@webskill/sdk 0.11.0 → 0.12.0

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { R as FileSystemProvider, S as UiBridge, U as Page, W as PageQuery, f as LlmMessage, it as SkillCatalogEntry, l as LlmClient, ot as SkillDocument, ut as SkillManagerPort } from "./types-C26b05fW-CdrRCRDb.js";
-import { At as RuntimeRun, En as WebSkillRuntime, J as IntegrityVerdict, Jt as SkillOutcomeReporter, Qt as SkillStateGuard, qt as SkillIntegrityGuard } from "./index-D3mONFHD.js";
-import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-D-qHk9ZE-BcmFLykd.js";
+import { R as FileSystemProvider, S as UiBridge, U as Page, W as PageQuery, f as LlmMessage, it as SkillCatalogEntry, l as LlmClient, ot as SkillDocument, ut as SkillManagerPort } from "./types-DLctJep_-B5G4uk2u.js";
+import { Nt as RuntimeRun, Pn as WebSkillRuntime, Qt as SkillOutcomeReporter, Y as IntegrityVerdict, Zt as SkillIntegrityGuard, nn as SkillStateGuard } from "./index-C9pzXLKy.js";
+import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-D-qHk9ZE-DheTIwAB.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */

package/dist/{index-DACk2_XZ.d.ts → index-3fCHc1mQ.d.ts}

@@ -1,5 +1,5 @@
-import { B as JsonSchema, C as UiSpecActionCapability, D as UiSpecSnapshot, S as UiBridge, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-C26b05fW-CdrRCRDb.js";
-import { F as ExternalToolSource } from "./index-D3mONFHD.js";
+import { B as JsonSchema, C as UiSpecActionCapability, D as UiSpecSnapshot, S as UiBridge, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-DLctJep_-B5G4uk2u.js";
+import { F as ExternalToolSource } from "./index-C9pzXLKy.js";
 import { z } from "zod";
 import { ComponentType, ReactNode } from "react";
 //#region ../ui/dist/index.d.ts
@@ -84,6 +84,21 @@ interface SurfaceFormTexts {
 /** 可复用的部分取自 DEFAULT_INTERACTION_TEXTS，不另抄一份（AC-G10） */
 declare const DEFAULT_SURFACE_FORM_TEXTS: SurfaceFormTexts;
 declare function resolveSurfaceFormTexts(texts?: Partial<SurfaceFormTexts>): SurfaceFormTexts;
+/**
+ * surface 宿主控件的文案契约（设计 14 §2.1）。与 `SurfaceFormTexts` 并列而非合并：
+ * 宿主控件（分页 / 轮播）不属于表单，且 a2ui、webFormBridge 两档消费方没有这些控件。
+ */
+interface SurfaceHostControlTexts {
+  /** 分页按钮的 a11y 名称与可见文字 */
+  previousPage: string;
+  previous: string;
+  nextPage: string;
+  next: string;
+  /** 轮播容器的 a11y 名称 */
+  carousel: string;
+}
+declare const DEFAULT_SURFACE_HOST_CONTROL_TEXTS: SurfaceHostControlTexts;
+declare function resolveSurfaceHostControlTexts(texts?: Partial<SurfaceHostControlTexts>): SurfaceHostControlTexts;
 /** 提交值按请求类型归形（WebFormBridge 与框架组件库共享单一来源） */
 declare function shapeInteractionValue(model: FormModel, values: Record<string, unknown>): unknown;
 /** 五类 InteractionRequest → 统一中间模型（框架无关） */
@@ -124,7 +139,8 @@ declare function renderMiniMarkdown(text: string, doc: Document): HTMLElement;
  */
 declare const CHART_PALETTE: readonly ["#4e79a7", "#f28e2b", "#e15759", "#76b7b2", "#59a14f", "#edc948", "#b07aa1", "#ff9da7"];
 /**
- * ChartSpec → SVG（bar 等宽柱 + 值标签；line 折线 + 点；pie 扇形 + 图例；空数据容错）
+ * ChartSpec → SVG（bar 等宽柱 + 值标签；line 折线 + 点；pie 扇形 + 图例；空数据容错）。
+ * mini 档只有这三种画法，其余类型走最接近的一种并在图内注明是近似呈现。
  * @stable
  */
 declare function renderMiniChart(chart: ChartSpec, doc: Document): SVGSVGElement;
@@ -139,12 +155,76 @@ declare function chartToTable(chart: ChartSpec): {
 /**
  * catalog `Chart` 节点 props → `ChartSpec`。四档共用这一份转换：
  * 此前 native / OpenUI / json-render / A2UI 各抄了一遍，改一处就会漂移。
- * catalog 的 `area` 在 `ChartSpec` 里没有对应枚举，按折线渲染——
- * 原先的裸 cast 会把非法枚举一路带进渲染器，画出空图。
+ * 非法枚举**原样保留**，由 `toEchartsOption` 给出可见降级提示——
+ * 此前偷偷改写成 `'line'`，画出的图与模型的意图无关且不可察觉。
  */
 declare function chartSpecFromProps(props: Record<string, unknown>): ChartSpec;
+/** 画布内文字的字号（px）。它们画在 canvas 上，宿主的 CSS 进不去 */
+interface ChartFontSizes {
+  title: number;
+  axisLabel: number;
+  legend: number;
+}
+/** 字号默认值的**全仓唯一来源**；`12` 是 echarts 的全局默认，显式写出后渲染不变 */
+declare const DEFAULT_CHART_FONT_SIZES: ChartFontSizes;
+/** 逐字段兜底：宿主通常只想调大其中一两项 */
+declare function resolveChartFontSizes(sizes?: Partial<ChartFontSizes>): ChartFontSizes;
+/** `ChartSpec` → ECharts option：图表类型、数据系列、图例的唯一定义处 */
+declare function toEchartsOption(chart: ChartSpec, fontSizes?: Partial<ChartFontSizes>): {
+  animation: boolean;
+  title: {
+    subtext?: string | undefined;
+    text: string;
+    left: string;
+    textStyle: {
+      fontSize: number;
+    };
+  } | undefined;
+  tooltip: {
+    trigger: string;
+  };
+  legend: {
+    bottom: number;
+    textStyle: {
+      fontSize: number;
+    };
+  };
+  xAxis: {
+    type: string;
+    data: string[];
+    axisLabel: {
+      fontSize: number;
+    };
+  } | undefined;
+  yAxis: {
+    type: string;
+    axisLabel: {
+      fontSize: number;
+    };
+  } | {
+    type: string;
+    axisLabel: {
+      fontSize: number;
+    };
+  }[] | undefined;
+  series: {
+    type: string;
+    name: string | undefined;
+    data: {
+      name: string;
+      value: number;
+    }[];
+  }[] | {
+    yAxisIndex?: number | undefined;
+    name: string | undefined;
+    data: number[];
+    type: string;
+    areaStyle?: Record<string, never>;
+    stack?: string;
+  }[];
+};
 interface EchartHandle {
-  setChart(chart: ChartSpec): void;
+  setChart(chart: ChartSpec, fontSizes?: Partial<ChartFontSizes>): void;
   dispose(): void;
 }
 /**
@@ -177,12 +257,16 @@ type DocumentComponentName = (typeof DOCUMENT_COMPONENTS)[number];
 interface ViewerComponentsHandle {
   dispose(): void;
 }
+/** 宿主的呈现偏好；挂在本次挂载上，不做模块级全局 */
+interface ViewerComponentsOptions {
+  fontSizes?: Partial<ChartFontSizes>;
+}
 /**
  * 扫描 `root` 下的占位并挂载预置组件。
  *
  * 逐个占位独立处理：一个坏占位只降级它自己，不会让整篇文档变空白。
  */
-declare function mountViewerComponents(root: ParentNode): ViewerComponentsHandle;
+declare function mountViewerComponents(root: ParentNode, options?: ViewerComponentsOptions): ViewerComponentsHandle;
 //#endregion
 //#region src/catalog/gauge.d.ts
 /**
@@ -872,4 +956,4 @@ interface LoadedOpenUiPeers {
  */
 declare function loadOpenUiPeers(): Promise<LoadedOpenUiPeers>;
 //#endregion
-export { UiCatalogToolSourceOptions as $, resolveColumnWidths as $t, FormModel as A, collectSpecActions as At, RENDER_UI_TOOL as B, gaugePercent as Bt, DESCRIBE_UI_PRESET_TOOL as C, a2uiComponentShapes as Ct, EvaluateFieldConditionOptions as D, chartToTable as Dt, EchartHandle as E, chartSpecFromProps as Et, MAX_CONDITION_DEPTH as F, evaluateFieldCondition as Ft, UI_CATALOG_GROUPS as G, mountEchart as Gt, SPEC_TABLE_MIN_COLUMN_WIDTH as H, interactionToUiSpec as Ht, NormalizedColumnWidths as I, fromA2uiSpecAction as It, UI_PRESET_NAMES as J, qualifyFieldName as Jt, UI_CATALOG_PROMPT_BUDGET_BYTES as K, mountViewerComponents as Kt, OpenUiRendererProps as L, fromA2uiSurfaceAction as Lt, InteractionTexts as M, createUiCatalogToolSource as Mt, JsonRenderSpec as N, defineUiCatalog as Nt, FieldCondition as O, collectFormScopes as Ot, LoadedOpenUiPeers as P, ensureStyles as Pt, UiCatalogPromptOptions as Q, renderRenderResult as Qt, OpenUiRuntime as R, fromUiSurfaceActionDispatch as Rt, DEFAULT_SURFACE_FORM_TEXTS as S, a2uiComponentSchema as St, DocumentComponentName as T, buildA2uiCatalogDefinition as Tt, SpecColumnMeta as U, loadOpenUiPeers as Ut, SPEC_TABLE_MIN_COLUMN_VAR as V, interactionToFormModel as Vt, SurfaceFormTexts as W, loadWebSkillLitCatalog as Wt, UiCatalog as X, renderMiniChart as Xt, UiActionDef as Y, renderBlocks as Yt, UiCatalogInput as Z, renderMiniMarkdown as Zt, CHART_PALETTE as _, WEBSKILL_A2UI_CATALOG_ID as _t, A2UI_SURFACE_ACTION as a, toJsonRenderSpec as an, UiSpecDegradationCode as at, ControlModel as b, WebFormBridge as bt, A2uiCatalogDefinition as c, toVercelToolInvocation as cn, UiSpecValidation as ct, A2uiMessage as d, VIEWER_COMPONENT_ATTR as dt, resolveInteractionTexts as en, UiComponentDef as et, A2uiSpecActionEvent as f, VIEWER_FALLBACK_ATTR as ft, CATALOG_SCHEMA_MAX as g, ViewerComponentsHandle as gt, CATALOG_PROMPT_MAX as h, VercelUiBridge as ht, A2UI_SPEC_FORM_PATH as i, toA2uiSurfaceAction as in, UiSpecDegradation as it, InteractionSpecLabels as j, collectValues as jt, FieldConditionResult as k, collectScopedValues as kt, A2uiCatalogHandle as l, uiCatalog as ln, UiSurfaceActionDispatch as lt, CATALOG_BUDGET_STAGE as m, VercelToolInvocation as mt, A2UI_COMMON_TYPES as n, shapeInteractionValue as nn, UiPreset as nt, A2UI_VERSION as o, toOpenUiSpecLang as on, UiSpecIssue as ot, A2uiSpecMessageOptions as p, VIEWER_PROPS_ATTR as pt, UI_PRESETS as q, normalizeColumnWidths as qt, A2UI_SPEC_ACTION as r, toA2uiSpecMessages as rn, UiPresetName as rt, A2uiCatalogComponent as s, toUiSurfaceActionDispatch as sn, UiSpecSanitization as st, A2UI_BASIC_CATALOG_ID as t, resolveSurfaceFormTexts as tn, UiFormScope as tt, A2uiComponentShape as u, uiPreset as un, VERCEL_INTERACTION_TOOL_NAME as ut, CollectedValues as v, WEBSKILL_STYLES_CSS as vt, DOCUMENT_COMPONENTS as w, applySuggestion as wt, DEFAULT_INTERACTION_TEXTS as x, ZodRuntime as xt, ColumnWidthsRejection as y, WEBSKILL_SURFACE_ACTION as yt, PLANNED_INCREMENT as z, fromVercelToolResult as zt };
+export { UiActionDef as $, qualifyFieldName as $t, EvaluateFieldConditionOptions as A, buildA2uiCatalogDefinition as At, OpenUiRendererProps as B, evaluateFieldCondition as Bt, DEFAULT_INTERACTION_TEXTS as C, WEBSKILL_STYLES_CSS as Ct, DOCUMENT_COMPONENTS as D, a2uiComponentSchema as Dt, DESCRIBE_UI_PRESET_TOOL as E, ZodRuntime as Et, InteractionTexts as F, collectSpecActions as Ft, SPEC_TABLE_MIN_COLUMN_WIDTH as G, gaugePercent as Gt, PLANNED_INCREMENT as H, fromA2uiSurfaceAction as Ht, JsonRenderSpec as I, collectValues as It, SurfaceHostControlTexts as J, loadOpenUiPeers as Jt, SpecColumnMeta as K, interactionToFormModel as Kt, LoadedOpenUiPeers as L, createUiCatalogToolSource as Lt, FieldConditionResult as M, chartToTable as Mt, FormModel as N, collectFormScopes as Nt, DocumentComponentName as O, a2uiComponentShapes as Ot, InteractionSpecLabels as P, collectScopedValues as Pt, UI_PRESET_NAMES as Q, normalizeColumnWidths as Qt, MAX_CONDITION_DEPTH as R, defineUiCatalog as Rt, DEFAULT_CHART_FONT_SIZES as S, WEBSKILL_A2UI_CATALOG_ID as St, DEFAULT_SURFACE_HOST_CONTROL_TEXTS as T, WebFormBridge as Tt, RENDER_UI_TOOL as U, fromUiSurfaceActionDispatch as Ut, OpenUiRuntime as V, fromA2uiSpecAction as Vt, SPEC_TABLE_MIN_COLUMN_VAR as W, fromVercelToolResult as Wt, UI_CATALOG_PROMPT_BUDGET_BYTES as X, mountEchart as Xt, UI_CATALOG_GROUPS as Y, loadWebSkillLitCatalog as Yt, UI_PRESETS as Z, mountViewerComponents as Zt, CHART_PALETTE as _, uiCatalog as _n, VIEWER_PROPS_ATTR as _t, A2UI_SURFACE_ACTION as a, resolveColumnWidths as an, UiFormScope as at, ColumnWidthsRejection as b, ViewerComponentsHandle as bt, A2uiCatalogDefinition as c, resolveSurfaceHostControlTexts as cn, UiSpecDegradation as ct, A2uiMessage as d, toA2uiSurfaceAction as dn, UiSpecSanitization as dt, renderBlocks as en, UiCatalog as et, A2uiSpecActionEvent as f, toEchartsOption as fn, UiSpecValidation as ft, CATALOG_SCHEMA_MAX as g, toVercelToolInvocation as gn, VIEWER_FALLBACK_ATTR as gt, CATALOG_PROMPT_MAX as h, toUiSurfaceActionDispatch as hn, VIEWER_COMPONENT_ATTR as ht, A2UI_SPEC_FORM_PATH as i, resolveChartFontSizes as in, UiComponentDef as it, FieldCondition as j, chartSpecFromProps as jt, EchartHandle as k, applySuggestion as kt, A2uiCatalogHandle as l, shapeInteractionValue as ln, UiSpecDegradationCode as lt, CATALOG_BUDGET_STAGE as m, toOpenUiSpecLang as mn, VERCEL_INTERACTION_TOOL_NAME as mt, A2UI_COMMON_TYPES as n, renderMiniMarkdown as nn, UiCatalogPromptOptions as nt, A2UI_VERSION as o, resolveInteractionTexts as on, UiPreset as ot, A2uiSpecMessageOptions as p, toJsonRenderSpec as pn, UiSurfaceActionDispatch as pt, SurfaceFormTexts as q, interactionToUiSpec as qt, A2UI_SPEC_ACTION as r, renderRenderResult as rn, UiCatalogToolSourceOptions as rt, A2uiCatalogComponent as s, resolveSurfaceFormTexts as sn, UiPresetName as st, A2UI_BASIC_CATALOG_ID as t, renderMiniChart as tn, UiCatalogInput as tt, A2uiComponentShape as u, toA2uiSpecMessages as un, UiSpecIssue as ut, ChartFontSizes as v, uiPreset as vn, VercelToolInvocation as vt, DEFAULT_SURFACE_FORM_TEXTS as w, WEBSKILL_SURFACE_ACTION as wt, ControlModel as x, ViewerComponentsOptions as xt, CollectedValues as y, VercelUiBridge as yt, NormalizedColumnWidths as z, ensureStyles as zt };

package/dist/{index-D3mONFHD.d.ts → index-C9pzXLKy.d.ts}

@@ -1,4 +1,4 @@
-import { B as JsonSchema, G as RemoteUrlPolicy, I as DiscoveryResult, O as UiSurfaceActionRequest, R as FileSystemProvider, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, W as PageQuery, _ as LlmToolSpec, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, d as LlmContentPart, dt as SkillManifest, f as LlmMessage, g as LlmToolCall, h as LlmTokenUsage, i as FormField, it as SkillCatalogEntry, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, r as ChartSpec, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, u as LlmCompleteInput, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-C26b05fW-CdrRCRDb.js";
+import { B as JsonSchema, G as RemoteUrlPolicy, I as DiscoveryResult, O as UiSurfaceActionRequest, R as FileSystemProvider, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, W as PageQuery, _ as LlmToolSpec, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, d as LlmContentPart, dt as SkillManifest, f as LlmMessage, g as LlmToolCall, h as LlmTokenUsage, i as FormField, it as SkillCatalogEntry, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, r as ChartSpec, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, u as LlmCompleteInput, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-DLctJep_-B5G4uk2u.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -115,8 +115,14 @@ interface ScriptExecutionContext {
   readAsset?(relativePath: string): Promise<string>;
   /** `assets/` 的典型内容是图片/字体/数据包，纯文本出口不够 @experimental */
   readAssetBinary?(relativePath: string): Promise<Uint8Array>;
+  /**
+   * 写 run 产物。`options.metadata` 由技能自定义并随产物索引落盘；
+   * 约定键 `resultCard: false` 表示该产物不出自动下载卡（分册 18）。
+   * 必须是可 JSON 序列化的 plain object，否则抛 `VALIDATION_FAILED` 且产物不落盘。
+   */
   writeArtifact(path: string, content: string | Uint8Array, options?: {
     mimeType?: string;
+    metadata?: Record<string, unknown>;
   }): Promise<Artifact>;
   /**
    * 按**宿主声明的 sourceId** 取数（FR-16.1）。脚本给不了 URL——
@@ -1117,6 +1123,12 @@ type BridgeRequest = {
   path: string;
   content: string | number[];
   mimeType?: string;
+  /**
+   * 技能声明的产物 metadata（分册 18）。**不可信载荷**，故声明为 `unknown`：
+   * 形状判定在 `createScriptContext.writeArtifact`（唯一汇聚点，DV-10），
+   * 在这里拒绝只能 `return undefined`，而那会丢掉请求 id 使脚本挂到超时。
+   */
+  metadata?: unknown;
 } | {
   kind: 'confirm';
   id: string;
@@ -1315,6 +1327,70 @@ declare const UNSUPPORTED_DOCUMENT_MESSAGE: string;
  */
 declare const READ_LINKED_DOCUMENT_TOOL: ToolDefinition;
 //#endregion
+//#region src/engine/toolStep.d.ts
+/**
+ * 一次工具调用的**未截断**参数留存（分册 30 / FR-30.2）。
+ *
+ * 刻意不并入 `RunTraceFile`：那是 `@stable` 且不留扩展位的契约，
+ * 每个 run 都写、所有宿主都读；为一个默认关闭的能力抬它的 schemaVersion
+ * 不划算（D-30-1 裁为 B）。
+ * @stable
+ */
+interface ToolStepRecord {
+  runId: string;
+  sessionId: string;
+  callId: string;
+  /** LLM 可见的工具名 */
+  tool: string;
+  at: string;
+  /** 脱敏后的参数：被脱敏的键仍在，值不在 */
+  args: Record<string, unknown>;
+  /** 被脱敏掉的字段路径（如 `credentials.token`），供确认卡与审计 */
+  redacted: readonly string[];
+  /** 超出体积上限：`args` 为空对象，生成器据此拒绝该步骤 */
+  truncated?: true;
+  /** 未脱敏字段的依据（AC-30.6d） */
+  trust: ToolStepTrust;
+}
+/**
+ * 参数留存的信任层级。
+ * - `reviewed`：本仓自带工具源，schema 标注已被审查
+ * - `host-trusted`：外部来源，但宿主显式声明信任（`declaredBy` 记声明标识）
+ * - `untrusted`：缺省——未标注字段一律按敏感处理
+ * @stable
+ */
+type ToolStepTrust = {
+  tier: 'reviewed' | 'host-trusted';
+  declaredBy?: string;
+} | {
+  tier: 'untrusted';
+};
+/** 只读侧：生成器只需要「这个会话有哪些步骤」 @stable */
+interface ToolStepReader {
+  listBySession(sessionId: string): Promise<ToolStepRecord[]>;
+}
+/** @stable */
+interface ToolStepStore extends ToolStepReader {
+  append(record: ToolStepRecord): Promise<void>;
+}
+/**
+ * 按会话分文件的 append-only JSONL 留存。
+ *
+ * 分文件维度取会话而非 run：读取侧唯一的查询就是「这个会话的全部步骤」，
+ * 按 run 分会让一次生成要开 N 个文件。
+ */
+declare class FsToolStepStore implements ToolStepStore {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+    /** 留存失败不阻断对话：默认降级为告警 */
+    onError?: (error: unknown, record: ToolStepRecord) => void;
+  });
+  append(record: ToolStepRecord): Promise<void>;
+  listBySession(sessionId: string): Promise<ToolStepRecord[]>;
+}
+//#endregion
 //#region src/engine/external.d.ts
 /**
  * 外部工具来源（runtime 扩展点，mcp 包实现并插入）。
@@ -1333,6 +1409,28 @@ interface ExternalToolSource {
   systemPrompt?(): Promise<string | undefined>;
   canHandle(llmToolName: string): boolean;
   call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
+  /**
+   * 参数留存的信任判定（分册 30 / FR-30.3）。**不实现 ⇒ 该源全部工具按 untrusted 处理**（参数全脱敏）。
+   *
+   * 字段级敏感性只写在 `inputSchema` 的 `x-webskill-sensitive` 标注里，本方法不重复表达它，
+   * 否则会有两份事实源。本方法回答的是另一个问题：**这一次调用的参数整体能不能按审查过的处理**。
+   *
+   * 传入 `args` 是为了让「敏感与否取决于运行期目标」的工具能如实回答——
+   * 例如 `act_on_page` 的填写内容是否敏感，取决于目标是不是密码类控件，
+   * 静态 schema 看不出来。这类工具应在敏感目标上返回 `untrusted`（整调用全脱敏），
+   * 而不是把字段永久标成敏感、让所有正常填写也一并丢失。
+   */
+  argCaptureTrust?(llmToolName: string, args: Record<string, unknown>): ToolStepTrust | undefined;
+  /**
+   * 留存前把入参补成自解释的形状（分册 30 / FR-30.2）。**不实现即原样留存。**
+   *
+   * 给的是 `act_on_page` 这类工具一个出口：它的 `ref` 是本次感知产出的不透明句柄，
+   * 换一次运行就失效，只留它等于留了一个指向不存在东西的引用。工具源在这里补上
+   * 目标的角色与可访问名，生成的技能才说得出「填进哪个框」。
+   *
+   * 补出来的字段照样过脱敏：它们不在 `inputSchema` 里，因此在 `untrusted` 层同样被抹掉。
+   */
+  captureArgs?(llmToolName: string, args: Record<string, unknown>): Record<string, unknown> | undefined;
 }
 /** 外部技能提供者（页面动态技能等；技能随来源生灭，不持久化） */
 interface ExternalSkillProvider {
@@ -1510,6 +1608,11 @@ interface AgentLoopDeps {
   skillOutcomeReporter?: SkillOutcomeReporter;
   /** D3：interrupt 点快照存储（无配置则行为与现状完全一致） */
   snapshotStore?: RunSnapshotStore;
+  /**
+   * 工具调用的完整参数留存（分册 30）。**不注入即不留存**——
+   * AC-30.15 因此是结构性的：不是「有个判断没走进去」，是根本没有写入方。
+   */
+  toolSteps?: ToolStepStore;
 }
 /**
  * 多轮 Agent 循环。
@@ -1550,10 +1653,18 @@ declare class AgentLoop {
  * @stable
  */
 declare const DEFAULT_LOOP_LIMITS: {
-  readonly maxTurns: 10;
+  readonly maxTurns: 1000;
   readonly totalTimeoutMs: 3600000;
   readonly toolTimeoutMs: 600000;
+  readonly maxHistoryMessages: 1000;
 };
+/**
+ * 工具参数留存的单次体积上限（分册 30 / FR-30.2）。**全仓唯一来源**（S8）。
+ *
+ * 超限时不留半截参数，整条标记为 `truncated`。
+ * @stable
+ */
+declare const MAX_TOOL_STEP_ARG_BYTES = 32768;
 /**
  * 触顶类失败（`RUN_TIMEOUT` / `RUN_MAX_TURNS_EXCEEDED`）记进 `run.failed`
  * 轨迹事件 `data` 的结构化细节：程序化消费方据此判断是哪个上限、当时的生效值，
@@ -1610,6 +1721,8 @@ interface WebSkillRuntimeDeps {
   }) => Promise<void>;
   /** D3：interrupt 点快照存储（配置后 interrupted run 可 resumeRun 恢复） */
   snapshotStore?: RunSnapshotStore;
+  /** 工具调用的完整参数留存（分册 30）；**不注入即不留存** */
+  toolSteps?: ToolStepStore;
   /** 技能状态拦截 port（治理 SkillStatePolicy.toSkillStateGuard 装配；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
   /** D3 激活期完整性校验 port（治理 SkillStatePolicy.toSkillIntegrityGuard 装配；无注入即关闭） */
@@ -1658,7 +1771,7 @@ declare class WebSkillRuntime {
    * 多会话：session 对象的 run(prompt) 跨 run 延续消息历史（同一 session 对话上下文连续）。
    * 既有 runtime.run(prompt) 保持无状态单次语义不变。
    * 同 handle 并发 run 经 per-handle 队列串行化（防历史 last-writer-wins 丢轮次）；
-   * maxHistoryMessages（默认 100）超出时滚动裁剪中段（保留首尾；边界对齐 tool 契约）。
+   * maxHistoryMessages（默认取 `DEFAULT_LOOP_LIMITS`）超出时滚动裁剪中段（保留首尾；边界对齐 tool 契约）。
    */
   createSession(options?: {
     sessionId?: string;
@@ -1739,6 +1852,10 @@ interface RunTraceSummary {
 interface RunTraceFilter {
   /** 状态精确匹配 */
   status?: string;
+  /**
+   * 会话精确匹配。刻意不走 `search`：子串匹配会让 `sess-1` 命中 `sess-10`。
+   */
+  sessionId?: string;
   /** 大小写不敏感子串：匹配 runId 或任一激活技能名 */
   search?: string;
   limit?: number;
@@ -1967,4 +2084,31 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   delete(id: string): Promise<void>;
 }
 //#endregion
-export { LifecycleHookContext as $, normalizeToolError as $n, SkillSuccessReport as $t, DocxTextExtractor as A, bridgeError as An, RuntimeRun as At, FsRunTraceStore as B, formatSkillScriptManifest as Bn, SealResult as Bt, CapabilityApproval as C, UserProfileLimits as Cn, RunTraceFile as Ct, DEFAULT_MAX_DOCUMENT_BYTES as D, WebSkillRuntimeDeps as Dn, RunTraceSummary as Dt, DEFAULT_MAX_DATA_SOURCE_BYTES as E, WebSkillRuntime as En, RunTraceStore as Et, ExternalToolSource as F, exportUserProfile as Fn, SchemaInferer as Ft, HookRunner as G, isUnsupportedRunSnapshot as Gn, SessionStore as Gt, FullDisclosureRouter as H, fromVercelStreamPart as Hn, SessionListPage as Ht, FS_SESSION_PAGE_SIZE as I, extractChartSpec as In, ScriptExecutionContext as It, IntegrityVerdict as J, mergeProfileEntries as Jn, SkillOutcomeReporter as Jt, HookRunnerOptions as K, listSkillScripts as Kn, SkillFailureReport as Kt, FsArtifactStore as L, extractTodoTraceEvents as Ln, ScriptExecutor as Lt, EventBus as M, createScriptContext as Mn, RuntimeSessionHandle as Mt, ExecuteLifecycleData as N, createWebSkillApi as Nn, SESSION_SCHEMA_VERSION as Nt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as O, appendBehaviorRecords as On, RunUsageSummary as Ot, ExternalSkillProvider as P, diffUserProfile as Pn, SUPPORTED_DOCUMENT_MIME as Pt, LifecycleHook as Q, normalizeToolContent as Qn, SkillStateGuard as Qt, FsMemoryStore as R, extractUiSpecEvents as Rn, SealOptions as Rt, BridgeResponse as S, UserProfileImportDiff as Sn, RunToolCall as St, DEFAULT_LOOP_LIMITS as T, WebSkillApi as Tn, RunTraceMetrics as Tt, GoogleGenAiClient as U, interruptedToolResult as Un, SessionMeta as Ut, FsSessionStore as V, fromVercelResult as Vn, SerializingMemoryStore as Vt, GoogleGenAiClientConfig as W, isNetworkAllowed as Wn, SessionRecord as Wt, LifecycleEvent as X, networkUrlHost as Xn, SkillScriptDescriptor as Xt, InteractLifecycleData as Y, networkPolicyLibSource as Yn, SkillRouter as Yt, LifecycleEventInit as Z, normalizeErrorCode as Zn, SkillScriptSchemaSource as Zt, BehaviorRecordKind as _, USER_PROFILE_REFINE_PROMPT as _n, toLlmToolSpec as _r, RunResult as _t, ASK_USER_TOOL as a, ToolDefinition as an, readUserProfile as ar, ProgressiveRouter as at, BridgeCapability as b, UserProfileEntry as bn, validateUiSpecEvent as br, RunSnapshotStore as bt, AgentLoop as c, TraceClock as cn, resolveToolName as cr, READ_SKILL_FILE_INPUT_SCHEMA as ct, AnthropicClient as d, TraceRecorder as dn, schemaToForm as dr, RUN_SNAPSHOT_SCHEMA_VERSION as dt, TEXT_BUDGETED_CONTENT_TYPES as en, parseBridgeRequest as er, LifecycleListener as et, AnthropicClientConfig as f, UNSUPPORTED_DOCUMENT_MESSAGE as fn, scriptToolName as fr, RUN_TRACE_SCHEMA_VERSION as ft, BehaviorRecord as g, USER_PROFILE_PROMPT_HEADER as gn, textParts as gr, RunLimitErrorDetails as gt, BEHAVIOR_RECORDS_KEY as h, USER_PROFILE_NO_INVENTION_RULE as hn, summarizeToolCalls as hr, RouteResult as ht, ASK_USER_MAX_FIELDS as i, ToolContent as in, readProfileEntries as ir, OpenAiCompatibleClientConfig as it, EMPTY_USER_PROFILE as j, buildRenderResult as jn, RuntimeSession as jt, DEFAULT_USER_PROFILE_LIMITS as k, applyUserProfileImport as kn, RuntimePhase as kt, AgentLoopConfig as l, TraceEvent as ln, sampleBehaviorRecords as lr, READ_SKILL_FILE_TOOL as lt, ApprovalScope as m, USER_PROFILE_KEY as mn, summarizeRunUsage as mr, RouteLifecycleData as mt, ASK_USER_FIELD_TYPES as n, TextualToolContent as nn, partsToText as nr, NetworkPolicy as nt, ASK_USER_TOOL_NAME as o, ToolResolution as on, refineUserProfile as or, READ_LINKED_DOCUMENT_TOOL as ot, ApprovalDecision as p, USER_PROFILE_EXPORT_VERSION as pn, sealToolCallPairs as pr, RefineUserProfileInput as pt, InstalledSkillManifest as q, mergeCatalogEntries as qn, SkillIntegrityGuard as qt, ASK_USER_INPUT_SCHEMA as r, TodoTraceEvent as rn, readBehaviorRecords as rr, OpenAiCompatibleClient as rt, ActivateLifecycleData as s, ToolResult as sn, renderUserProfileContext as sr, READ_LINKED_DOCUMENT_TOOL_NAME as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, TerminalLifecycleData as tn, parseUserProfileExport as tr, LinkedDocumentReader as tt, AgentLoopDeps as u, TraceEventType as un, schemaSourceLabel as ur, READ_SKILL_FILE_TOOL_NAME as ut, BehaviorScene as v, UnsupportedRunSnapshot as vn, toRecordDigests as vr, RunSnapshot as vt, CapabilityMode as w, VercelToolSpec as wn, RunTraceFilter as wt, BridgeRequest as x, UserProfileExport as xn, validateUiSpecNode as xr, RunTerminationReason as xt, BridgeCapabilities as y, UserProfile as yn, toVercelToolSpecs as yr, RunSnapshotListEntry as yt, FsRunSnapshotStore as z, findUnpairedToolCalls as zn, SealRecord as zt };
+//#region src/engine/toolStepRedaction.d.ts
+/**
+ * 参数敏感标注关键字（分册 30 / FR-30.3）。
+ *
+ * 不用 `format: 'password'`：`format` 是 JSON Schema 的规范关键字，provider 侧
+ * 可能据其做转换或校验，而且它只对 `type: 'string'` 有意义，对象型凭据标不了。
+ * `x-` 前缀走 `JsonSchema` 的索引签名，不与任何规范语义抢占。
+ */
+declare const SENSITIVE_ANNOTATION = "x-webskill-sensitive";
+interface RedactedArgs {
+  /** 脱敏后的参数：被脱敏的键仍在，值为 `null` */
+  args: Record<string, unknown>;
+  /** 被脱敏掉的字段路径，点号分隔；数组元素用 `field[0]` */
+  redacted: string[];
+  truncated?: true;
+}
+/**
+ * 分层脱敏（FR-30.3）——**全仓唯一实现**。
+ *
+ * 1. `untrusted` → 所有字段脱敏；
+ * 2. `reviewed` / `host-trusted` → 逐字段走 schema，标注为敏感的脱敏。
+ *
+ * 标注为敏感的字段在**任何**层级都脱敏：信任声明说的是「未标注的可以留」，
+ * 不是「标注了也能留」。
+ */
+declare function redactToolStepArgs(args: Record<string, unknown>, schema: JsonSchema | undefined, trust: ToolStepTrust): RedactedArgs;
+//#endregion
+export { LifecycleHook as $, isUnsupportedRunSnapshot as $n, SkillRouter as $t, DocxTextExtractor as A, UserProfileImportDiff as An, validateUiSpecNode as Ar, RunTraceSummary as At, FsRunTraceStore as B, createScriptContext as Bn, ScriptExecutionContext as Bt, CapabilityApproval as C, USER_PROFILE_NO_INVENTION_RULE as Cn, summarizeRunUsage as Cr, RunSnapshotStore as Ct, DEFAULT_MAX_DOCUMENT_BYTES as D, UserProfile as Dn, toRecordDigests as Dr, RunTraceFilter as Dt, DEFAULT_MAX_DATA_SOURCE_BYTES as E, UnsupportedRunSnapshot as En, toLlmToolSpec as Er, RunTraceFile as Et, ExternalToolSource as F, WebSkillRuntimeDeps as Fn, RuntimeSessionHandle as Ft, GoogleGenAiClientConfig as G, extractTodoTraceEvents as Gn, SerializingMemoryStore as Gt, FsToolStepStore as H, diffUserProfile as Hn, SealOptions as Ht, FS_SESSION_PAGE_SIZE as I, appendBehaviorRecords as In, SENSITIVE_ANNOTATION as It, InstalledSkillManifest as J, formatSkillScriptManifest as Jn, SessionRecord as Jt, HookRunner as K, extractUiSpecEvents as Kn, SessionListPage as Kt, FsArtifactStore as L, applyUserProfileImport as Ln, SESSION_SCHEMA_VERSION as Lt, EventBus as M, VercelToolSpec as Mn, RuntimePhase as Mt, ExecuteLifecycleData as N, WebSkillApi as Nn, RuntimeRun as Nt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as O, UserProfileEntry as On, toVercelToolSpecs as Or, RunTraceMetrics as Ot, ExternalSkillProvider as P, WebSkillRuntime as Pn, RuntimeSession as Pt, LifecycleEventInit as Q, isNetworkAllowed as Qn, SkillOutcomeReporter as Qt, FsMemoryStore as R, bridgeError as Rn, SUPPORTED_DOCUMENT_MIME as Rt, BridgeResponse as S, USER_PROFILE_KEY as Sn, sealToolCallPairs as Sr, RunSnapshotListEntry as St, DEFAULT_LOOP_LIMITS as T, USER_PROFILE_REFINE_PROMPT as Tn, textParts as Tr, RunToolCall as Tt, FullDisclosureRouter as U, exportUserProfile as Un, SealRecord as Ut, FsSessionStore as V, createWebSkillApi as Vn, ScriptExecutor as Vt, GoogleGenAiClient as W, extractChartSpec as Wn, SealResult as Wt, InteractLifecycleData as X, fromVercelStreamPart as Xn, SkillFailureReport as Xt, IntegrityVerdict as Y, fromVercelResult as Yn, SessionStore as Yt, LifecycleEvent as Z, interruptedToolResult as Zn, SkillIntegrityGuard as Zt, BehaviorRecordKind as _, TraceEvent as _n, resolveToolName as _r, RouteLifecycleData as _t, ASK_USER_TOOL as a, TerminalLifecycleData as an, normalizeErrorCode as ar, OpenAiCompatibleClient as at, BridgeCapability as b, UNSUPPORTED_DOCUMENT_MESSAGE as bn, schemaToForm as br, RunResult as bt, AgentLoop as c, ToolContent as cn, parseBridgeRequest as cr, READ_LINKED_DOCUMENT_TOOL as ct, AnthropicClient as d, ToolResult as dn, readBehaviorRecords as dr, READ_SKILL_FILE_TOOL as dt, SkillScriptDescriptor as en, listSkillScripts as er, LifecycleHookContext as et, AnthropicClientConfig as f, ToolStepReader as fn, readProfileEntries as fr, READ_SKILL_FILE_TOOL_NAME as ft, BehaviorRecord as g, TraceClock as gn, renderUserProfileContext as gr, RefineUserProfileInput as gt, BEHAVIOR_RECORDS_KEY as h, ToolStepTrust as hn, refineUserProfile as hr, RedactedArgs as ht, ASK_USER_MAX_FIELDS as i, TEXT_BUDGETED_CONTENT_TYPES as in, networkUrlHost as ir, NetworkPolicy as it, EMPTY_USER_PROFILE as j, UserProfileLimits as jn, RunUsageSummary as jt, DEFAULT_USER_PROFILE_LIMITS as k, UserProfileExport as kn, validateUiSpecEvent as kr, RunTraceStore as kt, AgentLoopConfig as l, ToolDefinition as ln, parseUserProfileExport as lr, READ_LINKED_DOCUMENT_TOOL_NAME as lt, ApprovalScope as m, ToolStepStore as mn, redactToolStepArgs as mr, RUN_TRACE_SCHEMA_VERSION as mt, ASK_USER_FIELD_TYPES as n, SkillStateGuard as nn, mergeProfileEntries as nr, LinkedDocumentReader as nt, ASK_USER_TOOL_NAME as o, TextualToolContent as on, normalizeToolContent as or, OpenAiCompatibleClientConfig as ot, ApprovalDecision as p, ToolStepRecord as pn, readUserProfile as pr, RUN_SNAPSHOT_SCHEMA_VERSION as pt, HookRunnerOptions as q, findUnpairedToolCalls as qn, SessionMeta as qt, ASK_USER_INPUT_SCHEMA as r, SkillSuccessReport as rn, networkPolicyLibSource as rr, MAX_TOOL_STEP_ARG_BYTES as rt, ActivateLifecycleData as s, TodoTraceEvent as sn, normalizeToolError as sr, ProgressiveRouter as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, SkillScriptSchemaSource as tn, mergeCatalogEntries as tr, LifecycleListener as tt, AgentLoopDeps as u, ToolResolution as un, partsToText as ur, READ_SKILL_FILE_INPUT_SCHEMA as ut, BehaviorScene as v, TraceEventType as vn, sampleBehaviorRecords as vr, RouteResult as vt, CapabilityMode as w, USER_PROFILE_PROMPT_HEADER as wn, summarizeToolCalls as wr, RunTerminationReason as wt, BridgeRequest as x, USER_PROFILE_EXPORT_VERSION as xn, scriptToolName as xr, RunSnapshot as xt, BridgeCapabilities as y, TraceRecorder as yn, schemaSourceLabel as yr, RunLimitErrorDetails as yt, FsRunSnapshotStore as z, buildRenderResult as zn, SchemaInferer as zt };

package/dist/{index-DWbs58LF.d.ts → index-DFhU1uks.d.ts}

@@ -1,5 +1,5 @@
-import { G as RemoteUrlPolicy, S as UiBridge, Tt as WebSkillErrorCode, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-C26b05fW-CdrRCRDb.js";
-import { F as ExternalToolSource } from "./index-D3mONFHD.js";
+import { G as RemoteUrlPolicy, S as UiBridge, Tt as WebSkillErrorCode, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-DLctJep_-B5G4uk2u.js";
+import { F as ExternalToolSource, fn as ToolStepReader } from "./index-C9pzXLKy.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -94,6 +94,16 @@ interface GeneratedSkillDraft {
     path: string;
     content: string;
   }[];
+  /**
+   * 模型声称这个技能会执行的工具调用（分册 30 / FR-30.4）。
+   *
+   * 做成结构化入参而不是从 `content` 正文里扫工具名：正文是自由文本，
+   * 扫描既会漏（模型写「点击提交按钮」而不写工具名）又会误命中（提到但没执行）。
+   */
+  steps?: readonly {
+    tool: string;
+    args?: Record<string, unknown>;
+  }[];
 }
 /**
  * 候选收货端口。实现由宿主注入——`@webskill/agent` 不依赖 `@webskill/governance`
@@ -136,12 +146,34 @@ interface SkillGeneratorOptions {
   now?: () => Date;
   /** 界面文案注入口：生成器与语言无关，字典在宿主手里（UI-UX5 #9） */
   messages?: SkillGenerationMessages;
+  /**
+   * 本会话的运行轨迹（分册 30）。**不注入即不校验、不展示证据**，行为与 0.11.0 一致——
+   * 这既让本册可分步落地，也给 AC-30.14 的反向对照留了现成的造法。
+   */
+  steps?: ToolStepReader;
 }
 /** 生成器面向用户的文案；缺省全部为英文模板 */
 interface SkillGenerationMessages {
   /** 授权确认卡的正文（含技能名与描述插值由实现方完成） */
   confirmSkill?(draft: GeneratedSkillDraft): string;
 }
+/**
+ * 确认卡上的一步（分册 30 / FR-30.5）。
+ * `evidence` 区分「这一步在本会话真的跑过」与「模型自己补写的」。
+ */
+interface SkillTraceEvidenceStep {
+  tool: string;
+  evidence: 'trace' | 'model';
+  /** 轨迹里的原始参数（已脱敏）；无背书时缺省 */
+  traceArgs?: Record<string, unknown>;
+  /** 模型在草稿里写的参数 */
+  draftArgs?: Record<string, unknown>;
+  /** 轨迹里被脱敏掉的字段路径 */
+  redacted?: readonly string[];
+}
+interface SkillTraceEvidence {
+  steps: readonly SkillTraceEvidenceStep[];
+}
 /**
  * 技能自动生成策略。生成动作是策略而不是内核：它不进入 `AgentLoop`，
  * 而是经既有的 `ExternalToolSource` 扩展点接入（设计 02 §0）。
@@ -741,6 +773,20 @@ interface PageActionOutcome {
   /** 失败原因（英文） */
   reason?: string;
 }
+/**
+ * 执行器对一个句柄的描述。确认卡的措辞、留痕与分册 30 的参数留存共用这一份——
+ * 句柄本身是本次感知产出的不透明串，离开这次运行就没有意义。
+ * @experimental
+ */
+interface PageActionTarget {
+  role: string;
+  name?: string;
+  /** 密码类控件：确认卡打掩码，参数留存整次调用不留明文 */
+  secret?: boolean;
+  frame?: string;
+  /** 目标在本次任务临时打开的对话框里，授权面被扩大过 */
+  elevated?: boolean;
+}
 /**
  * 页面操作执行器。与 `PagePerceptionReader` 对称，同样不含 DOM 概念。
  * 实现方负责校验句柄有效性、元素可交互性，以及目标是否仍在操作范围内。
@@ -749,13 +795,7 @@ interface PageActionOutcome {
 interface PageActionExecutor {
   execute(request: PageActionRequest): Promise<PageActionOutcome> | PageActionOutcome;
   /** 目标的角色与可访问名称，供确认卡在**执行前**说清将要做什么（FR-23.2） */
-  describe(ref: string): {
-    role: string;
-    name?: string;
-    secret?: boolean;
-    frame?: string;
-    elevated?: boolean;
-  } | undefined;
+  describe(ref: string): PageActionTarget | undefined;
 }
 /** 一次页面操作的留痕（FR-23.3 的五项字段） @experimental */
 interface PageActionRecord {
@@ -816,6 +856,20 @@ declare class PageActionPolicy {
   get scope(): PageActionScopeInput;
   /** 最近的操作记录（只读展示用），新的在前 */
   get records(): readonly PageActionRecord[];
+  /**
+   * 目标是不是密码类控件（分册 30）。与确认卡上把值打成掩码用的是**同一个判定**，
+   * 不另立一套敏感字段清单。
+   *
+   * 读的是 `act()` 当时记下的结论而不是事后重查：提交或重绘后句柄会失效，
+   * 重查就会把一次普通填写误判成敏感、把内容丢掉。没操作过的句柄才现查，
+   * 查不到按敏感：不知道就别留存。
+   */
+  isSecretTarget(ref: string): boolean;
+  /**
+   * `act()` 当时看到的目标身份（分册 30）。句柄只在本次感知内有效，
+   * 只留句柄等于留了一个换次运行就失效的引用；角色与可访问名才是可重放的那部分。
+   */
+  rememberedTarget(ref: string): PageActionTarget | undefined;
   act(request: PageActionRequest): Promise<PageActionOutcome>;
 }
 //#endregion
@@ -842,4 +896,4 @@ declare function createPageActionToolSource(options: PageActionToolSourceOptions
  */
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
-export { PerceptionScopeInput as $, PageActionKind as A, PageAuditSink as B, MANAGE_TODO_TOOL as C, createTodoToolSource as Ct, PERCEIVE_PAGE_TOOL as D, PAGE_ACTION_TOOL as E, withDelegationOrigin as Et, PageActionRequest as F, ParentBudget as G, PagePerceptionPolicyOptions as H, PageActionScope as I, PerceptionAuditSink as J, PerceivedImage as K, PageActionScopeInput as L, PageActionPolicy as M, PageActionPolicyOptions as N, PERCEPTION_SYSTEM_PROMPT as O, PageActionRecord as P, PerceptionScope as Q, PageActionToolSourceOptions as R, ImageCaptureBudget as S, createSkillGenerationToolSource as St, PAGE_ACTION_SYSTEM_PROMPT as T, toFrameScopes as Tt, PagePerceptionReader as U, PagePerceptionPolicy as V, PagePerceptionToolSourceOptions as W, PerceptionRecord as X, PerceptionCaptureOptions as Y, PerceptionResult as Z, FrameNote as _, TodoToolSourceOptions as _t, DataSourceDef as a, SkillGenerationToolSourceOptions as at, GeneratedSkillDraft as b, createPageActionToolSource as bt, DataSourcePolicyOptions as c, SubAgentRunInput as ct, DelegationBudget as d, TodoEvent as dt, SKILL_GENERATION_SYSTEM_PROMPT as et, DelegationOrchestrator as f, TodoItem as ft, DelegationToolSourceOptions as g, TodoStore as gt, DelegationResult as h, TodoStatus as ht, DataSourceAuditSink as i, SkillGenerationPolicy as it, PageActionOutcome as j, PageActionExecutor as k, DataSourceRecord as l, SubAgentRunner as lt, DelegationRequest as m, TodoListener as mt, DELEGATE_TASK_TOOL as n, SkillGenerationMessages as nt, DataSourceKind as o, SkillGenerator as ot, DelegationOrchestratorOptions as p, TodoList as pt, PerceivedNode as q, DELEGATION_SYSTEM_PROMPT as r, SkillGenerationOutcome as rt, DataSourcePolicy as s, SkillGeneratorOptions as st, ActionFrameScope as t, SkillCandidateSink as tt, DataSourceTransport as u, TODO_SYSTEM_PROMPT as ut, FrameScope as v, createDelegationToolSource as vt, PAGE_ACTION_KINDS as w, toActionFrameScopes as wt, HttpDataSourceOptions as x, createPagePerceptionToolSource as xt, GENERATE_SKILL_TOOL as y, createHttpDataSourceTransport as yt, PageActionUi as z };
+export { PerceptionScope as $, PageActionKind as A, PageActionUi as B, MANAGE_TODO_TOOL as C, createPageActionToolSource as Ct, PERCEIVE_PAGE_TOOL as D, toActionFrameScopes as Dt, PAGE_ACTION_TOOL as E, createTodoToolSource as Et, PageActionRequest as F, PagePerceptionToolSourceOptions as G, PagePerceptionPolicy as H, PageActionScope as I, PerceivedNode as J, ParentBudget as K, PageActionScopeInput as L, PageActionPolicy as M, PageActionPolicyOptions as N, PERCEPTION_SYSTEM_PROMPT as O, toFrameScopes as Ot, PageActionRecord as P, PerceptionResult as Q, PageActionTarget as R, ImageCaptureBudget as S, createHttpDataSourceTransport as St, PAGE_ACTION_SYSTEM_PROMPT as T, createSkillGenerationToolSource as Tt, PagePerceptionPolicyOptions as U, PageAuditSink as V, PagePerceptionReader as W, PerceptionCaptureOptions as X, PerceptionAuditSink as Y, PerceptionRecord as Z, FrameNote as _, TodoListener as _t, DataSourceDef as a, SkillGenerationPolicy as at, GeneratedSkillDraft as b, TodoToolSourceOptions as bt, DataSourcePolicyOptions as c, SkillGeneratorOptions as ct, DelegationBudget as d, SubAgentRunInput as dt, PerceptionScopeInput as et, DelegationOrchestrator as f, SubAgentRunner as ft, DelegationToolSourceOptions as g, TodoList as gt, DelegationResult as h, TodoItem as ht, DataSourceAuditSink as i, SkillGenerationOutcome as it, PageActionOutcome as j, PageActionExecutor as k, withDelegationOrigin as kt, DataSourceRecord as l, SkillTraceEvidence as lt, DelegationRequest as m, TodoEvent as mt, DELEGATE_TASK_TOOL as n, SkillCandidateSink as nt, DataSourceKind as o, SkillGenerationToolSourceOptions as ot, DelegationOrchestratorOptions as p, TODO_SYSTEM_PROMPT as pt, PerceivedImage as q, DELEGATION_SYSTEM_PROMPT as r, SkillGenerationMessages as rt, DataSourcePolicy as s, SkillGenerator as st, ActionFrameScope as t, SKILL_GENERATION_SYSTEM_PROMPT as tt, DataSourceTransport as u, SkillTraceEvidenceStep as ut, FrameScope as v, TodoStatus as vt, PAGE_ACTION_KINDS as w, createPagePerceptionToolSource as wt, HttpDataSourceOptions as x, createDelegationToolSource as xt, GENERATE_SKILL_TOOL as y, TodoStore as yt, PageActionToolSourceOptions as z };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-C26b05fW-CdrRCRDb.js";
-import { $ as LifecycleHookContext, $n as normalizeToolError, $t as SkillSuccessReport, A as DocxTextExtractor, An as bridgeError, At as RuntimeRun, B as FsRunTraceStore, Bn as formatSkillScriptManifest, Bt as SealResult, C as CapabilityApproval, Cn as UserProfileLimits, Ct as RunTraceFile, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as WebSkillRuntimeDeps, Dt as RunTraceSummary, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as WebSkillRuntime, Et as RunTraceStore, F as ExternalToolSource, Fn as exportUserProfile, Ft as SchemaInferer, G as HookRunner, Gn as isUnsupportedRunSnapshot, Gt as SessionStore, H as FullDisclosureRouter, Hn as fromVercelStreamPart, Ht as SessionListPage, I as FS_SESSION_PAGE_SIZE, In as extractChartSpec, It as ScriptExecutionContext, J as IntegrityVerdict, Jn as mergeProfileEntries, Jt as SkillOutcomeReporter, K as HookRunnerOptions, Kn as listSkillScripts, Kt as SkillFailureReport, L as FsArtifactStore, Ln as extractTodoTraceEvents, Lt as ScriptExecutor, M as EventBus, Mn as createScriptContext, Mt as RuntimeSessionHandle, N as ExecuteLifecycleData, Nn as createWebSkillApi, Nt as SESSION_SCHEMA_VERSION, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as appendBehaviorRecords, Ot as RunUsageSummary, P as ExternalSkillProvider, Pn as diffUserProfile, Pt as SUPPORTED_DOCUMENT_MIME, Q as LifecycleHook, Qn as normalizeToolContent, Qt as SkillStateGuard, R as FsMemoryStore, Rn as extractUiSpecEvents, Rt as SealOptions, S as BridgeResponse, Sn as UserProfileImportDiff, St as RunToolCall, T as DEFAULT_LOOP_LIMITS, Tn as WebSkillApi, Tt as RunTraceMetrics, U as GoogleGenAiClient, Un as interruptedToolResult, Ut as SessionMeta, V as FsSessionStore, Vn as fromVercelResult, Vt as SerializingMemoryStore, W as GoogleGenAiClientConfig, Wn as isNetworkAllowed, Wt as SessionRecord, X as LifecycleEvent, Xn as networkUrlHost, Xt as SkillScriptDescriptor, Y as InteractLifecycleData, Yn as networkPolicyLibSource, Yt as SkillRouter, Z as LifecycleEventInit, Zn as normalizeErrorCode, Zt as SkillScriptSchemaSource, _ as BehaviorRecordKind, _n as USER_PROFILE_REFINE_PROMPT, _r as toLlmToolSpec, _t as RunResult, a as ASK_USER_TOOL, an as ToolDefinition, ar as readUserProfile, at as ProgressiveRouter, b as BridgeCapability, bn as UserProfileEntry, br as validateUiSpecEvent, bt as RunSnapshotStore, c as AgentLoop, cn as TraceClock, cr as resolveToolName, ct as READ_SKILL_FILE_INPUT_SCHEMA, d as AnthropicClient, dn as TraceRecorder, dr as schemaToForm, dt as RUN_SNAPSHOT_SCHEMA_VERSION, en as TEXT_BUDGETED_CONTENT_TYPES, er as parseBridgeRequest, et as LifecycleListener, f as AnthropicClientConfig, fn as UNSUPPORTED_DOCUMENT_MESSAGE, fr as scriptToolName, ft as RUN_TRACE_SCHEMA_VERSION, g as BehaviorRecord, gn as USER_PROFILE_PROMPT_HEADER, gr as textParts, gt as RunLimitErrorDetails, h as BEHAVIOR_RECORDS_KEY, hn as USER_PROFILE_NO_INVENTION_RULE, hr as summarizeToolCalls, ht as RouteResult, i as ASK_USER_MAX_FIELDS, in as ToolContent, ir as readProfileEntries, it as OpenAiCompatibleClientConfig, j as EMPTY_USER_PROFILE, jn as buildRenderResult, jt as RuntimeSession, k as DEFAULT_USER_PROFILE_LIMITS, kn as applyUserProfileImport, kt as RuntimePhase, l as AgentLoopConfig, ln as TraceEvent, lr as sampleBehaviorRecords, lt as READ_SKILL_FILE_TOOL, m as ApprovalScope, mn as USER_PROFILE_KEY, mr as summarizeRunUsage, mt as RouteLifecycleData, n as ASK_USER_FIELD_TYPES, nn as TextualToolContent, nr as partsToText, nt as NetworkPolicy, o as ASK_USER_TOOL_NAME, on as ToolResolution, or as refineUserProfile, ot as READ_LINKED_DOCUMENT_TOOL, p as ApprovalDecision, pn as USER_PROFILE_EXPORT_VERSION, pr as sealToolCallPairs, pt as RefineUserProfileInput, q as InstalledSkillManifest, qn as mergeCatalogEntries, qt as SkillIntegrityGuard, r as ASK_USER_INPUT_SCHEMA, rn as TodoTraceEvent, rr as readBehaviorRecords, rt as OpenAiCompatibleClient, s as ActivateLifecycleData, sn as ToolResult, sr as renderUserProfileContext, st as READ_LINKED_DOCUMENT_TOOL_NAME, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as TerminalLifecycleData, tr as parseUserProfileExport, tt as LinkedDocumentReader, u as AgentLoopDeps, un as TraceEventType, ur as schemaSourceLabel, ut as READ_SKILL_FILE_TOOL_NAME, v as BehaviorScene, vn as UnsupportedRunSnapshot, vr as toRecordDigests, vt as RunSnapshot, w as CapabilityMode, wn as VercelToolSpec, wt as RunTraceFilter, x as BridgeRequest, xn as UserProfileExport, xr as validateUiSpecNode, xt as RunTerminationReason, y as BridgeCapabilities, yn as UserProfile, yr as toVercelToolSpecs, yt as RunSnapshotListEntry, z as FsRunSnapshotStore, zn as findUnpairedToolCalls, zt as SealRecord } from "./index-D3mONFHD.js";
+import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-DLctJep_-B5G4uk2u.js";
+import { $ as LifecycleHook, $n as isUnsupportedRunSnapshot, $t as SkillRouter, A as DocxTextExtractor, An as UserProfileImportDiff, Ar as validateUiSpecNode, At as RunTraceSummary, B as FsRunTraceStore, Bn as createScriptContext, Bt as ScriptExecutionContext, C as CapabilityApproval, Cn as USER_PROFILE_NO_INVENTION_RULE, Cr as summarizeRunUsage, Ct as RunSnapshotStore, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as UserProfile, Dr as toRecordDigests, Dt as RunTraceFilter, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as UnsupportedRunSnapshot, Er as toLlmToolSpec, Et as RunTraceFile, F as ExternalToolSource, Fn as WebSkillRuntimeDeps, Ft as RuntimeSessionHandle, G as GoogleGenAiClientConfig, Gn as extractTodoTraceEvents, Gt as SerializingMemoryStore, H as FsToolStepStore, Hn as diffUserProfile, Ht as SealOptions, I as FS_SESSION_PAGE_SIZE, In as appendBehaviorRecords, It as SENSITIVE_ANNOTATION, J as InstalledSkillManifest, Jn as formatSkillScriptManifest, Jt as SessionRecord, K as HookRunner, Kn as extractUiSpecEvents, Kt as SessionListPage, L as FsArtifactStore, Ln as applyUserProfileImport, Lt as SESSION_SCHEMA_VERSION, M as EventBus, Mn as VercelToolSpec, Mt as RuntimePhase, N as ExecuteLifecycleData, Nn as WebSkillApi, Nt as RuntimeRun, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as UserProfileEntry, Or as toVercelToolSpecs, Ot as RunTraceMetrics, P as ExternalSkillProvider, Pn as WebSkillRuntime, Pt as RuntimeSession, Q as LifecycleEventInit, Qn as isNetworkAllowed, Qt as SkillOutcomeReporter, R as FsMemoryStore, Rn as bridgeError, Rt as SUPPORTED_DOCUMENT_MIME, S as BridgeResponse, Sn as USER_PROFILE_KEY, Sr as sealToolCallPairs, St as RunSnapshotListEntry, T as DEFAULT_LOOP_LIMITS, Tn as USER_PROFILE_REFINE_PROMPT, Tr as textParts, Tt as RunToolCall, U as FullDisclosureRouter, Un as exportUserProfile, Ut as SealRecord, V as FsSessionStore, Vn as createWebSkillApi, Vt as ScriptExecutor, W as GoogleGenAiClient, Wn as extractChartSpec, Wt as SealResult, X as InteractLifecycleData, Xn as fromVercelStreamPart, Xt as SkillFailureReport, Y as IntegrityVerdict, Yn as fromVercelResult, Yt as SessionStore, Z as LifecycleEvent, Zn as interruptedToolResult, Zt as SkillIntegrityGuard, _ as BehaviorRecordKind, _n as TraceEvent, _r as resolveToolName, _t as RouteLifecycleData, a as ASK_USER_TOOL, an as TerminalLifecycleData, ar as normalizeErrorCode, at as OpenAiCompatibleClient, b as BridgeCapability, bn as UNSUPPORTED_DOCUMENT_MESSAGE, br as schemaToForm, bt as RunResult, c as AgentLoop, cn as ToolContent, cr as parseBridgeRequest, ct as READ_LINKED_DOCUMENT_TOOL, d as AnthropicClient, dn as ToolResult, dr as readBehaviorRecords, dt as READ_SKILL_FILE_TOOL, en as SkillScriptDescriptor, er as listSkillScripts, et as LifecycleHookContext, f as AnthropicClientConfig, fn as ToolStepReader, fr as readProfileEntries, ft as READ_SKILL_FILE_TOOL_NAME, g as BehaviorRecord, gn as TraceClock, gr as renderUserProfileContext, gt as RefineUserProfileInput, h as BEHAVIOR_RECORDS_KEY, hn as ToolStepTrust, hr as refineUserProfile, ht as RedactedArgs, i as ASK_USER_MAX_FIELDS, in as TEXT_BUDGETED_CONTENT_TYPES, ir as networkUrlHost, it as NetworkPolicy, j as EMPTY_USER_PROFILE, jn as UserProfileLimits, jt as RunUsageSummary, k as DEFAULT_USER_PROFILE_LIMITS, kn as UserProfileExport, kr as validateUiSpecEvent, kt as RunTraceStore, l as AgentLoopConfig, ln as ToolDefinition, lr as parseUserProfileExport, lt as READ_LINKED_DOCUMENT_TOOL_NAME, m as ApprovalScope, mn as ToolStepStore, mr as redactToolStepArgs, mt as RUN_TRACE_SCHEMA_VERSION, n as ASK_USER_FIELD_TYPES, nn as SkillStateGuard, nr as mergeProfileEntries, nt as LinkedDocumentReader, o as ASK_USER_TOOL_NAME, on as TextualToolContent, or as normalizeToolContent, ot as OpenAiCompatibleClientConfig, p as ApprovalDecision, pn as ToolStepRecord, pr as readUserProfile, pt as RUN_SNAPSHOT_SCHEMA_VERSION, q as HookRunnerOptions, qn as findUnpairedToolCalls, qt as SessionMeta, r as ASK_USER_INPUT_SCHEMA, rn as SkillSuccessReport, rr as networkPolicyLibSource, rt as MAX_TOOL_STEP_ARG_BYTES, s as ActivateLifecycleData, sn as TodoTraceEvent, sr as normalizeToolError, st as ProgressiveRouter, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as SkillScriptSchemaSource, tr as mergeCatalogEntries, tt as LifecycleListener, u as AgentLoopDeps, un as ToolResolution, ur as partsToText, ut as READ_SKILL_FILE_INPUT_SCHEMA, v as BehaviorScene, vn as TraceEventType, vr as sampleBehaviorRecords, vt as RouteResult, w as CapabilityMode, wn as USER_PROFILE_PROMPT_HEADER, wr as summarizeToolCalls, wt as RunTerminationReason, x as BridgeRequest, xn as USER_PROFILE_EXPORT_VERSION, xr as scriptToolName, xt as RunSnapshot, y as BridgeCapabilities, yn as TraceRecorder, yr as schemaSourceLabel, yt as RunLimitErrorDetails, z as FsRunSnapshotStore, zn as buildRenderResult, zt as SchemaInferer } from "./index-C9pzXLKy.js";
 //#region src/version.d.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
@@ -8,4 +8,4 @@ import { $ as LifecycleHookContext, $n as normalizeToolError, $t as SkillSuccess
  */
 declare const SDK_VERSION = "0.11.0";
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };