(deps) {
 		...onWarning ? { onWarning } : {}
 	};
 }
+const isRecord$1 = (v) => typeof v === "object" && v !== null;
+/**
+* $chart 约定的形状校验：JSON content 的 data 含 $chart 键且形状合法 → ChartSpec；
+* 任何畸形（kind 非法 / labels 非字符串数组 / series 项缺数值 data）→ undefined（忽略不炸）。
+*/
+function extractChartSpec(data) {
+	if (!isRecord$1(data)) return void 0;
+	const raw = data["$chart"];
+	if (!isRecord$1(raw)) return void 0;
+	const { kind, labels, series } = raw;
+	if (kind !== "bar" && kind !== "line" && kind !== "pie") return void 0;
+	if (!Array.isArray(labels) || !labels.every((l) => typeof l === "string")) return void 0;
+	if (!Array.isArray(series)) return void 0;
+	const validSeries = [];
+	for (const item of series) {
+		if (!isRecord$1(item) || !Array.isArray(item["data"]) || !item["data"].every((n) => typeof n === "number")) return;
+		const name = item["name"];
+		validSeries.push({
+			...typeof name === "string" ? { name } : {},
+			data: item["data"]
+		});
+	}
+	const title = raw["title"];
+	return {
+		kind,
+		labels,
+		series: validSeries,
+		...typeof title === "string" ? { title } : {}
+	};
+}
 /**
-* 默认的结果渲染构造：LLM 最终输出 → markdown block，
-* run.artifacts → file blocks；summary 取 terminationReason。
+* 默认的结果渲染构造：run 内收集的 renderBlocks（chart 等）在前，
+* LLM 最终输出 → markdown block，run.artifacts → file blocks 在后；summary 取 terminationReason。
 */
-function buildRenderResult(run, output) {
-	const blocks = [];
+function buildRenderResult(run, output, renderBlocks = []) {
+	const blocks = [...renderBlocks];
 	if (output.trim() !== "") blocks.push({
 		type: "markdown",
 		text: output
@@ -1000,33 +534,6 @@ function mapFieldType(prop) {
 		default: return "textarea";
 	}
 }
-/**
-* 测试用 UiBridge：按请求 id 或类型预设应答（永不 resolve 的 handler 可模拟超时）；
-* 记录全部请求供断言。
-*/
-var MockUiBridge = class {
-	requests = [];
-	#answers = /* @__PURE__ */ new Map();
-	#fallback;
-	/** key 为请求 id 或请求类型（'ask' | 'confirm' | 'form' | 'select'） */
-	respondTo(key, answer) {
-		this.#answers.set(key, answer);
-		return this;
-	}
-	setFallback(answer) {
-		this.#fallback = answer;
-		return this;
-	}
-	async request(input) {
-		this.requests.push(input);
-		const answer = this.#answers.get(input.id) ?? this.#answers.get(input.type) ?? this.#fallback;
-		if (!answer) return {
-			id: input.id,
-			cancelled: true
-		};
-		return typeof answer === "function" ? answer(input) : answer;
-	}
-};
 /** 生命周期事件总线：只读观测，支持按阶段或通配订阅 */
 var EventBus = class {
 	#listeners = /* @__PURE__ */ new Map();
@@ -1053,408 +560,56 @@ var EventBus = class {
 		for (const listener of this.#listeners.get("*") ?? []) listener(frozen);
 	}
 };
-const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
-/** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
-var HookRunner = class {
-	#hooks = /* @__PURE__ */ new Map();
-	timeoutMs;
-	failOnHookError;
-	onWarning;
-	constructor(options = {}) {
-		this.timeoutMs = options.timeoutMs ?? 5e3;
-		this.failOnHookError = options.failOnHookError ?? false;
-		this.onWarning = options.onWarning;
-	}
-	register(phase, hook) {
-		const key = phase;
-		const list = this.#hooks.get(key) ?? [];
-		list.push(hook);
-		this.#hooks.set(key, list);
-		return this;
+/** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
+var TraceRecorder = class {
+	#runId;
+	#clock;
+	#events = [];
+	#seq = 0;
+	constructor(runId, clock = {}) {
+		this.#runId = runId;
+		this.#clock = clock;
 	}
-	async run(phase, ctx) {
-		const hooks = [...this.#hooks.get(phase) ?? [], ...this.#hooks.get("*") ?? []];
-		for (const hook of hooks) try {
-			await this.#withTimeout(Promise.resolve().then(() => hook(ctx)), phase);
-		} catch (e) {
-			if (this.failOnHookError) throw e instanceof WebSkillError ? e : new WebSkillError("RUN_FAILED", messageOf$1(e), e);
-			this.onWarning?.(messageOf$1(e));
-		}
+	record(type, opts) {
+		const event = {
+			id: this.#clock.createId?.() ?? `evt-${++this.#seq}`,
+			runId: this.#runId,
+			ts: this.#clock.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
+			type,
+			...opts?.message !== void 0 ? { message: opts.message } : {},
+			...opts?.data !== void 0 ? { data: opts.data } : {}
+		};
+		this.#events.push(event);
+		return event;
 	}
-	#withTimeout(promise, phase) {
-		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => reject(new WebSkillError("RUN_TIMEOUT", `Lifecycle hook for phase "${phase}" timed out after ${this.timeoutMs}ms`)), this.timeoutMs);
-			promise.then((v) => {
-				clearTimeout(timer);
-				resolve(v);
-			}, (e) => {
-				clearTimeout(timer);
-				reject(e instanceof Error ? e : new Error(String(e)));
-			});
-		});
+	list() {
+		return [...this.#events];
 	}
 };
-/** 内存 MemoryStore：测试与浏览器降级用 */
-var InMemoryStore = class {
-	#data = /* @__PURE__ */ new Map();
-	async get(scope, key) {
-		return this.#data.get(scope)?.get(key);
-	}
-	async set(scope, key, value) {
-		let bucket = this.#data.get(scope);
-		if (!bucket) {
-			bucket = /* @__PURE__ */ new Map();
-			this.#data.set(scope, bucket);
-		}
-		bucket.set(key, value);
-	}
-	async delete(scope, key) {
-		this.#data.get(scope)?.delete(key);
-	}
-	async list(scope) {
-		return [...(this.#data.get(scope) ?? /* @__PURE__ */ new Map()).entries()].map(([key, value]) => ({
-			key,
-			value
-		}));
-	}
-	async clear(scope) {
-		if (scope === void 0) this.#data.clear();
-		else this.#data.delete(scope);
+/** 交互终态（取消/超时）：从工具执行深处直接终止 run */
+var RunTerminated = class extends Error {
+	outcome;
+	constructor(outcome) {
+		super(outcome.message);
+		this.outcome = outcome;
 	}
 };
-const encode = (s) => encodeURIComponent(s);
+/** bridge.request 自身异常（非超时）：恢复 running 后转为工具错误回喂 */
+var BridgeRequestError = class extends Error {};
+const baseName = (p) => p.split("/").pop() ?? p;
+const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
+const toolError = (code, message) => ({
+	ok: false,
+	content: [],
+	error: {
+		code,
+		message
+	}
+});
 /**
-* 基于 FileSystemProvider 的 MemoryStore：
-* <root>/<encodeURIComponent(scope)>/<encodeURIComponent(key)>.json
-* scope/key 全部编码防路径穿越；环境无关，构造必须显式传 fs。
-*/
-var FsMemoryStore = class {
-	#root;
-	#fs;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-	}
-	#scopeDir(scope) {
-		return `${this.#root}/${encode(scope)}`;
-	}
-	#keyPath(scope, key) {
-		return `${this.#scopeDir(scope)}/${encode(key)}.json`;
-	}
-	async get(scope, key) {
-		const path = this.#keyPath(scope, key);
-		if (!await this.#fs.exists(path)) return void 0;
-		return JSON.parse(await this.#fs.readText(path));
-	}
-	async set(scope, key, value) {
-		await this.#fs.writeText(this.#keyPath(scope, key), JSON.stringify(value, null, 2));
-	}
-	async delete(scope, key) {
-		const path = this.#keyPath(scope, key);
-		if (await this.#fs.exists(path)) await this.#fs.remove(path);
-	}
-	async list(scope) {
-		const dir = this.#scopeDir(scope);
-		if (!await this.#fs.exists(dir)) return [];
-		const out = [];
-		for (const entry of await this.#fs.list(dir)) {
-			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
-			const fileName = entry.path.split("/").pop() ?? "";
-			const key = decodeURIComponent(fileName.replace(/\.json$/, ""));
-			out.push({
-				key,
-				value: JSON.parse(await this.#fs.readText(entry.path))
-			});
-		}
-		return out.sort((a, b) => a.key.localeCompare(b.key));
-	}
-	async clear(scope) {
-		if (scope !== void 0) {
-			const dir = this.#scopeDir(scope);
-			if (await this.#fs.exists(dir)) await this.#fs.remove(dir, { recursive: true });
-			return;
-		}
-		if (!await this.#fs.exists(this.#root)) return;
-		for (const entry of await this.#fs.list(this.#root)) await this.#fs.remove(entry.path, { recursive: true });
-	}
-};
-/** 内存 ArtifactStore：测试与浏览器降级用；索引随进程生命周期存在 */
-var MemoryArtifactStore = class {
-	#byRun = /* @__PURE__ */ new Map();
-	#seq = 0;
-	async createTextArtifact(input) {
-		return this.#record({
-			runId: input.runId,
-			path: input.path,
-			type: "text",
-			size: new TextEncoder().encode(input.content).length,
-			mimeType: input.mimeType,
-			metadata: input.metadata
-		});
-	}
-	async createBinaryArtifact(input) {
-		return this.#record({
-			runId: input.runId,
-			path: input.path,
-			type: "binary",
-			size: input.content.length,
-			mimeType: input.mimeType,
-			metadata: input.metadata
-		});
-	}
-	async listArtifacts(runId) {
-		return [...this.#byRun.get(runId) ?? []];
-	}
-	#record(input) {
-		const artifact = {
-			id: `art-${++this.#seq}`,
-			runId: input.runId,
-			path: input.path,
-			type: input.type,
-			mimeType: input.mimeType,
-			size: input.size,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			metadata: input.metadata
-		};
-		const list = this.#byRun.get(input.runId) ?? [];
-		list.push(artifact);
-		this.#byRun.set(input.runId, list);
-		return artifact;
-	}
-};
-const INDEX_FILE = "index.json";
-/**
-* 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
-* 每次写入同步更新 <root>/<runId>/index.json，新实例可凭索引恢复列表。
-* 环境无关（OPFS/Node 均可），构造必须显式传 fs。
-*/
-var FsArtifactStore = class {
-	#root;
-	#fs;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-	}
-	async createTextArtifact(input) {
-		const size = new TextEncoder().encode(input.content).length;
-		await this.#fs.writeText(this.#artifactPath(input.runId, input.path), input.content);
-		return this.#persist({
-			...input,
-			type: "text",
-			size
-		});
-	}
-	async createBinaryArtifact(input) {
-		await this.#fs.writeBinary(this.#artifactPath(input.runId, input.path), input.content);
-		return this.#persist({
-			...input,
-			type: "binary",
-			size: input.content.length
-		});
-	}
-	async listArtifacts(runId) {
-		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
-		if (!await this.#fs.exists(indexPath)) return [];
-		const raw = await this.#fs.readText(indexPath);
-		return JSON.parse(raw).artifacts ?? [];
-	}
-	#artifactPath(runId, artifactPath) {
-		return resolveInsideRoot(`${this.#root}/${runId}`, artifactPath);
-	}
-	async #persist(input) {
-		const artifact = {
-			id: `${input.runId}/${input.path}`,
-			runId: input.runId,
-			path: input.path,
-			type: input.type,
-			mimeType: input.mimeType,
-			size: input.size,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			metadata: input.metadata
-		};
-		const next = [...(await this.listArtifacts(input.runId)).filter((a) => a.id !== artifact.id), artifact];
-		await this.#fs.writeText(`${this.#root}/${input.runId}/${INDEX_FILE}`, JSON.stringify({ artifacts: next }, null, 2));
-		return artifact;
-	}
-};
-const isRecord = (v) => typeof v === "object" && v !== null;
-const isNonEmptyString = (v) => typeof v === "string" && v !== "";
-/** 入站校验：非法 kind / 缺 id / 缺字段 → undefined（调用方忽略并记 warning） */
-function parseBridgeRequest(data) {
-	if (!isRecord(data)) return void 0;
-	const { kind, id } = data;
-	if (!isNonEmptyString(id)) return void 0;
-	switch (kind) {
-		case "readReference": return isNonEmptyString(data["path"]) ? {
-			kind,
-			id,
-			path: data["path"]
-		} : void 0;
-		case "writeArtifact": {
-			const { path, content, mimeType } = data;
-			const validContent = typeof content === "string" || Array.isArray(content) && content.every((n) => typeof n === "number");
-			if (!isNonEmptyString(path) || !validContent) return void 0;
-			return {
-				kind,
-				id,
-				path,
-				content,
-				...isNonEmptyString(mimeType) ? { mimeType } : {}
-			};
-		}
-		case "confirm": return isNonEmptyString(data["message"]) ? {
-			kind,
-			id,
-			message: data["message"]
-		} : void 0;
-		default: return;
-	}
-}
-function bridgeError(id, code, message) {
-	return {
-		id,
-		ok: false,
-		error: {
-			code,
-			message
-		}
-	};
-}
-/**
-* 判定 URL 是否被策略放行：
-* - 'deny-all'（默认）全拒；'allow-all' 全放
-* - { allow } 条目支持三种写法：
-*   - 精确域名 'api.example.com'（忽略端口与路径）
-*   - 通配 '*.example.com'（含 apex 与任意深度子域）
-*   - 源 'http://localhost:3000'（协议 + host + port 全等）
-* - URL 解析失败一律拒绝
-*/
-function isNetworkAllowed(policy, url) {
-	if (policy === "allow-all") return true;
-	if (policy === "deny-all" || !policy || typeof policy !== "object") return false;
-	var allow = policy.allow;
-	if (!Array.isArray(allow)) return false;
-	var parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		return false;
-	}
-	var host = parsed.hostname.toLowerCase();
-	for (var i = 0; i < allow.length; i++) {
-		var entry = allow[i];
-		if (typeof entry !== "string" || entry === "") continue;
-		if (entry.indexOf("://") !== -1) {
-			try {
-				if (new URL(entry).origin === parsed.origin) return true;
-			} catch {}
-			continue;
-		}
-		var rule = entry.toLowerCase();
-		if (rule.indexOf("*.") === 0) {
-			var suffix = rule.slice(2);
-			if (host === suffix || host.endsWith("." + suffix)) return true;
-		} else if (host === rule) return true;
-	}
-	return false;
-}
-/** 阻断 trace 用的脱敏 host（解析失败返回占位，不记录完整 URL） */
-function networkUrlHost(url) {
-	try {
-		return new URL(url).hostname;
-	} catch {
-		return "(unparseable-url)";
-	}
-}
-/**
-* Per-capability 强制授权判定（宿主侧，browser/node 执行器共用单一来源）。
-* 'require-approval' 模式下经注入的 UiBridge 发 authorize 交互；
-* once-per-run（默认）在 run 内记忆已批准能力，every-call 每次调用都问。
-*/
-var CapabilityApproval = class {
-	#uiBridge;
-	#scope;
-	/** runId → 已批准能力集合（once-per-run 记忆） */
-	#approved = /* @__PURE__ */ new Map();
-	#seq = 0;
-	constructor(deps = {}) {
-		this.#uiBridge = deps.uiBridge;
-		this.#scope = deps.scope ?? "once-per-run";
-	}
-	async authorize(input) {
-		const { runId, capability, mode } = input;
-		if (mode === false) return "disabled";
-		if (mode !== "require-approval") return "allowed";
-		if (this.#scope === "once-per-run" && this.#approved.get(runId)?.has(capability)) return "allowed";
-		if (!this.#uiBridge) return "denied";
-		if ((await this.#uiBridge.request({
-			type: "authorize",
-			id: `authorize-${runId}-${capability}-${++this.#seq}`,
-			capability,
-			message: input.message,
-			...input.details !== void 0 ? { details: input.details } : {}
-		})).value !== true) return "denied";
-		if (this.#scope === "once-per-run") {
-			let set = this.#approved.get(runId);
-			if (!set) {
-				set = /* @__PURE__ */ new Set();
-				this.#approved.set(runId, set);
-			}
-			set.add(capability);
-		}
-		return "allowed";
-	}
-};
-/** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
-var TraceRecorder = class {
-	#runId;
-	#clock;
-	#events = [];
-	#seq = 0;
-	constructor(runId, clock = {}) {
-		this.#runId = runId;
-		this.#clock = clock;
-	}
-	record(type, opts) {
-		const event = {
-			id: this.#clock.createId?.() ?? `evt-${++this.#seq}`,
-			runId: this.#runId,
-			ts: this.#clock.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
-			type,
-			...opts?.message !== void 0 ? { message: opts.message } : {},
-			...opts?.data !== void 0 ? { data: opts.data } : {}
-		};
-		this.#events.push(event);
-		return event;
-	}
-	list() {
-		return [...this.#events];
-	}
-};
-/** 交互终态（取消/超时）：从工具执行深处直接终止 run */
-var RunTerminated = class extends Error {
-	outcome;
-	constructor(outcome) {
-		super(outcome.message);
-		this.outcome = outcome;
-	}
-};
-/** bridge.request 自身异常（非超时）：恢复 running 后转为工具错误回喂 */
-var BridgeRequestError = class extends Error {};
-const baseName = (p) => p.split("/").pop() ?? p;
-const messageOf = (e) => e instanceof Error ? e.message : String(e);
-const toolError = (code, message) => ({
-	ok: false,
-	content: [],
-	error: {
-		code,
-		message
-	}
-});
-/**
-* 多轮 Agent 循环。
-* 工具失败一律转为 ToolResult{ok:false} 回喂 LLM 继续循环；
-* 缺参/确认/提问经 UiBridge 行内 await 暂停恢复；取消/超时/LLM 异常/护栏超限才终止 run。
+* 多轮 Agent 循环。
+* 工具失败一律转为 ToolResult{ok:false} 回喂 LLM 继续循环；
+* 缺参/确认/提问经 UiBridge 行内 await 暂停恢复；取消/超时/LLM 异常/护栏超限才终止 run。
 */
 var AgentLoop = class {
 	#deps;
@@ -1507,23 +662,24 @@ var AgentLoop = class {
 			now,
 			interactionSeq: 0,
 			messages: [],
-			turn: 0
+			turn: 0,
+			renderBlocks: []
 		};
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		const route = this.#deps.catalogFilter ? {
 			...input.route,
-			catalog: { skills: await this.#deps.catalogFilter(input.route.catalog.skills) }
+			catalog: { entries: await this.#deps.catalogFilter(input.route.catalog.entries) }
 		} : input.route;
 		trace.record("skill.routed", { data: {
 			strategy: route.strategy,
-			skillCount: route.catalog.skills.length
+			skillCount: route.catalog.entries.length
 		} });
 		await this.#lifecycle("route", state, { strategy: route.strategy });
 		const externalSpecs = (await Promise.all((this.#deps.externalTools ?? []).map(async (source) => {
 			try {
 				return await source.listToolSpecs();
 			} catch (e) {
-				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf(e)}` });
+				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf$1(e)}` });
 				return [];
 			}
 		}))).flat();
@@ -1537,7 +693,7 @@ var AgentLoop = class {
 		try {
 			return await this.#turnLoop(state, startMs, 1, externalSpecs);
 		} catch (e) {
-			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf(e), "RUN_FAILED");
+			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf$1(e), "RUN_FAILED");
 			throw e;
 		}
 	}
@@ -1576,7 +732,7 @@ var AgentLoop = class {
 				});
 			} catch (e) {
 				const code = e instanceof WebSkillError && (e.code === "LLM_UNAVAILABLE" || e.code === "LLM_REQUEST_FAILED") ? e.code : "LLM_REQUEST_FAILED";
-				return finish("failed", "llm-error", messageOf(e), code);
+				return finish("failed", "llm-error", messageOf$1(e), code);
 			}
 			trace.record("llm.response", { data: {
 				turn,
@@ -1628,21 +784,21 @@ var AgentLoop = class {
 		});
 		const bridge = this.#deps.uiBridge;
 		if (status === "completed" && bridge?.renderResult && this.#config.renderResult !== "off") try {
-			const request = buildRenderResult(run, output);
+			const request = buildRenderResult(run, output, state.renderBlocks);
 			await bridge.renderResult(request);
 			trace.record("ui.rendered", { data: { blockCount: request.blocks.length } });
 		} catch (e) {
-			trace.record("run.warning", { message: `renderResult failed: ${messageOf(e)}` });
+			trace.record("run.warning", { message: `renderResult failed: ${messageOf$1(e)}` });
 		}
 		if (this.#deps.snapshotStore) try {
 			await this.#deps.snapshotStore.delete(state.runId);
 		} catch (e) {
-			trace.record("run.warning", { message: `Failed to delete run snapshot: ${messageOf(e)}` });
+			trace.record("run.warning", { message: `Failed to delete run snapshot: ${messageOf$1(e)}` });
 		}
 		try {
 			await this.#lifecycle(status === "completed" ? "complete" : "fail", state, { reason });
 		} catch (e) {
-			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf(e)}` });
+			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf$1(e)}` });
 		}
 		run.trace = trace.list();
 		return {
@@ -1677,7 +833,7 @@ var AgentLoop = class {
 		try {
 			await store.save(snapshot);
 		} catch (e) {
-			state.trace.record("run.warning", { message: `Failed to save run snapshot: ${messageOf(e)}` });
+			state.trace.record("run.warning", { message: `Failed to save run snapshot: ${messageOf$1(e)}` });
 		}
 	}
 	/**
@@ -1710,7 +866,8 @@ var AgentLoop = class {
 			now,
 			interactionSeq: 0,
 			messages: snapshot.messages.map((m) => ({ ...m })),
-			turn: snapshot.turn
+			turn: snapshot.turn,
+			renderBlocks: []
 		};
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		trace.record("run.resumed", { data: {
@@ -1776,14 +933,14 @@ var AgentLoop = class {
 			try {
 				return await source.listToolSpecs();
 			} catch (e) {
-				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf(e)}` });
+				trace.record("run.warning", { message: `External tool source "${source.kind}" failed to list specs: ${messageOf$1(e)}` });
 				return [];
 			}
 		}))).flat();
 		try {
 			return await this.#turnLoop(state, startMs, snapshot.turn + 1, externalSpecs);
 		} catch (e) {
-			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf(e), "RUN_FAILED");
+			if (e instanceof WebSkillError && e.code === "RUN_FAILED") return this.#finish(state, "failed", "hook-error", messageOf$1(e), "RUN_FAILED");
 			throw e;
 		}
 	}
@@ -1875,8 +1032,8 @@ var AgentLoop = class {
 				message: e.message,
 				code: "RUN_INTERACTION_TIMEOUT"
 			});
-			state.trace.record("run.warning", { message: `UiBridge request failed: ${messageOf(e)}` });
-			throw new BridgeRequestError(messageOf(e));
+			state.trace.record("run.warning", { message: `UiBridge request failed: ${messageOf$1(e)}` });
+			throw new BridgeRequestError(messageOf$1(e));
 		}
 		if (response.cancelled) throw new RunTerminated({
 			status: "cancelled",
@@ -1922,11 +1079,20 @@ var AgentLoop = class {
 				result = source ? await source.call(call.name, call.arguments) : toolError(resolution.code, resolution.message);
 			}
 		}
-		if (result.ok) state.trace.record("tool.completed", { data: {
-			name: call.name,
-			callId: call.id
-		} });
-		else state.trace.record("tool.failed", {
+		if (result.ok) {
+			state.trace.record("tool.completed", { data: {
+				name: call.name,
+				callId: call.id
+			} });
+			for (const item of result.content) {
+				if (item.type !== "json") continue;
+				const chart = extractChartSpec(item.data);
+				if (chart) state.renderBlocks.push({
+					type: "chart",
+					chart
+				});
+			}
+		} else state.trace.record("tool.failed", {
 			message: result.error?.message,
 			data: {
 				name: call.name,
@@ -1980,7 +1146,7 @@ var AgentLoop = class {
 			};
 		} catch (e) {
 			if (e instanceof WebSkillError && e.code === "SKILL_NOT_FOUND" && (this.#deps.skillProviders?.length ?? 0) > 0) return this.#handleReadExternalSkill(skillName, pathArg, state);
-			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `read_skill_file failed: ${messageOf(e)}`);
+			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `read_skill_file failed: ${messageOf$1(e)}`);
 		}
 	}
 	/** 经外部技能提供者读取技能文档/资源；skillKey 为技能名或 mcp:// URI */
@@ -2023,411 +1189,794 @@ var AgentLoop = class {
 		}
 		return toolError("SKILL_NOT_FOUND", `Skill not found via external providers: ${skillKey}`);
 	}
-	/** 首次读到 SKILL.md 时激活技能：加载其 scripts 工具定义，供后续轮次使用 */
-	async #activateSkill(skillName, state) {
+	/** 首次读到 SKILL.md 时激活技能：加载其 scripts 工具定义，供后续轮次使用；dependencies 级联激活（via 记录来源） */
+	async #activateSkill(skillName, state, via) {
 		state.activated.add(skillName);
-		state.trace.record("skill.activated", { data: { skillName } });
+		state.trace.record("skill.activated", { data: {
+			skillName,
+			...via ? { via } : {}
+		} });
 		await this.#lifecycle("activate", state, { skillName });
 		await this.#writeActivationMemory(skillName, state);
 		const root = this.#deps.skillIndex.get(skillName);
 		if (!root) return "";
-		const executor = this.#deps.executor;
-		if (!executor) return "";
 		let allowedTools;
+		let dependencies = [];
 		try {
 			const { metadata } = parseSkillMarkdown(await this.#deps.fs.readText(`${root}/SKILL.md`));
+			const rawDeps = metadata["dependencies"];
+			if (Array.isArray(rawDeps)) dependencies = rawDeps.filter((d) => typeof d === "string");
 			const raw = metadata["allowed-tools"];
 			if (raw !== void 0) if (Array.isArray(raw)) allowedTools = raw.filter((e) => typeof e === "string");
 			else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "allowed-tools" metadata entry; ignored` });
 		} catch {}
+		const executor = this.#deps.executor;
 		const loaded = [];
-		let scriptFiles = [];
+		if (executor) {
+			let scriptFiles = [];
+			try {
+				scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
+			} catch {
+				scriptFiles = [];
+			}
+			for (const file of scriptFiles) {
+				const match = /^(.*)\.(ts|js)$/.exec(file);
+				if (!match?.[1]) continue;
+				if (allowedTools && !allowedTools.includes(match[1])) continue;
+				try {
+					const def = await executor.loadDefinition(root, match[1]);
+					await this.#enrichDefinition(root, match[1], def, state);
+					state.activatedTools.set(def.name, def);
+					loaded.push(def.name);
+				} catch {}
+			}
+		}
+		let note = loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "";
+		for (const dep of dependencies) {
+			if (state.activated.has(dep)) continue;
+			if (!this.#deps.skillIndex.has(dep)) {
+				state.trace.record("run.warning", { message: `Skill "${skillName}" depends on unknown skill "${dep}"; skipped` });
+				continue;
+			}
+			note += await this.#activateSkill(dep, state, skillName);
+		}
+		return note;
+	}
+	/**
+	* D2 Schema 兜底链（同一 run 内激活时只算一次）：
+	* 显式 inputSchema > sidecar scripts/<name>.schema.json > schemaInferer 推导 > schemaUnavailable
+	*/
+	async #enrichDefinition(skillRoot, scriptName, def, state) {
+		if (def.inputSchema) return;
+		const sidecar = `${skillRoot}/scripts/${scriptName}.schema.json`;
+		if (await this.#deps.fs.exists(sidecar)) try {
+			def.inputSchema = JSON.parse(await this.#deps.fs.readText(sidecar));
+			return;
+		} catch (e) {
+			state.trace.record("run.warning", { message: `Failed to parse schema sidecar ${sidecar}: ${messageOf$1(e)}` });
+		}
+		if (!this.#deps.schemaInferer) return;
+		for (const ext of ["ts", "js"]) {
+			const scriptPath = `${skillRoot}/scripts/${scriptName}.${ext}`;
+			if (!await this.#deps.fs.exists(scriptPath)) continue;
+			const inferred = this.#deps.schemaInferer.inferSchemaFromSource(await this.#deps.fs.readText(scriptPath), { fileName: `${scriptName}.${ext}` });
+			if (inferred) def.inputSchema = inferred;
+			return;
+		}
+	}
+	async #handleScriptTool(call, skillName, scriptName, state) {
+		const root = this.#deps.skillIndex.get(skillName);
+		if (!root) return toolError("TOOL_NOT_FOUND", `Skill "${skillName}" is not in the catalog`);
+		if (!this.#deps.executor) return toolError("TOOL_UNSUPPORTED", `No script executor is configured; script tool "${call.name}" cannot run`);
+		const def = state.activatedTools.get(call.name);
+		if (!def) return toolError("TOOL_NOT_FOUND", `Tool "${call.name}" is not available for skill "${skillName}"`);
+		let args = call.arguments;
+		const missing = (def.inputSchema?.required ?? []).filter((key) => args[key] === void 0);
+		if (missing.length > 0 && this.#deps.uiBridge && this.#policy.missingParams === "user" && def.inputSchema) try {
+			const value = await this.#interact(state, {
+				type: "form",
+				id: this.#nextInteractionId(state),
+				title: `Missing parameters for ${call.name}`,
+				fields: schemaToForm(def.inputSchema, args)
+			}, {
+				tool: call.name,
+				missing
+			});
+			if (typeof value === "object" && value !== null) args = {
+				...args,
+				...value
+			};
+		} catch (e) {
+			if (e instanceof BridgeRequestError) return toolError("UI_UNAVAILABLE", `Parameter form failed: ${e.message}`);
+			throw e;
+		}
+		const context = createScriptContext({
+			fs: this.#deps.fs,
+			artifactStore: this.#deps.artifactStore,
+			skillName,
+			skillRoot: root,
+			runId: state.runId,
+			confirm: (message) => this.#confirm(message, state),
+			onWarning: (message) => state.trace.record("run.warning", { message })
+		});
+		try {
+			const before = new Set((await this.#deps.artifactStore.listArtifacts(state.runId)).map((a) => a.id));
+			const result = await this.#deps.executor.execute({
+				skillRoot: root,
+				scriptName,
+				args,
+				context,
+				timeoutMs: state.toolTimeoutMs
+			});
+			const fresh = (await this.#deps.artifactStore.listArtifacts(state.runId)).filter((a) => !before.has(a.id));
+			if (fresh.length > 0) result.artifacts = [...result.artifacts ?? [], ...fresh];
+			await this.#bumpSkillStat(skillName, result.ok ? "successes" : "failures", state);
+			return result;
+		} catch (e) {
+			if (e instanceof RunTerminated) throw e;
+			await this.#bumpSkillStat(skillName, "failures", state);
+			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `Tool "${call.name}" failed: ${messageOf$1(e)}`);
+		}
+	}
+	/** context.confirm 触发点：默认真实询问；auto-approve 直通；无 bridge 降级直通 + warning */
+	async #confirm(message, state) {
+		if (this.#policy.confirmations === "auto-approve") return true;
+		if (!this.#deps.uiBridge) {
+			state.trace.record("run.warning", { message: "No UiBridge configured; confirm() auto-approved" });
+			return true;
+		}
+		try {
+			return await this.#interact(state, {
+				type: "confirm",
+				id: this.#nextInteractionId(state),
+				message,
+				defaultValue: true
+			}, { kind: "confirm" }) !== false;
+		} catch (e) {
+			if (e instanceof BridgeRequestError) {
+				state.trace.record("run.warning", { message: `confirm() bridge failed, auto-approved: ${e.message}` });
+				return true;
+			}
+			throw e;
+		}
+	}
+	#nextInteractionId(state) {
+		return `int-${++state.interactionSeq}`;
+	}
+	async #memoryGet(scope, key) {
+		try {
+			return await this.#deps.memory?.get(scope, key);
+		} catch {
+			return;
+		}
+	}
+	async #memorySet(scope, key, value, state) {
+		try {
+			await this.#deps.memory?.set(scope, key, value);
+		} catch (e) {
+			state.trace.record("run.warning", { message: `Memory write failed: ${messageOf$1(e)}` });
+		}
+	}
+	async #writeActivationMemory(skillName, state) {
+		if (!this.#deps.memory) return;
+		const sessionScope = `session:${state.run.sessionId}`;
+		await this.#memorySet(sessionScope, "activeSkillNames", [...state.activated].sort(), state);
+		await this.#bumpSkillStat(skillName, "activations", state);
+		if (this.#deps.longTerm?.enabled) {
+			const userScope = `user:${this.#deps.longTerm.userId}`;
+			const usage = await this.#memoryGet(userScope, "skillUsage") ?? {};
+			usage[skillName] = (usage[skillName] ?? 0) + 1;
+			await this.#memorySet(userScope, "skillUsage", usage, state);
+		}
+	}
+	async #bumpSkillStat(skillName, field, state) {
+		if (!this.#deps.memory) return;
+		const scope = `skill:${skillName}`;
+		const stats = await this.#memoryGet(scope, "stats") ?? {
+			activations: 0,
+			successes: 0,
+			failures: 0
+		};
+		stats[field] = (stats[field] ?? 0) + 1;
+		await this.#memorySet(scope, "stats", stats, state);
+	}
+	async #appendParamHistory(state, request, value) {
+		if (!this.#deps.memory) return;
+		const scope = `session:${state.run.sessionId}`;
+		const history = await this.#memoryGet(scope, "paramHistory") ?? [];
+		history.push({
+			ts: state.now(),
+			interactionId: request.id,
+			type: request.type,
+			value
+		});
+		await this.#memorySet(scope, "paramHistory", history, state);
+	}
+};
+/**
+* Catalog 合并：同名本地优先；外部条目的 mcp:// 根 URI 保留，
+* 调用方可凭 URI 强制选择外部技能（绕过本地优先）。
+*/
+function mergeCatalogEntries(localEntries, providerEntries) {
+	const byName = new Map(localEntries.map((e) => [e.name, e]));
+	for (const entry of providerEntries) if (!byName.has(entry.name)) byName.set(entry.name, entry);
+	return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+const RUN_SNAPSHOT_SCHEMA_VERSION = 1;
+const SNAPSHOT_SUFFIX = ".snapshot.json";
+/**
+* FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
+* 坏 JSON → RUN_SNAPSHOT_INCOMPATIBLE 并自动清理坏文件；runId 过路径安全校验。
+* @experimental
+*/
+var FsRunSnapshotStore = class {
+	#root;
+	#fs;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
+	}
+	#path(runId) {
+		return resolveInsideRoot(this.#root, `${runId}${SNAPSHOT_SUFFIX}`);
+	}
+	async save(snapshot) {
+		await this.#fs.writeText(this.#path(snapshot.runId), JSON.stringify(snapshot, null, 2));
+	}
+	async load(runId) {
+		const path = this.#path(runId);
+		if (!await this.#fs.exists(path)) return void 0;
+		let parsed;
 		try {
-			scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
-		} catch {
-			return "";
+			parsed = JSON.parse(await this.#fs.readText(path));
+		} catch (e) {
+			await this.#fs.remove(path).catch(() => void 0);
+			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" is corrupted and was deleted: ${e instanceof Error ? e.message : String(e)}`, e);
+		}
+		const snapshot = parsed;
+		if (typeof snapshot !== "object" || snapshot === null || snapshot.runId !== runId) {
+			await this.#fs.remove(path).catch(() => void 0);
+			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
 		}
-		for (const file of scriptFiles) {
-			const match = /^(.*)\.(ts|js)$/.exec(file);
-			if (!match?.[1]) continue;
-			if (allowedTools && !allowedTools.includes(match[1])) continue;
+		return snapshot;
+	}
+	async delete(runId) {
+		const path = this.#path(runId);
+		if (await this.#fs.exists(path)) await this.#fs.remove(path);
+	}
+	async list() {
+		if (!await this.#fs.exists(this.#root)) return [];
+		const out = [];
+		for (const entry of await this.#fs.list(this.#root)) {
+			if (entry.type !== "file" || !entry.path.endsWith(SNAPSHOT_SUFFIX)) continue;
 			try {
-				const def = await executor.loadDefinition(root, match[1]);
-				await this.#enrichDefinition(root, match[1], def, state);
-				state.activatedTools.set(def.name, def);
-				loaded.push(def.name);
+				out.push(JSON.parse(await this.#fs.readText(entry.path)));
 			} catch {}
 		}
-		return loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "";
+		return out.sort((a, b) => a.snapshotAt.localeCompare(b.snapshotAt));
+	}
+};
+/**
+* runtime 门面：组合 discovery / router / agent loop / lifecycle
+* @stable
+*/
+var WebSkillRuntime = class {
+	#deps;
+	#discovery;
+	#router;
+	#session;
+	#events;
+	#catalogCache;
+	constructor(deps) {
+		this.#deps = deps;
+		this.#discovery = new SkillDiscovery(deps.fs, deps.roots);
+		this.#router = deps.router ?? new ProgressiveRouter();
+		this.#events = deps.eventBus ?? new EventBus();
+		this.#session = {
+			id: `session-${Math.random().toString(36).slice(2, 10)}`,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+	}
+	get session() {
+		return this.#session;
+	}
+	/** 生命周期事件总线（只读观测） */
+	get events() {
+		return this.#events;
+	}
+	async discover() {
+		const result = await this.#discovery.discover();
+		this.#catalogCache = {
+			catalog: buildCatalog(result.entries),
+			index: new Map(result.entries.map((e) => [e.name, e.root]))
+		};
+		return result;
+	}
+	async run(userPrompt) {
+		if (!this.#catalogCache) await this.discover();
+		const cache = this.#catalogCache;
+		if (!cache) throw new Error("discover() did not populate the catalog cache");
+		const providerEntries = (await Promise.all((this.#deps.skillProviders ?? []).map(async (p) => {
+			try {
+				return await p.listSkills();
+			} catch {
+				return [];
+			}
+		}))).flat();
+		const catalog = providerEntries.length > 0 ? { entries: mergeCatalogEntries(cache.catalog.entries, providerEntries) } : cache.catalog;
+		const filteredCatalog = this.#deps.catalogFilter ? { entries: await this.#deps.catalogFilter(catalog.entries) } : catalog;
+		const route = await this.#router.route(filteredCatalog);
+		const result = await new AgentLoop({
+			llm: this.#deps.llm,
+			executor: this.#deps.executor,
+			schemaInferer: this.#deps.schemaInferer,
+			artifactStore: this.#deps.artifactStore,
+			fs: this.#deps.fs,
+			skillIndex: cache.index,
+			model: this.#deps.model,
+			uiBridge: this.#deps.uiBridge,
+			interaction: this.#deps.interaction,
+			memory: this.#deps.memory,
+			hooks: this.#deps.hooks,
+			eventBus: this.#events,
+			longTerm: this.#deps.longTerm,
+			externalTools: this.#deps.externalTools,
+			skillProviders: this.#deps.skillProviders,
+			catalogFilter: this.#deps.catalogFilter,
+			snapshotStore: this.#deps.snapshotStore
+		}, this.#deps.config).run({
+			sessionId: this.#session.id,
+			userPrompt,
+			route
+		});
+		if (this.#deps.onSkillMiss && result.run.activeSkillNames.length === 0) this.#deps.onSkillMiss({
+			prompt: userPrompt,
+			run: result.run
+		}).catch((e) => {
+			result.run.trace.push({
+				id: `evt-miss-${Date.now()}`,
+				runId: result.run.id,
+				ts: (/* @__PURE__ */ new Date()).toISOString(),
+				type: "run.warning",
+				message: `onSkillMiss hook failed: ${e instanceof Error ? e.message : String(e)}`
+			});
+		});
+		return result;
+	}
+	/** D3：列出可恢复的 interrupted run（供 UI 展示"未完成任务"） */
+	async listInterruptedRuns() {
+		if (!this.#deps.snapshotStore) return [];
+		return this.#deps.snapshotStore.list();
 	}
 	/**
-	* D2 Schema 兜底链（同一 run 内激活时只算一次）：
-	* 显式 inputSchema > sidecar scripts/<name>.schema.json > schemaInferer 推导 > schemaUnavailable
+	* D3 恢复 interrupted run：
+	* 不存在 → RUN_SNAPSHOT_NOT_FOUND；schemaVersion 不匹配 → 删除 + RUN_SNAPSHOT_INCOMPATIBLE；
+	* 已过期 → interaction-timeout 终态并删快照；否则重建 LoopState 重新发起交互续跑。
+	* @experimental
 	*/
-	async #enrichDefinition(skillRoot, scriptName, def, state) {
-		if (def.inputSchema) return;
-		const sidecar = `${skillRoot}/scripts/${scriptName}.schema.json`;
-		if (await this.#deps.fs.exists(sidecar)) try {
-			def.inputSchema = JSON.parse(await this.#deps.fs.readText(sidecar));
-			return;
-		} catch (e) {
-			state.trace.record("run.warning", { message: `Failed to parse schema sidecar ${sidecar}: ${messageOf(e)}` });
-		}
-		if (!this.#deps.schemaInferer) return;
-		for (const ext of ["ts", "js"]) {
-			const scriptPath = `${skillRoot}/scripts/${scriptName}.${ext}`;
-			if (!await this.#deps.fs.exists(scriptPath)) continue;
-			const inferred = this.#deps.schemaInferer.inferSchemaFromSource(await this.#deps.fs.readText(scriptPath), { fileName: `${scriptName}.${ext}` });
-			if (inferred) def.inputSchema = inferred;
-			return;
+	async resumeRun(runId) {
+		const store = this.#deps.snapshotStore;
+		const snapshot = store ? await store.load(runId) : void 0;
+		if (!snapshot) throw new WebSkillError("RUN_SNAPSHOT_NOT_FOUND", `No snapshot found for run "${runId}"`);
+		if (snapshot.schemaVersion !== 1) {
+			await store.delete(runId);
+			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has incompatible schemaVersion ${String(snapshot.schemaVersion)}`);
 		}
-	}
-	async #handleScriptTool(call, skillName, scriptName, state) {
-		const root = this.#deps.skillIndex.get(skillName);
-		if (!root) return toolError("TOOL_NOT_FOUND", `Skill "${skillName}" is not in the catalog`);
-		if (!this.#deps.executor) return toolError("TOOL_UNSUPPORTED", `No script executor is configured; script tool "${call.name}" cannot run`);
-		const def = state.activatedTools.get(call.name);
-		if (!def) return toolError("TOOL_NOT_FOUND", `Tool "${call.name}" is not available for skill "${skillName}"`);
-		let args = call.arguments;
-		const missing = (def.inputSchema?.required ?? []).filter((key) => args[key] === void 0);
-		if (missing.length > 0 && this.#deps.uiBridge && this.#policy.missingParams === "user" && def.inputSchema) try {
-			const value = await this.#interact(state, {
-				type: "form",
-				id: this.#nextInteractionId(state),
-				title: `Missing parameters for ${call.name}`,
-				fields: schemaToForm(def.inputSchema, args)
-			}, {
-				tool: call.name,
-				missing
-			});
-			if (typeof value === "object" && value !== null) args = {
-				...args,
-				...value
+		if (Date.now() > Date.parse(snapshot.interactionExpiresAt)) {
+			await store.delete(runId);
+			const endedAt = (/* @__PURE__ */ new Date()).toISOString();
+			return {
+				output: "Interaction timed out before the run was resumed",
+				run: {
+					id: runId,
+					sessionId: snapshot.sessionId,
+					status: "failed",
+					phase: "fail",
+					userPrompt: snapshot.userPrompt,
+					startedAt: snapshot.startedAt,
+					endedAt,
+					terminationReason: "interaction-timeout",
+					activeSkillNames: snapshot.activeSkillNames,
+					artifacts: [],
+					trace: [{
+						id: `evt-expired-${runId}`,
+						runId,
+						ts: endedAt,
+						type: "run.failed",
+						message: `Interaction timed out before the run was resumed (expired at ${snapshot.interactionExpiresAt})`,
+						data: {
+							reason: "interaction-timeout",
+							code: "RUN_INTERACTION_TIMEOUT"
+						}
+					}]
+				}
 			};
-		} catch (e) {
-			if (e instanceof BridgeRequestError) return toolError("UI_UNAVAILABLE", `Parameter form failed: ${e.message}`);
-			throw e;
 		}
-		const context = createScriptContext({
-			fs: this.#deps.fs,
+		if (!this.#catalogCache) await this.discover();
+		const cache = this.#catalogCache;
+		if (!cache) throw new WebSkillError("RUN_FAILED", "discover() did not populate the catalog cache");
+		return new AgentLoop({
+			llm: this.#deps.llm,
+			executor: this.#deps.executor,
+			schemaInferer: this.#deps.schemaInferer,
 			artifactStore: this.#deps.artifactStore,
-			skillName,
-			skillRoot: root,
-			runId: state.runId,
-			confirm: (message) => this.#confirm(message, state),
-			onWarning: (message) => state.trace.record("run.warning", { message })
+			fs: this.#deps.fs,
+			skillIndex: cache.index,
+			model: this.#deps.model,
+			uiBridge: this.#deps.uiBridge,
+			interaction: this.#deps.interaction,
+			memory: this.#deps.memory,
+			hooks: this.#deps.hooks,
+			eventBus: this.#events,
+			longTerm: this.#deps.longTerm,
+			externalTools: this.#deps.externalTools,
+			skillProviders: this.#deps.skillProviders,
+			catalogFilter: this.#deps.catalogFilter,
+			snapshotStore: store
+		}, this.#deps.config).resume(snapshot);
+	}
+};
+/**
+* navigator.webskill 门面装配层：零新业务逻辑，全部直转
+* SkillDiscovery / validateSkills / WebSkillRuntime / SkillManager。
+* @stable
+*/
+function createWebSkillApi(deps) {
+	const { fs, roots } = deps;
+	let runtime;
+	const lazyRuntime = () => {
+		runtime ??= new WebSkillRuntime({
+			fs,
+			roots,
+			llm: deps.llm,
+			...deps.executor ? { executor: deps.executor } : {},
+			...deps.artifactStore ? { artifactStore: deps.artifactStore } : {},
+			...deps.loopConfig ? { config: deps.loopConfig } : {}
 		});
-		try {
-			const before = new Set((await this.#deps.artifactStore.listArtifacts(state.runId)).map((a) => a.id));
-			const result = await this.#deps.executor.execute({
-				skillRoot: root,
-				scriptName,
-				args,
-				context,
-				timeoutMs: state.toolTimeoutMs
-			});
-			const fresh = (await this.#deps.artifactStore.listArtifacts(state.runId)).filter((a) => !before.has(a.id));
-			if (fresh.length > 0) result.artifacts = [...result.artifacts ?? [], ...fresh];
-			await this.#bumpSkillStat(skillName, result.ok ? "successes" : "failures", state);
-			return result;
-		} catch (e) {
-			if (e instanceof RunTerminated) throw e;
-			await this.#bumpSkillStat(skillName, "failures", state);
-			return toolError(e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED", `Tool "${call.name}" failed: ${messageOf(e)}`);
+		return runtime;
+	};
+	const requireManager = () => {
+		if (!deps.skillManager) throw new WebSkillError("TOOL_UNSUPPORTED", "No skill manager is configured; install/uninstall is unavailable");
+		return deps.skillManager;
+	};
+	return {
+		async discover(path) {
+			const { entries } = await new SkillDiscovery(fs, [path]).discover();
+			return buildCatalog(entries);
+		},
+		async read(name) {
+			const { entries } = await new SkillDiscovery(fs, roots).discover();
+			const entry = entries.find((e) => e.name === name);
+			if (!entry) throw new WebSkillError("SKILL_NOT_FOUND", `Unknown skill: ${name}`);
+			const skillMdPath = `${entry.root}/SKILL.md`;
+			const { metadata, body } = parseSkillMarkdown(await fs.readText(skillMdPath));
+			return {
+				metadata,
+				body,
+				location: {
+					skillRoot: entry.root,
+					skillMdPath,
+					source: entry.source
+				}
+			};
+		},
+		validate(path) {
+			return validateSkills(fs, [path]);
+		},
+		async run(prompt) {
+			return (await lazyRuntime().run(prompt)).run;
+		},
+		async install(url) {
+			const manifest = await requireManager().install(sourceFromUrl(url));
+			return {
+				name: manifest.name,
+				...manifest.version !== void 0 ? { version: manifest.version } : {},
+				installedAt: manifest.installedAt,
+				integrity: manifest.integrity
+			};
+		},
+		async uninstall(name) {
+			await requireManager().uninstall(name);
 		}
+	};
+}
+/** install URL 分派：http(s)…​.zip → http；…​.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；其余 → local */
+function sourceFromUrl(url) {
+	const bare = url.split("?")[0] ?? url;
+	if (/^https?:\/\//.test(url) && bare.endsWith(".zip")) return {
+		type: "http",
+		url
+	};
+	if (bare.endsWith(".git")) return {
+		type: "git",
+		url
+	};
+	return {
+		type: "local",
+		path: url
+	};
+}
+const messageOf = (e) => e instanceof Error ? e.message : String(e);
+/** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
+var HookRunner = class {
+	#hooks = /* @__PURE__ */ new Map();
+	timeoutMs;
+	failOnHookError;
+	onWarning;
+	constructor(options = {}) {
+		this.timeoutMs = options.timeoutMs ?? 5e3;
+		this.failOnHookError = options.failOnHookError ?? false;
+		this.onWarning = options.onWarning;
 	}
-	/** context.confirm 触发点：默认真实询问；auto-approve 直通；无 bridge 降级直通 + warning */
-	async #confirm(message, state) {
-		if (this.#policy.confirmations === "auto-approve") return true;
-		if (!this.#deps.uiBridge) {
-			state.trace.record("run.warning", { message: "No UiBridge configured; confirm() auto-approved" });
-			return true;
-		}
-		try {
-			return await this.#interact(state, {
-				type: "confirm",
-				id: this.#nextInteractionId(state),
-				message,
-				defaultValue: true
-			}, { kind: "confirm" }) !== false;
+	register(phase, hook) {
+		const key = phase;
+		const list = this.#hooks.get(key) ?? [];
+		list.push(hook);
+		this.#hooks.set(key, list);
+		return this;
+	}
+	async run(phase, ctx) {
+		const hooks = [...this.#hooks.get(phase) ?? [], ...this.#hooks.get("*") ?? []];
+		for (const hook of hooks) try {
+			await this.#withTimeout(Promise.resolve().then(() => hook(ctx)), phase);
 		} catch (e) {
-			if (e instanceof BridgeRequestError) {
-				state.trace.record("run.warning", { message: `confirm() bridge failed, auto-approved: ${e.message}` });
-				return true;
-			}
-			throw e;
+			if (this.failOnHookError) throw e instanceof WebSkillError ? e : new WebSkillError("RUN_FAILED", messageOf(e), e);
+			this.onWarning?.(messageOf(e));
 		}
 	}
-	#nextInteractionId(state) {
-		return `int-${++state.interactionSeq}`;
+	#withTimeout(promise, phase) {
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => reject(new WebSkillError("RUN_TIMEOUT", `Lifecycle hook for phase "${phase}" timed out after ${this.timeoutMs}ms`)), this.timeoutMs);
+			promise.then((v) => {
+				clearTimeout(timer);
+				resolve(v);
+			}, (e) => {
+				clearTimeout(timer);
+				reject(e instanceof Error ? e : new Error(String(e)));
+			});
+		});
 	}
-	async #memoryGet(scope, key) {
-		try {
-			return await this.#deps.memory?.get(scope, key);
-		} catch {
-			return;
-		}
+};
+const encode = (s) => encodeURIComponent(s);
+/**
+* 基于 FileSystemProvider 的 MemoryStore：
+* <root>/<encodeURIComponent(scope)>/<encodeURIComponent(key)>.json
+* scope/key 全部编码防路径穿越；环境无关，构造必须显式传 fs。
+*/
+var FsMemoryStore = class {
+	#root;
+	#fs;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
 	}
-	async #memorySet(scope, key, value, state) {
-		try {
-			await this.#deps.memory?.set(scope, key, value);
-		} catch (e) {
-			state.trace.record("run.warning", { message: `Memory write failed: ${messageOf(e)}` });
-		}
+	#scopeDir(scope) {
+		return `${this.#root}/${encode(scope)}`;
 	}
-	async #writeActivationMemory(skillName, state) {
-		if (!this.#deps.memory) return;
-		const sessionScope = `session:${state.run.sessionId}`;
-		await this.#memorySet(sessionScope, "activeSkillNames", [...state.activated].sort(), state);
-		await this.#bumpSkillStat(skillName, "activations", state);
-		if (this.#deps.longTerm?.enabled) {
-			const userScope = `user:${this.#deps.longTerm.userId}`;
-			const usage = await this.#memoryGet(userScope, "skillUsage") ?? {};
-			usage[skillName] = (usage[skillName] ?? 0) + 1;
-			await this.#memorySet(userScope, "skillUsage", usage, state);
-		}
+	#keyPath(scope, key) {
+		return `${this.#scopeDir(scope)}/${encode(key)}.json`;
 	}
-	async #bumpSkillStat(skillName, field, state) {
-		if (!this.#deps.memory) return;
-		const scope = `skill:${skillName}`;
-		const stats = await this.#memoryGet(scope, "stats") ?? {
-			activations: 0,
-			successes: 0,
-			failures: 0
-		};
-		stats[field] = (stats[field] ?? 0) + 1;
-		await this.#memorySet(scope, "stats", stats, state);
+	async get(scope, key) {
+		const path = this.#keyPath(scope, key);
+		if (!await this.#fs.exists(path)) return void 0;
+		return JSON.parse(await this.#fs.readText(path));
 	}
-	async #appendParamHistory(state, request, value) {
-		if (!this.#deps.memory) return;
-		const scope = `session:${state.run.sessionId}`;
-		const history = await this.#memoryGet(scope, "paramHistory") ?? [];
-		history.push({
-			ts: state.now(),
-			interactionId: request.id,
-			type: request.type,
-			value
-		});
-		await this.#memorySet(scope, "paramHistory", history, state);
+	async set(scope, key, value) {
+		await this.#fs.writeText(this.#keyPath(scope, key), JSON.stringify(value, null, 2));
+	}
+	async delete(scope, key) {
+		const path = this.#keyPath(scope, key);
+		if (await this.#fs.exists(path)) await this.#fs.remove(path);
+	}
+	async list(scope) {
+		const dir = this.#scopeDir(scope);
+		if (!await this.#fs.exists(dir)) return [];
+		const out = [];
+		for (const entry of await this.#fs.list(dir)) {
+			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
+			const fileName = entry.path.split("/").pop() ?? "";
+			const key = decodeURIComponent(fileName.replace(/\.json$/, ""));
+			out.push({
+				key,
+				value: JSON.parse(await this.#fs.readText(entry.path))
+			});
+		}
+		return out.sort((a, b) => a.key.localeCompare(b.key));
+	}
+	async clear(scope) {
+		if (scope !== void 0) {
+			const dir = this.#scopeDir(scope);
+			if (await this.#fs.exists(dir)) await this.#fs.remove(dir, { recursive: true });
+			return;
+		}
+		if (!await this.#fs.exists(this.#root)) return;
+		for (const entry of await this.#fs.list(this.#root)) await this.#fs.remove(entry.path, { recursive: true });
 	}
 };
+const INDEX_FILE = "index.json";
 /**
-* Catalog 合并：同名本地优先；外部条目的 mcp:// 根 URI 保留，
-* 调用方可凭 URI 强制选择外部技能（绕过本地优先）。
-*/
-function mergeCatalogEntries(localEntries, providerEntries) {
-	const byName = new Map(localEntries.map((e) => [e.name, e]));
-	for (const entry of providerEntries) if (!byName.has(entry.name)) byName.set(entry.name, entry);
-	return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
-}
-const RUN_SNAPSHOT_SCHEMA_VERSION = 1;
-const SNAPSHOT_SUFFIX = ".snapshot.json";
-/**
-* FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
-* 坏 JSON → RUN_SNAPSHOT_INCOMPATIBLE 并自动清理坏文件；runId 过路径安全校验。
+* 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
+* 每次写入同步更新 <root>/<runId>/index.json，新实例可凭索引恢复列表。
+* 环境无关（OPFS/Node 均可），构造必须显式传 fs。
 */
-var FsRunSnapshotStore = class {
+var FsArtifactStore = class {
 	#root;
 	#fs;
 	constructor(deps) {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
 	}
-	#path(runId) {
-		return resolveInsideRoot(this.#root, `${runId}${SNAPSHOT_SUFFIX}`);
+	async createTextArtifact(input) {
+		const size = new TextEncoder().encode(input.content).length;
+		await this.#fs.writeText(this.#artifactPath(input.runId, input.path), input.content);
+		return this.#persist({
+			...input,
+			type: "text",
+			size
+		});
 	}
-	async save(snapshot) {
-		await this.#fs.writeText(this.#path(snapshot.runId), JSON.stringify(snapshot, null, 2));
+	async createBinaryArtifact(input) {
+		await this.#fs.writeBinary(this.#artifactPath(input.runId, input.path), input.content);
+		return this.#persist({
+			...input,
+			type: "binary",
+			size: input.content.length
+		});
 	}
-	async load(runId) {
-		const path = this.#path(runId);
-		if (!await this.#fs.exists(path)) return void 0;
-		let parsed;
-		try {
-			parsed = JSON.parse(await this.#fs.readText(path));
-		} catch (e) {
-			await this.#fs.remove(path).catch(() => void 0);
-			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" is corrupted and was deleted: ${e instanceof Error ? e.message : String(e)}`, e);
-		}
-		const snapshot = parsed;
-		if (typeof snapshot !== "object" || snapshot === null || snapshot.runId !== runId) {
-			await this.#fs.remove(path).catch(() => void 0);
-			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
+	async listArtifacts(runId) {
+		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
+		if (!await this.#fs.exists(indexPath)) return [];
+		const raw = await this.#fs.readText(indexPath);
+		return JSON.parse(raw).artifacts ?? [];
+	}
+	#artifactPath(runId, artifactPath) {
+		return resolveInsideRoot(`${this.#root}/${runId}`, artifactPath);
+	}
+	async #persist(input) {
+		const artifact = {
+			id: `${input.runId}/${input.path}`,
+			runId: input.runId,
+			path: input.path,
+			type: input.type,
+			mimeType: input.mimeType,
+			size: input.size,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			metadata: input.metadata
+		};
+		const next = [...(await this.listArtifacts(input.runId)).filter((a) => a.id !== artifact.id), artifact];
+		await this.#fs.writeText(`${this.#root}/${input.runId}/${INDEX_FILE}`, JSON.stringify({ artifacts: next }, null, 2));
+		return artifact;
+	}
+};
+const isRecord = (v) => typeof v === "object" && v !== null;
+const isNonEmptyString = (v) => typeof v === "string" && v !== "";
+/** 入站校验：非法 kind / 缺 id / 缺字段 → undefined（调用方忽略并记 warning） */
+function parseBridgeRequest(data) {
+	if (!isRecord(data)) return void 0;
+	const { kind, id } = data;
+	if (!isNonEmptyString(id)) return void 0;
+	switch (kind) {
+		case "readReference": return isNonEmptyString(data["path"]) ? {
+			kind,
+			id,
+			path: data["path"]
+		} : void 0;
+		case "writeArtifact": {
+			const { path, content, mimeType } = data;
+			const validContent = typeof content === "string" || Array.isArray(content) && content.every((n) => typeof n === "number");
+			if (!isNonEmptyString(path) || !validContent) return void 0;
+			return {
+				kind,
+				id,
+				path,
+				content,
+				...isNonEmptyString(mimeType) ? { mimeType } : {}
+			};
 		}
-		return snapshot;
+		case "confirm": return isNonEmptyString(data["message"]) ? {
+			kind,
+			id,
+			message: data["message"]
+		} : void 0;
+		default: return;
 	}
-	async delete(runId) {
-		const path = this.#path(runId);
-		if (await this.#fs.exists(path)) await this.#fs.remove(path);
+}
+function bridgeError(id, code, message) {
+	return {
+		id,
+		ok: false,
+		error: {
+			code,
+			message
+		}
+	};
+}
+/**
+* 判定 URL 是否被策略放行：
+* - 'deny-all'（默认）全拒；'allow-all' 全放
+* - { allow } 条目支持三种写法：
+*   - 精确域名 'api.example.com'（忽略端口与路径）
+*   - 通配 '*.example.com'（含 apex 与任意深度子域）
+*   - 源 'http://localhost:3000'（协议 + host + port 全等）
+* - URL 解析失败一律拒绝
+* @stable
+*/
+function isNetworkAllowed(policy, url) {
+	if (policy === "allow-all") return true;
+	if (policy === "deny-all" || !policy || typeof policy !== "object") return false;
+	var allow = policy.allow;
+	if (!Array.isArray(allow)) return false;
+	var parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return false;
 	}
-	async list() {
-		if (!await this.#fs.exists(this.#root)) return [];
-		const out = [];
-		for (const entry of await this.#fs.list(this.#root)) {
-			if (entry.type !== "file" || !entry.path.endsWith(SNAPSHOT_SUFFIX)) continue;
+	var host = parsed.hostname.toLowerCase();
+	for (var i = 0; i < allow.length; i++) {
+		var entry = allow[i];
+		if (typeof entry !== "string" || entry === "") continue;
+		if (entry.indexOf("://") !== -1) {
 			try {
-				out.push(JSON.parse(await this.#fs.readText(entry.path)));
+				if (new URL(entry).origin === parsed.origin) return true;
 			} catch {}
+			continue;
 		}
-		return out.sort((a, b) => a.snapshotAt.localeCompare(b.snapshotAt));
-	}
-};
-/** runtime 门面：组合 discovery / router / agent loop / lifecycle */
-var WebSkillRuntime = class {
-	#deps;
-	#discovery;
-	#router;
-	#session;
-	#events;
-	#catalogCache;
-	constructor(deps) {
-		this.#deps = deps;
-		this.#discovery = new SkillDiscovery(deps.fs, deps.roots);
-		this.#router = deps.router ?? new ProgressiveRouter();
-		this.#events = deps.eventBus ?? new EventBus();
-		this.#session = {
-			id: `session-${Math.random().toString(36).slice(2, 10)}`,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString()
-		};
-	}
-	get session() {
-		return this.#session;
+		var rule = entry.toLowerCase();
+		if (rule.indexOf("*.") === 0) {
+			var suffix = rule.slice(2);
+			if (host === suffix || host.endsWith("." + suffix)) return true;
+		} else if (host === rule) return true;
 	}
-	/** 生命周期事件总线（只读观测） */
-	get events() {
-		return this.#events;
+	return false;
+}
+/** 阻断 trace 用的脱敏 host（解析失败返回占位，不记录完整 URL） */
+function networkUrlHost(url) {
+	try {
+		return new URL(url).hostname;
+	} catch {
+		return "(unparseable-url)";
 	}
-	async discover() {
-		const result = await this.#discovery.discover();
-		this.#catalogCache = {
-			catalog: buildCatalog(result.entries),
-			index: new Map(result.entries.map((e) => [e.name, e.root]))
-		};
-		return result;
+}
+/**
+* Per-capability 强制授权判定（宿主侧，browser/node 执行器共用单一来源）。
+* 'require-approval' 模式下经注入的 UiBridge 发 authorize 交互；
+* once-per-run（默认）在 run 内记忆已批准能力，every-call 每次调用都问。
+* @stable
+*/
+var CapabilityApproval = class {
+	#uiBridge;
+	#scope;
+	/** runId → 已批准能力集合（once-per-run 记忆） */
+	#approved = /* @__PURE__ */ new Map();
+	#seq = 0;
+	constructor(deps = {}) {
+		this.#uiBridge = deps.uiBridge;
+		this.#scope = deps.scope ?? "once-per-run";
 	}
-	async run(userPrompt) {
-		if (!this.#catalogCache) await this.discover();
-		const cache = this.#catalogCache;
-		if (!cache) throw new Error("discover() did not populate the catalog cache");
-		const providerEntries = (await Promise.all((this.#deps.skillProviders ?? []).map(async (p) => {
-			try {
-				return await p.listSkills();
-			} catch {
-				return [];
+	async authorize(input) {
+		const { runId, capability, mode } = input;
+		if (mode === false) return "disabled";
+		if (mode !== "require-approval") return "allowed";
+		if (this.#scope === "once-per-run" && this.#approved.get(runId)?.has(capability)) return "allowed";
+		if (!this.#uiBridge) return "denied";
+		if ((await this.#uiBridge.request({
+			type: "authorize",
+			id: `authorize-${runId}-${capability}-${++this.#seq}`,
+			capability,
+			message: input.message,
+			...input.details !== void 0 ? { details: input.details } : {}
+		})).value !== true) return "denied";
+		if (this.#scope === "once-per-run") {
+			let set = this.#approved.get(runId);
+			if (!set) {
+				set = /* @__PURE__ */ new Set();
+				this.#approved.set(runId, set);
 			}
-		}))).flat();
-		const catalog = providerEntries.length > 0 ? { skills: mergeCatalogEntries(cache.catalog.skills, providerEntries) } : cache.catalog;
-		const filteredCatalog = this.#deps.catalogFilter ? { skills: await this.#deps.catalogFilter(catalog.skills) } : catalog;
-		const route = await this.#router.route(filteredCatalog);
-		const result = await new AgentLoop({
-			llm: this.#deps.llm,
-			executor: this.#deps.executor,
-			schemaInferer: this.#deps.schemaInferer,
-			artifactStore: this.#deps.artifactStore,
-			fs: this.#deps.fs,
-			skillIndex: cache.index,
-			model: this.#deps.model,
-			uiBridge: this.#deps.uiBridge,
-			interaction: this.#deps.interaction,
-			memory: this.#deps.memory,
-			hooks: this.#deps.hooks,
-			eventBus: this.#events,
-			longTerm: this.#deps.longTerm,
-			externalTools: this.#deps.externalTools,
-			skillProviders: this.#deps.skillProviders,
-			catalogFilter: this.#deps.catalogFilter,
-			snapshotStore: this.#deps.snapshotStore
-		}, this.#deps.config).run({
-			sessionId: this.#session.id,
-			userPrompt,
-			route
-		});
-		if (this.#deps.onSkillMiss && result.run.activeSkillNames.length === 0) this.#deps.onSkillMiss({
-			prompt: userPrompt,
-			run: result.run
-		}).catch((e) => {
-			result.run.trace.push({
-				id: `evt-miss-${Date.now()}`,
-				runId: result.run.id,
-				ts: (/* @__PURE__ */ new Date()).toISOString(),
-				type: "run.warning",
-				message: `onSkillMiss hook failed: ${e instanceof Error ? e.message : String(e)}`
-			});
-		});
-		return result;
-	}
-	/** D3：列出可恢复的 interrupted run（供 UI 展示"未完成任务"） */
-	async listInterruptedRuns() {
-		if (!this.#deps.snapshotStore) return [];
-		return this.#deps.snapshotStore.list();
-	}
-	/**
-	* D3 恢复 interrupted run：
-	* 不存在 → RUN_SNAPSHOT_NOT_FOUND；schemaVersion 不匹配 → 删除 + RUN_SNAPSHOT_INCOMPATIBLE；
-	* 已过期 → interaction-timeout 终态并删快照；否则重建 LoopState 重新发起交互续跑。
-	*/
-	async resumeRun(runId) {
-		const store = this.#deps.snapshotStore;
-		const snapshot = store ? await store.load(runId) : void 0;
-		if (!snapshot) throw new WebSkillError("RUN_SNAPSHOT_NOT_FOUND", `No snapshot found for run "${runId}"`);
-		if (snapshot.schemaVersion !== 1) {
-			await store.delete(runId);
-			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has incompatible schemaVersion ${String(snapshot.schemaVersion)}`);
-		}
-		if (Date.now() > Date.parse(snapshot.interactionExpiresAt)) {
-			await store.delete(runId);
-			const endedAt = (/* @__PURE__ */ new Date()).toISOString();
-			return {
-				output: "Interaction timed out before the run was resumed",
-				run: {
-					id: runId,
-					sessionId: snapshot.sessionId,
-					status: "failed",
-					phase: "fail",
-					userPrompt: snapshot.userPrompt,
-					startedAt: snapshot.startedAt,
-					endedAt,
-					terminationReason: "interaction-timeout",
-					activeSkillNames: snapshot.activeSkillNames,
-					artifacts: [],
-					trace: [{
-						id: `evt-expired-${runId}`,
-						runId,
-						ts: endedAt,
-						type: "run.failed",
-						message: `Interaction timed out before the run was resumed (expired at ${snapshot.interactionExpiresAt})`,
-						data: {
-							reason: "interaction-timeout",
-							code: "RUN_INTERACTION_TIMEOUT"
-						}
-					}]
-				}
-			};
+			set.add(capability);
 		}
-		if (!this.#catalogCache) await this.discover();
-		const cache = this.#catalogCache;
-		if (!cache) throw new WebSkillError("RUN_FAILED", "discover() did not populate the catalog cache");
-		return new AgentLoop({
-			llm: this.#deps.llm,
-			executor: this.#deps.executor,
-			schemaInferer: this.#deps.schemaInferer,
-			artifactStore: this.#deps.artifactStore,
-			fs: this.#deps.fs,
-			skillIndex: cache.index,
-			model: this.#deps.model,
-			uiBridge: this.#deps.uiBridge,
-			interaction: this.#deps.interaction,
-			memory: this.#deps.memory,
-			hooks: this.#deps.hooks,
-			eventBus: this.#events,
-			longTerm: this.#deps.longTerm,
-			externalTools: this.#deps.externalTools,
-			skillProviders: this.#deps.skillProviders,
-			catalogFilter: this.#deps.catalogFilter,
-			snapshotStore: store
-		}, this.#deps.config).resume(snapshot);
+		return "allowed";
 	}
 };
 
 //#endregion
-export { normalizePath as $, mergeCatalogEntries as A, SKILL_MANIFEST_FILE as B, WebSkillRuntime as C, fromVercelResult as D, createScriptContext as E, schemaToForm as F, WebSkillError as G, SKILL_NAME_PATTERN as H, toLlmToolSpec as I, checkSkillRules as J, buildCatalog as K, toVercelToolSpecs as L, normalizeToolContent as M, parseBridgeRequest as N, fromVercelStreamPart as O, resolveToolName as P, jsonRenderer as Q, MemoryFS as R, TraceRecorder as S, buildRenderResult as T, SkillDiscovery as U, SKILL_NAME_MAX_LENGTH as V, SkillReader as W, escapeXml as X, computeDigest as Y, isValidSkillName as Z, ProgressiveRouter as _, CapabilityApproval as a, verifyManifest as at, READ_SKILL_FILE_TOOL_NAME as b, FsMemoryStore as c, HookRunner as d, parseSkillMarkdown as et, InMemoryStore as f, OpenAiCompatibleClient as g, MockUiBridge as h, AgentLoop as i, validateSkills as it, networkUrlHost as j, isNetworkAllowed as k, FsRunSnapshotStore as l, MockLlmClient as m, ASK_USER_TOOL as n, renderCatalogJson as nt, EventBus as o, xmlRenderer as ot, MemoryArtifactStore as p, buildManifest as q, ASK_USER_TOOL_NAME as r, resolveInsideRoot as rt, FsArtifactStore as s, ASK_USER_INPUT_SCHEMA as t, renderAvailableSkillsXml as tt, FullDisclosureRouter as u, READ_SKILL_FILE_INPUT_SCHEMA as v, bridgeError as w, RUN_SNAPSHOT_SCHEMA_VERSION as x, READ_SKILL_FILE_TOOL as y, SKILLS_LOCKFILE as z };
+export { normalizeToolContent as A, createWebSkillApi as C, isNetworkAllowed as D, fromVercelStreamPart as E, toVercelToolSpecs as F, resolveToolName as M, schemaToForm as N, mergeCatalogEntries as O, toLlmToolSpec as P, createScriptContext as S, fromVercelResult as T, RUN_SNAPSHOT_SCHEMA_VERSION as _, CapabilityApproval as a, bridgeError as b, FsMemoryStore as c, HookRunner as d, OpenAiCompatibleClient as f, READ_SKILL_FILE_TOOL_NAME as g, READ_SKILL_FILE_TOOL as h, AgentLoop as i, parseBridgeRequest as j, networkUrlHost as k, FsRunSnapshotStore as l, READ_SKILL_FILE_INPUT_SCHEMA as m, ASK_USER_TOOL as n, EventBus as o, ProgressiveRouter as p, ASK_USER_TOOL_NAME as r, FsArtifactStore as s, ASK_USER_INPUT_SCHEMA as t, FullDisclosureRouter as u, TraceRecorder as v, extractChartSpec as w, buildRenderResult as x, WebSkillRuntime as y };