@webskill/sdk 0.12.0 → 0.13.0

package/dist/{index-C9pzXLKy.d.ts → index-DkvBhJQy.d.ts}

@@ -557,7 +557,13 @@ type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-fail
 /** 一轮模型调用产出的一段思考正文（data.text；每轮至多一条，UI-UX5 #32） */
 'llm.thinking' |
 /** 一轮模型调用的 token 用量（data.inputTokens/outputTokens；上游不回报则无此事件，UI-UX5 #47） */
-'llm.usage' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'ui.degraded' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+'llm.usage' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' |
+/**
+ * 按需披露的工具本轮未被任何已激活技能点名，因此没写进 tool spec（分册 19）。
+ * **不是拒绝**：它照样调得动。与 `tool.denied` 分开是因为排查方向相反——
+ * `denied` 指向「技能清单写错了」，`withheld` 指向「该激活的技能还没激活」。
+ */
+'tool.withheld' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'ui.degraded' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -1313,15 +1319,24 @@ declare const READ_LINKED_DOCUMENT_TOOL_NAME = "read_linked_document";
 declare const SUPPORTED_DOCUMENT_MIME: {
   readonly pdf: "application/pdf";
   readonly docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+  readonly xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
 };
 /** docx 抽取实现由宿主注入（`DOMParser` 是浏览器 API，Node 没有；备案 D55） */
 type DocxTextExtractor = (bytes: Uint8Array) => Promise<string>;
+/** xlsx 抽取实现由宿主注入（0.13.0 FR-12.5；限制与 docx 相同） */
+type XlsxTextExtractor = (bytes: Uint8Array) => Promise<string>;
+/**
+ * PDF → 文本（0.13.0 FR-22.1）。**只用于直传被端点拒后的回退**，
+ * 不改变 PDF 默认直传的路径。SDK 不带实现：正确取到文本层要处理
+ * xref / 对象流 / FlateDecode / ToUnicode CMap，自写即 AGENTS.md §6 禁止的手写协议解析器。
+ */
+type PdfTextExtractor = (bytes: Uint8Array) => Promise<string>;
 /** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
 declare const UNSUPPORTED_DOCUMENT_MESSAGE: string;
 /**
  * 内建工具：读页面链接指向的文档。
  *
- * **始终注册**（只要宿主装配了 reader）：docx 与纯文本这条路对所有模型成立。
+ * **始终注册**（只要宿主装配了 reader）：docx / xlsx 与纯文本这条路对所有模型成立。
  * PDF 目标在模型不支持文档时**取数后拒绝**，而不是入口就拦 ——
  * 入口拦会误伤 docx，它抽成文本后根本不需要文档能力。
  */
@@ -1392,6 +1407,11 @@ declare class FsToolStepStore implements ToolStepStore {
 }
 //#endregion
 //#region src/engine/external.d.ts
+/**
+ * 工具披露层级（分册 19）。`on-demand` 只影响工具写不写进 LLM tool spec，
+ * **不影响可执行性**——要限制访问的宿主应当使用禁用（各来源自己的 enabled 通道）。
+ */
+type ToolDisclosure = 'always' | 'on-demand';
 /**
  * 外部工具来源（runtime 扩展点，mcp 包实现并插入）。
  * LLM 可见名为已消毒名（如 endpoint__greet / mcp__search）。
@@ -1399,6 +1419,13 @@ declare class FsToolStepStore implements ToolStepStore {
 interface ExternalToolSource {
   readonly kind: string;
   listToolSpecs(): Promise<LlmToolSpec[]>;
+  /**
+   * 该工具的披露层级（分册 19 / FR-19.2）。**不实现 ⇒ 该源全部工具按 `always`**（存量来源行为不变）。
+   *
+   * 每轮实时求值，不写进 `LlmToolSpec` 字段：spec 只在 run 起点与 resume 各收集一次，
+   * 凝固进 spec 会让宿主中途改配置整轮不生效。
+   */
+  disclosure?(llmToolName: string): ToolDisclosure;
   /**
    * 可选：向 run 的 system 消息追加一段说明（组件 catalog 之类的大段规格）。
    *
@@ -1561,6 +1588,12 @@ interface AgentLoopDeps {
   linkedDocuments?: LinkedDocumentReader;
   /** docx → 文本；`DOMParser` 是浏览器 API，因此由宿主注入（Node 侧无此能力，备案 D55） */
   docxExtractor?: DocxTextExtractor;
+  xlsxExtractor?: XlsxTextExtractor;
+  /**
+   * PDF → 文本（FR-22.1）。**只在直传被端点拒后用作回退**，不改变 PDF 默认直传。
+   * 不注入即没有回退能力，失败照报——与 docx / xlsx「不注入即没这个能力」同款。
+   */
+  pdfExtractor?: PdfTextExtractor;
   /** 文档读取留痕出口（FR-22.6）；不注入即不留痕，装配方要自己承担这个选择 */
   documentAudit?: {
     append(event: {
@@ -1741,6 +1774,10 @@ interface WebSkillRuntimeDeps {
   linkedDocuments?: LinkedDocumentReader;
   /** docx → 文本；不注入即 Word 文档明确报「本环境不支持」（FR-23.8） */
   docxExtractor?: DocxTextExtractor;
+  /** xlsx → 文本；不注入即 Excel 工作簿明确报「本环境不支持」（FR-12.5） */
+  xlsxExtractor?: XlsxTextExtractor;
+  /** PDF → 文本；**只在直传被端点拒后做回退**，不注入即没有回退能力（FR-22.1） */
+  pdfExtractor?: PdfTextExtractor;
   /** 文档读取留痕出口（FR-22.6） */
   documentAudit?: {
     append(event: {
@@ -2111,4 +2148,4 @@ interface RedactedArgs {
  */
 declare function redactToolStepArgs(args: Record<string, unknown>, schema: JsonSchema | undefined, trust: ToolStepTrust): RedactedArgs;
 //#endregion
-export { LifecycleHook as $, isUnsupportedRunSnapshot as $n, SkillRouter as $t, DocxTextExtractor as A, UserProfileImportDiff as An, validateUiSpecNode as Ar, RunTraceSummary as At, FsRunTraceStore as B, createScriptContext as Bn, ScriptExecutionContext as Bt, CapabilityApproval as C, USER_PROFILE_NO_INVENTION_RULE as Cn, summarizeRunUsage as Cr, RunSnapshotStore as Ct, DEFAULT_MAX_DOCUMENT_BYTES as D, UserProfile as Dn, toRecordDigests as Dr, RunTraceFilter as Dt, DEFAULT_MAX_DATA_SOURCE_BYTES as E, UnsupportedRunSnapshot as En, toLlmToolSpec as Er, RunTraceFile as Et, ExternalToolSource as F, WebSkillRuntimeDeps as Fn, RuntimeSessionHandle as Ft, GoogleGenAiClientConfig as G, extractTodoTraceEvents as Gn, SerializingMemoryStore as Gt, FsToolStepStore as H, diffUserProfile as Hn, SealOptions as Ht, FS_SESSION_PAGE_SIZE as I, appendBehaviorRecords as In, SENSITIVE_ANNOTATION as It, InstalledSkillManifest as J, formatSkillScriptManifest as Jn, SessionRecord as Jt, HookRunner as K, extractUiSpecEvents as Kn, SessionListPage as Kt, FsArtifactStore as L, applyUserProfileImport as Ln, SESSION_SCHEMA_VERSION as Lt, EventBus as M, VercelToolSpec as Mn, RuntimePhase as Mt, ExecuteLifecycleData as N, WebSkillApi as Nn, RuntimeRun as Nt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as O, UserProfileEntry as On, toVercelToolSpecs as Or, RunTraceMetrics as Ot, ExternalSkillProvider as P, WebSkillRuntime as Pn, RuntimeSession as Pt, LifecycleEventInit as Q, isNetworkAllowed as Qn, SkillOutcomeReporter as Qt, FsMemoryStore as R, bridgeError as Rn, SUPPORTED_DOCUMENT_MIME as Rt, BridgeResponse as S, USER_PROFILE_KEY as Sn, sealToolCallPairs as Sr, RunSnapshotListEntry as St, DEFAULT_LOOP_LIMITS as T, USER_PROFILE_REFINE_PROMPT as Tn, textParts as Tr, RunToolCall as Tt, FullDisclosureRouter as U, exportUserProfile as Un, SealRecord as Ut, FsSessionStore as V, createWebSkillApi as Vn, ScriptExecutor as Vt, GoogleGenAiClient as W, extractChartSpec as Wn, SealResult as Wt, InteractLifecycleData as X, fromVercelStreamPart as Xn, SkillFailureReport as Xt, IntegrityVerdict as Y, fromVercelResult as Yn, SessionStore as Yt, LifecycleEvent as Z, interruptedToolResult as Zn, SkillIntegrityGuard as Zt, BehaviorRecordKind as _, TraceEvent as _n, resolveToolName as _r, RouteLifecycleData as _t, ASK_USER_TOOL as a, TerminalLifecycleData as an, normalizeErrorCode as ar, OpenAiCompatibleClient as at, BridgeCapability as b, UNSUPPORTED_DOCUMENT_MESSAGE as bn, schemaToForm as br, RunResult as bt, AgentLoop as c, ToolContent as cn, parseBridgeRequest as cr, READ_LINKED_DOCUMENT_TOOL as ct, AnthropicClient as d, ToolResult as dn, readBehaviorRecords as dr, READ_SKILL_FILE_TOOL as dt, SkillScriptDescriptor as en, listSkillScripts as er, LifecycleHookContext as et, AnthropicClientConfig as f, ToolStepReader as fn, readProfileEntries as fr, READ_SKILL_FILE_TOOL_NAME as ft, BehaviorRecord as g, TraceClock as gn, renderUserProfileContext as gr, RefineUserProfileInput as gt, BEHAVIOR_RECORDS_KEY as h, ToolStepTrust as hn, refineUserProfile as hr, RedactedArgs as ht, ASK_USER_MAX_FIELDS as i, TEXT_BUDGETED_CONTENT_TYPES as in, networkUrlHost as ir, NetworkPolicy as it, EMPTY_USER_PROFILE as j, UserProfileLimits as jn, RunUsageSummary as jt, DEFAULT_USER_PROFILE_LIMITS as k, UserProfileExport as kn, validateUiSpecEvent as kr, RunTraceStore as kt, AgentLoopConfig as l, ToolDefinition as ln, parseUserProfileExport as lr, READ_LINKED_DOCUMENT_TOOL_NAME as lt, ApprovalScope as m, ToolStepStore as mn, redactToolStepArgs as mr, RUN_TRACE_SCHEMA_VERSION as mt, ASK_USER_FIELD_TYPES as n, SkillStateGuard as nn, mergeProfileEntries as nr, LinkedDocumentReader as nt, ASK_USER_TOOL_NAME as o, TextualToolContent as on, normalizeToolContent as or, OpenAiCompatibleClientConfig as ot, ApprovalDecision as p, ToolStepRecord as pn, readUserProfile as pr, RUN_SNAPSHOT_SCHEMA_VERSION as pt, HookRunnerOptions as q, findUnpairedToolCalls as qn, SessionMeta as qt, ASK_USER_INPUT_SCHEMA as r, SkillSuccessReport as rn, networkPolicyLibSource as rr, MAX_TOOL_STEP_ARG_BYTES as rt, ActivateLifecycleData as s, TodoTraceEvent as sn, normalizeToolError as sr, ProgressiveRouter as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, SkillScriptSchemaSource as tn, mergeCatalogEntries as tr, LifecycleListener as tt, AgentLoopDeps as u, ToolResolution as un, partsToText as ur, READ_SKILL_FILE_INPUT_SCHEMA as ut, BehaviorScene as v, TraceEventType as vn, sampleBehaviorRecords as vr, RouteResult as vt, CapabilityMode as w, USER_PROFILE_PROMPT_HEADER as wn, summarizeToolCalls as wr, RunTerminationReason as wt, BridgeRequest as x, USER_PROFILE_EXPORT_VERSION as xn, scriptToolName as xr, RunSnapshot as xt, BridgeCapabilities as y, TraceRecorder as yn, schemaSourceLabel as yr, RunLimitErrorDetails as yt, FsRunSnapshotStore as z, buildRenderResult as zn, SchemaInferer as zt };
+export { LifecycleHook as $, fromVercelStreamPart as $n, SkillOutcomeReporter as $t, DocxTextExtractor as A, UserProfileEntry as An, toRecordDigests as Ar, RunTraceStore as At, FsRunTraceStore as B, applyUserProfileImport as Bn, SchemaInferer as Bt, CapabilityApproval as C, USER_PROFILE_EXPORT_VERSION as Cn, schemaToForm as Cr, RunSnapshotListEntry as Ct, DEFAULT_MAX_DOCUMENT_BYTES as D, USER_PROFILE_REFINE_PROMPT as Dn, summarizeToolCalls as Dr, RunTraceFile as Dt, DEFAULT_MAX_DATA_SOURCE_BYTES as E, USER_PROFILE_PROMPT_HEADER as En, summarizeRunUsage as Er, RunToolCall as Et, ExternalToolSource as F, WebSkillApi as Fn, RuntimeSession as Ft, GoogleGenAiClientConfig as G, diffUserProfile as Gn, SealResult as Gt, FsToolStepStore as H, buildRenderResult as Hn, ScriptExecutor as Ht, FS_SESSION_PAGE_SIZE as I, WebSkillRuntime as In, RuntimeSessionHandle as It, InstalledSkillManifest as J, extractTodoTraceEvents as Jn, SessionMeta as Jt, HookRunner as K, exportUserProfile as Kn, SerializingMemoryStore as Kt, FsArtifactStore as L, WebSkillRuntimeDeps as Ln, SENSITIVE_ANNOTATION as Lt, EventBus as M, UserProfileImportDiff as Mn, validateUiSpecEvent as Mr, RunUsageSummary as Mt, ExecuteLifecycleData as N, UserProfileLimits as Nn, validateUiSpecNode as Nr, RuntimePhase as Nt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as O, UnsupportedRunSnapshot as On, textParts as Or, RunTraceFilter as Ot, ExternalSkillProvider as P, VercelToolSpec as Pn, RuntimeRun as Pt, LifecycleEventInit as Q, fromVercelResult as Qn, SkillIntegrityGuard as Qt, FsMemoryStore as R, XlsxTextExtractor as Rn, SESSION_SCHEMA_VERSION as Rt, BridgeResponse as S, UNSUPPORTED_DOCUMENT_MESSAGE as Sn, schemaSourceLabel as Sr, RunSnapshot as St, DEFAULT_LOOP_LIMITS as T, USER_PROFILE_NO_INVENTION_RULE as Tn, sealToolCallPairs as Tr, RunTerminationReason as Tt, FullDisclosureRouter as U, createScriptContext as Un, SealOptions as Ut, FsSessionStore as V, bridgeError as Vn, ScriptExecutionContext as Vt, GoogleGenAiClient as W, createWebSkillApi as Wn, SealRecord as Wt, InteractLifecycleData as X, findUnpairedToolCalls as Xn, SessionStore as Xt, IntegrityVerdict as Y, extractUiSpecEvents as Yn, SessionRecord as Yt, LifecycleEvent as Z, formatSkillScriptManifest as Zn, SkillFailureReport as Zt, BehaviorRecordKind as _, ToolStepTrust as _n, redactToolStepArgs as _r, RefineUserProfileInput as _t, ASK_USER_TOOL as a, TEXT_BUDGETED_CONTENT_TYPES as an, mergeProfileEntries as ar, OpenAiCompatibleClient as at, BridgeCapability as b, TraceEventType as bn, resolveToolName as br, RunLimitErrorDetails as bt, AgentLoop as c, TodoTraceEvent as cn, normalizeErrorCode as cr, ProgressiveRouter as ct, AnthropicClient as d, ToolDisclosure as dn, parseBridgeRequest as dr, READ_SKILL_FILE_INPUT_SCHEMA as dt, SkillRouter as en, interruptedToolResult as er, LifecycleHookContext as et, AnthropicClientConfig as f, ToolResolution as fn, parseUserProfileExport as fr, READ_SKILL_FILE_TOOL as ft, BehaviorRecord as g, ToolStepStore as gn, readUserProfile as gr, RedactedArgs as gt, BEHAVIOR_RECORDS_KEY as h, ToolStepRecord as hn, readProfileEntries as hr, RUN_TRACE_SCHEMA_VERSION as ht, ASK_USER_MAX_FIELDS as i, SkillSuccessReport as in, mergeCatalogEntries as ir, NetworkPolicy as it, EMPTY_USER_PROFILE as j, UserProfileExport as jn, toVercelToolSpecs as jr, RunTraceSummary as jt, DEFAULT_USER_PROFILE_LIMITS as k, UserProfile as kn, toLlmToolSpec as kr, RunTraceMetrics as kt, AgentLoopConfig as l, ToolContent as ln, normalizeToolContent as lr, READ_LINKED_DOCUMENT_TOOL as lt, ApprovalScope as m, ToolStepReader as mn, readBehaviorRecords as mr, RUN_SNAPSHOT_SCHEMA_VERSION as mt, ASK_USER_FIELD_TYPES as n, SkillScriptSchemaSource as nn, isUnsupportedRunSnapshot as nr, LinkedDocumentReader as nt, ASK_USER_TOOL_NAME as o, TerminalLifecycleData as on, networkPolicyLibSource as or, OpenAiCompatibleClientConfig as ot, ApprovalDecision as p, ToolResult as pn, partsToText as pr, READ_SKILL_FILE_TOOL_NAME as pt, HookRunnerOptions as q, extractChartSpec as qn, SessionListPage as qt, ASK_USER_INPUT_SCHEMA as r, SkillStateGuard as rn, listSkillScripts as rr, MAX_TOOL_STEP_ARG_BYTES as rt, ActivateLifecycleData as s, TextualToolContent as sn, networkUrlHost as sr, PdfTextExtractor as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, SkillScriptDescriptor as tn, isNetworkAllowed as tr, LifecycleListener as tt, AgentLoopDeps as u, ToolDefinition as un, normalizeToolError as ur, READ_LINKED_DOCUMENT_TOOL_NAME as ut, BehaviorScene as v, TraceClock as vn, refineUserProfile as vr, RouteLifecycleData as vt, CapabilityMode as w, USER_PROFILE_KEY as wn, scriptToolName as wr, RunSnapshotStore as wt, BridgeRequest as x, TraceRecorder as xn, sampleBehaviorRecords as xr, RunResult as xt, BridgeCapabilities as y, TraceEvent as yn, renderUserProfileContext as yr, RouteResult as yt, FsRunSnapshotStore as z, appendBehaviorRecords as zn, SUPPORTED_DOCUMENT_MIME as zt };

package/dist/{index-DFhU1uks.d.ts → index-iBm9tJL_.d.ts}

@@ -1,5 +1,5 @@
 import { G as RemoteUrlPolicy, S as UiBridge, Tt as WebSkillErrorCode, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-DLctJep_-B5G4uk2u.js";
-import { F as ExternalToolSource, fn as ToolStepReader } from "./index-C9pzXLKy.js";
+import { F as ExternalToolSource, mn as ToolStepReader } from "./index-DkvBhJQy.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -341,16 +341,19 @@ interface PerceptionScope {
   exclude?: readonly string[];
 }
 /**
- * 一个帧内的可感知范围（FR-24.1）。
+ * 一个帧内的可感知范围（FR-24.1 / 分册 18 FR-18.1）。
  *
- * `frame` 的选择器在**主文档**里求值，不下钻到 iframe 内部再找 iframe：
- * 允许 `a > b > c` 式的跨帧路径会让「授权面到底覆盖了什么」无法在配置里一眼看出来。
- * 要读更深的帧须再写一条——而那条也只能写主文档里的选择器，所以本版实际只支持一层。
+ * 嵌套帧写**自外向内的选择器数组**：第 1 项在主文档里求值，
+ * 第 n+1 项在第 n 项解析出的文档里求值。逐层写出来是有意的——
+ * 授权面覆盖了哪几层，配置里要能一眼看出来，不允许靠自动发现下钻。
  * @experimental
  */
 interface FrameScope {
-  /** 主文档写 `'self'`；iframe 写主文档里定位该 `<iframe>` 的选择器 */
-  frame: 'self' | string;
+  /**
+   * 主文档写 `'self'`；单层 iframe 写主文档里定位该 `<iframe>` 的选择器；
+   * 多层嵌套写逐层选择器数组（空数组等价于 `'self'`）。
+   */
+  frame: 'self' | string | readonly string[];
   include: readonly string[];
   exclude?: readonly string[];
 }
@@ -373,6 +376,7 @@ type PerceptionScopeInput = PerceptionScope | {
 declare function toFrameScopes(scope: PerceptionScopeInput): readonly FrameScope[];
 /** 某个帧未能读取的原因（FR-24.2 / FR-24.3）；不静默跳过 @experimental */
 interface FrameNote {
+  /** 帧路径的展示串（`frameLabel` 的产出，分册 18 FR-18.2） */
   frame: string;
   reason: 'cross-origin' | 'origin-changed' | 'not-found';
   /** 面向模型的英文说明，同时也是说明节点的 name */
@@ -403,13 +407,16 @@ interface PerceivedNode {
   imageNote?: string;
   /**
    * 不透明元素句柄（S10）。**仅当该节点可被操作时出现**：
-   * 它落在宿主声明的操作范围内、且是可交互角色。
-   * 由 reader 生成，只在产生它的那次感知内有效；模型不得构造或推断。
+   * 它落在宿主声明的操作范围内、且是可交互角色。由 reader 生成，模型不得构造或推断。
+   *
+   * **跨感知保留，直到元素离开文档**（分册 18 FR-18.5）。它不是安全边界——
+   * 「页面变了不能点到别的东西」由执行前的实时校验承担，不由句柄寿命承担。
    */
   ref?: string;
   /**
-   * 该节点来自哪个帧（FR-24.4）。**主文档节点不带这个字段**——
-   * 否则旧宿主的断言会凭空变化。跨帧后会出现同名控件，不标帧模型会点错。
+   * 该节点来自哪个帧（FR-24.4），取值是帧路径的展示串（`frameLabel`）。
+   * **主文档节点不带这个字段**——否则旧宿主的断言会凭空变化。
+   * 跨帧后会出现同名控件，不标帧模型会点错。
    */
   frame?: string;
   /**
@@ -447,6 +454,11 @@ interface PerceptionCaptureOptions {
   images: boolean;
   maxImageBytes: number;
   maxImages: number;
+  /**
+   * 小于该面积（平方像素）的元素视作图标，不占取像名额（0.13.0 FR-20.3）。
+   * 可选是为了不破坏既有 reader 实现；缺省与 0 都表示不过滤。
+   */
+  minImageArea?: number;
 }
 /**
  * reader 的完整产物。只实现文本的 reader 可以继续返回节点数组。
@@ -568,6 +580,8 @@ interface ImageCaptureBudget {
   enabled: boolean;
   maxImageBytes: number;
   maxImages: number;
+  /** 小于该面积（平方像素）的元素视作图标；缺省与 0 都表示不过滤（0.13.0 FR-20.3） */
+  minImageArea?: number;
 }
 /**
  * 把只读感知接到既有工具协议上。**本工具源不导出任何写入动作**（FR-10.7）：
@@ -579,6 +593,25 @@ interface ImageCaptureBudget {
  */
 declare function createPagePerceptionToolSource(options: PagePerceptionToolSourceOptions): ExternalToolSource;
 //#endregion
+//#region src/frame.d.ts
+/**
+ * 帧指称的展示形式（分册 18 FR-18.2）。
+ *
+ * 感知与操作两侧各自声明自己的 scope 类型（那是刻意的，见各自 types.ts），
+ * 但「一条帧路径写成给人看的字符串」只能有一份实现——
+ * 两处各写一遍，审计里的帧名和确认卡里的帧名就会慢慢对不上。
+ */
+/**
+ * 帧路径的稳定展示串：`'self'` / `'#a'` / `'#a >>> #b'`。
+ *
+ * `>>>` **只是展示分隔符**：CSS 选择器里可以合法出现任意字符，
+ * 反向解析这个串取回路径是不成立的，实现层一律传原始形状（D-18-1）。
+ * @experimental
+ */
+declare function frameLabel(frame: string | readonly string[]): string;
+/** 把两种形状归一成逐层选择器数组；`'self'` 与空数组都归一成空数组 @experimental */
+declare function frameSteps(frame: string | readonly string[]): readonly string[];
+//#endregion
 //#region src/prompts/perception.d.ts
 /**
  * 页面只读感知的策略提示词（设计 09 §1）。
@@ -704,15 +737,18 @@ interface PageActionScope {
   exclude?: readonly string[];
 }
 /**
- * 一个帧内的可操作范围（FR-24.1）。
+ * 一个帧内的可操作范围（FR-24.1 / 分册 18 FR-18.1）。
  *
  * 与感知侧的 `FrameScope` 同构但**独立声明**，理由同上：合并成一个类型会让
  * 「一份配置同时当感知范围和操作范围用」在类型层面合法。
  * @experimental
  */
 interface ActionFrameScope {
-  /** 主文档写 `'self'`；iframe 写主文档里定位该 `<iframe>` 的选择器 */
-  frame: 'self' | string;
+  /**
+   * 主文档写 `'self'`；单层 iframe 写主文档里定位该 `<iframe>` 的选择器；
+   * 多层嵌套写逐层选择器数组（空数组等价于 `'self'`）。
+   */
+  frame: 'self' | string | readonly string[];
   include: readonly string[];
   exclude?: readonly string[];
 }
@@ -770,6 +806,15 @@ interface PageActionOutcome {
   noop?: boolean;
   /** 本次操作新打开的模态的可访问名；授权面临时扩大要在留痕里看得见（FR-25.6） */
   elevatedModal?: string;
+  /**
+   * 本次操作后目标所在帧的地址变了（帧内跳转 / SPA 路由，分册 18 FR-18.6）。
+   * 没变时**不带**该字段：带个 `false` 会让旧宿主的断言凭空变化。
+   *
+   * 真正的跨文档导航会销毁执行上下文，那种情况拿不到本字段——固有限制，不假装。
+   */
+  navigated?: boolean;
+  /** 变更后的地址；仅 `navigated` 时带 */
+  documentUrl?: string;
   /** 失败原因（英文） */
   reason?: string;
 }
@@ -896,4 +941,4 @@ declare function createPageActionToolSource(options: PageActionToolSourceOptions
  */
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
-export { PerceptionScope as $, PageActionKind as A, PageActionUi as B, MANAGE_TODO_TOOL as C, createPageActionToolSource as Ct, PERCEIVE_PAGE_TOOL as D, toActionFrameScopes as Dt, PAGE_ACTION_TOOL as E, createTodoToolSource as Et, PageActionRequest as F, PagePerceptionToolSourceOptions as G, PagePerceptionPolicy as H, PageActionScope as I, PerceivedNode as J, ParentBudget as K, PageActionScopeInput as L, PageActionPolicy as M, PageActionPolicyOptions as N, PERCEPTION_SYSTEM_PROMPT as O, toFrameScopes as Ot, PageActionRecord as P, PerceptionResult as Q, PageActionTarget as R, ImageCaptureBudget as S, createHttpDataSourceTransport as St, PAGE_ACTION_SYSTEM_PROMPT as T, createSkillGenerationToolSource as Tt, PagePerceptionPolicyOptions as U, PageAuditSink as V, PagePerceptionReader as W, PerceptionCaptureOptions as X, PerceptionAuditSink as Y, PerceptionRecord as Z, FrameNote as _, TodoListener as _t, DataSourceDef as a, SkillGenerationPolicy as at, GeneratedSkillDraft as b, TodoToolSourceOptions as bt, DataSourcePolicyOptions as c, SkillGeneratorOptions as ct, DelegationBudget as d, SubAgentRunInput as dt, PerceptionScopeInput as et, DelegationOrchestrator as f, SubAgentRunner as ft, DelegationToolSourceOptions as g, TodoList as gt, DelegationResult as h, TodoItem as ht, DataSourceAuditSink as i, SkillGenerationOutcome as it, PageActionOutcome as j, PageActionExecutor as k, withDelegationOrigin as kt, DataSourceRecord as l, SkillTraceEvidence as lt, DelegationRequest as m, TodoEvent as mt, DELEGATE_TASK_TOOL as n, SkillCandidateSink as nt, DataSourceKind as o, SkillGenerationToolSourceOptions as ot, DelegationOrchestratorOptions as p, TODO_SYSTEM_PROMPT as pt, PerceivedImage as q, DELEGATION_SYSTEM_PROMPT as r, SkillGenerationMessages as rt, DataSourcePolicy as s, SkillGenerator as st, ActionFrameScope as t, SKILL_GENERATION_SYSTEM_PROMPT as tt, DataSourceTransport as u, SkillTraceEvidenceStep as ut, FrameScope as v, TodoStatus as vt, PAGE_ACTION_KINDS as w, createPagePerceptionToolSource as wt, HttpDataSourceOptions as x, createDelegationToolSource as xt, GENERATE_SKILL_TOOL as y, TodoStore as yt, PageActionToolSourceOptions as z };
+export { PerceptionScope as $, PageActionKind as A, toFrameScopes as At, PageActionUi as B, MANAGE_TODO_TOOL as C, createPageActionToolSource as Ct, PERCEIVE_PAGE_TOOL as D, frameLabel as Dt, PAGE_ACTION_TOOL as E, createTodoToolSource as Et, PageActionRequest as F, PagePerceptionToolSourceOptions as G, PagePerceptionPolicy as H, PageActionScope as I, PerceivedNode as J, ParentBudget as K, PageActionScopeInput as L, PageActionPolicy as M, PageActionPolicyOptions as N, PERCEPTION_SYSTEM_PROMPT as O, frameSteps as Ot, PageActionRecord as P, PerceptionResult as Q, PageActionTarget as R, ImageCaptureBudget as S, createHttpDataSourceTransport as St, PAGE_ACTION_SYSTEM_PROMPT as T, createSkillGenerationToolSource as Tt, PagePerceptionPolicyOptions as U, PageAuditSink as V, PagePerceptionReader as W, PerceptionCaptureOptions as X, PerceptionAuditSink as Y, PerceptionRecord as Z, FrameNote as _, TodoListener as _t, DataSourceDef as a, SkillGenerationPolicy as at, GeneratedSkillDraft as b, TodoToolSourceOptions as bt, DataSourcePolicyOptions as c, SkillGeneratorOptions as ct, DelegationBudget as d, SubAgentRunInput as dt, PerceptionScopeInput as et, DelegationOrchestrator as f, SubAgentRunner as ft, DelegationToolSourceOptions as g, TodoList as gt, DelegationResult as h, TodoItem as ht, DataSourceAuditSink as i, SkillGenerationOutcome as it, PageActionOutcome as j, withDelegationOrigin as jt, PageActionExecutor as k, toActionFrameScopes as kt, DataSourceRecord as l, SkillTraceEvidence as lt, DelegationRequest as m, TodoEvent as mt, DELEGATE_TASK_TOOL as n, SkillCandidateSink as nt, DataSourceKind as o, SkillGenerationToolSourceOptions as ot, DelegationOrchestratorOptions as p, TODO_SYSTEM_PROMPT as pt, PerceivedImage as q, DELEGATION_SYSTEM_PROMPT as r, SkillGenerationMessages as rt, DataSourcePolicy as s, SkillGenerator as st, ActionFrameScope as t, SKILL_GENERATION_SYSTEM_PROMPT as tt, DataSourceTransport as u, SkillTraceEvidenceStep as ut, FrameScope as v, TodoStatus as vt, PAGE_ACTION_KINDS as w, createPagePerceptionToolSource as wt, HttpDataSourceOptions as x, createDelegationToolSource as xt, GENERATE_SKILL_TOOL as y, TodoStore as yt, PageActionToolSourceOptions as z };

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-DLctJep_-B5G4uk2u.js";
-import { $ as LifecycleHook, $n as isUnsupportedRunSnapshot, $t as SkillRouter, A as DocxTextExtractor, An as UserProfileImportDiff, Ar as validateUiSpecNode, At as RunTraceSummary, B as FsRunTraceStore, Bn as createScriptContext, Bt as ScriptExecutionContext, C as CapabilityApproval, Cn as USER_PROFILE_NO_INVENTION_RULE, Cr as summarizeRunUsage, Ct as RunSnapshotStore, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as UserProfile, Dr as toRecordDigests, Dt as RunTraceFilter, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as UnsupportedRunSnapshot, Er as toLlmToolSpec, Et as RunTraceFile, F as ExternalToolSource, Fn as WebSkillRuntimeDeps, Ft as RuntimeSessionHandle, G as GoogleGenAiClientConfig, Gn as extractTodoTraceEvents, Gt as SerializingMemoryStore, H as FsToolStepStore, Hn as diffUserProfile, Ht as SealOptions, I as FS_SESSION_PAGE_SIZE, In as appendBehaviorRecords, It as SENSITIVE_ANNOTATION, J as InstalledSkillManifest, Jn as formatSkillScriptManifest, Jt as SessionRecord, K as HookRunner, Kn as extractUiSpecEvents, Kt as SessionListPage, L as FsArtifactStore, Ln as applyUserProfileImport, Lt as SESSION_SCHEMA_VERSION, M as EventBus, Mn as VercelToolSpec, Mt as RuntimePhase, N as ExecuteLifecycleData, Nn as WebSkillApi, Nt as RuntimeRun, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as UserProfileEntry, Or as toVercelToolSpecs, Ot as RunTraceMetrics, P as ExternalSkillProvider, Pn as WebSkillRuntime, Pt as RuntimeSession, Q as LifecycleEventInit, Qn as isNetworkAllowed, Qt as SkillOutcomeReporter, R as FsMemoryStore, Rn as bridgeError, Rt as SUPPORTED_DOCUMENT_MIME, S as BridgeResponse, Sn as USER_PROFILE_KEY, Sr as sealToolCallPairs, St as RunSnapshotListEntry, T as DEFAULT_LOOP_LIMITS, Tn as USER_PROFILE_REFINE_PROMPT, Tr as textParts, Tt as RunToolCall, U as FullDisclosureRouter, Un as exportUserProfile, Ut as SealRecord, V as FsSessionStore, Vn as createWebSkillApi, Vt as ScriptExecutor, W as GoogleGenAiClient, Wn as extractChartSpec, Wt as SealResult, X as InteractLifecycleData, Xn as fromVercelStreamPart, Xt as SkillFailureReport, Y as IntegrityVerdict, Yn as fromVercelResult, Yt as SessionStore, Z as LifecycleEvent, Zn as interruptedToolResult, Zt as SkillIntegrityGuard, _ as BehaviorRecordKind, _n as TraceEvent, _r as resolveToolName, _t as RouteLifecycleData, a as ASK_USER_TOOL, an as TerminalLifecycleData, ar as normalizeErrorCode, at as OpenAiCompatibleClient, b as BridgeCapability, bn as UNSUPPORTED_DOCUMENT_MESSAGE, br as schemaToForm, bt as RunResult, c as AgentLoop, cn as ToolContent, cr as parseBridgeRequest, ct as READ_LINKED_DOCUMENT_TOOL, d as AnthropicClient, dn as ToolResult, dr as readBehaviorRecords, dt as READ_SKILL_FILE_TOOL, en as SkillScriptDescriptor, er as listSkillScripts, et as LifecycleHookContext, f as AnthropicClientConfig, fn as ToolStepReader, fr as readProfileEntries, ft as READ_SKILL_FILE_TOOL_NAME, g as BehaviorRecord, gn as TraceClock, gr as renderUserProfileContext, gt as RefineUserProfileInput, h as BEHAVIOR_RECORDS_KEY, hn as ToolStepTrust, hr as refineUserProfile, ht as RedactedArgs, i as ASK_USER_MAX_FIELDS, in as TEXT_BUDGETED_CONTENT_TYPES, ir as networkUrlHost, it as NetworkPolicy, j as EMPTY_USER_PROFILE, jn as UserProfileLimits, jt as RunUsageSummary, k as DEFAULT_USER_PROFILE_LIMITS, kn as UserProfileExport, kr as validateUiSpecEvent, kt as RunTraceStore, l as AgentLoopConfig, ln as ToolDefinition, lr as parseUserProfileExport, lt as READ_LINKED_DOCUMENT_TOOL_NAME, m as ApprovalScope, mn as ToolStepStore, mr as redactToolStepArgs, mt as RUN_TRACE_SCHEMA_VERSION, n as ASK_USER_FIELD_TYPES, nn as SkillStateGuard, nr as mergeProfileEntries, nt as LinkedDocumentReader, o as ASK_USER_TOOL_NAME, on as TextualToolContent, or as normalizeToolContent, ot as OpenAiCompatibleClientConfig, p as ApprovalDecision, pn as ToolStepRecord, pr as readUserProfile, pt as RUN_SNAPSHOT_SCHEMA_VERSION, q as HookRunnerOptions, qn as findUnpairedToolCalls, qt as SessionMeta, r as ASK_USER_INPUT_SCHEMA, rn as SkillSuccessReport, rr as networkPolicyLibSource, rt as MAX_TOOL_STEP_ARG_BYTES, s as ActivateLifecycleData, sn as TodoTraceEvent, sr as normalizeToolError, st as ProgressiveRouter, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as SkillScriptSchemaSource, tr as mergeCatalogEntries, tt as LifecycleListener, u as AgentLoopDeps, un as ToolResolution, ur as partsToText, ut as READ_SKILL_FILE_INPUT_SCHEMA, v as BehaviorScene, vn as TraceEventType, vr as sampleBehaviorRecords, vt as RouteResult, w as CapabilityMode, wn as USER_PROFILE_PROMPT_HEADER, wr as summarizeToolCalls, wt as RunTerminationReason, x as BridgeRequest, xn as USER_PROFILE_EXPORT_VERSION, xr as scriptToolName, xt as RunSnapshot, y as BridgeCapabilities, yn as TraceRecorder, yr as schemaSourceLabel, yt as RunLimitErrorDetails, z as FsRunSnapshotStore, zn as buildRenderResult, zt as SchemaInferer } from "./index-C9pzXLKy.js";
+import { $ as LifecycleHook, $n as fromVercelStreamPart, $t as SkillOutcomeReporter, A as DocxTextExtractor, An as UserProfileEntry, Ar as toRecordDigests, At as RunTraceStore, B as FsRunTraceStore, Bn as applyUserProfileImport, Bt as SchemaInferer, C as CapabilityApproval, Cn as USER_PROFILE_EXPORT_VERSION, Cr as schemaToForm, Ct as RunSnapshotListEntry, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as USER_PROFILE_REFINE_PROMPT, Dr as summarizeToolCalls, Dt as RunTraceFile, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as USER_PROFILE_PROMPT_HEADER, Er as summarizeRunUsage, Et as RunToolCall, F as ExternalToolSource, Fn as WebSkillApi, Ft as RuntimeSession, G as GoogleGenAiClientConfig, Gn as diffUserProfile, Gt as SealResult, H as FsToolStepStore, Hn as buildRenderResult, Ht as ScriptExecutor, I as FS_SESSION_PAGE_SIZE, In as WebSkillRuntime, It as RuntimeSessionHandle, J as InstalledSkillManifest, Jn as extractTodoTraceEvents, Jt as SessionMeta, K as HookRunner, Kn as exportUserProfile, Kt as SerializingMemoryStore, L as FsArtifactStore, Ln as WebSkillRuntimeDeps, Lt as SENSITIVE_ANNOTATION, M as EventBus, Mn as UserProfileImportDiff, Mr as validateUiSpecEvent, Mt as RunUsageSummary, N as ExecuteLifecycleData, Nn as UserProfileLimits, Nr as validateUiSpecNode, Nt as RuntimePhase, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as UnsupportedRunSnapshot, Or as textParts, Ot as RunTraceFilter, P as ExternalSkillProvider, Pn as VercelToolSpec, Pt as RuntimeRun, Q as LifecycleEventInit, Qn as fromVercelResult, Qt as SkillIntegrityGuard, R as FsMemoryStore, Rn as XlsxTextExtractor, Rt as SESSION_SCHEMA_VERSION, S as BridgeResponse, Sn as UNSUPPORTED_DOCUMENT_MESSAGE, Sr as schemaSourceLabel, St as RunSnapshot, T as DEFAULT_LOOP_LIMITS, Tn as USER_PROFILE_NO_INVENTION_RULE, Tr as sealToolCallPairs, Tt as RunTerminationReason, U as FullDisclosureRouter, Un as createScriptContext, Ut as SealOptions, V as FsSessionStore, Vn as bridgeError, Vt as ScriptExecutionContext, W as GoogleGenAiClient, Wn as createWebSkillApi, Wt as SealRecord, X as InteractLifecycleData, Xn as findUnpairedToolCalls, Xt as SessionStore, Y as IntegrityVerdict, Yn as extractUiSpecEvents, Yt as SessionRecord, Z as LifecycleEvent, Zn as formatSkillScriptManifest, Zt as SkillFailureReport, _ as BehaviorRecordKind, _n as ToolStepTrust, _r as redactToolStepArgs, _t as RefineUserProfileInput, a as ASK_USER_TOOL, an as TEXT_BUDGETED_CONTENT_TYPES, ar as mergeProfileEntries, at as OpenAiCompatibleClient, b as BridgeCapability, bn as TraceEventType, br as resolveToolName, bt as RunLimitErrorDetails, c as AgentLoop, cn as TodoTraceEvent, cr as normalizeErrorCode, ct as ProgressiveRouter, d as AnthropicClient, dn as ToolDisclosure, dr as parseBridgeRequest, dt as READ_SKILL_FILE_INPUT_SCHEMA, en as SkillRouter, er as interruptedToolResult, et as LifecycleHookContext, f as AnthropicClientConfig, fn as ToolResolution, fr as parseUserProfileExport, ft as READ_SKILL_FILE_TOOL, g as BehaviorRecord, gn as ToolStepStore, gr as readUserProfile, gt as RedactedArgs, h as BEHAVIOR_RECORDS_KEY, hn as ToolStepRecord, hr as readProfileEntries, ht as RUN_TRACE_SCHEMA_VERSION, i as ASK_USER_MAX_FIELDS, in as SkillSuccessReport, ir as mergeCatalogEntries, it as NetworkPolicy, j as EMPTY_USER_PROFILE, jn as UserProfileExport, jr as toVercelToolSpecs, jt as RunTraceSummary, k as DEFAULT_USER_PROFILE_LIMITS, kn as UserProfile, kr as toLlmToolSpec, kt as RunTraceMetrics, l as AgentLoopConfig, ln as ToolContent, lr as normalizeToolContent, lt as READ_LINKED_DOCUMENT_TOOL, m as ApprovalScope, mn as ToolStepReader, mr as readBehaviorRecords, mt as RUN_SNAPSHOT_SCHEMA_VERSION, n as ASK_USER_FIELD_TYPES, nn as SkillScriptSchemaSource, nr as isUnsupportedRunSnapshot, nt as LinkedDocumentReader, o as ASK_USER_TOOL_NAME, on as TerminalLifecycleData, or as networkPolicyLibSource, ot as OpenAiCompatibleClientConfig, p as ApprovalDecision, pn as ToolResult, pr as partsToText, pt as READ_SKILL_FILE_TOOL_NAME, q as HookRunnerOptions, qn as extractChartSpec, qt as SessionListPage, r as ASK_USER_INPUT_SCHEMA, rn as SkillStateGuard, rr as listSkillScripts, rt as MAX_TOOL_STEP_ARG_BYTES, s as ActivateLifecycleData, sn as TextualToolContent, sr as networkUrlHost, st as PdfTextExtractor, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as SkillScriptDescriptor, tr as isNetworkAllowed, tt as LifecycleListener, u as AgentLoopDeps, un as ToolDefinition, ur as normalizeToolError, ut as READ_LINKED_DOCUMENT_TOOL_NAME, v as BehaviorScene, vn as TraceClock, vr as refineUserProfile, vt as RouteLifecycleData, w as CapabilityMode, wn as USER_PROFILE_KEY, wr as scriptToolName, wt as RunSnapshotStore, x as BridgeRequest, xn as TraceRecorder, xr as sampleBehaviorRecords, xt as RunResult, y as BridgeCapabilities, yn as TraceEvent, yr as renderUserProfileContext, yt as RouteResult, z as FsRunSnapshotStore, zn as appendBehaviorRecords, zt as SUPPORTED_DOCUMENT_MIME } from "./index-DkvBhJQy.js";
 //#region src/version.d.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
  * Version of the published `@webskill/sdk` package, injected at build time.
  * @stable
  */
-declare const SDK_VERSION = "0.11.0";
+declare const SDK_VERSION = "0.13.0";
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, type PdfTextExtractor, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolDisclosure, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, type XlsxTextExtractor, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,6 +1,6 @@
 import { A as jsonRenderer, B as resolveArchiveLimits, C as computeDigest, D as exportSkills, E as escapeXml, F as parseSkillPackManifest, G as unzipWithLimits, H as signSkill, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, N as normalizePath, O as isAtomicTempPath, P as parseSkillMarkdown, R as renderAvailableSkillsXml, S as checkSkillRules, T as detectSkillArchiveShapeFromFs, U as signaturePayloadBytes, V as resolveInsideRoot, W as stripArchiveRoot, Y as xmlRenderer, _ as assertSafePathSegment, a as MemoryFS, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, f as SKILL_SIGNATURE_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, j as keyIdOf, k as isValidSkillName, l as SKILL_NAME_MAX_LENGTH, m as SkillReader, n as DEFAULT_ARCHIVE_LIMITS, o as SIGNATURE_SCHEMA_VERSION, p as SkillDiscovery, q as verifyManifest, r as FsTrustedKeyStore, s as SKILLS_LOCKFILE, t as ATOMIC_TMP_SUFFIX_PATTERN, u as SKILL_NAME_PATTERN, v as atomicWriteText, w as detectSkillArchiveShape, x as checkDependencyCycles, y as buildCatalog, z as renderCatalogJson } from "./dist-Bev6i6Ip.js";
 import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as SUPPORTED_DOCUMENT_MIME, Bt as toLlmToolSpec, C as FsSessionStore, Ct as normalizeToolError, D as HookRunner, Dt as readProfileEntries, E as GoogleGenAiClient, Et as readBehaviorRecords, F as READ_SKILL_FILE_TOOL_NAME, Ft as schemaToForm, G as USER_PROFILE_EXPORT_VERSION, H as TEXT_BUDGETED_CONTENT_TYPES, Ht as toVercelToolSpecs, I as RUN_SNAPSHOT_SCHEMA_VERSION, It as scriptToolName, J as USER_PROFILE_PROMPT_HEADER, K as USER_PROFILE_KEY, L as RUN_TRACE_SCHEMA_VERSION, Lt as sealToolCallPairs, M as READ_LINKED_DOCUMENT_TOOL_NAME, Mt as resolveToolName, N as READ_SKILL_FILE_INPUT_SCHEMA, Nt as sampleBehaviorRecords, O as MAX_TOOL_STEP_ARG_BYTES, Ot as readUserProfile, P as READ_SKILL_FILE_TOOL, Pt as schemaSourceLabel, Q as applyUserProfileImport, R as SENSITIVE_ANNOTATION, Rt as summarizeRunUsage, S as FsRunTraceStore, St as normalizeToolContent, T as FullDisclosureRouter, Tt as parseUserProfileExport, U as TraceRecorder, Ut as validateUiSpecEvent, V as SerializingMemoryStore, Vt as toRecordDigests, W as UNSUPPORTED_DOCUMENT_MESSAGE, Wt as validateUiSpecNode, X as WebSkillRuntime, Y as USER_PROFILE_REFINE_PROMPT, Z as appendBehaviorRecords, _ as EventBus, _t as mergeCatalogEntries, a as ASK_USER_TOOL, at as extractChartSpec, b as FsMemoryStore, bt as networkUrlHost, c as AnthropicClient, ct as extractUiSpecEvents, d as DEFAULT_LOOP_LIMITS, dt as fromVercelResult, et as buildRenderResult, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as fromVercelStreamPart, g as EMPTY_USER_PROFILE, gt as listSkillScripts, h as DEFAULT_USER_PROFILE_LIMITS, ht as isUnsupportedRunSnapshot, i as ASK_USER_MAX_FIELDS, it as exportUserProfile, j as READ_LINKED_DOCUMENT_TOOL, jt as renderUserProfileContext, k as OpenAiCompatibleClient, kt as redactToolStepArgs, l as BEHAVIOR_RECORDS_KEY, lt as findUnpairedToolCalls, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as isNetworkAllowed, n as ASK_USER_FIELD_TYPES, nt as createWebSkillApi, o as ASK_USER_TOOL_NAME, ot as extractSkillCandidate, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as interruptedToolResult, q as USER_PROFILE_NO_INVENTION_RULE, r as ASK_USER_INPUT_SCHEMA, rt as diffUserProfile, s as AgentLoop, st as extractTodoTraceEvents, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as createScriptContext, u as CapabilityApproval, ut as formatSkillScriptManifest, v as FS_SESSION_PAGE_SIZE, vt as mergeProfileEntries, w as FsToolStepStore, wt as parseBridgeRequest, x as FsRunSnapshotStore, xt as normalizeErrorCode, y as FsArtifactStore, yt as networkPolicyLibSource, z as SESSION_SCHEMA_VERSION, zt as summarizeToolCalls } from "./dist-sdKFgERo.js";
+import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as SUPPORTED_DOCUMENT_MIME, Bt as toLlmToolSpec, C as FsSessionStore, Ct as normalizeToolError, D as HookRunner, Dt as readProfileEntries, E as GoogleGenAiClient, Et as readBehaviorRecords, F as READ_SKILL_FILE_TOOL_NAME, Ft as schemaToForm, G as USER_PROFILE_EXPORT_VERSION, H as TEXT_BUDGETED_CONTENT_TYPES, Ht as toVercelToolSpecs, I as RUN_SNAPSHOT_SCHEMA_VERSION, It as scriptToolName, J as USER_PROFILE_PROMPT_HEADER, K as USER_PROFILE_KEY, L as RUN_TRACE_SCHEMA_VERSION, Lt as sealToolCallPairs, M as READ_LINKED_DOCUMENT_TOOL_NAME, Mt as resolveToolName, N as READ_SKILL_FILE_INPUT_SCHEMA, Nt as sampleBehaviorRecords, O as MAX_TOOL_STEP_ARG_BYTES, Ot as readUserProfile, P as READ_SKILL_FILE_TOOL, Pt as schemaSourceLabel, Q as applyUserProfileImport, R as SENSITIVE_ANNOTATION, Rt as summarizeRunUsage, S as FsRunTraceStore, St as normalizeToolContent, T as FullDisclosureRouter, Tt as parseUserProfileExport, U as TraceRecorder, Ut as validateUiSpecEvent, V as SerializingMemoryStore, Vt as toRecordDigests, W as UNSUPPORTED_DOCUMENT_MESSAGE, Wt as validateUiSpecNode, X as WebSkillRuntime, Y as USER_PROFILE_REFINE_PROMPT, Z as appendBehaviorRecords, _ as EventBus, _t as mergeCatalogEntries, a as ASK_USER_TOOL, at as extractChartSpec, b as FsMemoryStore, bt as networkUrlHost, c as AnthropicClient, ct as extractUiSpecEvents, d as DEFAULT_LOOP_LIMITS, dt as fromVercelResult, et as buildRenderResult, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as fromVercelStreamPart, g as EMPTY_USER_PROFILE, gt as listSkillScripts, h as DEFAULT_USER_PROFILE_LIMITS, ht as isUnsupportedRunSnapshot, i as ASK_USER_MAX_FIELDS, it as exportUserProfile, j as READ_LINKED_DOCUMENT_TOOL, jt as renderUserProfileContext, k as OpenAiCompatibleClient, kt as redactToolStepArgs, l as BEHAVIOR_RECORDS_KEY, lt as findUnpairedToolCalls, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as isNetworkAllowed, n as ASK_USER_FIELD_TYPES, nt as createWebSkillApi, o as ASK_USER_TOOL_NAME, ot as extractSkillCandidate, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as interruptedToolResult, q as USER_PROFILE_NO_INVENTION_RULE, r as ASK_USER_INPUT_SCHEMA, rt as diffUserProfile, s as AgentLoop, st as extractTodoTraceEvents, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as createScriptContext, u as CapabilityApproval, ut as formatSkillScriptManifest, v as FS_SESSION_PAGE_SIZE, vt as mergeProfileEntries, w as FsToolStepStore, wt as parseBridgeRequest, x as FsRunSnapshotStore, xt as normalizeErrorCode, y as FsArtifactStore, yt as networkPolicyLibSource, z as SESSION_SCHEMA_VERSION, zt as summarizeToolCalls } from "./dist-ExSQky4C.js";
 
 //#region src/version.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
@@ -8,7 +8,7 @@ import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.11.0";
+const SDK_VERSION = "0.13.0";
 
 //#endregion
 export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { B as JsonSchema, _ as LlmToolSpec, it as SkillCatalogEntry, ot as SkillDocument } from "./types-DLctJep_-B5G4uk2u.js";
-import { F as ExternalToolSource, P as ExternalSkillProvider, dn as ToolResult, tr as mergeCatalogEntries } from "./index-C9pzXLKy.js";
+import { F as ExternalToolSource, P as ExternalSkillProvider, dn as ToolDisclosure, ir as mergeCatalogEntries, pn as ToolResult } from "./index-DkvBhJQy.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -288,6 +288,13 @@ declare class ExperimentalWebMcpAdapter {
 }
 //#endregion
 //#region src/plugin/mcpRuntimePlugin.d.ts
+/**
+ * 披露层级（分册 19）。与 runtime 的 `ToolDisclosure` 同义，保留 mcp 侧命名以便宿主按包对齐。
+ *
+ * 它与启停（`McpToolVisibility` 的三个 boolean 回调）作用面不同：
+ * 禁用同时管暴露与调用，`on-demand` **只管暴露**——没被点名的按需工具照样调得动。
+ */
+type McpToolDisclosure = ToolDisclosure;
 /**
  * 工具可见性策略（0.10.0 UI-UX5 #50.3）：端点禁用 ∨ 工具禁用 ⇒ 不进 LLM tool spec，
  * 调用侧同样拦截（模型找不到这些工具）。各判定缺省视为启用。
@@ -304,6 +311,15 @@ interface McpToolVisibility {
    * 宿主按来源关 → 该组全灭；按工具关 → 只灭一个。
    */
   isWebMcpToolEnabled?(tool: string, sourceId?: string): boolean;
+  /**
+   * 端点级披露层级（分册 19 / FR-19.1）；该端点全部工具的默认值。
+   * 返回 `undefined` = 不表态（最终落到 `always`）。
+   */
+  endpointDisclosure?(endpoint: string): McpToolDisclosure | undefined;
+  /** 端点工具级披露层级；返回 `undefined` 才继承端点级（就近覆盖） */
+  endpointToolDisclosure?(endpoint: string, tool: string): McpToolDisclosure | undefined;
+  /** WebMCP 工具级披露层级；`sourceId` 为空即未命名来源 */
+  webMcpToolDisclosure?(tool: string, sourceId?: string): McpToolDisclosure | undefined;
 }
 /**
  * 参数留存的宿主侧信任声明（分册 30 / FR-30.6）。
@@ -338,6 +354,11 @@ declare class McpRuntimePlugin implements ExternalToolSource {
     /** endpoint 不可用时的告警出口（默认 console.warn） */
     onWarning?(message: string): void;
   });
+  /**
+   * 工具的披露层级（分册 19 / FR-19.2）。本方法只**如实回答层级**，不做过滤——
+   * 「有没有技能点名」是 run 状态，mcp 包看不到，过滤发生在 agentLoop 的暴露点。
+   */
+  disclosure(llmToolName: string): McpToolDisclosure;
   /**
    * 参数留存的信任判定（分册 30 / FR-30.6）。
    * 只按宿主配置里的 endpoint / sourceId 判，服务器传回的内容进不了这条路径。
@@ -494,4 +515,4 @@ interface RemoteEndpointHandle {
  */
 declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<RemoteEndpointHandle>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, type McpSourceTrust, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, type McpSourceTrust, type McpToolDisclosure, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { M as messageOf, g as assertRemoteUrlAllowed, h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { St as normalizeToolContent, _t as mergeCatalogEntries } from "./dist-sdKFgERo.js";
+import { St as normalizeToolContent, _t as mergeCatalogEntries } from "./dist-ExSQky4C.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -311,6 +311,15 @@ const textOfContent = (content) => {
 	return "";
 };
 /**
+* 端点不提供 prompts 等于「没有临时技能」，不是加载失败。
+* 两条路径都要认：客户端本地能力断言，以及服务端回的 JSON-RPC -32601。
+*/
+const isPromptsUnsupported = (e) => {
+	if (typeof e !== "object" || e === null) return false;
+	if (e.code === -32601) return true;
+	return /does not support prompts/i.test(messageOf(e));
+};
+/**
 * 消费端：endpoint 的 prompts → 临时技能（source:'mcp'，随 endpoint 生灭）；
 * resources → 可读 references（readFile 的 path 即 resource URI）。
 */
@@ -329,7 +338,10 @@ var TemporarySkillProvider = class {
 		} catch {
 			return [];
 		}
-		const { prompts } = await client.listPrompts();
+		const { prompts } = await client.listPrompts().catch((e) => {
+			if (isPromptsUnsupported(e)) return { prompts: [] };
+			throw e;
+		});
 		const resources = await client.listResources().catch(() => ({ resources: [] }));
 		return prompts.map((p) => ({
 			name: p.name,
@@ -626,6 +638,35 @@ var McpRuntimePlugin = class {
 		}
 	}
 	/**
+	* 披露层级求值。**刻意不复用 `#visible()`**：那个的返回值同时喂给 `listToolSpecs` 与 `call`，
+	* 合并会让按需工具被 `disabledResult()` 拦住——把「只省 token」变成「限制访问」。
+	*
+	* 返回 `undefined` = 该级不表态，交由上一级决定；异常直接按 `always` 定案（不再回落），
+	* 判不出来时多给一个工具，比整轮工具集塌陷、模型转而幻觉的代价小。
+	*/
+	#disclosureOf(probe) {
+		try {
+			return probe();
+		} catch (e) {
+			this.#onWarning(`[webskill] MCP disclosure callback failed; treating the tool as always disclosed: ${e instanceof Error ? e.message : String(e)}`);
+			return "always";
+		}
+	}
+	/**
+	* 工具的披露层级（分册 19 / FR-19.2）。本方法只**如实回答层级**，不做过滤——
+	* 「有没有技能点名」是 run 状态，mcp 包看不到，过滤发生在 agentLoop 的暴露点。
+	*/
+	disclosure(llmToolName) {
+		const parsed = parseWebMcpToolLlmName(llmToolName, this.#sourceIds());
+		if (parsed !== void 0) return this.#disclosureOf(() => this.#visibility?.webMcpToolDisclosure?.(parsed.toolName, parsed.sourceId)) ?? "always";
+		for (const endpoint of this.#endpoints()) {
+			const toolName = parseEndpointToolLlmName(endpoint, llmToolName);
+			if (toolName === void 0) continue;
+			return this.#disclosureOf(() => this.#visibility?.endpointToolDisclosure?.(endpoint, toolName)) ?? this.#disclosureOf(() => this.#visibility?.endpointDisclosure?.(endpoint)) ?? "always";
+		}
+		return "always";
+	}
+	/**
 	* 参数留存的信任判定（分册 30 / FR-30.6）。
 	* 只按宿主配置里的 endpoint / sourceId 判，服务器传回的内容进不了这条路径。
 	*/

package/dist/node.d.ts

@@ -1,5 +1,5 @@
 import { $ as SignatureAuditSink, B as JsonSchema, Ct as VerifyResult, J as SKILL_MANIFEST_FILE, L as FileStat, M as ArchiveLimits, R as FileSystemProvider, S as UiBridge, _t as SkillsLockfile, b as RenderResultRequest, c as InteractionResponse, dt as SkillManifest, q as SKILLS_LOCKFILE, s as InteractionRequest, st as SkillInstallSource, ut as SkillManagerPort, xt as UnsignedPolicy, yt as TrustedKeyStore } from "./types-DLctJep_-B5G4uk2u.js";
-import { Bn as createScriptContext, Bt as ScriptExecutionContext, Fn as WebSkillRuntimeDeps, L as FsArtifactStore, Pn as WebSkillRuntime, R as FsMemoryStore, Vt as ScriptExecutor, dn as ToolResult, it as NetworkPolicy, ln as ToolDefinition, m as ApprovalScope, y as BridgeCapabilities, zt as SchemaInferer } from "./index-C9pzXLKy.js";
+import { Bt as SchemaInferer, Ht as ScriptExecutor, In as WebSkillRuntime, L as FsArtifactStore, Ln as WebSkillRuntimeDeps, R as FsMemoryStore, Un as createScriptContext, Vt as ScriptExecutionContext, it as NetworkPolicy, m as ApprovalScope, pn as ToolResult, un as ToolDefinition, y as BridgeCapabilities } from "./index-DkvBhJQy.js";
 import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-D-qHk9ZE-DheTIwAB.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";

package/dist/node.js

@@ -1,5 +1,5 @@
 import { B as resolveArchiveLimits, D as exportSkills, F as parseSkillPackManifest, G as unzipWithLimits, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, O as isAtomicTempPath, P as parseSkillMarkdown, V as resolveInsideRoot, _ as assertSafePathSegment, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, k as isValidSkillName, q as verifyManifest, s as SKILLS_LOCKFILE, v as atomicWriteText } from "./dist-Bev6i6Ip.js";
-import { $ as bridgeError, Ct as normalizeToolError, St as normalizeToolContent, X as WebSkillRuntime, b as FsMemoryStore, tt as createScriptContext, u as CapabilityApproval, wt as parseBridgeRequest, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-sdKFgERo.js";
+import { $ as bridgeError, Ct as normalizeToolError, St as normalizeToolContent, X as WebSkillRuntime, b as FsMemoryStore, tt as createScriptContext, u as CapabilityApproval, wt as parseBridgeRequest, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-ExSQky4C.js";
 import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
 import { t as AUDIT_EVENT_TYPES } from "./eventTypes-FllCrX-Z-DNDeHWoG.js";
 import { createRequire } from "node:module";

package/dist/{openUiLibrary-BKXW7Iwx-DaymVubt.js → openUiLibrary-BKXW7Iwx-CWWBVOkE.js}

@@ -1,5 +1,5 @@
 import { Dt as uiCatalog } from "./dist-DqcL6jKO.js";
-import { t as CatalogNode } from "./catalogComponents-BgAJN0p8-C3K8klJd.js";
+import { t as CatalogNode } from "./catalogComponents-BgAJN0p8-CYEXSk45.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/ui-react.d.ts

@@ -1,5 +1,5 @@
 import { C as UiSpecActionCapability, D as UiSpecSnapshot, O as UiSurfaceActionRequest, S as UiBridge, T as UiSpecEvent, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, k as UiSurfaceActionResponse, s as InteractionRequest, w as UiSpecDrafts } from "./types-DLctJep_-B5G4uk2u.js";
-import { J as SurfaceHostControlTexts, P as InteractionSpecLabels, q as SurfaceFormTexts, v as ChartFontSizes } from "./index-3fCHc1mQ.js";
+import { J as SurfaceHostControlTexts, P as InteractionSpecLabels, q as SurfaceFormTexts, v as ChartFontSizes } from "./index-C3XdItd_.js";
 import { z } from "zod";
 import React$1, { ComponentType, ReactNode } from "react";
 import "react/jsx-runtime";

package/dist/ui-react.js

@@ -1,8 +1,8 @@
 import { r as __exportAll$1 } from "./rolldown-runtime-BOF7iYI8.js";
 import { h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { Ut as validateUiSpecEvent, Wt as validateUiSpecNode } from "./dist-sdKFgERo.js";
+import { Ut as validateUiSpecEvent, Wt as validateUiSpecNode } from "./dist-ExSQky4C.js";
 import { C as applySuggestion, Dt as uiCatalog, K as resolveColumnWidths, L as interactionToUiSpec, O as collectValues, Tt as shapeInteractionValue, V as normalizeColumnWidths, W as renderMiniChart, X as toOpenUiSpecLang, Y as toJsonRenderSpec, bt as renderMiniMarkdown, gt as chartSpecFromProps, vt as interactionToFormModel } from "./dist-DqcL6jKO.js";
-import { A as useSurfaceForm, C as cardLayoutProps, D as surfaceThemeOf, E as str, F as DataTable, I as Markdown, L as Separator, M as useSurfaceHostControlTexts, N as Badge, O as useCatalogSurfaceForm, P as Button, S as SurfaceFormTextsProvider, T as paletteClass, _ as SpecTimeline, a as SpecAccordion, b as SurfaceFieldArray, c as SpecGauge, d as SpecImage, f as SpecKeyValue, g as SpecTabs, h as SpecSplit, i as EChart, j as useSurfaceFormTexts, k as useChartFontSizes, l as SpecGrid, m as SpecQuote, n as CatalogSurfaceProvider, o as SpecCallout, p as SpecProgress, r as ChartFontSizesProvider, s as SpecCarousel, u as SpecIcon, v as SurfaceButton, w as catalogComponentImpls, x as SurfaceFormButtons, y as SurfaceField } from "./catalogComponents-BgAJN0p8-C3K8klJd.js";
+import { A as useSurfaceForm, C as cardLayoutProps, D as surfaceThemeOf, E as str, F as DataTable, I as Markdown, L as Separator, M as useSurfaceHostControlTexts, N as Badge, O as useCatalogSurfaceForm, P as Button, S as SurfaceFormTextsProvider, T as paletteClass, _ as SpecTimeline, a as SpecAccordion, b as SurfaceFieldArray, c as SpecGauge, d as SpecImage, f as SpecKeyValue, g as SpecTabs, h as SpecSplit, i as EChart, j as useSurfaceFormTexts, k as useChartFontSizes, l as SpecGrid, m as SpecQuote, n as CatalogSurfaceProvider, o as SpecCallout, p as SpecProgress, r as ChartFontSizesProvider, s as SpecCarousel, u as SpecIcon, v as SurfaceButton, w as catalogComponentImpls, x as SurfaceFormButtons, y as SurfaceField } from "./catalogComponents-BgAJN0p8-CYEXSk45.js";
 import { z } from "zod";
 import * as React$1 from "react";
 import React, { createContext, useCallback, useContext, useEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
@@ -6852,8 +6852,6 @@ function SurfaceDegradationNote({ degradations }) {
 }
 /** 容器宽度未测出（jsdom / 首帧）时的最小列宽兜底：与 SPEC_TABLE_MIN_COLUMN_WIDTH.desktop（8rem @16px）一致 */
 const FALLBACK_MIN_COLUMN_PX = 128;
-/** ScrollArea 容器的左右边框合计宽度（视觉契约，测量可用宽时扣除） */
-const SCROLL_AREA_BORDER_RESERVE = 2;
 /**
 * catalog `Table` 节点的渲染实现：排序 / 分页 / 虚拟滚动。
 * 这些是宿主侧的呈现能力，不进 catalog props——模型只声明 columns 与 rows。
@@ -6875,17 +6873,21 @@ function SpecTable({ columns, rows, label, columnWidths, onDegraded }) {
 	useEffect(() => {
 		const frame = frameRef.current;
 		if (!frame || typeof ResizeObserver === "undefined") return;
+		const scroller = frame.querySelector("[data-webskill-data-table]");
+		if (!scroller) return;
 		const measure = () => {
 			const th = frame.querySelector("th");
 			const probe = th === null ? NaN : Number.parseFloat(getComputedStyle(th).minWidth);
-			setMeasured({
-				available: Math.max(0, frame.clientWidth - SCROLL_AREA_BORDER_RESERVE),
-				minCol: Number.isFinite(probe) && probe > 0 ? probe : FALLBACK_MIN_COLUMN_PX
+			const available = Math.max(0, scroller.clientWidth);
+			const minCol = Number.isFinite(probe) && probe > 0 ? probe : FALLBACK_MIN_COLUMN_PX;
+			setMeasured((prev) => prev?.available === available && prev.minCol === minCol ? prev : {
+				available,
+				minCol
 			});
 		};
 		measure();
 		const observer = new ResizeObserver(measure);
-		observer.observe(frame);
+		observer.observe(scroller);
 		return () => observer.disconnect();
 	}, []);
 	const table = useReactTable({
@@ -7505,7 +7507,7 @@ function OpenUiSpecSurface({ spec, surfaceId, actions, onAction }) {
 	const [unavailable, setUnavailable] = useState(false);
 	useEffect(() => {
 		let cancelled = false;
-		import("./openUiLibrary-BKXW7Iwx-DaymVubt.js").then((loaded) => {
+		import("./openUiLibrary-BKXW7Iwx-CWWBVOkE.js").then((loaded) => {
 			if (!cancelled) setModule(loaded);
 		}).catch(() => {
 			if (!cancelled) setUnavailable(true);