@webskill/sdk 0.13.0 → 0.15.0

package/dist/index.js

@@ -1,14 +1,1010 @@
-import { A as jsonRenderer, B as resolveArchiveLimits, C as computeDigest, D as exportSkills, E as escapeXml, F as parseSkillPackManifest, G as unzipWithLimits, H as signSkill, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, N as normalizePath, O as isAtomicTempPath, P as parseSkillMarkdown, R as renderAvailableSkillsXml, S as checkSkillRules, T as detectSkillArchiveShapeFromFs, U as signaturePayloadBytes, V as resolveInsideRoot, W as stripArchiveRoot, Y as xmlRenderer, _ as assertSafePathSegment, a as MemoryFS, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, f as SKILL_SIGNATURE_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, j as keyIdOf, k as isValidSkillName, l as SKILL_NAME_MAX_LENGTH, m as SkillReader, n as DEFAULT_ARCHIVE_LIMITS, o as SIGNATURE_SCHEMA_VERSION, p as SkillDiscovery, q as verifyManifest, r as FsTrustedKeyStore, s as SKILLS_LOCKFILE, t as ATOMIC_TMP_SUFFIX_PATTERN, u as SKILL_NAME_PATTERN, v as atomicWriteText, w as detectSkillArchiveShape, x as checkDependencyCycles, y as buildCatalog, z as renderCatalogJson } from "./dist-Bev6i6Ip.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { $ as bridgeError, A as ProgressiveRouter, At as refineUserProfile, B as SUPPORTED_DOCUMENT_MIME, Bt as toLlmToolSpec, C as FsSessionStore, Ct as normalizeToolError, D as HookRunner, Dt as readProfileEntries, E as GoogleGenAiClient, Et as readBehaviorRecords, F as READ_SKILL_FILE_TOOL_NAME, Ft as schemaToForm, G as USER_PROFILE_EXPORT_VERSION, H as TEXT_BUDGETED_CONTENT_TYPES, Ht as toVercelToolSpecs, I as RUN_SNAPSHOT_SCHEMA_VERSION, It as scriptToolName, J as USER_PROFILE_PROMPT_HEADER, K as USER_PROFILE_KEY, L as RUN_TRACE_SCHEMA_VERSION, Lt as sealToolCallPairs, M as READ_LINKED_DOCUMENT_TOOL_NAME, Mt as resolveToolName, N as READ_SKILL_FILE_INPUT_SCHEMA, Nt as sampleBehaviorRecords, O as MAX_TOOL_STEP_ARG_BYTES, Ot as readUserProfile, P as READ_SKILL_FILE_TOOL, Pt as schemaSourceLabel, Q as applyUserProfileImport, R as SENSITIVE_ANNOTATION, Rt as summarizeRunUsage, S as FsRunTraceStore, St as normalizeToolContent, T as FullDisclosureRouter, Tt as parseUserProfileExport, U as TraceRecorder, Ut as validateUiSpecEvent, V as SerializingMemoryStore, Vt as toRecordDigests, W as UNSUPPORTED_DOCUMENT_MESSAGE, Wt as validateUiSpecNode, X as WebSkillRuntime, Y as USER_PROFILE_REFINE_PROMPT, Z as appendBehaviorRecords, _ as EventBus, _t as mergeCatalogEntries, a as ASK_USER_TOOL, at as extractChartSpec, b as FsMemoryStore, bt as networkUrlHost, c as AnthropicClient, ct as extractUiSpecEvents, d as DEFAULT_LOOP_LIMITS, dt as fromVercelResult, et as buildRenderResult, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as fromVercelStreamPart, g as EMPTY_USER_PROFILE, gt as listSkillScripts, h as DEFAULT_USER_PROFILE_LIMITS, ht as isUnsupportedRunSnapshot, i as ASK_USER_MAX_FIELDS, it as exportUserProfile, j as READ_LINKED_DOCUMENT_TOOL, jt as renderUserProfileContext, k as OpenAiCompatibleClient, kt as redactToolStepArgs, l as BEHAVIOR_RECORDS_KEY, lt as findUnpairedToolCalls, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as isNetworkAllowed, n as ASK_USER_FIELD_TYPES, nt as createWebSkillApi, o as ASK_USER_TOOL_NAME, ot as extractSkillCandidate, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as interruptedToolResult, q as USER_PROFILE_NO_INVENTION_RULE, r as ASK_USER_INPUT_SCHEMA, rt as diffUserProfile, s as AgentLoop, st as extractTodoTraceEvents, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as createScriptContext, u as CapabilityApproval, ut as formatSkillScriptManifest, v as FS_SESSION_PAGE_SIZE, vt as mergeProfileEntries, w as FsToolStepStore, wt as parseBridgeRequest, x as FsRunSnapshotStore, xt as normalizeErrorCode, y as FsArtifactStore, yt as networkPolicyLibSource, z as SESSION_SCHEMA_VERSION, zt as summarizeToolCalls } from "./dist-ExSQky4C.js";
+import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
+import { A as SKILL_MANIFEST_FILE, C as keyIdOf, D as verifySkillSignature, E as signaturePayloadBytes, M as buildManifest, N as computeDigest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, S as SIGNATURE_SCHEMA_VERSION, T as signSkill, _ as SKILL_NAME_MAX_LENGTH, a as DEFAULT_ARCHIVE_LIMITS, b as parseSkillMarkdown, c as unzipWithLimits, d as stripArchiveRoot, f as SKILL_PACK_FILE, g as checkSkillRules, h as checkDependencyCycles, i as buildCatalog, j as SKILL_SIGNATURE_FILE, k as SKILLS_LOCKFILE, l as detectSkillArchiveShape, m as parseSkillPackManifest, n as SkillDiscovery, o as readResponseWithLimit, p as exportSkills, r as SkillReader, s as resolveArchiveLimits, t as validateSkills, u as detectSkillArchiveShapeFromFs, v as SKILL_NAME_PATTERN, w as readSkillSignature, x as FsTrustedKeyStore, y as isValidSkillName } from "./skill-CAJMsLod.js";
+import { a as atomicWriteText, i as ATOMIC_TMP_SUFFIX_PATTERN, n as normalizePath, o as isAtomicTempPath, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
+import { a as TEXT_EXTENSIONS, c as formatAttachmentText, i as IMAGE_MIME_TYPES, l as UNTRUSTED_LINE_LIMIT, n as DOCX_MIME, o as XLSX_MIME, r as FILE_MIME_TYPES, s as classifyAttachment, t as ATTACHMENT_TEXT_LIMIT, u as sanitizeUntrustedLine } from "./kind-DxgS8LM-.js";
+import { $ as scriptToolName, A as readUserProfile, B as createScriptContext, C as TraceRecorder, D as mergeProfileEntries, E as appendBehaviorRecords, F as DEFAULT_USER_PROFILE_LIMITS, G as ASK_USER_TOOL_NAME, H as ASK_USER_INPUT_SCHEMA, I as EMPTY_USER_PROFILE, J as READ_SKILL_FILE_TOOL_NAME, K as READ_SKILL_FILE_INPUT_SCHEMA, L as SerializingMemoryStore, M as USER_PROFILE_NO_INVENTION_RULE, N as USER_PROFILE_PROMPT_HEADER, O as readBehaviorRecords, P as renderUserProfileContext, Q as schemaSourceLabel, R as EventBus, S as extractTodoTraceEvents, T as USER_PROFILE_KEY, U as ASK_USER_MAX_FIELDS, V as ASK_USER_FIELD_TYPES, W as ASK_USER_TOOL, X as formatSkillScriptManifest, Y as ALLOWED_TOOLS_EXCLUSION_REASON, Z as listSkillScripts, _ as RUN_SNAPSHOT_SCHEMA_VERSION, a as networkPolicyLibSource, at as xmlRenderer, b as MAX_TOOL_STEP_ARG_BYTES, c as bridgeError, d as FsMemoryStore, et as resolveToolName, f as WebSkillRuntime, g as FsRunSnapshotStore, h as redactToolStepArgs, i as isNetworkAllowed, it as renderAvailableSkillsXml, j as sampleBehaviorRecords, k as readProfileEntries, l as parseBridgeRequest, m as SENSITIVE_ANNOTATION, n as normalizeErrorCode, nt as ProgressiveRouter, o as networkUrlHost, p as AgentLoop, q as READ_SKILL_FILE_TOOL, r as normalizeToolError, rt as escapeXml, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, tt as toLlmToolSpec, u as FsArtifactStore, v as isUnsupportedRunSnapshot, w as BEHAVIOR_RECORDS_KEY, x as extractSkillCandidate, y as DEFAULT_LOOP_LIMITS, z as schemaToForm } from "./approval-BnLLCOG0.js";
+import { a as GoogleGenAiClient, c as findUnpairedToolCalls, d as partsToText, f as promptText, i as toVercelToolSpecs, l as interruptedToolResult, n as fromVercelResult, o as AnthropicClient, p as textParts, r as fromVercelStreamPart, s as OpenAiCompatibleClient, u as sealToolCallPairs } from "./llm-B7lLH0ZI.js";
+import { c as DEFAULT_MAX_DOCUMENT_BYTES, d as TEXT_BUDGETED_CONTENT_TYPES, i as UNSUPPORTED_DOCUMENT_MESSAGE, l as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, n as READ_LINKED_DOCUMENT_TOOL_NAME, o as toBase64, r as SUPPORTED_DOCUMENT_MIME, s as DEFAULT_MAX_DATA_SOURCE_BYTES, t as READ_LINKED_DOCUMENT_TOOL, u as DEFAULT_MAX_UPLOAD_FILE_BYTES } from "./linkedDocument-xNXF-z8n.js";
+import { n as normalizeToolContent, t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
+import { n as extractChartSpec, t as buildRenderResult } from "./renderResult-D9Q-Vu2x.js";
+import { n as validateUiSpecEvent, r as validateUiSpecNode, t as extractUiSpecEvents } from "./surface-DVGiCmwq.js";
+import { t as createWebSkillApi } from "./webSkillApi-DOOyz2G5.js";
 
+//#region ../core/src/fs/memoryFs.ts
+const ROOT = "/";
+/** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
+var MemoryFS = class {
+	kind = "memory";
+	#entries = /* @__PURE__ */ new Map();
+	constructor() {
+		this.#entries.set(ROOT, {
+			type: "directory",
+			content: /* @__PURE__ */ new Uint8Array(0),
+			mtimeMs: Date.now()
+		});
+	}
+	#normalize(path) {
+		const out = [];
+		for (const seg of path.replace(/\\/g, "/").split("/")) {
+			if (seg === "" || seg === ".") continue;
+			if (seg === "..") out.pop();
+			else out.push(seg);
+		}
+		return ROOT + out.join("/");
+	}
+	#parentOf(key) {
+		const i = key.lastIndexOf("/");
+		return i <= 0 ? ROOT : key.slice(0, i);
+	}
+	#ensureParents(key) {
+		const chain = [];
+		let dir = this.#parentOf(key);
+		while (!this.#entries.has(dir)) {
+			chain.push(dir);
+			dir = this.#parentOf(dir);
+		}
+		for (const d of chain.reverse()) this.#entries.set(d, {
+			type: "directory",
+			content: /* @__PURE__ */ new Uint8Array(0),
+			mtimeMs: Date.now()
+		});
+	}
+	#getFile(key) {
+		const entry = this.#entries.get(key);
+		if (!entry || entry.type !== "file") throw new WebSkillError("FS_NOT_FOUND", `File not found: ${key}`);
+		return entry;
+	}
+	#getDirectory(key) {
+		const entry = this.#entries.get(key);
+		if (!entry || entry.type !== "directory") throw new WebSkillError("FS_NOT_FOUND", `Directory not found: ${key}`);
+		return entry;
+	}
+	async readText(path) {
+		return new TextDecoder().decode(this.#getFile(this.#normalize(path)).content);
+	}
+	async writeText(path, content) {
+		await this.writeBinary(path, new TextEncoder().encode(content));
+	}
+	async appendText(path, content) {
+		const key = this.#normalize(path);
+		const existing = this.#entries.get(key);
+		if (existing && existing.type !== "file") throw new WebSkillError("FS_PERMISSION_DENIED", `Cannot append to a directory: ${key}`);
+		const prior = existing ? new TextDecoder().decode(existing.content) : "";
+		this.#ensureParents(key);
+		this.#entries.set(key, {
+			type: "file",
+			content: new TextEncoder().encode(prior + content),
+			mtimeMs: Date.now()
+		});
+	}
+	async readBinary(path) {
+		return this.#getFile(this.#normalize(path)).content;
+	}
+	async writeBinary(path, content) {
+		const key = this.#normalize(path);
+		this.#ensureParents(key);
+		this.#entries.set(key, {
+			type: "file",
+			content,
+			mtimeMs: Date.now()
+		});
+	}
+	async exists(path) {
+		return this.#entries.has(this.#normalize(path));
+	}
+	async stat(path) {
+		const key = this.#normalize(path);
+		const entry = this.#entries.get(key);
+		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
+		return {
+			path: key,
+			type: entry.type,
+			size: entry.type === "file" ? entry.content.length : void 0,
+			mtimeMs: entry.mtimeMs
+		};
+	}
+	async list(path) {
+		const key = this.#normalize(path);
+		this.#getDirectory(key);
+		const prefix = key === ROOT ? ROOT : key + "/";
+		const out = [];
+		for (const [k, entry] of this.#entries) {
+			if (k === key || !k.startsWith(prefix)) continue;
+			if (k.slice(prefix.length).includes("/")) continue;
+			out.push({
+				path: k,
+				type: entry.type,
+				size: entry.type === "file" ? entry.content.length : void 0,
+				mtimeMs: entry.mtimeMs
+			});
+		}
+		return out;
+	}
+	async mkdir(path) {
+		const key = this.#normalize(path);
+		if (this.#entries.has(key)) return;
+		this.#ensureParents(key);
+		this.#entries.set(key, {
+			type: "directory",
+			content: /* @__PURE__ */ new Uint8Array(0),
+			mtimeMs: Date.now()
+		});
+	}
+	async remove(path, options) {
+		const key = this.#normalize(path);
+		if (!this.#entries.get(key)) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${key}`);
+		if (key === ROOT) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", "Cannot delete root directory");
+		const prefix = key + "/";
+		const descendants = [...this.#entries.keys()].filter((k) => k.startsWith(prefix));
+		if (descendants.length > 0 && !options?.recursive) throw new WebSkillError("FS_PATH_OUTSIDE_ROOT", `Directory not empty, use recursive: ${key}`);
+		for (const k of descendants) this.#entries.delete(k);
+		this.#entries.delete(key);
+	}
+	async rename(from, to) {
+		const src = this.#normalize(from);
+		const dst = this.#normalize(to);
+		const entry = this.#entries.get(src);
+		if (!entry) throw new WebSkillError("FS_NOT_FOUND", `Path not found: ${src}`);
+		const prefix = src + "/";
+		const descendants = [...this.#entries.entries()].filter(([k]) => k.startsWith(prefix));
+		this.#ensureParents(dst);
+		this.#entries.set(dst, entry);
+		for (const [k, v] of descendants) this.#entries.set(dst + k.slice(src.length), v);
+		for (const [k] of descendants) this.#entries.delete(k);
+		this.#entries.delete(src);
+	}
+};
+
+//#endregion
+//#region ../core/src/render/jsonRenderer.ts
+function renderCatalogJson(catalog) {
+	return JSON.stringify(catalog, null, 2);
+}
+const jsonRenderer = {
+	format: "json",
+	render: renderCatalogJson
+};
+
+//#endregion
+//#region ../runtime/src/routing/fullDisclosureRouter.ts
+const INSTRUCTIONS = `You are an agent that completes tasks by using skills.
+The full instructions of every available skill are injected below. Follow them directly.
+Script tools are named "<skillName>__<scriptName>".
+When the task is complete, answer in plain text without calling any tool.
+
+Never claim to have created, saved, or installed a skill unless a skill tool call actually succeeded.`;
+/** 全量披露路由（对照用）：注入每个技能的完整 SKILL.md 正文 */
+var FullDisclosureRouter = class {
+	#discovery;
+	constructor(discovery) {
+		this.#discovery = discovery;
+	}
+	async route(catalog) {
+		const sections = [];
+		for (const entry of catalog.entries) {
+			const doc = await this.#discovery.loadDocument(entry.name);
+			sections.push(`<skill name="${entry.name}">\n${doc.body}\n</skill>`);
+		}
+		return {
+			strategy: "full-disclosure",
+			catalog,
+			systemPrompt: `${INSTRUCTIONS}\n\n${sections.join("\n\n")}`
+		};
+	}
+};
+
+//#endregion
+//#region ../runtime/src/lifecycle/hooks.ts
+/** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
+var HookRunner = class {
+	#hooks = /* @__PURE__ */ new Map();
+	/** 宿主可在装配后按 RuntimeConfig 调整（console Settings › Agent Runtime 即经此生效） */
+	timeoutMs;
+	failOnHookError;
+	onWarning;
+	constructor(options = {}) {
+		this.timeoutMs = options.timeoutMs ?? 5e3;
+		this.failOnHookError = options.failOnHookError ?? false;
+		this.onWarning = options.onWarning;
+	}
+	register(phase, hook) {
+		const key = phase;
+		const list = this.#hooks.get(key) ?? [];
+		list.push(hook);
+		this.#hooks.set(key, list);
+		return this;
+	}
+	/**
+	* 已注册钩子的**计数**，按注册相位分组（`'*'` 为全相位钩子）。
+	* 刻意不返回函数引用：那会给 UI 一条调用宿主钩子的执行路径，而面板只需要「装没装上」。
+	*/
+	listRegisteredHooks() {
+		const counts = /* @__PURE__ */ new Map();
+		for (const [phase, hooks] of this.#hooks) counts.set(phase, hooks.length);
+		return counts;
+	}
+	async run(phase, ctx) {
+		const hooks = [...this.#hooks.get(phase) ?? [], ...this.#hooks.get("*") ?? []];
+		for (const hook of hooks) try {
+			await this.#withTimeout(Promise.resolve().then(() => hook(ctx)), phase);
+		} catch (e) {
+			if (this.failOnHookError) throw e instanceof WebSkillError ? e : new WebSkillError("RUN_FAILED", messageOf(e), e);
+			this.onWarning?.(messageOf(e));
+		}
+	}
+	#withTimeout(promise, phase) {
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => reject(new WebSkillError("RUN_TIMEOUT", `Lifecycle hook for phase "${phase}" timed out after ${this.timeoutMs}ms`)), this.timeoutMs);
+			promise.then((v) => {
+				clearTimeout(timer);
+				resolve(v);
+			}, (e) => {
+				clearTimeout(timer);
+				reject(e instanceof Error ? e : new Error(String(e)));
+			});
+		});
+	}
+};
+
+//#endregion
+//#region ../runtime/src/profile/refine.ts
+/**
+* 提炼提示词。要求返回结论列表而不是散文：条目化是「可见、可编辑、可删除」的前提（FR-19.3）。
+* `id` 由模型给出稳定 slug，才能在下一次提炼时更新同一条而不是无限追加。
+*/
+const USER_PROFILE_REFINE_PROMPT = `You summarize what a single user is like, based on records of what they did in a chat application.
+
+Return ONLY a JSON object with this shape, and nothing else:
+
+{
+  "entries": [
+    { "id": "slug-case-stable-id", "text": "One sentence about the user.", "confidence": "high" | "low" }
+  ]
+}
+
+Rules:
+- Each entry is one durable, reusable fact or preference about the user — how they like answers, what they work on, values they keep entering, languages they use.
+- Reuse the same "id" across runs for the same conclusion so it can be updated instead of duplicated. Use lowercase words joined by hyphens.
+- Use "high" only when several records agree. A single record is "low".
+- Do not restate individual records. Do not include secrets, credentials, or full personal identifiers.
+- Do not invent anything the records do not support. If the records say nothing useful, return {"entries": []}.`;
+/** 采样后的记录 → 送模型的摘要。导出供测试与宿主复核实际请求内容（AC-19.6） @experimental */
+function toRecordDigests(records) {
+	return records.map((record) => ({
+		kind: record.kind,
+		at: new Date(record.at).toISOString(),
+		value: record.value,
+		...record.scene.skillName !== void 0 ? { skill: record.scene.skillName } : {},
+		...record.scene.fieldName !== void 0 ? { field: record.scene.fieldName } : {},
+		...record.scene.fieldSemantics !== void 0 ? { meaning: record.scene.fieldSemantics } : {},
+		...record.scene.options !== void 0 ? { options: record.scene.options } : {},
+		...record.confirmed === true ? { confirmed: true } : {}
+	}));
+}
+/** 模型可能把 JSON 包在 ```json 里；只取第一个对象，解析不出就当没结论 */
+function parseEntries(content, now) {
+	const text = promptText(content ?? []);
+	const start = text.indexOf("{");
+	const end = text.lastIndexOf("}");
+	if (start < 0 || end <= start) return [];
+	let parsed;
+	try {
+		parsed = JSON.parse(text.slice(start, end + 1));
+	} catch {
+		return [];
+	}
+	const raw = parsed?.entries;
+	return readProfileEntries(Array.isArray(raw) ? raw.map((item) => ({
+		updatedAt: now,
+		...item
+	})) : []);
+}
+/**
+* 一次提炼（FR-19.3）。调用方负责持久化返回值；本函数不碰存储，
+* 也不吞异常——「失败不影响会话结束」由调用点的 fire-and-forget 保证，
+* 在这里吞掉会让手动提炼入口无法报错。
+* @experimental
+*/
+async function refineUserProfile(input) {
+	const limits = input.limits ?? DEFAULT_USER_PROFILE_LIMITS;
+	const now = (input.now ?? Date.now)();
+	const current = input.profile ?? EMPTY_USER_PROFILE;
+	const sampled = sampleBehaviorRecords(input.records, limits);
+	if (sampled.length === 0) return current;
+	const existing = current.entries.map((entry) => ({
+		id: entry.id,
+		text: entry.text
+	}));
+	const entries = parseEntries((await input.llm.complete({
+		...input.model !== void 0 ? { model: input.model } : {},
+		...input.signal !== void 0 ? { signal: input.signal } : {},
+		messages: [{
+			role: "system",
+			content: [{
+				type: "text",
+				text: USER_PROFILE_REFINE_PROMPT
+			}]
+		}, {
+			role: "user",
+			content: [{
+				type: "text",
+				text: `Existing conclusions:\n${JSON.stringify(existing)}\n\nRecords:\n${JSON.stringify(toRecordDigests(sampled))}`
+			}]
+		}]
+	})).content, now);
+	if (entries.length === 0) return current;
+	return mergeProfileEntries(current, entries, {
+		now,
+		limits
+	});
+}
+
+//#endregion
+//#region ../runtime/src/profile/transfer.ts
+/** 导出文件的版本；导入时逐字校验，不做向前兼容猜测 @experimental */
+const USER_PROFILE_EXPORT_VERSION = 1;
+/** 与偏好导出同一套判据：归一化后按子串匹配，命中即拒 */
+const CREDENTIAL_MARKERS = [
+	"apikey",
+	"secret",
+	"token",
+	"password",
+	"passphrase",
+	"credential",
+	"privatekey"
+];
+const isCredentialKey = (key) => {
+	const normalized = key.toLowerCase().replace(/[-_\s]/g, "");
+	return CREDENTIAL_MARKERS.some((marker) => normalized.includes(marker));
+};
+function findCredentialKey(value) {
+	if (Array.isArray(value)) {
+		for (const item of value) {
+			const hit = findCredentialKey(item);
+			if (hit !== void 0) return hit;
+		}
+		return;
+	}
+	if (typeof value !== "object" || value === null) return void 0;
+	for (const [key, child] of Object.entries(value)) {
+		if (isCredentialKey(key)) return key;
+		const hit = findCredentialKey(child);
+		if (hit !== void 0) return hit;
+	}
+}
+/**
+* 导出画像（FR-19.7）。`excludeIds` 来自导出前的审阅界面：用户勾掉的条目不进文件。
+* @experimental
+*/
+function exportUserProfile(profile, options) {
+	const excluded = new Set(options.excludeIds ?? []);
+	const result = {
+		kind: "webskill.user-profile",
+		version: 1,
+		origin: options.origin,
+		exportedAt: (options.now ?? Date.now)(),
+		entries: profile.entries.filter((entry) => !excluded.has(entry.id))
+	};
+	const leaked = findCredentialKey(result);
+	if (leaked !== void 0) throw new WebSkillError("PROFILE_IMPORT_CREDENTIAL_REJECTED", `A user profile export must not contain credentials, but "${leaked}" was present`);
+	return result;
+}
+/** 解析并校验导入内容（FR-19.7）。含凭据是**拒绝**而不是忽略 @experimental */
+function parseUserProfileExport(raw) {
+	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new WebSkillError("PROFILE_IMPORT_INVALID", "A user profile file must be a JSON object");
+	const record = raw;
+	if (record["kind"] !== "webskill.user-profile") throw new WebSkillError("PROFILE_IMPORT_INVALID", "A user profile file must have \"kind\": \"webskill.user-profile\"");
+	if (record["version"] !== 1) throw new WebSkillError("PROFILE_IMPORT_VERSION_UNSUPPORTED", `Unsupported user profile file version ${JSON.stringify(record["version"])}; expected ${1}`);
+	const leaked = findCredentialKey(record);
+	if (leaked !== void 0) throw new WebSkillError("PROFILE_IMPORT_CREDENTIAL_REJECTED", `The user profile file contains a credential field "${leaked}"; the import was rejected`);
+	const entries = readProfileEntries(record["entries"]);
+	if (entries.length === 0) throw new WebSkillError("PROFILE_IMPORT_INVALID", "The user profile file has no usable entries");
+	return {
+		kind: "webskill.user-profile",
+		version: 1,
+		origin: typeof record["origin"] === "string" ? record["origin"] : "unknown",
+		exportedAt: typeof record["exportedAt"] === "number" ? record["exportedAt"] : 0,
+		entries
+	};
+}
+function diffUserProfile(current, incoming) {
+	const byId = new Map(current.entries.map((entry) => [entry.id, entry]));
+	const added = [];
+	const updated = [];
+	for (const entry of incoming.entries) {
+		const existing = byId.get(entry.id);
+		if (existing === void 0) added.push(entry);
+		else if (existing.text !== entry.text) updated.push(entry);
+	}
+	return {
+		added,
+		updated
+	};
+}
+/** 确认后落库：同 id 覆盖，其余保留；不触碰模型配置与凭据 @experimental */
+function applyUserProfileImport(current, incoming, options = {}) {
+	const now = (options.now ?? Date.now)();
+	const byId = new Map(current.entries.map((entry) => [entry.id, entry]));
+	for (const entry of incoming.entries) byId.set(entry.id, {
+		...entry,
+		updatedAt: now
+	});
+	return {
+		version: 1,
+		entries: [...byId.values()].sort((a, b) => b.updatedAt - a.updatedAt).slice(0, DEFAULT_USER_PROFILE_LIMITS.entryLimit),
+		refinedAt: current.refinedAt
+	};
+}
+
+//#endregion
+//#region ../runtime/src/engine/usage.ts
+/**
+* 从 run 的 trace 聚合大模型用量（请求次数 + 输入/输出 token）。
+* 与 `summarizeToolCalls` 同型：消费方不再各自遍历 trace。
+* @stable
+*/
+function summarizeRunUsage(trace) {
+	let llmCalls = 0;
+	let inputTokens = 0;
+	let outputTokens = 0;
+	let hasUsage = false;
+	for (const event of trace) {
+		if (event.type === "llm.request") {
+			llmCalls += 1;
+			continue;
+		}
+		if (event.type !== "llm.usage") continue;
+		const input = event.data?.["inputTokens"];
+		const output = event.data?.["outputTokens"];
+		const hasInput = typeof input === "number" && Number.isFinite(input);
+		const hasOutput = typeof output === "number" && Number.isFinite(output);
+		if (hasInput) inputTokens += input;
+		if (hasOutput) outputTokens += output;
+		if (hasInput || hasOutput) hasUsage = true;
+	}
+	return {
+		llmCalls,
+		...hasUsage ? {
+			inputTokens,
+			outputTokens
+		} : {}
+	};
+}
+
+//#endregion
+//#region ../runtime/src/engine/runTrace.ts
+const RUN_TRACE_SCHEMA_VERSION = 1;
+/** 终止原因：取最后一条 run.completed/cancelled/failed 事件的 data.reason */
+function extractEndReason(events) {
+	for (let i = events.length - 1; i >= 0; i--) {
+		const event = events[i];
+		if (event.type === "run.completed" || event.type === "run.cancelled" || event.type === "run.failed") {
+			const reason = event.data?.["reason"];
+			return typeof reason === "string" ? reason : void 0;
+		}
+	}
+}
+function summarize(trace) {
+	const endReason = extractEndReason(trace.events);
+	const durationMs = trace.endedAt === void 0 ? void 0 : Date.parse(trace.endedAt) - Date.parse(trace.startedAt);
+	const runUsage = summarizeRunUsage(trace.events);
+	return {
+		runId: trace.runId,
+		startedAt: trace.startedAt,
+		status: trace.status,
+		activeSkills: trace.activeSkills,
+		eventCount: trace.events.length,
+		turnCount: trace.events.filter((e) => e.type === "llm.request").length,
+		...trace.sessionId !== void 0 ? { sessionId: trace.sessionId } : {},
+		...trace.endedAt !== void 0 ? { endedAt: trace.endedAt } : {},
+		...endReason !== void 0 ? { endReason } : {},
+		...durationMs !== void 0 && Number.isFinite(durationMs) && durationMs >= 0 ? { durationMs } : {},
+		...runUsage.inputTokens !== void 0 ? { usage: {
+			inputTokens: runUsage.inputTokens,
+			outputTokens: runUsage.outputTokens ?? 0
+		} } : {}
+	};
+}
+function parseTraceFile(raw, path) {
+	let data;
+	try {
+		data = JSON.parse(raw);
+	} catch {
+		return;
+	}
+	if (typeof data !== "object" || data === null) return void 0;
+	if (typeof data.runId !== "string" || typeof data.startedAt !== "string") return void 0;
+	const schemaVersion = typeof data.schemaVersion === "number" ? data.schemaVersion : 0;
+	if (schemaVersion > 1) throw new WebSkillError("RUN_TRACE_INCOMPATIBLE", `Run trace "${path}" declares schemaVersion ${schemaVersion}, which is newer than the supported ${1}`);
+	return {
+		schemaVersion,
+		runId: data.runId,
+		...typeof data.sessionId === "string" ? { sessionId: data.sessionId } : {},
+		startedAt: data.startedAt,
+		...typeof data.endedAt === "string" ? { endedAt: data.endedAt } : {},
+		status: typeof data.status === "string" ? data.status : "unknown",
+		activeSkills: Array.isArray(data.activeSkills) ? data.activeSkills.filter((s) => typeof s === "string") : [],
+		events: Array.isArray(data.events) ? data.events : []
+	};
+}
+const INDEX_FILE = "index.jsonl";
+/**
+* `FileSystemProvider` 后端：`<root>/<runId>.json` 存全量 trace，
+* `<root>/index.jsonl` 是 append-only 的摘要旁路索引。
+*
+* 索引存在的唯一理由是**读次数**：0.0.1 的实现为了拼一份列表要整读每个 trace
+* 文件，点一次指标再来一遍。有了索引，`list()` 与 `metrics()` 各只读一个文件。
+*
+* 索引与 trace 目录发散（写完 trace 崩在追加前）的检测不引入新的读放大：
+* 目录列举本来就要做，比较 `*.json` 个数与索引行数即可；不等则整体重建。
+* @stable
+*/
+var FsRunTraceStore = class {
+	#root;
+	#fs;
+	#onError;
+	#onIndexError;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
+		this.#onError = deps.onError ?? ((error, run) => {
+			console.warn(`Failed to persist run trace "${run.id}": ${messageOf(error)}`);
+		});
+		this.#onIndexError = deps.onIndexError ?? ((error, run) => {
+			console.warn(`Run trace "${run.id}" was saved but its index entry could not be appended: ${messageOf(error)}. The index will be rebuilt on the next read.`);
+		});
+	}
+	#path(runId) {
+		return resolveInsideRoot(this.#root, `${runId}.json`);
+	}
+	async put(run) {
+		const trace = {
+			schemaVersion: 1,
+			runId: run.id,
+			sessionId: run.sessionId,
+			startedAt: run.startedAt,
+			...run.endedAt !== void 0 ? { endedAt: run.endedAt } : {},
+			status: run.status === "completed" || run.status === "cancelled" ? run.status : "failed",
+			activeSkills: run.activeSkillNames,
+			events: run.trace
+		};
+		try {
+			await atomicWriteText(this.#fs, this.#path(run.id), JSON.stringify(trace, null, 2));
+		} catch (e) {
+			this.#onError(e, run);
+			return;
+		}
+		try {
+			await this.#fs.appendText(`${this.#root}/${INDEX_FILE}`, `${JSON.stringify(summarize(trace))}\n`);
+		} catch (e) {
+			this.#onIndexError(e, run);
+		}
+	}
+	async get(runId) {
+		assertSafePathSegment(runId, "run id");
+		const path = this.#path(runId);
+		let raw;
+		try {
+			raw = await this.#fs.readText(path);
+		} catch (e) {
+			if (e instanceof WebSkillError) throw e;
+			throw new WebSkillError("FS_NOT_FOUND", `Trace not found for run ${JSON.stringify(runId)}: ${path}`);
+		}
+		const trace = parseTraceFile(raw, path);
+		if (!trace) throw new WebSkillError("VALIDATION_FAILED", `Trace file is corrupted or malformed: ${path}`);
+		return trace;
+	}
+	async list(filter = {}) {
+		const { summaries } = await this.#readIndex();
+		const matched = applyFilter(summaries, filter);
+		const offset = Math.max(0, filter.offset ?? 0);
+		const sliced = matched.slice(offset);
+		return filter.limit !== void 0 ? sliced.slice(0, Math.max(0, filter.limit)) : sliced;
+	}
+	async metrics(filter = {}) {
+		const { summaries, skipped } = await this.#readIndex();
+		const runs = applyFilter(summaries, filter);
+		const succeeded = runs.filter((r) => r.status === "completed").length;
+		const failedRuns = runs.filter((r) => r.status === "failed");
+		const durations = runs.map((r) => r.durationMs).filter((ms) => ms !== void 0);
+		return {
+			totalRuns: runs.length,
+			succeeded,
+			failed: failedRuns.length,
+			successRate: runs.length === 0 ? 0 : succeeded / runs.length,
+			avgTurns: runs.length === 0 ? 0 : runs.reduce((sum, r) => sum + r.turnCount, 0) / runs.length,
+			skippedRuns: skipped,
+			avgDurationMs: durations.length === 0 ? 0 : durations.reduce((a, b) => a + b, 0) / durations.length,
+			recentFailures: failedRuns.slice(0, 5)
+		};
+	}
+	/** 健康路径恒为「一次目录列举 + 一次索引读」，与 run 数无关。 */
+	async #readIndex() {
+		if (!await this.#fs.exists(this.#root)) return {
+			summaries: [],
+			skipped: 0
+		};
+		const traceCount = (await this.#fs.list(this.#root)).filter((f) => f.type === "file" && f.path.endsWith(".json")).length;
+		const indexPath = `${this.#root}/${INDEX_FILE}`;
+		let lines = [];
+		if (await this.#fs.exists(indexPath)) lines = (await this.#fs.readText(indexPath)).split("\n").filter((line) => line.trim() !== "");
+		if (lines.length !== traceCount) return {
+			summaries: await this.#rebuildIndex(),
+			skipped: 0
+		};
+		const summaries = [];
+		let skipped = 0;
+		for (const line of lines) try {
+			summaries.push(JSON.parse(line));
+		} catch {
+			skipped += 1;
+		}
+		if (skipped > 0) return {
+			summaries: await this.#rebuildIndex(),
+			skipped
+		};
+		return {
+			summaries: sortByStartedAtDesc(summaries),
+			skipped: 0
+		};
+	}
+	/** 异常路径，允许 O(N)：整读全部 trace 文件后用 temp + rename 原子替换索引 */
+	async #rebuildIndex() {
+		const summaries = [];
+		for (const entry of await this.#fs.list(this.#root)) {
+			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
+			let trace;
+			try {
+				trace = parseTraceFile(await this.#fs.readText(entry.path), entry.path);
+			} catch {
+				continue;
+			}
+			if (!trace) continue;
+			summaries.push(summarize(trace));
+		}
+		const sorted = sortByStartedAtDesc(summaries);
+		const indexPath = `${this.#root}/${INDEX_FILE}`;
+		const tempPath = `${this.#root}/${INDEX_FILE}.rebuilding`;
+		try {
+			await this.#fs.writeText(tempPath, sorted.map((s) => `${JSON.stringify(s)}\n`).join(""));
+			await this.#fs.rename(tempPath, indexPath);
+		} catch {
+			await this.#fs.remove(tempPath).catch(() => void 0);
+		}
+		return sorted;
+	}
+};
+/** ISO 时间戳可按字典序比较 */
+function sortByStartedAtDesc(summaries) {
+	return [...summaries].sort((a, b) => b.startedAt.localeCompare(a.startedAt));
+}
+function applyFilter(summaries, filter) {
+	let runs = summaries;
+	if (filter.status !== void 0 && filter.status !== "") runs = runs.filter((r) => r.status === filter.status);
+	if (filter.sessionId !== void 0 && filter.sessionId !== "") runs = runs.filter((r) => r.sessionId === filter.sessionId);
+	const q = filter.search?.trim().toLowerCase();
+	if (q !== void 0 && q !== "") runs = runs.filter((r) => r.runId.toLowerCase().includes(q) || r.activeSkills.some((s) => s.toLowerCase().includes(q)));
+	return runs;
+}
+
+//#endregion
+//#region ../runtime/src/engine/toolCalls.ts
+/**
+* 从 run 的 trace 推导终态工具调用列表。
+*
+* 消费者过去要靠自己遍历 trace 才能拿到这份列表，而遍历 trace 的同一段代码
+* 又顺手承担了「补发漏掉的 live 事件」的职责——两件事绑在一起，谁也删不掉。
+* 幂等归 runtime（见 `AgentLoop` 的 per-run 已发集合）之后，
+* 推导终态列表就是纯函数，独立导出。
+* @stable
+*/
+function summarizeToolCalls(run) {
+	const startedAtByCallId = /* @__PURE__ */ new Map();
+	for (const event of run.trace) {
+		if (event.type !== "tool.started") continue;
+		const callId = event.data?.["callId"];
+		if (typeof callId === "string" && !startedAtByCallId.has(callId)) startedAtByCallId.set(callId, event.ts);
+	}
+	const calls = [];
+	for (const event of run.trace) {
+		if (event.type !== "tool.completed" && event.type !== "tool.failed") continue;
+		const name = event.data?.["name"];
+		const callId = event.data?.["callId"];
+		if (typeof name !== "string" || typeof callId !== "string") continue;
+		const args = event.data?.["args"];
+		const durationMs = event.data?.["durationMs"];
+		const errorCode = event.data?.["code"];
+		const startedAt = startedAtByCallId.get(callId);
+		calls.push({
+			callId,
+			name,
+			status: event.type === "tool.completed" ? "completed" : "failed",
+			...typeof args === "string" ? { args } : {},
+			...typeof durationMs === "number" ? { durationMs } : {},
+			...typeof errorCode === "string" ? { errorCode } : {},
+			...startedAt !== void 0 ? { startedAt } : {},
+			...event.type === "tool.failed" && typeof event.message === "string" ? { errorMessage: event.message } : {}
+		});
+	}
+	return calls;
+}
+
+//#endregion
+//#region ../runtime/src/engine/session.ts
+const SESSION_SCHEMA_VERSION = 1;
+/** `FsSessionStore` 的缺省页长。缺省值属于实现，不属于调用方——否则「下推」只推了一半 */
+const FS_SESSION_PAGE_SIZE = 50;
+const toMeta = (record) => ({
+	id: record.id,
+	createdAt: record.createdAt,
+	...record.title !== void 0 ? { title: record.title } : {},
+	...record.titleLocked === true ? { titleLocked: true } : {},
+	...record.archived === true ? { archived: true } : {},
+	...record.modelId !== void 0 ? { modelId: record.modelId } : {},
+	messageCount: record.messages.length
+});
+const newSessionId = () => `session-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+const baseName = (path) => path.split("/").pop() ?? path;
+/**
+* 从新到旧的一页：无游标取末尾 `limit` 条，有游标取该位置**之前**的 `limit` 条。
+* 游标编码成「本页起点下标」——对会话文件这种整体重写的存储来说下标是稳定的，
+* 但它是不透明串，调用方不得自己构造（构造出来的越界值一律按 `VALIDATION_FAILED` 拒绝）。
+*/
+function takeTailPage(all, options, what) {
+	const limit = options.limit ?? 50;
+	if (!Number.isInteger(limit) || limit <= 0) throw new WebSkillError("VALIDATION_FAILED", `Page limit must be a positive integer, received ${String(limit)}`);
+	let end = all.length;
+	if (options.cursor !== void 0) {
+		end = Number(options.cursor);
+		if (!Number.isInteger(end) || end < 0 || end > all.length) throw new WebSkillError("VALIDATION_FAILED", `Invalid ${what} cursor: ${JSON.stringify(options.cursor)}`);
+	}
+	const start = Math.max(0, end - limit);
+	return {
+		items: all.slice(start, end),
+		...start > 0 ? { nextCursor: String(start) } : {}
+	};
+}
+/**
+* 解析会话文件。缺 `schemaVersion` 视为 0（0.0.1 时代文件，兼容读）；
+* 高于当前版本拒绝读，避免新版写的字段被旧版静默丢弃。
+*/
+function parseSessionFile(raw, path) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (e) {
+		throw new WebSkillError("VALIDATION_FAILED", `Session file is not valid JSON: ${path}`, e);
+	}
+	if (typeof parsed !== "object" || parsed === null) throw new WebSkillError("VALIDATION_FAILED", `Session file is not an object: ${path}`);
+	const file = parsed;
+	const schemaVersion = typeof file.schemaVersion === "number" ? file.schemaVersion : 0;
+	if (schemaVersion > 1) throw new WebSkillError("SESSION_INCOMPATIBLE", `Session file at ${path} has schemaVersion ${schemaVersion}, but this build understands at most ${1}`);
+	if (typeof file.id !== "string" || typeof file.createdAt !== "string") throw new WebSkillError("VALIDATION_FAILED", `Session file is missing "id" or "createdAt": ${path}`);
+	return {
+		schemaVersion,
+		id: file.id,
+		createdAt: file.createdAt,
+		...typeof file.title === "string" ? { title: file.title } : {},
+		...file.titleLocked === true ? { titleLocked: true } : {},
+		...file.archived === true ? { archived: true } : {},
+		...typeof file.modelId === "string" ? { modelId: file.modelId } : {},
+		messages: Array.isArray(file.messages) ? file.messages : [],
+		messageCount: Array.isArray(file.messages) ? file.messages.length : 0
+	};
+}
+/**
+* `FileSystemProvider` 后端的会话存储：`<root>/<id>.json`。
+*
+* 所有变更操作按 id 串到一条 promise 链上：会话文件是整读整写的，
+* 两个并发 `appendMessages` 若都先读后写，后写的会覆盖先写的那条消息。
+*/
+var FsSessionStore = class {
+	#root;
+	#fs;
+	/** id → 该 id 上最后一次变更的完成时点，用于串行化读改写 */
+	#writes = /* @__PURE__ */ new Map();
+	/** FR-11.4：损坏文件诊断只报一次，避免 list 轮询刷屏 */
+	#warnedDataLoss = false;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
+	}
+	#path(id) {
+		assertSafePathSegment(id, "session id");
+		return resolveInsideRoot(this.#root, `${id}.json`);
+	}
+	/** 把 mutation 排到该 id 的队尾；前一个失败不阻塞后一个 */
+	async #serialize(id, work) {
+		const next = (this.#writes.get(id) ?? Promise.resolve()).catch(() => void 0).then(work);
+		this.#writes.set(id, next);
+		try {
+			return await next;
+		} finally {
+			if (this.#writes.get(id) === next) this.#writes.delete(id);
+		}
+	}
+	async #write(record) {
+		const file = {
+			schemaVersion: 1,
+			id: record.id,
+			createdAt: record.createdAt,
+			...record.title !== void 0 ? { title: record.title } : {},
+			...record.titleLocked === true ? { titleLocked: true } : {},
+			...record.archived === true ? { archived: true } : {},
+			...record.modelId !== void 0 ? { modelId: record.modelId } : {},
+			messages: record.messages
+		};
+		await atomicWriteText(this.#fs, this.#path(record.id), JSON.stringify(file, null, 2));
+	}
+	async #require(id) {
+		const record = await this.get(id);
+		if (!record) throw new WebSkillError("FS_NOT_FOUND", `Session "${id}" not found under ${this.#root}`);
+		return record;
+	}
+	async list(options = {}) {
+		if (!await this.#fs.exists(this.#root)) return {
+			items: [],
+			source: "missing-root",
+			skipped: []
+		};
+		const metas = [];
+		const skipped = [];
+		for (const entry of await this.#fs.list(this.#root)) {
+			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
+			let record;
+			try {
+				record = parseSessionFile(await this.#fs.readText(entry.path), entry.path);
+			} catch {
+				skipped.push(baseName(entry.path));
+				continue;
+			}
+			if (record.archived === true && options.includeArchived !== true) continue;
+			metas.push(toMeta(record));
+		}
+		if (skipped.length > 0 && !this.#warnedDataLoss) {
+			this.#warnedDataLoss = true;
+			console.warn(`[webskill] ${skipped.length} session file(s) under ${this.#root} are unreadable (possible data loss from an interrupted write): ${skipped.join(", ")}`);
+		}
+		metas.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+		return {
+			...takeTailPage(metas, options, "session"),
+			source: "ok",
+			skipped
+		};
+	}
+	/**
+	* 整文件读后切片。磁盘 I/O 复杂度没有改善（备案 D25），
+	* 但**跨出端口的记录数**已是常量——这正是分页对上层的意义。
+	*/
+	async listMessages(id, options = {}) {
+		return takeTailPage((await this.#require(id)).messages, options, "message");
+	}
+	async get(id) {
+		const path = this.#path(id);
+		if (!await this.#fs.exists(path)) return void 0;
+		return parseSessionFile(await this.#fs.readText(path), path);
+	}
+	async create(init = {}) {
+		const record = {
+			schemaVersion: 1,
+			id: init.id ?? newSessionId(),
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			...init.title !== void 0 ? { title: init.title } : {},
+			messages: [],
+			messageCount: 0
+		};
+		return this.#serialize(record.id, async () => {
+			await this.#write(record);
+			return toMeta(record);
+		});
+	}
+	async appendMessages(id, messages) {
+		if (messages.length === 0) return;
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			record.messages.push(...messages);
+			await this.#write(record);
+		});
+	}
+	async replaceMessages(id, messages) {
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			record.messages = [...messages];
+			await this.#write(record);
+		});
+	}
+	async setTitle(id, title, options = {}) {
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			record.title = title;
+			if (options.lock === true) record.titleLocked = true;
+			await this.#write(record);
+		});
+	}
+	async setArchived(id, archived) {
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			record.archived = archived;
+			await this.#write(record);
+		});
+	}
+	async setModel(id, modelId) {
+		await this.#serialize(id, async () => {
+			const record = await this.#require(id);
+			if (modelId === void 0) delete record.modelId;
+			else record.modelId = modelId;
+			await this.#write(record);
+		});
+	}
+	async getMeta(id) {
+		const record = await this.get(id);
+		return record === void 0 ? void 0 : toMeta(record);
+	}
+	async delete(id) {
+		await this.#serialize(id, async () => {
+			const path = this.#path(id);
+			if (await this.#fs.exists(path)) await this.#fs.remove(path);
+		});
+	}
+};
+
+//#endregion
+//#region ../runtime/src/engine/toolStep.ts
+/**
+* 按会话分文件的 append-only JSONL 留存。
+*
+* 分文件维度取会话而非 run：读取侧唯一的查询就是「这个会话的全部步骤」，
+* 按 run 分会让一次生成要开 N 个文件。
+*/
+var FsToolStepStore = class {
+	#root;
+	#fs;
+	#onError;
+	constructor(deps) {
+		this.#root = deps.root.replace(/\/+$/, "");
+		this.#fs = deps.fs;
+		this.#onError = deps.onError ?? ((error, record) => {
+			console.warn(`Failed to persist tool step for call "${record.callId}": ${messageOf(error)}`);
+		});
+	}
+	#path(sessionId) {
+		assertSafePathSegment(sessionId, "session id");
+		return resolveInsideRoot(this.#root, `${sessionId}.jsonl`);
+	}
+	async append(record) {
+		const path = this.#path(record.sessionId);
+		try {
+			await this.#fs.appendText(path, `${JSON.stringify(record)}\n`);
+		} catch (e) {
+			this.#onError(e, record);
+		}
+	}
+	async listBySession(sessionId) {
+		const path = this.#path(sessionId);
+		if (!await this.#fs.exists(path)) return [];
+		const raw = await this.#fs.readText(path);
+		const records = [];
+		for (const line of raw.split("\n")) {
+			if (line.trim() === "") continue;
+			try {
+				records.push(JSON.parse(line));
+			} catch {
+				continue;
+			}
+		}
+		return records;
+	}
+};
+
+//#endregion
 //#region src/version.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.13.0";
+const SDK_VERSION = "0.15.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, EMPTY_USER_PROFILE, EventBus, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, IMAGE_MIME_TYPES, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, XLSX_MIME, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };