@webskill/sdk 0.12.0 → 0.14.0

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { $ as SignatureAuditSink, $t as signaturePayloadBytes, A as extractSkillCandidate, At as buildManifest, B as JsonSchema, Bt as jsonRenderer, C as UiSpecActionCapability, Ct as VerifyResult, D as UiSpecSnapshot, Dt as assertSafePathSegment, E as UiSpecPatch, Et as assertRemoteUrlAllowed, F as DEFAULT_ARCHIVE_LIMITS, Ft as detectSkillArchiveShapeFromFs, G as RemoteUrlPolicy, Gt as parseSkillPackManifest, H as MemoryFS, Ht as messageOf, I as DiscoveryResult, It as escapeXml, J as SKILL_MANIFEST_FILE, Jt as renderAvailableSkillsXml, K as SIGNATURE_SCHEMA_VERSION, Kt as readResponseWithLimit, L as FileStat, Lt as exportSkills, M as ArchiveLimits, Mt as checkSkillRules, N as CatalogRenderer, Nt as computeDigest, O as UiSurfaceActionRequest, Ot as atomicWriteText, P as CryptoKeyLike, Pt as detectSkillArchiveShape, Q as SKILL_SIGNATURE_FILE, Qt as signSkill, R as FileSystemProvider, Rt as isAtomicTempPath, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, Ut as normalizePath, V as MANIFEST_EXCLUDED_FILES, Vt as keyIdOf, W as PageQuery, Wt as parseSkillMarkdown, X as SKILL_NAME_PATTERN, Xt as resolveArchiveLimits, Y as SKILL_NAME_MAX_LENGTH, Yt as renderCatalogJson, Z as SKILL_PACK_FILE, Zt as resolveInsideRoot, _ as LlmToolSpec, _t as SkillsLockfile, a as InteractionOrigin, an as xmlRenderer, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, ct as SkillIssue, d as LlmContentPart, dt as SkillManifest, en as stripArchiveRoot, et as SignatureVerdict, f as LlmMessage, ft as SkillMetadata, g as LlmToolCall, gt as SkillSource, h as LlmTokenUsage, ht as SkillSignature, i as FormField, in as verifySkillSignature, it as SkillCatalogEntry, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as checkDependencyCycles, k as UiSurfaceActionResponse, kt as buildCatalog, l as LlmClient, lt as SkillLocation, m as LlmStreamEvent, mt as SkillReader, n as ArtifactStore, nn as validateSkills, nt as SkillArchiveShape, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, pt as SkillPackManifest, q as SKILLS_LOCKFILE, qt as readSkillSignature, r as ChartSpec, rn as verifyManifest, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, tn as unzipWithLimits, tt as SkillArchiveDetection, u as LlmCompleteInput, ut as SkillManagerPort, v as MemoryStore, vt as TrustedKey, w as UiSpecDrafts, wt as WebSkillError, x as SkillCandidateMarker, xt as UnsignedPolicy, y as RenderBlock, yt as TrustedKeyStore, z as FsTrustedKeyStore, zt as isValidSkillName } from "./types-DLctJep_-B5G4uk2u.js";
-import { $ as LifecycleHook, $n as isUnsupportedRunSnapshot, $t as SkillRouter, A as DocxTextExtractor, An as UserProfileImportDiff, Ar as validateUiSpecNode, At as RunTraceSummary, B as FsRunTraceStore, Bn as createScriptContext, Bt as ScriptExecutionContext, C as CapabilityApproval, Cn as USER_PROFILE_NO_INVENTION_RULE, Cr as summarizeRunUsage, Ct as RunSnapshotStore, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as UserProfile, Dr as toRecordDigests, Dt as RunTraceFilter, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as UnsupportedRunSnapshot, Er as toLlmToolSpec, Et as RunTraceFile, F as ExternalToolSource, Fn as WebSkillRuntimeDeps, Ft as RuntimeSessionHandle, G as GoogleGenAiClientConfig, Gn as extractTodoTraceEvents, Gt as SerializingMemoryStore, H as FsToolStepStore, Hn as diffUserProfile, Ht as SealOptions, I as FS_SESSION_PAGE_SIZE, In as appendBehaviorRecords, It as SENSITIVE_ANNOTATION, J as InstalledSkillManifest, Jn as formatSkillScriptManifest, Jt as SessionRecord, K as HookRunner, Kn as extractUiSpecEvents, Kt as SessionListPage, L as FsArtifactStore, Ln as applyUserProfileImport, Lt as SESSION_SCHEMA_VERSION, M as EventBus, Mn as VercelToolSpec, Mt as RuntimePhase, N as ExecuteLifecycleData, Nn as WebSkillApi, Nt as RuntimeRun, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as UserProfileEntry, Or as toVercelToolSpecs, Ot as RunTraceMetrics, P as ExternalSkillProvider, Pn as WebSkillRuntime, Pt as RuntimeSession, Q as LifecycleEventInit, Qn as isNetworkAllowed, Qt as SkillOutcomeReporter, R as FsMemoryStore, Rn as bridgeError, Rt as SUPPORTED_DOCUMENT_MIME, S as BridgeResponse, Sn as USER_PROFILE_KEY, Sr as sealToolCallPairs, St as RunSnapshotListEntry, T as DEFAULT_LOOP_LIMITS, Tn as USER_PROFILE_REFINE_PROMPT, Tr as textParts, Tt as RunToolCall, U as FullDisclosureRouter, Un as exportUserProfile, Ut as SealRecord, V as FsSessionStore, Vn as createWebSkillApi, Vt as ScriptExecutor, W as GoogleGenAiClient, Wn as extractChartSpec, Wt as SealResult, X as InteractLifecycleData, Xn as fromVercelStreamPart, Xt as SkillFailureReport, Y as IntegrityVerdict, Yn as fromVercelResult, Yt as SessionStore, Z as LifecycleEvent, Zn as interruptedToolResult, Zt as SkillIntegrityGuard, _ as BehaviorRecordKind, _n as TraceEvent, _r as resolveToolName, _t as RouteLifecycleData, a as ASK_USER_TOOL, an as TerminalLifecycleData, ar as normalizeErrorCode, at as OpenAiCompatibleClient, b as BridgeCapability, bn as UNSUPPORTED_DOCUMENT_MESSAGE, br as schemaToForm, bt as RunResult, c as AgentLoop, cn as ToolContent, cr as parseBridgeRequest, ct as READ_LINKED_DOCUMENT_TOOL, d as AnthropicClient, dn as ToolResult, dr as readBehaviorRecords, dt as READ_SKILL_FILE_TOOL, en as SkillScriptDescriptor, er as listSkillScripts, et as LifecycleHookContext, f as AnthropicClientConfig, fn as ToolStepReader, fr as readProfileEntries, ft as READ_SKILL_FILE_TOOL_NAME, g as BehaviorRecord, gn as TraceClock, gr as renderUserProfileContext, gt as RefineUserProfileInput, h as BEHAVIOR_RECORDS_KEY, hn as ToolStepTrust, hr as refineUserProfile, ht as RedactedArgs, i as ASK_USER_MAX_FIELDS, in as TEXT_BUDGETED_CONTENT_TYPES, ir as networkUrlHost, it as NetworkPolicy, j as EMPTY_USER_PROFILE, jn as UserProfileLimits, jt as RunUsageSummary, k as DEFAULT_USER_PROFILE_LIMITS, kn as UserProfileExport, kr as validateUiSpecEvent, kt as RunTraceStore, l as AgentLoopConfig, ln as ToolDefinition, lr as parseUserProfileExport, lt as READ_LINKED_DOCUMENT_TOOL_NAME, m as ApprovalScope, mn as ToolStepStore, mr as redactToolStepArgs, mt as RUN_TRACE_SCHEMA_VERSION, n as ASK_USER_FIELD_TYPES, nn as SkillStateGuard, nr as mergeProfileEntries, nt as LinkedDocumentReader, o as ASK_USER_TOOL_NAME, on as TextualToolContent, or as normalizeToolContent, ot as OpenAiCompatibleClientConfig, p as ApprovalDecision, pn as ToolStepRecord, pr as readUserProfile, pt as RUN_SNAPSHOT_SCHEMA_VERSION, q as HookRunnerOptions, qn as findUnpairedToolCalls, qt as SessionMeta, r as ASK_USER_INPUT_SCHEMA, rn as SkillSuccessReport, rr as networkPolicyLibSource, rt as MAX_TOOL_STEP_ARG_BYTES, s as ActivateLifecycleData, sn as TodoTraceEvent, sr as normalizeToolError, st as ProgressiveRouter, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as SkillScriptSchemaSource, tr as mergeCatalogEntries, tt as LifecycleListener, u as AgentLoopDeps, un as ToolResolution, ur as partsToText, ut as READ_SKILL_FILE_INPUT_SCHEMA, v as BehaviorScene, vn as TraceEventType, vr as sampleBehaviorRecords, vt as RouteResult, w as CapabilityMode, wn as USER_PROFILE_PROMPT_HEADER, wr as summarizeToolCalls, wt as RunTerminationReason, x as BridgeRequest, xn as USER_PROFILE_EXPORT_VERSION, xr as scriptToolName, xt as RunSnapshot, y as BridgeCapabilities, yn as TraceRecorder, yr as schemaSourceLabel, yt as RunLimitErrorDetails, z as FsRunSnapshotStore, zn as buildRenderResult, zt as SchemaInferer } from "./index-C9pzXLKy.js";
+import { $ as SKILLS_LOCKFILE, $t as normalizePath, A as extractSkillCandidate, At as VerifyResult, B as DiscoveryResult, Bt as checkSkillRules, C as UiSpecActionCapability, Ct as SkillsLockfile, D as UiSpecSnapshot, Dt as UiSpecNode, E as UiSpecPatch, Et as TrustedKeyStore, F as CatalogRenderer, Ft as assertSafePathSegment, G as IMAGE_MIME_TYPES, Gt as escapeXml, H as FileStat, Ht as computeDigest, I as ChatAttachmentKind, It as atomicWriteText, J as MemoryFS, Jt as isAtomicTempPath, K as JsonSchema, Kt as exportSkills, L as CryptoKeyLike, Lt as buildCatalog, M as ATTACHMENT_TEXT_LIMIT, Mt as WebSkillErrorCode, N as ArchiveLimits, Nt as XLSX_MIME, O as UiSurfaceActionRequest, Ot as UnsignedPolicy, P as AttachmentTextInput, Pt as assertRemoteUrlAllowed, Q as SIGNATURE_SCHEMA_VERSION, Qt as messageOf, R as DEFAULT_ARCHIVE_LIMITS, Rt as buildManifest, S as UiBridge, St as SkillSource, T as UiSpecEvent, Tt as TrustedKey, U as FileSystemProvider, Ut as detectSkillArchiveShape, V as FILE_MIME_TYPES, Vt as classifyAttachment, W as FsTrustedKeyStore, Wt as detectSkillArchiveShapeFromFs, X as PageQuery, Xt as jsonRenderer, Y as Page, Yt as isValidSkillName, Z as RemoteUrlPolicy, Zt as keyIdOf, _ as LlmToolSpec, _t as SkillManifest, a as InteractionOrigin, an as renderCatalogJson, at as SignatureAuditSink, b as RenderResultRequest, bt as SkillReader, c as InteractionResponse, cn as signSkill, ct as SkillArchiveShape, d as LlmContentPart, dn as unzipWithLimits, dt as SkillDiscovery, en as parseSkillMarkdown, et as SKILL_MANIFEST_FILE, f as LlmMessage, fn as validateSkills, ft as SkillDocument, g as LlmToolCall, gt as SkillManagerPort, h as LlmTokenUsage, hn as xmlRenderer, ht as SkillLocation, i as FormField, in as renderAvailableSkillsXml, it as SKILL_SIGNATURE_FILE, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as WebSkillError, k as UiSurfaceActionResponse, kt as ValidationReport, l as LlmClient, ln as signaturePayloadBytes, lt as SkillCatalog, m as LlmStreamEvent, mn as verifySkillSignature, mt as SkillIssue, n as ArtifactStore, nn as readResponseWithLimit, nt as SKILL_NAME_PATTERN, o as InteractionPolicy, on as resolveArchiveLimits, ot as SignatureVerdict, p as LlmResponse, pn as verifyManifest, pt as SkillInstallSource, q as MANIFEST_EXCLUDED_FILES, qt as formatAttachmentText, r as ChartSpec, rn as readSkillSignature, rt as SKILL_PACK_FILE, s as InteractionRequest, sn as resolveInsideRoot, st as SkillArchiveDetection, t as Artifact, tn as parseSkillPackManifest, tt as SKILL_NAME_MAX_LENGTH, u as LlmCompleteInput, un as stripArchiveRoot, ut as SkillCatalogEntry, v as MemoryStore, vt as SkillMetadata, w as UiSpecDrafts, wt as TEXT_EXTENSIONS, x as SkillCandidateMarker, xt as SkillSignature, y as RenderBlock, yt as SkillPackManifest, z as DOCX_MIME, zt as checkDependencyCycles } from "./types-C3V6lAeO-BgeOvc1Y.js";
+import { $ as LifecycleEventInit, $n as formatSkillScriptManifest, $t as SkillIntegrityGuard, A as DataSourceInfo, An as UnsupportedRunSnapshot, Ar as textParts, At as RunTraceMetrics, B as FsRunSnapshotStore, Bn as XlsxTextExtractor, Bt as SUPPORTED_DOCUMENT_MIME, C as CapabilityApproval, Cn as TraceRecorder, Cr as sampleBehaviorRecords, Ct as RunSnapshot, D as DEFAULT_MAX_DOCUMENT_BYTES, Dn as USER_PROFILE_NO_INVENTION_RULE, Dr as sealToolCallPairs, Dt as RunToolCall, E as DEFAULT_MAX_DATA_SOURCE_BYTES, En as USER_PROFILE_KEY, Er as scriptToolName, Et as RunTerminationReason, F as ExternalSkillProvider, Fn as UserProfileLimits, Fr as validateUiSpecEvent, Ft as RuntimeRun, G as GoogleGenAiClient, Gn as createScriptContext, Gt as SealRecord, H as FsSessionStore, Hn as applyUserProfileImport, Ht as ScriptExecutionContext, I as ExternalToolSource, In as VercelToolSpec, Ir as validateUiSpecNode, It as RuntimeSession, J as HookRunnerOptions, Jn as exportUserProfile, Jt as SessionListPage, K as GoogleGenAiClientConfig, Kn as createWebSkillApi, Kt as SealResult, L as FS_SESSION_PAGE_SIZE, Ln as WebSkillApi, Lt as RuntimeSessionHandle, M as EMPTY_USER_PROFILE, Mn as UserProfileEntry, Mr as toLlmToolSpec, Mt as RunTraceSummary, N as EventBus, Nn as UserProfileExport, Nr as toRecordDigests, Nt as RunUsageSummary, O as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, On as USER_PROFILE_PROMPT_HEADER, Or as summarizeRunUsage, Ot as RunTraceFile, P as ExecuteLifecycleData, Pn as UserProfileImportDiff, Pr as toVercelToolSpecs, Pt as RuntimePhase, Q as LifecycleEvent, Qn as findUnpairedToolCalls, Qt as SkillFailureReport, R as FsArtifactStore, Rn as WebSkillRuntime, Rt as SENSITIVE_ANNOTATION, S as BridgeResponse, Sn as TraceEventType, Sr as resolveToolName, St as RunResult, T as DEFAULT_LOOP_LIMITS, Tn as USER_PROFILE_EXPORT_VERSION, Tr as schemaToForm, Tt as RunSnapshotStore, U as FsToolStepStore, Un as bridgeError, Ut as ScriptExecutor, V as FsRunTraceStore, Vn as appendBehaviorRecords, Vt as SchemaInferer, W as FullDisclosureRouter, Wn as buildRenderResult, Wt as SealOptions, X as IntegrityVerdict, Xn as extractTodoTraceEvents, Xt as SessionRecord, Y as InstalledSkillManifest, Yn as extractChartSpec, Yt as SessionMeta, Z as InteractLifecycleData, Zn as extractUiSpecEvents, Zt as SessionStore, _ as BehaviorRecordKind, _n as ToolStepRecord, _r as readProfileEntries, _t as RedactedArgs, a as ASK_USER_TOOL, an as SkillSuccessReport, ar as listSkillScripts, at as NetworkPolicy, b as BridgeCapability, bn as TraceClock, br as refineUserProfile, bt as RouteResult, c as AgentLoop, cn as TextualToolContent, cr as networkPolicyLibSource, ct as PdfTextExtractor, d as AnthropicClient, dn as ToolContent, dr as normalizeToolContent, dt as READ_LINKED_DOCUMENT_TOOL_NAME, en as SkillOutcomeReporter, er as fromVercelResult, et as LifecycleHook, f as AnthropicClientConfig, fn as ToolDefinition, fr as normalizeToolError, ft as READ_SKILL_FILE_INPUT_SCHEMA, g as BehaviorRecord, gn as ToolStepReader, gr as readBehaviorRecords, gt as RUN_TRACE_SCHEMA_VERSION, h as BEHAVIOR_RECORDS_KEY, hn as ToolResult, hr as partsToText, ht as RUN_SNAPSHOT_SCHEMA_VERSION, i as ASK_USER_MAX_FIELDS, in as SkillStateGuard, ir as isUnsupportedRunSnapshot, it as MAX_TOOL_STEP_ARG_BYTES, j as DocxTextExtractor, jn as UserProfile, jr as toBase64, jt as RunTraceStore, k as DEFAULT_USER_PROFILE_LIMITS, kn as USER_PROFILE_REFINE_PROMPT, kr as summarizeToolCalls, kt as RunTraceFilter, l as AgentLoopConfig, ln as TodoTraceEvent, lr as networkUrlHost, lt as ProgressiveRouter, m as ApprovalScope, mn as ToolResolution, mr as parseUserProfileExport, mt as READ_SKILL_FILE_TOOL_NAME, n as ASK_USER_FIELD_TYPES, nn as SkillScriptDescriptor, nr as interruptedToolResult, nt as LifecycleListener, o as ASK_USER_TOOL_NAME, on as TEXT_BUDGETED_CONTENT_TYPES, or as mergeCatalogEntries, ot as OpenAiCompatibleClient, p as ApprovalDecision, pn as ToolDisclosure, pr as parseBridgeRequest, pt as READ_SKILL_FILE_TOOL, q as HookRunner, qn as diffUserProfile, qt as SerializingMemoryStore, r as ASK_USER_INPUT_SCHEMA, rn as SkillScriptSchemaSource, rr as isNetworkAllowed, rt as LinkedDocumentReader, s as ActivateLifecycleData, sn as TerminalLifecycleData, sr as mergeProfileEntries, st as OpenAiCompatibleClientConfig, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as SkillRouter, tr as fromVercelStreamPart, tt as LifecycleHookContext, u as AgentLoopDeps, un as ToolCallContext, ur as normalizeErrorCode, ut as READ_LINKED_DOCUMENT_TOOL, v as BehaviorScene, vn as ToolStepStore, vr as readUserProfile, vt as RefineUserProfileInput, w as CapabilityMode, wn as UNSUPPORTED_DOCUMENT_MESSAGE, wr as schemaSourceLabel, wt as RunSnapshotListEntry, x as BridgeRequest, xn as TraceEvent, xr as renderUserProfileContext, xt as RunLimitErrorDetails, y as BridgeCapabilities, yn as ToolStepTrust, yr as redactToolStepArgs, yt as RouteLifecycleData, z as FsMemoryStore, zn as WebSkillRuntimeDeps, zt as SESSION_SCHEMA_VERSION } from "./index-CWoKOFBP.js";
 //#region src/version.d.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
  * Version of the published `@webskill/sdk` package, injected at build time.
  * @stable
  */
-declare const SDK_VERSION = "0.11.0";
+declare const SDK_VERSION = "0.14.0";
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type AttachmentTextInput, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type ChatAttachmentKind, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, type DataSourceInfo, type DiscoveryResult, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, IMAGE_MIME_TYPES, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, type PdfTextExtractor, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolCallContext, type ToolContent, type ToolDefinition, type ToolDisclosure, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, XLSX_MIME, type XlsxTextExtractor, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,6 +1,6 @@
-import { A as jsonRenderer, B as resolveArchiveLimits, C as computeDigest, D as exportSkills, E as escapeXml, F as parseSkillPackManifest, G as unzipWithLimits, H as signSkill, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, N as normalizePath, O as isAtomicTempPath, P as parseSkillMarkdown, R as renderAvailableSkillsXml, S as checkSkillRules, T as detectSkillArchiveShapeFromFs, U as signaturePayloadBytes, V as resolveInsideRoot, W as stripArchiveRoot, Y as xmlRenderer, _ as assertSafePathSegment, a as MemoryFS, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, f as SKILL_SIGNATURE_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, j as keyIdOf, k as isValidSkillName, l as SKILL_NAME_MAX_LENGTH, m as SkillReader, n as DEFAULT_ARCHIVE_LIMITS, o as SIGNATURE_SCHEMA_VERSION, p as SkillDiscovery, q as verifyManifest, r as FsTrustedKeyStore, s as SKILLS_LOCKFILE, t as ATOMIC_TMP_SUFFIX_PATTERN, u as SKILL_NAME_PATTERN, v as atomicWriteText, w as detectSkillArchiveShape, x as checkDependencyCycles, y as buildCatalog, z as renderCatalogJson } from "./dist-Bev6i6Ip.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as SUPPORTED_DOCUMENT_MIME, Bt as toLlmToolSpec, C as FsSessionStore, Ct as normalizeToolError, D as HookRunner, Dt as readProfileEntries, E as GoogleGenAiClient, Et as readBehaviorRecords, F as READ_SKILL_FILE_TOOL_NAME, Ft as schemaToForm, G as USER_PROFILE_EXPORT_VERSION, H as TEXT_BUDGETED_CONTENT_TYPES, Ht as toVercelToolSpecs, I as RUN_SNAPSHOT_SCHEMA_VERSION, It as scriptToolName, J as USER_PROFILE_PROMPT_HEADER, K as USER_PROFILE_KEY, L as RUN_TRACE_SCHEMA_VERSION, Lt as sealToolCallPairs, M as READ_LINKED_DOCUMENT_TOOL_NAME, Mt as resolveToolName, N as READ_SKILL_FILE_INPUT_SCHEMA, Nt as sampleBehaviorRecords, O as MAX_TOOL_STEP_ARG_BYTES, Ot as readUserProfile, P as READ_SKILL_FILE_TOOL, Pt as schemaSourceLabel, Q as applyUserProfileImport, R as SENSITIVE_ANNOTATION, Rt as summarizeRunUsage, S as FsRunTraceStore, St as normalizeToolContent, T as FullDisclosureRouter, Tt as parseUserProfileExport, U as TraceRecorder, Ut as validateUiSpecEvent, V as SerializingMemoryStore, Vt as toRecordDigests, W as UNSUPPORTED_DOCUMENT_MESSAGE, Wt as validateUiSpecNode, X as WebSkillRuntime, Y as USER_PROFILE_REFINE_PROMPT, Z as appendBehaviorRecords, _ as EventBus, _t as mergeCatalogEntries, a as ASK_USER_TOOL, at as extractChartSpec, b as FsMemoryStore, bt as networkUrlHost, c as AnthropicClient, ct as extractUiSpecEvents, d as DEFAULT_LOOP_LIMITS, dt as fromVercelResult, et as buildRenderResult, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as fromVercelStreamPart, g as EMPTY_USER_PROFILE, gt as listSkillScripts, h as DEFAULT_USER_PROFILE_LIMITS, ht as isUnsupportedRunSnapshot, i as ASK_USER_MAX_FIELDS, it as exportUserProfile, j as READ_LINKED_DOCUMENT_TOOL, jt as renderUserProfileContext, k as OpenAiCompatibleClient, kt as redactToolStepArgs, l as BEHAVIOR_RECORDS_KEY, lt as findUnpairedToolCalls, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as isNetworkAllowed, n as ASK_USER_FIELD_TYPES, nt as createWebSkillApi, o as ASK_USER_TOOL_NAME, ot as extractSkillCandidate, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as interruptedToolResult, q as USER_PROFILE_NO_INVENTION_RULE, r as ASK_USER_INPUT_SCHEMA, rt as diffUserProfile, s as AgentLoop, st as extractTodoTraceEvents, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as createScriptContext, u as CapabilityApproval, ut as formatSkillScriptManifest, v as FS_SESSION_PAGE_SIZE, vt as mergeProfileEntries, w as FsToolStepStore, wt as parseBridgeRequest, x as FsRunSnapshotStore, xt as normalizeErrorCode, y as FsArtifactStore, yt as networkPolicyLibSource, z as SESSION_SCHEMA_VERSION, zt as summarizeToolCalls } from "./dist-sdKFgERo.js";
+import { $ as unzipWithLimits, A as computeDigest, B as messageOf, C as assertSafePathSegment, D as checkDependencyCycles, E as buildManifest, F as formatAttachmentText, G as readSkillSignature, H as parseSkillMarkdown, I as isAtomicTempPath, J as resolveArchiveLimits, K as renderAvailableSkillsXml, L as isValidSkillName, M as detectSkillArchiveShapeFromFs, N as escapeXml, O as checkSkillRules, P as exportSkills, Q as stripArchiveRoot, R as jsonRenderer, S as assertRemoteUrlAllowed, T as buildCatalog, U as parseSkillPackManifest, V as normalizePath, W as readResponseWithLimit, X as signSkill, Y as resolveInsideRoot, Z as signaturePayloadBytes, _ as SkillDiscovery, a as FILE_MIME_TYPES, b as WebSkillError, c as MANIFEST_EXCLUDED_FILES, d as SKILLS_LOCKFILE, et as validateSkills, f as SKILL_MANIFEST_FILE, g as SKILL_SIGNATURE_FILE, h as SKILL_PACK_FILE, i as DOCX_MIME, j as detectSkillArchiveShape, k as classifyAttachment, l as MemoryFS, m as SKILL_NAME_PATTERN, n as ATTACHMENT_TEXT_LIMIT, nt as verifySkillSignature, o as FsTrustedKeyStore, p as SKILL_NAME_MAX_LENGTH, q as renderCatalogJson, r as DEFAULT_ARCHIVE_LIMITS, rt as xmlRenderer, s as IMAGE_MIME_TYPES, t as ATOMIC_TMP_SUFFIX_PATTERN, tt as verifyManifest, u as SIGNATURE_SCHEMA_VERSION, v as SkillReader, w as atomicWriteText, x as XLSX_MIME, y as TEXT_EXTENSIONS, z as keyIdOf } from "./dist-D5YhlCdY.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BxtUkrgV.js";
+import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as SUPPORTED_DOCUMENT_MIME, Bt as toBase64, C as FsSessionStore, Ct as normalizeToolError, D as HookRunner, Dt as readProfileEntries, E as GoogleGenAiClient, Et as readBehaviorRecords, F as READ_SKILL_FILE_TOOL_NAME, Ft as schemaToForm, G as USER_PROFILE_EXPORT_VERSION, Gt as validateUiSpecNode, H as TEXT_BUDGETED_CONTENT_TYPES, Ht as toRecordDigests, I as RUN_SNAPSHOT_SCHEMA_VERSION, It as scriptToolName, J as USER_PROFILE_PROMPT_HEADER, K as USER_PROFILE_KEY, L as RUN_TRACE_SCHEMA_VERSION, Lt as sealToolCallPairs, M as READ_LINKED_DOCUMENT_TOOL_NAME, Mt as resolveToolName, N as READ_SKILL_FILE_INPUT_SCHEMA, Nt as sampleBehaviorRecords, O as MAX_TOOL_STEP_ARG_BYTES, Ot as readUserProfile, P as READ_SKILL_FILE_TOOL, Pt as schemaSourceLabel, Q as applyUserProfileImport, R as SENSITIVE_ANNOTATION, Rt as summarizeRunUsage, S as FsRunTraceStore, St as normalizeToolContent, T as FullDisclosureRouter, Tt as parseUserProfileExport, U as TraceRecorder, Ut as toVercelToolSpecs, V as SerializingMemoryStore, Vt as toLlmToolSpec, W as UNSUPPORTED_DOCUMENT_MESSAGE, Wt as validateUiSpecEvent, X as WebSkillRuntime, Y as USER_PROFILE_REFINE_PROMPT, Z as appendBehaviorRecords, _ as EventBus, _t as mergeCatalogEntries, a as ASK_USER_TOOL, at as extractChartSpec, b as FsMemoryStore, bt as networkUrlHost, c as AnthropicClient, ct as extractUiSpecEvents, d as DEFAULT_LOOP_LIMITS, dt as fromVercelResult, et as buildRenderResult, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as fromVercelStreamPart, g as EMPTY_USER_PROFILE, gt as listSkillScripts, h as DEFAULT_USER_PROFILE_LIMITS, ht as isUnsupportedRunSnapshot, i as ASK_USER_MAX_FIELDS, it as exportUserProfile, j as READ_LINKED_DOCUMENT_TOOL, jt as renderUserProfileContext, k as OpenAiCompatibleClient, kt as redactToolStepArgs, l as BEHAVIOR_RECORDS_KEY, lt as findUnpairedToolCalls, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as isNetworkAllowed, n as ASK_USER_FIELD_TYPES, nt as createWebSkillApi, o as ASK_USER_TOOL_NAME, ot as extractSkillCandidate, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as interruptedToolResult, q as USER_PROFILE_NO_INVENTION_RULE, r as ASK_USER_INPUT_SCHEMA, rt as diffUserProfile, s as AgentLoop, st as extractTodoTraceEvents, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as createScriptContext, u as CapabilityApproval, ut as formatSkillScriptManifest, v as FS_SESSION_PAGE_SIZE, vt as mergeProfileEntries, w as FsToolStepStore, wt as parseBridgeRequest, x as FsRunSnapshotStore, xt as normalizeErrorCode, y as FsArtifactStore, yt as networkPolicyLibSource, z as SESSION_SCHEMA_VERSION, zt as summarizeToolCalls } from "./dist-Bfga1TmS.js";
 
 //#region src/version.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
@@ -8,7 +8,7 @@ import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.11.0";
+const SDK_VERSION = "0.14.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, EMPTY_USER_PROFILE, EventBus, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, IMAGE_MIME_TYPES, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, XLSX_MIME, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { B as JsonSchema, _ as LlmToolSpec, it as SkillCatalogEntry, ot as SkillDocument } from "./types-DLctJep_-B5G4uk2u.js";
-import { F as ExternalToolSource, P as ExternalSkillProvider, dn as ToolResult, tr as mergeCatalogEntries } from "./index-C9pzXLKy.js";
+import { K as JsonSchema, _ as LlmToolSpec, ft as SkillDocument, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BgeOvc1Y.js";
+import { F as ExternalSkillProvider, I as ExternalToolSource, hn as ToolResult, or as mergeCatalogEntries, pn as ToolDisclosure } from "./index-CWoKOFBP.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -75,6 +75,59 @@ declare class EndpointRegistry<TClient> {
   waitFor(endpoint: string, timeoutMs: number): Promise<TClient>;
 }
 //#endregion
+//#region src/pageHost/pageHostAnchor.d.ts
+/**
+ * 页面宿主握手（分册 18 FR-18.1）。
+ *
+ * 页面与宿主（浏览器扩展）是两个进程，各自持有一份 `EndpointRegistry`。
+ * 页面注册的端点如果不主动交出去，宿主那边永远是空的。本模块就是那个交接口。
+ *
+ * ## 只在宿主先落位时才交
+ *
+ * 锚点由宿主在**页面脚本运行之前**植入（扩展的 `document_start` 内容脚本）。
+ * 页面没被宿主接管时锚点不存在，本模块除了一次全局属性读取之外什么都不做——
+ * 默认态是「不暴露」，不是「对全网开放」（D-18-3）。
+ *
+ * ## 挡不住同世界的脚本，这一点不粉饰
+ *
+ * 锚点在页面自己的 JS 世界里，页面上任何脚本都读得到它、也能调它的 `register()`
+ * 塞进一个假端点。nonce、私有字段、闭包**都挡不住**同世界的脚本，这在 MAIN world
+ * 里无解。因此宿主必须把握手拿到的一切当作不可信内容（FR-18.7 第 1 条）。
+ * 反过来，握手也没给页面新权限：页面脚本本来就能调用页面自己的端点。
+ */
+/** 宿主植入的锚点契约。SDK 只消费，不生产，也不假设宿主是浏览器扩展 */
+interface PageHostAnchor {
+  version: 1;
+  register(endpoint: string, client: unknown): void;
+  unregister(endpoint: string): void;
+  /**
+   * 0.14.0 分册 21：页面自荐可用的数据源。宿主可不实现，页面据此判断本宿主支不支持。
+   *
+   * 入参是 `unknown[]` 而不是结构化类型：这段内容来自页面，
+   * 标成结构化类型会让宿主侧读代码的人以为它已经被验证过了。
+   * @experimental
+   */
+  declareDataSources?(sources: readonly unknown[]): void;
+}
+/** 全局属性名。宿主侧写死同一个串，改这里必须同时改宿主 */
+declare const PAGE_HOST_ANCHOR_KEY = "__webskillPageHost";
+/**
+ * 向宿主登记 / 注销一个端点。
+ *
+ * 全程吞异常是**刻意的**：握手是附加行为，宿主那边出任何问题都不能让页面自己的
+ * 端点注册失败。把这个 catch 去掉，一个坏掉的扩展就能让页面的 chatbot 一起坏掉。
+ */
+declare function notifyPageHost(kind: 'register', endpoint: string, client: unknown): void;
+declare function notifyPageHost(kind: 'unregister', endpoint: string): void;
+/**
+ * 向宿主自荐本页可用的数据源（0.14.0 分册 21）。
+ *
+ * 宿主不实现该方法即静默返回：页面无从得知宿主支不支持，这正是「不知道 ≠ 没有」。
+ * 提议**不等于**可用——宿主那边它只是候选，用户点头前谁都取不到数。
+ * @experimental
+ */
+declare function declareDataSourcesToPageHost(sources: readonly unknown[]): void;
+//#endregion
 //#region src/resolver/mcpToolResolver.d.ts
 /** MCP Client 最小接口（SDK Client 结构兼容，测试可纯对象替身） */
 interface McpClientLike {
@@ -288,6 +341,13 @@ declare class ExperimentalWebMcpAdapter {
 }
 //#endregion
 //#region src/plugin/mcpRuntimePlugin.d.ts
+/**
+ * 披露层级（分册 19）。与 runtime 的 `ToolDisclosure` 同义，保留 mcp 侧命名以便宿主按包对齐。
+ *
+ * 它与启停（`McpToolVisibility` 的三个 boolean 回调）作用面不同：
+ * 禁用同时管暴露与调用，`on-demand` **只管暴露**——没被点名的按需工具照样调得动。
+ */
+type McpToolDisclosure = ToolDisclosure;
 /**
  * 工具可见性策略（0.10.0 UI-UX5 #50.3）：端点禁用 ∨ 工具禁用 ⇒ 不进 LLM tool spec，
  * 调用侧同样拦截（模型找不到这些工具）。各判定缺省视为启用。
@@ -304,6 +364,15 @@ interface McpToolVisibility {
    * 宿主按来源关 → 该组全灭；按工具关 → 只灭一个。
    */
   isWebMcpToolEnabled?(tool: string, sourceId?: string): boolean;
+  /**
+   * 端点级披露层级（分册 19 / FR-19.1）；该端点全部工具的默认值。
+   * 返回 `undefined` = 不表态（最终落到 `always`）。
+   */
+  endpointDisclosure?(endpoint: string): McpToolDisclosure | undefined;
+  /** 端点工具级披露层级；返回 `undefined` 才继承端点级（就近覆盖） */
+  endpointToolDisclosure?(endpoint: string, tool: string): McpToolDisclosure | undefined;
+  /** WebMCP 工具级披露层级；`sourceId` 为空即未命名来源 */
+  webMcpToolDisclosure?(tool: string, sourceId?: string): McpToolDisclosure | undefined;
 }
 /**
  * 参数留存的宿主侧信任声明（分册 30 / FR-30.6）。
@@ -338,6 +407,11 @@ declare class McpRuntimePlugin implements ExternalToolSource {
     /** endpoint 不可用时的告警出口（默认 console.warn） */
     onWarning?(message: string): void;
   });
+  /**
+   * 工具的披露层级（分册 19 / FR-19.2）。本方法只**如实回答层级**，不做过滤——
+   * 「有没有技能点名」是 run 状态，mcp 包看不到，过滤发生在 agentLoop 的暴露点。
+   */
+  disclosure(llmToolName: string): McpToolDisclosure;
   /**
    * 参数留存的信任判定（分册 30 / FR-30.6）。
    * 只按宿主配置里的 endpoint / sourceId 判，服务器传回的内容进不了这条路径。
@@ -494,4 +568,4 @@ interface RemoteEndpointHandle {
  */
 declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<RemoteEndpointHandle>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, type McpSourceTrust, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, type McpSourceTrust, type McpToolDisclosure, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, PAGE_HOST_ANCHOR_KEY, type PageHostAnchor, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, declareDataSourcesToPageHost, endpointToolLlmName, notifyPageHost, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/mcp.js

@@ -1,5 +1,5 @@
-import { M as messageOf, g as assertRemoteUrlAllowed, h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { St as normalizeToolContent, _t as mergeCatalogEntries } from "./dist-sdKFgERo.js";
+import { B as messageOf, S as assertRemoteUrlAllowed, b as WebSkillError } from "./dist-D5YhlCdY.js";
+import { St as normalizeToolContent, _t as mergeCatalogEntries } from "./dist-Bfga1TmS.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -112,6 +112,36 @@ var MessageChannelTransport = class {
 		this.onmessage?.(event.data);
 	}
 };
+/** 全局属性名。宿主侧写死同一个串，改这里必须同时改宿主 */
+const PAGE_HOST_ANCHOR_KEY = "__webskillPageHost";
+function readAnchor() {
+	const raw = globalThis[PAGE_HOST_ANCHOR_KEY];
+	if (typeof raw !== "object" || raw === null) return void 0;
+	const candidate = raw;
+	if (candidate.version !== 1) return void 0;
+	if (typeof candidate.register !== "function" || typeof candidate.unregister !== "function") return void 0;
+	return candidate;
+}
+function notifyPageHost(kind, endpoint, client) {
+	try {
+		const anchor = readAnchor();
+		if (anchor === void 0) return;
+		if (kind === "register") anchor.register(endpoint, client);
+		else anchor.unregister(endpoint);
+	} catch {}
+}
+/**
+* 向宿主自荐本页可用的数据源（0.14.0 分册 21）。
+*
+* 宿主不实现该方法即静默返回：页面无从得知宿主支不支持，这正是「不知道 ≠ 没有」。
+* 提议**不等于**可用——宿主那边它只是候选，用户点头前谁都取不到数。
+* @experimental
+*/
+function declareDataSourcesToPageHost(sources) {
+	try {
+		readAnchor()?.declareDataSources?.(sources);
+	} catch {}
+}
 /** endpoint 名 → client 注册表；单调版本号，事件驱动等待（禁止轮询） */
 var EndpointRegistry = class {
 	#clients = /* @__PURE__ */ new Map();
@@ -124,12 +154,14 @@ var EndpointRegistry = class {
 		this.#clients.set(endpoint, client);
 		this.#versions.set(endpoint, (this.#versions.get(endpoint) ?? 0) + 1);
 		this.#flushWaiters(endpoint);
+		notifyPageHost("register", endpoint, client);
 	}
 	/** 热替换 client，版本号 +1 */
 	set(endpoint, client) {
 		this.#clients.set(endpoint, client);
 		this.#versions.set(endpoint, (this.#versions.get(endpoint) ?? 0) + 1);
 		this.#flushWaiters(endpoint);
+		notifyPageHost("register", endpoint, client);
 	}
 	get(endpoint) {
 		const client = this.#clients.get(endpoint);
@@ -138,6 +170,7 @@ var EndpointRegistry = class {
 	}
 	unregister(endpoint) {
 		this.#clients.delete(endpoint);
+		notifyPageHost("unregister", endpoint);
 	}
 	version(endpoint) {
 		return this.#versions.get(endpoint) ?? 0;
@@ -311,6 +344,15 @@ const textOfContent = (content) => {
 	return "";
 };
 /**
+* 端点不提供 prompts 等于「没有临时技能」，不是加载失败。
+* 两条路径都要认：客户端本地能力断言，以及服务端回的 JSON-RPC -32601。
+*/
+const isPromptsUnsupported = (e) => {
+	if (typeof e !== "object" || e === null) return false;
+	if (e.code === -32601) return true;
+	return /does not support prompts/i.test(messageOf(e));
+};
+/**
 * 消费端：endpoint 的 prompts → 临时技能（source:'mcp'，随 endpoint 生灭）；
 * resources → 可读 references（readFile 的 path 即 resource URI）。
 */
@@ -329,7 +371,10 @@ var TemporarySkillProvider = class {
 		} catch {
 			return [];
 		}
-		const { prompts } = await client.listPrompts();
+		const { prompts } = await client.listPrompts().catch((e) => {
+			if (isPromptsUnsupported(e)) return { prompts: [] };
+			throw e;
+		});
 		const resources = await client.listResources().catch(() => ({ resources: [] }));
 		return prompts.map((p) => ({
 			name: p.name,
@@ -626,6 +671,35 @@ var McpRuntimePlugin = class {
 		}
 	}
 	/**
+	* 披露层级求值。**刻意不复用 `#visible()`**：那个的返回值同时喂给 `listToolSpecs` 与 `call`，
+	* 合并会让按需工具被 `disabledResult()` 拦住——把「只省 token」变成「限制访问」。
+	*
+	* 返回 `undefined` = 该级不表态，交由上一级决定；异常直接按 `always` 定案（不再回落），
+	* 判不出来时多给一个工具，比整轮工具集塌陷、模型转而幻觉的代价小。
+	*/
+	#disclosureOf(probe) {
+		try {
+			return probe();
+		} catch (e) {
+			this.#onWarning(`[webskill] MCP disclosure callback failed; treating the tool as always disclosed: ${e instanceof Error ? e.message : String(e)}`);
+			return "always";
+		}
+	}
+	/**
+	* 工具的披露层级（分册 19 / FR-19.2）。本方法只**如实回答层级**，不做过滤——
+	* 「有没有技能点名」是 run 状态，mcp 包看不到，过滤发生在 agentLoop 的暴露点。
+	*/
+	disclosure(llmToolName) {
+		const parsed = parseWebMcpToolLlmName(llmToolName, this.#sourceIds());
+		if (parsed !== void 0) return this.#disclosureOf(() => this.#visibility?.webMcpToolDisclosure?.(parsed.toolName, parsed.sourceId)) ?? "always";
+		for (const endpoint of this.#endpoints()) {
+			const toolName = parseEndpointToolLlmName(endpoint, llmToolName);
+			if (toolName === void 0) continue;
+			return this.#disclosureOf(() => this.#visibility?.endpointToolDisclosure?.(endpoint, toolName)) ?? this.#disclosureOf(() => this.#visibility?.endpointDisclosure?.(endpoint)) ?? "always";
+		}
+		return "always";
+	}
+	/**
 	* 参数留存的信任判定（分册 30 / FR-30.6）。
 	* 只按宿主配置里的 endpoint / sourceId 判，服务器传回的内容进不了这条路径。
 	*/
@@ -996,4 +1070,4 @@ async function connectRemoteEndpoint(registry, config) {
 }
 
 //#endregion
-export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, WEB_MCP_SOURCE_ID_MAX, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, PAGE_HOST_ANCHOR_KEY, TemporarySkillProvider, WEB_MCP_SOURCE_ID_MAX, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, declareDataSourcesToPageHost, endpointToolLlmName, notifyPageHost, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/{memoryArtifactStore-52Zn9npI-LbCQaqyx.js → memoryArtifactStore-52Zn9npI-BxtUkrgV.js}

@@ -1,4 +1,4 @@
-import { h as WebSkillError } from "./dist-Bev6i6Ip.js";
+import { b as WebSkillError } from "./dist-D5YhlCdY.js";
 
 //#region ../runtime/dist/memoryArtifactStore-52Zn9npI.js
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { $ as SignatureAuditSink, B as JsonSchema, Ct as VerifyResult, J as SKILL_MANIFEST_FILE, L as FileStat, M as ArchiveLimits, R as FileSystemProvider, S as UiBridge, _t as SkillsLockfile, b as RenderResultRequest, c as InteractionResponse, dt as SkillManifest, q as SKILLS_LOCKFILE, s as InteractionRequest, st as SkillInstallSource, ut as SkillManagerPort, xt as UnsignedPolicy, yt as TrustedKeyStore } from "./types-DLctJep_-B5G4uk2u.js";
-import { Bn as createScriptContext, Bt as ScriptExecutionContext, Fn as WebSkillRuntimeDeps, L as FsArtifactStore, Pn as WebSkillRuntime, R as FsMemoryStore, Vt as ScriptExecutor, dn as ToolResult, it as NetworkPolicy, ln as ToolDefinition, m as ApprovalScope, y as BridgeCapabilities, zt as SchemaInferer } from "./index-C9pzXLKy.js";
-import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-D-qHk9ZE-DheTIwAB.js";
+import { $ as SKILLS_LOCKFILE, At as VerifyResult, Ct as SkillsLockfile, Et as TrustedKeyStore, H as FileStat, K as JsonSchema, N as ArchiveLimits, Ot as UnsignedPolicy, S as UiBridge, U as FileSystemProvider, _t as SkillManifest, at as SignatureAuditSink, b as RenderResultRequest, c as InteractionResponse, et as SKILL_MANIFEST_FILE, gt as SkillManagerPort, pt as SkillInstallSource, s as InteractionRequest } from "./types-C3V6lAeO-BgeOvc1Y.js";
+import { Gn as createScriptContext, Ht as ScriptExecutionContext, R as FsArtifactStore, Rn as WebSkillRuntime, Ut as ScriptExecutor, Vt as SchemaInferer, at as NetworkPolicy, fn as ToolDefinition, hn as ToolResult, m as ApprovalScope, y as BridgeCapabilities, z as FsMemoryStore, zn as WebSkillRuntimeDeps } from "./index-CWoKOFBP.js";
+import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-D-qHk9ZE-C0OFDTQY.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -1,5 +1,5 @@
-import { B as resolveArchiveLimits, D as exportSkills, F as parseSkillPackManifest, G as unzipWithLimits, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, O as isAtomicTempPath, P as parseSkillMarkdown, V as resolveInsideRoot, _ as assertSafePathSegment, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, k as isValidSkillName, q as verifyManifest, s as SKILLS_LOCKFILE, v as atomicWriteText } from "./dist-Bev6i6Ip.js";
-import { $ as bridgeError, Ct as normalizeToolError, St as normalizeToolContent, X as WebSkillRuntime, b as FsMemoryStore, tt as createScriptContext, u as CapabilityApproval, wt as parseBridgeRequest, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-sdKFgERo.js";
+import { $ as unzipWithLimits, B as messageOf, C as assertSafePathSegment, E as buildManifest, G as readSkillSignature, H as parseSkillMarkdown, I as isAtomicTempPath, J as resolveArchiveLimits, L as isValidSkillName, P as exportSkills, S as assertRemoteUrlAllowed, U as parseSkillPackManifest, W as readResponseWithLimit, Y as resolveInsideRoot, b as WebSkillError, c as MANIFEST_EXCLUDED_FILES, d as SKILLS_LOCKFILE, et as validateSkills, f as SKILL_MANIFEST_FILE, h as SKILL_PACK_FILE, nt as verifySkillSignature, tt as verifyManifest, w as atomicWriteText } from "./dist-D5YhlCdY.js";
+import { $ as bridgeError, Ct as normalizeToolError, St as normalizeToolContent, X as WebSkillRuntime, b as FsMemoryStore, tt as createScriptContext, u as CapabilityApproval, wt as parseBridgeRequest, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-Bfga1TmS.js";
 import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
 import { t as AUDIT_EVENT_TYPES } from "./eventTypes-FllCrX-Z-DNDeHWoG.js";
 import { createRequire } from "node:module";
@@ -498,7 +498,7 @@ var SandboxedScriptExecutor = class {
 				...details !== void 0 ? { details } : {}
 			});
 			if (decision === "allowed") return void 0;
-			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled` : `Capability "${capability}" was denied by the user`);
+			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled by the sandbox capability settings` : `Capability "${capability}" was denied by the user`);
 		};
 		try {
 			switch (request.kind) {
@@ -525,7 +525,7 @@ var SandboxedScriptExecutor = class {
 					};
 				}
 				case "fetchData": {
-					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is disabled");
+					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is unavailable: this host wired no data source access at all. This is not the capability switch being off — a data source has to be declared in the host settings first.");
 					const denied = await gate("fetchData", `Script "${context.skillName}" wants to fetch data source "${request.sourceId}"`, { sourceId: request.sourceId });
 					if (denied) return denied;
 					return {
@@ -875,7 +875,7 @@ var ProcessSandboxExecutor = class {
 				...details !== void 0 ? { details } : {}
 			});
 			if (decision === "allowed") return void 0;
-			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled` : `Capability "${capability}" was denied by the user`);
+			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled by the sandbox capability settings` : `Capability "${capability}" was denied by the user`);
 		};
 		try {
 			switch (request.kind) {
@@ -902,7 +902,7 @@ var ProcessSandboxExecutor = class {
 					};
 				}
 				case "fetchData": {
-					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is disabled");
+					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is unavailable: this host wired no data source access at all. This is not the capability switch being off — a data source has to be declared in the host settings first.");
 					const denied = await gate("fetchData", `Script "${context.skillName}" wants to fetch data source "${request.sourceId}"`, { sourceId: request.sourceId });
 					if (denied) return denied;
 					return {

package/dist/{openUiLibrary-BKXW7Iwx-DaymVubt.js → openUiLibrary-BKXW7Iwx-DjvEnMlJ.js}

@@ -1,5 +1,5 @@
-import { Dt as uiCatalog } from "./dist-DqcL6jKO.js";
-import { t as CatalogNode } from "./catalogComponents-BgAJN0p8-C3K8klJd.js";
+import { Dt as uiCatalog } from "./dist-CiaDIqkV.js";
+import { t as CatalogNode } from "./catalogComponents-BgAJN0p8-Cr55ouOg.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/{skillVersionStore-D-qHk9ZE-DheTIwAB.d.ts → skillVersionStore-D-qHk9ZE-C0OFDTQY.d.ts}

@@ -1,4 +1,4 @@
-import { R as FileSystemProvider, U as Page, W as PageQuery, dt as SkillManifest, it as SkillCatalogEntry } from "./types-DLctJep_-B5G4uk2u.js";
+import { U as FileSystemProvider, X as PageQuery, Y as Page, _t as SkillManifest, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BgeOvc1Y.js";
 //#region ../governance/dist/skillVersionStore-D-qHk9ZE.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';

package/dist/{testing-WPTyXQYt.js → testing-Cm8MseLF.js}

@@ -1,5 +1,5 @@
-import { h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
+import { b as WebSkillError } from "./dist-D5YhlCdY.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BxtUkrgV.js";
 
 //#region ../runtime/dist/testing.js
 /**

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-DLctJep_-B5G4uk2u.js";
+import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-C3V6lAeO-BgeOvc1Y.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/testing.js

@@ -1,5 +1,5 @@
-import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BxtUkrgV.js";
 import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env-8cY40DXB-CGnEVZby.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-WPTyXQYt.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-Cm8MseLF.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };