@webskill/sdk 0.1.5 → 0.2.0

package/dist/browser.d.ts

@@ -1,5 +1,5 @@
-import { C as FileStat, I as SkillInstallSource, K as VerifyResult, W as SkillsLockfile, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, o as InteractionRequest, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits, z as SkillManifest } from "./types-CgNC-oQu-DEcIBJKG.js";
-import { N as NetworkPolicy, St as parseBridgeRequest, X as ScriptExecutionContext, Z as ScriptExecutor, ct as WebSkillApi, d as BridgeCapabilities, dt as bridgeError, et as ToolDefinition, m as BridgeResponse, nt as ToolResult, p as BridgeRequest, u as ApprovalScope, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-COuOu6gw.js";
+import { C as FileStat, I as SkillInstallSource, K as VerifyResult, W as SkillsLockfile, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, o as InteractionRequest, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits, z as SkillManifest } from "./types-CKm5G_eQ-8W8FnP4u.js";
+import { N as NetworkPolicy, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, wt as parseBridgeRequest, y as ExternalToolSource } from "./index-CySxIvRz.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -24,6 +24,7 @@ declare class OpfsProvider implements FileSystemProvider {
   remove(p: string, options?: {
     recursive?: boolean;
   }): Promise<void>;
+  rename(from: string, to: string): Promise<void>;
 }
 //#endregion
 //#region src/executor/workerBootstrap.d.ts

package/dist/browser.js

@@ -1,6 +1,6 @@
-import { A as validateSkills, C as parseSkillPackManifest, O as resolveInsideRoot, S as parseSkillMarkdown, c as SkillDiscovery, f as buildCatalog, i as SKILL_MANIFEST_FILE, j as verifyManifest, k as unzipWithLimits, p as buildManifest, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, v as exportSkills, w as readResponseWithLimit, y as isValidSkillName } from "./dist-fZFZaf43.js";
-import { A as mergeCatalogEntries, M as normalizeToolContent, N as parseBridgeRequest, S as bridgeError, T as createWebSkillApi, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as networkUrlHost, k as isNetworkAllowed, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-DuGN5x0v.js";
-import { n as MockLlmClient } from "./testing-BmR48Pn1.js";
+import { A as unzipWithLimits, C as parseSkillMarkdown, M as verifyManifest, T as readResponseWithLimit, b as isValidSkillName, c as SkillDiscovery, f as atomicWriteText, i as SKILL_MANIFEST_FILE, j as validateSkills, k as resolveInsideRoot, m as buildManifest, p as buildCatalog, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, w as parseSkillPackManifest, y as exportSkills } from "./dist-D0saNPi_.js";
+import { A as isNetworkAllowed, C as bridgeError, E as createWebSkillApi, M as networkUrlHost, N as normalizeToolContent, P as parseBridgeRequest, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-BS5OpedX.js";
+import { n as MockLlmClient } from "./testing-B4pq6JYa.js";
 
 //#region ../browser/dist/index.js
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -132,6 +132,11 @@ var OpfsProvider = class {
 			await (await this.#walkDir(`/${segments.join("/")}`, false)).removeEntry(name, { recursive: options?.recursive ?? false });
 		});
 	}
+	async rename(from, to) {
+		if ((await this.stat(from)).type === "directory") throw new WebSkillError("FS_PERMISSION_DENIED", `rename of directories is not supported on OPFS: ${from}`);
+		await this.writeBinary(to, await this.readBinary(from));
+		await this.remove(from);
+	}
 };
 /**
 * Worker 引导源码（字符串 → Blob URL → new Worker(url, {type:'module'})）。
@@ -700,12 +705,12 @@ var BrowserSkillManager = class {
 	async #upsertLockEntry(name, entry) {
 		const lockfile = await this.listInstalled();
 		lockfile.skills[name] = entry;
-		await this.#fs.writeText(lockfilePath(this.#managedRoot), JSON.stringify(lockfile, null, 2));
+		await atomicWriteText(this.#fs, lockfilePath(this.#managedRoot), JSON.stringify(lockfile, null, 2));
 	}
 	async #removeLockEntry(name) {
 		const lockfile = await this.listInstalled();
 		delete lockfile.skills[name];
-		await this.#fs.writeText(lockfilePath(this.#managedRoot), JSON.stringify(lockfile, null, 2));
+		await atomicWriteText(this.#fs, lockfilePath(this.#managedRoot), JSON.stringify(lockfile, null, 2));
 	}
 };
 const defaultWorkerFactory = () => {

package/dist/{dist-CfBOjJ4p.js → dist-BJobG0i-.js}

@@ -1,4 +1,4 @@
-import { u as WebSkillError } from "./dist-fZFZaf43.js";
+import { u as WebSkillError } from "./dist-D0saNPi_.js";
 
 //#region ../ui/dist/index.js
 /** 提交值按请求类型归形（WebFormBridge 与框架组件库共享单一来源） */
@@ -524,6 +524,8 @@ var WebFormBridge = class {
 	#doc;
 	#styles;
 	#progressEl;
+	/** 等待中的 request 取消句柄（id → 触发 cancelled 并卸载 DOM） */
+	#pending = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.#mount = options.mount;
 		this.#doc = options.document ?? options.mount.ownerDocument;
@@ -535,13 +537,27 @@ var WebFormBridge = class {
 		const model = interactionToFormModel(input);
 		const { form, cleanup } = this.#renderForm(model);
 		return new Promise((resolve) => {
+			const cancel = () => {
+				cleanup();
+				this.#pending.delete(input.id);
+				resolve({
+					id: input.id,
+					cancelled: true
+				});
+			};
+			this.#pending.set(input.id, cancel);
 			form.addEventListener("submit", (event) => {
 				event.preventDefault();
 				const { values, missingRequired } = collectValues(model.controls, form);
 				if (missingRequired.length > 0) {
-					for (const name of missingRequired) form.querySelector(`[${CONTROL_TAG}="${name}"]`)?.closest(".webskill-form__control")?.classList.add("webskill-form__control--invalid");
+					for (const name of missingRequired) {
+						const wrapper = form.querySelector(`[${CONTROL_TAG}="${name}"]`)?.closest(".webskill-form__control");
+						wrapper?.classList.add("webskill-form__control--invalid");
+						wrapper?.querySelector(".webskill-form__input")?.setAttribute("aria-invalid", "true");
+					}
 					return;
 				}
+				this.#pending.delete(input.id);
 				cleanup();
 				resolve({
 					id: input.id,
@@ -550,15 +566,15 @@ var WebFormBridge = class {
 			});
 			form.querySelector("[data-webskill-cancel]")?.addEventListener("click", (event) => {
 				event.preventDefault();
-				cleanup();
-				resolve({
-					id: input.id,
-					cancelled: true
-				});
+				cancel();
 			});
 			this.#mount.appendChild(form);
 		});
 	}
+	/** 尽力取消等待中的 request（超时后清理遗留表单） */
+	cancel(id) {
+		this.#pending.get(id)?.();
+	}
 	async renderResult(input) {
 		if (this.#styles) ensureStyles(this.#doc);
 		this.#clearProgress();
@@ -622,9 +638,12 @@ var WebFormBridge = class {
 		const doc = this.#doc;
 		const wrapper = doc.createElement("div");
 		wrapper.className = "webskill-form__control";
+		const controlId = `webskill-field-${control.name}`;
+		const errorId = `webskill-error-${control.name}`;
 		const label = doc.createElement("label");
 		label.className = control.required ? "webskill-form__label webskill-form__label-required" : "webskill-form__label";
 		label.textContent = control.label;
+		label.htmlFor = controlId;
 		wrapper.appendChild(label);
 		if (control.description) {
 			const desc = doc.createElement("div");
@@ -663,9 +682,13 @@ var WebFormBridge = class {
 			input = textInput;
 		}
 		input.setAttribute(CONTROL_TAG, control.name);
+		input.id = controlId;
+		input.setAttribute("aria-describedby", errorId);
 		wrapper.appendChild(input);
 		const error = doc.createElement("div");
 		error.className = "webskill-form__error";
+		error.id = errorId;
+		error.setAttribute("role", "alert");
 		error.textContent = "This field is required";
 		wrapper.appendChild(error);
 		return wrapper;

package/dist/{dist-DuGN5x0v.js → dist-BS5OpedX.js}

@@ -1,4 +1,4 @@
-import { A as validateSkills, O as resolveInsideRoot, S as parseSkillMarkdown, T as renderAvailableSkillsXml, c as SkillDiscovery, d as assertSafePathSegment, f as buildCatalog, l as SkillReader, u as WebSkillError } from "./dist-fZFZaf43.js";
+import { C as parseSkillMarkdown, E as renderAvailableSkillsXml, c as SkillDiscovery, d as assertSafePathSegment, j as validateSkills, k as resolveInsideRoot, l as SkillReader, p as buildCatalog, u as WebSkillError } from "./dist-D0saNPi_.js";
 import { t as MemoryArtifactStore } from "./memoryArtifactStore-C9lFVqPF-yFz6yJj0.js";
 
 //#region ../runtime/dist/index.js
@@ -986,6 +986,41 @@ var EventBus = class {
 		for (const listener of this.#listeners.get("*") ?? []) listener(frozen);
 	}
 };
+/**
+* per-scope 串行化 MemoryStore 装饰器：同一 scope 的 get/set/delete/list
+* 按 promise 链串行（并发 run 的 read-modify-write 不丢计数）。
+*/
+var SerializingMemoryStore = class {
+	#inner;
+	#chains = /* @__PURE__ */ new Map();
+	constructor(inner) {
+		this.#inner = inner;
+	}
+	#serialize(scope, fn) {
+		const next = (this.#chains.get(scope) ?? Promise.resolve()).then(fn, fn);
+		this.#chains.set(scope, next.catch(() => void 0));
+		return next;
+	}
+	get(scope, key) {
+		return this.#serialize(scope, () => this.#inner.get(scope, key));
+	}
+	set(scope, key, value) {
+		return this.#serialize(scope, () => this.#inner.set(scope, key, value));
+	}
+	delete(scope, key) {
+		return this.#serialize(scope, () => this.#inner.delete(scope, key));
+	}
+	list(scope) {
+		return this.#serialize(scope, () => this.#inner.list(scope));
+	}
+	clear(scope) {
+		return this.#serialize(scope ?? "", () => this.#inner.clear(scope));
+	}
+	/** scope 级原子段：read-modify-write 全段在 promise 链内串行执行（fn 收到底层 store） */
+	transaction(scope, fn) {
+		return this.#serialize(scope, () => fn(this.#inner));
+	}
+};
 /** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
 var TraceRecorder = class {
 	#runId;
@@ -1061,8 +1096,6 @@ var AgentLoop = class {
 		};
 	}
 	async run(input) {
-		this.#deps.llm;
-		this.#deps.artifactStore;
 		const now = this.#deps.clock?.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
 		const runId = input.runId ?? `run-${Math.random().toString(36).slice(2, 10)}`;
 		const trace = new TraceRecorder(runId, this.#deps.clock);
@@ -1115,13 +1148,17 @@ var AgentLoop = class {
 				return [];
 			}
 		}))).flat();
-		state.messages = [{
-			role: "system",
-			content: route.systemPrompt
-		}, {
-			role: "user",
-			content: input.userPrompt
-		}];
+		state.messages = [
+			{
+				role: "system",
+				content: route.systemPrompt
+			},
+			...(input.history ?? []).map((m) => ({ ...m })),
+			{
+				role: "user",
+				content: input.userPrompt
+			}
+		];
 		try {
 			return await this.#turnLoop(state, 1, externalSpecs);
 		} catch (e) {
@@ -1195,7 +1232,13 @@ var AgentLoop = class {
 				hasToolCalls: Boolean(response.toolCalls?.length),
 				contentLength: response.content?.length ?? 0
 			} });
-			if (!response.toolCalls?.length) return finish("completed", "final-answer", response.content ?? "");
+			if (!response.toolCalls?.length) {
+				messages.push({
+					role: "assistant",
+					content: response.content ?? ""
+				});
+				return finish("completed", "final-answer", response.content ?? "");
+			}
 			await this.#lifecycle("execute", state, { turn });
 			messages.push({
 				role: "assistant",
@@ -1260,7 +1303,8 @@ var AgentLoop = class {
 		run.trace = trace.list();
 		return {
 			output,
-			run
+			run,
+			messages: state.messages.map((m) => ({ ...m }))
 		};
 	}
 	/** D3 快照写入（含 pendingInteraction 与过期时间；写失败降级 run.warning） */
@@ -1279,10 +1323,12 @@ var AgentLoop = class {
 			activatedTools: [...state.activatedTools.values()],
 			pendingInteraction: request,
 			interactionExpiresAt: state.run.interruptExpiresAt,
+			renderBlocks: [...state.renderBlocks],
+			interactionSeq: state.interactionSeq,
 			config: {
-				maxTurns: this.#config.maxTurns,
-				totalTimeoutMs: this.#config.totalTimeoutMs,
-				toolTimeoutMs: this.#config.toolTimeoutMs,
+				maxTurns: state.maxTurns,
+				totalTimeoutMs: state.totalTimeoutMs,
+				toolTimeoutMs: state.toolTimeoutMs,
 				...this.#config.temperature !== void 0 ? { temperature: this.#config.temperature } : {}
 			},
 			snapshotAt: state.now()
@@ -1321,10 +1367,10 @@ var AgentLoop = class {
 			activatedTools: new Map(snapshot.activatedTools.map((d) => [d.name, d])),
 			toolTimeoutMs: snapshot.config.toolTimeoutMs,
 			now,
-			interactionSeq: 0,
+			interactionSeq: snapshot.interactionSeq ?? 0,
 			messages: snapshot.messages.map((m) => ({ ...m })),
 			turn: snapshot.turn,
-			renderBlocks: [],
+			renderBlocks: (snapshot.renderBlocks ?? []).map((b) => ({ ...b })),
 			startMs,
 			pausedMs: 0,
 			maxTurns: snapshot.config.maxTurns,
@@ -1494,7 +1540,7 @@ var AgentLoop = class {
 		} });
 		let response;
 		try {
-			response = await this.#withInteractionTimeout(bridge.request(request), this.#policy.interactionTimeoutMs);
+			response = await this.#withInteractionTimeout(bridge.request(request), this.#policy.interactionTimeoutMs, () => bridge.cancel?.(request.id));
 		} catch (e) {
 			run.status = "running";
 			run.interruptExpiresAt = void 0;
@@ -1523,9 +1569,14 @@ var AgentLoop = class {
 		await this.#appendParamHistory(state, request, response.value);
 		return response.value;
 	}
-	#withInteractionTimeout(promise, timeoutMs) {
+	#withInteractionTimeout(promise, timeoutMs, onTimeout) {
 		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => reject(new WebSkillError("RUN_INTERACTION_TIMEOUT", `Interaction timed out after ${timeoutMs}ms`)), timeoutMs);
+			const timer = setTimeout(() => {
+				try {
+					onTimeout?.();
+				} catch {}
+				reject(new WebSkillError("RUN_INTERACTION_TIMEOUT", `Interaction timed out after ${timeoutMs}ms`));
+			}, timeoutMs);
 			promise.then((v) => {
 				clearTimeout(timer);
 				resolve(v);
@@ -1718,7 +1769,7 @@ var AgentLoop = class {
 		const executor = this.#deps.executor;
 		const loaded = [];
 		if (executor) {
-			let scriptFiles = [];
+			let scriptFiles;
 			try {
 				scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
 			} catch {
@@ -1766,8 +1817,12 @@ var AgentLoop = class {
 		for (const ext of ["ts", "js"]) {
 			const scriptPath = `${skillRoot}/scripts/${scriptName}.${ext}`;
 			if (!await this.#deps.fs.exists(scriptPath)) continue;
-			const inferred = this.#deps.schemaInferer.inferSchemaFromSource(await this.#deps.fs.readText(scriptPath), { fileName: `${scriptName}.${ext}` });
-			if (inferred) def.inputSchema = inferred;
+			try {
+				const inferred = this.#deps.schemaInferer.inferSchemaFromSource(await this.#deps.fs.readText(scriptPath), { fileName: `${scriptName}.${ext}` });
+				if (inferred) def.inputSchema = inferred;
+			} catch (e) {
+				state.trace.record("run.warning", { message: `Schema inference failed for ${scriptPath}: ${messageOf$1(e)}` });
+			}
 			return;
 		}
 	}
@@ -1869,6 +1924,22 @@ var AgentLoop = class {
 			state.trace.record("run.warning", { message: `Memory write failed: ${messageOf$1(e)}` });
 		}
 	}
+	/** read-modify-write：有 transaction 实现在 scope 原子段内执行（并发不丢计数），否则顺序执行 */
+	async #memoryMutate(scope, key, state, mutate) {
+		const memory = this.#deps.memory;
+		if (!memory) return;
+		if (memory.transaction) {
+			try {
+				await memory.transaction(scope, async (inner) => {
+					await inner.set(scope, key, mutate(await inner.get(scope, key)));
+				});
+			} catch (e) {
+				state.trace.record("run.warning", { message: `Memory write failed: ${messageOf$1(e)}` });
+			}
+			return;
+		}
+		await this.#memorySet(scope, key, mutate(await this.#memoryGet(scope, key)), state);
+	}
 	async #writeActivationMemory(skillName, state) {
 		if (!this.#deps.memory) return;
 		const sessionScope = `session:${state.run.sessionId}`;
@@ -1876,33 +1947,38 @@ var AgentLoop = class {
 		await this.#bumpSkillStat(skillName, "activations", state);
 		if (this.#deps.longTerm?.enabled) {
 			const userScope = `user:${this.#deps.longTerm.userId}`;
-			const usage = await this.#memoryGet(userScope, "skillUsage") ?? {};
-			usage[skillName] = (usage[skillName] ?? 0) + 1;
-			await this.#memorySet(userScope, "skillUsage", usage, state);
+			await this.#memoryMutate(userScope, "skillUsage", state, (current) => {
+				const usage = current ?? {};
+				usage[skillName] = (usage[skillName] ?? 0) + 1;
+				return usage;
+			});
 		}
 	}
 	async #bumpSkillStat(skillName, field, state) {
 		if (!this.#deps.memory) return;
-		const scope = `skill:${skillName}`;
-		const stats = await this.#memoryGet(scope, "stats") ?? {
-			activations: 0,
-			successes: 0,
-			failures: 0
-		};
-		stats[field] = (stats[field] ?? 0) + 1;
-		await this.#memorySet(scope, "stats", stats, state);
+		await this.#memoryMutate(`skill:${skillName}`, "stats", state, (current) => {
+			const stats = current ?? {
+				activations: 0,
+				successes: 0,
+				failures: 0
+			};
+			stats[field] = (stats[field] ?? 0) + 1;
+			return stats;
+		});
 	}
 	async #appendParamHistory(state, request, value) {
 		if (!this.#deps.memory) return;
 		const scope = `session:${state.run.sessionId}`;
-		const history = await this.#memoryGet(scope, "paramHistory") ?? [];
-		history.push({
-			ts: state.now(),
-			interactionId: request.id,
-			type: request.type,
-			value
+		await this.#memoryMutate(scope, "paramHistory", state, (current) => {
+			const history = current ?? [];
+			history.push({
+				ts: state.now(),
+				interactionId: request.id,
+				type: request.type,
+				value
+			});
+			return history;
 		});
-		await this.#memorySet(scope, "paramHistory", history, state);
 	}
 };
 /**
@@ -1919,6 +1995,10 @@ const SNAPSHOT_SUFFIX = ".snapshot.json";
 /**
 * FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
 * 坏 JSON → RUN_SNAPSHOT_INCOMPATIBLE 并自动清理坏文件；runId 过路径安全校验。
+* save/list 时顺带清理已过 interactionExpiresAt 的过期快照。
+*
+* 数据敏感性说明：快照含完整对话历史（用户输入、工具结果、可能的凭据片段），
+* 以明文 JSON 落盘于宿主提供的 fs；宿主应将其视为会话数据同等保护。
 * @experimental
 */
 var FsRunSnapshotStore = class {
@@ -1933,6 +2013,7 @@ var FsRunSnapshotStore = class {
 	}
 	async save(snapshot) {
 		await this.#fs.writeText(this.#path(snapshot.runId), JSON.stringify(snapshot, null, 2));
+		await this.#pruneExpired();
 	}
 	async load(runId) {
 		const path = this.#path(runId);
@@ -1956,6 +2037,7 @@ var FsRunSnapshotStore = class {
 		if (await this.#fs.exists(path)) await this.#fs.remove(path);
 	}
 	async list() {
+		await this.#pruneExpired();
 		if (!await this.#fs.exists(this.#root)) return [];
 		const out = [];
 		for (const entry of await this.#fs.list(this.#root)) {
@@ -1966,6 +2048,20 @@ var FsRunSnapshotStore = class {
 		}
 		return out.sort((a, b) => a.snapshotAt.localeCompare(b.snapshotAt));
 	}
+	/** 过期快照清理（save/list 时顺带；失败静默不阻断主流程） */
+	async #pruneExpired() {
+		try {
+			if (!await this.#fs.exists(this.#root)) return;
+			const now = Date.now();
+			for (const entry of await this.#fs.list(this.#root)) {
+				if (entry.type !== "file" || !entry.path.endsWith(SNAPSHOT_SUFFIX)) continue;
+				try {
+					const parsed = JSON.parse(await this.#fs.readText(entry.path));
+					if (parsed.interactionExpiresAt !== void 0 && Date.parse(parsed.interactionExpiresAt) < now) await this.#fs.remove(entry.path);
+				} catch {}
+			}
+		} catch {}
+	}
 };
 /**
 * runtime 门面：组合 discovery / router / agent loop / lifecycle
@@ -1979,7 +2075,10 @@ var WebSkillRuntime = class {
 	#events;
 	#catalogCache;
 	constructor(deps) {
-		this.#deps = deps;
+		this.#deps = {
+			...deps,
+			...deps.memory ? { memory: new SerializingMemoryStore(deps.memory) } : {}
+		};
 		this.#discovery = new SkillDiscovery(deps.fs, deps.roots);
 		this.#router = deps.router ?? new ProgressiveRouter();
 		this.#events = deps.eventBus ?? new EventBus();
@@ -2002,6 +2101,27 @@ var WebSkillRuntime = class {
 	invalidate() {
 		this.#catalogCache = void 0;
 	}
+	/**
+	* 多会话：session 对象的 run(prompt) 跨 run 延续消息历史（同一 session 对话上下文连续）。
+	* 既有 runtime.run(prompt) 保持无状态单次语义不变。
+	*/
+	createSession(options = {}) {
+		const sessionId = options.sessionId ?? `session-${Math.random().toString(36).slice(2, 10)}`;
+		const createdAt = (/* @__PURE__ */ new Date()).toISOString();
+		let history = [];
+		return {
+			id: sessionId,
+			createdAt,
+			run: async (prompt) => {
+				const result = await this.run(prompt, {
+					sessionId,
+					history
+				});
+				history = result.messages.slice(1);
+				return result;
+			}
+		};
+	}
 	async discover() {
 		const result = await this.#discovery.discover();
 		this.#catalogCache = {
@@ -2010,7 +2130,7 @@ var WebSkillRuntime = class {
 		};
 		return result;
 	}
-	async run(userPrompt) {
+	async run(userPrompt, options = {}) {
 		if (!this.#catalogCache) await this.discover();
 		const cache = this.#catalogCache;
 		if (!cache) throw new Error("discover() did not populate the catalog cache");
@@ -2046,9 +2166,10 @@ var WebSkillRuntime = class {
 			snapshotStore: this.#deps.snapshotStore,
 			skillStateGuard: this.#deps.skillStateGuard
 		}, this.#deps.config).run({
-			sessionId: this.#session.id,
+			sessionId: options.sessionId ?? this.#session.id,
 			userPrompt,
-			route
+			route,
+			...options.history ? { history: options.history } : {}
 		});
 		for (const failure of providerFailures) result.run.trace.push({
 			id: `evt-provider-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
@@ -2117,7 +2238,8 @@ var WebSkillRuntime = class {
 							code: "RUN_INTERACTION_TIMEOUT"
 						}
 					}]
-				}
+				},
+				messages: []
 			};
 		}
 		if (!this.#catalogCache) await this.discover();
@@ -2219,7 +2341,7 @@ function createWebSkillApi(deps) {
 		}
 	};
 }
-/** install URL 分派：http(s)…​.zip → http；…​.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；
+/** install URL 分派：http(s) .zip → http；.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；
 * 其余 http(s) URL → INSTALL_FAILED（不静默当 local）；非 URL → local */
 function sourceFromUrl(url) {
 	const bare = url.split("?")[0] ?? url;
@@ -2507,16 +2629,21 @@ function networkUrlHost(url) {
 * once-per-run（默认）在 run 内记忆已批准能力，every-call 每次调用都问。
 * @stable
 */
-var CapabilityApproval = class {
+var CapabilityApproval = class CapabilityApproval {
 	#uiBridge;
 	#scope;
-	/** runId → 已批准能力集合（once-per-run 记忆） */
+	/** runId → 已批准能力集合（once-per-run 记忆；LRU 上限防长跑进程膨胀） */
 	#approved = /* @__PURE__ */ new Map();
 	#seq = 0;
+	static #MAX_RUNS = 128;
 	constructor(deps = {}) {
 		this.#uiBridge = deps.uiBridge;
 		this.#scope = deps.scope ?? "once-per-run";
 	}
+	/** run 终态清理授权记录（宿主在 run 结束后调用；同时有 LRU 上限兜底） */
+	clearRun(runId) {
+		this.#approved.delete(runId);
+	}
 	async authorize(input) {
 		const { runId, capability, mode } = input;
 		if (mode === false) return "disabled";
@@ -2537,10 +2664,14 @@ var CapabilityApproval = class {
 				this.#approved.set(runId, set);
 			}
 			set.add(capability);
+			if (this.#approved.size > CapabilityApproval.#MAX_RUNS) {
+				const oldest = this.#approved.keys().next().value;
+				if (oldest !== void 0) this.#approved.delete(oldest);
+			}
 		}
 		return "allowed";
 	}
 };
 
 //#endregion
-export { mergeCatalogEntries as A, buildRenderResult as C, fromVercelResult as D, extractChartSpec as E, schemaToForm as F, toLlmToolSpec as I, toVercelToolSpecs as L, normalizeToolContent as M, parseBridgeRequest as N, fromVercelStreamPart as O, resolveToolName as P, bridgeError as S, createWebSkillApi as T, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, TraceRecorder as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, networkUrlHost as j, isNetworkAllowed as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, createScriptContext as w, WebSkillRuntime as x, RUN_SNAPSHOT_SCHEMA_VERSION as y };
+export { isNetworkAllowed as A, bridgeError as C, extractChartSpec as D, createWebSkillApi as E, resolveToolName as F, schemaToForm as I, toLlmToolSpec as L, networkUrlHost as M, normalizeToolContent as N, fromVercelResult as O, parseBridgeRequest as P, toVercelToolSpecs as R, WebSkillRuntime as S, createScriptContext as T, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, SerializingMemoryStore as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, mergeCatalogEntries as j, fromVercelStreamPart as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, buildRenderResult as w, TraceRecorder as x, RUN_SNAPSHOT_SCHEMA_VERSION as y };

package/dist/{dist-fZFZaf43.js → dist-D0saNPi_.js}

@@ -174,7 +174,26 @@ var MemoryFS = class {
 		for (const k of descendants) this.#entries.delete(k);
 		this.#entries.delete(key);
 	}
+	async rename(from, to) {
+		const src = this.#normalize(from);
+		const dst = this.#normalize(to);
+		const entry = this.#entries.get(src);
+		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${src}`);
+		const prefix = src + "/";
+		const descendants = [...this.#entries.entries()].filter(([k]) => k.startsWith(prefix));
+		this.#ensureParents(dst);
+		this.#entries.set(dst, entry);
+		for (const [k, v] of descendants) this.#entries.set(dst + k.slice(src.length), v);
+		for (const [k] of descendants) this.#entries.delete(k);
+		this.#entries.delete(src);
+	}
 };
+/** 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景） */
+async function atomicWriteText(fs, path, content) {
+	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+	await fs.writeText(tmp, content);
+	await fs.rename(tmp, path);
+}
 /** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
 function normalizePath(path) {
 	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
@@ -570,8 +589,7 @@ var SkillDiscovery = class {
 				});
 				continue;
 			}
-			for (const child of await this.#fs.list(root)) {
-				if (child.type !== "directory") continue;
+			await Promise.all((await this.#fs.list(root)).filter((child) => child.type === "directory").map(async (child) => {
 				const dirName = baseName(child.path);
 				const skillRoot = `${root}/${dirName}`;
 				const skillMdPath = `${skillRoot}/SKILL.md`;
@@ -596,7 +614,7 @@ var SkillDiscovery = class {
 					const dependencies = metadata["dependencies"];
 					adjacency.set(metadata.name, Array.isArray(dependencies) ? dependencies.filter((d) => typeof d === "string") : []);
 				}
-			}
+			}));
 		}
 		const cycles = checkDependencyCycles(adjacency);
 		const claimedNames = /* @__PURE__ */ new Set();
@@ -725,4 +743,4 @@ const xmlRenderer = {
 };
 
 //#endregion
-export { validateSkills as A, parseSkillPackManifest as C, resolveArchiveLimits as D, renderCatalogJson as E, xmlRenderer as M, resolveInsideRoot as O, parseSkillMarkdown as S, renderAvailableSkillsXml as T, escapeXml as _, SKILL_NAME_MAX_LENGTH as a, jsonRenderer as b, SkillDiscovery as c, assertSafePathSegment as d, buildCatalog as f, computeDigest as g, checkSkillRules as h, SKILL_MANIFEST_FILE as i, verifyManifest as j, unzipWithLimits as k, SkillReader as l, checkDependencyCycles as m, MemoryFS as n, SKILL_NAME_PATTERN as o, buildManifest as p, SKILLS_LOCKFILE as r, SKILL_PACK_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, WebSkillError as u, exportSkills as v, readResponseWithLimit as w, normalizePath as x, isValidSkillName as y };
+export { unzipWithLimits as A, parseSkillMarkdown as C, renderCatalogJson as D, renderAvailableSkillsXml as E, verifyManifest as M, xmlRenderer as N, resolveArchiveLimits as O, normalizePath as S, readResponseWithLimit as T, computeDigest as _, SKILL_NAME_MAX_LENGTH as a, isValidSkillName as b, SkillDiscovery as c, assertSafePathSegment as d, atomicWriteText as f, checkSkillRules as g, checkDependencyCycles as h, SKILL_MANIFEST_FILE as i, validateSkills as j, resolveInsideRoot as k, SkillReader as l, buildManifest as m, MemoryFS as n, SKILL_NAME_PATTERN as o, buildCatalog as p, SKILLS_LOCKFILE as r, SKILL_PACK_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, WebSkillError as u, escapeXml as v, parseSkillPackManifest as w, jsonRenderer as x, exportSkills as y };