@webskill/sdk 0.13.0 → 0.14.0

package/dist/{catalogComponents-BgAJN0p8-CYEXSk45.js → catalogComponents-BgAJN0p8-Cr55ouOg.js}

@@ -1,6 +1,6 @@
 import { a as __require, i as __reExport, n as __esmMin, o as __toCommonJS, r as __exportAll$2, s as __toESM$1, t as __commonJSMin$1 } from "./rolldown-runtime-BOF7iYI8.js";
-import { h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { Ct as resolveSurfaceFormTexts, E as collectScopedValues, H as qualifyFieldName, I as gaugePercent, T as collectFormScopes, at as DEFAULT_CHART_FONT_SIZES, ct as DEFAULT_SURFACE_HOST_CONTROL_TEXTS, gt as chartSpecFromProps, j as evaluateFieldCondition, st as DEFAULT_SURFACE_FORM_TEXTS, wt as resolveSurfaceHostControlTexts, xt as resolveChartFontSizes, yt as mountEchart } from "./dist-DqcL6jKO.js";
+import { b as WebSkillError } from "./dist-D5YhlCdY.js";
+import { Ct as resolveSurfaceFormTexts, E as collectScopedValues, H as qualifyFieldName, I as gaugePercent, T as collectFormScopes, at as DEFAULT_CHART_FONT_SIZES, ct as DEFAULT_SURFACE_HOST_CONTROL_TEXTS, gt as chartSpecFromProps, j as evaluateFieldCondition, st as DEFAULT_SURFACE_FORM_TEXTS, wt as resolveSurfaceHostControlTexts, xt as resolveChartFontSizes, yt as mountEchart } from "./dist-CiaDIqkV.js";
 import minpath$1 from "node:path";
 import { fileURLToPath as urlToPath$1 } from "node:url";
 import { z } from "zod";

package/dist/{dist-ExSQky4C.js → dist-Bfga1TmS.js}

@@ -1,5 +1,5 @@
-import { K as validateSkills, M as messageOf, P as parseSkillMarkdown, R as renderAvailableSkillsXml, V as resolveInsideRoot, _ as assertSafePathSegment, g as assertRemoteUrlAllowed, h as WebSkillError, m as SkillReader, p as SkillDiscovery, v as atomicWriteText, y as buildCatalog } from "./dist-Bev6i6Ip.js";
-import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
+import { B as messageOf, C as assertSafePathSegment, H as parseSkillMarkdown, K as renderAvailableSkillsXml, S as assertRemoteUrlAllowed, T as buildCatalog, Y as resolveInsideRoot, _ as SkillDiscovery, b as WebSkillError, et as validateSkills, v as SkillReader, w as atomicWriteText } from "./dist-D5YhlCdY.js";
+import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BxtUkrgV.js";
 
 //#region ../runtime/dist/index.js
 /** 与正常工具结果同构：模型读到的是「这次调用被中断了」，而不是一个凭空消失的调用 */
@@ -2959,6 +2959,17 @@ const MODEL_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
 	"image/webp",
 	"image/gif"
 ]);
+/**
+* 数据源清单里的出处标注（0.14.0 分册 21，FR-21.6）。
+*
+* 措辞必须说出「这段说明来自页面、可能不准确」：`description` 已在候选层剥掉换行与控制字符，
+* 它无法把自己伪装成上下文里的新一行指令——**剥换行与这句标注是一对，只做一件都不够**。
+*/
+const DATA_SOURCE_PROVENANCE_NOTE = {
+	"": "",
+	"page-declared": "  [declared by the current site; this description comes from the page and may be inaccurate]",
+	"tool-projection": "  [projected from a tool the current site registered; this description comes from the page and may be inaccurate]"
+};
 /** 分片是不是 PDF；mime 允许带参数与大小写差异，与 FR-11.1 的判定同口径 */
 const isPdfPart = (part) => part.type === "file" && part.mimeType.split(";")[0]?.trim().toLowerCase() === SUPPORTED_DOCUMENT_MIME.pdf;
 /**
@@ -4008,7 +4019,7 @@ var AgentLoop = class {
 			const source = resolution.kind === "script" ? void 0 : (this.#deps.externalTools ?? []).find((s) => s.canHandle(call.name));
 			if (source === void 0 && !this.#checkToolAccess(state, call.name)) result = this.#deniedToolError(state, call.name);
 			else if (resolution.kind === "script") result = await this.#handleScriptTool(call, resolution.skillName, resolution.scriptName, state);
-			else if (source) result = await source.call(call.name, call.arguments);
+			else if (source) result = await source.call(call.name, call.arguments, { runId: state.runId });
 			else {
 				if (resolution.kind === "not-found") state.unknownToolCalls += 1;
 				result = toolError(resolution.code, resolution.message, resolution.kind === "not-found" ? resolution.data : void 0);
@@ -4789,7 +4800,9 @@ var AgentLoop = class {
 		}
 		const head = text.slice(0, Math.floor(max * .6));
 		const tail = text.slice(-Math.floor(max * .3));
-		return `${head}\n...[truncated ${text.length - head.length - tail.length} chars; ${note}]...\n${tail}`;
+		const omitted = text.length - head.length - tail.length;
+		state.trace.record("run.warning", { message: `Tool result for "${call.name}" exceeded ${String(max)} chars and was truncated in the middle; ${String(omitted)} chars omitted (${note}).` });
+		return `${head}\n...[truncated ${omitted} chars; ${note}]...\n${tail}`;
 	}
 	/** SkillStateGuard 判定（无注入默认全放行；仅显式 false 拦截） */
 	async #guardDenied(kind, skillName) {
@@ -4858,6 +4871,7 @@ var AgentLoop = class {
 		if (!root) return "";
 		let allowedTools;
 		let dependencies = [];
+		let declaredSources = [];
 		try {
 			const { metadata } = parseSkillMarkdown(skillMdText ?? await this.#deps.fs.readText(`${root}/SKILL.md`));
 			const rawDeps = metadata["dependencies"];
@@ -4868,6 +4882,9 @@ var AgentLoop = class {
 				state.skillAllowedTools.set(skillName, allowedTools);
 				this.#warnUnmatchedToolPatterns(state, skillName, allowedTools);
 			} else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "allowed-tools" metadata entry; ignored` });
+			const rawSources = metadata["data-sources"];
+			if (rawSources !== void 0) if (Array.isArray(rawSources)) declaredSources = rawSources.filter((e) => typeof e === "string");
+			else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "data-sources" metadata entry; ignored` });
 		} catch (e) {
 			state.trace.record("run.warning", { message: `Failed to read or parse SKILL.md of skill "${skillName}": ${messageOf(e)}` });
 		}
@@ -4903,6 +4920,7 @@ var AgentLoop = class {
 			}
 		}
 		let note = (loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "") + formatSkillScriptManifest(scripts);
+		note += this.#dataSourceNotice(skillName, declaredSources, state);
 		for (const dep of dependencies) {
 			if (state.activated.has(dep)) continue;
 			if (!this.#deps.skillIndex.has(dep)) {
@@ -4914,6 +4932,26 @@ var AgentLoop = class {
 		return note;
 	}
 	/**
+	* 0.14.0 分册 19：技能声明的源在本宿主缺失时，把「缺哪些 / 有哪些」写进激活回执与 trace。
+	* 宿主没注入清单时一个字不说——那是「未知」，不是「没有」。
+	*
+	* 0.14.0 分册 21（DV-7）：「有哪些」由 id 列表升级为 `<id> — <description>`，
+	* 并对非宿主声明的条目附出处标注。`description` 可能来自页面，
+	* 因此标注必须与它同时出现——只写说明不写出处，等于让站点以宿主口吻讲话。
+	*/
+	#dataSourceNotice(skillName, declared, state) {
+		const declaredSources = this.#deps.dataSources;
+		const available = typeof declaredSources === "function" ? declaredSources() : declaredSources;
+		if (declared.length === 0 || available === void 0) return "";
+		const have = new Set(available.map((source) => source.id));
+		const missing = declared.filter((id) => !have.has(id));
+		if (missing.length === 0) return "";
+		const listed = available.map((source) => `\n- ${source.id} — ${source.description}${DATA_SOURCE_PROVENANCE_NOTE[source.provenance ?? ""] ?? ""}`).join("");
+		const message = `Skill "${skillName}" declares data source(s) this host does not provide: ${missing.join(", ")}. Available here:${listed || " (none)"}\nDo not retry them or invent their values; tell the user which data source is missing.`;
+		state.trace.record("run.warning", { message });
+		return `\n\n${message}`;
+	}
+	/**
 	* D2 Schema 兜底链（同一 run 内激活时只算一次）：
 	* 显式 inputSchema > sidecar scripts/<name>.schema.json > schemaInferer 推导 > schemaUnavailable
 	* 返回值即最终来源，进技能清单告诉模型该信谁（FR-18.1）。
@@ -5428,6 +5466,7 @@ var WebSkillRuntime = class {
 			skillIntegrityGuard: this.#deps.skillIntegrityGuard,
 			skillOutcomeReporter: this.#deps.skillOutcomeReporter,
 			fetchData: this.#deps.fetchData,
+			dataSources: this.#deps.dataSources,
 			linkedDocuments: this.#deps.linkedDocuments,
 			docxExtractor: this.#deps.docxExtractor,
 			xlsxExtractor: this.#deps.xlsxExtractor,
@@ -5556,6 +5595,7 @@ var WebSkillRuntime = class {
 			skillIntegrityGuard: this.#deps.skillIntegrityGuard,
 			skillOutcomeReporter: this.#deps.skillOutcomeReporter,
 			fetchData: this.#deps.fetchData,
+			dataSources: this.#deps.dataSources,
 			linkedDocuments: this.#deps.linkedDocuments,
 			docxExtractor: this.#deps.docxExtractor,
 			xlsxExtractor: this.#deps.xlsxExtractor,
@@ -6838,4 +6878,4 @@ var FsToolStepStore = class {
 };
 
 //#endregion
-export { bridgeError as $, ProgressiveRouter as A, refineUserProfile as At, SUPPORTED_DOCUMENT_MIME as B, toLlmToolSpec as Bt, FsSessionStore as C, normalizeToolError as Ct, HookRunner as D, readProfileEntries as Dt, GoogleGenAiClient as E, readBehaviorRecords as Et, READ_SKILL_FILE_TOOL_NAME as F, schemaToForm as Ft, USER_PROFILE_EXPORT_VERSION as G, TEXT_BUDGETED_CONTENT_TYPES as H, toVercelToolSpecs as Ht, RUN_SNAPSHOT_SCHEMA_VERSION as I, scriptToolName as It, USER_PROFILE_PROMPT_HEADER as J, USER_PROFILE_KEY as K, RUN_TRACE_SCHEMA_VERSION as L, sealToolCallPairs as Lt, READ_LINKED_DOCUMENT_TOOL_NAME as M, resolveToolName as Mt, READ_SKILL_FILE_INPUT_SCHEMA as N, sampleBehaviorRecords as Nt, MAX_TOOL_STEP_ARG_BYTES as O, readUserProfile as Ot, READ_SKILL_FILE_TOOL as P, schemaSourceLabel as Pt, applyUserProfileImport as Q, SENSITIVE_ANNOTATION as R, summarizeRunUsage as Rt, FsRunTraceStore as S, normalizeToolContent as St, FullDisclosureRouter as T, parseUserProfileExport as Tt, TraceRecorder as U, validateUiSpecEvent as Ut, SerializingMemoryStore as V, toRecordDigests as Vt, UNSUPPORTED_DOCUMENT_MESSAGE as W, validateUiSpecNode as Wt, WebSkillRuntime as X, USER_PROFILE_REFINE_PROMPT as Y, appendBehaviorRecords as Z, EventBus as _, mergeCatalogEntries as _t, ASK_USER_TOOL as a, extractChartSpec as at, FsMemoryStore as b, networkUrlHost as bt, AnthropicClient as c, extractUiSpecEvents as ct, DEFAULT_LOOP_LIMITS as d, fromVercelResult as dt, buildRenderResult as et, DEFAULT_MAX_DATA_SOURCE_BYTES as f, fromVercelStreamPart as ft, EMPTY_USER_PROFILE as g, listSkillScripts as gt, DEFAULT_USER_PROFILE_LIMITS as h, isUnsupportedRunSnapshot as ht, ASK_USER_MAX_FIELDS as i, exportUserProfile as it, READ_LINKED_DOCUMENT_TOOL as j, renderUserProfileContext as jt, OpenAiCompatibleClient as k, redactToolStepArgs as kt, BEHAVIOR_RECORDS_KEY as l, findUnpairedToolCalls as lt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as m, isNetworkAllowed as mt, ASK_USER_FIELD_TYPES as n, createWebSkillApi as nt, ASK_USER_TOOL_NAME as o, extractSkillCandidate as ot, DEFAULT_MAX_DOCUMENT_BYTES as p, interruptedToolResult as pt, USER_PROFILE_NO_INVENTION_RULE as q, ASK_USER_INPUT_SCHEMA as r, diffUserProfile as rt, AgentLoop as s, extractTodoTraceEvents as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, createScriptContext as tt, CapabilityApproval as u, formatSkillScriptManifest as ut, FS_SESSION_PAGE_SIZE as v, mergeProfileEntries as vt, FsToolStepStore as w, parseBridgeRequest as wt, FsRunSnapshotStore as x, normalizeErrorCode as xt, FsArtifactStore as y, networkPolicyLibSource as yt, SESSION_SCHEMA_VERSION as z, summarizeToolCalls as zt };
+export { bridgeError as $, ProgressiveRouter as A, refineUserProfile as At, SUPPORTED_DOCUMENT_MIME as B, toBase64 as Bt, FsSessionStore as C, normalizeToolError as Ct, HookRunner as D, readProfileEntries as Dt, GoogleGenAiClient as E, readBehaviorRecords as Et, READ_SKILL_FILE_TOOL_NAME as F, schemaToForm as Ft, USER_PROFILE_EXPORT_VERSION as G, validateUiSpecNode as Gt, TEXT_BUDGETED_CONTENT_TYPES as H, toRecordDigests as Ht, RUN_SNAPSHOT_SCHEMA_VERSION as I, scriptToolName as It, USER_PROFILE_PROMPT_HEADER as J, USER_PROFILE_KEY as K, RUN_TRACE_SCHEMA_VERSION as L, sealToolCallPairs as Lt, READ_LINKED_DOCUMENT_TOOL_NAME as M, resolveToolName as Mt, READ_SKILL_FILE_INPUT_SCHEMA as N, sampleBehaviorRecords as Nt, MAX_TOOL_STEP_ARG_BYTES as O, readUserProfile as Ot, READ_SKILL_FILE_TOOL as P, schemaSourceLabel as Pt, applyUserProfileImport as Q, SENSITIVE_ANNOTATION as R, summarizeRunUsage as Rt, FsRunTraceStore as S, normalizeToolContent as St, FullDisclosureRouter as T, parseUserProfileExport as Tt, TraceRecorder as U, toVercelToolSpecs as Ut, SerializingMemoryStore as V, toLlmToolSpec as Vt, UNSUPPORTED_DOCUMENT_MESSAGE as W, validateUiSpecEvent as Wt, WebSkillRuntime as X, USER_PROFILE_REFINE_PROMPT as Y, appendBehaviorRecords as Z, EventBus as _, mergeCatalogEntries as _t, ASK_USER_TOOL as a, extractChartSpec as at, FsMemoryStore as b, networkUrlHost as bt, AnthropicClient as c, extractUiSpecEvents as ct, DEFAULT_LOOP_LIMITS as d, fromVercelResult as dt, buildRenderResult as et, DEFAULT_MAX_DATA_SOURCE_BYTES as f, fromVercelStreamPart as ft, EMPTY_USER_PROFILE as g, listSkillScripts as gt, DEFAULT_USER_PROFILE_LIMITS as h, isUnsupportedRunSnapshot as ht, ASK_USER_MAX_FIELDS as i, exportUserProfile as it, READ_LINKED_DOCUMENT_TOOL as j, renderUserProfileContext as jt, OpenAiCompatibleClient as k, redactToolStepArgs as kt, BEHAVIOR_RECORDS_KEY as l, findUnpairedToolCalls as lt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as m, isNetworkAllowed as mt, ASK_USER_FIELD_TYPES as n, createWebSkillApi as nt, ASK_USER_TOOL_NAME as o, extractSkillCandidate as ot, DEFAULT_MAX_DOCUMENT_BYTES as p, interruptedToolResult as pt, USER_PROFILE_NO_INVENTION_RULE as q, ASK_USER_INPUT_SCHEMA as r, diffUserProfile as rt, AgentLoop as s, extractTodoTraceEvents as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, createScriptContext as tt, CapabilityApproval as u, formatSkillScriptManifest as ut, FS_SESSION_PAGE_SIZE as v, mergeProfileEntries as vt, FsToolStepStore as w, parseBridgeRequest as wt, FsRunSnapshotStore as x, normalizeErrorCode as xt, FsArtifactStore as y, networkPolicyLibSource as yt, SESSION_SCHEMA_VERSION as z, summarizeToolCalls as zt };