@webskill/sdk 0.0.6 → 0.1.1

package/dist/{dist-nXiR40hi.js → dist-D5fsiETF.js}

@@ -1,645 +1,6 @@
-import { parse } from "yaml";
-import { zipSync } from "fflate";
+import { C as renderAvailableSkillsXml, E as validateSkills, T as resolveInsideRoot, c as SkillDiscovery, d as buildCatalog, l as SkillReader, t as MemoryArtifactStore, u as WebSkillError, x as parseSkillMarkdown } from "./memoryArtifactStore-C9lFVqPF-U8nXvqL9.js";
 
-//#region ../core/dist/index.js
-/** 所有公开 API 抛出的结构化错误，code 供上层可编程处理 */
-var WebSkillError = class extends Error {
-	code;
-	details;
-	constructor(code, message, details) {
-		super(message);
-		this.name = "WebSkillError";
-		this.code = code;
-		this.details = details;
-	}
-};
-/** 技能目录内的安装清单文件名（不参与 files 列表与 digest） */
-const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
-/** managed root 下的锁定文件名（不参与 files 列表与 digest） */
-const SKILLS_LOCKFILE = "skills.lock.json";
-/** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256（hash 由调用方提供，可为 WebCrypto 异步实现） */
-async function computeDigest(files, sha256) {
-	return sha256([...files].sort((a, b) => a.path.localeCompare(b.path)).map((f) => `${f.path}:${f.sha256}\n`).join(""));
-}
-/** 由逐文件清单构建 manifest（digest 由 computeDigest 计算） */
-async function buildManifest(input) {
-	return {
-		schemaVersion: 1,
-		name: input.name,
-		...input.version !== void 0 ? { version: input.version } : {},
-		source: input.source,
-		installedAt: input.installedAt,
-		integrity: {
-			algorithm: "sha256",
-			digest: await computeDigest(input.files, input.sha256)
-		},
-		files: input.files
-	};
-}
-/** 按 manifest.files 比对实际 hash（调用方负责计算 actualHashes） */
-function verifyManifest(manifest, actualHashes) {
-	const mismatches = [];
-	for (const file of manifest.files) {
-		const actual = actualHashes.get(file.path);
-		if (actual === void 0 || actual !== file.sha256) mismatches.push(file.path);
-	}
-	return {
-		ok: mismatches.length === 0,
-		mismatches
-	};
-}
-const ROOT = "/";
-/** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
-var MemoryFS = class {
-	kind = "memory";
-	#entries = /* @__PURE__ */ new Map();
-	constructor() {
-		this.#entries.set(ROOT, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#normalize(path) {
-		const out = [];
-		for (const seg of path.replace(/\\/g, "/").split("/")) {
-			if (seg === "" || seg === ".") continue;
-			if (seg === "..") out.pop();
-			else out.push(seg);
-		}
-		return ROOT + out.join("/");
-	}
-	#parentOf(key) {
-		const i = key.lastIndexOf("/");
-		return i <= 0 ? ROOT : key.slice(0, i);
-	}
-	#ensureParents(key) {
-		const chain = [];
-		let dir = this.#parentOf(key);
-		while (!this.#entries.has(dir)) {
-			chain.push(dir);
-			dir = this.#parentOf(dir);
-		}
-		for (const d of chain.reverse()) this.#entries.set(d, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	#getFile(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "file") throw new WebSkillError("FS_NOT_FOUND", `File not found: ${key}`);
-		return entry;
-	}
-	#getDirectory(key) {
-		const entry = this.#entries.get(key);
-		if (!entry || entry.type !== "directory") throw new WebSkillError("FS_NOT_FOUND", `Directory not found: ${key}`);
-		return entry;
-	}
-	async readText(path) {
-		return new TextDecoder().decode(this.#getFile(this.#normalize(path)).content);
-	}
-	async writeText(path, content) {
-		await this.writeBinary(path, new TextEncoder().encode(content));
-	}
-	async readBinary(path) {
-		return this.#getFile(this.#normalize(path)).content;
-	}
-	async writeBinary(path, content) {
-		const key = this.#normalize(path);
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "file",
-			content,
-			mtimeMs: Date.now()
-		});
-	}
-	async exists(path) {
-		return this.#entries.has(this.#normalize(path));
-	}
-	async stat(path) {
-		const key = this.#normalize(path);
-		const entry = this.#entries.get(key);
-		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		return {
-			path: key,
-			type: entry.type,
-			size: entry.type === "file" ? entry.content.length : void 0,
-			mtimeMs: entry.mtimeMs
-		};
-	}
-	async list(path) {
-		const key = this.#normalize(path);
-		this.#getDirectory(key);
-		const prefix = key === ROOT ? ROOT : key + "/";
-		const out = [];
-		for (const [k, entry] of this.#entries) {
-			if (k === key || !k.startsWith(prefix)) continue;
-			if (k.slice(prefix.length).includes("/")) continue;
-			out.push({
-				path: k,
-				type: entry.type,
-				size: entry.type === "file" ? entry.content.length : void 0,
-				mtimeMs: entry.mtimeMs
-			});
-		}
-		return out;
-	}
-	async mkdir(path) {
-		const key = this.#normalize(path);
-		if (this.#entries.has(key)) return;
-		this.#ensureParents(key);
-		this.#entries.set(key, {
-			type: "directory",
-			content: /* @__PURE__ */ new Uint8Array(0),
-			mtimeMs: Date.now()
-		});
-	}
-	async remove(path, options) {
-		const key = this.#normalize(path);
-		if (!this.#entries.get(key)) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
-		if (key === ROOT) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", "Cannot delete root directory");
-		const prefix = key + "/";
-		const descendants = [...this.#entries.keys()].filter((k) => k.startsWith(prefix));
-		if (descendants.length > 0 && !options?.recursive) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Directory not empty, use recursive: ${key}`);
-		for (const k of descendants) this.#entries.delete(k);
-		this.#entries.delete(key);
-	}
-};
-/** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
-function normalizePath(path) {
-	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
-}
-/**
-* 将相对路径安全地解析到 root 之内。
-* 拒绝空路径、绝对路径（`/`、`\\`、`C:\` 形式）与任何 `..` 段。
-*/
-function resolveInsideRoot(root, relativePath) {
-	const fail = (reason) => {
-		throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Path outside root: ${reason} (path: ${JSON.stringify(relativePath)})`);
-	};
-	if (relativePath.trim() === "") fail("empty path");
-	if (relativePath.startsWith("/") || relativePath.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(relativePath)) fail("absolute paths not allowed");
-	const segments = relativePath.replace(/\\/g, "/").split("/");
-	if (segments.some((s) => s === "..")) fail("`..` segments not allowed");
-	const clean = segments.filter((s) => s !== "" && s !== ".");
-	if (clean.length === 0) fail("path resolves to empty");
-	const normalizedRoot = normalizePath(root);
-	const joined = normalizedRoot === "" ? clean.join("/") : `${normalizedRoot}/${clean.join("/")}`;
-	return root.startsWith("/") || root.startsWith("\\") ? `/${joined}` : joined;
-}
-const FRONTMATTER_RE = /^---[^\S\r\n]*\r?\n([\s\S]*?)\r?\n---[^\S\r\n]*(?:\r?\n|$)([\s\S]*)$/;
-const invalid = (message, details) => {
-	throw new WebSkillError("SKILL_INVALID_METADATA", message, details);
-};
-function parseSkillMarkdown(raw) {
-	const match = FRONTMATTER_RE.exec(raw);
-	if (!match) invalid("SKILL.md missing YAML frontmatter (must start with a `---` line)");
-	const [, yamlText, bodyRaw] = match;
-	let data;
-	try {
-		data = parse(yamlText);
-	} catch (cause) {
-		invalid("frontmatter YAML parse failed", cause);
-	}
-	if (typeof data !== "object" || data === null || Array.isArray(data)) invalid("frontmatter must be a YAML object");
-	const metadata = data;
-	if (typeof metadata["name"] !== "string" || metadata["name"].trim() === "") invalid("frontmatter missing required `name` field");
-	if (typeof metadata["description"] !== "string" || metadata["description"].trim() === "") invalid("frontmatter missing required `description` field");
-	return {
-		metadata,
-		body: bodyRaw.trim()
-	};
-}
-const SKILL_NAME_MAX_LENGTH = 64;
-/** Agent Skills 官方命名规范：小写字母/数字/连字符，不允许首尾或连续连字符 */
-const SKILL_NAME_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;
-function isValidSkillName(name) {
-	return name.length <= 64 && SKILL_NAME_PATTERN.test(name);
-}
-const SCRIPT_EXTENSION_RE = /\.(ts|js)$/;
-/** D2 schema sidecar（scripts/<name>.schema.json）属于协议内文件，不算非法脚本 */
-const SCHEMA_SIDECAR_RE = /\.schema\.json$/;
-/**
-* 技能合规规则的唯一实现。SkillDiscovery 与 validateSkills 都必须调用本函数，
-* 禁止各自重复实现规则（避免两套规则漂移）。
-*/
-function checkSkillRules(input) {
-	const { dirName } = input;
-	if (!input.hasSkillMd) return [{
-		code: "SKILL_NOT_FOUND",
-		severity: "warning",
-		message: `Directory ${dirName} missing SKILL.md, not treated as a skill, skipped`
-	}];
-	if (input.parseError) return [{
-		code: input.parseError.code,
-		severity: "error",
-		message: `SKILL.md parse failed for directory ${dirName}: ${input.parseError.message}`
-	}];
-	const issues = [];
-	const metadata = input.metadata;
-	if (metadata) {
-		if (!isValidSkillName(metadata.name)) issues.push({
-			code: "SKILL_INVALID_NAME",
-			severity: "error",
-			message: `Skill name ${JSON.stringify(metadata.name)} does not conform to naming convention (lowercase letters/digits/hyphens, ≤64 chars)`
-		});
-		if (metadata.name !== dirName) issues.push({
-			code: "SKILL_INVALID_NAME",
-			severity: "error",
-			message: `Skill name ${JSON.stringify(metadata.name)} does not match directory name ${JSON.stringify(dirName)}`
-		});
-		if (input.existingNames?.has(metadata.name)) issues.push({
-			code: "SKILL_DUPLICATE_NAME",
-			severity: "error",
-			message: `Duplicate skill name ${JSON.stringify(metadata.name)}`
-		});
-	}
-	for (const fileName of input.scriptFileNames ?? []) if (!SCRIPT_EXTENSION_RE.test(fileName) && !SCHEMA_SIDECAR_RE.test(fileName)) issues.push({
-		code: "SKILL_UNSUPPORTED_SCRIPT",
-		severity: "error",
-		message: `Unsupported script file in scripts/ of directory ${dirName}: ${fileName} (only .ts/.js and .schema.json sidecars allowed)`
-	});
-	const allowedTools = metadata?.["allowed-tools"];
-	if (Array.isArray(allowedTools)) {
-		const scriptNames = new Set((input.scriptFileNames ?? []).filter((f) => SCRIPT_EXTENSION_RE.test(f)).map((f) => f.replace(SCRIPT_EXTENSION_RE, "")));
-		for (const entry of allowedTools) if (typeof entry === "string" && !scriptNames.has(entry)) issues.push({
-			code: "SKILL_UNKNOWN_ALLOWED_TOOL",
-			severity: "warning",
-			message: `allowed-tools entry ${JSON.stringify(entry)} of directory ${dirName} does not match any script in scripts/`
-		});
-	}
-	if (metadata && input.knownSkillNames) {
-		const dependencies = metadata["dependencies"];
-		if (Array.isArray(dependencies)) {
-			for (const dep of dependencies) if (typeof dep === "string" && !input.knownSkillNames.has(dep)) issues.push({
-				code: "SKILL_UNKNOWN_DEPENDENCY",
-				severity: "error",
-				message: `Skill ${JSON.stringify(metadata.name)} depends on unknown skill ${JSON.stringify(dep)}`
-			});
-		}
-	}
-	return issues;
-}
-/**
-* 循环依赖检测（全量邻接表，discovery 两趟扫描第二趟调用）。
-* 每个环只报一次（error 级，阻断进 Catalog）；自引用视为长度 1 的环。
-*/
-function checkDependencyCycles(adjacency) {
-	const issues = [];
-	const involved = /* @__PURE__ */ new Set();
-	const reported = /* @__PURE__ */ new Set();
-	const state = /* @__PURE__ */ new Map();
-	const stack = [];
-	const visit = (node) => {
-		if (state.get(node) === "done") return;
-		if (state.get(node) === "visiting") {
-			const cycle = [...stack.slice(stack.indexOf(node)), node];
-			const key = cycle.slice(0, -1).sort().join("");
-			if (!reported.has(key)) {
-				reported.add(key);
-				for (const name of cycle.slice(0, -1)) involved.add(name);
-				issues.push({
-					code: "SKILL_CIRCULAR_DEPENDENCY",
-					severity: "error",
-					message: `Circular skill dependency detected: ${cycle.join(" -> ")}`
-				});
-			}
-			return;
-		}
-		state.set(node, "visiting");
-		stack.push(node);
-		for (const dep of adjacency.get(node) ?? []) visit(dep);
-		stack.pop();
-		state.set(node, "done");
-	};
-	for (const node of adjacency.keys()) visit(node);
-	return {
-		issues,
-		involved
-	};
-}
-/**
-* 技能包集（skill pack）格式与打包逻辑（node/browser 共用单一来源）：
-*   webskill.skill-pack.json   { schemaVersion: 1, skills: [{ name, digest }] }
-*   <skill-a>/SKILL.md … webskill.skill-manifest.json
-*   <skill-b>/SKILL.md …
-* fflate 环境无关；文件读取经 FileSystemProvider 抽象。
-*/
-/** 包级清单文件名（位于 zip 根，不参与各技能 digest） */
-const SKILL_PACK_FILE = "webskill.skill-pack.json";
-const messageOf$2 = (e) => e instanceof Error ? e.message : String(e);
-const baseName$1 = (p) => p.split("/").pop() ?? p;
-async function listFilesRecursive(fs, root, prefix = "") {
-	const out = [];
-	for (const entry of await fs.list(root)) {
-		const rel = prefix === "" ? baseName$1(entry.path) : `${prefix}/${baseName$1(entry.path)}`;
-		if (entry.type === "directory") out.push(...await listFilesRecursive(fs, entry.path, rel));
-		else out.push(rel);
-	}
-	return out;
-}
-/**
-* 多技能打包为单一 zip（包级清单 + 各技能目录含自身 manifest）。
-* manifestBuilder 负责确保技能目录内 manifest 文件存在并返回之（digest 入包级清单）。
-*/
-async function exportSkills(fs, input) {
-	if (input.roots.length === 0) throw new WebSkillError("EXPORT_FAILED", "exportSkills requires at least one skill root");
-	const files = {};
-	const skills = [];
-	try {
-		for (const root of input.roots) {
-			const base = root.replace(/\/+$/, "");
-			const manifest = await input.manifestBuilder(base);
-			skills.push({
-				name: manifest.name,
-				digest: manifest.integrity.digest
-			});
-			for (const rel of await listFilesRecursive(fs, base)) files[`${manifest.name}/${rel}`] = await fs.readBinary(`${base}/${rel}`);
-		}
-	} catch (e) {
-		if (e instanceof WebSkillError) throw e;
-		throw new WebSkillError("EXPORT_FAILED", `Failed to export skill pack: ${messageOf$2(e)}`, e);
-	}
-	const pack = {
-		schemaVersion: 1,
-		skills
-	};
-	files[SKILL_PACK_FILE] = new TextEncoder().encode(JSON.stringify(pack, null, 2));
-	return zipSync(files, { level: 6 });
-}
-/** 包级清单解析 + 形状校验；损坏 → INSTALL_FAILED（安装侧保证零残留） */
-function parseSkillPackManifest(text) {
-	let raw;
-	try {
-		raw = JSON.parse(text);
-	} catch (e) {
-		throw new WebSkillError("INSTALL_FAILED", `Skill pack manifest is not valid JSON: ${messageOf$2(e)}`, e);
-	}
-	const invalid = (detail) => {
-		throw new WebSkillError("INSTALL_FAILED", `Skill pack manifest is corrupted: ${detail}`);
-	};
-	if (typeof raw !== "object" || raw === null) invalid("not an object");
-	const record = raw;
-	if (record["schemaVersion"] !== 1) invalid("schemaVersion must be 1");
-	if (!Array.isArray(record["skills"]) || record["skills"].length === 0) invalid("\"skills\" must be a non-empty array");
-	for (const entry of record["skills"]) {
-		if (typeof entry !== "object" || entry === null) invalid("skill entry is not an object");
-		const { name, digest } = entry;
-		if (typeof name !== "string" || name === "") invalid("skill entry missing a valid \"name\"");
-		if (typeof digest !== "string" || digest === "") invalid(`skill "${name}" missing a valid "digest"`);
-	}
-	return raw;
-}
-/** 由条目列表构建 Catalog，保证按名称排序 */
-function buildCatalog(entries) {
-	return { skills: [...entries].sort((a, b) => a.name.localeCompare(b.name)) };
-}
-/** 按技能名读取技能根目录内的文件，全部读取强制经过路径安全检查 */
-var SkillReader = class {
-	#fs;
-	#index;
-	constructor(fs, index) {
-		this.#fs = fs;
-		this.#index = index;
-	}
-	#rootFor(skillName) {
-		const root = this.#index.get(skillName);
-		if (!root) throw new WebSkillError("SKILL_NOT_FOUND", `Unknown skill: ${skillName}`);
-		return root;
-	}
-	async readSkillMarkdown(skillName) {
-		return this.readSkillFile(skillName, "SKILL.md");
-	}
-	async readSkillFile(skillName, relativePath) {
-		return this.#fs.readText(resolveInsideRoot(this.#rootFor(skillName), relativePath));
-	}
-	async readSkillBinary(skillName, relativePath) {
-		return this.#fs.readBinary(resolveInsideRoot(this.#rootFor(skillName), relativePath));
-	}
-};
-const baseName$2 = (path) => path.split("/").pop() ?? path;
-var SkillDiscovery = class {
-	#fs;
-	#roots;
-	/** name → skillRoot，与 SkillReader 共享同一 Map 引用 */
-	#index = /* @__PURE__ */ new Map();
-	#reader;
-	constructor(fs, roots) {
-		this.#fs = fs;
-		this.#roots = roots;
-		this.#reader = new SkillReader(fs, this.#index);
-	}
-	async discover() {
-		this.#index.clear();
-		const entries = [];
-		const issues = [];
-		const candidates = [];
-		const knownSkillNames = /* @__PURE__ */ new Set();
-		const adjacency = /* @__PURE__ */ new Map();
-		for (const root of this.#roots) {
-			if (!await this.#fs.exists(root)) {
-				issues.push({
-					code: "FS_NOT_FOUND",
-					severity: "warning",
-					message: `Skill root directory not found, skipped: ${root}`,
-					path: root
-				});
-				continue;
-			}
-			for (const child of await this.#fs.list(root)) {
-				if (child.type !== "directory") continue;
-				const dirName = baseName$2(child.path);
-				const skillRoot = `${root}/${dirName}`;
-				const skillMdPath = `${skillRoot}/SKILL.md`;
-				const hasSkillMd = await this.#fs.exists(skillMdPath);
-				let metadata;
-				let parseError;
-				if (hasSkillMd) try {
-					metadata = parseSkillMarkdown(await this.#fs.readText(skillMdPath)).metadata;
-				} catch (e) {
-					parseError = e instanceof WebSkillError ? e : new WebSkillError("SKILL_INVALID_METADATA", String(e));
-				}
-				candidates.push({
-					dirName,
-					skillRoot,
-					hasSkillMd,
-					metadata,
-					parseError,
-					scriptFileNames: await this.#listScriptFileNames(skillRoot)
-				});
-				if (metadata) {
-					knownSkillNames.add(metadata.name);
-					const dependencies = metadata["dependencies"];
-					adjacency.set(metadata.name, Array.isArray(dependencies) ? dependencies.filter((d) => typeof d === "string") : []);
-				}
-			}
-		}
-		const cycles = checkDependencyCycles(adjacency);
-		const claimedNames = /* @__PURE__ */ new Set();
-		for (const candidate of candidates) {
-			const { metadata } = candidate;
-			const candidateIssues = checkSkillRules({
-				dirName: candidate.dirName,
-				hasSkillMd: candidate.hasSkillMd,
-				metadata,
-				parseError: candidate.parseError,
-				scriptFileNames: candidate.scriptFileNames,
-				existingNames: claimedNames,
-				knownSkillNames
-			});
-			for (const issue of candidateIssues) issue.path ??= candidate.skillRoot;
-			issues.push(...candidateIssues);
-			if (metadata) claimedNames.add(metadata.name);
-			const excludedByCycle = metadata !== void 0 && cycles.involved.has(metadata.name);
-			if (candidateIssues.some((i) => i.severity === "error") || !metadata || excludedByCycle) continue;
-			this.#index.set(metadata.name, candidate.skillRoot);
-			entries.push({
-				name: metadata.name,
-				description: metadata.description,
-				version: typeof metadata["version"] === "string" ? metadata["version"] : void 0,
-				license: typeof metadata["license"] === "string" ? metadata["license"] : void 0,
-				root: candidate.skillRoot,
-				source: "local",
-				hasScripts: candidate.scriptFileNames.length > 0,
-				hasReferences: await this.#fs.exists(`${candidate.skillRoot}/references`),
-				hasAssets: await this.#fs.exists(`${candidate.skillRoot}/assets`)
-			});
-		}
-		issues.push(...cycles.issues);
-		entries.sort((a, b) => a.name.localeCompare(b.name));
-		return {
-			entries,
-			issues
-		};
-	}
-	async catalog() {
-		const { entries, issues } = await this.discover();
-		return {
-			catalog: buildCatalog(entries),
-			issues
-		};
-	}
-	/** 按需加载技能完整文档；技能不存在时抛 SKILL_NOT_FOUND */
-	async loadDocument(skillName) {
-		if (this.#index.size === 0) await this.discover();
-		const { metadata, body } = parseSkillMarkdown(await this.#reader.readSkillMarkdown(skillName));
-		const skillRoot = this.#index.get(skillName);
-		return {
-			metadata,
-			body,
-			location: {
-				skillRoot,
-				skillMdPath: `${skillRoot}/SKILL.md`,
-				source: "local"
-			}
-		};
-	}
-	async #listScriptFileNames(skillRoot) {
-		const scriptsDir = `${skillRoot}/scripts`;
-		if (!await this.#fs.exists(scriptsDir)) return [];
-		return (await this.#fs.list(scriptsDir)).filter((s) => s.type === "file").map((s) => baseName$2(s.path));
-	}
-};
-/**
-* 合规校验。内部直接复用 SkillDiscovery 的扫描逻辑，
-* 规则判定同样落在 checkSkillRules 单一来源上。
-*/
-async function validateSkills(fs, roots) {
-	const { issues } = await new SkillDiscovery(fs, roots).discover();
-	return {
-		ok: !issues.some((i) => i.severity === "error"),
-		issues
-	};
-}
-function renderCatalogJson(catalog) {
-	return JSON.stringify(catalog, null, 2);
-}
-const jsonRenderer = {
-	format: "json",
-	render: renderCatalogJson
-};
-/** 转义 XML 五个特殊字符：& < > " ' */
-function escapeXml(text) {
-	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
-function renderAvailableSkillsXml(catalog) {
-	const lines = ["<available_skills>"];
-	for (const skill of catalog.skills) {
-		lines.push("  <skill>");
-		lines.push(`    <name>${escapeXml(skill.name)}</name>`);
-		lines.push(`    <description>${escapeXml(skill.description)}</description>`);
-		if (skill.version !== void 0) lines.push(`    <version>${escapeXml(skill.version)}</version>`);
-		if (skill.license !== void 0) lines.push(`    <license>${escapeXml(skill.license)}</license>`);
-		lines.push(`    <source>${escapeXml(skill.source)}</source>`);
-		lines.push("  </skill>");
-	}
-	lines.push("</available_skills>");
-	return lines.join("\n");
-}
-const xmlRenderer = {
-	format: "xml",
-	render: renderAvailableSkillsXml
-};
-
-//#endregion
 //#region ../runtime/dist/index.js
-/**
-* 预设响应序列的确定性 LlmClient；handler 形式可按会话状态动态应答。
-* 默认不含 stream（存量行为）；构造传 { streaming: true } 启用流式：
-* 队列项 { stream: [...] } 按预设 delta 序列产出，LlmResponse 项自动合成增量。
-*/
-var MockLlmClient = class {
-	calls = [];
-	stream;
-	#queue;
-	constructor(responses, options) {
-		this.#queue = [...responses];
-		if (options?.streaming) this.stream = (input) => this.#streamImpl(input);
-	}
-	async complete(input) {
-		this.calls.push(input);
-		const next = this.#queue.shift();
-		if (!next) throw new WebSkillError("LLM_REQUEST_FAILED", "MockLlmClient: response queue exhausted");
-		if (typeof next === "function") return next(input);
-		if ("stream" in next) {
-			const events = typeof next.stream === "function" ? next.stream(input) : next.stream;
-			let content = "";
-			let toolCalls;
-			for (const event of events) if (event.type === "text-delta") content += event.delta;
-			else if (event.type === "tool-calls") toolCalls = event.toolCalls;
-			else if (event.type === "done" && event.content !== void 0) content = event.content;
-			return {
-				content,
-				toolCalls
-			};
-		}
-		return next;
-	}
-	async *#streamImpl(input) {
-		this.calls.push(input);
-		const next = this.#queue.shift();
-		if (!next) throw new WebSkillError("LLM_REQUEST_FAILED", "MockLlmClient: response queue exhausted");
-		if (typeof next !== "function" && "stream" in next) {
-			const events = typeof next.stream === "function" ? next.stream(input) : next.stream;
-			for (const event of events) yield event;
-			return;
-		}
-		const response = typeof next === "function" ? await next(input) : next;
-		if (response.content) {
-			const chunkSize = Math.max(1, Math.ceil(response.content.length / 3));
-			for (let i = 0; i < response.content.length; i += chunkSize) yield {
-				type: "text-delta",
-				delta: response.content.slice(i, i + chunkSize)
-			};
-		}
-		if (response.toolCalls?.length) yield {
-			type: "tool-calls",
-			toolCalls: response.toolCalls
-		};
-		yield { type: "done" };
-	}
-};
 const toOpenAiMessage = (msg) => {
 	if (msg.role === "tool") return {
 		role: "tool",
@@ -919,7 +280,7 @@ var FullDisclosureRouter = class {
 	}
 	async route(catalog) {
 		const sections = [];
-		for (const entry of catalog.skills) {
+		for (const entry of catalog.entries) {
 			const doc = await this.#discovery.loadDocument(entry.name);
 			sections.push(`<skill name="${entry.name}">\n${doc.body}\n</skill>`);
 		}
@@ -1173,33 +534,6 @@ function mapFieldType(prop) {
 		default: return "textarea";
 	}
 }
-/**
-* 测试用 UiBridge：按请求 id 或类型预设应答（永不 resolve 的 handler 可模拟超时）；
-* 记录全部请求供断言。
-*/
-var MockUiBridge = class {
-	requests = [];
-	#answers = /* @__PURE__ */ new Map();
-	#fallback;
-	/** key 为请求 id 或请求类型（'ask' | 'confirm' | 'form' | 'select'） */
-	respondTo(key, answer) {
-		this.#answers.set(key, answer);
-		return this;
-	}
-	setFallback(answer) {
-		this.#fallback = answer;
-		return this;
-	}
-	async request(input) {
-		this.requests.push(input);
-		const answer = this.#answers.get(input.id) ?? this.#answers.get(input.type) ?? this.#fallback;
-		if (!answer) return {
-			id: input.id,
-			cancelled: true
-		};
-		return typeof answer === "function" ? answer(input) : answer;
-	}
-};
 /** 生命周期事件总线：只读观测，支持按阶段或通配订阅 */
 var EventBus = class {
 	#listeners = /* @__PURE__ */ new Map();
@@ -1226,50 +560,6 @@ var EventBus = class {
 		for (const listener of this.#listeners.get("*") ?? []) listener(frozen);
 	}
 };
-/** 内存 ArtifactStore：测试与浏览器降级用；索引随进程生命周期存在 */
-var MemoryArtifactStore = class {
-	#byRun = /* @__PURE__ */ new Map();
-	#seq = 0;
-	async createTextArtifact(input) {
-		return this.#record({
-			runId: input.runId,
-			path: input.path,
-			type: "text",
-			size: new TextEncoder().encode(input.content).length,
-			mimeType: input.mimeType,
-			metadata: input.metadata
-		});
-	}
-	async createBinaryArtifact(input) {
-		return this.#record({
-			runId: input.runId,
-			path: input.path,
-			type: "binary",
-			size: input.content.length,
-			mimeType: input.mimeType,
-			metadata: input.metadata
-		});
-	}
-	async listArtifacts(runId) {
-		return [...this.#byRun.get(runId) ?? []];
-	}
-	#record(input) {
-		const artifact = {
-			id: `art-${++this.#seq}`,
-			runId: input.runId,
-			path: input.path,
-			type: input.type,
-			mimeType: input.mimeType,
-			size: input.size,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			metadata: input.metadata
-		};
-		const list = this.#byRun.get(input.runId) ?? [];
-		list.push(artifact);
-		this.#byRun.set(input.runId, list);
-		return artifact;
-	}
-};
 /** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
 var TraceRecorder = class {
 	#runId;
@@ -1378,11 +668,11 @@ var AgentLoop = class {
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		const route = this.#deps.catalogFilter ? {
 			...input.route,
-			catalog: { skills: await this.#deps.catalogFilter(input.route.catalog.skills) }
+			catalog: { entries: await this.#deps.catalogFilter(input.route.catalog.entries) }
 		} : input.route;
 		trace.record("skill.routed", { data: {
 			strategy: route.strategy,
-			skillCount: route.catalog.skills.length
+			skillCount: route.catalog.entries.length
 		} });
 		await this.#lifecycle("route", state, { strategy: route.strategy });
 		const externalSpecs = (await Promise.all((this.#deps.externalTools ?? []).map(async (source) => {
@@ -2117,6 +1407,7 @@ const SNAPSHOT_SUFFIX = ".snapshot.json";
 /**
 * FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
 * 坏 JSON → RUN_SNAPSHOT_INCOMPATIBLE 并自动清理坏文件；runId 过路径安全校验。
+* @experimental
 */
 var FsRunSnapshotStore = class {
 	#root;
@@ -2164,7 +1455,10 @@ var FsRunSnapshotStore = class {
 		return out.sort((a, b) => a.snapshotAt.localeCompare(b.snapshotAt));
 	}
 };
-/** runtime 门面：组合 discovery / router / agent loop / lifecycle */
+/**
+* runtime 门面：组合 discovery / router / agent loop / lifecycle
+* @stable
+*/
 var WebSkillRuntime = class {
 	#deps;
 	#discovery;
@@ -2208,8 +1502,8 @@ var WebSkillRuntime = class {
 				return [];
 			}
 		}))).flat();
-		const catalog = providerEntries.length > 0 ? { skills: mergeCatalogEntries(cache.catalog.skills, providerEntries) } : cache.catalog;
-		const filteredCatalog = this.#deps.catalogFilter ? { skills: await this.#deps.catalogFilter(catalog.skills) } : catalog;
+		const catalog = providerEntries.length > 0 ? { entries: mergeCatalogEntries(cache.catalog.entries, providerEntries) } : cache.catalog;
+		const filteredCatalog = this.#deps.catalogFilter ? { entries: await this.#deps.catalogFilter(catalog.entries) } : catalog;
 		const route = await this.#router.route(filteredCatalog);
 		const result = await new AgentLoop({
 			llm: this.#deps.llm,
@@ -2257,6 +1551,7 @@ var WebSkillRuntime = class {
 	* D3 恢复 interrupted run：
 	* 不存在 → RUN_SNAPSHOT_NOT_FOUND；schemaVersion 不匹配 → 删除 + RUN_SNAPSHOT_INCOMPATIBLE；
 	* 已过期 → interaction-timeout 终态并删快照；否则重建 LoopState 重新发起交互续跑。
+	* @experimental
 	*/
 	async resumeRun(runId) {
 		const store = this.#deps.snapshotStore;
@@ -2323,6 +1618,7 @@ var WebSkillRuntime = class {
 /**
 * navigator.webskill 门面装配层：零新业务逻辑，全部直转
 * SkillDiscovery / validateSkills / WebSkillRuntime / SkillManager。
+* @stable
 */
 function createWebSkillApi(deps) {
 	const { fs, roots } = deps;
@@ -2440,34 +1736,6 @@ var HookRunner = class {
 		});
 	}
 };
-/** 内存 MemoryStore：测试与浏览器降级用 */
-var InMemoryStore = class {
-	#data = /* @__PURE__ */ new Map();
-	async get(scope, key) {
-		return this.#data.get(scope)?.get(key);
-	}
-	async set(scope, key, value) {
-		let bucket = this.#data.get(scope);
-		if (!bucket) {
-			bucket = /* @__PURE__ */ new Map();
-			this.#data.set(scope, bucket);
-		}
-		bucket.set(key, value);
-	}
-	async delete(scope, key) {
-		this.#data.get(scope)?.delete(key);
-	}
-	async list(scope) {
-		return [...(this.#data.get(scope) ?? /* @__PURE__ */ new Map()).entries()].map(([key, value]) => ({
-			key,
-			value
-		}));
-	}
-	async clear(scope) {
-		if (scope === void 0) this.#data.clear();
-		else this.#data.delete(scope);
-	}
-};
 const encode = (s) => encodeURIComponent(s);
 /**
 * 基于 FileSystemProvider 的 MemoryStore：
@@ -2490,7 +1758,12 @@ var FsMemoryStore = class {
 	async get(scope, key) {
 		const path = this.#keyPath(scope, key);
 		if (!await this.#fs.exists(path)) return void 0;
-		return JSON.parse(await this.#fs.readText(path));
+		try {
+			return JSON.parse(await this.#fs.readText(path));
+		} catch {
+			await this.#fs.remove(path);
+			return;
+		}
 	}
 	async set(scope, key, value) {
 		await this.#fs.writeText(this.#keyPath(scope, key), JSON.stringify(value, null, 2));
@@ -2507,10 +1780,14 @@ var FsMemoryStore = class {
 			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
 			const fileName = entry.path.split("/").pop() ?? "";
 			const key = decodeURIComponent(fileName.replace(/\.json$/, ""));
-			out.push({
-				key,
-				value: JSON.parse(await this.#fs.readText(entry.path))
-			});
+			try {
+				out.push({
+					key,
+					value: JSON.parse(await this.#fs.readText(entry.path))
+				});
+			} catch {
+				await this.#fs.remove(entry.path);
+			}
 		}
 		return out.sort((a, b) => a.key.localeCompare(b.key));
 	}
@@ -2558,7 +1835,12 @@ var FsArtifactStore = class {
 		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
 		if (!await this.#fs.exists(indexPath)) return [];
 		const raw = await this.#fs.readText(indexPath);
-		return JSON.parse(raw).artifacts ?? [];
+		try {
+			return JSON.parse(raw).artifacts ?? [];
+		} catch {
+			await this.#fs.remove(indexPath);
+			return [];
+		}
 	}
 	#artifactPath(runId, artifactPath) {
 		return resolveInsideRoot(`${this.#root}/${runId}`, artifactPath);
@@ -2630,6 +1912,7 @@ function bridgeError(id, code, message) {
 *   - 通配 '*.example.com'（含 apex 与任意深度子域）
 *   - 源 'http://localhost:3000'（协议 + host + port 全等）
 * - URL 解析失败一律拒绝
+* @stable
 */
 function isNetworkAllowed(policy, url) {
 	if (policy === "allow-all") return true;
@@ -2672,6 +1955,7 @@ function networkUrlHost(url) {
 * Per-capability 强制授权判定（宿主侧，browser/node 执行器共用单一来源）。
 * 'require-approval' 模式下经注入的 UiBridge 发 authorize 交互；
 * once-per-run（默认）在 run 内记忆已批准能力，every-call 每次调用都问。
+* @stable
 */
 var CapabilityApproval = class {
 	#uiBridge;
@@ -2709,4 +1993,4 @@ var CapabilityApproval = class {
 };
 
 //#endregion
-export { computeDigest as $, fromVercelStreamPart as A, MemoryFS as B, WebSkillRuntime as C, createWebSkillApi as D, createScriptContext as E, parseBridgeRequest as F, SKILL_PACK_FILE as G, SKILL_MANIFEST_FILE as H, resolveToolName as I, WebSkillError as J, SkillDiscovery as K, schemaToForm as L, mergeCatalogEntries as M, networkUrlHost as N, extractChartSpec as O, normalizeToolContent as P, checkSkillRules as Q, toLlmToolSpec as R, TraceRecorder as S, buildRenderResult as T, SKILL_NAME_MAX_LENGTH as U, SKILLS_LOCKFILE as V, SKILL_NAME_PATTERN as W, buildManifest as X, buildCatalog as Y, checkDependencyCycles as Z, ProgressiveRouter as _, CapabilityApproval as a, parseSkillMarkdown as at, READ_SKILL_FILE_TOOL_NAME as b, FsMemoryStore as c, renderCatalogJson as ct, HookRunner as d, verifyManifest as dt, escapeXml as et, InMemoryStore as f, xmlRenderer as ft, OpenAiCompatibleClient as g, MockUiBridge as h, AgentLoop as i, normalizePath as it, isNetworkAllowed as j, fromVercelResult as k, FsRunSnapshotStore as l, resolveInsideRoot as lt, MockLlmClient as m, ASK_USER_TOOL as n, isValidSkillName as nt, EventBus as o, parseSkillPackManifest as ot, MemoryArtifactStore as p, SkillReader as q, ASK_USER_TOOL_NAME as r, jsonRenderer as rt, FsArtifactStore as s, renderAvailableSkillsXml as st, ASK_USER_INPUT_SCHEMA as t, exportSkills as tt, FullDisclosureRouter as u, validateSkills as ut, READ_SKILL_FILE_INPUT_SCHEMA as v, bridgeError as w, RUN_SNAPSHOT_SCHEMA_VERSION as x, READ_SKILL_FILE_TOOL as y, toVercelToolSpecs as z };
+export { normalizeToolContent as A, createWebSkillApi as C, isNetworkAllowed as D, fromVercelStreamPart as E, toVercelToolSpecs as F, resolveToolName as M, schemaToForm as N, mergeCatalogEntries as O, toLlmToolSpec as P, createScriptContext as S, fromVercelResult as T, RUN_SNAPSHOT_SCHEMA_VERSION as _, CapabilityApproval as a, bridgeError as b, FsMemoryStore as c, HookRunner as d, OpenAiCompatibleClient as f, READ_SKILL_FILE_TOOL_NAME as g, READ_SKILL_FILE_TOOL as h, AgentLoop as i, parseBridgeRequest as j, networkUrlHost as k, FsRunSnapshotStore as l, READ_SKILL_FILE_INPUT_SCHEMA as m, ASK_USER_TOOL as n, EventBus as o, ProgressiveRouter as p, ASK_USER_TOOL_NAME as r, FsArtifactStore as s, ASK_USER_INPUT_SCHEMA as t, FullDisclosureRouter as u, TraceRecorder as v, extractChartSpec as w, buildRenderResult as x, WebSkillRuntime as y };