@webskill/sdk 0.1.2 → 0.1.4

package/dist/{dist-DRsnVw6A.js → dist-DAn07zHu.js}

@@ -1,4 +1,4 @@
-import { S as renderAvailableSkillsXml, T as validateSkills, b as parseSkillMarkdown, c as SkillReader, l as WebSkillError, s as SkillDiscovery, u as buildCatalog, w as resolveInsideRoot } from "./dist-DS1sfgHa.js";
+import { C as renderAvailableSkillsXml, E as validateSkills, T as resolveInsideRoot, c as SkillReader, d as buildCatalog, l as WebSkillError, s as SkillDiscovery, u as assertSafePathSegment, x as parseSkillMarkdown } from "./dist-DvoBsChX.js";
 import { t as MemoryArtifactStore } from "./memoryArtifactStore-C9lFVqPF-yFz6yJj0.js";
 
 //#region ../runtime/dist/index.js
@@ -33,7 +33,7 @@ const toOpenAiTools = (tools) => tools.map((tool) => ({
 		parameters: tool.inputSchema
 	}
 }));
-const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+const errorMessage$2 = (e) => e instanceof Error ? e.message : String(e);
 /** OpenAI chat completions 协议客户端（兼容端点通用） */
 var OpenAiCompatibleClient = class {
 	#config;
@@ -57,7 +57,7 @@ var OpenAiCompatibleClient = class {
 		try {
 			data = await res.json();
 		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage(e)}`, e);
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage$2(e)}`, e);
 		}
 		return this.#parseResponse(data);
 	}
@@ -79,7 +79,7 @@ var OpenAiCompatibleClient = class {
 			try {
 				chunk = JSON.parse(data);
 			} catch (e) {
-				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage(e)}`, data);
+				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$2(e)}`, data);
 			}
 			const delta = chunk.choices?.[0]?.delta;
 			if (!delta) return;
@@ -161,7 +161,7 @@ var OpenAiCompatibleClient = class {
 				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
 			});
 		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage(e)}`, e);
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage$2(e)}`, e);
 		}
 		if (!res.ok) {
 			const detail = await res.text().catch(() => "");
@@ -196,10 +196,433 @@ var OpenAiCompatibleClient = class {
 				toolCalls: toolCalls?.length ? toolCalls : void 0,
 				raw: data
 			};
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage$2(e)}`, data);
+		}
+	}
+};
+const ANTHROPIC_VERSION = "2023-06-01";
+const errorMessage$1 = (e) => e instanceof Error ? e.message : String(e);
+/** LlmMessage 序列 → system 独立参数 + user/assistant 消息（tool 结果合并进 user 消息 tool_result blocks） */
+function toAnthropicMessages(messages) {
+	const system = messages.filter((m) => m.role === "system").map((m) => m.content).join("\n");
+	const out = [];
+	for (const msg of messages) {
+		if (msg.role === "system") continue;
+		if (msg.role === "tool") {
+			const block = {
+				type: "tool_result",
+				tool_use_id: msg.toolCallId ?? "",
+				content: msg.content
+			};
+			const last = out.at(-1);
+			if (last && last.role === "user" && Array.isArray(last.content)) last.content.push(block);
+			else out.push({
+				role: "user",
+				content: [block]
+			});
+			continue;
+		}
+		if (msg.role === "assistant" && msg.toolCalls?.length) {
+			const content = [];
+			if (msg.content !== "") content.push({
+				type: "text",
+				text: msg.content
+			});
+			for (const call of msg.toolCalls) content.push({
+				type: "tool_use",
+				id: call.id,
+				name: call.name,
+				input: call.arguments
+			});
+			out.push({
+				role: "assistant",
+				content
+			});
+			continue;
+		}
+		out.push({
+			role: msg.role,
+			content: msg.content
+		});
+	}
+	return system === "" ? { messages: out } : {
+		system,
+		messages: out
+	};
+}
+const toAnthropicTools = (tools) => tools.map((tool) => ({
+	name: tool.name,
+	...tool.description ? { description: tool.description } : {},
+	input_schema: tool.inputSchema
+}));
+/** Anthropic Messages API 客户端（零依赖 fetch；Node/浏览器通用） */
+var AnthropicClient = class {
+	#config;
+	#fetch;
+	constructor(config) {
+		this.#config = config;
+		this.#fetch = config.fetchImpl ?? fetch;
+	}
+	#baseUrl() {
+		return (this.#config.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");
+	}
+	#headers() {
+		return {
+			"content-type": "application/json",
+			"x-api-key": this.#config.apiKey,
+			"anthropic-version": ANTHROPIC_VERSION,
+			"anthropic-dangerous-direct-browser-access": "true"
+		};
+	}
+	async complete(input) {
+		const res = await this.#post(input, false);
+		let data;
+		try {
+			data = await res.json();
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage$1(e)}`, e);
+		}
+		return this.#parseResponse(data);
+	}
+	/** SSE 流式：text_delta → text-delta；input_json_delta 按 block index 聚合 → tool-calls */
+	async *stream(input) {
+		const res = await this.#post(input, true);
+		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
+		const toolCallsByIndex = /* @__PURE__ */ new Map();
+		const decoder = new TextDecoder();
+		const reader = res.body.getReader();
+		let buffer = "";
+		const handleFrame = function* (data) {
+			let chunk;
+			try {
+				chunk = JSON.parse(data);
+			} catch (e) {
+				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$1(e)}`, data);
+			}
+			const type = chunk["type"];
+			if (type === "error") throw new WebSkillError("LLM_REQUEST_FAILED", `LLM stream error: ${chunk["error"]?.message ?? data}`);
+			if (type === "content_block_start") {
+				const block = chunk["content_block"];
+				if (block?.["type"] === "tool_use") {
+					const index = typeof chunk["index"] === "number" ? chunk["index"] : 0;
+					toolCallsByIndex.set(index, {
+						id: typeof block["id"] === "string" ? block["id"] : "",
+						name: typeof block["name"] === "string" ? block["name"] : "",
+						arguments: ""
+					});
+				}
+				return;
+			}
+			if (type === "content_block_delta") {
+				const index = typeof chunk["index"] === "number" ? chunk["index"] : 0;
+				const delta = chunk["delta"];
+				if (delta?.["type"] === "text_delta" && typeof delta["text"] === "string" && delta["text"] !== "") {
+					yield {
+						type: "text-delta",
+						delta: delta["text"]
+					};
+					return;
+				}
+				if (delta?.["type"] === "input_json_delta" && typeof delta["partial_json"] === "string") {
+					const acc = toolCallsByIndex.get(index) ?? {
+						id: "",
+						name: "",
+						arguments: ""
+					};
+					acc.arguments += delta["partial_json"];
+					toolCallsByIndex.set(index, acc);
+				}
+				return;
+			}
+		};
+		try {
+			for (;;) {
+				const { value, done: readerDone } = await reader.read();
+				if (readerDone) break;
+				buffer += decoder.decode(value, { stream: true });
+				buffer = buffer.replace(/\r\n/g, "\n");
+				let newline;
+				while ((newline = buffer.indexOf("\n")) >= 0) {
+					const line = buffer.slice(0, newline).trim();
+					buffer = buffer.slice(newline + 1);
+					if (line === "" || line.startsWith(":") || line.startsWith("event:")) continue;
+					if (!line.startsWith("data:")) continue;
+					yield* handleFrame(line.slice(5).trim());
+				}
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		if (toolCallsByIndex.size > 0) yield {
+			type: "tool-calls",
+			toolCalls: [...toolCallsByIndex.entries()].sort(([a], [b]) => a - b).map(([index, acc]) => {
+				let args = {};
+				try {
+					args = JSON.parse(acc.arguments || "{}");
+				} catch {}
+				return {
+					id: acc.id || `call-${index}`,
+					name: acc.name,
+					arguments: args
+				};
+			})
+		};
+		yield { type: "done" };
+	}
+	async #post(input, stream) {
+		const { system, messages } = toAnthropicMessages(input.messages);
+		const body = {
+			model: input.model ?? this.#config.model,
+			max_tokens: this.#config.maxTokens ?? 4096,
+			messages
+		};
+		if (system !== void 0) body["system"] = system;
+		if (input.tools?.length) body["tools"] = toAnthropicTools(input.tools);
+		if (input.temperature !== void 0) body["temperature"] = input.temperature;
+		if (stream) body["stream"] = true;
+		let res;
+		try {
+			res = await this.#fetch(`${this.#baseUrl()}/v1/messages`, {
+				method: "POST",
+				headers: this.#headers(),
+				body: JSON.stringify(body),
+				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
+			});
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage$1(e)}`, e);
+		}
+		if (!res.ok) {
+			const detail = await res.text().catch(() => "");
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`);
+		}
+		return res;
+	}
+	/** 轻量探测（GET /v1/models），集成测试据此决定 skip */
+	async checkAvailability() {
+		try {
+			return (await this.#fetch(`${this.#baseUrl()}/v1/models`, { headers: this.#headers() })).ok;
+		} catch {
+			return false;
+		}
+	}
+	#parseResponse(data) {
+		try {
+			const blocks = data.content;
+			if (!Array.isArray(blocks)) throw new Error("response has no content blocks");
+			const text = blocks.filter((b) => b["type"] === "text").map((b) => String(b["text"] ?? "")).join("");
+			const toolCalls = blocks.filter((b) => b["type"] === "tool_use").map((b) => ({
+				id: typeof b["id"] === "string" ? b["id"] : "",
+				name: typeof b["name"] === "string" ? b["name"] : "",
+				arguments: typeof b["input"] === "object" && b["input"] !== null ? b["input"] : {}
+			}));
+			return {
+				content: text === "" ? void 0 : text,
+				toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+				raw: data
+			};
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage$1(e)}`, data);
+		}
+	}
+};
+const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+/** tool 结果文本包装为 functionResponse.response 对象 */
+function responseObject(content) {
+	try {
+		const parsed = JSON.parse(content);
+		if (typeof parsed === "object" && parsed !== null) return parsed;
+	} catch {}
+	return { result: content };
+}
+/** LlmMessage 序列 → systemInstruction + contents（tool 结果合并进 user 消息 functionResponse parts） */
+function toGenAiContents(messages) {
+	const system = messages.filter((m) => m.role === "system").map((m) => m.content).join("\n");
+	const nameByCallId = /* @__PURE__ */ new Map();
+	for (const msg of messages) if (msg.role === "assistant") for (const call of msg.toolCalls ?? []) nameByCallId.set(call.id, call.name);
+	const out = [];
+	for (const msg of messages) {
+		if (msg.role === "system") continue;
+		if (msg.role === "tool") {
+			const callId = msg.toolCallId ?? "";
+			const part = { functionResponse: {
+				name: nameByCallId.get(callId) ?? callId,
+				response: responseObject(msg.content)
+			} };
+			const last = out.at(-1);
+			if (last && last.role === "user") last.parts.push(part);
+			else out.push({
+				role: "user",
+				parts: [part]
+			});
+			continue;
+		}
+		if (msg.role === "assistant") {
+			const parts = [];
+			if (msg.content !== "") parts.push({ text: msg.content });
+			for (const call of msg.toolCalls ?? []) parts.push({ functionCall: {
+				name: call.name,
+				args: call.arguments
+			} });
+			out.push({
+				role: "model",
+				parts: parts.length > 0 ? parts : [{ text: "" }]
+			});
+			continue;
+		}
+		out.push({
+			role: "user",
+			parts: [{ text: msg.content }]
+		});
+	}
+	return system === "" ? { contents: out } : {
+		systemInstruction: { parts: [{ text: system }] },
+		contents: out
+	};
+}
+const toGenAiTools = (tools) => [{ functionDeclarations: tools.map((tool) => ({
+	name: tool.name,
+	...tool.description ? { description: tool.description } : {},
+	parameters: tool.inputSchema
+})) }];
+/** Google GenAI（generateContent / streamGenerateContent）客户端（零依赖 fetch） */
+var GoogleGenAiClient = class {
+	#config;
+	#fetch;
+	constructor(config) {
+		this.#config = config;
+		this.#fetch = config.fetchImpl ?? fetch;
+	}
+	#baseUrl() {
+		return (this.#config.baseUrl ?? "https://generativelanguage.googleapis.com").replace(/\/+$/, "");
+	}
+	async complete(input) {
+		const res = await this.#post(input, false);
+		let data;
+		try {
+			data = await res.json();
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage(e)}`, e);
+		}
+		const parts = this.#responseParts(data);
+		const text = parts.filter((p) => typeof p["text"] === "string").map((p) => String(p["text"])).join("");
+		const toolCalls = this.#functionCalls(parts);
+		return {
+			content: text === "" ? void 0 : text,
+			toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+			raw: data
+		};
+	}
+	/** SSE 流式：chunk.parts text → text-delta；functionCall 聚合 → tool-calls */
+	async *stream(input) {
+		const res = await this.#post(input, true);
+		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
+		const toolCalls = [];
+		const decoder = new TextDecoder();
+		const reader = res.body.getReader();
+		let buffer = "";
+		const handleFrame = function* (data) {
+			let chunk;
+			try {
+				chunk = JSON.parse(data);
+			} catch (e) {
+				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage(e)}`, data);
+			}
+			const parts = chunk.candidates?.[0]?.content?.parts;
+			for (const part of parts ?? []) {
+				if (typeof part["text"] === "string" && part["text"] !== "") {
+					yield {
+						type: "text-delta",
+						delta: part["text"]
+					};
+					continue;
+				}
+				const call = part["functionCall"];
+				if (call) toolCalls.push({
+					id: `call-${toolCalls.length}`,
+					name: call.name ?? "",
+					arguments: call.args ?? {}
+				});
+			}
+		};
+		try {
+			for (;;) {
+				const { value, done: readerDone } = await reader.read();
+				if (readerDone) break;
+				buffer += decoder.decode(value, { stream: true });
+				buffer = buffer.replace(/\r\n/g, "\n");
+				let newline;
+				while ((newline = buffer.indexOf("\n")) >= 0) {
+					const line = buffer.slice(0, newline).trim();
+					buffer = buffer.slice(newline + 1);
+					if (line === "" || line.startsWith(":") || line.startsWith("event:")) continue;
+					if (!line.startsWith("data:")) continue;
+					yield* handleFrame(line.slice(5).trim());
+				}
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		if (toolCalls.length > 0) yield {
+			type: "tool-calls",
+			toolCalls
+		};
+		yield { type: "done" };
+	}
+	async #post(input, stream) {
+		const model = input.model ?? this.#config.model;
+		const action = stream ? `:streamGenerateContent?alt=sse&key=${encodeURIComponent(this.#config.apiKey)}` : `:generateContent?key=${encodeURIComponent(this.#config.apiKey)}`;
+		const { systemInstruction, contents } = toGenAiContents(input.messages);
+		const body = { contents };
+		if (systemInstruction) body["systemInstruction"] = systemInstruction;
+		if (input.tools?.length) body["tools"] = toGenAiTools(input.tools);
+		if (input.temperature !== void 0) body["generationConfig"] = { temperature: input.temperature };
+		let res;
+		try {
+			res = await this.#fetch(`${this.#baseUrl()}/v1beta/models/${encodeURIComponent(model)}${action}`, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify(body),
+				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
+			});
+		} catch (e) {
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage(e)}`, e);
+		}
+		if (!res.ok) {
+			const detail = await res.text().catch(() => "");
+			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`);
+		}
+		return res;
+	}
+	/** 轻量探测（GET /v1beta/models），集成测试据此决定 skip */
+	async checkAvailability() {
+		try {
+			return (await this.#fetch(`${this.#baseUrl()}/v1beta/models?key=${encodeURIComponent(this.#config.apiKey)}`)).ok;
+		} catch {
+			return false;
+		}
+	}
+	#responseParts(data) {
+		try {
+			const parts = data.candidates?.[0]?.content?.parts;
+			if (!Array.isArray(parts)) throw new Error("response has no candidates[0].content.parts");
+			return parts;
 		} catch (e) {
 			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage(e)}`, data);
 		}
 	}
+	#functionCalls(parts) {
+		const out = [];
+		for (const part of parts) {
+			const call = part["functionCall"];
+			if (call) out.push({
+				id: `call-${out.length}`,
+				name: call.name ?? "",
+				arguments: call.args ?? {}
+			});
+		}
+		return out;
+	}
 };
 function toVercelToolSpecs(tools) {
 	const out = {};
@@ -1154,6 +1577,7 @@ var AgentLoop = class {
 	}
 	/** 经外部技能提供者读取技能文档/资源；skillKey 为技能名或 mcp:// URI */
 	async #handleReadExternalSkill(skillKey, pathArg, state) {
+		const failures = [];
 		for (const provider of this.#deps.skillProviders ?? []) try {
 			let name = skillKey;
 			if (skillKey.startsWith("mcp://")) {
@@ -1187,10 +1611,12 @@ var AgentLoop = class {
 					text: await provider.readFile(name, pathArg)
 				}]
 			};
-		} catch {
+		} catch (e) {
+			failures.push(messageOf$1(e));
 			continue;
 		}
-		return toolError("SKILL_NOT_FOUND", `Skill not found via external providers: ${skillKey}`);
+		const detail = failures.length > 0 ? ` (provider errors: ${failures.join("; ")})` : "";
+		return toolError("SKILL_NOT_FOUND", `Skill not found via external providers: ${skillKey}${detail}`);
 	}
 	/** 首次读到 SKILL.md 时激活技能：加载其 scripts 工具定义，供后续轮次使用；dependencies 级联激活（via 记录来源） */
 	async #activateSkill(skillName, state, via, skillMdText) {
@@ -1212,7 +1638,9 @@ var AgentLoop = class {
 			const rawAllowed = metadata["allowed-tools"];
 			if (rawAllowed !== void 0) if (Array.isArray(rawAllowed)) allowedTools = rawAllowed.filter((e) => typeof e === "string");
 			else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "allowed-tools" metadata entry; ignored` });
-		} catch {}
+		} catch (e) {
+			state.trace.record("run.warning", { message: `Failed to read or parse SKILL.md of skill "${skillName}": ${messageOf$1(e)}` });
+		}
 		const executor = this.#deps.executor;
 		const loaded = [];
 		if (executor) {
@@ -1231,7 +1659,9 @@ var AgentLoop = class {
 					await this.#enrichDefinition(root, match[1], def, state);
 					state.activatedTools.set(def.name, def);
 					loaded.push(def.name);
-				} catch {}
+				} catch (e) {
+					state.trace.record("run.warning", { message: `Failed to load definition of script "${match[1]}" for skill "${skillName}": ${messageOf$1(e)}` });
+				}
 			}
 		}
 		let note = loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "";
@@ -1501,10 +1931,12 @@ var WebSkillRuntime = class {
 		if (!this.#catalogCache) await this.discover();
 		const cache = this.#catalogCache;
 		if (!cache) throw new Error("discover() did not populate the catalog cache");
+		const providerFailures = [];
 		const providerEntries = (await Promise.all((this.#deps.skillProviders ?? []).map(async (p) => {
 			try {
 				return await p.listSkills();
-			} catch {
+			} catch (e) {
+				providerFailures.push(e instanceof Error ? e.message : String(e));
 				return [];
 			}
 		}))).flat();
@@ -1534,6 +1966,13 @@ var WebSkillRuntime = class {
 			userPrompt,
 			route
 		});
+		for (const failure of providerFailures) result.run.trace.push({
+			id: `evt-provider-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+			runId: result.run.id,
+			ts: (/* @__PURE__ */ new Date()).toISOString(),
+			type: "run.warning",
+			message: `Skill provider listSkills() failed: ${failure}`
+		});
 		if (this.#deps.onSkillMiss && result.run.activeSkillNames.length === 0) this.#deps.onSkillMiss({
 			prompt: userPrompt,
 			run: result.run
@@ -1856,6 +2295,7 @@ var FsArtifactStore = class {
 		});
 	}
 	async listArtifacts(runId) {
+		assertSafePathSegment(runId, "runId");
 		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
 		if (!await this.#fs.exists(indexPath)) return [];
 		const raw = await this.#fs.readText(indexPath);
@@ -1867,6 +2307,7 @@ var FsArtifactStore = class {
 		}
 	}
 	#artifactPath(runId, artifactPath) {
+		assertSafePathSegment(runId, "runId");
 		return resolveInsideRoot(`${this.#root}/${runId}`, artifactPath);
 	}
 	async #persist(input) {
@@ -2017,4 +2458,4 @@ var CapabilityApproval = class {
 };
 
 //#endregion
-export { normalizeToolContent as A, createWebSkillApi as C, isNetworkAllowed as D, fromVercelStreamPart as E, toVercelToolSpecs as F, resolveToolName as M, schemaToForm as N, mergeCatalogEntries as O, toLlmToolSpec as P, createScriptContext as S, fromVercelResult as T, RUN_SNAPSHOT_SCHEMA_VERSION as _, CapabilityApproval as a, bridgeError as b, FsMemoryStore as c, HookRunner as d, OpenAiCompatibleClient as f, READ_SKILL_FILE_TOOL_NAME as g, READ_SKILL_FILE_TOOL as h, AgentLoop as i, parseBridgeRequest as j, networkUrlHost as k, FsRunSnapshotStore as l, READ_SKILL_FILE_INPUT_SCHEMA as m, ASK_USER_TOOL as n, EventBus as o, ProgressiveRouter as p, ASK_USER_TOOL_NAME as r, FsArtifactStore as s, ASK_USER_INPUT_SCHEMA as t, FullDisclosureRouter as u, TraceRecorder as v, extractChartSpec as w, buildRenderResult as x, WebSkillRuntime as y };
+export { mergeCatalogEntries as A, buildRenderResult as C, fromVercelResult as D, extractChartSpec as E, schemaToForm as F, toLlmToolSpec as I, toVercelToolSpecs as L, normalizeToolContent as M, parseBridgeRequest as N, fromVercelStreamPart as O, resolveToolName as P, bridgeError as S, createWebSkillApi as T, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, TraceRecorder as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, networkUrlHost as j, isNetworkAllowed as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, createScriptContext as w, WebSkillRuntime as x, RUN_SNAPSHOT_SCHEMA_VERSION as y };

package/dist/{dist-DS1sfgHa.js → dist-DvoBsChX.js}

@@ -174,8 +174,20 @@ function normalizePath(path) {
 	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
 }
 /**
+* 外部标识（runId、candidateId、skillName、versionId 等）作为单一路径段使用前的统一校验：
+* 拒绝空串、`.`、`..`、含 `/` 或 `\`、含 `:`（Windows 盘符/ADS）。
+* 违规抛 FS_PATH_OUTSIDE_ROOT（kind 用于错误消息定位，如 "runId"）。
+*/
+function assertSafePathSegment(segment, kind) {
+	if (segment === "" || segment === "." || segment === ".." || segment.includes("/") || segment.includes("\\") || segment.includes(":")) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Invalid ${kind} (must be a single safe path segment): ${JSON.stringify(segment)}`);
+}
+/**
 * 将相对路径安全地解析到 root 之内。
 * 拒绝空路径、绝对路径（`/`、`\\`、`C:\` 形式）与任何 `..` 段。
+*
+* 注意：本函数仅做**词法**校验，不解析符号链接——root 内经符号链接指向
+* 外部的目标无法被词法检查拦截（realpath 防护见 NodeFS root 模式与
+* 安装管线的 lstat 符号链接扫描）。
 */
 function resolveInsideRoot(root, relativePath) {
 	const fail = (reason) => {
@@ -587,4 +599,4 @@ const xmlRenderer = {
 };
 
 //#endregion
-export { renderCatalogJson as C, xmlRenderer as D, verifyManifest as E, renderAvailableSkillsXml as S, validateSkills as T, isValidSkillName as _, SKILL_NAME_PATTERN as a, parseSkillMarkdown as b, SkillReader as c, buildManifest as d, checkDependencyCycles as f, exportSkills as g, escapeXml as h, SKILL_NAME_MAX_LENGTH as i, WebSkillError as l, computeDigest as m, SKILLS_LOCKFILE as n, SKILL_PACK_FILE as o, checkSkillRules as p, SKILL_MANIFEST_FILE as r, SkillDiscovery as s, MemoryFS as t, buildCatalog as u, jsonRenderer as v, resolveInsideRoot as w, parseSkillPackManifest as x, normalizePath as y };
+export { renderAvailableSkillsXml as C, verifyManifest as D, validateSkills as E, xmlRenderer as O, parseSkillPackManifest as S, resolveInsideRoot as T, exportSkills as _, SKILL_NAME_PATTERN as a, normalizePath as b, SkillReader as c, buildCatalog as d, buildManifest as f, escapeXml as g, computeDigest as h, SKILL_NAME_MAX_LENGTH as i, WebSkillError as l, checkSkillRules as m, SKILLS_LOCKFILE as n, SKILL_PACK_FILE as o, checkDependencyCycles as p, SKILL_MANIFEST_FILE as r, SkillDiscovery as s, MemoryFS as t, assertSafePathSegment as u, isValidSkillName as v, renderCatalogJson as w, parseSkillMarkdown as x, jsonRenderer as y };

package/dist/{dist-DxGyAznR.js → dist-MTc2KB03.js}

@@ -1,4 +1,4 @@
-import { l as WebSkillError } from "./dist-DS1sfgHa.js";
+import { l as WebSkillError } from "./dist-DvoBsChX.js";
 
 //#region ../ui/dist/index.js
 /** 提交值按请求类型归形（WebFormBridge 与框架组件库共享单一来源） */
@@ -1040,8 +1040,7 @@ var LitRendererBridge = class {
 						values: formValues
 					}
 				});
-				if (input.type === "authorize" && !response.cancelled) response.value = true;
-				resolve(response);
+				resolve(this.#decodeValue(input, response));
 			}, { version: "v0.9.1" });
 			processor.onSurfaceCreated((surface) => {
 				const el = this.#doc.createElement("a2ui-surface");
@@ -1052,6 +1051,50 @@ var LitRendererBridge = class {
 			processor.processMessages(messages);
 		});
 	}
+	/**
+	* 按 InteractionRequest.type 解码提交值（绑定模型原样回传的是表单对象）：
+	* confirm 仅 confirmed===true 批准；select 还原原始 option 值（非字符串值经 JSON 编码比对）；
+	* form 的 number 字段转 number；ask 取 answer；authorize 提交即批准。
+	*/
+	#decodeValue(input, response) {
+		if (response.cancelled) return response;
+		const values = response.value;
+		switch (input.type) {
+			case "confirm": return {
+				...response,
+				value: values?.confirmed === true
+			};
+			case "ask": return {
+				...response,
+				value: values?.answer
+			};
+			case "select": {
+				const raw = values?.selected;
+				const option = input.options.find((o) => o.value === raw || JSON.stringify(o.value) === raw);
+				return {
+					...response,
+					value: option ? option.value : raw
+				};
+			}
+			case "form": {
+				if (typeof values !== "object" || values === null) return response;
+				const out = { ...values };
+				for (const field of input.fields) if (field.type === "number" && out[field.name] !== void 0) {
+					const n = Number(out[field.name]);
+					if (!Number.isNaN(n)) out[field.name] = n;
+				}
+				return {
+					...response,
+					value: out
+				};
+			}
+			case "authorize": return {
+				...response,
+				value: true
+			};
+			default: return response;
+		}
+	}
 };
 
 //#endregion

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { L as SkillManifest, N as SkillDocument, S as FileSystemProvider, c as LlmClient, j as SkillCatalogEntry, u as LlmMessage, v as UiBridge } from "./types-CgNC-oQu-Dq_A1yA-.js";
-import { U as RuntimeRun, it as WebSkillRuntime } from "./index-fjRF4H5o.js";
-import { d as SkillManager } from "./index-DkPK44Ji.js";
+import { L as SkillManifest, N as SkillDocument, S as FileSystemProvider, c as LlmClient, j as SkillCatalogEntry, u as LlmMessage, v as UiBridge } from "./types-CgNC-oQu-DYrxhD3z.js";
+import { ct as WebSkillRuntime, q as RuntimeRun } from "./index-BSS3EWY-.js";
+import { f as SkillManager } from "./index-npFMt2Zw.js";
 //#region ../governance/dist/index.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
@@ -311,11 +311,14 @@ interface EvaluationReport {
 }
 //#endregion
 //#region src/evaluation/evaluationRunner.d.ts
-/** 批量评估：顺序执行（单任务异常不中断批）；expected 参与判定；结构化报告 */
+/** 批量评估：顺序执行（单任务异常不中断批）；expected 参与判定；结构化报告。
+ *  注意：评估会真实执行技能脚本（试用路径）——必须显式 opt-in（allowExecution: true），
+ *  且沙箱执行器是能力面收敛而非安全边界，禁止对不可信候选技能直接跑评估。 */
 declare class EvaluationRunner {
   #private;
   constructor(deps: {
     runtime: WebSkillRuntime;
+    allowExecution?: boolean;
     now?: () => string;
     createId?: () => string;
   });