@webskill/sdk 0.1.5 → 0.2.1

package/dist/{dist-fZFZaf43.js → dist-D0saNPi_.js}

@@ -174,7 +174,26 @@ var MemoryFS = class {
 		for (const k of descendants) this.#entries.delete(k);
 		this.#entries.delete(key);
 	}
+	async rename(from, to) {
+		const src = this.#normalize(from);
+		const dst = this.#normalize(to);
+		const entry = this.#entries.get(src);
+		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${src}`);
+		const prefix = src + "/";
+		const descendants = [...this.#entries.entries()].filter(([k]) => k.startsWith(prefix));
+		this.#ensureParents(dst);
+		this.#entries.set(dst, entry);
+		for (const [k, v] of descendants) this.#entries.set(dst + k.slice(src.length), v);
+		for (const [k] of descendants) this.#entries.delete(k);
+		this.#entries.delete(src);
+	}
 };
+/** 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景） */
+async function atomicWriteText(fs, path, content) {
+	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+	await fs.writeText(tmp, content);
+	await fs.rename(tmp, path);
+}
 /** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
 function normalizePath(path) {
 	return path.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
@@ -570,8 +589,7 @@ var SkillDiscovery = class {
 				});
 				continue;
 			}
-			for (const child of await this.#fs.list(root)) {
-				if (child.type !== "directory") continue;
+			await Promise.all((await this.#fs.list(root)).filter((child) => child.type === "directory").map(async (child) => {
 				const dirName = baseName(child.path);
 				const skillRoot = `${root}/${dirName}`;
 				const skillMdPath = `${skillRoot}/SKILL.md`;
@@ -596,7 +614,7 @@ var SkillDiscovery = class {
 					const dependencies = metadata["dependencies"];
 					adjacency.set(metadata.name, Array.isArray(dependencies) ? dependencies.filter((d) => typeof d === "string") : []);
 				}
-			}
+			}));
 		}
 		const cycles = checkDependencyCycles(adjacency);
 		const claimedNames = /* @__PURE__ */ new Set();
@@ -725,4 +743,4 @@ const xmlRenderer = {
 };
 
 //#endregion
-export { validateSkills as A, parseSkillPackManifest as C, resolveArchiveLimits as D, renderCatalogJson as E, xmlRenderer as M, resolveInsideRoot as O, parseSkillMarkdown as S, renderAvailableSkillsXml as T, escapeXml as _, SKILL_NAME_MAX_LENGTH as a, jsonRenderer as b, SkillDiscovery as c, assertSafePathSegment as d, buildCatalog as f, computeDigest as g, checkSkillRules as h, SKILL_MANIFEST_FILE as i, verifyManifest as j, unzipWithLimits as k, SkillReader as l, checkDependencyCycles as m, MemoryFS as n, SKILL_NAME_PATTERN as o, buildManifest as p, SKILLS_LOCKFILE as r, SKILL_PACK_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, WebSkillError as u, exportSkills as v, readResponseWithLimit as w, normalizePath as x, isValidSkillName as y };
+export { unzipWithLimits as A, parseSkillMarkdown as C, renderCatalogJson as D, renderAvailableSkillsXml as E, verifyManifest as M, xmlRenderer as N, resolveArchiveLimits as O, normalizePath as S, readResponseWithLimit as T, computeDigest as _, SKILL_NAME_MAX_LENGTH as a, isValidSkillName as b, SkillDiscovery as c, assertSafePathSegment as d, atomicWriteText as f, checkSkillRules as g, checkDependencyCycles as h, SKILL_MANIFEST_FILE as i, validateSkills as j, resolveInsideRoot as k, SkillReader as l, buildManifest as m, MemoryFS as n, SKILL_NAME_PATTERN as o, buildCatalog as p, SKILLS_LOCKFILE as r, SKILL_PACK_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, WebSkillError as u, escapeXml as v, parseSkillPackManifest as w, jsonRenderer as x, exportSkills as y };

package/dist/{dist-DuGN5x0v.js → dist-DrySSQ5R.js}

@@ -1,4 +1,4 @@
-import { A as validateSkills, O as resolveInsideRoot, S as parseSkillMarkdown, T as renderAvailableSkillsXml, c as SkillDiscovery, d as assertSafePathSegment, f as buildCatalog, l as SkillReader, u as WebSkillError } from "./dist-fZFZaf43.js";
+import { C as parseSkillMarkdown, E as renderAvailableSkillsXml, c as SkillDiscovery, d as assertSafePathSegment, j as validateSkills, k as resolveInsideRoot, l as SkillReader, p as buildCatalog, u as WebSkillError } from "./dist-D0saNPi_.js";
 import { t as MemoryArtifactStore } from "./memoryArtifactStore-C9lFVqPF-yFz6yJj0.js";
 
 //#region ../runtime/dist/index.js
@@ -986,6 +986,41 @@ var EventBus = class {
 		for (const listener of this.#listeners.get("*") ?? []) listener(frozen);
 	}
 };
+/**
+* per-scope 串行化 MemoryStore 装饰器：同一 scope 的 get/set/delete/list
+* 按 promise 链串行（并发 run 的 read-modify-write 不丢计数）。
+*/
+var SerializingMemoryStore = class {
+	#inner;
+	#chains = /* @__PURE__ */ new Map();
+	constructor(inner) {
+		this.#inner = inner;
+	}
+	#serialize(scope, fn) {
+		const next = (this.#chains.get(scope) ?? Promise.resolve()).then(fn, fn);
+		this.#chains.set(scope, next.catch(() => void 0));
+		return next;
+	}
+	get(scope, key) {
+		return this.#serialize(scope, () => this.#inner.get(scope, key));
+	}
+	set(scope, key, value) {
+		return this.#serialize(scope, () => this.#inner.set(scope, key, value));
+	}
+	delete(scope, key) {
+		return this.#serialize(scope, () => this.#inner.delete(scope, key));
+	}
+	list(scope) {
+		return this.#serialize(scope, () => this.#inner.list(scope));
+	}
+	clear(scope) {
+		return this.#serialize(scope ?? "", () => this.#inner.clear(scope));
+	}
+	/** scope 级原子段：read-modify-write 全段在 promise 链内串行执行（fn 收到底层 store） */
+	transaction(scope, fn) {
+		return this.#serialize(scope, () => fn(this.#inner));
+	}
+};
 /** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
 var TraceRecorder = class {
 	#runId;
@@ -1061,8 +1096,6 @@ var AgentLoop = class {
 		};
 	}
 	async run(input) {
-		this.#deps.llm;
-		this.#deps.artifactStore;
 		const now = this.#deps.clock?.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
 		const runId = input.runId ?? `run-${Math.random().toString(36).slice(2, 10)}`;
 		const trace = new TraceRecorder(runId, this.#deps.clock);
@@ -1115,13 +1148,17 @@ var AgentLoop = class {
 				return [];
 			}
 		}))).flat();
-		state.messages = [{
-			role: "system",
-			content: route.systemPrompt
-		}, {
-			role: "user",
-			content: input.userPrompt
-		}];
+		state.messages = [
+			{
+				role: "system",
+				content: route.systemPrompt
+			},
+			...(input.history ?? []).map((m) => ({ ...m })),
+			{
+				role: "user",
+				content: input.userPrompt
+			}
+		];
 		try {
 			return await this.#turnLoop(state, 1, externalSpecs);
 		} catch (e) {
@@ -1195,7 +1232,13 @@ var AgentLoop = class {
 				hasToolCalls: Boolean(response.toolCalls?.length),
 				contentLength: response.content?.length ?? 0
 			} });
-			if (!response.toolCalls?.length) return finish("completed", "final-answer", response.content ?? "");
+			if (!response.toolCalls?.length) {
+				messages.push({
+					role: "assistant",
+					content: response.content ?? ""
+				});
+				return finish("completed", "final-answer", response.content ?? "");
+			}
 			await this.#lifecycle("execute", state, { turn });
 			messages.push({
 				role: "assistant",
@@ -1260,7 +1303,8 @@ var AgentLoop = class {
 		run.trace = trace.list();
 		return {
 			output,
-			run
+			run,
+			messages: state.messages.map((m) => ({ ...m }))
 		};
 	}
 	/** D3 快照写入（含 pendingInteraction 与过期时间；写失败降级 run.warning） */
@@ -1279,10 +1323,12 @@ var AgentLoop = class {
 			activatedTools: [...state.activatedTools.values()],
 			pendingInteraction: request,
 			interactionExpiresAt: state.run.interruptExpiresAt,
+			renderBlocks: [...state.renderBlocks],
+			interactionSeq: state.interactionSeq,
 			config: {
-				maxTurns: this.#config.maxTurns,
-				totalTimeoutMs: this.#config.totalTimeoutMs,
-				toolTimeoutMs: this.#config.toolTimeoutMs,
+				maxTurns: state.maxTurns,
+				totalTimeoutMs: state.totalTimeoutMs,
+				toolTimeoutMs: state.toolTimeoutMs,
 				...this.#config.temperature !== void 0 ? { temperature: this.#config.temperature } : {}
 			},
 			snapshotAt: state.now()
@@ -1321,10 +1367,10 @@ var AgentLoop = class {
 			activatedTools: new Map(snapshot.activatedTools.map((d) => [d.name, d])),
 			toolTimeoutMs: snapshot.config.toolTimeoutMs,
 			now,
-			interactionSeq: 0,
+			interactionSeq: snapshot.interactionSeq ?? 0,
 			messages: snapshot.messages.map((m) => ({ ...m })),
 			turn: snapshot.turn,
-			renderBlocks: [],
+			renderBlocks: (snapshot.renderBlocks ?? []).map((b) => ({ ...b })),
 			startMs,
 			pausedMs: 0,
 			maxTurns: snapshot.config.maxTurns,
@@ -1494,7 +1540,7 @@ var AgentLoop = class {
 		} });
 		let response;
 		try {
-			response = await this.#withInteractionTimeout(bridge.request(request), this.#policy.interactionTimeoutMs);
+			response = await this.#withInteractionTimeout(bridge.request(request), this.#policy.interactionTimeoutMs, () => bridge.cancel?.(request.id));
 		} catch (e) {
 			run.status = "running";
 			run.interruptExpiresAt = void 0;
@@ -1523,9 +1569,14 @@ var AgentLoop = class {
 		await this.#appendParamHistory(state, request, response.value);
 		return response.value;
 	}
-	#withInteractionTimeout(promise, timeoutMs) {
+	#withInteractionTimeout(promise, timeoutMs, onTimeout) {
 		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => reject(new WebSkillError("RUN_INTERACTION_TIMEOUT", `Interaction timed out after ${timeoutMs}ms`)), timeoutMs);
+			const timer = setTimeout(() => {
+				try {
+					onTimeout?.();
+				} catch {}
+				reject(new WebSkillError("RUN_INTERACTION_TIMEOUT", `Interaction timed out after ${timeoutMs}ms`));
+			}, timeoutMs);
 			promise.then((v) => {
 				clearTimeout(timer);
 				resolve(v);
@@ -1718,7 +1769,7 @@ var AgentLoop = class {
 		const executor = this.#deps.executor;
 		const loaded = [];
 		if (executor) {
-			let scriptFiles = [];
+			let scriptFiles;
 			try {
 				scriptFiles = (await this.#deps.fs.list(`${root}/scripts`)).filter((s) => s.type === "file").map((s) => baseName(s.path));
 			} catch {
@@ -1766,8 +1817,12 @@ var AgentLoop = class {
 		for (const ext of ["ts", "js"]) {
 			const scriptPath = `${skillRoot}/scripts/${scriptName}.${ext}`;
 			if (!await this.#deps.fs.exists(scriptPath)) continue;
-			const inferred = this.#deps.schemaInferer.inferSchemaFromSource(await this.#deps.fs.readText(scriptPath), { fileName: `${scriptName}.${ext}` });
-			if (inferred) def.inputSchema = inferred;
+			try {
+				const inferred = this.#deps.schemaInferer.inferSchemaFromSource(await this.#deps.fs.readText(scriptPath), { fileName: `${scriptName}.${ext}` });
+				if (inferred) def.inputSchema = inferred;
+			} catch (e) {
+				state.trace.record("run.warning", { message: `Schema inference failed for ${scriptPath}: ${messageOf$1(e)}` });
+			}
 			return;
 		}
 	}
@@ -1869,6 +1924,22 @@ var AgentLoop = class {
 			state.trace.record("run.warning", { message: `Memory write failed: ${messageOf$1(e)}` });
 		}
 	}
+	/** read-modify-write：有 transaction 实现在 scope 原子段内执行（并发不丢计数），否则顺序执行 */
+	async #memoryMutate(scope, key, state, mutate) {
+		const memory = this.#deps.memory;
+		if (!memory) return;
+		if (memory.transaction) {
+			try {
+				await memory.transaction(scope, async (inner) => {
+					await inner.set(scope, key, mutate(await inner.get(scope, key)));
+				});
+			} catch (e) {
+				state.trace.record("run.warning", { message: `Memory write failed: ${messageOf$1(e)}` });
+			}
+			return;
+		}
+		await this.#memorySet(scope, key, mutate(await this.#memoryGet(scope, key)), state);
+	}
 	async #writeActivationMemory(skillName, state) {
 		if (!this.#deps.memory) return;
 		const sessionScope = `session:${state.run.sessionId}`;
@@ -1876,33 +1947,38 @@ var AgentLoop = class {
 		await this.#bumpSkillStat(skillName, "activations", state);
 		if (this.#deps.longTerm?.enabled) {
 			const userScope = `user:${this.#deps.longTerm.userId}`;
-			const usage = await this.#memoryGet(userScope, "skillUsage") ?? {};
-			usage[skillName] = (usage[skillName] ?? 0) + 1;
-			await this.#memorySet(userScope, "skillUsage", usage, state);
+			await this.#memoryMutate(userScope, "skillUsage", state, (current) => {
+				const usage = current ?? {};
+				usage[skillName] = (usage[skillName] ?? 0) + 1;
+				return usage;
+			});
 		}
 	}
 	async #bumpSkillStat(skillName, field, state) {
 		if (!this.#deps.memory) return;
-		const scope = `skill:${skillName}`;
-		const stats = await this.#memoryGet(scope, "stats") ?? {
-			activations: 0,
-			successes: 0,
-			failures: 0
-		};
-		stats[field] = (stats[field] ?? 0) + 1;
-		await this.#memorySet(scope, "stats", stats, state);
+		await this.#memoryMutate(`skill:${skillName}`, "stats", state, (current) => {
+			const stats = current ?? {
+				activations: 0,
+				successes: 0,
+				failures: 0
+			};
+			stats[field] = (stats[field] ?? 0) + 1;
+			return stats;
+		});
 	}
 	async #appendParamHistory(state, request, value) {
 		if (!this.#deps.memory) return;
 		const scope = `session:${state.run.sessionId}`;
-		const history = await this.#memoryGet(scope, "paramHistory") ?? [];
-		history.push({
-			ts: state.now(),
-			interactionId: request.id,
-			type: request.type,
-			value
+		await this.#memoryMutate(scope, "paramHistory", state, (current) => {
+			const history = current ?? [];
+			history.push({
+				ts: state.now(),
+				interactionId: request.id,
+				type: request.type,
+				value
+			});
+			return history;
 		});
-		await this.#memorySet(scope, "paramHistory", history, state);
 	}
 };
 /**
@@ -1919,6 +1995,10 @@ const SNAPSHOT_SUFFIX = ".snapshot.json";
 /**
 * FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
 * 坏 JSON → RUN_SNAPSHOT_INCOMPATIBLE 并自动清理坏文件；runId 过路径安全校验。
+* save/list 时顺带清理已过 interactionExpiresAt 的过期快照。
+*
+* 数据敏感性说明：快照含完整对话历史（用户输入、工具结果、可能的凭据片段），
+* 以明文 JSON 落盘于宿主提供的 fs；宿主应将其视为会话数据同等保护。
 * @experimental
 */
 var FsRunSnapshotStore = class {
@@ -1933,6 +2013,7 @@ var FsRunSnapshotStore = class {
 	}
 	async save(snapshot) {
 		await this.#fs.writeText(this.#path(snapshot.runId), JSON.stringify(snapshot, null, 2));
+		await this.#pruneExpired();
 	}
 	async load(runId) {
 		const path = this.#path(runId);
@@ -1956,6 +2037,7 @@ var FsRunSnapshotStore = class {
 		if (await this.#fs.exists(path)) await this.#fs.remove(path);
 	}
 	async list() {
+		await this.#pruneExpired();
 		if (!await this.#fs.exists(this.#root)) return [];
 		const out = [];
 		for (const entry of await this.#fs.list(this.#root)) {
@@ -1966,6 +2048,20 @@ var FsRunSnapshotStore = class {
 		}
 		return out.sort((a, b) => a.snapshotAt.localeCompare(b.snapshotAt));
 	}
+	/** 过期快照清理（save/list 时顺带；失败静默不阻断主流程） */
+	async #pruneExpired() {
+		try {
+			if (!await this.#fs.exists(this.#root)) return;
+			const now = Date.now();
+			for (const entry of await this.#fs.list(this.#root)) {
+				if (entry.type !== "file" || !entry.path.endsWith(SNAPSHOT_SUFFIX)) continue;
+				try {
+					const parsed = JSON.parse(await this.#fs.readText(entry.path));
+					if (parsed.interactionExpiresAt !== void 0 && Date.parse(parsed.interactionExpiresAt) < now) await this.#fs.remove(entry.path);
+				} catch {}
+			}
+		} catch {}
+	}
 };
 /**
 * runtime 门面：组合 discovery / router / agent loop / lifecycle
@@ -1979,7 +2075,10 @@ var WebSkillRuntime = class {
 	#events;
 	#catalogCache;
 	constructor(deps) {
-		this.#deps = deps;
+		this.#deps = {
+			...deps,
+			...deps.memory ? { memory: new SerializingMemoryStore(deps.memory) } : {}
+		};
 		this.#discovery = new SkillDiscovery(deps.fs, deps.roots);
 		this.#router = deps.router ?? new ProgressiveRouter();
 		this.#events = deps.eventBus ?? new EventBus();
@@ -1991,6 +2090,10 @@ var WebSkillRuntime = class {
 	get session() {
 		return this.#session;
 	}
+	/** 当前装配的脚本执行器（治理默认执行器断言等只读场景） */
+	get executor() {
+		return this.#deps.executor;
+	}
 	/** 生命周期事件总线（只读观测） */
 	get events() {
 		return this.#events;
@@ -2002,6 +2105,27 @@ var WebSkillRuntime = class {
 	invalidate() {
 		this.#catalogCache = void 0;
 	}
+	/**
+	* 多会话：session 对象的 run(prompt) 跨 run 延续消息历史（同一 session 对话上下文连续）。
+	* 既有 runtime.run(prompt) 保持无状态单次语义不变。
+	*/
+	createSession(options = {}) {
+		const sessionId = options.sessionId ?? `session-${Math.random().toString(36).slice(2, 10)}`;
+		const createdAt = (/* @__PURE__ */ new Date()).toISOString();
+		let history = [];
+		return {
+			id: sessionId,
+			createdAt,
+			run: async (prompt) => {
+				const result = await this.run(prompt, {
+					sessionId,
+					history
+				});
+				history = result.messages.slice(1);
+				return result;
+			}
+		};
+	}
 	async discover() {
 		const result = await this.#discovery.discover();
 		this.#catalogCache = {
@@ -2010,7 +2134,7 @@ var WebSkillRuntime = class {
 		};
 		return result;
 	}
-	async run(userPrompt) {
+	async run(userPrompt, options = {}) {
 		if (!this.#catalogCache) await this.discover();
 		const cache = this.#catalogCache;
 		if (!cache) throw new Error("discover() did not populate the catalog cache");
@@ -2046,9 +2170,10 @@ var WebSkillRuntime = class {
 			snapshotStore: this.#deps.snapshotStore,
 			skillStateGuard: this.#deps.skillStateGuard
 		}, this.#deps.config).run({
-			sessionId: this.#session.id,
+			sessionId: options.sessionId ?? this.#session.id,
 			userPrompt,
-			route
+			route,
+			...options.history ? { history: options.history } : {}
 		});
 		for (const failure of providerFailures) result.run.trace.push({
 			id: `evt-provider-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
@@ -2117,7 +2242,8 @@ var WebSkillRuntime = class {
 							code: "RUN_INTERACTION_TIMEOUT"
 						}
 					}]
-				}
+				},
+				messages: []
 			};
 		}
 		if (!this.#catalogCache) await this.discover();
@@ -2219,7 +2345,7 @@ function createWebSkillApi(deps) {
 		}
 	};
 }
-/** install URL 分派：http(s)…​.zip → http；…​.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；
+/** install URL 分派：http(s) .zip → http；.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；
 * 其余 http(s) URL → INSTALL_FAILED（不静默当 local）；非 URL → local */
 function sourceFromUrl(url) {
 	const bare = url.split("?")[0] ?? url;
@@ -2507,16 +2633,21 @@ function networkUrlHost(url) {
 * once-per-run（默认）在 run 内记忆已批准能力，every-call 每次调用都问。
 * @stable
 */
-var CapabilityApproval = class {
+var CapabilityApproval = class CapabilityApproval {
 	#uiBridge;
 	#scope;
-	/** runId → 已批准能力集合（once-per-run 记忆） */
+	/** runId → 已批准能力集合（once-per-run 记忆；LRU 上限防长跑进程膨胀） */
 	#approved = /* @__PURE__ */ new Map();
 	#seq = 0;
+	static #MAX_RUNS = 128;
 	constructor(deps = {}) {
 		this.#uiBridge = deps.uiBridge;
 		this.#scope = deps.scope ?? "once-per-run";
 	}
+	/** run 终态清理授权记录（宿主在 run 结束后调用；同时有 LRU 上限兜底） */
+	clearRun(runId) {
+		this.#approved.delete(runId);
+	}
 	async authorize(input) {
 		const { runId, capability, mode } = input;
 		if (mode === false) return "disabled";
@@ -2537,10 +2668,14 @@ var CapabilityApproval = class {
 				this.#approved.set(runId, set);
 			}
 			set.add(capability);
+			if (this.#approved.size > CapabilityApproval.#MAX_RUNS) {
+				const oldest = this.#approved.keys().next().value;
+				if (oldest !== void 0) this.#approved.delete(oldest);
+			}
 		}
 		return "allowed";
 	}
 };
 
 //#endregion
-export { mergeCatalogEntries as A, buildRenderResult as C, fromVercelResult as D, extractChartSpec as E, schemaToForm as F, toLlmToolSpec as I, toVercelToolSpecs as L, normalizeToolContent as M, parseBridgeRequest as N, fromVercelStreamPart as O, resolveToolName as P, bridgeError as S, createWebSkillApi as T, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, TraceRecorder as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, networkUrlHost as j, isNetworkAllowed as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, createScriptContext as w, WebSkillRuntime as x, RUN_SNAPSHOT_SCHEMA_VERSION as y };
+export { isNetworkAllowed as A, bridgeError as C, extractChartSpec as D, createWebSkillApi as E, resolveToolName as F, schemaToForm as I, toLlmToolSpec as L, networkUrlHost as M, normalizeToolContent as N, fromVercelResult as O, parseBridgeRequest as P, toVercelToolSpecs as R, WebSkillRuntime as S, createScriptContext as T, READ_SKILL_FILE_TOOL as _, AnthropicClient as a, SerializingMemoryStore as b, FsArtifactStore as c, FullDisclosureRouter as d, GoogleGenAiClient as f, READ_SKILL_FILE_INPUT_SCHEMA as g, ProgressiveRouter as h, AgentLoop as i, mergeCatalogEntries as j, fromVercelStreamPart as k, FsMemoryStore as l, OpenAiCompatibleClient as m, ASK_USER_TOOL as n, CapabilityApproval as o, HookRunner as p, ASK_USER_TOOL_NAME as r, EventBus as s, ASK_USER_INPUT_SCHEMA as t, FsRunSnapshotStore as u, READ_SKILL_FILE_TOOL_NAME as v, buildRenderResult as w, TraceRecorder as x, RUN_SNAPSHOT_SCHEMA_VERSION as y };

package/dist/env--jJB-TSX-04klhTYi.js

@@ -0,0 +1,143 @@
+import { readFileSync } from "node:fs";
+
+//#region ../node/dist/env--jJB-TSX.js
+/** 解析 .env（简单 KEY=VALUE 行解析，不引依赖）；文件缺失返回 undefined */
+function readEnvVars(dotenvPath) {
+	let raw;
+	try {
+		raw = readFileSync(dotenvPath, "utf8");
+	} catch {
+		return;
+	}
+	const vars = /* @__PURE__ */ new Map();
+	for (const line of raw.split(/\r?\n/)) {
+		const trimmed = line.trim();
+		if (trimmed === "" || trimmed.startsWith("#")) continue;
+		const eq = trimmed.indexOf("=");
+		if (eq <= 0) continue;
+		const key = trimmed.slice(0, eq).trim();
+		let value = trimmed.slice(eq + 1).trim();
+		if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
+		vars.set(key, value);
+	}
+	return vars;
+}
+/**
+* 读取 LLM_BASE_URL / LLM_API_KEY / LLM_MODEL（优先），
+* 向后兼容 VITE_BASE_URL / VITE_API_KEY / VITE_MODEL_NAME；缺项返回 undefined 供测试 skip 判断。
+*/
+function loadLlmConfigFromEnv(dotenvPath = ".env") {
+	const vars = readEnvVars(dotenvPath);
+	if (!vars) return void 0;
+	const baseUrl = vars.get("LLM_BASE_URL") ?? vars.get("VITE_BASE_URL");
+	const apiKey = vars.get("LLM_API_KEY") ?? vars.get("VITE_API_KEY");
+	const model = vars.get("LLM_MODEL") ?? vars.get("VITE_MODEL_NAME");
+	if (!baseUrl || !apiKey || !model) return void 0;
+	return {
+		baseUrl,
+		apiKey,
+		model
+	};
+}
+/** ANTHROPIC_API_KEY / ANTHROPIC_MODEL（可选 ANTHROPIC_BASE_URL）；缺项返回 undefined */
+function loadAnthropicConfigFromEnv(dotenvPath = ".env") {
+	const vars = readEnvVars(dotenvPath);
+	if (!vars) return void 0;
+	const apiKey = vars.get("ANTHROPIC_API_KEY");
+	const model = vars.get("ANTHROPIC_MODEL");
+	if (!apiKey || !model) return void 0;
+	const baseUrl = vars.get("ANTHROPIC_BASE_URL");
+	return {
+		apiKey,
+		model,
+		...baseUrl ? { baseUrl } : {}
+	};
+}
+/** GOOGLE_API_KEY / GOOGLE_MODEL（可选 GOOGLE_BASE_URL）；缺项返回 undefined */
+function loadGoogleConfigFromEnv(dotenvPath = ".env") {
+	const vars = readEnvVars(dotenvPath);
+	if (!vars) return void 0;
+	const apiKey = vars.get("GOOGLE_API_KEY");
+	const model = vars.get("GOOGLE_MODEL");
+	if (!apiKey || !model) return void 0;
+	const baseUrl = vars.get("GOOGLE_BASE_URL");
+	return {
+		apiKey,
+		model,
+		...baseUrl ? { baseUrl } : {}
+	};
+}
+let capabilitiesCache;
+/**
+* 探测 LLM 能力（结果模块级缓存）：
+* - available：GET /models 可达（与 checkAvailability 同语义）
+* - nonStreaming：最小非流式 chat completion（max_tokens=1，短超时）；
+*   HTTP 400/404 或明确不支持非流式的错误 → false
+* - streaming 能力由 available 推断（SSE 解析在 SDK 侧实现）
+* 环境变量 VITE_LLM_NON_STREAMING=0 可显式强制 nonStreaming=false（模拟流式-only 回归）。
+*/
+function probeLlmCapabilities(config) {
+	capabilitiesCache ??= doProbeLlmCapabilities(config);
+	return capabilitiesCache;
+}
+async function doProbeLlmCapabilities(config) {
+	const baseUrl = config.baseUrl.replace(/\/+$/, "");
+	const headers = { authorization: `Bearer ${config.apiKey}` };
+	let available;
+	try {
+		available = (await fetch(`${baseUrl}/models`, {
+			headers,
+			signal: AbortSignal.timeout(1e4)
+		})).ok;
+	} catch {
+		available = false;
+	}
+	if (!available) return {
+		available: false,
+		nonStreaming: false,
+		reason: "endpoint unreachable or unauthorized"
+	};
+	if (process.env["VITE_LLM_NON_STREAMING"] === "0") return {
+		available: true,
+		nonStreaming: false,
+		reason: "non-streaming disabled via VITE_LLM_NON_STREAMING=0 (simulated)"
+	};
+	try {
+		const res = await fetch(`${baseUrl}/chat/completions`, {
+			method: "POST",
+			headers: {
+				...headers,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				model: config.model,
+				messages: [{
+					role: "user",
+					content: "OK"
+				}],
+				max_tokens: 1
+			}),
+			signal: AbortSignal.timeout(15e3)
+		});
+		const contentType = res.headers.get("content-type") ?? "";
+		if (res.ok && !contentType.includes("text/event-stream")) return {
+			available: true,
+			nonStreaming: true
+		};
+		const detail = (await res.text().catch(() => "")).slice(0, 200);
+		return {
+			available: true,
+			nonStreaming: false,
+			reason: `endpoint rejects non-streaming chat completions (HTTP ${res.status})${detail ? `: ${detail}` : ""}`
+		};
+	} catch (e) {
+		return {
+			available: true,
+			nonStreaming: false,
+			reason: `non-streaming probe failed: ${e instanceof Error ? e.message : String(e)}`
+		};
+	}
+}
+
+//#endregion
+export { probeLlmCapabilities as i, loadGoogleConfigFromEnv as n, loadLlmConfigFromEnv as r, loadAnthropicConfigFromEnv as t };

package/dist/env-BPUBZCwJ-4jat_SVG.d.ts

@@ -0,0 +1,38 @@
+//#region ../node/dist/env-BPUBZCwJ.d.ts
+//#region src/env.d.ts
+interface LlmEnvConfig {
+  baseUrl: string;
+  apiKey: string;
+  model: string;
+}
+/** per-provider env 配置（baseUrl 可选，客户端自带默认） */
+interface ProviderEnvConfig {
+  apiKey: string;
+  model: string;
+  baseUrl?: string;
+}
+/**
+ * 读取 LLM_BASE_URL / LLM_API_KEY / LLM_MODEL（优先），
+ * 向后兼容 VITE_BASE_URL / VITE_API_KEY / VITE_MODEL_NAME；缺项返回 undefined 供测试 skip 判断。
+ */
+declare function loadLlmConfigFromEnv(dotenvPath?: string): LlmEnvConfig | undefined;
+/** ANTHROPIC_API_KEY / ANTHROPIC_MODEL（可选 ANTHROPIC_BASE_URL）；缺项返回 undefined */
+declare function loadAnthropicConfigFromEnv(dotenvPath?: string): ProviderEnvConfig | undefined;
+/** GOOGLE_API_KEY / GOOGLE_MODEL（可选 GOOGLE_BASE_URL）；缺项返回 undefined */
+declare function loadGoogleConfigFromEnv(dotenvPath?: string): ProviderEnvConfig | undefined;
+interface LlmCapabilities {
+  available: boolean;
+  nonStreaming: boolean;
+  reason?: string;
+}
+/**
+ * 探测 LLM 能力（结果模块级缓存）：
+ * - available：GET /models 可达（与 checkAvailability 同语义）
+ * - nonStreaming：最小非流式 chat completion（max_tokens=1，短超时）；
+ *   HTTP 400/404 或明确不支持非流式的错误 → false
+ * - streaming 能力由 available 推断（SSE 解析在 SDK 侧实现）
+ * 环境变量 VITE_LLM_NON_STREAMING=0 可显式强制 nonStreaming=false（模拟流式-only 回归）。
+ */
+declare function probeLlmCapabilities(config: LlmEnvConfig): Promise<LlmCapabilities>;
+//#endregion
+export { loadGoogleConfigFromEnv as a, loadAnthropicConfigFromEnv as i, LlmEnvConfig as n, loadLlmConfigFromEnv as o, ProviderEnvConfig as r, probeLlmCapabilities as s, LlmCapabilities as t };