@webskill/sdk 0.1.2 → 0.1.4

package/dist/governance.js

@@ -1,5 +1,5 @@
-import { T as validateSkills, _ as isValidSkillName, l as WebSkillError, w as resolveInsideRoot } from "./dist-DS1sfgHa.js";
-import { i as NodeFS } from "./dist-SarUS8EP.js";
+import { E as validateSkills, T as resolveInsideRoot, l as WebSkillError, u as assertSafePathSegment, v as isValidSkillName } from "./dist-DvoBsChX.js";
+import { i as NodeFS } from "./dist-BVXZF7H_.js";
 import path from "node:path";
 import { mkdtemp } from "node:fs/promises";
 import { tmpdir } from "node:os";
@@ -115,9 +115,11 @@ var CandidateStore = class {
 	}
 	async save(candidate) {
 		validateCandidate(candidate);
+		assertSafePathSegment(candidate.id, "candidate id");
 		await this.#fs.writeText(`${dirOf$1(this.#root)}/${candidate.id}.json`, JSON.stringify(candidate, null, 2));
 	}
 	async get(id) {
+		assertSafePathSegment(id, "candidate id");
 		const path = `${dirOf$1(this.#root)}/${id}.json`;
 		if (!await this.#fs.exists(path)) throw new WebSkillError("GOVERNANCE_FAILED", `Candidate not found: ${id}`);
 		return JSON.parse(await this.#fs.readText(path));
@@ -370,7 +372,10 @@ var FsAuditLog = class {
 		return events;
 	}
 };
-const dirOf = (root, skillName) => `${root}/.webskill/versions/${skillName}`;
+const dirOf = (root, skillName) => {
+	assertSafePathSegment(skillName, "skill name");
+	return `${root}/.webskill/versions/${skillName}`;
+};
 /** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断） */
 var SkillVersionStore = class {
 	#root;
@@ -394,6 +399,7 @@ var SkillVersionStore = class {
 			reason: input.reason,
 			manifest: input.manifest
 		};
+		assertSafePathSegment(version.versionId, "version id");
 		await this.#fs.writeText(`${dirOf(this.#root, skillName)}/${version.versionId}.json`, JSON.stringify(version, null, 2));
 		return version;
 	}
@@ -408,6 +414,7 @@ var SkillVersionStore = class {
 		return out.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
 	}
 	async get(skillName, versionId) {
+		assertSafePathSegment(versionId, "version id");
 		const path = `${dirOf(this.#root, skillName)}/${versionId}.json`;
 		if (!await this.#fs.exists(path)) throw new WebSkillError("GOVERNANCE_FAILED", `Version "${versionId}" of skill "${skillName}" not found`);
 		return JSON.parse(await this.#fs.readText(path));
@@ -535,12 +542,14 @@ var SkillStatePolicy = class {
 		await this.#fs.writeText(fileOf(this.#root), JSON.stringify(data, null, 2));
 	}
 	async getState(skillName) {
+		assertSafePathSegment(skillName, "skill name");
 		return (await this.#load()).states[skillName] ?? "active";
 	}
 	async listStates() {
 		return { ...(await this.#load()).states };
 	}
 	async setState(skillName, state, input) {
+		assertSafePathSegment(skillName, "skill name");
 		const data = await this.#load();
 		data.states[skillName] = state;
 		if (state === "active") delete data.failures[skillName];
@@ -554,6 +563,7 @@ var SkillStatePolicy = class {
 	}
 	/** 失败计数；达阈值（默认 3）→ quarantined + 审计 */
 	async recordFailure(skillName, input = {}) {
+		assertSafePathSegment(skillName, "skill name");
 		const data = await this.#load();
 		const count = (data.failures[skillName] ?? 0) + 1;
 		data.failures[skillName] = count;
@@ -621,17 +631,22 @@ function matchExpected(expected, output, run) {
 	if (typeof expected === "string") return output.includes(expected);
 	return expected(output, run);
 }
-/** 批量评估：顺序执行（单任务异常不中断批）；expected 参与判定；结构化报告 */
+/** 批量评估：顺序执行（单任务异常不中断批）；expected 参与判定；结构化报告。
+*  注意：评估会真实执行技能脚本（试用路径）——必须显式 opt-in（allowExecution: true），
+*  且沙箱执行器是能力面收敛而非安全边界，禁止对不可信候选技能直接跑评估。 */
 var EvaluationRunner = class {
 	#runtime;
+	#allowExecution;
 	#now;
 	#createId;
 	constructor(deps) {
 		this.#runtime = deps.runtime;
+		this.#allowExecution = deps.allowExecution ?? false;
 		this.#now = deps.now;
 		this.#createId = deps.createId;
 	}
 	async run(tasks) {
+		if (!this.#allowExecution) throw new WebSkillError("GOVERNANCE_FAILED", "EvaluationRunner executes skill scripts; pass allowExecution: true to opt in (sandbox executors are capability-reducing, not a security boundary)");
 		const results = [];
 		for (const task of tasks) try {
 			const { output, run } = await this.#runtime.run(task.prompt);

package/dist/{index-fjRF4H5o.d.ts → index-BSS3EWY-.d.ts}

@@ -1,4 +1,4 @@
-import { A as SkillCatalog, C as JsonSchema, L as SkillManifest, M as SkillDiscovery, N as SkillDocument, P as SkillInstallSource, S as FileSystemProvider, U as ValidationReport, _ as RenderResultRequest, a as InteractionPolicy, b as DiscoveryResult, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, j as SkillCatalogEntry, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, u as LlmMessage, v as UiBridge } from "./types-CgNC-oQu-Dq_A1yA-.js";
+import { A as SkillCatalog, C as JsonSchema, L as SkillManifest, M as SkillDiscovery, N as SkillDocument, P as SkillInstallSource, S as FileSystemProvider, U as ValidationReport, _ as RenderResultRequest, a as InteractionPolicy, b as DiscoveryResult, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, j as SkillCatalogEntry, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, u as LlmMessage, v as UiBridge } from "./types-CgNC-oQu-DYrxhD3z.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/openAiCompatibleClient.d.ts
 interface OpenAiCompatibleClientConfig {
@@ -21,6 +21,52 @@ declare class OpenAiCompatibleClient implements LlmClient {
   checkAvailability(): Promise<boolean>;
 }
 //#endregion
+//#region src/llm/anthropicClient.d.ts
+interface AnthropicClientConfig {
+  apiKey: string;
+  model: string;
+  /** 默认 https://api.anthropic.com */
+  baseUrl?: string;
+  /** 可注入 fetch（测试用 mock）；缺省用全局 fetch */
+  fetchImpl?: typeof fetch;
+  /** 单次请求超时 */
+  requestTimeoutMs?: number;
+  /** max_tokens（Messages API 必填），默认 4096 */
+  maxTokens?: number;
+}
+/** Anthropic Messages API 客户端（零依赖 fetch；Node/浏览器通用） */
+declare class AnthropicClient implements LlmClient {
+  #private;
+  constructor(config: AnthropicClientConfig);
+  complete(input: LlmCompleteInput): Promise<LlmResponse>;
+  /** SSE 流式：text_delta → text-delta；input_json_delta 按 block index 聚合 → tool-calls */
+  stream(input: LlmCompleteInput): AsyncIterable<LlmStreamEvent>;
+  /** 轻量探测（GET /v1/models），集成测试据此决定 skip */
+  checkAvailability(): Promise<boolean>;
+}
+//#endregion
+//#region src/llm/googleGenAiClient.d.ts
+interface GoogleGenAiClientConfig {
+  apiKey: string;
+  model: string;
+  /** 默认 https://generativelanguage.googleapis.com */
+  baseUrl?: string;
+  /** 可注入 fetch（测试用 mock）；缺省用全局 fetch */
+  fetchImpl?: typeof fetch;
+  /** 单次请求超时 */
+  requestTimeoutMs?: number;
+}
+/** Google GenAI（generateContent / streamGenerateContent）客户端（零依赖 fetch） */
+declare class GoogleGenAiClient implements LlmClient {
+  #private;
+  constructor(config: GoogleGenAiClientConfig);
+  complete(input: LlmCompleteInput): Promise<LlmResponse>;
+  /** SSE 流式：chunk.parts text → text-delta；functionCall 聚合 → tool-calls */
+  stream(input: LlmCompleteInput): AsyncIterable<LlmStreamEvent>;
+  /** 轻量探测（GET /v1beta/models），集成测试据此决定 skip */
+  checkAvailability(): Promise<boolean>;
+}
+//#endregion
 //#region src/llm/vercelAiAdapter.d.ts
 /**
  * Vercel AI SDK 适配层：纯数据转换，不 import SDK。
@@ -697,4 +743,4 @@ declare class WebSkillRuntime {
   resumeRun(runId: string): Promise<RunResult>;
 }
 //#endregion
-export { TraceEvent as $, OpenAiCompatibleClient as A, RunSnapshotStore as B, HookRunnerOptions as C, LifecycleHookContext as D, LifecycleHook as E, READ_SKILL_FILE_TOOL_NAME as F, SchemaInferer as G, RuntimePhase as H, RUN_SNAPSHOT_SCHEMA_VERSION as I, SkillRouter as J, ScriptExecutionContext as K, RouteResult as L, ProgressiveRouter as M, READ_SKILL_FILE_INPUT_SCHEMA as N, LifecycleListener as O, READ_SKILL_FILE_TOOL as P, TraceClock as Q, RunResult as R, HookRunner as S, LifecycleEvent as T, RuntimeRun as U, RunTerminationReason as V, RuntimeSession as W, ToolResolution as X, ToolDefinition as Y, ToolResult as Z, ExternalToolSource as _, parseBridgeRequest as _t, AgentLoopConfig as a, WebSkillRuntimeDeps as at, FsRunSnapshotStore as b, toLlmToolSpec as bt, ApprovalScope as c, createScriptContext as ct, BridgeRequest as d, fromVercelResult as dt, TraceEventType as et, BridgeResponse as f, fromVercelStreamPart as ft, ExternalSkillProvider as g, normalizeToolContent as gt, EventBus as h, networkUrlHost as ht, AgentLoop as i, WebSkillRuntime as it, OpenAiCompatibleClientConfig as j, NetworkPolicy as k, BridgeCapabilities as l, createWebSkillApi as lt, CapabilityMode as m, mergeCatalogEntries as mt, ASK_USER_TOOL as n, VercelToolSpec as nt, AgentLoopDeps as o, bridgeError as ot, CapabilityApproval as p, isNetworkAllowed as pt, ScriptExecutor as q, ASK_USER_TOOL_NAME as r, WebSkillApi as rt, ApprovalDecision as s, buildRenderResult as st, ASK_USER_INPUT_SCHEMA as t, TraceRecorder as tt, BridgeCapability as u, extractChartSpec as ut, FsArtifactStore as v, resolveToolName as vt, InstalledSkillManifest as w, FullDisclosureRouter as x, toVercelToolSpecs as xt, FsMemoryStore as y, schemaToForm as yt, RunSnapshot as z };
+export { ToolDefinition as $, LifecycleHook as A, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, schemaToForm as Ct, HookRunnerOptions as D, HookRunner as E, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, NetworkPolicy as N, InstalledSkillManifest as O, OpenAiCompatibleClient as P, SkillRouter as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, resolveToolName as St, GoogleGenAiClientConfig as T, toVercelToolSpecs as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, ScriptExecutionContext as X, SchemaInferer as Y, ScriptExecutor as Z, EventBus as _, isNetworkAllowed as _t, AgentLoopConfig as a, TraceRecorder as at, FsArtifactStore as b, normalizeToolContent as bt, AnthropicClientConfig as c, WebSkillRuntime as ct, BridgeCapabilities as d, buildRenderResult as dt, ToolResolution as et, BridgeCapability as f, createScriptContext as ft, CapabilityMode as g, fromVercelStreamPart as gt, CapabilityApproval as h, fromVercelResult as ht, AgentLoop as i, TraceEventType as it, LifecycleHookContext as j, LifecycleEvent as k, ApprovalDecision as l, WebSkillRuntimeDeps as lt, BridgeResponse as m, extractChartSpec as mt, ASK_USER_TOOL as n, TraceClock as nt, AgentLoopDeps as o, VercelToolSpec as ot, BridgeRequest as p, createWebSkillApi as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, TraceEvent as rt, AnthropicClient as s, WebSkillApi as st, ASK_USER_INPUT_SCHEMA as t, ToolResult as tt, ApprovalScope as u, bridgeError as ut, ExternalSkillProvider as v, mergeCatalogEntries as vt, GoogleGenAiClient as w, toLlmToolSpec as wt, FsMemoryStore as x, parseBridgeRequest as xt, ExternalToolSource as y, networkUrlHost as yt, READ_SKILL_FILE_TOOL_NAME as z };

package/dist/{index-DkPK44Ji.d.ts → index-npFMt2Zw.d.ts}

@@ -1,12 +1,19 @@
-import { C as JsonSchema, H as SkillsLockfile, L as SkillManifest, P as SkillInstallSource, S as FileSystemProvider, W as VerifyResult, _ as RenderResultRequest, o as InteractionRequest, s as InteractionResponse, v as UiBridge, x as FileStat } from "./types-CgNC-oQu-Dq_A1yA-.js";
-import { G as SchemaInferer, K as ScriptExecutionContext, Y as ToolDefinition, Z as ToolResult, c as ApprovalScope, k as NetworkPolicy, l as BridgeCapabilities, q as ScriptExecutor, v as FsArtifactStore, y as FsMemoryStore } from "./index-fjRF4H5o.js";
+import { C as JsonSchema, H as SkillsLockfile, L as SkillManifest, P as SkillInstallSource, S as FileSystemProvider, W as VerifyResult, _ as RenderResultRequest, o as InteractionRequest, s as InteractionResponse, v as UiBridge, x as FileStat } from "./types-CgNC-oQu-DYrxhD3z.js";
+import { $ as ToolDefinition, N as NetworkPolicy, X as ScriptExecutionContext, Y as SchemaInferer, Z as ScriptExecutor, b as FsArtifactStore, d as BridgeCapabilities, tt as ToolResult, u as ApprovalScope, x as FsMemoryStore } from "./index-BSS3EWY-.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
 //#region src/fs/nodeFs.d.ts
-/** 基于 node:fs/promises 的 FileSystemProvider；接受 `/` 风格路径，写入自动创建父目录 */
+/**
+ * 基于 node:fs/promises 的 FileSystemProvider；接受 `/` 风格路径，写入自动创建父目录。
+ * 可选 root 模式：构造传入 root 后，read/write 操作先做 realpath 包含校验
+ * （root 与目标都 realpath 后前缀比对），经符号链接逃逸 root → FS_PATH_OUTSIDE_ROOT。
+ */
 declare class NodeFS implements FileSystemProvider {
   #private;
   readonly kind = "node";
+  constructor(deps?: {
+    root?: string;
+  });
   readText(p: string): Promise<string>;
   writeText(p: string, content: string): Promise<void>;
   readBinary(p: string): Promise<Uint8Array>;
@@ -50,6 +57,8 @@ interface SandboxOptions {
   capabilities?: BridgeCapabilities;
   /** 网络策略：默认 'deny-all'（白名单见 runtime/sandbox/networkPolicy） */
   networkPolicy?: NetworkPolicy;
+  /** 裸模块 allowlist（默认 []：一切 node: 内置模块全禁；按需放行如 ['node:path']） */
+  allowedModules?: string[];
   /** require-approval 模式的授权询问出口（缺失时 require-approval 一律拒绝） */
   uiBridge?: UiBridge;
   /** 授权粒度：默认 'once-per-run' */
@@ -60,6 +69,10 @@ interface SandboxOptions {
  * 每次执行独立 Worker（resourceLimits + env 白名单），loadDefinition 同样在
  * Worker 内完成（禁止主进程 import 不可信脚本）；超时 terminate（可杀同步死循环）。
  * 能力桥协议与浏览器同一来源（runtime/sandbox/bridgeProtocol）。
+ *
+ * 诚实标注：本执行器做的是**能力面收敛**（网络策略、模块 allowlist、资源限额、
+ * 超时强杀），**不是安全边界**——Worker 内脚本与宿主共享进程，仍有绕过手段；
+ * 禁止假定其可隔离不可信脚本。
  */
 declare class SandboxedScriptExecutor implements ScriptExecutor {
   #private;
@@ -172,11 +185,20 @@ interface LlmEnvConfig {
   apiKey: string;
   model: string;
 }
+/** per-provider env 配置（baseUrl 可选，客户端自带默认） */
+interface ProviderEnvConfig {
+  apiKey: string;
+  model: string;
+  baseUrl?: string;
+}
 /**
- * 解析 .env（简单 KEY=VALUE 行解析，不引依赖），
  * 读取 VITE_BASE_URL / VITE_API_KEY / VITE_MODEL_NAME；缺项返回 undefined 供测试 skip 判断。
  */
 declare function loadLlmConfigFromEnv(dotenvPath?: string): LlmEnvConfig | undefined;
+/** ANTHROPIC_API_KEY / ANTHROPIC_MODEL（可选 ANTHROPIC_BASE_URL）；缺项返回 undefined */
+declare function loadAnthropicConfigFromEnv(dotenvPath?: string): ProviderEnvConfig | undefined;
+/** GOOGLE_API_KEY / GOOGLE_MODEL（可选 GOOGLE_BASE_URL）；缺项返回 undefined */
+declare function loadGoogleConfigFromEnv(dotenvPath?: string): ProviderEnvConfig | undefined;
 interface LlmCapabilities {
   available: boolean;
   nonStreaming: boolean;
@@ -192,4 +214,4 @@ interface LlmCapabilities {
  */
 declare function probeLlmCapabilities(config: LlmEnvConfig): Promise<LlmCapabilities>;
 //#endregion
-export { LlmEnvConfig as a, OxcSchemaInferer as c, SkillManager as d, loadLlmConfigFromEnv as f, LlmCapabilities as i, SandboxOptions as l, readArchiveManifest as m, FileArtifactStore as n, NodeFS as o, probeLlmCapabilities as p, FileMemoryStore as r, NodeScriptExecutor as s, CliUiBridge as t, SandboxedScriptExecutor as u };
+export { readArchiveManifest as _, LlmEnvConfig as a, OxcSchemaInferer as c, SandboxedScriptExecutor as d, SkillManager as f, probeLlmCapabilities as g, loadLlmConfigFromEnv as h, LlmCapabilities as i, ProviderEnvConfig as l, loadGoogleConfigFromEnv as m, FileArtifactStore as n, NodeFS as o, loadAnthropicConfigFromEnv as p, FileMemoryStore as r, NodeScriptExecutor as s, CliUiBridge as t, SandboxOptions as u };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as exportSkills, A as SkillCatalog, B as SkillReader, C as JsonSchema, D as SKILL_NAME_MAX_LENGTH, E as SKILL_MANIFEST_FILE, F as SkillIssue, G as WebSkillError, H as SkillsLockfile, I as SkillLocation, J as buildManifest, K as WebSkillErrorCode, L as SkillManifest, M as SkillDiscovery, N as SkillDocument, O as SKILL_NAME_PATTERN, P as SkillInstallSource, Q as escapeXml, R as SkillMetadata, S as FileSystemProvider, T as SKILLS_LOCKFILE, U as ValidationReport, V as SkillSource, W as VerifyResult, X as checkSkillRules, Y as checkDependencyCycles, Z as computeDigest, _ as RenderResultRequest, a as InteractionPolicy, at as renderAvailableSkillsXml, b as DiscoveryResult, c as LlmClient, ct as validateSkills, d as LlmResponse, et as isValidSkillName, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, it as parseSkillPackManifest, j as SkillCatalogEntry, k as SKILL_PACK_FILE, l as LlmCompleteInput, lt as verifyManifest, m as LlmToolSpec, n as ArtifactStore, nt as normalizePath, o as InteractionRequest, ot as renderCatalogJson, p as LlmToolCall, q as buildCatalog, r as ChartSpec, rt as parseSkillMarkdown, s as InteractionResponse, st as resolveInsideRoot, t as Artifact, tt as jsonRenderer, u as LlmMessage, ut as xmlRenderer, v as UiBridge, w as MemoryFS, x as FileStat, y as CatalogRenderer, z as SkillPackManifest } from "./types-CgNC-oQu-Dq_A1yA-.js";
-import { $ as TraceEvent, A as OpenAiCompatibleClient, B as RunSnapshotStore, C as HookRunnerOptions, D as LifecycleHookContext, E as LifecycleHook, F as READ_SKILL_FILE_TOOL_NAME, G as SchemaInferer, H as RuntimePhase, I as RUN_SNAPSHOT_SCHEMA_VERSION, J as SkillRouter, K as ScriptExecutionContext, L as RouteResult, M as ProgressiveRouter, N as READ_SKILL_FILE_INPUT_SCHEMA, O as LifecycleListener, P as READ_SKILL_FILE_TOOL, Q as TraceClock, R as RunResult, S as HookRunner, T as LifecycleEvent, U as RuntimeRun, V as RunTerminationReason, W as RuntimeSession, X as ToolResolution, Y as ToolDefinition, Z as ToolResult, _ as ExternalToolSource, _t as parseBridgeRequest, a as AgentLoopConfig, at as WebSkillRuntimeDeps, b as FsRunSnapshotStore, bt as toLlmToolSpec, c as ApprovalScope, ct as createScriptContext, d as BridgeRequest, dt as fromVercelResult, et as TraceEventType, f as BridgeResponse, ft as fromVercelStreamPart, g as ExternalSkillProvider, gt as normalizeToolContent, h as EventBus, ht as networkUrlHost, i as AgentLoop, it as WebSkillRuntime, j as OpenAiCompatibleClientConfig, k as NetworkPolicy, l as BridgeCapabilities, lt as createWebSkillApi, m as CapabilityMode, mt as mergeCatalogEntries, n as ASK_USER_TOOL, nt as VercelToolSpec, o as AgentLoopDeps, ot as bridgeError, p as CapabilityApproval, pt as isNetworkAllowed, q as ScriptExecutor, r as ASK_USER_TOOL_NAME, rt as WebSkillApi, s as ApprovalDecision, st as buildRenderResult, t as ASK_USER_INPUT_SCHEMA, tt as TraceRecorder, u as BridgeCapability, ut as extractChartSpec, v as FsArtifactStore, vt as resolveToolName, w as InstalledSkillManifest, x as FullDisclosureRouter, xt as toVercelToolSpecs, y as FsMemoryStore, yt as schemaToForm, z as RunSnapshot } from "./index-fjRF4H5o.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, type ApprovalDecision, type ApprovalScope, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RuntimePhase, type RuntimeRun, type RuntimeSession, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSource, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type UiBridge, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, networkUrlHost, normalizePath, normalizeToolContent, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, renderAvailableSkillsXml, renderCatalogJson, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, validateSkills, verifyManifest, xmlRenderer };
+import { $ as escapeXml, A as SkillCatalog, B as SkillReader, C as JsonSchema, D as SKILL_NAME_MAX_LENGTH, E as SKILL_MANIFEST_FILE, F as SkillIssue, G as WebSkillError, H as SkillsLockfile, I as SkillLocation, J as buildCatalog, K as WebSkillErrorCode, L as SkillManifest, M as SkillDiscovery, N as SkillDocument, O as SKILL_NAME_PATTERN, P as SkillInstallSource, Q as computeDigest, R as SkillMetadata, S as FileSystemProvider, T as SKILLS_LOCKFILE, U as ValidationReport, V as SkillSource, W as VerifyResult, X as checkDependencyCycles, Y as buildManifest, Z as checkSkillRules, _ as RenderResultRequest, a as InteractionPolicy, at as parseSkillPackManifest, b as DiscoveryResult, c as LlmClient, ct as resolveInsideRoot, d as LlmResponse, dt as xmlRenderer, et as exportSkills, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, it as parseSkillMarkdown, j as SkillCatalogEntry, k as SKILL_PACK_FILE, l as LlmCompleteInput, lt as validateSkills, m as LlmToolSpec, n as ArtifactStore, nt as jsonRenderer, o as InteractionRequest, ot as renderAvailableSkillsXml, p as LlmToolCall, q as assertSafePathSegment, r as ChartSpec, rt as normalizePath, s as InteractionResponse, st as renderCatalogJson, t as Artifact, tt as isValidSkillName, u as LlmMessage, ut as verifyManifest, v as UiBridge, w as MemoryFS, x as FileStat, y as CatalogRenderer, z as SkillPackManifest } from "./types-CgNC-oQu-DYrxhD3z.js";
+import { $ as ToolDefinition, A as LifecycleHook, B as RUN_SNAPSHOT_SCHEMA_VERSION, C as FullDisclosureRouter, Ct as schemaToForm, D as HookRunnerOptions, E as HookRunner, F as OpenAiCompatibleClientConfig, G as RunTerminationReason, H as RunResult, I as ProgressiveRouter, J as RuntimeSession, K as RuntimePhase, L as READ_SKILL_FILE_INPUT_SCHEMA, M as LifecycleListener, N as NetworkPolicy, O as InstalledSkillManifest, P as OpenAiCompatibleClient, Q as SkillRouter, R as READ_SKILL_FILE_TOOL, S as FsRunSnapshotStore, St as resolveToolName, T as GoogleGenAiClientConfig, Tt as toVercelToolSpecs, U as RunSnapshot, V as RouteResult, W as RunSnapshotStore, X as ScriptExecutionContext, Y as SchemaInferer, Z as ScriptExecutor, _ as EventBus, _t as isNetworkAllowed, a as AgentLoopConfig, at as TraceRecorder, b as FsArtifactStore, bt as normalizeToolContent, c as AnthropicClientConfig, ct as WebSkillRuntime, d as BridgeCapabilities, dt as buildRenderResult, et as ToolResolution, f as BridgeCapability, ft as createScriptContext, g as CapabilityMode, gt as fromVercelStreamPart, h as CapabilityApproval, ht as fromVercelResult, i as AgentLoop, it as TraceEventType, j as LifecycleHookContext, k as LifecycleEvent, l as ApprovalDecision, lt as WebSkillRuntimeDeps, m as BridgeResponse, mt as extractChartSpec, n as ASK_USER_TOOL, nt as TraceClock, o as AgentLoopDeps, ot as VercelToolSpec, p as BridgeRequest, pt as createWebSkillApi, q as RuntimeRun, r as ASK_USER_TOOL_NAME, rt as TraceEvent, s as AnthropicClient, st as WebSkillApi, t as ASK_USER_INPUT_SCHEMA, tt as ToolResult, u as ApprovalScope, ut as bridgeError, v as ExternalSkillProvider, vt as mergeCatalogEntries, w as GoogleGenAiClient, wt as toLlmToolSpec, x as FsMemoryStore, xt as parseBridgeRequest, y as ExternalToolSource, yt as networkUrlHost, z as READ_SKILL_FILE_TOOL_NAME } from "./index-BSS3EWY-.js";
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RuntimePhase, type RuntimeRun, type RuntimeSession, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSource, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type UiBridge, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertSafePathSegment, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, networkUrlHost, normalizePath, normalizeToolContent, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, renderAvailableSkillsXml, renderCatalogJson, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, validateSkills, verifyManifest, xmlRenderer };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { C as renderCatalogJson, D as xmlRenderer, E as verifyManifest, S as renderAvailableSkillsXml, T as validateSkills, _ as isValidSkillName, a as SKILL_NAME_PATTERN, b as parseSkillMarkdown, c as SkillReader, d as buildManifest, f as checkDependencyCycles, g as exportSkills, h as escapeXml, i as SKILL_NAME_MAX_LENGTH, l as WebSkillError, m as computeDigest, n as SKILLS_LOCKFILE, o as SKILL_PACK_FILE, p as checkSkillRules, r as SKILL_MANIFEST_FILE, s as SkillDiscovery, t as MemoryFS, u as buildCatalog, v as jsonRenderer, w as resolveInsideRoot, x as parseSkillPackManifest, y as normalizePath } from "./dist-DS1sfgHa.js";
-import { A as normalizeToolContent, C as createWebSkillApi, D as isNetworkAllowed, E as fromVercelStreamPart, F as toVercelToolSpecs, M as resolveToolName, N as schemaToForm, O as mergeCatalogEntries, P as toLlmToolSpec, S as createScriptContext, T as fromVercelResult, _ as RUN_SNAPSHOT_SCHEMA_VERSION, a as CapabilityApproval, b as bridgeError, c as FsMemoryStore, d as HookRunner, f as OpenAiCompatibleClient, g as READ_SKILL_FILE_TOOL_NAME, h as READ_SKILL_FILE_TOOL, i as AgentLoop, j as parseBridgeRequest, k as networkUrlHost, l as FsRunSnapshotStore, m as READ_SKILL_FILE_INPUT_SCHEMA, n as ASK_USER_TOOL, o as EventBus, p as ProgressiveRouter, r as ASK_USER_TOOL_NAME, s as FsArtifactStore, t as ASK_USER_INPUT_SCHEMA, u as FullDisclosureRouter, v as TraceRecorder, w as extractChartSpec, x as buildRenderResult, y as WebSkillRuntime } from "./dist-DRsnVw6A.js";
+import { C as renderAvailableSkillsXml, D as verifyManifest, E as validateSkills, O as xmlRenderer, S as parseSkillPackManifest, T as resolveInsideRoot, _ as exportSkills, a as SKILL_NAME_PATTERN, b as normalizePath, c as SkillReader, d as buildCatalog, f as buildManifest, g as escapeXml, h as computeDigest, i as SKILL_NAME_MAX_LENGTH, l as WebSkillError, m as checkSkillRules, n as SKILLS_LOCKFILE, o as SKILL_PACK_FILE, p as checkDependencyCycles, r as SKILL_MANIFEST_FILE, s as SkillDiscovery, t as MemoryFS, u as assertSafePathSegment, v as isValidSkillName, w as renderCatalogJson, x as parseSkillMarkdown, y as jsonRenderer } from "./dist-DvoBsChX.js";
+import { A as mergeCatalogEntries, C as buildRenderResult, D as fromVercelResult, E as extractChartSpec, F as schemaToForm, I as toLlmToolSpec, L as toVercelToolSpecs, M as normalizeToolContent, N as parseBridgeRequest, O as fromVercelStreamPart, P as resolveToolName, S as bridgeError, T as createWebSkillApi, _ as READ_SKILL_FILE_TOOL, a as AnthropicClient, b as TraceRecorder, c as FsArtifactStore, d as FullDisclosureRouter, f as GoogleGenAiClient, g as READ_SKILL_FILE_INPUT_SCHEMA, h as ProgressiveRouter, i as AgentLoop, j as networkUrlHost, k as isNetworkAllowed, l as FsMemoryStore, m as OpenAiCompatibleClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as HookRunner, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_TOOL_NAME, w as createScriptContext, x as WebSkillRuntime, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-DAn07zHu.js";
 
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, CapabilityApproval, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, HookRunner, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, networkUrlHost, normalizePath, normalizeToolContent, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, renderAvailableSkillsXml, renderCatalogJson, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, validateSkills, verifyManifest, xmlRenderer };
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertSafePathSegment, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, networkUrlHost, normalizePath, normalizeToolContent, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, renderAvailableSkillsXml, renderCatalogJson, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, validateSkills, verifyManifest, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { C as JsonSchema, N as SkillDocument, j as SkillCatalogEntry, m as LlmToolSpec } from "./types-CgNC-oQu-Dq_A1yA-.js";
-import { Z as ToolResult, _ as ExternalToolSource, g as ExternalSkillProvider, mt as mergeCatalogEntries } from "./index-fjRF4H5o.js";
+import { C as JsonSchema, N as SkillDocument, j as SkillCatalogEntry, m as LlmToolSpec } from "./types-CgNC-oQu-DYrxhD3z.js";
+import { tt as ToolResult, v as ExternalSkillProvider, vt as mergeCatalogEntries, y as ExternalToolSource } from "./index-BSS3EWY-.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -241,4 +241,26 @@ declare class McpRuntimePlugin implements ExternalToolSource {
   call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
 }
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, catalogMerge, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+//#region src/remote/connectRemoteEndpoint.d.ts
+interface RemoteEndpointConfig {
+  /** registry 中的名字（endpoint:tool 引用） */
+  endpoint: string;
+  url: string;
+  /** 默认 'streamable-http'（现行标准）；'sse' 为遗留兼容 */
+  transport?: 'streamable-http' | 'sse';
+  /** 鉴权等请求头（Bearer 等），经 transport requestInit.headers 透传 */
+  headers?: Record<string, string>;
+  /** 连接超时；0/缺省 = 不超时 */
+  timeoutMs?: number;
+}
+/**
+ * 远程 MCP endpoint 装配：SDK 官方 StreamableHTTPClientTransport（默认）/
+ * SSEClientTransport（遗留）连接远端 server，注册进 EndpointRegistry——
+ * endpoint:tool 解析、TTL+版本缓存、临时技能消费自动生效。
+ * 返回 close 句柄：断开后 unregister（临时技能随既有生命周期自然消失）。
+ */
+declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<{
+  close(): Promise<void>;
+}>;
+//#endregion
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/mcp.js

@@ -1,6 +1,9 @@
-import { l as WebSkillError } from "./dist-DS1sfgHa.js";
-import { A as normalizeToolContent, O as mergeCatalogEntries } from "./dist-DRsnVw6A.js";
+import { l as WebSkillError } from "./dist-DvoBsChX.js";
+import { A as mergeCatalogEntries, M as normalizeToolContent } from "./dist-DAn07zHu.js";
 import { fromJSONSchema } from "zod";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -166,7 +169,7 @@ var EndpointRegistry = class {
 		for (const resolve of queue) resolve(client);
 	}
 };
-const messageOf$2 = (e) => e instanceof Error ? e.message : String(e);
+const messageOf$3 = (e) => e instanceof Error ? e.message : String(e);
 const failure$1 = (code, message) => ({
 	ok: false,
 	content: [],
@@ -191,20 +194,20 @@ var McpToolResolver = class {
 		try {
 			client = this.#registry.get(endpoint);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", messageOf$2(e));
+			return failure$1("MCP_ENDPOINT_UNAVAILABLE", messageOf$3(e));
 		}
 		let names;
 		try {
 			names = await this.#toolNames(endpoint, client);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Failed to list tools: ${messageOf$2(e)}`);
+			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Failed to list tools: ${messageOf$3(e)}`);
 		}
 		if (!names.has(toolName)) {
 			this.#cache.delete(endpoint);
 			try {
 				names = await this.#toolNames(endpoint, client);
 			} catch (e) {
-				return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Failed to list tools: ${messageOf$2(e)}`);
+				return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Failed to list tools: ${messageOf$3(e)}`);
 			}
 			if (!names.has(toolName)) return failure$1("MCP_TOOL_NOT_FOUND", `Tool "${toolName}" not found on endpoint "${endpoint}"`);
 		}
@@ -215,7 +218,7 @@ var McpToolResolver = class {
 			});
 			return this.#normalizeCallResult(raw);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Tool "${toolName}" on endpoint "${endpoint}" failed: ${messageOf$2(e)}`);
+			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Tool "${toolName}" on endpoint "${endpoint}" failed: ${messageOf$3(e)}`);
 		}
 	}
 	async #toolNames(endpoint, client) {
@@ -262,7 +265,7 @@ function webMcpToolLlmName(toolName) {
 function parseWebMcpToolLlmName(llmName) {
 	return llmName.startsWith("mcp__") && llmName.length > 5 ? llmName.slice(5) : void 0;
 }
-const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
+const messageOf$2 = (e) => e instanceof Error ? e.message : String(e);
 const textOfContent = (content) => {
 	if (typeof content === "string") return content;
 	if (typeof content === "object" && content !== null) {
@@ -308,7 +311,7 @@ var TemporarySkillProvider = class {
 		try {
 			result = await client.getPrompt({ name });
 		} catch (e) {
-			throw new WebSkillError("SKILL_NOT_FOUND", `Prompt "${name}" not found on endpoint "${this.#endpoint}": ${messageOf$1(e)}`, e);
+			throw new WebSkillError("SKILL_NOT_FOUND", `Prompt "${name}" not found on endpoint "${this.#endpoint}": ${messageOf$2(e)}`, e);
 		}
 		const body = (result.messages ?? []).map((m) => textOfContent(m.content)).filter(Boolean).join("\n\n");
 		return {
@@ -333,7 +336,7 @@ var TemporarySkillProvider = class {
 		try {
 			return this.#registry.get(this.#endpoint);
 		} catch (e) {
-			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", messageOf$1(e), e);
+			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", messageOf$2(e), e);
 		}
 	}
 };
@@ -369,7 +372,7 @@ function serveSkillAsMcp(server, skill) {
 * 实现单一来源在 runtime（runtime 自身合并也用同一函数）。
 */
 const catalogMerge = mergeCatalogEntries;
-const messageOf = (e) => e instanceof Error ? e.message : String(e);
+const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
 const failure = (code, message) => ({
 	ok: false,
 	content: [],
@@ -432,7 +435,7 @@ var ExperimentalWebMcpAdapter = class {
 				content: normalizeToolContent(await api.executeTool(toolName, JSON.stringify(args)))
 			};
 		} catch (e) {
-			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);
+			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf$1(e)}`);
 		}
 	}
 };
@@ -512,6 +515,48 @@ var McpRuntimePlugin = class {
 		};
 	}
 };
+const messageOf = (e) => e instanceof Error ? e.message : String(e);
+/**
+* 远程 MCP endpoint 装配：SDK 官方 StreamableHTTPClientTransport（默认）/
+* SSEClientTransport（遗留）连接远端 server，注册进 EndpointRegistry——
+* endpoint:tool 解析、TTL+版本缓存、临时技能消费自动生效。
+* 返回 close 句柄：断开后 unregister（临时技能随既有生命周期自然消失）。
+*/
+async function connectRemoteEndpoint(registry, config) {
+	const url = new URL(config.url);
+	const requestInit = config.headers ? { headers: config.headers } : void 0;
+	const transport = config.transport === "sse" ? new SSEClientTransport(url, { ...requestInit ? { requestInit } : {} }) : new StreamableHTTPClientTransport(url, { ...requestInit ? { requestInit } : {} });
+	const client = new Client({
+		name: "webskill-remote-client",
+		version: "0.1.0"
+	});
+	const unavailable = (e) => new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to connect remote MCP endpoint "${config.endpoint}" at ${config.url}: ${messageOf(e)}`, e);
+	try {
+		let connect = client.connect(transport);
+		if (config.timeoutMs && config.timeoutMs > 0) {
+			const timeoutMs = config.timeoutMs;
+			connect = Promise.race([connect, new Promise((_resolve, reject) => setTimeout(() => reject(/* @__PURE__ */ new Error(`Connection timed out after ${timeoutMs}ms`)), timeoutMs))]);
+		}
+		await connect;
+	} catch (e) {
+		try {
+			await client.close();
+		} catch {}
+		throw unavailable(e);
+	}
+	registry.register(config.endpoint, client);
+	let closed = false;
+	return { close: async () => {
+		if (closed) return;
+		closed = true;
+		registry.unregister(config.endpoint);
+		try {
+			await client.close();
+		} catch (e) {
+			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to close remote MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
+		}
+	} };
+}
 
 //#endregion
-export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/node.d.ts

@@ -1,4 +1,4 @@
-import { E as SKILL_MANIFEST_FILE, H as SkillsLockfile, L as SkillManifest, P as SkillInstallSource, T as SKILLS_LOCKFILE, W as VerifyResult } from "./types-CgNC-oQu-Dq_A1yA-.js";
-import { ct as createScriptContext } from "./index-fjRF4H5o.js";
-import { a as LlmEnvConfig, c as OxcSchemaInferer, d as SkillManager, f as loadLlmConfigFromEnv, i as LlmCapabilities, l as SandboxOptions, m as readArchiveManifest, n as FileArtifactStore, o as NodeFS, p as probeLlmCapabilities, r as FileMemoryStore, s as NodeScriptExecutor, t as CliUiBridge, u as SandboxedScriptExecutor } from "./index-DkPK44Ji.js";
-export { CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createScriptContext, loadLlmConfigFromEnv, probeLlmCapabilities, readArchiveManifest };
+import { E as SKILL_MANIFEST_FILE, H as SkillsLockfile, L as SkillManifest, P as SkillInstallSource, T as SKILLS_LOCKFILE, W as VerifyResult } from "./types-CgNC-oQu-DYrxhD3z.js";
+import { ft as createScriptContext } from "./index-BSS3EWY-.js";
+import { _ as readArchiveManifest, a as LlmEnvConfig, c as OxcSchemaInferer, d as SandboxedScriptExecutor, f as SkillManager, g as probeLlmCapabilities, h as loadLlmConfigFromEnv, i as LlmCapabilities, l as ProviderEnvConfig, m as loadGoogleConfigFromEnv, n as FileArtifactStore, o as NodeFS, p as loadAnthropicConfigFromEnv, r as FileMemoryStore, s as NodeScriptExecutor, t as CliUiBridge, u as SandboxOptions } from "./index-npFMt2Zw.js";
+export { CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, type ProviderEnvConfig, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createScriptContext, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv, probeLlmCapabilities, readArchiveManifest };

package/dist/node.js

@@ -1,5 +1,5 @@
-import { n as SKILLS_LOCKFILE, r as SKILL_MANIFEST_FILE } from "./dist-DS1sfgHa.js";
-import { S as createScriptContext } from "./dist-DRsnVw6A.js";
-import { a as NodeScriptExecutor, c as SkillManager, d as readArchiveManifest, i as NodeFS, l as loadLlmConfigFromEnv, n as FileArtifactStore, o as OxcSchemaInferer, r as FileMemoryStore, s as SandboxedScriptExecutor, t as CliUiBridge, u as probeLlmCapabilities } from "./dist-SarUS8EP.js";
+import { n as SKILLS_LOCKFILE, r as SKILL_MANIFEST_FILE } from "./dist-DvoBsChX.js";
+import { w as createScriptContext } from "./dist-DAn07zHu.js";
+import { a as NodeScriptExecutor, c as SkillManager, d as loadLlmConfigFromEnv, f as probeLlmCapabilities, i as NodeFS, l as loadAnthropicConfigFromEnv, n as FileArtifactStore, o as OxcSchemaInferer, p as readArchiveManifest, r as FileMemoryStore, s as SandboxedScriptExecutor, t as CliUiBridge, u as loadGoogleConfigFromEnv } from "./dist-BVXZF7H_.js";
 
-export { CliUiBridge, FileArtifactStore, FileMemoryStore, NodeFS, NodeScriptExecutor, OxcSchemaInferer, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SandboxedScriptExecutor, SkillManager, createScriptContext, loadLlmConfigFromEnv, probeLlmCapabilities, readArchiveManifest };
+export { CliUiBridge, FileArtifactStore, FileMemoryStore, NodeFS, NodeScriptExecutor, OxcSchemaInferer, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SandboxedScriptExecutor, SkillManager, createScriptContext, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv, probeLlmCapabilities, readArchiveManifest };

package/dist/sandboxWorkerEntry.d.ts

@@ -0,0 +1 @@
+export {}