@webskill/sdk 0.10.0 → 0.11.0

package/dist/{index-BF4E1a9j.d.ts → index-DWbs58LF.d.ts}

@@ -1,5 +1,5 @@
-import { S as UiBridge, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-CrRcT-LM-DZAp8sWv.js";
-import { k as ExternalToolSource } from "./index-DtFdMKBX.js";
+import { G as RemoteUrlPolicy, S as UiBridge, Tt as WebSkillErrorCode, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-C26b05fW-CdrRCRDb.js";
+import { F as ExternalToolSource } from "./index-D3mONFHD.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -308,11 +308,54 @@ interface PerceptionScope {
   /** 从 include 子树中剪除的敏感区域（凭据输入、个人信息展示区等） */
   exclude?: readonly string[];
 }
+/**
+ * 一个帧内的可感知范围（FR-24.1）。
+ *
+ * `frame` 的选择器在**主文档**里求值，不下钻到 iframe 内部再找 iframe：
+ * 允许 `a > b > c` 式的跨帧路径会让「授权面到底覆盖了什么」无法在配置里一眼看出来。
+ * 要读更深的帧须再写一条——而那条也只能写主文档里的选择器，所以本版实际只支持一层。
+ * @experimental
+ */
+interface FrameScope {
+  /** 主文档写 `'self'`；iframe 写主文档里定位该 `<iframe>` 的选择器 */
+  frame: 'self' | string;
+  include: readonly string[];
+  exclude?: readonly string[];
+}
+/**
+ * 宿主声明的感知范围：单帧（旧形状）或多帧。
+ *
+ * 保留旧形状不是为了好看——AC-24.9 要求宿主不改配置也能升级。
+ * @experimental
+ */
+type PerceptionScopeInput = PerceptionScope | {
+  frames: readonly FrameScope[];
+};
+/**
+ * 两种形状归一成帧列表；旧形状等价于一条 `frame:'self'`（FR-24.1）。
+ *
+ * **这是判别的单一来源。** 散在各处写 `'frames' in scope` 会让
+ * 「旧配置还等价吗」这个问题没有唯一答案。
+ * @experimental
+ */
+declare function toFrameScopes(scope: PerceptionScopeInput): readonly FrameScope[];
+/** 某个帧未能读取的原因（FR-24.2 / FR-24.3）；不静默跳过 @experimental */
+interface FrameNote {
+  frame: string;
+  reason: 'cross-origin' | 'origin-changed' | 'not-found';
+  /** 面向模型的英文说明，同时也是说明节点的 name */
+  message: string;
+}
 /**
  * 结构化元素描述（FR-10.4，硬约束）：只有角色、名称、值。
  *
- * 不下发 HTML 原文有两条理由：HTML 里的 class / data 属性 / 注释远超模型
- * 完成任务所需；且页面文本一旦以 HTML 形式进上下文，就多了一条注入通道。
+ * 仍**不下发 HTML 原文**：HTML 里的 class / data 属性 / 注释远超模型完成任务所需；
+ * 且页面文本一旦以 HTML 形式进上下文，就多了一条注入通道。
+ *
+ * **链接 URL 是显式放行的例外**（0.11.0 分册 22，FR-22.1/22.2）。
+ * 它的风险不再由「不下发」承担，而是由取数侧的四道闸门共同承担：
+ * 同源判定、跨源逐次确认、`assertRemoteUrlAllowed`、审计留痕。
+ * 放行的只有 `href` 这一个属性，其余属性照旧不下发。
  * @experimental
  */
 interface PerceivedNode {
@@ -332,6 +375,23 @@ interface PerceivedNode {
    * 由 reader 生成，只在产生它的那次感知内有效；模型不得构造或推断。
    */
   ref?: string;
+  /**
+   * 该节点来自哪个帧（FR-24.4）。**主文档节点不带这个字段**——
+   * 否则旧宿主的断言会凭空变化。跨帧后会出现同名控件，不标帧模型会点错。
+   */
+  frame?: string;
+  /**
+   * 链接目标（FR-22.1）。**仅 `role === 'link'` 的节点有**，且只有感知白名单
+   * 区域内的链接才有。URL **原样**保留，不去 query —— 去掉会让 `?share=…`
+   * 这类链接失效，而 query 里的敏感信息本就不该由感知层来猜。
+   */
+  href?: string;
+  /**
+   * 该节点为何可见（FR-25.6 / AC-G22）。只在**授权面被临时扩大**时出现：
+   * `'modal-elevated'` = 它在一个由本次已授权操作打开的对话框里，
+   * 原本不在白名单内。缺省不带该字段。
+   */
+  provenance?: 'modal-elevated';
   children?: readonly PerceivedNode[];
 }
 /** 随感知一起下发的一张图像（FR-12.1） @experimental */
@@ -362,6 +422,8 @@ interface PerceptionCaptureOptions {
  */
 interface PerceptionResult {
   nodes: readonly PerceivedNode[];
+  /** 被跳过的帧及原因；调用方据此告警（FR-24.2 / FR-24.3） */
+  frameNotes?: readonly FrameNote[];
   images?: readonly PerceivedImage[];
   /** 超出 `maxImages` 而未下发的张数 */
   imagesOmitted?: number;
@@ -376,15 +438,17 @@ interface PerceptionResult {
  * @experimental
  */
 interface PagePerceptionReader {
-  read(scope: PerceptionScope, capture?: PerceptionCaptureOptions): Promise<readonly PerceivedNode[] | PerceptionResult> | readonly PerceivedNode[] | PerceptionResult;
+  read(scope: PerceptionScopeInput, capture?: PerceptionCaptureOptions): Promise<readonly PerceivedNode[] | PerceptionResult> | readonly PerceivedNode[] | PerceptionResult;
 }
 /** 一次感知的留痕（FR-10.5 的 UI 提示与 FR-10.6 的审计共用同一条记录） @experimental */
 interface PerceptionRecord {
   /** ISO 8601 */
   at: string;
-  /** 本次实际生效的白名单 */
+  /** 本次实际生效的白名单（多帧时是各帧的并集） */
   include: readonly string[];
   exclude: readonly string[];
+  /** 本次读取的帧标识；单帧配置时不存在，旧宿主的断言不受影响（FR-24.6） */
+  frames?: readonly string[];
   /** 读到的顶层节点数；用于「它读的比我预期的多」这类判断 */
   nodeCount: number;
   /** 本次下发的图像张数，按取像级别分组（只在取像开启时存在） */
@@ -418,12 +482,14 @@ type PerceptionAuditSink = PageAuditSink;
 //#region src/perception/policy.d.ts
 interface PagePerceptionPolicyOptions {
   /** 宿主声明的白名单；`include` 为空即整个能力不可用 */
-  scope: PerceptionScope;
+  scope: PerceptionScopeInput;
   reader: PagePerceptionReader;
   /** FR-10.6：每次感知写审计。不注入即不留痕，装配方要自己承担这个选择 */
   audit?: PerceptionAuditSink;
   /** 审计事件的 target（缺省 `page`）；多页面宿主可用它区分来源 */
   auditTarget?: string;
+  /** 帧被跳过时的告警出口（跨源、origin 变更、找不到）；FR-24.3 要求「失效并告警」 */
+  onWarning?(message: string): void;
   now?(): string;
 }
 /**
@@ -442,7 +508,7 @@ declare class PagePerceptionPolicy {
   constructor(options: PagePerceptionPolicyOptions);
   /** 白名单为空即不可用（FR-10.1/10.2）：宿主没声明范围就没有这个能力 */
   get enabled(): boolean;
-  get scope(): PerceptionScope;
+  get scope(): PerceptionScopeInput;
   /** 最近的感知记录（console 只读展示用），新的在前 */
   get records(): readonly PerceptionRecord[];
   /** FR-10.5：感知发生时通知 UI，chatbot 据此在消息流里标注一行 */
@@ -490,6 +556,100 @@ declare function createPagePerceptionToolSource(options: PagePerceptionToolSourc
  */
 declare const PERCEPTION_SYSTEM_PROMPT: string;
 //#endregion
+//#region src/dataSource/policy.d.ts
+/** 数据源的四种通道（FR-16.2）；后三种的通道由分册 24/26/27 建立，本层只做消费 */
+type DataSourceKind = 'page-perception' | 'webmcp-tool' | 'http' | 'page-skill';
+/**
+ * 宿主声明的一个数据源。
+ *
+ * **`target` 由宿主写死，脚本传不进来**——这就是 FR-16.2「唯一授权面」的实现方式。
+ * `assertRemoteUrlAllowed` 只判 scheme 与私有地址，**给不了**域名白名单，
+ * 所以授权靠的是「URL 根本不由脚本提供」，那个函数是第二道闸门。
+ * @experimental
+ */
+interface DataSourceDef {
+  id: string;
+  kind: DataSourceKind;
+  /** 给技能作者看的一句话；不进模型上下文 */
+  description: string;
+  /** 按 kind 各异：选择器 / 工具名 / URL / 技能名 */
+  target: string;
+}
+/** 一次取数的留痕（FR-16.4）；被拒也要记，否则「反复试探未授权的源」在审计里看不见 */
+interface DataSourceRecord {
+  /** ISO 8601 */
+  at: string;
+  sourceId: string;
+  kind?: DataSourceKind;
+  ok: boolean;
+  /** 成功时的结果字节数 */
+  bytes?: number;
+  /** 失败时的稳定错误码 */
+  code?: WebSkillErrorCode;
+  reason?: string;
+}
+interface DataSourceAuditSink {
+  record(event: DataSourceRecord): void | Promise<void>;
+}
+/** 取数的实际执行；`http` 之外的三种由各自分册接线后注入（FR-16.3） */
+interface DataSourceTransport {
+  fetch(source: DataSourceDef, params?: Record<string, unknown>): Promise<unknown>;
+}
+interface DataSourcePolicyOptions {
+  sources: readonly DataSourceDef[];
+  /**
+   * `kind:'http'` 的出站判定；缺省即 assertRemoteUrlAllowed 的缺省。
+   *
+   * 传函数形式可惰性取值：宿主的出站策略通常住在可改的运行时配置里，
+   * 写死成字面量会让改完设置必须刷新页面才生效。
+   */
+  remoteUrl?: RemoteUrlPolicy | (() => RemoteUrlPolicy | Promise<RemoteUrlPolicy>);
+  /** 按 kind 注入的执行器；缺失的 kind 调用时报「宿主未提供该通道」 */
+  transports?: Partial<Record<DataSourceKind, DataSourceTransport>>;
+  /** 结果字节上限（FR-16.6）；超出即拒绝，**不截断** */
+  maxBytes?: number;
+  audit?: DataSourceAuditSink;
+  now?(): string;
+}
+/**
+ * 脚本取数策略（分册 16）。
+ *
+ * 与 `PagePerceptionPolicy` / `PageActionPolicy` 同款：**未注入即该能力不存在**。
+ * 脚本侧看到的是 `context.fetchData === undefined`，不是一个会报错的函数。
+ * @experimental
+ */
+declare class DataSourcePolicy {
+  #private;
+  constructor(options: DataSourcePolicyOptions);
+  /** 一个源都没声明就没有这个能力（同 perception 的 include 为空） */
+  get enabled(): boolean;
+  get sources(): readonly DataSourceDef[];
+  get records(): readonly DataSourceRecord[];
+  fetchData(sourceId: string, params?: Record<string, unknown>): Promise<unknown>;
+}
+//#endregion
+//#region src/dataSource/httpTransport.d.ts
+interface HttpDataSourceOptions {
+  /**
+   * 注入点存在只为可测（AC-16.1 要断「零请求」，得能数调用次数）。
+   * 生产装配留空即用全局 fetch。
+   */
+  fetch?: typeof globalThis.fetch;
+  /** 宿主侧固定请求头，例如网关鉴权；**脚本改不了** */
+  headers?: Readonly<Record<string, string>>;
+  /** 单次请求超时，缺省 15s；卡死的上游会一直占着沙箱的一次调用 */
+  timeoutMs?: number;
+}
+/**
+ * `kind:'http'` 的搬运层（分册 16 §2.3 本册唯一新建通道）。
+ *
+ * `params` 一律走查询串，**不拼进 path**：拼 path 的话
+ * `params={ x: '../admin' }` 就能把目标挪走，那样 `target` 写死就白写了
+ * ——「唯一授权面」是靠目标不可被脚本影响撑住的（FR-16.2）。
+ * @experimental
+ */
+declare function createHttpDataSourceTransport(options?: HttpDataSourceOptions): DataSourceTransport;
+//#endregion
 //#region src/pageAction/types.d.ts
 /**
  * 页面操作的策略层类型（需求 23）。
@@ -511,14 +671,49 @@ interface PageActionScope {
   /** 从 include 子树中剪除的危险控件（支付、删除、权限变更等） */
   exclude?: readonly string[];
 }
-/** 本版的最小操作集（FR-23.4）。导航、拖拽、滚动均不在内。 @experimental */
-type PageActionKind = 'click' | 'fill' | 'submit';
+/**
+ * 一个帧内的可操作范围（FR-24.1）。
+ *
+ * 与感知侧的 `FrameScope` 同构但**独立声明**，理由同上：合并成一个类型会让
+ * 「一份配置同时当感知范围和操作范围用」在类型层面合法。
+ * @experimental
+ */
+interface ActionFrameScope {
+  /** 主文档写 `'self'`；iframe 写主文档里定位该 `<iframe>` 的选择器 */
+  frame: 'self' | string;
+  include: readonly string[];
+  exclude?: readonly string[];
+}
+/** 宿主声明的操作范围：单帧（旧形状）或多帧。旧形状必须继续可用（AC-24.9） @experimental */
+type PageActionScopeInput = PageActionScope | {
+  frames: readonly ActionFrameScope[];
+};
+/**
+ * 两种形状归一成帧列表；旧形状等价于一条 `frame:'self'`。
+ * 与感知侧的 `toFrameScopes` 一样，是本侧判别的**单一来源**。
+ * @experimental
+ */
+declare function toActionFrameScopes(scope: PageActionScopeInput): readonly ActionFrameScope[];
+/**
+ * 本版的操作集（FR-25.1）。导航、拖拽、滚动仍不在内。
+ *
+ * `select`/`set`/`attach` 与既有三个走**同一条** policy 路径，
+ * 范围白名单、逐次确认、审计三条硬约束因此天然覆盖到它们——
+ * 前提是新动作不绕过 policy 直接调执行器（AC-25.4 守这一点）。
+ * @experimental
+ */
+declare const PAGE_ACTION_KINDS: readonly ["click", "fill", "submit", "select", "set", "attach"];
+type PageActionKind = (typeof PAGE_ACTION_KINDS)[number];
 /** @experimental */
 interface PageActionRequest {
   /** 感知产出的不透明句柄；不接受选择器（FR-23.4） */
   ref: string;
   action: PageActionKind;
-  /** `action === 'fill'` 时必填 */
+  /**
+   * `fill` 填入的文本；`select` 要选中的选项可访问名；
+   * `set` 的目标态（`'true'` | `'false'`）。`attach` 不用它——
+   * 文件**始终由用户在确认卡里选**，Agent 传不进本地路径（FR-25.5）。
+   */
   value?: string;
 }
 /** @experimental */
@@ -532,9 +727,17 @@ interface PageActionOutcome {
   target: {
     role: string;
     name?: string;
+    frame?: string;
   };
   /** 目标是密码类控件：确认卡与留痕据此隐去值（FR-23.3） */
   secret?: boolean;
+  /**
+   * `set` 判定当前态已是目标态，因此**没有真的操作**（FR-25.4）。
+   * 仍返回 `ok: true`：返回失败模型会重试，假装点了审计会失真。
+   */
+  noop?: boolean;
+  /** 本次操作新打开的模态的可访问名；授权面临时扩大要在留痕里看得见（FR-25.6） */
+  elevatedModal?: string;
   /** 失败原因（英文） */
   reason?: string;
 }
@@ -550,6 +753,8 @@ interface PageActionExecutor {
     role: string;
     name?: string;
     secret?: boolean;
+    frame?: string;
+    elevated?: boolean;
   } | undefined;
 }
 /** 一次页面操作的留痕（FR-23.3 的五项字段） @experimental */
@@ -559,9 +764,17 @@ interface PageActionRecord {
   action: PageActionKind;
   role: string;
   name?: string;
+  /** 目标所在的帧；主文档目标不带该字段（FR-24.6） */
+  frame?: string;
   /** 是否经用户确认；宿主预授权的操作记 `'preauthorized'` */
   approved: boolean | 'preauthorized';
   ok: boolean;
+  /** 目标位于本次会话中被提升的模态里（授权面临时扩大，FR-25.6 / AC-G22） */
+  elevated?: boolean;
+  /** 本次操作新打开的模态 */
+  elevatedModal?: string;
+  /** 当前态已是目标态，未执行任何操作（FR-25.4） */
+  noop?: boolean;
   /** 非密码类控件填入的值；密码类控件**整个字段不存在** */
   value?: string;
   reason?: string;
@@ -574,7 +787,7 @@ interface PageActionUi {
 }
 interface PageActionPolicyOptions {
   /** 宿主声明的可操作范围；`include` 为空即整个能力不可用 */
-  scope: PageActionScope;
+  scope: PageActionScopeInput;
   executor: PageActionExecutor;
   ui: PageActionUi;
   /** FR-23.3：每次操作写审计。不注入即不留痕，装配方要自己承担这个选择 */
@@ -600,7 +813,7 @@ declare class PageActionPolicy {
   constructor(options: PageActionPolicyOptions);
   /** 白名单为空即不可用（FR-23.1）：宿主没声明范围就没有这个能力 */
   get enabled(): boolean;
-  get scope(): PageActionScope;
+  get scope(): PageActionScopeInput;
   /** 最近的操作记录（只读展示用），新的在前 */
   get records(): readonly PageActionRecord[];
   act(request: PageActionRequest): Promise<PageActionOutcome>;
@@ -629,4 +842,4 @@ declare function createPageActionToolSource(options: PageActionToolSourceOptions
  */
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
-export { TodoList as $, PagePerceptionReader as A, SKILL_GENERATION_SYSTEM_PROMPT as B, PageActionRequest as C, PageAuditSink as D, PageActionUi as E, PerceptionAuditSink as F, SkillGenerationToolSourceOptions as G, SkillGenerationMessages as H, PerceptionCaptureOptions as I, SubAgentRunInput as J, SkillGenerator as K, PerceptionRecord as L, ParentBudget as M, PerceivedImage as N, PagePerceptionPolicy as O, PerceivedNode as P, TodoItem as Q, PerceptionResult as R, PageActionRecord as S, PageActionToolSourceOptions as T, SkillGenerationOutcome as U, SkillCandidateSink as V, SkillGenerationPolicy as W, TODO_SYSTEM_PROMPT as X, SubAgentRunner as Y, TodoEvent as Z, PageActionExecutor as _, DelegationOrchestratorOptions as a, createPageActionToolSource as at, PageActionPolicy as b, DelegationToolSourceOptions as c, createTodoToolSource as ct, ImageCaptureBudget as d, TodoListener as et, MANAGE_TODO_TOOL as f, PERCEPTION_SYSTEM_PROMPT as g, PERCEIVE_PAGE_TOOL as h, DelegationOrchestrator as i, createDelegationToolSource as it, PagePerceptionToolSourceOptions as j, PagePerceptionPolicyOptions as k, GENERATE_SKILL_TOOL as l, withDelegationOrigin as lt, PAGE_ACTION_TOOL as m, DELEGATION_SYSTEM_PROMPT as n, TodoStore as nt, DelegationRequest as o, createPagePerceptionToolSource as ot, PAGE_ACTION_SYSTEM_PROMPT as p, SkillGeneratorOptions as q, DelegationBudget as r, TodoToolSourceOptions as rt, DelegationResult as s, createSkillGenerationToolSource as st, DELEGATE_TASK_TOOL as t, TodoStatus as tt, GeneratedSkillDraft as u, PageActionKind as v, PageActionScope as w, PageActionPolicyOptions as x, PageActionOutcome as y, PerceptionScope as z };
+export { PerceptionScopeInput as $, PageActionKind as A, PageAuditSink as B, MANAGE_TODO_TOOL as C, createTodoToolSource as Ct, PERCEIVE_PAGE_TOOL as D, PAGE_ACTION_TOOL as E, withDelegationOrigin as Et, PageActionRequest as F, ParentBudget as G, PagePerceptionPolicyOptions as H, PageActionScope as I, PerceptionAuditSink as J, PerceivedImage as K, PageActionScopeInput as L, PageActionPolicy as M, PageActionPolicyOptions as N, PERCEPTION_SYSTEM_PROMPT as O, PageActionRecord as P, PerceptionScope as Q, PageActionToolSourceOptions as R, ImageCaptureBudget as S, createSkillGenerationToolSource as St, PAGE_ACTION_SYSTEM_PROMPT as T, toFrameScopes as Tt, PagePerceptionReader as U, PagePerceptionPolicy as V, PagePerceptionToolSourceOptions as W, PerceptionRecord as X, PerceptionCaptureOptions as Y, PerceptionResult as Z, FrameNote as _, TodoToolSourceOptions as _t, DataSourceDef as a, SkillGenerationToolSourceOptions as at, GeneratedSkillDraft as b, createPageActionToolSource as bt, DataSourcePolicyOptions as c, SubAgentRunInput as ct, DelegationBudget as d, TodoEvent as dt, SKILL_GENERATION_SYSTEM_PROMPT as et, DelegationOrchestrator as f, TodoItem as ft, DelegationToolSourceOptions as g, TodoStore as gt, DelegationResult as h, TodoStatus as ht, DataSourceAuditSink as i, SkillGenerationPolicy as it, PageActionOutcome as j, PageActionExecutor as k, DataSourceRecord as l, SubAgentRunner as lt, DelegationRequest as m, TodoListener as mt, DELEGATE_TASK_TOOL as n, SkillGenerationMessages as nt, DataSourceKind as o, SkillGenerator as ot, DelegationOrchestratorOptions as p, TodoList as pt, PerceivedNode as q, DELEGATION_SYSTEM_PROMPT as r, SkillGenerationOutcome as rt, DataSourcePolicy as s, SkillGeneratorOptions as st, ActionFrameScope as t, SkillCandidateSink as tt, DataSourceTransport as u, TODO_SYSTEM_PROMPT as ut, FrameScope as v, createDelegationToolSource as vt, PAGE_ACTION_KINDS as w, toActionFrameScopes as wt, HttpDataSourceOptions as x, createPagePerceptionToolSource as xt, GENERATE_SKILL_TOOL as y, createHttpDataSourceTransport as yt, PageActionUi as z };

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-CrRcT-LM-DZAp8sWv.js";
-import { $ as READ_SKILL_FILE_INPUT_SCHEMA, $n as schemaToForm, $t as TraceEventType, A as FS_SESSION_PAGE_SIZE, An as fromVercelStreamPart, At as SealResult, B as HookRunnerOptions, Bn as normalizeToolContent, Bt as SkillScriptDescriptor, C as DEFAULT_LOOP_LIMITS, Cn as exportUserProfile, Ct as RuntimeSessionHandle, D as ExecuteLifecycleData, Dn as findUnpairedToolCalls, Dt as ScriptExecutor, E as EventBus, En as extractUiSpecEvents, Et as ScriptExecutionContext, F as FsSessionStore, Fn as mergeCatalogEntries, Ft as SessionStore, G as LifecycleEventInit, Gn as readBehaviorRecords, Gt as TextualToolContent, H as IntegrityVerdict, Hn as parseBridgeRequest, Ht as SkillStateGuard, I as FullDisclosureRouter, In as mergeProfileEntries, It as SkillFailureReport, J as LifecycleListener, Jn as refineUserProfile, Jt as ToolDefinition, K as LifecycleHook, Kn as readProfileEntries, Kt as TodoTraceEvent, L as GoogleGenAiClient, Ln as networkPolicyLibSource, Lt as SkillIntegrityGuard, M as FsMemoryStore, Mn as isNetworkAllowed, Mt as SessionListPage, N as FsRunSnapshotStore, Nn as isUnsupportedRunSnapshot, Nt as SessionMeta, O as ExternalSkillProvider, On as formatSkillScriptManifest, Ot as SealOptions, P as FsRunTraceStore, Pn as listSkillScripts, Pt as SessionRecord, Q as ProgressiveRouter, Qn as schemaSourceLabel, Qt as TraceEvent, R as GoogleGenAiClientConfig, Rn as networkUrlHost, Rt as SkillOutcomeReporter, S as CapabilityMode, Sn as diffUserProfile, St as RuntimeSession, T as EMPTY_USER_PROFILE, Tn as extractTodoTraceEvents, Tt as SchemaInferer, U as InteractLifecycleData, Un as parseUserProfileExport, Ut as SkillSuccessReport, V as InstalledSkillManifest, Vn as normalizeToolError, Vt as SkillScriptSchemaSource, W as LifecycleEvent, Wn as partsToText, Wt as TerminalLifecycleData, X as OpenAiCompatibleClient, Xn as resolveToolName, Xt as ToolResult, Y as NetworkPolicy, Yn as renderUserProfileContext, Yt as ToolResolution, Z as OpenAiCompatibleClientConfig, Zn as sampleBehaviorRecords, Zt as TraceClock, _ as BridgeCapabilities, _n as applyUserProfileImport, _t as RunTraceStore, a as ActivateLifecycleData, an as USER_PROFILE_REFINE_PROMPT, ar as toLlmToolSpec, at as RouteLifecycleData, b as BridgeResponse, bn as createScriptContext, bt as RuntimePhase, c as AgentLoopDeps, cn as UserProfileEntry, cr as validateUiSpecEvent, ct as RunResult, d as ApprovalDecision, dn as UserProfileLimits, dt as RunSnapshotStore, en as TraceRecorder, er as scriptToolName, et as READ_SKILL_FILE_TOOL, f as ApprovalScope, fn as VercelToolSpec, ft as RunTerminationReason, g as BehaviorScene, gn as appendBehaviorRecords, gt as RunTraceMetrics, h as BehaviorRecordKind, hn as WebSkillRuntimeDeps, ht as RunTraceFilter, i as ASK_USER_TOOL_NAME, in as USER_PROFILE_PROMPT_HEADER, ir as textParts, it as RefineUserProfileInput, j as FsArtifactStore, jn as interruptedToolResult, jt as SerializingMemoryStore, k as ExternalToolSource, kn as fromVercelResult, kt as SealRecord, l as AnthropicClient, ln as UserProfileExport, lr as validateUiSpecNode, lt as RunSnapshot, m as BehaviorRecord, mn as WebSkillRuntime, mt as RunTraceFile, n as ASK_USER_INPUT_SCHEMA, nn as USER_PROFILE_KEY, nr as summarizeRunUsage, nt as RUN_SNAPSHOT_SCHEMA_VERSION, o as AgentLoop, on as UnsupportedRunSnapshot, or as toRecordDigests, ot as RouteResult, p as BEHAVIOR_RECORDS_KEY, pn as WebSkillApi, pt as RunToolCall, q as LifecycleHookContext, qn as readUserProfile, qt as ToolContent, r as ASK_USER_TOOL, rn as USER_PROFILE_NO_INVENTION_RULE, rr as summarizeToolCalls, rt as RUN_TRACE_SCHEMA_VERSION, s as AgentLoopConfig, sn as UserProfile, sr as toVercelToolSpecs, st as RunLimitErrorDetails, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as USER_PROFILE_EXPORT_VERSION, tr as sealToolCallPairs, tt as READ_SKILL_FILE_TOOL_NAME, u as AnthropicClientConfig, un as UserProfileImportDiff, ut as RunSnapshotListEntry, v as BridgeCapability, vn as bridgeError, vt as RunTraceSummary, w as DEFAULT_USER_PROFILE_LIMITS, wn as extractChartSpec, wt as SESSION_SCHEMA_VERSION, x as CapabilityApproval, xn as createWebSkillApi, xt as RuntimeRun, y as BridgeRequest, yn as buildRenderResult, yt as RunUsageSummary, z as HookRunner, zn as normalizeErrorCode, zt as SkillRouter } from "./index-DtFdMKBX.js";
+import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-C26b05fW-CdrRCRDb.js";
+import { $ as LifecycleHookContext, $n as normalizeToolError, $t as SkillSuccessReport, A as DocxTextExtractor, An as bridgeError, At as RuntimeRun, B as FsRunTraceStore, Bn as formatSkillScriptManifest, Bt as SealResult, C as CapabilityApproval, Cn as UserProfileLimits, Ct as RunTraceFile, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as WebSkillRuntimeDeps, Dt as RunTraceSummary, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as WebSkillRuntime, Et as RunTraceStore, F as ExternalToolSource, Fn as exportUserProfile, Ft as SchemaInferer, G as HookRunner, Gn as isUnsupportedRunSnapshot, Gt as SessionStore, H as FullDisclosureRouter, Hn as fromVercelStreamPart, Ht as SessionListPage, I as FS_SESSION_PAGE_SIZE, In as extractChartSpec, It as ScriptExecutionContext, J as IntegrityVerdict, Jn as mergeProfileEntries, Jt as SkillOutcomeReporter, K as HookRunnerOptions, Kn as listSkillScripts, Kt as SkillFailureReport, L as FsArtifactStore, Ln as extractTodoTraceEvents, Lt as ScriptExecutor, M as EventBus, Mn as createScriptContext, Mt as RuntimeSessionHandle, N as ExecuteLifecycleData, Nn as createWebSkillApi, Nt as SESSION_SCHEMA_VERSION, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as appendBehaviorRecords, Ot as RunUsageSummary, P as ExternalSkillProvider, Pn as diffUserProfile, Pt as SUPPORTED_DOCUMENT_MIME, Q as LifecycleHook, Qn as normalizeToolContent, Qt as SkillStateGuard, R as FsMemoryStore, Rn as extractUiSpecEvents, Rt as SealOptions, S as BridgeResponse, Sn as UserProfileImportDiff, St as RunToolCall, T as DEFAULT_LOOP_LIMITS, Tn as WebSkillApi, Tt as RunTraceMetrics, U as GoogleGenAiClient, Un as interruptedToolResult, Ut as SessionMeta, V as FsSessionStore, Vn as fromVercelResult, Vt as SerializingMemoryStore, W as GoogleGenAiClientConfig, Wn as isNetworkAllowed, Wt as SessionRecord, X as LifecycleEvent, Xn as networkUrlHost, Xt as SkillScriptDescriptor, Y as InteractLifecycleData, Yn as networkPolicyLibSource, Yt as SkillRouter, Z as LifecycleEventInit, Zn as normalizeErrorCode, Zt as SkillScriptSchemaSource, _ as BehaviorRecordKind, _n as USER_PROFILE_REFINE_PROMPT, _r as toLlmToolSpec, _t as RunResult, a as ASK_USER_TOOL, an as ToolDefinition, ar as readUserProfile, at as ProgressiveRouter, b as BridgeCapability, bn as UserProfileEntry, br as validateUiSpecEvent, bt as RunSnapshotStore, c as AgentLoop, cn as TraceClock, cr as resolveToolName, ct as READ_SKILL_FILE_INPUT_SCHEMA, d as AnthropicClient, dn as TraceRecorder, dr as schemaToForm, dt as RUN_SNAPSHOT_SCHEMA_VERSION, en as TEXT_BUDGETED_CONTENT_TYPES, er as parseBridgeRequest, et as LifecycleListener, f as AnthropicClientConfig, fn as UNSUPPORTED_DOCUMENT_MESSAGE, fr as scriptToolName, ft as RUN_TRACE_SCHEMA_VERSION, g as BehaviorRecord, gn as USER_PROFILE_PROMPT_HEADER, gr as textParts, gt as RunLimitErrorDetails, h as BEHAVIOR_RECORDS_KEY, hn as USER_PROFILE_NO_INVENTION_RULE, hr as summarizeToolCalls, ht as RouteResult, i as ASK_USER_MAX_FIELDS, in as ToolContent, ir as readProfileEntries, it as OpenAiCompatibleClientConfig, j as EMPTY_USER_PROFILE, jn as buildRenderResult, jt as RuntimeSession, k as DEFAULT_USER_PROFILE_LIMITS, kn as applyUserProfileImport, kt as RuntimePhase, l as AgentLoopConfig, ln as TraceEvent, lr as sampleBehaviorRecords, lt as READ_SKILL_FILE_TOOL, m as ApprovalScope, mn as USER_PROFILE_KEY, mr as summarizeRunUsage, mt as RouteLifecycleData, n as ASK_USER_FIELD_TYPES, nn as TextualToolContent, nr as partsToText, nt as NetworkPolicy, o as ASK_USER_TOOL_NAME, on as ToolResolution, or as refineUserProfile, ot as READ_LINKED_DOCUMENT_TOOL, p as ApprovalDecision, pn as USER_PROFILE_EXPORT_VERSION, pr as sealToolCallPairs, pt as RefineUserProfileInput, q as InstalledSkillManifest, qn as mergeCatalogEntries, qt as SkillIntegrityGuard, r as ASK_USER_INPUT_SCHEMA, rn as TodoTraceEvent, rr as readBehaviorRecords, rt as OpenAiCompatibleClient, s as ActivateLifecycleData, sn as ToolResult, sr as renderUserProfileContext, st as READ_LINKED_DOCUMENT_TOOL_NAME, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as TerminalLifecycleData, tr as parseUserProfileExport, tt as LinkedDocumentReader, u as AgentLoopDeps, un as TraceEventType, ur as schemaSourceLabel, ut as READ_SKILL_FILE_TOOL_NAME, v as BehaviorScene, vn as UnsupportedRunSnapshot, vr as toRecordDigests, vt as RunSnapshot, w as CapabilityMode, wn as VercelToolSpec, wt as RunTraceFilter, x as BridgeRequest, xn as UserProfileExport, xr as validateUiSpecNode, xt as RunTerminationReason, y as BridgeCapabilities, yn as UserProfile, yr as toVercelToolSpecs, yt as RunSnapshotListEntry, z as FsRunSnapshotStore, zn as findUnpairedToolCalls, zt as SealRecord } from "./index-D3mONFHD.js";
 //#region src/version.d.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
  * Version of the published `@webskill/sdk` package, injected at build time.
  * @stable
  */
-declare const SDK_VERSION = "0.10.0";
+declare const SDK_VERSION = "0.11.0";
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,6 +1,6 @@
 import { A as jsonRenderer, B as resolveArchiveLimits, C as computeDigest, D as exportSkills, E as escapeXml, F as parseSkillPackManifest, G as unzipWithLimits, H as signSkill, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, N as normalizePath, O as isAtomicTempPath, P as parseSkillMarkdown, R as renderAvailableSkillsXml, S as checkSkillRules, T as detectSkillArchiveShapeFromFs, U as signaturePayloadBytes, V as resolveInsideRoot, W as stripArchiveRoot, Y as xmlRenderer, _ as assertSafePathSegment, a as MemoryFS, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, f as SKILL_SIGNATURE_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, j as keyIdOf, k as isValidSkillName, l as SKILL_NAME_MAX_LENGTH, m as SkillReader, n as DEFAULT_ARCHIVE_LIMITS, o as SIGNATURE_SCHEMA_VERSION, p as SkillDiscovery, q as verifyManifest, r as FsTrustedKeyStore, s as SKILLS_LOCKFILE, t as ATOMIC_TMP_SUFFIX_PATTERN, u as SKILL_NAME_PATTERN, v as atomicWriteText, w as detectSkillArchiveShape, x as checkDependencyCycles, y as buildCatalog, z as renderCatalogJson } from "./dist-Bev6i6Ip.js";
 import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { $ as fromVercelStreamPart, A as SerializingMemoryStore, At as validateUiSpecNode, B as bridgeError, C as ProgressiveRouter, Ct as sealToolCallPairs, D as RUN_SNAPSHOT_SCHEMA_VERSION, Dt as toRecordDigests, E as READ_SKILL_FILE_TOOL_NAME, Et as toLlmToolSpec, F as USER_PROFILE_PROMPT_HEADER, G as exportUserProfile, H as createScriptContext, I as USER_PROFILE_REFINE_PROMPT, J as extractTodoTraceEvents, K as extractChartSpec, L as WebSkillRuntime, M as USER_PROFILE_EXPORT_VERSION, N as USER_PROFILE_KEY, O as RUN_TRACE_SCHEMA_VERSION, Ot as toVercelToolSpecs, P as USER_PROFILE_NO_INVENTION_RULE, Q as fromVercelResult, R as appendBehaviorRecords, S as OpenAiCompatibleClient, St as scriptToolName, T as READ_SKILL_FILE_TOOL, Tt as summarizeToolCalls, U as createWebSkillApi, V as buildRenderResult, W as diffUserProfile, X as findUnpairedToolCalls, Y as extractUiSpecEvents, Z as formatSkillScriptManifest, _ as FsRunTraceStore, _t as renderUserProfileContext, a as AgentLoop, at as mergeProfileEntries, b as GoogleGenAiClient, bt as schemaSourceLabel, c as CapabilityApproval, ct as normalizeErrorCode, d as EMPTY_USER_PROFILE, dt as parseBridgeRequest, et as interruptedToolResult, f as EventBus, ft as parseUserProfileExport, g as FsRunSnapshotStore, gt as refineUserProfile, h as FsMemoryStore, ht as readUserProfile, i as ASK_USER_TOOL_NAME, it as mergeCatalogEntries, j as TraceRecorder, k as SESSION_SCHEMA_VERSION, kt as validateUiSpecEvent, l as DEFAULT_LOOP_LIMITS, lt as normalizeToolContent, m as FsArtifactStore, mt as readProfileEntries, n as ASK_USER_INPUT_SCHEMA, nt as isUnsupportedRunSnapshot, o as AnthropicClient, ot as networkPolicyLibSource, p as FS_SESSION_PAGE_SIZE, pt as readBehaviorRecords, q as extractSkillCandidate, r as ASK_USER_TOOL, rt as listSkillScripts, s as BEHAVIOR_RECORDS_KEY, st as networkUrlHost, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as isNetworkAllowed, u as DEFAULT_USER_PROFILE_LIMITS, ut as normalizeToolError, v as FsSessionStore, vt as resolveToolName, w as READ_SKILL_FILE_INPUT_SCHEMA, wt as summarizeRunUsage, x as HookRunner, xt as schemaToForm, y as FullDisclosureRouter, yt as sampleBehaviorRecords, z as applyUserProfileImport } from "./dist-BViUeszk.js";
+import { $ as createWebSkillApi, A as READ_LINKED_DOCUMENT_TOOL_NAME, At as schemaSourceLabel, B as TraceRecorder, Bt as validateUiSpecNode, C as FsSessionStore, Ct as readBehaviorRecords, D as OpenAiCompatibleClient, Dt as renderUserProfileContext, E as HookRunner, Et as refineUserProfile, F as RUN_TRACE_SCHEMA_VERSION, Ft as summarizeToolCalls, G as USER_PROFILE_PROMPT_HEADER, H as USER_PROFILE_EXPORT_VERSION, I as SESSION_SCHEMA_VERSION, It as toLlmToolSpec, J as appendBehaviorRecords, K as USER_PROFILE_REFINE_PROMPT, L as SUPPORTED_DOCUMENT_MIME, Lt as toRecordDigests, M as READ_SKILL_FILE_TOOL, Mt as scriptToolName, N as READ_SKILL_FILE_TOOL_NAME, Nt as sealToolCallPairs, O as ProgressiveRouter, Ot as resolveToolName, P as RUN_SNAPSHOT_SCHEMA_VERSION, Pt as summarizeRunUsage, Q as createScriptContext, R as SerializingMemoryStore, Rt as toVercelToolSpecs, S as FsRunTraceStore, St as parseUserProfileExport, T as GoogleGenAiClient, Tt as readUserProfile, U as USER_PROFILE_KEY, V as UNSUPPORTED_DOCUMENT_MESSAGE, W as USER_PROFILE_NO_INVENTION_RULE, X as bridgeError, Y as applyUserProfileImport, Z as buildRenderResult, _ as EventBus, _t as networkUrlHost, a as ASK_USER_TOOL, at as extractUiSpecEvents, b as FsMemoryStore, bt as normalizeToolError, c as AnthropicClient, ct as fromVercelResult, d as DEFAULT_LOOP_LIMITS, dt as isNetworkAllowed, et as diffUserProfile, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as isUnsupportedRunSnapshot, g as EMPTY_USER_PROFILE, gt as networkPolicyLibSource, h as DEFAULT_USER_PROFILE_LIMITS, ht as mergeProfileEntries, i as ASK_USER_MAX_FIELDS, it as extractTodoTraceEvents, j as READ_SKILL_FILE_INPUT_SCHEMA, jt as schemaToForm, k as READ_LINKED_DOCUMENT_TOOL, kt as sampleBehaviorRecords, l as BEHAVIOR_RECORDS_KEY, lt as fromVercelStreamPart, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as mergeCatalogEntries, n as ASK_USER_FIELD_TYPES, nt as extractChartSpec, o as ASK_USER_TOOL_NAME, ot as findUnpairedToolCalls, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as listSkillScripts, q as WebSkillRuntime, r as ASK_USER_INPUT_SCHEMA, rt as extractSkillCandidate, s as AgentLoop, st as formatSkillScriptManifest, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as exportUserProfile, u as CapabilityApproval, ut as interruptedToolResult, v as FS_SESSION_PAGE_SIZE, vt as normalizeErrorCode, w as FullDisclosureRouter, wt as readProfileEntries, x as FsRunSnapshotStore, xt as parseBridgeRequest, y as FsArtifactStore, yt as normalizeToolContent, z as TEXT_BUDGETED_CONTENT_TYPES, zt as validateUiSpecEvent } from "./dist-B-cOu08W.js";
 
 //#region src/version.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
@@ -8,7 +8,7 @@ import { $ as fromVercelStreamPart, A as SerializingMemoryStore, At as validateU
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.10.0";
+const SDK_VERSION = "0.11.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { B as JsonSchema, _ as LlmToolSpec, it as SkillCatalogEntry, ot as SkillDocument } from "./types-CrRcT-LM-DZAp8sWv.js";
-import { Fn as mergeCatalogEntries, O as ExternalSkillProvider, Xt as ToolResult, k as ExternalToolSource } from "./index-DtFdMKBX.js";
+import { B as JsonSchema, _ as LlmToolSpec, it as SkillCatalogEntry, ot as SkillDocument } from "./types-C26b05fW-CdrRCRDb.js";
+import { F as ExternalToolSource, P as ExternalSkillProvider, qn as mergeCatalogEntries, sn as ToolResult } from "./index-D3mONFHD.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -141,8 +141,26 @@ declare class McpToolResolver {
  */
 declare function endpointToolLlmName(endpoint: string, toolName: string): string;
 declare function parseEndpointToolLlmName(endpoint: string, llmName: string): string | undefined;
-declare function webMcpToolLlmName(toolName: string): string;
-declare function parseWebMcpToolLlmName(llmName: string): string | undefined;
+/**
+ * 来源标识的长度上限（分册 26 §2.2）。
+ *
+ * 前缀计入工具名，而工具名进**每一次**请求 —— 长 sourceId 是持续成本。
+ * 装配期校验并给出可读错误，比运行时被 provider 拒掉好查。
+ */
+declare const WEB_MCP_SOURCE_ID_MAX = 24;
+/**
+ * WebMCP 工具的 LLM 可见名。
+ *
+ * 多来源时带来源前缀（FR-26.2）：三个文档都注册 `get_current_date` 是常态，
+ * 「首个来源优先」是**静默歧义** —— 模型选中的到底是哪个，谁也说不清。
+ * 不传 sourceId 时保持 0.10.0 的旧名，单来源宿主无感。
+ */
+declare function webMcpToolLlmName(toolName: string, sourceId?: string): string;
+/** 解析回 `{ sourceId?, toolName }`；旧名（无来源段）解析出 `sourceId: undefined` */
+declare function parseWebMcpToolLlmName(llmName: string, sourceIds?: readonly string[]): {
+  sourceId?: string;
+  toolName: string;
+} | undefined;
 //#endregion
 //#region src/skills/temporarySkillProvider.d.ts
 /**
@@ -241,8 +259,14 @@ interface WebMcpToolDescriptor {
  */
 declare class ExperimentalWebMcpAdapter {
   #private;
+  /**
+   * 多来源时的消歧标识（分册 26 FR-26.2）。不设即沿用 0.10.0 的旧工具名，
+   * 单来源宿主无感；**两个以上来源必须各自设**，否则同名工具会撞车。
+   */
+  readonly sourceId?: string;
   constructor(api?: BrowserModelContextLike | (() => BrowserModelContextLike | undefined), options?: {
     enabled?: boolean;
+    sourceId?: string;
   });
   /**
    * 宿主能力检测（FR-19.2/19.4）：**只**看 `document.modelContext.executeTool` 是否存在，
@@ -275,7 +299,11 @@ interface McpToolVisibility {
   /** 端点工具级开关；返回 false 时该工具对大模型不可见 */
   isEndpointToolEnabled?(endpoint: string, tool: string): boolean;
   /** WebMCP 工具级开关；返回 false 时该工具对大模型不可见 */
-  isWebMcpToolEnabled?(tool: string): boolean;
+  /**
+   * 两级启停（FR-26.3，与端点/工具同款）：`sourceId` 为空即整个来源那一组。
+   * 宿主按来源关 → 该组全灭；按工具关 → 只灭一个。
+   */
+  isWebMcpToolEnabled?(tool: string, sourceId?: string): boolean;
 }
 /**
  * runtime 扩展点实现：endpoint 注册表 + WebMCP adapter 一处装配。
@@ -286,7 +314,7 @@ declare class McpRuntimePlugin implements ExternalToolSource {
   readonly kind = "mcp";
   constructor(deps: {
     registry: EndpointRegistry<McpClientLike>;
-    webMcp?: ExperimentalWebMcpAdapter;
+    webMcp?: readonly ExperimentalWebMcpAdapter[];
     resolver?: McpToolResolver;
     /** 工具可见性策略（端点/工具级启停）；缺省全部可见 */
     visibility?: McpToolVisibility;
@@ -443,4 +471,4 @@ interface RemoteEndpointHandle {
  */
 declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<RemoteEndpointHandle>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };