@webskill/sdk 0.13.0 → 0.14.0

package/dist/browser.js

@@ -1,7 +1,7 @@
-import { D as exportSkills, F as parseSkillPackManifest, G as unzipWithLimits, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, O as isAtomicTempPath, P as parseSkillMarkdown, T as detectSkillArchiveShapeFromFs, V as resolveInsideRoot, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, k as isValidSkillName, p as SkillDiscovery, q as verifyManifest, s as SKILLS_LOCKFILE, v as atomicWriteText, y as buildCatalog } from "./dist-Bev6i6Ip.js";
-import { $ as bridgeError, A as ProgressiveRouter, Ct as normalizeToolError, E as GoogleGenAiClient, St as normalizeToolContent, _t as mergeCatalogEntries, b as FsMemoryStore, c as AnthropicClient, k as OpenAiCompatibleClient, nt as createWebSkillApi, s as AgentLoop, u as CapabilityApproval, wt as parseBridgeRequest, x as FsRunSnapshotStore, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-ExSQky4C.js";
-import { D as toFrameScopes, E as toActionFrameScopes, T as frameSteps, w as frameLabel } from "./dist-GK6dtjRv.js";
-import { n as MockLlmClient } from "./testing-WPTyXQYt.js";
+import { $ as unzipWithLimits, B as messageOf, E as buildManifest, G as readSkillSignature, H as parseSkillMarkdown, I as isAtomicTempPath, L as isValidSkillName, M as detectSkillArchiveShapeFromFs, P as exportSkills, S as assertRemoteUrlAllowed, T as buildCatalog, U as parseSkillPackManifest, W as readResponseWithLimit, Y as resolveInsideRoot, _ as SkillDiscovery, b as WebSkillError, c as MANIFEST_EXCLUDED_FILES, d as SKILLS_LOCKFILE, et as validateSkills, f as SKILL_MANIFEST_FILE, h as SKILL_PACK_FILE, nt as verifySkillSignature, tt as verifyManifest, w as atomicWriteText } from "./dist-D5YhlCdY.js";
+import { $ as bridgeError, A as ProgressiveRouter, Ct as normalizeToolError, E as GoogleGenAiClient, St as normalizeToolContent, _t as mergeCatalogEntries, b as FsMemoryStore, c as AnthropicClient, k as OpenAiCompatibleClient, nt as createWebSkillApi, s as AgentLoop, u as CapabilityApproval, wt as parseBridgeRequest, x as FsRunSnapshotStore, y as FsArtifactStore, yt as networkPolicyLibSource } from "./dist-Bfga1TmS.js";
+import { A as frameLabel, M as toActionFrameScopes, N as toFrameScopes, j as frameSteps } from "./dist-BnqAkSS6.js";
+import { n as MockLlmClient } from "./testing-Cm8MseLF.js";
 
 //#region ../browser/dist/index.js
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -905,12 +905,16 @@ var IframeWorkerLike = class {
 	#channelId;
 	#hostWindow;
 	#hostListener;
-	constructor(iframe, hostWindow, channelId) {
+	#readyTimer;
+	constructor(iframe, hostWindow, channelId, readyTimeout) {
 		this.#iframe = iframe;
 		this.#hostWindow = hostWindow;
 		this.#channelId = channelId;
 		this.#hostListener = (event) => this.#onMessage(event);
 		this.#hostWindow.addEventListener("message", this.#hostListener);
+		if (readyTimeout) this.#readyTimer = setTimeout(() => {
+			this.#failQueue(`Sandbox document did not become ready within ${readyTimeout.ms}ms: ${readyTimeout.documentUrl}. Ensure it is listed in both manifest sandbox.pages and web_accessible_resources.`);
+		}, readyTimeout.ms);
 	}
 	get ready() {
 		return this.#ready;
@@ -919,10 +923,38 @@ var IframeWorkerLike = class {
 		return this.#channelId;
 	}
 	markReady() {
+		this.#clearReadyTimer();
 		this.#ready = true;
 		for (const payload of this.#queue) this.#post(payload);
 		this.#queue = [];
 	}
+	#clearReadyTimer() {
+		if (this.#readyTimer !== void 0) {
+			clearTimeout(this.#readyTimer);
+			this.#readyTimer = void 0;
+		}
+	}
+	/**
+	* 就绪超时（FR-12.4）：`createIframeWorker` 同步返回，超时无处可抛，只能走回包通道。
+	* 而 `#request` 按 `data.id` 匹配回包，id 对不上的消息被静默丢弃——
+	* 所以必须**逐条**回复队列里每一条消息的 id，否则调用方一直挂着。
+	*/
+	#failQueue(message) {
+		const queued = this.#queue;
+		this.#queue = [];
+		for (const payload of queued) {
+			const id = payload.id;
+			if (typeof id === "string") this.emit({
+				id,
+				ok: false,
+				error: {
+					code: "TOOL_EXECUTION_FAILED",
+					message
+				}
+			});
+		}
+		this.terminate();
+	}
 	#post(payload) {
 		this.#iframe.contentWindow?.postMessage({
 			[ENVELOPE]: true,
@@ -953,11 +985,18 @@ var IframeWorkerLike = class {
 		for (const listener of this.#listeners) listener({ data });
 	}
 	terminate() {
+		this.#clearReadyTimer();
 		this.#hostWindow.removeEventListener("message", this.#hostListener);
 		this.#iframe.remove();
 	}
 };
-/** srcdoc 文档：内嵌 Worker 引导源码 + 双向中继（BOOTSTRAP 经 JSON 字符串注入，防 <\/script> 截断） */
+/**
+* srcdoc 文档：内嵌 Worker 引导源码 + 双向中继（BOOTSTRAP 经 JSON 字符串注入，防 <\/script> 截断）。
+*
+* **这段文本被 FR-12.5 / AC-12.1 冻结在 0.13.0 基线上**：既有网页宿主不给 `documentUrl`，
+* 必须逐字节拿到与升级前相同的沙箱文档。因此它不与 `SANDBOX_PAGE_SCRIPT_SOURCE` 共用模板——
+* 抽模板必然改动生成文本。两份中继的一致性改由行为对拍守卫（见 `sandboxRelayParity` 用例）。
+*/
 function sandboxDocument(bootstrapSource, channelId) {
 	const bootstrapJson = JSON.stringify(bootstrapSource).replace(/<\//g, "<\\/");
 	return `<!doctype html>
@@ -984,16 +1023,96 @@ parent.postMessage({ [ENVELOPE]: true, channelId: CHANNEL_ID, payload: { type: '
 <\/script></body></html>`;
 }
 /**
-* 创建 opaque iframe 沙箱 Worker：sandbox="allow-scripts" srcdoc iframe 承载 classic Worker。
+* 静态沙箱页的中继脚本源码（分册 12 / FR-12.3）。
+*
+* 宿主把它落成一个独立文件并用 `<script src>` 引入——**不得内联**：
+* sandbox 页虽允许 `unsafe-inline`，但外链能让「沙箱页脚本 = SDK 原样产物」在审计时可核对。
+*
+* 与 srcdoc 形态的两点区别，都源于「静态页在加载完时还不知道要跑什么」：
+* - **引导源码**随宿主的 `sandbox-init` 消息到达，而不是内嵌在文档里；
+* - **channelId** 由第一条来自 `parent` 的消息 latch。SDK 导出的是一份与宿主无关的源码，
+*   不可能预知宿主这次生成的 id。latch 前先认 `event.source === parent`：少了这句，
+*   任何把本页嵌进去的第三方 frame 都能抢先 latch 一个自己的 id，
+*   让真正的宿主消息全部被丢弃——一个纯粹的拒绝服务面。
+*
+* 本源码不含任何扩展 API：sandbox 页拿不到它们（实证）。
+* `ENVELOPE` 与宿主侧同源（同一个模块常量），两边各写一份字面量会在改名时静默失配。
+* @experimental
+*/
+const SANDBOX_PAGE_SCRIPT_SOURCE = `const ENVELOPE = ${JSON.stringify(ENVELOPE)};
+let CHANNEL_ID = null;
+let worker = null;
+function post(payload) {
+  parent.postMessage({ [ENVELOPE]: true, channelId: CHANNEL_ID, payload }, '*');
+}
+function startWorker(bootstrapSource) {
+  if (worker || typeof bootstrapSource !== 'string') return;
+  const blob = new Blob([bootstrapSource], { type: 'text/javascript' });
+  const url = URL.createObjectURL(blob);
+  // 注意：opaque origin 下 module Worker 无法加载（实证），classic Worker + data: URL 动态导入可用
+  worker = new Worker(url);
+  URL.revokeObjectURL(url);
+  worker.addEventListener('message', (event) => post(event.data));
+  worker.addEventListener('error', (event) => post({ type: 'sandbox-worker-error', message: event.message }));
+  post({ type: 'sandbox-ready' });
+}
+window.addEventListener('message', (event) => {
+  const data = event.data;
+  if (!data || data[ENVELOPE] !== true) return;
+  if (event.source !== parent) return;
+  if (CHANNEL_ID === null) {
+    if (typeof data.channelId !== 'string') return;
+    CHANNEL_ID = data.channelId;
+  } else if (data.channelId !== CHANNEL_ID) return;
+  const payload = data.payload;
+  if (payload && payload.type === 'sandbox-init') {
+    startWorker(payload.bootstrapSource);
+    return;
+  }
+  if (worker) worker.postMessage(payload);
+});
+`;
+/**
+* `Document` 判别式。不用 `'documentUrl' in v`：`Document` 上没有该属性，
+* 但一个只给了 `doc` 的选项对象上也没有，两者会被判到同一侧。
+*/
+function isDocument(value) {
+	return value.nodeType === 9;
+}
+/**
+* 创建 opaque iframe 沙箱 Worker：srcdoc（默认）或宿主指定的静态沙箱页承载 classic Worker。
 * 返回 IframeWorkerLike（协议与 blob Worker 完全一致：load/execute/bridge/network-blocked）。
 */
-function createIframeWorker(bootstrapSource, doc = document) {
+function createIframeWorker(bootstrapSource, options = {}) {
+	const resolved = isDocument(options) ? { doc: options } : options;
+	const doc = resolved.doc ?? document;
 	const channelId = nextChannelId();
 	const iframe = doc.createElement("iframe");
-	iframe.setAttribute("sandbox", "allow-scripts");
 	iframe.style.display = "none";
-	iframe.srcdoc = sandboxDocument(bootstrapSource, channelId);
-	const worker = new IframeWorkerLike(iframe, doc.defaultView ?? window, channelId);
+	const hostWindow = doc.defaultView ?? window;
+	const { documentUrl } = resolved;
+	if (documentUrl === void 0) {
+		iframe.setAttribute("sandbox", "allow-scripts");
+		iframe.srcdoc = sandboxDocument(bootstrapSource, channelId);
+		const worker = new IframeWorkerLike(iframe, hostWindow, channelId);
+		doc.body.appendChild(iframe);
+		return worker;
+	}
+	const worker = new IframeWorkerLike(iframe, hostWindow, channelId, {
+		ms: resolved.readyTimeoutMs ?? 1e4,
+		documentUrl
+	});
+	iframe.addEventListener("load", () => {
+		iframe.contentWindow?.postMessage({
+			[ENVELOPE]: true,
+			channelId,
+			payload: {
+				type: "sandbox-init",
+				bootstrapSource
+			}
+		}, "*");
+	});
+	iframe.src = documentUrl;
 	doc.body.appendChild(iframe);
 	return worker;
 }
@@ -1195,7 +1314,7 @@ var BrowserWorkerScriptExecutor = class {
 				...details !== void 0 ? { details } : {}
 			});
 			if (decision === "allowed") return void 0;
-			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled` : `Capability "${capability}" was denied by the user`);
+			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled by the sandbox capability settings` : `Capability "${capability}" was denied by the user`);
 		};
 		try {
 			switch (request.kind) {
@@ -1222,7 +1341,7 @@ var BrowserWorkerScriptExecutor = class {
 					};
 				}
 				case "fetchData": {
-					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is disabled");
+					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is unavailable: this host wired no data source access at all. This is not the capability switch being off — a data source has to be declared in the host settings first.");
 					const denied = await gate("fetchData", `Script "${context.skillName}" wants to fetch data source "${request.sourceId}"`, { sourceId: request.sourceId });
 					if (denied) return denied;
 					return {
@@ -1633,10 +1752,12 @@ function splitDataUrl(dataUrl) {
 /** 压到预算内；压不下去时把失败原因原样上抛给调用方转成 `CaptureFailure` */
 async function toBudget(id, level, blob, maxBytes) {
 	const compressed = await compressImageToBudget(blob, maxBytes);
+	const mimeType = compressed.blob.type.split(";")[0]?.trim().toLowerCase() ?? "";
+	if (!DELIVERABLE_IMAGE_MIME_TYPES.has(mimeType)) throw new Error(`the bytes normalized to "${mimeType === "" ? "no content type" : mimeType}", which is not one of ${[...DELIVERABLE_IMAGE_MIME_TYPES].join(", ")}`);
 	const buffer = await compressed.blob.arrayBuffer();
 	return {
 		id,
-		mimeType: compressed.blob.type === "" ? "application/octet-stream" : compressed.blob.type,
+		mimeType,
 		data: base64Of(new Uint8Array(buffer)),
 		level,
 		originalBytes: compressed.originalBytes,
@@ -1647,15 +1768,16 @@ async function toBudget(id, level, blob, maxBytes) {
 async function captureImg(element, id, maxBytes) {
 	const src = element.currentSrc !== "" ? element.currentSrc : element.src;
 	if (src === "") throw new Error("the <img> element has no resolved source");
+	const oversized = Math.max(element.naturalWidth, element.naturalHeight) > MAX_RASTER_EDGE;
 	const inline = splitDataUrl(src);
 	if (inline) {
 		const bytes = Uint8Array.from(atob(inline.data), (char) => char.charCodeAt(0));
-		return toBudget(id, "src", await toDeliverableBlob(new Blob([bytes], { type: inline.mimeType })), maxBytes);
+		return toBudget(id, "src", await toDeliverableBlob(new Blob([bytes], { type: inline.mimeType }), oversized), maxBytes);
 	}
 	const response = await fetch(src, { mode: "cors" });
 	if (response.type === "opaque") throw new Error("the response is opaque, so its bytes cannot be read");
 	if (!response.ok) throw new Error(`fetching the source returned HTTP ${response.status}`);
-	return toBudget(id, "src", await toDeliverableBlob(await response.blob()), maxBytes);
+	return toBudget(id, "src", await toDeliverableBlob(await response.blob(), oversized), maxBytes);
 }
 /** L2：`<canvas>` 读回。画布被跨域内容污染时 `toDataURL` 抛 SecurityError，不再兜底（裁决 D-3） */
 async function captureCanvas(element, id, maxBytes) {
@@ -1797,6 +1919,18 @@ const DELIVERABLE_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
 /** 用于认出 SVG 正文的前缀嗅探长度：`<?xml`、注释、DOCTYPE 都可能排在 `<svg` 之前 */
 const SVG_SNIFF_BYTES = 1024;
 /**
+* WebP 动图：扩展头 `VP8X` 的 flags 字节第 1 位。位置固定在文件前 24 字节内，
+* 不必解码整图就能判出来。
+*/
+function isAnimatedWebp(bytes) {
+	return [
+		86,
+		80,
+		56,
+		88
+	].every((byte, index) => bytes[12 + index] === byte) && ((bytes[20] ?? 0) & 2) !== 0;
+}
+/**
 * 按魔数认图片类型（服务端声明只作兜底）。
 *
 * 图片接口常年是「无扩展名 + `application/octet-stream`」这种组合（查询串带 file id 的尤其多），
@@ -1844,16 +1978,29 @@ async function rasterizeToPng(blob) {
 * 两类真实站点上很常见的图会在最后一步被模型侧丢掉：服务端把图报成 `application/octet-stream`，
 * 以及矢量图（三家提供方的图片通道都不收 `image/svg+xml`，分册 20 §0.1）。
 * 前者只是声明错了，按魔数改回来即可；后者必须就地栅格化，否则等于没取到图。
+*
+* **声明一律不采信**：大站 CDN 会按 `Accept` 头改发 AVIF 却仍旧报 `image/webp`，
+* 照抄声明会让端点解码失败并连累整次请求（一张图 400，37 张全废）。
+*
+* 魔数对得上也不等于发得出去，还有两类会被端点整次拒收，必须重编码成单帧位图：
+* - **动图**（GIF 天然多帧，WebP 看 `VP8X` 的动画位）：图片通道普遍只收静态图；
+* - **超长边**：横幅类素材常见 7680×120 这种尺寸，字节数却很小，
+*   纯按字节压缩的预算根本不会触发，原样发出去就撞上端点的边长上限。
+*
+* @param oversized 调用方已知原图长边超限（`<img>` 能直接读到 `naturalWidth`，不必为此解码）
 */
-async function toDeliverableBlob(blob) {
+async function toDeliverableBlob(blob, oversized = false) {
 	const declared = blob.type.split(";")[0]?.trim().toLowerCase() ?? "";
-	if (DELIVERABLE_IMAGE_MIME_TYPES.has(declared)) return blob;
-	const bytes = new Uint8Array(await blob.arrayBuffer());
-	const sniffed = sniffImageMime(bytes);
-	if (sniffed !== void 0 && DELIVERABLE_IMAGE_MIME_TYPES.has(sniffed)) return new Blob([bytes], { type: sniffed });
+	const head = new Uint8Array(await blob.slice(0, SVG_SNIFF_BYTES).arrayBuffer());
+	const sniffed = sniffImageMime(head);
+	if (sniffed !== void 0 && DELIVERABLE_IMAGE_MIME_TYPES.has(sniffed)) {
+		const typed = sniffed === declared ? blob : new Blob([blob], { type: sniffed });
+		const animated = sniffed === "image/gif" || sniffed === "image/webp" && isAnimatedWebp(head);
+		return oversized || animated ? await rasterizeToPng(typed) : typed;
+	}
 	const mimeType = sniffed ?? (declared.startsWith("image/") ? declared : void 0);
 	if (mimeType === void 0) throw new Error(`the response is not a recognizable image (the server described it as "${blob.type === "" ? "no content type" : blob.type}")`);
-	return await rasterizeToPng(new Blob([bytes], { type: mimeType }));
+	return await rasterizeToPng(new Blob([blob], { type: mimeType }));
 }
 /**
 * 取一个元素的图像（0.6.0 FR-12.1）。
@@ -1902,6 +2049,148 @@ function describeError(e) {
 	if (e instanceof TypeError) return "the request was blocked, most likely by CORS";
 	return e instanceof Error ? e.message : String(e);
 }
+/**
+* 非标可交互元素的识别与角色提升（0.14.0 分册 15）。
+*
+* 现代前端用 `div` / `span` 做按钮是常态，它们在无障碍树里全落到 `generic`，
+* 于是拿不到句柄——模型读得到那几个字，却点不动。本模块补的就是这一段判定。
+*
+* 整套逻辑默认关闭，由 `createDomPerceptionReader` 的 `promoteRoles` 开启（D-15-1）。
+*/
+/**
+* class / id 里的交互语义词根（FR-15.2）。
+*
+* 带词边界匹配：`table` 含 `tab`、`container` 含 `nav`，子串匹配会把它们全误伤（D-15-8）。
+* 图标类单列一支：`icon-view` / `el-icon-download` / `anticon-*` 这类命名带着具体动作语义。
+*/
+const INTERACTIVE_TOKEN = /(?:^|[^a-z])(btn|button|actions?|click(?:able)?|link|menu|nav|tabs?|trigger|operate|operations?|handle|entry|toolbar|[a-z]*icons?(?:[-_][a-z0-9]+)?)(?:[^a-z]|$)/i;
+/** 从图标类名反推语义：`el-icon-view` → `view`、`icon-download` → `download`（FR-15.4 第 2 级） */
+const ICON_CLASS = /[a-z]*icons?[-_]([a-z0-9][a-z0-9-_]*)$/i;
+/** 框架路由属性：值非空即视为确凿的导航线索（FR-15.3 第 2 条） */
+const ROUTE_ATTRIBUTES = [
+	"to",
+	"routerlink",
+	"data-href",
+	"data-url"
+];
+/** 只有这三种角色会被提升：其余角色要么本就能发句柄，要么带着不该被覆盖的语义（D-15-3） */
+const PROMOTABLE_ROLES = /* @__PURE__ */ new Set([
+	"generic",
+	"img",
+	"cell"
+]);
+/** 合成名的前缀，必须让模型看得出「这不是页面上的字，别拿它去搜」（FR-15.4 第 3 级） */
+const SYNTHETIC_NAME_PREFIX = "unlabeled control";
+/** 往上找具名祖先的层数上限：再往上就是整页容器，拿它当限定语反而更含糊 */
+const SYNTHETIC_NAME_LOOKUP_DEPTH = 5;
+const classAndId = (element) => `${element.getAttribute("class") ?? ""} ${element.getAttribute("id") ?? ""}`;
+/** `cursor: pointer` —— 页面自己声明了可点。`getComputedStyle` 最贵，殿后 */
+function looksClickable(element, view) {
+	if (view === null) return false;
+	try {
+		return view.getComputedStyle(element).cursor === "pointer";
+	} catch {
+		return false;
+	}
+}
+/**
+* 五级信号，命中任一即为真（FR-15.1）。
+*
+* 求值顺序按**成本**排而不是按强度排：前面的廉价信号命中就短路，
+* 把 `getComputedStyle` 这条唯一会触发样式重算的路径留到最后。
+*/
+function looksInteractive(element, context) {
+	if (context.interactiveHint?.(element) === true) return true;
+	const tabindex = element.getAttribute("tabindex");
+	if (tabindex !== null && tabindex.trim() !== "" && tabindex.trim() !== "-1") return true;
+	const title = element.getAttribute("title");
+	if (title !== null && title.trim() !== "") return true;
+	if (INTERACTIVE_TOKEN.test(classAndId(element))) return true;
+	return looksClickable(element, context.view);
+}
+/** 图标类名反推出的语义词；没有图标类则 undefined */
+function iconHintOf(element) {
+	for (const cls of (element.getAttribute("class") ?? "").split(/\s+/)) {
+		const match = ICON_CLASS.exec(cls);
+		if (match === null) continue;
+		const semantic = match[1]?.split("__")[0];
+		if (semantic !== void 0 && semantic !== "") return semantic;
+	}
+}
+/** 宿主逃生舱的角色；命中即无条件提升成声明的角色（FR-15.6） */
+function hintedRoleOf(element, hints) {
+	if (hints === void 0) return void 0;
+	for (const hint of hints) for (const selector of hint.selectors) try {
+		if (element.matches(selector)) return hint.role;
+	} catch {}
+}
+/**
+* 确凿的导航线索（FR-15.3）：拿得到就判 `link`，拿不到一律 `button`。
+*
+* **不看** `cursor` / class 词根 / `onclick` 这类间接迹象——猜错会让模型以为「点了会跳走」
+* 而放弃先把页内信息读完，代价比多标一个 `button` 大。
+*/
+function navigationTargetOf(element, doc) {
+	const own = resolvedHref(element, doc);
+	if (own !== void 0) return own;
+	for (const attribute of ROUTE_ATTRIBUTES) {
+		const value = element.getAttribute(attribute);
+		if (value !== null && value.trim() !== "") return value.trim();
+	}
+	const anchor = element.closest("a[href]");
+	if (anchor !== null && anchor.getAttribute("role") === null) return resolvedHref(anchor, doc);
+}
+/** `href` 解析成绝对地址；不导航的形态（`#`、`javascript:`、空值）一律不算线索 */
+function resolvedHref(element, doc) {
+	const raw = element.getAttribute("href") ?? element.getAttribute("xlink:href");
+	if (raw === null) return void 0;
+	const trimmed = raw.trim();
+	if (trimmed === "" || trimmed === "#" || /^javascript:/i.test(trimmed)) return void 0;
+	try {
+		const url = new URL(trimmed, doc.baseURI);
+		return url.protocol === "http:" || url.protocol === "https:" ? url.href : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* 算不出名字时合成一个可指称的称呼（FR-15.4 第 3 级）。
+*
+* 用「最近具名祖先 + 同级序位」而不是坐标：坐标随滚动和窗口尺寸变，
+* 用户在屏幕上对不上号，模型跨两次感知也认不出是同一个东西。
+*/
+function synthesizeName(element, nameOf) {
+	const siblings = element.parentElement?.children;
+	let position = 0;
+	if (siblings !== void 0) {
+		for (const [index, sibling] of [...siblings].entries()) if (sibling === element) {
+			position = index + 1;
+			break;
+		}
+	}
+	const ordinal = position > 0 ? `${SYNTHETIC_NAME_PREFIX} #${position}` : SYNTHETIC_NAME_PREFIX;
+	let ancestor = element.parentElement;
+	for (let depth = 0; depth < SYNTHETIC_NAME_LOOKUP_DEPTH && ancestor !== null; depth += 1) {
+		const label = nameOf(ancestor);
+		if (label !== void 0 && label !== "") return `${ordinal} in "${label}"`;
+		ancestor = ancestor.parentElement;
+	}
+	return ordinal;
+}
+/** 提升后的角色与导航目标；未提升时返回 undefined */
+function promoteRole(input) {
+	const { element, role, doc, hasActionableDescendant, context } = input;
+	const hinted = hintedRoleOf(element, context.roleHints);
+	if (hinted !== void 0) return { role: hinted };
+	if (!PROMOTABLE_ROLES.has(role)) return void 0;
+	if (hasActionableDescendant && role !== "img") return void 0;
+	if (!looksInteractive(element, context)) return void 0;
+	const href = navigationTargetOf(element, doc);
+	return href !== void 0 ? {
+		role: "link",
+		href
+	} : { role: "button" };
+}
 /** 值可能是凭据的输入类型：即便宿主忘了写进 exclude 也不读值。操作侧复用同一份，不另写 */
 const SECRET_INPUT_TYPES = /* @__PURE__ */ new Set(["password", "hidden"]);
 /** 可被操作的角色：只给这些节点发句柄，其余节点模型连提都提不出来 */
@@ -1979,6 +2268,33 @@ function ownText(element) {
 	for (const node of element.childNodes) if (node.nodeType === 3) text += node.nodeValue ?? "";
 	return clip(text);
 }
+/** 名字全在元素外面的那几种控件 */
+const FORM_CONTROL_TAGS = /* @__PURE__ */ new Set([
+	"INPUT",
+	"TEXTAREA",
+	"SELECT"
+]);
+/**
+* 表单控件的名字来源：`<label>`（关联式与包裹式）、`placeholder`、`title`。
+*
+* 缺了这几级，一个填着「基小建」的输入框在模型眼里就是无名的 textbox——
+* 旁边的 `<label>` 文字它读得到，却接不到这个框上，于是「值明明在结果里，
+* 模型却说不出这是谁」。操作侧的 `accessibleName` 一直取这几级，两边不一致
+* 还会让「感知时叫不出名字、点下去审计里却有名字」。
+*/
+function externalNameOf(element) {
+	const labels = element.labels;
+	if (labels && labels.length > 0) {
+		const joined = [...labels].map((node) => node.textContent ?? "").filter((part) => part.trim() !== "").join(" ");
+		if (joined.trim() !== "") return clip(joined);
+	}
+	const wrapping = element.closest("label")?.textContent ?? "";
+	if (wrapping.trim() !== "") return clip(wrapping);
+	for (const attribute of ["placeholder", "title"]) {
+		const value = element.getAttribute(attribute);
+		if (value !== null && value.trim() !== "") return clip(value);
+	}
+}
 function nameOf(element, doc) {
 	const label = element.getAttribute("aria-label");
 	if (label !== null && label.trim() !== "") return clip(label);
@@ -1991,6 +2307,7 @@ function nameOf(element, doc) {
 		const alt = element.getAttribute("alt");
 		if (alt !== null && alt.trim() !== "") return clip(alt);
 	}
+	if (FORM_CONTROL_TAGS.has(element.tagName)) return externalNameOf(element);
 	const own = ownText(element);
 	return own === "" ? void 0 : own;
 }
@@ -2046,20 +2363,38 @@ function isBelowMinArea(element, minImageArea) {
 	if (size === void 0) return false;
 	return size.width * size.height < minImageArea;
 }
-function describe(element, excluded, doc, view, capture, handles, frame, provenance) {
+function describe(element, excluded, doc, view, capture, handles, frame, provenance, promotion) {
 	if (excluded.has(element)) return void 0;
 	if (SKIPPED_TAGS.has(element.tagName)) return void 0;
 	if (hidden$1(element, view)) return void 0;
 	const children = [];
 	for (const child of element.children) {
-		const node = describe(child, excluded, doc, view, capture, handles, frame, provenance);
+		const node = describe(child, excluded, doc, view, capture, handles, frame, provenance, promotion);
 		if (node !== void 0) children.push(node);
 	}
-	const name = nameOf(element, doc);
+	let name = nameOf(element, doc);
 	const value = valueOf(element);
-	const role = roleOf$1(element);
-	const href = role === "link" ? hrefOf(element) : void 0;
+	let role = roleOf$1(element);
+	let promotedHref;
+	if (promotion !== void 0) {
+		const promoted = promoteRole({
+			element,
+			role,
+			doc,
+			hasActionableDescendant: children.some((child) => child.ref !== void 0),
+			context: promotion
+		});
+		if (promoted !== void 0) {
+			role = promoted.role;
+			promotedHref = promoted.href;
+			if (name === void 0) name = clip(iconHintOf(element) ?? synthesizeName(element, (a) => nameOf(a, doc)));
+		}
+	}
+	const href = promotedHref ?? (role === "link" ? hrefOf(element) : void 0);
 	if (role === "generic" && name === void 0 && value === void 0 && children.length === 0) return void 0;
+	if (promotion !== void 0 && role === "generic" && name === void 0 && value === void 0) {
+		if (children.length === 1) return children[0];
+	}
 	const node = {
 		role,
 		...name !== void 0 ? { name } : {},
@@ -2110,6 +2445,46 @@ function frameHint(iframe) {
 	return "unnamed";
 }
 /**
+* 可路由的绝对地址（分册 16 FR-16.1）。
+*
+* 只认 http(s)：`about:blank` / `srcdoc` / `data:` 这些外壳寻不到址，
+* 交出去只会让它拿一个匹配不上任何 frameId 的字符串去猜。
+*/
+function httpUrlOf(value, base) {
+	try {
+		const url = new URL(value, base);
+		return url.protocol === "http:" || url.protocol === "https:" ? url.href : void 0;
+	} catch {
+		return;
+	}
+}
+function routableUrlOf(iframe, doc) {
+	try {
+		const live = iframe.contentWindow?.location?.href;
+		if (live !== void 0 && live !== "about:blank") {
+			const routable = httpUrlOf(live, doc.baseURI);
+			if (routable !== void 0) return routable;
+		}
+	} catch {}
+	const src = iframe.getAttribute("src");
+	if (src === null || src.trim() === "") return void 0;
+	return httpUrlOf(src, doc.baseURI);
+}
+/**
+* 同源嵌套帧的文档；跨源与尚未就绪时返回 `undefined`。
+*
+* 跨源时 `contentDocument` 返回 `null` 而**不抛异常**，某些引擎在别的属性上才抛——
+* 两种形态都要接住，只写 try/catch 会漏掉前一种。
+*/
+function sameOriginDocumentOf(iframe) {
+	try {
+		const inner = iframe.contentDocument;
+		return inner === null || inner.body === null ? void 0 : inner;
+	} catch {
+		return;
+	}
+}
+/**
 * 句柄发放与解析。表在 reader 实例内、**跨感知保留**（分册 18 FR-18.5）：
 * 每次 read() 作废全部旧句柄会让多步任务陷入「读—点—失效—再读」的空转，
 * 而安全性本就不由句柄寿命承担——执行前的 `modalStateOf` / `inActionScope` /
@@ -2180,6 +2555,12 @@ function createDomPerceptionReader(options = {}) {
 	*/
 	const elevatedModals = /* @__PURE__ */ new Set();
 	const rootDocument = () => options.document ?? globalThis.document;
+	/** 提升未开启时返回 undefined，遍历侧据此整段跳过（AC-G10） */
+	const promotionOf = (view) => options.promoteRoles === true ? {
+		view,
+		...options.interactiveHint !== void 0 ? { interactiveHint: options.interactiveHint } : {},
+		...options.roleHints !== void 0 ? { roleHints: options.roleHints } : {}
+	} : void 0;
 	/**
 	* 把一条帧授权解析成 Document，逐层下钻（分册 18 FR-18.3）。
 	*
@@ -2256,13 +2637,15 @@ function createDomPerceptionReader(options = {}) {
 		const root = rootDocument();
 		if (root === void 0) return {
 			nodes: [],
-			frameNotes: []
+			frameNotes: [],
+			nestedFrames: []
 		};
 		handles ??= new HandleIssuer(/* @__PURE__ */ new Set(), /* @__PURE__ */ new Set());
 		handles.prune();
 		const issuer = handles;
 		const nodes = [];
 		const frameNotes = [];
+		const nestedFrames = [];
 		/** 同一个未授权 iframe 至多报一次（它可能同时落在多个 include 根的子树里） */
 		const reportedUnauthorized = /* @__PURE__ */ new Set();
 		const resolvedScopes = [];
@@ -2287,6 +2670,66 @@ function createDomPerceptionReader(options = {}) {
 				doc: resolved.doc
 			});
 		}
+		/**
+		* 范围内未授权嵌套帧的处置（分册 16 FR-16.1）。
+		*
+		* 递归而不是循环固定层数：0.13.0 D-18-8 用「路径是宿主写死的数组」论证深度上限，
+		* 自动发现一进来这个前提就没了。兜底改由**帧数与节点总预算**承担，
+		* 层数是错的度量（见分册 16 §0.2）。
+		*/
+		function descendFrames(roots, doc, excluded, frameScope, label, tag, actionable, actionExcluded) {
+			for (const element of roots) for (const iframe of nestedFramesIn(element, excluded)) {
+				if (authorizedFrames.has(iframe)) continue;
+				if (reportedUnauthorized.has(iframe)) continue;
+				reportedUnauthorized.add(iframe);
+				const hint = frameHint(iframe);
+				if (options.discoverNestedFrames === true) {
+					const url = routableUrlOf(iframe, doc);
+					if (url !== void 0) {
+						nestedFrames.push({
+							url,
+							hint,
+							...tag !== void 0 ? { frame: tag } : {}
+						});
+						continue;
+					}
+					const inner = sameOriginDocumentOf(iframe);
+					if (inner !== void 0 && inlineFrame(inner, iframe, frameScope, label, tag, actionable, actionExcluded)) continue;
+				}
+				nodes.push({
+					role: "note",
+					name: `A nested frame "${hint}" inside "${label}" is not part of the authorized scope and was not read. Ask the user to authorize it if its content is needed.`,
+					...tag !== void 0 ? { frame: tag } : {}
+				});
+			}
+		}
+		/**
+		* 无地址同源帧的就地内联；成功返回 `true`。
+		*
+		* `srcdoc` / `about:blank` 没有可路由地址，外壳寻不到址，只能由父帧代读。
+		*
+		* 可操作性**继承自那个 `<iframe>` 元素本身**：它由父页面写入内容，视觉上就是父页面的一部分，
+		* 父帧的 action scope 把它圈进来了就等于圈进了它的内容；没圈进来则帧内一个句柄都不发。
+		* exclude 在子文档里重新求值——敏感控件在每一层都要剪掉，不因为它在帧里就放宽（§0.1 边界 3）。
+		*/
+		function inlineFrame(inner, iframe, frameScope, label, tag, actionable, actionExcluded) {
+			const innerExcluded = /* @__PURE__ */ new Set();
+			for (const selector of frameScope.exclude ?? []) for (const target of inner.querySelectorAll(selector)) innerExcluded.add(target);
+			const innerActionable = /* @__PURE__ */ new Set();
+			const innerActionExcluded = /* @__PURE__ */ new Set();
+			if (actionable.has(iframe)) {
+				innerActionable.add(inner.body);
+				for (const descendant of inner.body.querySelectorAll("*")) innerActionable.add(descendant);
+				for (const selector of actionScopeFor(label)?.exclude ?? []) for (const target of inner.querySelectorAll(selector)) innerActionExcluded.add(target);
+			}
+			issuer.useSets(innerActionable, innerActionExcluded);
+			const innerView = inner.defaultView;
+			const node = describe(inner.body, innerExcluded, inner, innerView, capture, issuer, tag, "inline-frame", promotionOf(innerView));
+			if (node !== void 0) nodes.push(node);
+			descendFrames([inner.body], inner, innerExcluded, frameScope, label, tag, innerActionable, innerActionExcluded);
+			issuer.useSets(actionable, actionExcluded);
+			return node !== void 0;
+		}
 		for (const { scope: frameScope, label, doc } of resolvedScopes) {
 			const view = doc.defaultView;
 			const tag = label === "self" ? void 0 : label;
@@ -2297,27 +2740,17 @@ function createDomPerceptionReader(options = {}) {
 			const roots = [];
 			for (const selector of frameScope.include) for (const element of doc.querySelectorAll(selector)) if (!roots.includes(element)) roots.push(element);
 			for (const element of roots) {
-				const node = describe(element, excluded, doc, view, capture, issuer, tag, void 0);
+				const node = describe(element, excluded, doc, view, capture, issuer, tag, void 0, promotionOf(view));
 				if (node !== void 0) nodes.push(node);
 			}
-			for (const element of roots) for (const iframe of nestedFramesIn(element, excluded)) {
-				if (authorizedFrames.has(iframe)) continue;
-				if (reportedUnauthorized.has(iframe)) continue;
-				reportedUnauthorized.add(iframe);
-				const hint = frameHint(iframe);
-				nodes.push({
-					role: "note",
-					name: `A nested frame "${hint}" inside "${label}" is not part of the authorized scope and was not read. Ask the user to authorize it if its content is needed.`,
-					...tag !== void 0 ? { frame: tag } : {}
-				});
-			}
+			descendFrames(roots, doc, excluded, frameScope, label, tag, sets.actionable, sets.excluded);
 		}
 		pruneElevated();
 		const view = root.defaultView;
 		const sets = actionSets(root, actionScopeFor("self"));
 		for (const modal of elevatedModals) {
 			issuer.useSets(/* @__PURE__ */ new Set([modal, ...modal.querySelectorAll("*")]), sets.excluded);
-			const node = describe(modal, /* @__PURE__ */ new Set(), root, view, capture, issuer, void 0, "modal-elevated");
+			const node = describe(modal, /* @__PURE__ */ new Set(), root, view, capture, issuer, void 0, "modal-elevated", promotionOf(view));
 			if (node !== void 0) nodes.push(node);
 		}
 		for (const modal of root.querySelectorAll(MODAL_SELECTOR)) {
@@ -2330,12 +2763,13 @@ function createDomPerceptionReader(options = {}) {
 		}
 		return {
 			nodes,
-			frameNotes
+			frameNotes,
+			nestedFrames
 		};
 	}
 	async function readWithImages(scope, capture) {
 		const targets = [];
-		const { nodes, frameNotes } = collect(scope, {
+		const { nodes, frameNotes, nestedFrames } = collect(scope, {
 			targets,
 			minImageArea: capture.minImageArea ?? 0
 		});
@@ -2366,16 +2800,18 @@ function createDomPerceptionReader(options = {}) {
 			images,
 			imagesOmitted: targets.length - selected.length,
 			imageFailures,
-			...frameNotes.length > 0 ? { frameNotes } : {}
+			...frameNotes.length > 0 ? { frameNotes } : {},
+			...nestedFrames.length > 0 ? { nestedFrames } : {}
 		};
 	}
 	function read(scope, capture) {
 		if (capture === void 0) return collect(scope, void 0).nodes;
 		if (!capture.images || capture.maxImages <= 0) {
-			const { nodes, frameNotes } = collect(scope, void 0);
+			const { nodes, frameNotes, nestedFrames } = collect(scope, void 0);
 			return Promise.resolve({
 				nodes,
-				...frameNotes.length > 0 ? { frameNotes } : {}
+				...frameNotes.length > 0 ? { frameNotes } : {},
+				...nestedFrames.length > 0 ? { nestedFrames } : {}
 			});
 		}
 		return readWithImages(scope, capture);
@@ -2732,6 +3168,182 @@ function createDomPageActionExecutor(options) {
 		describe
 	};
 }
+/** @experimental */
+function createRemoteTargetRegistry() {
+	let table = /* @__PURE__ */ new Map();
+	return {
+		/**
+		* 整表替换而非合并（FR-13.2）：合并会让上一次感知的 ref 在本次感知后仍然可执行——
+		* 那正是 `PAGE_ACTION_STALE_REF` 要拦的东西。本地形态里旧 ref 天然失效
+		* （DOM 重新遍历、句柄表 prune 掉离开文档的条目），远端必须手动复现这个失效语义，
+		* 否则远端比本地更松。
+		*/
+		replace(entries) {
+			const next = /* @__PURE__ */ new Map();
+			for (const entry of entries) {
+				const { ref, role, name, secret, frame, elevated } = entry;
+				next.set(ref, {
+					role,
+					...name !== void 0 ? { name } : {},
+					...secret === true ? { secret: true } : {},
+					...frame !== void 0 ? { frame } : {},
+					...elevated === true ? { elevated: true } : {}
+				});
+			}
+			table = next;
+		},
+		get(ref) {
+			return table.get(ref);
+		},
+		get size() {
+			return table.size;
+		}
+	};
+}
+/** 缺省单次往返上限（FR-13.2 / FR-13.3） */
+const DEFAULT_PAGE_AGENT_TIMEOUT_MS = 1e4;
+/**
+* 一次带超时的往返，并把三类失败统一成 `WebSkillError`（FR-13.6）。
+*
+* 三类都必须显式失败，**绝不降级成空结果**：
+* 空节点数组的含义是「页面上什么都没有」，模型收到它会据此作答，
+* 比报错危险得多——报错至少不会产出一个自信的错误回答。
+*
+* @param expect 期望的应答类型；对不上通常意味着装错了 agent 版本，
+*   静默容忍会把问题推到很远的地方才暴露。
+*/
+async function roundTrip(transport, request, expect, code, timeoutMs) {
+	let timer;
+	let reply;
+	try {
+		reply = await Promise.race([transport.send(request), new Promise((_resolve, reject) => {
+			timer = setTimeout(() => reject(new WebSkillError(code, `Page agent request "${request.type}" timed out after ${timeoutMs}ms with no reply from the page.`)), timeoutMs);
+		})]);
+	} catch (e) {
+		if (e instanceof WebSkillError) throw e;
+		const message = e instanceof Error ? e.message : String(e);
+		throw new WebSkillError(code, `Page agent request "${request.type}" failed: ${message}`);
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+	}
+	if (reply.type === "error") throw new WebSkillError(reply.code, reply.message);
+	if (reply.type !== expect) throw new WebSkillError(code, `Page agent replied with "${reply.type}" to a "${request.type}" request; expected "${expect}".`);
+	return reply;
+}
+/**
+* 跨上下文的页面感知（分册 13 / FR-13.2）。
+*
+* 把句柄描述表写进 registry，**只把 `result` 返回给调用方**——
+* 返回值就是标准 `PerceptionResult`，不夹带任何新字段（AC-13.2）。
+* @experimental
+*/
+function createRemotePerceptionReader(options) {
+	const { transport, targets, timeoutMs = DEFAULT_PAGE_AGENT_TIMEOUT_MS } = options;
+	return { async read(scope, capture) {
+		const reply = await roundTrip(transport, {
+			type: "perceive",
+			scope,
+			...capture !== void 0 ? { capture } : {}
+		}, "perceive-result", "PERCEPTION_FAILED", timeoutMs);
+		targets.replace(reply.targets);
+		return reply.result;
+	} };
+}
+/**
+* 跨上下文的页面操作执行器（分册 13 / FR-13.3）。
+* @experimental
+*/
+function createRemotePageActionExecutor(options) {
+	const { transport, targets, timeoutMs = DEFAULT_PAGE_AGENT_TIMEOUT_MS } = options;
+	return {
+		/**
+		* **同步**查表。`PageActionPolicy.act()` 在弹确认卡之前调它，
+		* 拿到的 target 决定卡上写什么、是否 `secret`、是否 `elevated`——
+		* 改成异步就是改 `@webskill/agent` 的公开契约。
+		*
+		* 表里没有即 `undefined`，于是 `act()` 抛 `PAGE_ACTION_STALE_REF`：
+		* 没感知过就执行 = 拒绝，宁可让模型多感知一次（fail-closed）。
+		*/
+		describe(ref) {
+			return targets.get(ref);
+		},
+		/**
+		* 原样返回远端**执行那一刻**回填的 outcome（FR-13.5）：
+		* 不用 registry 里的快照拼装，也不补默认值——
+		* 补出来的 `false` 与「远端没报」在审计上不是一回事。
+		*/
+		async execute(request) {
+			return (await roundTrip(transport, {
+				type: "execute",
+				request
+			}, "execute-result", "TOOL_EXECUTION_FAILED", timeoutMs)).outcome;
+		}
+	};
+}
+/** 深度收集句柄；顺序即遍历序，便于与本地形态逐条比对 */
+function collectRefs(nodes, out = []) {
+	for (const node of nodes) {
+		if (node.ref !== void 0) out.push(node.ref);
+		if (node.children !== void 0) collectRefs(node.children, out);
+	}
+	return out;
+}
+/**
+* 页面侧处理器（分册 13 / FR-13.7）。
+*
+* 必须是工厂而不是裸函数：`DomPerceptionReader` **是有状态的**——
+* `resolve(ref)` 依赖上一次感知发出的句柄表，模态提升状态也跨调用累积。
+* 每次请求新建 reader，`execute` 就永远 resolve 不到 `perceive` 发出的 ref。
+*
+* 它**不自己收发消息**：只做「请求进、应答出」。监听消息通道、判断消息是不是给自己的、
+* 回不回 `true`——那些全是宿主的事，本包不得出现任何扩展 API。
+* @experimental
+*/
+function createPageAgentHandler(options = {}) {
+	const reader = createDomPerceptionReader({
+		...options.document !== void 0 ? { document: options.document } : {},
+		...options.actionScope !== void 0 ? { actionScope: options.actionScope } : {},
+		...options.promoteRoles !== void 0 ? { promoteRoles: options.promoteRoles } : {},
+		...options.interactiveHint !== void 0 ? { interactiveHint: options.interactiveHint } : {},
+		...options.roleHints !== void 0 ? { roleHints: options.roleHints } : {},
+		...options.discoverNestedFrames !== void 0 ? { discoverNestedFrames: options.discoverNestedFrames } : {}
+	});
+	const executor = createDomPageActionExecutor({
+		reader,
+		...options.pickFiles !== void 0 ? { pickFiles: options.pickFiles } : {}
+	});
+	return { async handle(request) {
+		try {
+			if (request.type === "perceive") {
+				const raw = request.capture === void 0 ? reader.read(request.scope) : await reader.read(request.scope, request.capture);
+				const result = Array.isArray(raw) ? { nodes: raw } : raw;
+				const targets = [];
+				for (const ref of collectRefs(result.nodes)) {
+					const target = executor.describe(ref);
+					if (target !== void 0) targets.push({
+						ref,
+						...target
+					});
+				}
+				return {
+					type: "perceive-result",
+					result,
+					targets
+				};
+			}
+			return {
+				type: "execute-result",
+				outcome: await executor.execute(request.request)
+			};
+		} catch (e) {
+			return {
+				type: "error",
+				code: e instanceof WebSkillError ? e.code : "TOOL_EXECUTION_FAILED",
+				message: e instanceof Error ? e.message : String(e)
+			};
+		}
+	} };
+}
 const isRecord = (v) => typeof v === "object" && v !== null;
 const isNonEmptyString = (v) => typeof v === "string" && v !== "";
 /** Worker 侧入站校验：非法消息返回 undefined（忽略） */
@@ -4185,4 +4797,4 @@ function originOf(blockedURI) {
 }
 
 //#endregion
-export { BrowserSkillManager, BrowserWorkerScriptExecutor, ChromeBuiltinLlmClient, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, HOST_PORT_MATRIX, IframeWorkerLike, OpfsProvider, TsTranspiler, VIEWER_SANDBOX_TOKENS, WORKER_BOOTSTRAP_SOURCE, WorkerRuntimeClient, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createIframeWorker, createLlmClient, deleteMemoryEncryptionKey, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };
+export { BrowserSkillManager, BrowserWorkerScriptExecutor, ChromeBuiltinLlmClient, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, HOST_PORT_MATRIX, IframeWorkerLike, OpfsProvider, SANDBOX_PAGE_SCRIPT_SOURCE, TsTranspiler, VIEWER_SANDBOX_TOKENS, WORKER_BOOTSTRAP_SOURCE, WorkerRuntimeClient, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };