@webskill/sdk 0.1.1 → 0.1.3

package/dist/{dist-D5fsiETF.js → dist-DZobLFh6.js}

@@ -1,4 +1,5 @@
-import { C as renderAvailableSkillsXml, E as validateSkills, T as resolveInsideRoot, c as SkillDiscovery, d as buildCatalog, l as SkillReader, t as MemoryArtifactStore, u as WebSkillError, x as parseSkillMarkdown } from "./memoryArtifactStore-C9lFVqPF-U8nXvqL9.js";
+import { S as renderAvailableSkillsXml, T as validateSkills, b as parseSkillMarkdown, c as SkillReader, l as WebSkillError, s as SkillDiscovery, u as buildCatalog, w as resolveInsideRoot } from "./dist-DS1sfgHa.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-C9lFVqPF-yFz6yJj0.js";
 
 //#region ../runtime/dist/index.js
 const toOpenAiMessage = (msg) => {
@@ -32,7 +33,7 @@ const toOpenAiTools = (tools) => tools.map((tool) => ({
 		parameters: tool.inputSchema
 	}
 }));
-const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+const errorMessage$2 = (e) => e instanceof Error ? e.message : String(e);
 /** OpenAI chat completions 协议客户端（兼容端点通用） */
 var OpenAiCompatibleClient = class {
 	#config;
@@ -56,7 +57,7 @@ var OpenAiCompatibleClient = class {
 		try {
 			data = await res.json();
 		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage(e)}`, e);
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage$2(e)}`, e);
 		}
 		return this.#parseResponse(data);
 	}
@@ -78,7 +79,7 @@ var OpenAiCompatibleClient = class {
 			try {
 				chunk = JSON.parse(data);
 			} catch (e) {
-				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage(e)}`, data);
+				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$2(e)}`, data);
 			}
 			const delta = chunk.choices?.[0]?.delta;
 			if (!delta) return;
@@ -160,7 +161,7 @@ var OpenAiCompatibleClient = class {
 				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
 			});
 		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage(e)}`, e);
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage$2(e)}`, e);
 		}
 		if (!res.ok) {
 			const detail = await res.text().catch(() => "");
@@ -195,10 +196,433 @@ var OpenAiCompatibleClient = class {
 				toolCalls: toolCalls?.length ? toolCalls : void 0,
 				raw: data
 			};
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage$2(e)}`, data);
+		}
+	}
+};
+const ANTHROPIC_VERSION = "2023-06-01";
+const errorMessage$1 = (e) => e instanceof Error ? e.message : String(e);
+/** LlmMessage 序列 → system 独立参数 + user/assistant 消息（tool 结果合并进 user 消息 tool_result blocks） */
+function toAnthropicMessages(messages) {
+	const system = messages.filter((m) => m.role === "system").map((m) => m.content).join("\n");
+	const out = [];
+	for (const msg of messages) {
+		if (msg.role === "system") continue;
+		if (msg.role === "tool") {
+			const block = {
+				type: "tool_result",
+				tool_use_id: msg.toolCallId ?? "",
+				content: msg.content
+			};
+			const last = out.at(-1);
+			if (last && last.role === "user" && Array.isArray(last.content)) last.content.push(block);
+			else out.push({
+				role: "user",
+				content: [block]
+			});
+			continue;
+		}
+		if (msg.role === "assistant" && msg.toolCalls?.length) {
+			const content = [];
+			if (msg.content !== "") content.push({
+				type: "text",
+				text: msg.content
+			});
+			for (const call of msg.toolCalls) content.push({
+				type: "tool_use",
+				id: call.id,
+				name: call.name,
+				input: call.arguments
+			});
+			out.push({
+				role: "assistant",
+				content
+			});
+			continue;
+		}
+		out.push({
+			role: msg.role,
+			content: msg.content
+		});
+	}
+	return system === "" ? { messages: out } : {
+		system,
+		messages: out
+	};
+}
+const toAnthropicTools = (tools) => tools.map((tool) => ({
+	name: tool.name,
+	...tool.description ? { description: tool.description } : {},
+	input_schema: tool.inputSchema
+}));
+/** Anthropic Messages API 客户端（零依赖 fetch；Node/浏览器通用） */
+var AnthropicClient = class {
+	#config;
+	#fetch;
+	constructor(config) {
+		this.#config = config;
+		this.#fetch = config.fetchImpl ?? fetch;
+	}
+	#baseUrl() {
+		return (this.#config.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");
+	}
+	#headers() {
+		return {
+			"content-type": "application/json",
+			"x-api-key": this.#config.apiKey,
+			"anthropic-version": ANTHROPIC_VERSION,
+			"anthropic-dangerous-direct-browser-access": "true"
+		};
+	}
+	async complete(input) {
+		const res = await this.#post(input, false);
+		let data;
+		try {
+			data = await res.json();
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage$1(e)}`, e);
+		}
+		return this.#parseResponse(data);
+	}
+	/** SSE 流式：text_delta → text-delta；input_json_delta 按 block index 聚合 → tool-calls */
+	async *stream(input) {
+		const res = await this.#post(input, true);
+		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
+		const toolCallsByIndex = /* @__PURE__ */ new Map();
+		const decoder = new TextDecoder();
+		const reader = res.body.getReader();
+		let buffer = "";
+		const handleFrame = function* (data) {
+			let chunk;
+			try {
+				chunk = JSON.parse(data);
+			} catch (e) {
+				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$1(e)}`, data);
+			}
+			const type = chunk["type"];
+			if (type === "error") throw new WebSkillError("LLM_REQUEST_FAILED", `LLM stream error: ${chunk["error"]?.message ?? data}`);
+			if (type === "content_block_start") {
+				const block = chunk["content_block"];
+				if (block?.["type"] === "tool_use") {
+					const index = typeof chunk["index"] === "number" ? chunk["index"] : 0;
+					toolCallsByIndex.set(index, {
+						id: typeof block["id"] === "string" ? block["id"] : "",
+						name: typeof block["name"] === "string" ? block["name"] : "",
+						arguments: ""
+					});
+				}
+				return;
+			}
+			if (type === "content_block_delta") {
+				const index = typeof chunk["index"] === "number" ? chunk["index"] : 0;
+				const delta = chunk["delta"];
+				if (delta?.["type"] === "text_delta" && typeof delta["text"] === "string" && delta["text"] !== "") {
+					yield {
+						type: "text-delta",
+						delta: delta["text"]
+					};
+					return;
+				}
+				if (delta?.["type"] === "input_json_delta" && typeof delta["partial_json"] === "string") {
+					const acc = toolCallsByIndex.get(index) ?? {
+						id: "",
+						name: "",
+						arguments: ""
+					};
+					acc.arguments += delta["partial_json"];
+					toolCallsByIndex.set(index, acc);
+				}
+				return;
+			}
+		};
+		try {
+			for (;;) {
+				const { value, done: readerDone } = await reader.read();
+				if (readerDone) break;
+				buffer += decoder.decode(value, { stream: true });
+				buffer = buffer.replace(/\r\n/g, "\n");
+				let newline;
+				while ((newline = buffer.indexOf("\n")) >= 0) {
+					const line = buffer.slice(0, newline).trim();
+					buffer = buffer.slice(newline + 1);
+					if (line === "" || line.startsWith(":") || line.startsWith("event:")) continue;
+					if (!line.startsWith("data:")) continue;
+					yield* handleFrame(line.slice(5).trim());
+				}
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		if (toolCallsByIndex.size > 0) yield {
+			type: "tool-calls",
+			toolCalls: [...toolCallsByIndex.entries()].sort(([a], [b]) => a - b).map(([index, acc]) => {
+				let args = {};
+				try {
+					args = JSON.parse(acc.arguments || "{}");
+				} catch {}
+				return {
+					id: acc.id || `call-${index}`,
+					name: acc.name,
+					arguments: args
+				};
+			})
+		};
+		yield { type: "done" };
+	}
+	async #post(input, stream) {
+		const { system, messages } = toAnthropicMessages(input.messages);
+		const body = {
+			model: input.model ?? this.#config.model,
+			max_tokens: this.#config.maxTokens ?? 4096,
+			messages
+		};
+		if (system !== void 0) body["system"] = system;
+		if (input.tools?.length) body["tools"] = toAnthropicTools(input.tools);
+		if (input.temperature !== void 0) body["temperature"] = input.temperature;
+		if (stream) body["stream"] = true;
+		let res;
+		try {
+			res = await this.#fetch(`${this.#baseUrl()}/v1/messages`, {
+				method: "POST",
+				headers: this.#headers(),
+				body: JSON.stringify(body),
+				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
+			});
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage$1(e)}`, e);
+		}
+		if (!res.ok) {
+			const detail = await res.text().catch(() => "");
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`);
+		}
+		return res;
+	}
+	/** 轻量探测（GET /v1/models），集成测试据此决定 skip */
+	async checkAvailability() {
+		try {
+			return (await this.#fetch(`${this.#baseUrl()}/v1/models`, { headers: this.#headers() })).ok;
+		} catch {
+			return false;
+		}
+	}
+	#parseResponse(data) {
+		try {
+			const blocks = data.content;
+			if (!Array.isArray(blocks)) throw new Error("response has no content blocks");
+			const text = blocks.filter((b) => b["type"] === "text").map((b) => String(b["text"] ?? "")).join("");
+			const toolCalls = blocks.filter((b) => b["type"] === "tool_use").map((b) => ({
+				id: typeof b["id"] === "string" ? b["id"] : "",
+				name: typeof b["name"] === "string" ? b["name"] : "",
+				arguments: typeof b["input"] === "object" && b["input"] !== null ? b["input"] : {}
+			}));
+			return {
+				content: text === "" ? void 0 : text,
+				toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+				raw: data
+			};
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage$1(e)}`, data);
+		}
+	}
+};
+const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+/** tool 结果文本包装为 functionResponse.response 对象 */
+function responseObject(content) {
+	try {
+		const parsed = JSON.parse(content);
+		if (typeof parsed === "object" && parsed !== null) return parsed;
+	} catch {}
+	return { result: content };
+}
+/** LlmMessage 序列 → systemInstruction + contents（tool 结果合并进 user 消息 functionResponse parts） */
+function toGenAiContents(messages) {
+	const system = messages.filter((m) => m.role === "system").map((m) => m.content).join("\n");
+	const nameByCallId = /* @__PURE__ */ new Map();
+	for (const msg of messages) if (msg.role === "assistant") for (const call of msg.toolCalls ?? []) nameByCallId.set(call.id, call.name);
+	const out = [];
+	for (const msg of messages) {
+		if (msg.role === "system") continue;
+		if (msg.role === "tool") {
+			const callId = msg.toolCallId ?? "";
+			const part = { functionResponse: {
+				name: nameByCallId.get(callId) ?? callId,
+				response: responseObject(msg.content)
+			} };
+			const last = out.at(-1);
+			if (last && last.role === "user") last.parts.push(part);
+			else out.push({
+				role: "user",
+				parts: [part]
+			});
+			continue;
+		}
+		if (msg.role === "assistant") {
+			const parts = [];
+			if (msg.content !== "") parts.push({ text: msg.content });
+			for (const call of msg.toolCalls ?? []) parts.push({ functionCall: {
+				name: call.name,
+				args: call.arguments
+			} });
+			out.push({
+				role: "model",
+				parts: parts.length > 0 ? parts : [{ text: "" }]
+			});
+			continue;
+		}
+		out.push({
+			role: "user",
+			parts: [{ text: msg.content }]
+		});
+	}
+	return system === "" ? { contents: out } : {
+		systemInstruction: { parts: [{ text: system }] },
+		contents: out
+	};
+}
+const toGenAiTools = (tools) => [{ functionDeclarations: tools.map((tool) => ({
+	name: tool.name,
+	...tool.description ? { description: tool.description } : {},
+	parameters: tool.inputSchema
+})) }];
+/** Google GenAI（generateContent / streamGenerateContent）客户端（零依赖 fetch） */
+var GoogleGenAiClient = class {
+	#config;
+	#fetch;
+	constructor(config) {
+		this.#config = config;
+		this.#fetch = config.fetchImpl ?? fetch;
+	}
+	#baseUrl() {
+		return (this.#config.baseUrl ?? "https://generativelanguage.googleapis.com").replace(/\/+$/, "");
+	}
+	async complete(input) {
+		const res = await this.#post(input, false);
+		let data;
+		try {
+			data = await res.json();
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage(e)}`, e);
+		}
+		const parts = this.#responseParts(data);
+		const text = parts.filter((p) => typeof p["text"] === "string").map((p) => String(p["text"])).join("");
+		const toolCalls = this.#functionCalls(parts);
+		return {
+			content: text === "" ? void 0 : text,
+			toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+			raw: data
+		};
+	}
+	/** SSE 流式：chunk.parts text → text-delta；functionCall 聚合 → tool-calls */
+	async *stream(input) {
+		const res = await this.#post(input, true);
+		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
+		const toolCalls = [];
+		const decoder = new TextDecoder();
+		const reader = res.body.getReader();
+		let buffer = "";
+		const handleFrame = function* (data) {
+			let chunk;
+			try {
+				chunk = JSON.parse(data);
+			} catch (e) {
+				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage(e)}`, data);
+			}
+			const parts = chunk.candidates?.[0]?.content?.parts;
+			for (const part of parts ?? []) {
+				if (typeof part["text"] === "string" && part["text"] !== "") {
+					yield {
+						type: "text-delta",
+						delta: part["text"]
+					};
+					continue;
+				}
+				const call = part["functionCall"];
+				if (call) toolCalls.push({
+					id: `call-${toolCalls.length}`,
+					name: call.name ?? "",
+					arguments: call.args ?? {}
+				});
+			}
+		};
+		try {
+			for (;;) {
+				const { value, done: readerDone } = await reader.read();
+				if (readerDone) break;
+				buffer += decoder.decode(value, { stream: true });
+				buffer = buffer.replace(/\r\n/g, "\n");
+				let newline;
+				while ((newline = buffer.indexOf("\n")) >= 0) {
+					const line = buffer.slice(0, newline).trim();
+					buffer = buffer.slice(newline + 1);
+					if (line === "" || line.startsWith(":") || line.startsWith("event:")) continue;
+					if (!line.startsWith("data:")) continue;
+					yield* handleFrame(line.slice(5).trim());
+				}
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		if (toolCalls.length > 0) yield {
+			type: "tool-calls",
+			toolCalls
+		};
+		yield { type: "done" };
+	}
+	async #post(input, stream) {
+		const model = input.model ?? this.#config.model;
+		const action = stream ? `:streamGenerateContent?alt=sse&key=${encodeURIComponent(this.#config.apiKey)}` : `:generateContent?key=${encodeURIComponent(this.#config.apiKey)}`;
+		const { systemInstruction, contents } = toGenAiContents(input.messages);
+		const body = { contents };
+		if (systemInstruction) body["systemInstruction"] = systemInstruction;
+		if (input.tools?.length) body["tools"] = toGenAiTools(input.tools);
+		if (input.temperature !== void 0) body["generationConfig"] = { temperature: input.temperature };
+		let res;
+		try {
+			res = await this.#fetch(`${this.#baseUrl()}/v1beta/models/${encodeURIComponent(model)}${action}`, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify(body),
+				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
+			});
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage(e)}`, e);
+		}
+		if (!res.ok) {
+			const detail = await res.text().catch(() => "");
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`);
+		}
+		return res;
+	}
+	/** 轻量探测（GET /v1beta/models），集成测试据此决定 skip */
+	async checkAvailability() {
+		try {
+			return (await this.#fetch(`${this.#baseUrl()}/v1beta/models?key=${encodeURIComponent(this.#config.apiKey)}`)).ok;
+		} catch {
+			return false;
+		}
+	}
+	#responseParts(data) {
+		try {
+			const parts = data.candidates?.[0]?.content?.parts;
+			if (!Array.isArray(parts)) throw new Error("response has no candidates[0].content.parts");
+			return parts;
 		} catch (e) {
 			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage(e)}`, data);
 		}
 	}
+	#functionCalls(parts) {
+		const out = [];
+		for (const part of parts) {
+			const call = part["functionCall"];
+			if (call) out.push({
+				id: `call-${out.length}`,
+				name: call.name ?? "",
+				arguments: call.args ?? {}
+			});
+		}
+		return out;
+	}
 };
 function toVercelToolSpecs(tools) {
 	const out = {};
@@ -421,7 +845,7 @@ const ASK_USER_TOOL = {
 * 不暴露 fs 本体（沙箱语义，对齐 deferred-items D1）。
 */
 function createScriptContext(deps) {
-	const { fs, artifactStore, skillName, skillRoot, runId, confirm, onWarning } = deps;
+	const { fs, artifactStore, skillName, skillRoot, runId, confirm, onWarning, onArtifactCreated } = deps;
 	return {
 		skillName,
 		runId,
@@ -429,17 +853,19 @@ function createScriptContext(deps) {
 			return fs.readText(resolveInsideRoot(skillRoot, `references/${relativePath}`));
 		},
 		async writeArtifact(path, content, options) {
-			return typeof content === "string" ? artifactStore.createTextArtifact({
+			const artifact = typeof content === "string" ? await artifactStore.createTextArtifact({
 				runId,
 				path,
 				content,
 				mimeType: options?.mimeType
-			}) : artifactStore.createBinaryArtifact({
+			}) : await artifactStore.createBinaryArtifact({
 				runId,
 				path,
 				content,
 				mimeType: options?.mimeType
 			});
+			onArtifactCreated?.(artifact);
+			return artifact;
 		},
 		...confirm ? { confirm } : {},
 		...onWarning ? { onWarning } : {}
@@ -1136,7 +1562,7 @@ var AgentLoop = class {
 		try {
 			const text = await state.reader.readSkillFile(skillName, pathArg);
 			let note = "";
-			if (pathArg === "SKILL.md" && !state.activated.has(skillName)) note = await this.#activateSkill(skillName, state);
+			if (pathArg === "SKILL.md" && !state.activated.has(skillName)) note = await this.#activateSkill(skillName, state, void 0, text);
 			return {
 				ok: true,
 				content: [{
@@ -1190,7 +1616,7 @@ var AgentLoop = class {
 		return toolError("SKILL_NOT_FOUND", `Skill not found via external providers: ${skillKey}`);
 	}
 	/** 首次读到 SKILL.md 时激活技能：加载其 scripts 工具定义，供后续轮次使用；dependencies 级联激活（via 记录来源） */
-	async #activateSkill(skillName, state, via) {
+	async #activateSkill(skillName, state, via, skillMdText) {
 		state.activated.add(skillName);
 		state.trace.record("skill.activated", { data: {
 			skillName,
@@ -1203,11 +1629,11 @@ var AgentLoop = class {
 		let allowedTools;
 		let dependencies = [];
 		try {
-			const { metadata } = parseSkillMarkdown(await this.#deps.fs.readText(`${root}/SKILL.md`));
+			const { metadata } = parseSkillMarkdown(skillMdText ?? await this.#deps.fs.readText(`${root}/SKILL.md`));
 			const rawDeps = metadata["dependencies"];
 			if (Array.isArray(rawDeps)) dependencies = rawDeps.filter((d) => typeof d === "string");
-			const raw = metadata["allowed-tools"];
-			if (raw !== void 0) if (Array.isArray(raw)) allowedTools = raw.filter((e) => typeof e === "string");
+			const rawAllowed = metadata["allowed-tools"];
+			if (rawAllowed !== void 0) if (Array.isArray(rawAllowed)) allowedTools = rawAllowed.filter((e) => typeof e === "string");
 			else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "allowed-tools" metadata entry; ignored` });
 		} catch {}
 		const executor = this.#deps.executor;
@@ -1290,6 +1716,7 @@ var AgentLoop = class {
 			if (e instanceof BridgeRequestError) return toolError("UI_UNAVAILABLE", `Parameter form failed: ${e.message}`);
 			throw e;
 		}
+		const createdIds = /* @__PURE__ */ new Set();
 		const context = createScriptContext({
 			fs: this.#deps.fs,
 			artifactStore: this.#deps.artifactStore,
@@ -1297,10 +1724,10 @@ var AgentLoop = class {
 			skillRoot: root,
 			runId: state.runId,
 			confirm: (message) => this.#confirm(message, state),
-			onWarning: (message) => state.trace.record("run.warning", { message })
+			onWarning: (message) => state.trace.record("run.warning", { message }),
+			onArtifactCreated: (artifact) => createdIds.add(artifact.id)
 		});
 		try {
-			const before = new Set((await this.#deps.artifactStore.listArtifacts(state.runId)).map((a) => a.id));
 			const result = await this.#deps.executor.execute({
 				skillRoot: root,
 				scriptName,
@@ -1308,8 +1735,10 @@ var AgentLoop = class {
 				context,
 				timeoutMs: state.toolTimeoutMs
 			});
-			const fresh = (await this.#deps.artifactStore.listArtifacts(state.runId)).filter((a) => !before.has(a.id));
-			if (fresh.length > 0) result.artifacts = [...result.artifacts ?? [], ...fresh];
+			if (createdIds.size > 0) {
+				const fresh = (await this.#deps.artifactStore.listArtifacts(state.runId)).filter((a) => createdIds.has(a.id));
+				if (fresh.length > 0) result.artifacts = [...result.artifacts ?? [], ...fresh];
+			}
 			await this.#bumpSkillStat(skillName, result.ok ? "successes" : "failures", state);
 			return result;
 		} catch (e) {
@@ -1623,6 +2052,16 @@ var WebSkillRuntime = class {
 function createWebSkillApi(deps) {
 	const { fs, roots } = deps;
 	let runtime;
+	const discoveries = /* @__PURE__ */ new Map();
+	const discoveryFor = (paths) => {
+		const key = paths.join("");
+		let discovery = discoveries.get(key);
+		if (!discovery) {
+			discovery = new SkillDiscovery(fs, paths);
+			discoveries.set(key, discovery);
+		}
+		return discovery;
+	};
 	const lazyRuntime = () => {
 		runtime ??= new WebSkillRuntime({
 			fs,
@@ -1640,11 +2079,11 @@ function createWebSkillApi(deps) {
 	};
 	return {
 		async discover(path) {
-			const { entries } = await new SkillDiscovery(fs, [path]).discover();
+			const { entries } = await discoveryFor([path]).discover();
 			return buildCatalog(entries);
 		},
 		async read(name) {
-			const { entries } = await new SkillDiscovery(fs, roots).discover();
+			const { entries } = await discoveryFor(roots).discover();
 			const entry = entries.find((e) => e.name === name);
 			if (!entry) throw new WebSkillError("SKILL_NOT_FOUND", `Unknown skill: ${name}`);
 			const skillMdPath = `${entry.root}/SKILL.md`;
@@ -1679,13 +2118,21 @@ function createWebSkillApi(deps) {
 		}
 	};
 }
-/** install URL 分派：http(s)…​.zip → http；…​.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；其余 → local */
+/** install URL 分派：http(s)…​.zip → http；…​.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；
+* 其余 http(s) URL → INSTALL_FAILED（不静默当 local）；非 URL → local */
 function sourceFromUrl(url) {
 	const bare = url.split("?")[0] ?? url;
-	if (/^https?:\/\//.test(url) && bare.endsWith(".zip")) return {
-		type: "http",
-		url
-	};
+	if (/^https?:\/\//.test(url)) {
+		if (bare.endsWith(".zip")) return {
+			type: "http",
+			url
+		};
+		if (bare.endsWith(".git")) return {
+			type: "git",
+			url
+		};
+		throw new WebSkillError("INSTALL_FAILED", `Unsupported install URL "${url}" (supported: http(s) URLs ending in .zip or .git, or local paths)`);
+	}
 	if (bare.endsWith(".git")) return {
 		type: "git",
 		url
@@ -1993,4 +2440,4 @@ var CapabilityApproval = class {
 };
 
 //#endregion
-export { normalizeToolContent as A, createWebSkillApi as C, isNetworkAllowed as D, fromVercelStreamPart as E, toVercelToolSpecs as F, resolveToolName as M, schemaToForm as N, mergeCatalogEntries as O, toLlmToolSpec as P, createScriptContext as S, fromVercelResult as T, RUN_SNAPSHOT_SCHEMA_VERSION as _, CapabilityApproval as a, bridgeError as b, FsMemoryStore as c, HookRunner as d, OpenAiCompatibleClient as f, READ_SKILL_FILE_TOOL_NAME as g, READ_SKILL_FILE_TOOL as h, AgentLoop as i, parseBridgeRequest as j, networkUrlHost as k, FsRunSnapshotStore as l, READ_SKILL_FILE_INPUT_SCHEMA as m, ASK_USER_TOOL as n, EventBus as o, ProgressiveRouter as p, ASK_USER_TOOL_NAME as r, FsArtifactStore as s, ASK_USER_INPUT_SCHEMA as t, FullDisclosureRouter as u, TraceRecorder as v, extractChartSpec as w, buildRenderResult as x, WebSkillRuntime as y };
+export { mergeCatalogEntries as A, buildRenderResult as C, fromVercelResult as D, extractChartSpec as E, schemaToForm as F, toLlmToolSpec as I, toVercelToolSpecs as L, normalizeToolContent as M, parseBridgeRequest as N, fromVercelStreamPart as O, resolveToolName as P, bridgeError as S, createWebSkillApi as T, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, TraceRecorder as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, networkUrlHost as j, isNetworkAllowed as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, createScriptContext as w, WebSkillRuntime as x, RUN_SNAPSHOT_SCHEMA_VERSION as y };