@webskill/sdk 0.10.0 → 0.12.0

package/dist/{index-BF4E1a9j.d.ts → index-DFhU1uks.d.ts}

@@ -1,5 +1,5 @@
-import { S as UiBridge, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-CrRcT-LM-DZAp8sWv.js";
-import { k as ExternalToolSource } from "./index-DtFdMKBX.js";
+import { G as RemoteUrlPolicy, S as UiBridge, Tt as WebSkillErrorCode, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-DLctJep_-B5G4uk2u.js";
+import { F as ExternalToolSource, fn as ToolStepReader } from "./index-C9pzXLKy.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -94,6 +94,16 @@ interface GeneratedSkillDraft {
     path: string;
     content: string;
   }[];
+  /**
+   * 模型声称这个技能会执行的工具调用（分册 30 / FR-30.4）。
+   *
+   * 做成结构化入参而不是从 `content` 正文里扫工具名：正文是自由文本，
+   * 扫描既会漏（模型写「点击提交按钮」而不写工具名）又会误命中（提到但没执行）。
+   */
+  steps?: readonly {
+    tool: string;
+    args?: Record<string, unknown>;
+  }[];
 }
 /**
  * 候选收货端口。实现由宿主注入——`@webskill/agent` 不依赖 `@webskill/governance`
@@ -136,12 +146,34 @@ interface SkillGeneratorOptions {
   now?: () => Date;
   /** 界面文案注入口：生成器与语言无关，字典在宿主手里（UI-UX5 #9） */
   messages?: SkillGenerationMessages;
+  /**
+   * 本会话的运行轨迹（分册 30）。**不注入即不校验、不展示证据**，行为与 0.11.0 一致——
+   * 这既让本册可分步落地，也给 AC-30.14 的反向对照留了现成的造法。
+   */
+  steps?: ToolStepReader;
 }
 /** 生成器面向用户的文案；缺省全部为英文模板 */
 interface SkillGenerationMessages {
   /** 授权确认卡的正文（含技能名与描述插值由实现方完成） */
   confirmSkill?(draft: GeneratedSkillDraft): string;
 }
+/**
+ * 确认卡上的一步（分册 30 / FR-30.5）。
+ * `evidence` 区分「这一步在本会话真的跑过」与「模型自己补写的」。
+ */
+interface SkillTraceEvidenceStep {
+  tool: string;
+  evidence: 'trace' | 'model';
+  /** 轨迹里的原始参数（已脱敏）；无背书时缺省 */
+  traceArgs?: Record<string, unknown>;
+  /** 模型在草稿里写的参数 */
+  draftArgs?: Record<string, unknown>;
+  /** 轨迹里被脱敏掉的字段路径 */
+  redacted?: readonly string[];
+}
+interface SkillTraceEvidence {
+  steps: readonly SkillTraceEvidenceStep[];
+}
 /**
  * 技能自动生成策略。生成动作是策略而不是内核：它不进入 `AgentLoop`，
  * 而是经既有的 `ExternalToolSource` 扩展点接入（设计 02 §0）。
@@ -308,11 +340,54 @@ interface PerceptionScope {
   /** 从 include 子树中剪除的敏感区域（凭据输入、个人信息展示区等） */
   exclude?: readonly string[];
 }
+/**
+ * 一个帧内的可感知范围（FR-24.1）。
+ *
+ * `frame` 的选择器在**主文档**里求值，不下钻到 iframe 内部再找 iframe：
+ * 允许 `a > b > c` 式的跨帧路径会让「授权面到底覆盖了什么」无法在配置里一眼看出来。
+ * 要读更深的帧须再写一条——而那条也只能写主文档里的选择器，所以本版实际只支持一层。
+ * @experimental
+ */
+interface FrameScope {
+  /** 主文档写 `'self'`；iframe 写主文档里定位该 `<iframe>` 的选择器 */
+  frame: 'self' | string;
+  include: readonly string[];
+  exclude?: readonly string[];
+}
+/**
+ * 宿主声明的感知范围：单帧（旧形状）或多帧。
+ *
+ * 保留旧形状不是为了好看——AC-24.9 要求宿主不改配置也能升级。
+ * @experimental
+ */
+type PerceptionScopeInput = PerceptionScope | {
+  frames: readonly FrameScope[];
+};
+/**
+ * 两种形状归一成帧列表；旧形状等价于一条 `frame:'self'`（FR-24.1）。
+ *
+ * **这是判别的单一来源。** 散在各处写 `'frames' in scope` 会让
+ * 「旧配置还等价吗」这个问题没有唯一答案。
+ * @experimental
+ */
+declare function toFrameScopes(scope: PerceptionScopeInput): readonly FrameScope[];
+/** 某个帧未能读取的原因（FR-24.2 / FR-24.3）；不静默跳过 @experimental */
+interface FrameNote {
+  frame: string;
+  reason: 'cross-origin' | 'origin-changed' | 'not-found';
+  /** 面向模型的英文说明，同时也是说明节点的 name */
+  message: string;
+}
 /**
  * 结构化元素描述（FR-10.4，硬约束）：只有角色、名称、值。
  *
- * 不下发 HTML 原文有两条理由：HTML 里的 class / data 属性 / 注释远超模型
- * 完成任务所需；且页面文本一旦以 HTML 形式进上下文，就多了一条注入通道。
+ * 仍**不下发 HTML 原文**：HTML 里的 class / data 属性 / 注释远超模型完成任务所需；
+ * 且页面文本一旦以 HTML 形式进上下文，就多了一条注入通道。
+ *
+ * **链接 URL 是显式放行的例外**（0.11.0 分册 22，FR-22.1/22.2）。
+ * 它的风险不再由「不下发」承担，而是由取数侧的四道闸门共同承担：
+ * 同源判定、跨源逐次确认、`assertRemoteUrlAllowed`、审计留痕。
+ * 放行的只有 `href` 这一个属性，其余属性照旧不下发。
  * @experimental
  */
 interface PerceivedNode {
@@ -332,6 +407,23 @@ interface PerceivedNode {
    * 由 reader 生成，只在产生它的那次感知内有效；模型不得构造或推断。
    */
   ref?: string;
+  /**
+   * 该节点来自哪个帧（FR-24.4）。**主文档节点不带这个字段**——
+   * 否则旧宿主的断言会凭空变化。跨帧后会出现同名控件，不标帧模型会点错。
+   */
+  frame?: string;
+  /**
+   * 链接目标（FR-22.1）。**仅 `role === 'link'` 的节点有**，且只有感知白名单
+   * 区域内的链接才有。URL **原样**保留，不去 query —— 去掉会让 `?share=…`
+   * 这类链接失效，而 query 里的敏感信息本就不该由感知层来猜。
+   */
+  href?: string;
+  /**
+   * 该节点为何可见（FR-25.6 / AC-G22）。只在**授权面被临时扩大**时出现：
+   * `'modal-elevated'` = 它在一个由本次已授权操作打开的对话框里，
+   * 原本不在白名单内。缺省不带该字段。
+   */
+  provenance?: 'modal-elevated';
   children?: readonly PerceivedNode[];
 }
 /** 随感知一起下发的一张图像（FR-12.1） @experimental */
@@ -362,6 +454,8 @@ interface PerceptionCaptureOptions {
  */
 interface PerceptionResult {
   nodes: readonly PerceivedNode[];
+  /** 被跳过的帧及原因；调用方据此告警（FR-24.2 / FR-24.3） */
+  frameNotes?: readonly FrameNote[];
   images?: readonly PerceivedImage[];
   /** 超出 `maxImages` 而未下发的张数 */
   imagesOmitted?: number;
@@ -376,15 +470,17 @@ interface PerceptionResult {
  * @experimental
  */
 interface PagePerceptionReader {
-  read(scope: PerceptionScope, capture?: PerceptionCaptureOptions): Promise<readonly PerceivedNode[] | PerceptionResult> | readonly PerceivedNode[] | PerceptionResult;
+  read(scope: PerceptionScopeInput, capture?: PerceptionCaptureOptions): Promise<readonly PerceivedNode[] | PerceptionResult> | readonly PerceivedNode[] | PerceptionResult;
 }
 /** 一次感知的留痕（FR-10.5 的 UI 提示与 FR-10.6 的审计共用同一条记录） @experimental */
 interface PerceptionRecord {
   /** ISO 8601 */
   at: string;
-  /** 本次实际生效的白名单 */
+  /** 本次实际生效的白名单（多帧时是各帧的并集） */
   include: readonly string[];
   exclude: readonly string[];
+  /** 本次读取的帧标识；单帧配置时不存在，旧宿主的断言不受影响（FR-24.6） */
+  frames?: readonly string[];
   /** 读到的顶层节点数；用于「它读的比我预期的多」这类判断 */
   nodeCount: number;
   /** 本次下发的图像张数，按取像级别分组（只在取像开启时存在） */
@@ -418,12 +514,14 @@ type PerceptionAuditSink = PageAuditSink;
 //#region src/perception/policy.d.ts
 interface PagePerceptionPolicyOptions {
   /** 宿主声明的白名单；`include` 为空即整个能力不可用 */
-  scope: PerceptionScope;
+  scope: PerceptionScopeInput;
   reader: PagePerceptionReader;
   /** FR-10.6：每次感知写审计。不注入即不留痕，装配方要自己承担这个选择 */
   audit?: PerceptionAuditSink;
   /** 审计事件的 target（缺省 `page`）；多页面宿主可用它区分来源 */
   auditTarget?: string;
+  /** 帧被跳过时的告警出口（跨源、origin 变更、找不到）；FR-24.3 要求「失效并告警」 */
+  onWarning?(message: string): void;
   now?(): string;
 }
 /**
@@ -442,7 +540,7 @@ declare class PagePerceptionPolicy {
   constructor(options: PagePerceptionPolicyOptions);
   /** 白名单为空即不可用（FR-10.1/10.2）：宿主没声明范围就没有这个能力 */
   get enabled(): boolean;
-  get scope(): PerceptionScope;
+  get scope(): PerceptionScopeInput;
   /** 最近的感知记录（console 只读展示用），新的在前 */
   get records(): readonly PerceptionRecord[];
   /** FR-10.5：感知发生时通知 UI，chatbot 据此在消息流里标注一行 */
@@ -490,6 +588,100 @@ declare function createPagePerceptionToolSource(options: PagePerceptionToolSourc
  */
 declare const PERCEPTION_SYSTEM_PROMPT: string;
 //#endregion
+//#region src/dataSource/policy.d.ts
+/** 数据源的四种通道（FR-16.2）；后三种的通道由分册 24/26/27 建立，本层只做消费 */
+type DataSourceKind = 'page-perception' | 'webmcp-tool' | 'http' | 'page-skill';
+/**
+ * 宿主声明的一个数据源。
+ *
+ * **`target` 由宿主写死，脚本传不进来**——这就是 FR-16.2「唯一授权面」的实现方式。
+ * `assertRemoteUrlAllowed` 只判 scheme 与私有地址，**给不了**域名白名单，
+ * 所以授权靠的是「URL 根本不由脚本提供」，那个函数是第二道闸门。
+ * @experimental
+ */
+interface DataSourceDef {
+  id: string;
+  kind: DataSourceKind;
+  /** 给技能作者看的一句话；不进模型上下文 */
+  description: string;
+  /** 按 kind 各异：选择器 / 工具名 / URL / 技能名 */
+  target: string;
+}
+/** 一次取数的留痕（FR-16.4）；被拒也要记，否则「反复试探未授权的源」在审计里看不见 */
+interface DataSourceRecord {
+  /** ISO 8601 */
+  at: string;
+  sourceId: string;
+  kind?: DataSourceKind;
+  ok: boolean;
+  /** 成功时的结果字节数 */
+  bytes?: number;
+  /** 失败时的稳定错误码 */
+  code?: WebSkillErrorCode;
+  reason?: string;
+}
+interface DataSourceAuditSink {
+  record(event: DataSourceRecord): void | Promise<void>;
+}
+/** 取数的实际执行；`http` 之外的三种由各自分册接线后注入（FR-16.3） */
+interface DataSourceTransport {
+  fetch(source: DataSourceDef, params?: Record<string, unknown>): Promise<unknown>;
+}
+interface DataSourcePolicyOptions {
+  sources: readonly DataSourceDef[];
+  /**
+   * `kind:'http'` 的出站判定；缺省即 assertRemoteUrlAllowed 的缺省。
+   *
+   * 传函数形式可惰性取值：宿主的出站策略通常住在可改的运行时配置里，
+   * 写死成字面量会让改完设置必须刷新页面才生效。
+   */
+  remoteUrl?: RemoteUrlPolicy | (() => RemoteUrlPolicy | Promise<RemoteUrlPolicy>);
+  /** 按 kind 注入的执行器；缺失的 kind 调用时报「宿主未提供该通道」 */
+  transports?: Partial<Record<DataSourceKind, DataSourceTransport>>;
+  /** 结果字节上限（FR-16.6）；超出即拒绝，**不截断** */
+  maxBytes?: number;
+  audit?: DataSourceAuditSink;
+  now?(): string;
+}
+/**
+ * 脚本取数策略（分册 16）。
+ *
+ * 与 `PagePerceptionPolicy` / `PageActionPolicy` 同款：**未注入即该能力不存在**。
+ * 脚本侧看到的是 `context.fetchData === undefined`，不是一个会报错的函数。
+ * @experimental
+ */
+declare class DataSourcePolicy {
+  #private;
+  constructor(options: DataSourcePolicyOptions);
+  /** 一个源都没声明就没有这个能力（同 perception 的 include 为空） */
+  get enabled(): boolean;
+  get sources(): readonly DataSourceDef[];
+  get records(): readonly DataSourceRecord[];
+  fetchData(sourceId: string, params?: Record<string, unknown>): Promise<unknown>;
+}
+//#endregion
+//#region src/dataSource/httpTransport.d.ts
+interface HttpDataSourceOptions {
+  /**
+   * 注入点存在只为可测（AC-16.1 要断「零请求」，得能数调用次数）。
+   * 生产装配留空即用全局 fetch。
+   */
+  fetch?: typeof globalThis.fetch;
+  /** 宿主侧固定请求头，例如网关鉴权；**脚本改不了** */
+  headers?: Readonly<Record<string, string>>;
+  /** 单次请求超时，缺省 15s；卡死的上游会一直占着沙箱的一次调用 */
+  timeoutMs?: number;
+}
+/**
+ * `kind:'http'` 的搬运层（分册 16 §2.3 本册唯一新建通道）。
+ *
+ * `params` 一律走查询串，**不拼进 path**：拼 path 的话
+ * `params={ x: '../admin' }` 就能把目标挪走，那样 `target` 写死就白写了
+ * ——「唯一授权面」是靠目标不可被脚本影响撑住的（FR-16.2）。
+ * @experimental
+ */
+declare function createHttpDataSourceTransport(options?: HttpDataSourceOptions): DataSourceTransport;
+//#endregion
 //#region src/pageAction/types.d.ts
 /**
  * 页面操作的策略层类型（需求 23）。
@@ -511,14 +703,49 @@ interface PageActionScope {
   /** 从 include 子树中剪除的危险控件（支付、删除、权限变更等） */
   exclude?: readonly string[];
 }
-/** 本版的最小操作集（FR-23.4）。导航、拖拽、滚动均不在内。 @experimental */
-type PageActionKind = 'click' | 'fill' | 'submit';
+/**
+ * 一个帧内的可操作范围（FR-24.1）。
+ *
+ * 与感知侧的 `FrameScope` 同构但**独立声明**，理由同上：合并成一个类型会让
+ * 「一份配置同时当感知范围和操作范围用」在类型层面合法。
+ * @experimental
+ */
+interface ActionFrameScope {
+  /** 主文档写 `'self'`；iframe 写主文档里定位该 `<iframe>` 的选择器 */
+  frame: 'self' | string;
+  include: readonly string[];
+  exclude?: readonly string[];
+}
+/** 宿主声明的操作范围：单帧（旧形状）或多帧。旧形状必须继续可用（AC-24.9） @experimental */
+type PageActionScopeInput = PageActionScope | {
+  frames: readonly ActionFrameScope[];
+};
+/**
+ * 两种形状归一成帧列表；旧形状等价于一条 `frame:'self'`。
+ * 与感知侧的 `toFrameScopes` 一样，是本侧判别的**单一来源**。
+ * @experimental
+ */
+declare function toActionFrameScopes(scope: PageActionScopeInput): readonly ActionFrameScope[];
+/**
+ * 本版的操作集（FR-25.1）。导航、拖拽、滚动仍不在内。
+ *
+ * `select`/`set`/`attach` 与既有三个走**同一条** policy 路径，
+ * 范围白名单、逐次确认、审计三条硬约束因此天然覆盖到它们——
+ * 前提是新动作不绕过 policy 直接调执行器（AC-25.4 守这一点）。
+ * @experimental
+ */
+declare const PAGE_ACTION_KINDS: readonly ["click", "fill", "submit", "select", "set", "attach"];
+type PageActionKind = (typeof PAGE_ACTION_KINDS)[number];
 /** @experimental */
 interface PageActionRequest {
   /** 感知产出的不透明句柄；不接受选择器（FR-23.4） */
   ref: string;
   action: PageActionKind;
-  /** `action === 'fill'` 时必填 */
+  /**
+   * `fill` 填入的文本；`select` 要选中的选项可访问名；
+   * `set` 的目标态（`'true'` | `'false'`）。`attach` 不用它——
+   * 文件**始终由用户在确认卡里选**，Agent 传不进本地路径（FR-25.5）。
+   */
   value?: string;
 }
 /** @experimental */
@@ -532,12 +759,34 @@ interface PageActionOutcome {
   target: {
     role: string;
     name?: string;
+    frame?: string;
   };
   /** 目标是密码类控件：确认卡与留痕据此隐去值（FR-23.3） */
   secret?: boolean;
+  /**
+   * `set` 判定当前态已是目标态，因此**没有真的操作**（FR-25.4）。
+   * 仍返回 `ok: true`：返回失败模型会重试，假装点了审计会失真。
+   */
+  noop?: boolean;
+  /** 本次操作新打开的模态的可访问名；授权面临时扩大要在留痕里看得见（FR-25.6） */
+  elevatedModal?: string;
   /** 失败原因（英文） */
   reason?: string;
 }
+/**
+ * 执行器对一个句柄的描述。确认卡的措辞、留痕与分册 30 的参数留存共用这一份——
+ * 句柄本身是本次感知产出的不透明串，离开这次运行就没有意义。
+ * @experimental
+ */
+interface PageActionTarget {
+  role: string;
+  name?: string;
+  /** 密码类控件：确认卡打掩码，参数留存整次调用不留明文 */
+  secret?: boolean;
+  frame?: string;
+  /** 目标在本次任务临时打开的对话框里，授权面被扩大过 */
+  elevated?: boolean;
+}
 /**
  * 页面操作执行器。与 `PagePerceptionReader` 对称，同样不含 DOM 概念。
  * 实现方负责校验句柄有效性、元素可交互性，以及目标是否仍在操作范围内。
@@ -546,11 +795,7 @@ interface PageActionOutcome {
 interface PageActionExecutor {
   execute(request: PageActionRequest): Promise<PageActionOutcome> | PageActionOutcome;
   /** 目标的角色与可访问名称，供确认卡在**执行前**说清将要做什么（FR-23.2） */
-  describe(ref: string): {
-    role: string;
-    name?: string;
-    secret?: boolean;
-  } | undefined;
+  describe(ref: string): PageActionTarget | undefined;
 }
 /** 一次页面操作的留痕（FR-23.3 的五项字段） @experimental */
 interface PageActionRecord {
@@ -559,9 +804,17 @@ interface PageActionRecord {
   action: PageActionKind;
   role: string;
   name?: string;
+  /** 目标所在的帧；主文档目标不带该字段（FR-24.6） */
+  frame?: string;
   /** 是否经用户确认；宿主预授权的操作记 `'preauthorized'` */
   approved: boolean | 'preauthorized';
   ok: boolean;
+  /** 目标位于本次会话中被提升的模态里（授权面临时扩大，FR-25.6 / AC-G22） */
+  elevated?: boolean;
+  /** 本次操作新打开的模态 */
+  elevatedModal?: string;
+  /** 当前态已是目标态，未执行任何操作（FR-25.4） */
+  noop?: boolean;
   /** 非密码类控件填入的值；密码类控件**整个字段不存在** */
   value?: string;
   reason?: string;
@@ -574,7 +827,7 @@ interface PageActionUi {
 }
 interface PageActionPolicyOptions {
   /** 宿主声明的可操作范围；`include` 为空即整个能力不可用 */
-  scope: PageActionScope;
+  scope: PageActionScopeInput;
   executor: PageActionExecutor;
   ui: PageActionUi;
   /** FR-23.3：每次操作写审计。不注入即不留痕，装配方要自己承担这个选择 */
@@ -600,9 +853,23 @@ declare class PageActionPolicy {
   constructor(options: PageActionPolicyOptions);
   /** 白名单为空即不可用（FR-23.1）：宿主没声明范围就没有这个能力 */
   get enabled(): boolean;
-  get scope(): PageActionScope;
+  get scope(): PageActionScopeInput;
   /** 最近的操作记录（只读展示用），新的在前 */
   get records(): readonly PageActionRecord[];
+  /**
+   * 目标是不是密码类控件（分册 30）。与确认卡上把值打成掩码用的是**同一个判定**，
+   * 不另立一套敏感字段清单。
+   *
+   * 读的是 `act()` 当时记下的结论而不是事后重查：提交或重绘后句柄会失效，
+   * 重查就会把一次普通填写误判成敏感、把内容丢掉。没操作过的句柄才现查，
+   * 查不到按敏感：不知道就别留存。
+   */
+  isSecretTarget(ref: string): boolean;
+  /**
+   * `act()` 当时看到的目标身份（分册 30）。句柄只在本次感知内有效，
+   * 只留句柄等于留了一个换次运行就失效的引用；角色与可访问名才是可重放的那部分。
+   */
+  rememberedTarget(ref: string): PageActionTarget | undefined;
   act(request: PageActionRequest): Promise<PageActionOutcome>;
 }
 //#endregion
@@ -629,4 +896,4 @@ declare function createPageActionToolSource(options: PageActionToolSourceOptions
  */
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
-export { TodoList as $, PagePerceptionReader as A, SKILL_GENERATION_SYSTEM_PROMPT as B, PageActionRequest as C, PageAuditSink as D, PageActionUi as E, PerceptionAuditSink as F, SkillGenerationToolSourceOptions as G, SkillGenerationMessages as H, PerceptionCaptureOptions as I, SubAgentRunInput as J, SkillGenerator as K, PerceptionRecord as L, ParentBudget as M, PerceivedImage as N, PagePerceptionPolicy as O, PerceivedNode as P, TodoItem as Q, PerceptionResult as R, PageActionRecord as S, PageActionToolSourceOptions as T, SkillGenerationOutcome as U, SkillCandidateSink as V, SkillGenerationPolicy as W, TODO_SYSTEM_PROMPT as X, SubAgentRunner as Y, TodoEvent as Z, PageActionExecutor as _, DelegationOrchestratorOptions as a, createPageActionToolSource as at, PageActionPolicy as b, DelegationToolSourceOptions as c, createTodoToolSource as ct, ImageCaptureBudget as d, TodoListener as et, MANAGE_TODO_TOOL as f, PERCEPTION_SYSTEM_PROMPT as g, PERCEIVE_PAGE_TOOL as h, DelegationOrchestrator as i, createDelegationToolSource as it, PagePerceptionToolSourceOptions as j, PagePerceptionPolicyOptions as k, GENERATE_SKILL_TOOL as l, withDelegationOrigin as lt, PAGE_ACTION_TOOL as m, DELEGATION_SYSTEM_PROMPT as n, TodoStore as nt, DelegationRequest as o, createPagePerceptionToolSource as ot, PAGE_ACTION_SYSTEM_PROMPT as p, SkillGeneratorOptions as q, DelegationBudget as r, TodoToolSourceOptions as rt, DelegationResult as s, createSkillGenerationToolSource as st, DELEGATE_TASK_TOOL as t, TodoStatus as tt, GeneratedSkillDraft as u, PageActionKind as v, PageActionScope as w, PageActionPolicyOptions as x, PageActionOutcome as y, PerceptionScope as z };
+export { PerceptionScope as $, PageActionKind as A, PageActionUi as B, MANAGE_TODO_TOOL as C, createPageActionToolSource as Ct, PERCEIVE_PAGE_TOOL as D, toActionFrameScopes as Dt, PAGE_ACTION_TOOL as E, createTodoToolSource as Et, PageActionRequest as F, PagePerceptionToolSourceOptions as G, PagePerceptionPolicy as H, PageActionScope as I, PerceivedNode as J, ParentBudget as K, PageActionScopeInput as L, PageActionPolicy as M, PageActionPolicyOptions as N, PERCEPTION_SYSTEM_PROMPT as O, toFrameScopes as Ot, PageActionRecord as P, PerceptionResult as Q, PageActionTarget as R, ImageCaptureBudget as S, createHttpDataSourceTransport as St, PAGE_ACTION_SYSTEM_PROMPT as T, createSkillGenerationToolSource as Tt, PagePerceptionPolicyOptions as U, PageAuditSink as V, PagePerceptionReader as W, PerceptionCaptureOptions as X, PerceptionAuditSink as Y, PerceptionRecord as Z, FrameNote as _, TodoListener as _t, DataSourceDef as a, SkillGenerationPolicy as at, GeneratedSkillDraft as b, TodoToolSourceOptions as bt, DataSourcePolicyOptions as c, SkillGeneratorOptions as ct, DelegationBudget as d, SubAgentRunInput as dt, PerceptionScopeInput as et, DelegationOrchestrator as f, SubAgentRunner as ft, DelegationToolSourceOptions as g, TodoList as gt, DelegationResult as h, TodoItem as ht, DataSourceAuditSink as i, SkillGenerationOutcome as it, PageActionOutcome as j, PageActionExecutor as k, withDelegationOrigin as kt, DataSourceRecord as l, SkillTraceEvidence as lt, DelegationRequest as m, TodoEvent as mt, DELEGATE_TASK_TOOL as n, SkillCandidateSink as nt, DataSourceKind as o, SkillGenerationToolSourceOptions as ot, DelegationOrchestratorOptions as p, TODO_SYSTEM_PROMPT as pt, PerceivedImage as q, DELEGATION_SYSTEM_PROMPT as r, SkillGenerationMessages as rt, DataSourcePolicy as s, SkillGenerator as st, ActionFrameScope as t, SKILL_GENERATION_SYSTEM_PROMPT as tt, DataSourceTransport as u, SkillTraceEvidenceStep as ut, FrameScope as v, TodoStatus as vt, PAGE_ACTION_KINDS as w, createPagePerceptionToolSource as wt, HttpDataSourceOptions as x, createDelegationToolSource as xt, GENERATE_SKILL_TOOL as y, TodoStore as yt, PageActionToolSourceOptions as z };

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-CrRcT-LM-DZAp8sWv.js";
-import { $ as READ_SKILL_FILE_INPUT_SCHEMA, $n as schemaToForm, $t as TraceEventType, A as FS_SESSION_PAGE_SIZE, An as fromVercelStreamPart, At as SealResult, B as HookRunnerOptions, Bn as normalizeToolContent, Bt as SkillScriptDescriptor, C as DEFAULT_LOOP_LIMITS, Cn as exportUserProfile, Ct as RuntimeSessionHandle, D as ExecuteLifecycleData, Dn as findUnpairedToolCalls, Dt as ScriptExecutor, E as EventBus, En as extractUiSpecEvents, Et as ScriptExecutionContext, F as FsSessionStore, Fn as mergeCatalogEntries, Ft as SessionStore, G as LifecycleEventInit, Gn as readBehaviorRecords, Gt as TextualToolContent, H as IntegrityVerdict, Hn as parseBridgeRequest, Ht as SkillStateGuard, I as FullDisclosureRouter, In as mergeProfileEntries, It as SkillFailureReport, J as LifecycleListener, Jn as refineUserProfile, Jt as ToolDefinition, K as LifecycleHook, Kn as readProfileEntries, Kt as TodoTraceEvent, L as GoogleGenAiClient, Ln as networkPolicyLibSource, Lt as SkillIntegrityGuard, M as FsMemoryStore, Mn as isNetworkAllowed, Mt as SessionListPage, N as FsRunSnapshotStore, Nn as isUnsupportedRunSnapshot, Nt as SessionMeta, O as ExternalSkillProvider, On as formatSkillScriptManifest, Ot as SealOptions, P as FsRunTraceStore, Pn as listSkillScripts, Pt as SessionRecord, Q as ProgressiveRouter, Qn as schemaSourceLabel, Qt as TraceEvent, R as GoogleGenAiClientConfig, Rn as networkUrlHost, Rt as SkillOutcomeReporter, S as CapabilityMode, Sn as diffUserProfile, St as RuntimeSession, T as EMPTY_USER_PROFILE, Tn as extractTodoTraceEvents, Tt as SchemaInferer, U as InteractLifecycleData, Un as parseUserProfileExport, Ut as SkillSuccessReport, V as InstalledSkillManifest, Vn as normalizeToolError, Vt as SkillScriptSchemaSource, W as LifecycleEvent, Wn as partsToText, Wt as TerminalLifecycleData, X as OpenAiCompatibleClient, Xn as resolveToolName, Xt as ToolResult, Y as NetworkPolicy, Yn as renderUserProfileContext, Yt as ToolResolution, Z as OpenAiCompatibleClientConfig, Zn as sampleBehaviorRecords, Zt as TraceClock, _ as BridgeCapabilities, _n as applyUserProfileImport, _t as RunTraceStore, a as ActivateLifecycleData, an as USER_PROFILE_REFINE_PROMPT, ar as toLlmToolSpec, at as RouteLifecycleData, b as BridgeResponse, bn as createScriptContext, bt as RuntimePhase, c as AgentLoopDeps, cn as UserProfileEntry, cr as validateUiSpecEvent, ct as RunResult, d as ApprovalDecision, dn as UserProfileLimits, dt as RunSnapshotStore, en as TraceRecorder, er as scriptToolName, et as READ_SKILL_FILE_TOOL, f as ApprovalScope, fn as VercelToolSpec, ft as RunTerminationReason, g as BehaviorScene, gn as appendBehaviorRecords, gt as RunTraceMetrics, h as BehaviorRecordKind, hn as WebSkillRuntimeDeps, ht as RunTraceFilter, i as ASK_USER_TOOL_NAME, in as USER_PROFILE_PROMPT_HEADER, ir as textParts, it as RefineUserProfileInput, j as FsArtifactStore, jn as interruptedToolResult, jt as SerializingMemoryStore, k as ExternalToolSource, kn as fromVercelResult, kt as SealRecord, l as AnthropicClient, ln as UserProfileExport, lr as validateUiSpecNode, lt as RunSnapshot, m as BehaviorRecord, mn as WebSkillRuntime, mt as RunTraceFile, n as ASK_USER_INPUT_SCHEMA, nn as USER_PROFILE_KEY, nr as summarizeRunUsage, nt as RUN_SNAPSHOT_SCHEMA_VERSION, o as AgentLoop, on as UnsupportedRunSnapshot, or as toRecordDigests, ot as RouteResult, p as BEHAVIOR_RECORDS_KEY, pn as WebSkillApi, pt as RunToolCall, q as LifecycleHookContext, qn as readUserProfile, qt as ToolContent, r as ASK_USER_TOOL, rn as USER_PROFILE_NO_INVENTION_RULE, rr as summarizeToolCalls, rt as RUN_TRACE_SCHEMA_VERSION, s as AgentLoopConfig, sn as UserProfile, sr as toVercelToolSpecs, st as RunLimitErrorDetails, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as USER_PROFILE_EXPORT_VERSION, tr as sealToolCallPairs, tt as READ_SKILL_FILE_TOOL_NAME, u as AnthropicClientConfig, un as UserProfileImportDiff, ut as RunSnapshotListEntry, v as BridgeCapability, vn as bridgeError, vt as RunTraceSummary, w as DEFAULT_USER_PROFILE_LIMITS, wn as extractChartSpec, wt as SESSION_SCHEMA_VERSION, x as CapabilityApproval, xn as createWebSkillApi, xt as RuntimeRun, y as BridgeRequest, yn as buildRenderResult, yt as RunUsageSummary, z as HookRunner, zn as normalizeErrorCode, zt as SkillRouter } from "./index-DtFdMKBX.js";
+import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-DLctJep_-B5G4uk2u.js";
+import { $ as LifecycleHook, $n as isUnsupportedRunSnapshot, $t as SkillRouter, A as DocxTextExtractor, An as UserProfileImportDiff, Ar as validateUiSpecNode, At as RunTraceSummary, B as FsRunTraceStore, Bn as createScriptContext, Bt as ScriptExecutionContext, C as CapabilityApproval, Cn as USER_PROFILE_NO_INVENTION_RULE, Cr as summarizeRunUsage, Ct as RunSnapshotStore, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as UserProfile, Dr as toRecordDigests, Dt as RunTraceFilter, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as UnsupportedRunSnapshot, Er as toLlmToolSpec, Et as RunTraceFile, F as ExternalToolSource, Fn as WebSkillRuntimeDeps, Ft as RuntimeSessionHandle, G as GoogleGenAiClientConfig, Gn as extractTodoTraceEvents, Gt as SerializingMemoryStore, H as FsToolStepStore, Hn as diffUserProfile, Ht as SealOptions, I as FS_SESSION_PAGE_SIZE, In as appendBehaviorRecords, It as SENSITIVE_ANNOTATION, J as InstalledSkillManifest, Jn as formatSkillScriptManifest, Jt as SessionRecord, K as HookRunner, Kn as extractUiSpecEvents, Kt as SessionListPage, L as FsArtifactStore, Ln as applyUserProfileImport, Lt as SESSION_SCHEMA_VERSION, M as EventBus, Mn as VercelToolSpec, Mt as RuntimePhase, N as ExecuteLifecycleData, Nn as WebSkillApi, Nt as RuntimeRun, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as UserProfileEntry, Or as toVercelToolSpecs, Ot as RunTraceMetrics, P as ExternalSkillProvider, Pn as WebSkillRuntime, Pt as RuntimeSession, Q as LifecycleEventInit, Qn as isNetworkAllowed, Qt as SkillOutcomeReporter, R as FsMemoryStore, Rn as bridgeError, Rt as SUPPORTED_DOCUMENT_MIME, S as BridgeResponse, Sn as USER_PROFILE_KEY, Sr as sealToolCallPairs, St as RunSnapshotListEntry, T as DEFAULT_LOOP_LIMITS, Tn as USER_PROFILE_REFINE_PROMPT, Tr as textParts, Tt as RunToolCall, U as FullDisclosureRouter, Un as exportUserProfile, Ut as SealRecord, V as FsSessionStore, Vn as createWebSkillApi, Vt as ScriptExecutor, W as GoogleGenAiClient, Wn as extractChartSpec, Wt as SealResult, X as InteractLifecycleData, Xn as fromVercelStreamPart, Xt as SkillFailureReport, Y as IntegrityVerdict, Yn as fromVercelResult, Yt as SessionStore, Z as LifecycleEvent, Zn as interruptedToolResult, Zt as SkillIntegrityGuard, _ as BehaviorRecordKind, _n as TraceEvent, _r as resolveToolName, _t as RouteLifecycleData, a as ASK_USER_TOOL, an as TerminalLifecycleData, ar as normalizeErrorCode, at as OpenAiCompatibleClient, b as BridgeCapability, bn as UNSUPPORTED_DOCUMENT_MESSAGE, br as schemaToForm, bt as RunResult, c as AgentLoop, cn as ToolContent, cr as parseBridgeRequest, ct as READ_LINKED_DOCUMENT_TOOL, d as AnthropicClient, dn as ToolResult, dr as readBehaviorRecords, dt as READ_SKILL_FILE_TOOL, en as SkillScriptDescriptor, er as listSkillScripts, et as LifecycleHookContext, f as AnthropicClientConfig, fn as ToolStepReader, fr as readProfileEntries, ft as READ_SKILL_FILE_TOOL_NAME, g as BehaviorRecord, gn as TraceClock, gr as renderUserProfileContext, gt as RefineUserProfileInput, h as BEHAVIOR_RECORDS_KEY, hn as ToolStepTrust, hr as refineUserProfile, ht as RedactedArgs, i as ASK_USER_MAX_FIELDS, in as TEXT_BUDGETED_CONTENT_TYPES, ir as networkUrlHost, it as NetworkPolicy, j as EMPTY_USER_PROFILE, jn as UserProfileLimits, jt as RunUsageSummary, k as DEFAULT_USER_PROFILE_LIMITS, kn as UserProfileExport, kr as validateUiSpecEvent, kt as RunTraceStore, l as AgentLoopConfig, ln as ToolDefinition, lr as parseUserProfileExport, lt as READ_LINKED_DOCUMENT_TOOL_NAME, m as ApprovalScope, mn as ToolStepStore, mr as redactToolStepArgs, mt as RUN_TRACE_SCHEMA_VERSION, n as ASK_USER_FIELD_TYPES, nn as SkillStateGuard, nr as mergeProfileEntries, nt as LinkedDocumentReader, o as ASK_USER_TOOL_NAME, on as TextualToolContent, or as normalizeToolContent, ot as OpenAiCompatibleClientConfig, p as ApprovalDecision, pn as ToolStepRecord, pr as readUserProfile, pt as RUN_SNAPSHOT_SCHEMA_VERSION, q as HookRunnerOptions, qn as findUnpairedToolCalls, qt as SessionMeta, r as ASK_USER_INPUT_SCHEMA, rn as SkillSuccessReport, rr as networkPolicyLibSource, rt as MAX_TOOL_STEP_ARG_BYTES, s as ActivateLifecycleData, sn as TodoTraceEvent, sr as normalizeToolError, st as ProgressiveRouter, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as SkillScriptSchemaSource, tr as mergeCatalogEntries, tt as LifecycleListener, u as AgentLoopDeps, un as ToolResolution, ur as partsToText, ut as READ_SKILL_FILE_INPUT_SCHEMA, v as BehaviorScene, vn as TraceEventType, vr as sampleBehaviorRecords, vt as RouteResult, w as CapabilityMode, wn as USER_PROFILE_PROMPT_HEADER, wr as summarizeToolCalls, wt as RunTerminationReason, x as BridgeRequest, xn as USER_PROFILE_EXPORT_VERSION, xr as scriptToolName, xt as RunSnapshot, y as BridgeCapabilities, yn as TraceRecorder, yr as schemaSourceLabel, yt as RunLimitErrorDetails, z as FsRunSnapshotStore, zn as buildRenderResult, zt as SchemaInferer } from "./index-C9pzXLKy.js";
 //#region src/version.d.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
  * Version of the published `@webskill/sdk` package, injected at build time.
  * @stable
  */
-declare const SDK_VERSION = "0.10.0";
+declare const SDK_VERSION = "0.11.0";
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,6 +1,6 @@
 import { A as jsonRenderer, B as resolveArchiveLimits, C as computeDigest, D as exportSkills, E as escapeXml, F as parseSkillPackManifest, G as unzipWithLimits, H as signSkill, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, N as normalizePath, O as isAtomicTempPath, P as parseSkillMarkdown, R as renderAvailableSkillsXml, S as checkSkillRules, T as detectSkillArchiveShapeFromFs, U as signaturePayloadBytes, V as resolveInsideRoot, W as stripArchiveRoot, Y as xmlRenderer, _ as assertSafePathSegment, a as MemoryFS, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, f as SKILL_SIGNATURE_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, j as keyIdOf, k as isValidSkillName, l as SKILL_NAME_MAX_LENGTH, m as SkillReader, n as DEFAULT_ARCHIVE_LIMITS, o as SIGNATURE_SCHEMA_VERSION, p as SkillDiscovery, q as verifyManifest, r as FsTrustedKeyStore, s as SKILLS_LOCKFILE, t as ATOMIC_TMP_SUFFIX_PATTERN, u as SKILL_NAME_PATTERN, v as atomicWriteText, w as detectSkillArchiveShape, x as checkDependencyCycles, y as buildCatalog, z as renderCatalogJson } from "./dist-Bev6i6Ip.js";
 import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { $ as fromVercelStreamPart, A as SerializingMemoryStore, At as validateUiSpecNode, B as bridgeError, C as ProgressiveRouter, Ct as sealToolCallPairs, D as RUN_SNAPSHOT_SCHEMA_VERSION, Dt as toRecordDigests, E as READ_SKILL_FILE_TOOL_NAME, Et as toLlmToolSpec, F as USER_PROFILE_PROMPT_HEADER, G as exportUserProfile, H as createScriptContext, I as USER_PROFILE_REFINE_PROMPT, J as extractTodoTraceEvents, K as extractChartSpec, L as WebSkillRuntime, M as USER_PROFILE_EXPORT_VERSION, N as USER_PROFILE_KEY, O as RUN_TRACE_SCHEMA_VERSION, Ot as toVercelToolSpecs, P as USER_PROFILE_NO_INVENTION_RULE, Q as fromVercelResult, R as appendBehaviorRecords, S as OpenAiCompatibleClient, St as scriptToolName, T as READ_SKILL_FILE_TOOL, Tt as summarizeToolCalls, U as createWebSkillApi, V as buildRenderResult, W as diffUserProfile, X as findUnpairedToolCalls, Y as extractUiSpecEvents, Z as formatSkillScriptManifest, _ as FsRunTraceStore, _t as renderUserProfileContext, a as AgentLoop, at as mergeProfileEntries, b as GoogleGenAiClient, bt as schemaSourceLabel, c as CapabilityApproval, ct as normalizeErrorCode, d as EMPTY_USER_PROFILE, dt as parseBridgeRequest, et as interruptedToolResult, f as EventBus, ft as parseUserProfileExport, g as FsRunSnapshotStore, gt as refineUserProfile, h as FsMemoryStore, ht as readUserProfile, i as ASK_USER_TOOL_NAME, it as mergeCatalogEntries, j as TraceRecorder, k as SESSION_SCHEMA_VERSION, kt as validateUiSpecEvent, l as DEFAULT_LOOP_LIMITS, lt as normalizeToolContent, m as FsArtifactStore, mt as readProfileEntries, n as ASK_USER_INPUT_SCHEMA, nt as isUnsupportedRunSnapshot, o as AnthropicClient, ot as networkPolicyLibSource, p as FS_SESSION_PAGE_SIZE, pt as readBehaviorRecords, q as extractSkillCandidate, r as ASK_USER_TOOL, rt as listSkillScripts, s as BEHAVIOR_RECORDS_KEY, st as networkUrlHost, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as isNetworkAllowed, u as DEFAULT_USER_PROFILE_LIMITS, ut as normalizeToolError, v as FsSessionStore, vt as resolveToolName, w as READ_SKILL_FILE_INPUT_SCHEMA, wt as summarizeRunUsage, x as HookRunner, xt as schemaToForm, y as FullDisclosureRouter, yt as sampleBehaviorRecords, z as applyUserProfileImport } from "./dist-BViUeszk.js";
+import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as SUPPORTED_DOCUMENT_MIME, Bt as toLlmToolSpec, C as FsSessionStore, Ct as normalizeToolError, D as HookRunner, Dt as readProfileEntries, E as GoogleGenAiClient, Et as readBehaviorRecords, F as READ_SKILL_FILE_TOOL_NAME, Ft as schemaToForm, G as USER_PROFILE_EXPORT_VERSION, H as TEXT_BUDGETED_CONTENT_TYPES, Ht as toVercelToolSpecs, I as RUN_SNAPSHOT_SCHEMA_VERSION, It as scriptToolName, J as USER_PROFILE_PROMPT_HEADER, K as USER_PROFILE_KEY, L as RUN_TRACE_SCHEMA_VERSION, Lt as sealToolCallPairs, M as READ_LINKED_DOCUMENT_TOOL_NAME, Mt as resolveToolName, N as READ_SKILL_FILE_INPUT_SCHEMA, Nt as sampleBehaviorRecords, O as MAX_TOOL_STEP_ARG_BYTES, Ot as readUserProfile, P as READ_SKILL_FILE_TOOL, Pt as schemaSourceLabel, Q as applyUserProfileImport, R as SENSITIVE_ANNOTATION, Rt as summarizeRunUsage, S as FsRunTraceStore, St as normalizeToolContent, T as FullDisclosureRouter, Tt as parseUserProfileExport, U as TraceRecorder, Ut as validateUiSpecEvent, V as SerializingMemoryStore, Vt as toRecordDigests, W as UNSUPPORTED_DOCUMENT_MESSAGE, Wt as validateUiSpecNode, X as WebSkillRuntime, Y as USER_PROFILE_REFINE_PROMPT, Z as appendBehaviorRecords, _ as EventBus, _t as mergeCatalogEntries, a as ASK_USER_TOOL, at as extractChartSpec, b as FsMemoryStore, bt as networkUrlHost, c as AnthropicClient, ct as extractUiSpecEvents, d as DEFAULT_LOOP_LIMITS, dt as fromVercelResult, et as buildRenderResult, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as fromVercelStreamPart, g as EMPTY_USER_PROFILE, gt as listSkillScripts, h as DEFAULT_USER_PROFILE_LIMITS, ht as isUnsupportedRunSnapshot, i as ASK_USER_MAX_FIELDS, it as exportUserProfile, j as READ_LINKED_DOCUMENT_TOOL, jt as renderUserProfileContext, k as OpenAiCompatibleClient, kt as redactToolStepArgs, l as BEHAVIOR_RECORDS_KEY, lt as findUnpairedToolCalls, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as isNetworkAllowed, n as ASK_USER_FIELD_TYPES, nt as createWebSkillApi, o as ASK_USER_TOOL_NAME, ot as extractSkillCandidate, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as interruptedToolResult, q as USER_PROFILE_NO_INVENTION_RULE, r as ASK_USER_INPUT_SCHEMA, rt as diffUserProfile, s as AgentLoop, st as extractTodoTraceEvents, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as createScriptContext, u as CapabilityApproval, ut as formatSkillScriptManifest, v as FS_SESSION_PAGE_SIZE, vt as mergeProfileEntries, w as FsToolStepStore, wt as parseBridgeRequest, x as FsRunSnapshotStore, xt as normalizeErrorCode, y as FsArtifactStore, yt as networkPolicyLibSource, z as SESSION_SCHEMA_VERSION, zt as summarizeToolCalls } from "./dist-sdKFgERo.js";
 
 //#region src/version.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
@@ -8,7 +8,7 @@ import { $ as fromVercelStreamPart, A as SerializingMemoryStore, At as validateU
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.10.0";
+const SDK_VERSION = "0.11.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };