@webskill/sdk 0.13.0 → 0.15.0

package/dist/{dist-ExSQky4C.js → approval-BnLLCOG0.js}

@@ -1,1614 +1,41 @@
-import { K as validateSkills, M as messageOf, P as parseSkillMarkdown, R as renderAvailableSkillsXml, V as resolveInsideRoot, _ as assertSafePathSegment, g as assertRemoteUrlAllowed, h as WebSkillError, m as SkillReader, p as SkillDiscovery, v as atomicWriteText, y as buildCatalog } from "./dist-Bev6i6Ip.js";
-import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
+import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
+import { b as parseSkillMarkdown, i as buildCatalog, n as SkillDiscovery, r as SkillReader } from "./skill-CAJMsLod.js";
+import { a as atomicWriteText, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
+import { c as findUnpairedToolCalls, d as partsToText, f as promptText, l as interruptedToolResult, p as textParts, u as sealToolCallPairs } from "./llm-B7lLH0ZI.js";
+import { a as fromBase64, c as DEFAULT_MAX_DOCUMENT_BYTES, d as TEXT_BUDGETED_CONTENT_TYPES, i as UNSUPPORTED_DOCUMENT_MESSAGE, l as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, n as READ_LINKED_DOCUMENT_TOOL_NAME, o as toBase64, r as SUPPORTED_DOCUMENT_MIME, t as READ_LINKED_DOCUMENT_TOOL } from "./linkedDocument-xNXF-z8n.js";
+import { t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
+import { i as isArtifactCardHidden, n as extractChartSpec, r as admitArtifactMetadata, t as buildRenderResult } from "./renderResult-D9Q-Vu2x.js";
+import { t as extractUiSpecEvents } from "./surface-DVGiCmwq.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-D6dLeY55.js";
 
-//#region ../runtime/dist/index.js
-/** 与正常工具结果同构：模型读到的是「这次调用被中断了」，而不是一个凭空消失的调用 */
-function interruptedToolResult(call, options = {}) {
-	const code = options.code ?? "RUN_INTERRUPTED";
-	const because = options.reason === void 0 ? "" : ` (${options.reason})`;
-	return {
-		ok: false,
-		content: [],
-		error: {
-			code,
-			message: `Tool call "${call.name}" produced no result: the run ended before it finished${because}.`
-		}
-	};
-}
-/** 尚无 `role:'tool'` 应答的工具调用，按消息顺序 */
-function findUnpairedToolCalls(messages) {
-	const answered = new Set(messages.filter((m) => m.role === "tool").map((m) => m.toolCallId));
-	return messages.filter((m) => m.role === "assistant" && m.toolCalls?.length).flatMap((m) => m.toolCalls ?? []).filter((call) => !answered.has(call.id));
-}
-/**
-* 为每个未应答的工具调用补一条结构化的中断说明。
-*
-* 补齐消息紧跟在该 assistant 已有的 tool 兄弟之后——供应商装配按相邻块分组，
-* 插到序列末尾会让它归属到别的 assistant 消息上。
-* 本函数**不改写入参**，也不写盘（AC-11.8）。
-*/
-function sealToolCallPairs(messages, options = {}) {
-	const answered = new Set(messages.filter((m) => m.role === "tool").map((m) => m.toolCallId));
-	const code = options.code ?? "RUN_INTERRUPTED";
-	const sealed = [];
-	const out = [];
-	for (let i = 0; i < messages.length; i += 1) {
-		const message = messages[i];
-		out.push(message);
-		if (message.role !== "assistant" || !message.toolCalls?.length) continue;
-		const missing = message.toolCalls.filter((call) => !answered.has(call.id));
-		if (missing.length === 0) continue;
-		while (i + 1 < messages.length && messages[i + 1].role === "tool") {
-			out.push(messages[i + 1]);
-			i += 1;
-		}
-		for (const call of missing) {
-			out.push({
-				role: "tool",
-				toolCallId: call.id,
-				content: textParts(JSON.stringify(interruptedToolResult(call, {
-					...options,
-					code
-				})))
-			});
-			answered.add(call.id);
-			sealed.push({
-				callId: call.id,
-				toolName: call.name,
-				code
-			});
-		}
-	}
-	return {
-		messages: sealed.length === 0 ? [...messages] : out,
-		sealed
-	};
-}
-/**
-* $defs 必须与 type / properties 同级，位于每个工具 inputSchema 的根。
-* 已验证：放进 properties.spec 内层会得到同样的 "Unsupported ref: #" ——
-* Qwen / LM Studio 按当前 schema 上下文解析 $defs，不回溯根文档。
-* 因此本模块只在**根**写入 $defs，不得改成就近放置。
-*/
-const DEFS_KEY = "$defs";
-const SELF_REF = "#";
-const NODE_NAME = "Node";
-const COMPONENT_PREFIX = "Component_";
-/** 值为「名称 → 子 schema」的映射。包内导出：vendorSchema 要用同一套下钻规则（两套会漂移）。 */
-const SCHEMA_MAP_KEYS = /* @__PURE__ */ new Set([
-	"properties",
-	"patternProperties",
-	"dependentSchemas",
-	"$defs",
-	"definitions"
-]);
-/** 值为「子 schema 数组」。 */
-const SCHEMA_LIST_KEYS = /* @__PURE__ */ new Set([
-	"oneOf",
-	"anyOf",
-	"allOf",
-	"prefixItems"
-]);
-/** 值为单个子 schema（items 在 draft-07 遗留写法里也可能是数组）。 */
-const SCHEMA_KEYS = /* @__PURE__ */ new Set([
-	"items",
-	"additionalItems",
-	"additionalProperties",
-	"unevaluatedItems",
-	"unevaluatedProperties",
-	"contains",
-	"propertyNames",
-	"not",
-	"if",
-	"then",
-	"else"
-]);
-function isRecord$7(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isSelfRef(value) {
-	return isRecord$7(value) && value["$ref"] === SELF_REF;
-}
-/**
-* 按 JSON Schema 关键字下降到子 schema。
-* 只走 schema 位置，`enum` / `const` / `default` 等数据位置一律不进——
-* 那里出现的 `{ $ref: '#' }` 是字面数据而非引用，改写它会破坏语义。
-*/
-function forEachSubSchema(node, visit) {
-	for (const [key, value] of Object.entries(node)) {
-		if (SCHEMA_MAP_KEYS.has(key)) {
-			if (isRecord$7(value)) for (const name of Object.keys(value)) visit(value[name], [key, name]);
-			continue;
-		}
-		if (SCHEMA_LIST_KEYS.has(key)) {
-			if (Array.isArray(value)) value.forEach((item, index) => visit(item, [key, index]));
-			continue;
-		}
-		if (SCHEMA_KEYS.has(key)) if (Array.isArray(value)) value.forEach((item, index) => visit(item, [key, index]));
-		else visit(value, [key]);
-	}
-}
-function pathKey(path) {
-	return path.join("\0");
-}
-/**
-* 找出所有 `$ref: '#'` 所属的 schema resource 根。
-* `#` 解析到最近的带 `$id` 的祖先；没有则是文档根。
-*/
-function collectSelfRefRoots(node, path, resourceRoot, out) {
-	if (!isRecord$7(node)) return;
-	if (isSelfRef(node)) {
-		out.set(pathKey(resourceRoot), resourceRoot);
-		return;
-	}
-	const nextRoot = typeof node["$id"] === "string" && path.length > 0 ? path : resourceRoot;
-	forEachSubSchema(node, (child, childPath) => {
-		collectSelfRefRoots(child, [...path, ...childPath], nextRoot, out);
-	});
-}
-function getAt(schema, path) {
-	let current = schema;
-	for (const segment of path) if (Array.isArray(current) && typeof segment === "number") current = current[segment];
-	else if (isRecord$7(current) && typeof segment === "string") current = current[segment];
-	else return void 0;
-	return current;
-}
-/** 返回把 `path` 处替换为 `replacement` 后的新对象；沿途节点浅拷贝，其余共享。 */
-function setAt(schema, path, replacement) {
-	if (path.length === 0) return replacement;
-	const [head, ...rest] = path;
-	const child = getAt(schema, [head]);
-	const nextChild = rest.length === 0 ? replacement : setAt(child, rest, replacement);
-	if (Array.isArray(schema) && typeof head === "number") {
-		const copy = [...schema];
-		copy[head] = nextChild;
-		return copy;
-	}
-	return {
-		...schema,
-		[head]: nextChild
-	};
-}
-/**
-* 深拷贝并把 `{ $ref: '#' }` 改写为指向根 `$defs` 中的具名节点。
-* 同时剥掉非根位置的 `$id` / `$schema`：它们会重设 base URI，
-* 正是严格解析器无法解析 `#` 的直接原因。
-*/
-function rewriteSelfRefs(node, target, depth) {
-	if (!isRecord$7(node)) return node;
-	if (depth > 8) throw new WebSkillError("TOOL_SCHEMA_UNAVAILABLE", `Tool schema nesting exceeds 8 levels; cannot produce a portable form`);
-	if (isSelfRef(node)) {
-		const rest = {};
-		for (const [key, value] of Object.entries(node)) if (key !== "$ref") rest[key] = value;
-		return {
-			$ref: `#/${DEFS_KEY}/${target}`,
-			...rest
-		};
-	}
-	const result = {};
-	for (const [key, value] of Object.entries(node)) {
-		if (key === "$id" || key === "$schema") continue;
-		if (SCHEMA_MAP_KEYS.has(key) && isRecord$7(value)) {
-			const mapped = {};
-			for (const [name, child] of Object.entries(value)) mapped[name] = rewriteSelfRefs(child, target, depth + 1);
-			result[key] = mapped;
-			continue;
-		}
-		if (SCHEMA_LIST_KEYS.has(key) || SCHEMA_KEYS.has(key)) {
-			result[key] = Array.isArray(value) ? value.map((child) => rewriteSelfRefs(child, target, depth + 1)) : rewriteSelfRefs(value, target, depth + 1);
-			continue;
-		}
-		result[key] = value;
-	}
-	return result;
-}
-function uniqueName(base, taken) {
-	if (!taken.has(base)) return base;
-	const prefixed = `Portable${base}`;
-	if (!taken.has(prefixed)) return prefixed;
-	let index = 2;
-	while (taken.has(`${prefixed}_${index}`)) index += 1;
-	return `${prefixed}_${index}`;
-}
-function renameDefRefs(node, renames) {
-	if (Array.isArray(node)) return node.map((child) => renameDefRefs(child, renames));
-	if (!isRecord$7(node)) return node;
-	const out = {};
-	const prefix = `#/${DEFS_KEY}/`;
-	for (const [key, value] of Object.entries(node)) {
-		if (key === "$ref" && typeof value === "string" && value.startsWith(prefix)) {
-			const [head, ...tail] = value.slice(prefix.length).split("/");
-			const mapped = head === void 0 ? void 0 : renames.get(head);
-			out[key] = mapped === void 0 ? value : [`${prefix}${mapped}`, ...tail].join("/");
-			continue;
-		}
-		out[key] = renameDefRefs(value, renames);
-	}
-	return out;
-}
-/**
-* 把非根位置的 `$defs` 搬到根。zod 每次 `toJSONSchema()` 各自产出 `$defs.__schemaN`，
-* 嵌进大 schema 后其 `#/$defs/...` 从大根解析不到——提升即修复。重名时避让并改写引用。
-*/
-function hoistNestedDefs(schema) {
-	const rootDefs = isRecord$7(schema[DEFS_KEY]) ? { ...schema[DEFS_KEY] } : {};
-	const taken = new Set(Object.keys(rootDefs));
-	let hoisted = false;
-	function visit(node, isRoot) {
-		if (Array.isArray(node)) return node.map((child) => visit(child, false));
-		if (!isRecord$7(node)) return node;
-		const nested = !isRoot && isRecord$7(node[DEFS_KEY]) ? node[DEFS_KEY] : void 0;
-		const body = {};
-		for (const [key, value] of Object.entries(node)) {
-			if (key === DEFS_KEY && nested !== void 0) continue;
-			if (key === DEFS_KEY) {
-				body[key] = value;
-				continue;
-			}
-			if (SCHEMA_MAP_KEYS.has(key) && isRecord$7(value)) {
-				const mapped = {};
-				for (const [name, child] of Object.entries(value)) mapped[name] = visit(child, false);
-				body[key] = mapped;
-				continue;
-			}
-			if (SCHEMA_LIST_KEYS.has(key) && Array.isArray(value)) {
-				body[key] = value.map((child) => visit(child, false));
-				continue;
-			}
-			if (SCHEMA_KEYS.has(key)) {
-				body[key] = visit(value, false);
-				continue;
-			}
-			body[key] = value;
-		}
-		if (nested === void 0) return body;
-		hoisted = true;
-		const renames = /* @__PURE__ */ new Map();
-		for (const name of Object.keys(nested)) {
-			const target = uniqueName(name, taken);
-			taken.add(target);
-			if (target !== name) renames.set(name, target);
-		}
-		for (const [name, def] of Object.entries(nested)) {
-			const moved = visit(def, false);
-			rootDefs[renames.get(name) ?? name] = renames.size > 0 ? renameDefRefs(moved, renames) : moved;
-		}
-		return renames.size > 0 ? renameDefRefs(body, renames) : body;
-	}
-	const out = visit(schema, true);
-	return hoisted ? {
-		...out,
-		[DEFS_KEY]: rootDefs
-	} : schema;
-}
-/**
-* 把工具 inputSchema 重写为严格解析器可接受的 JSON Schema 2020-12 形态：
-* 非根 `$defs` 提到根，自引用的 schema resource 提到根 `$defs`，
-* 所有 `$ref: '#'` 改写为 `$ref: '#/$defs/<Node>'`。
-*
-* 幂等：不含自引用也不含嵌套 `$defs` 的 schema 原样返回。
-*
-* 这是**传输层适配**，只应在出站请求体上调用；不要下沉到 AgentLoop，
-* 否则 trace / eventBus 观测到的 schema 会与技能作者写的不一致。
-*/
-function toPortableToolSchema(input) {
-	const schema = hoistNestedDefs(input);
-	const roots = /* @__PURE__ */ new Map();
-	collectSelfRefRoots(schema, [], [], roots);
-	if (roots.size === 0) return schema;
-	if (roots.size > 1) throw new WebSkillError("TOOL_SCHEMA_UNAVAILABLE", "Tool schema contains self references in more than one schema resource; cannot produce a portable form");
-	const rootPath = [...roots.values()][0] ?? [];
-	const resource = getAt(schema, rootPath);
-	if (!isRecord$7(resource)) return schema;
-	const existingDefs = isRecord$7(schema[DEFS_KEY]) ? schema[DEFS_KEY] : void 0;
-	const taken = new Set(Object.keys(existingDefs ?? {}));
-	const nodeName = uniqueName(NODE_NAME, taken);
-	taken.add(nodeName);
-	const added = {};
-	const branches = resource["oneOf"];
-	if (Array.isArray(branches)) {
-		const refs = branches.map((branch, index) => {
-			const name = uniqueName(`${COMPONENT_PREFIX}${index}`, taken);
-			taken.add(name);
-			added[name] = rewriteSelfRefs(branch, nodeName, 1);
-			return { $ref: `#/${DEFS_KEY}/${name}` };
-		});
-		const description = resource["description"];
-		added[nodeName] = typeof description === "string" ? {
-			description,
-			oneOf: refs
-		} : { oneOf: refs };
-	} else {
-		const body = {};
-		for (const [key, value] of Object.entries(resource)) if (key !== DEFS_KEY) body[key] = value;
-		added[nodeName] = rewriteSelfRefs(body, nodeName, 1);
-	}
-	return {
-		...setAt(schema, rootPath, { $ref: `#/${DEFS_KEY}/${nodeName}` }),
-		[DEFS_KEY]: {
-			...existingDefs ?? {},
-			...added
-		}
-	};
-}
-function isRecord$6(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
-* 与 `interaction/schemaToForm` 的 file 判定保持一致：JSON Schema 里二进制内容的
-* 两种标准写法（`format: binary` / `contentEncoding: base64`）。
-*/
-function isModelUnfillable(node) {
-	return isRecord$6(node) && node["type"] === "string" && (node["format"] === "binary" || node["contentEncoding"] === "base64");
-}
-function stripNode(node) {
-	if (Array.isArray(node)) return node.map(stripNode);
-	if (!isRecord$6(node)) return node;
-	const out = {};
-	for (const [key, value] of Object.entries(node)) {
-		if (SCHEMA_MAP_KEYS.has(key) && isRecord$6(value)) {
-			const mapped = {};
-			for (const [name, child] of Object.entries(value)) {
-				if (key === "properties" && isModelUnfillable(child)) continue;
-				mapped[name] = stripNode(child);
-			}
-			out[key] = mapped;
-			continue;
-		}
-		if (SCHEMA_LIST_KEYS.has(key) && Array.isArray(value)) {
-			out[key] = value.map(stripNode);
-			continue;
-		}
-		if (SCHEMA_KEYS.has(key)) {
-			out[key] = stripNode(value);
-			continue;
-		}
-		out[key] = value;
-	}
-	const required = out["required"];
-	const properties = out["properties"];
-	if (Array.isArray(required) && isRecord$6(properties)) out["required"] = required.filter((name) => typeof name !== "string" || name in properties);
-	return out;
-}
-/**
-* 把模型不可能自己产出的字段（本地文件二进制）从**出站**工具 schema 里剥离。
-*
-* 模型拿不到用户磁盘上的文件，留着这个字段只有两种下场：模型拒绝调用工具
-* （实测 DeepSeek 直接回文本「请上传文件」，file-pick 永远触发不了），或编造一个
-* 占位字符串把技能跑挂。剥掉后模型以缺参形式调用，引擎的 missing-params 链路
-* 会弹 file-pick 让用户用系统文件选择器补这个字段。
-*
-* 这是**传输层适配**，只应在出站请求体上调用；不要下沉到 AgentLoop——
-* 引擎侧的 missing 校验看的必须是技能作者写的完整 inputSchema。
-*
-* 已知边界（0.10.0 复核注记）：只剥 `properties` 里的 inline 二进制字段；
-* 通过 `$ref` 指向 `$defs` 中二进制定义的字段仍会下发（剥掉会留悬空 $ref），
-* 这类技能依旧可能拿不到 file-pick——需要完整修复时再补「剥 $def + 剥指向它的 $ref」。
-*/
-function stripModelUnfillableParams(schema) {
-	return stripNode(schema);
-}
-/** 各家都认的基础关键字。Google `FunctionDeclaration.parameters` 是其中最窄的一家。 */
-const BASE_KEYWORDS = /* @__PURE__ */ new Set([
-	"type",
-	"description",
-	"title",
-	"default",
-	"enum",
-	"const",
-	"properties",
-	"required",
-	"items",
-	"anyOf",
-	"oneOf",
-	"minimum",
-	"maximum",
-	"minItems",
-	"maxItems",
-	"nullable",
-	"format"
-]);
-/** 宽松侧：保留 0.6.0 的透传行为，本版不主动收紧（没有实证之前收紧只会制造新的破坏） */
-const PERMISSIVE_KEYWORDS = /* @__PURE__ */ new Set([
-	...BASE_KEYWORDS,
-	"additionalProperties",
-	"patternProperties",
-	"dependentSchemas",
-	"definitions",
-	"$defs",
-	"$ref",
-	"$schema",
-	"$id",
-	"allOf",
-	"not",
-	"if",
-	"then",
-	"else",
-	"prefixItems",
-	"additionalItems",
-	"unevaluatedItems",
-	"unevaluatedProperties",
-	"contains",
-	"propertyNames",
-	"exclusiveMinimum",
-	"exclusiveMaximum",
-	"multipleOf",
-	"minLength",
-	"maxLength",
-	"pattern",
-	"uniqueItems",
-	"examples",
-	"readOnly",
-	"writeOnly",
-	"deprecated"
-]);
-const OPENAI_SCHEMA_PROFILE = {
-	id: "openai-compatible",
-	allowedKeywords: PERMISSIVE_KEYWORDS,
-	supportsRefs: true
-};
-const ANTHROPIC_SCHEMA_PROFILE = {
-	id: "anthropic",
-	allowedKeywords: PERMISSIVE_KEYWORDS,
-	supportsRefs: true
-};
-/**
-* Google Gen AI 的 `FunctionDeclaration.parameters` 收到 `additionalProperties`
-* 直接回 400 `Unknown name "additionalProperties"`，且不解析 `$ref` / `$defs`。
-*
-* 本 profile 描述的是 **`parameters` 这一字段**的能力，不是 Google 的能力上限：
-* 完整 JSON Schema（含 `$ref` / `$defs`）走另一个字段 `parametersJsonSchema`。
-* 把 `supportsRefs: false` 读成「Google 不支持引用」是错的，分流见 `googleGenAiClient.toGenAiTools`。
-*/
-const GOOGLE_SCHEMA_PROFILE = {
-	id: "google",
-	allowedKeywords: BASE_KEYWORDS,
-	supportsRefs: false
-};
-function isRecord$5(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/** 只在 schema 位置上找 `$ref`：enum / const / default 里的同名键是字面数据，不是引用 */
-function containsRef(node) {
-	if (Array.isArray(node)) return node.some(containsRef);
-	if (!isRecord$5(node)) return false;
-	if (typeof node["$ref"] === "string") return true;
-	for (const [key, value] of Object.entries(node)) {
-		if (SCHEMA_MAP_KEYS.has(key)) {
-			if (isRecord$5(value) && Object.values(value).some(containsRef)) return true;
-			continue;
-		}
-		if (SCHEMA_LIST_KEYS.has(key)) {
-			if (Array.isArray(value) && value.some(containsRef)) return true;
-			continue;
-		}
-		if (SCHEMA_KEYS.has(key) && containsRef(value)) return true;
-	}
-	return false;
-}
-function sanitizeNode(node, profile) {
-	if (Array.isArray(node)) return node.map((item) => sanitizeNode(item, profile));
-	if (!isRecord$5(node)) return node;
-	const out = {};
-	for (const [key, value] of Object.entries(node)) {
-		if (!profile.allowedKeywords.has(key)) continue;
-		if (SCHEMA_MAP_KEYS.has(key) && isRecord$5(value)) {
-			const mapped = {};
-			for (const [name, child] of Object.entries(value)) mapped[name] = sanitizeNode(child, profile);
-			out[key] = mapped;
-			continue;
-		}
-		if (SCHEMA_LIST_KEYS.has(key) && Array.isArray(value)) {
-			out[key] = value.map((child) => sanitizeNode(child, profile));
-			continue;
-		}
-		if (SCHEMA_KEYS.has(key)) {
-			out[key] = sanitizeNode(value, profile);
-			continue;
-		}
-		out[key] = value;
-	}
-	return out;
-}
-/**
-* 按供应商 profile 清洗出站 schema。产出新对象，不修改入参（工具源可能复用同一个实例）。
-*
-* 这是**传输层适配**，只应在出站请求体上调用；不要下沉到 AgentLoop，
-* 否则 trace / eventBus 观测到的 schema 会与技能作者写的不一致。
-*
-* @throws WebSkillError `TOOL_SCHEMA_UNAVAILABLE` — schema 依赖该供应商不支持的引用
-*/
-function sanitizeForVendor(schema, profile, toolName) {
-	if (!profile.supportsRefs && containsRef(schema)) throw new WebSkillError("TOOL_SCHEMA_UNAVAILABLE", `Tool "${toolName}" requires $ref support that provider "${profile.id}" does not accept`);
-	return sanitizeNode(schema, profile);
-}
-/**
-* schema 能否走 profile 描述的受限通道。与 `sanitizeForVendor` 同判据，但不抛错——
-* 调用方需要的是「选哪条通道」而不是「失败」。
-*/
-function isExpressibleForVendor(schema, profile) {
-	return profile.supportsRefs || !containsRef(schema);
-}
-/**
-* 放宽不可终止的递归环：Gemini 只接受「可选 / 可为 null / 可零长数组」的引用环。
-* 对 `items` 直接是 `$ref` 的数组节点删去 `minItems`。
-*
-* **只作用于出站副本**：catalog 本体的校验判据不变。
-*/
-function relaxRefLoops(schema) {
-	return relaxNode(schema);
-}
-function relaxNode(node) {
-	if (Array.isArray(node)) return node.map(relaxNode);
-	if (!isRecord$5(node)) return node;
-	const out = {};
-	for (const [key, value] of Object.entries(node)) {
-		if (key === "minItems" && isRecord$5(node["items"]) && typeof node["items"]["$ref"] === "string") continue;
-		if (SCHEMA_MAP_KEYS.has(key) && isRecord$5(value)) {
-			const mapped = {};
-			for (const [name, child] of Object.entries(value)) mapped[name] = relaxNode(child);
-			out[key] = mapped;
-			continue;
-		}
-		if (SCHEMA_LIST_KEYS.has(key) && Array.isArray(value)) {
-			out[key] = value.map(relaxNode);
-			continue;
-		}
-		if (SCHEMA_KEYS.has(key)) {
-			out[key] = relaxNode(value);
-			continue;
-		}
-		out[key] = value;
-	}
-	return out;
-}
-function createSseFrameReader() {
-	let buffer = "";
-	let data = [];
-	const dispatch = (out) => {
-		if (data.length === 0) return;
-		out.push(data.join("\n"));
-		data = [];
-	};
-	const consumeLine = (line, out) => {
-		if (line === "") {
-			dispatch(out);
-			return;
-		}
-		if (line.startsWith(":")) return;
-		const colon = line.indexOf(":");
-		if (colon < 0) return;
-		if (line.slice(0, colon) !== "data") return;
-		const value = line.slice(colon + 1);
-		data.push(value.startsWith(" ") ? value.slice(1) : value);
-	};
-	return {
-		push(chunk) {
-			const out = [];
-			buffer += chunk;
-			buffer = buffer.replace(/\r\n/g, "\n");
-			let newline;
-			while ((newline = buffer.indexOf("\n")) >= 0) {
-				const line = buffer.slice(0, newline);
-				buffer = buffer.slice(newline + 1);
-				consumeLine(line, out);
-			}
-			return out;
-		},
-		flush() {
-			const out = [];
-			if (buffer !== "") {
-				const line = buffer;
-				buffer = "";
-				consumeLine(line, out);
-			}
-			dispatch(out);
-			return out;
-		}
-	};
-}
-/**
-* 内联 `<think>` 段落切分器（内部模块，不进公开导出）。
-*
-* 本地部署的思考型模型（Qwen 等经 OpenAI 兼容端点）不下发 `reasoning_content`，
-* 而是把推理直接写进 `content`，用 `<think>` … `</think>` 包起来。不切分的话
-* 思考正文会当成回答正文流进界面、进消息历史、进落盘，既污染上下文也没法折叠。
-*/
-const OPEN = "<think>";
-const CLOSE = "</think>";
-/** buffer 是否为 tag 的真前缀（还不能判定，得再等） */
-const isPartialPrefix = (buffer, tag) => buffer.length < tag.length && tag.startsWith(buffer);
-function createThinkTagSplitter() {
-	let buffer = "";
-	let inThink = false;
-	const consume = () => {
-		let text = "";
-		let thinking = "";
-		for (;;) {
-			const tag = inThink ? CLOSE : OPEN;
-			const hit = buffer.indexOf(tag);
-			if (hit >= 0) {
-				const before = buffer.slice(0, hit);
-				if (inThink) thinking += before;
-				else text += before;
-				buffer = buffer.slice(hit + tag.length);
-				inThink = !inThink;
-				continue;
-			}
-			const start = buffer.lastIndexOf("<");
-			const keep = start >= 0 && isPartialPrefix(buffer.slice(start), tag) ? start : buffer.length;
-			const emit = buffer.slice(0, keep);
-			if (inThink) thinking += emit;
-			else text += emit;
-			buffer = buffer.slice(keep);
-			return {
-				text,
-				thinking
-			};
-		}
-	};
-	return {
-		push(delta) {
-			buffer += delta;
-			return consume();
-		},
-		flush() {
-			const rest = buffer;
-			buffer = "";
-			return inThink ? {
-				text: "",
-				thinking: rest
-			} : {
-				text: rest,
-				thinking: ""
-			};
-		}
-	};
-}
-/** 非流式整段切分：返回正文与思考正文（无 `<think>` 时 thinking 为 undefined） */
-function splitThinkTags(content) {
-	if (!content.includes(OPEN)) return { text: content };
-	const splitter = createThinkTagSplitter();
-	const first = splitter.push(content);
-	const last = splitter.flush();
-	const thinking = first.thinking + last.thinking;
-	return {
-		text: first.text + last.text,
-		...thinking !== "" ? { thinking } : {}
-	};
-}
-const dataUrl = (part) => `data:${part.mimeType};base64,${part.data}`;
-/** parts → OpenAI content；纯文本折叠成字符串（兼容端点对数组形态支持不一） */
-const toOpenAiContent = (parts, where) => {
-	if (parts.every((p) => p.type === "text")) return partsToText(parts);
-	return parts.map((part) => {
-		switch (part.type) {
-			case "text": return {
-				type: "text",
-				text: part.text
-			};
-			case "image": return {
-				type: "image_url",
-				image_url: { url: dataUrl(part) }
-			};
-			case "file": return {
-				type: "file",
-				file: {
-					...part.name !== void 0 ? { filename: part.name } : {},
-					file_data: dataUrl(part)
-				}
-			};
-			default: return rejectUnsupportedPart(part, "OpenAI", where);
-		}
-	});
-};
-/** system / tool 消息只接受文本：这两类在 OpenAI 协议里没有多模态形态 */
-const toOpenAiText = (parts, where) => {
-	const nonText = parts.find((p) => p.type !== "text");
-	if (nonText) rejectUnsupportedPart(nonText, "OpenAI", where);
-	return partsToText(parts);
-};
-const toOpenAiMessage = (msg) => {
-	if (msg.role === "tool") return {
-		role: "tool",
-		tool_call_id: msg.toolCallId,
-		content: toOpenAiText(msg.content, "tool")
-	};
-	if (msg.role === "system") return {
-		role: "system",
-		content: toOpenAiText(msg.content, "system")
-	};
-	if (msg.role === "assistant" && msg.toolCalls?.length) {
-		const content = toOpenAiContent(msg.content, "assistant");
-		return {
-			role: "assistant",
-			content: content === "" ? null : content,
-			tool_calls: msg.toolCalls.map((call) => ({
-				id: call.id,
-				type: "function",
-				function: {
-					name: call.name,
-					arguments: JSON.stringify(call.arguments)
-				}
-			}))
-		};
-	}
-	return {
-		role: msg.role,
-		content: toOpenAiContent(msg.content, msg.role)
-	};
-};
-const toOpenAiTools = (tools) => tools.map((tool) => ({
-	type: "function",
-	function: {
-		name: tool.name,
-		...tool.description ? { description: tool.description } : {},
-		parameters: sanitizeForVendor(toPortableToolSchema(stripModelUnfillableParams(tool.inputSchema)), OPENAI_SCHEMA_PROFILE, tool.name)
-	}
-}));
-const errorMessage$2 = (e) => e instanceof Error ? e.message : String(e);
-/** OpenAI chat completions 协议客户端（兼容端点通用） */
-var OpenAiCompatibleClient = class {
-	#config;
-	#fetch;
-	constructor(config) {
-		this.#config = config;
-		this.#fetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
-	}
-	#requireConfig() {
-		const { baseUrl, apiKey, model } = this.#config;
-		if (!baseUrl || !apiKey || !model) throw new WebSkillError("LLM_UNAVAILABLE", "LLM client is not configured: baseUrl, apiKey and model are all required");
-		return {
-			baseUrl: baseUrl.replace(/\/+$/, ""),
-			apiKey,
-			model
-		};
-	}
-	async complete(input) {
-		const res = await this.#postChat(input, false);
-		let data;
-		try {
-			data = await res.json();
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage$2(e)}`, e);
-		}
-		return this.#parseResponse(data);
-	}
-	/** SSE 流式：fetch + ReadableStream 按行解析 data: 帧（Node/浏览器通用） */
-	async *stream(input) {
-		const res = await this.#postChat(input, true);
-		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
-		const toolCallsByIndex = /* @__PURE__ */ new Map();
-		const decoder = new TextDecoder();
-		const reader = res.body.getReader();
-		const frames = createSseFrameReader();
-		const think = createThinkTagSplitter();
-		let done = false;
-		let usage;
-		const handleFrame = function* (data) {
-			if (data === "[DONE]") {
-				done = true;
-				return;
-			}
-			let chunk;
-			try {
-				chunk = JSON.parse(data);
-			} catch (e) {
-				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$2(e)}`, data);
-			}
-			const usageRaw = chunk.usage;
-			if (usageRaw && (typeof usageRaw["prompt_tokens"] === "number" || typeof usageRaw["completion_tokens"] === "number")) usage = {
-				inputTokens: typeof usageRaw["prompt_tokens"] === "number" ? usageRaw["prompt_tokens"] : 0,
-				outputTokens: typeof usageRaw["completion_tokens"] === "number" ? usageRaw["completion_tokens"] : 0
-			};
-			const delta = chunk.choices?.[0]?.delta;
-			if (!delta) return;
-			if (typeof delta["reasoning_content"] === "string" && delta["reasoning_content"] !== "") yield {
-				type: "thinking-delta",
-				delta: delta["reasoning_content"]
-			};
-			if (typeof delta["content"] === "string" && delta["content"] !== "") {
-				const split = think.push(delta["content"]);
-				if (split.thinking !== "") yield {
-					type: "thinking-delta",
-					delta: split.thinking
-				};
-				if (split.text !== "") yield {
-					type: "text-delta",
-					delta: split.text
-				};
-			}
-			const toolDeltas = delta["tool_calls"];
-			for (const td of toolDeltas ?? []) {
-				const index = td.index ?? 0;
-				const acc = toolCallsByIndex.get(index) ?? {
-					id: "",
-					name: "",
-					arguments: ""
-				};
-				if (td.id) acc.id = td.id;
-				if (td.function?.name) acc.name = td.function.name;
-				if (td.function?.arguments) acc.arguments += td.function.arguments;
-				toolCallsByIndex.set(index, acc);
-			}
-		};
-		try {
-			for (;;) {
-				const { value, done: readerDone } = await reader.read();
-				const payloads = readerDone ? frames.flush() : frames.push(decoder.decode(value, { stream: true }));
-				for (const payload of payloads) {
-					yield* handleFrame(payload);
-					if (done) break;
-				}
-				if (done || readerDone) break;
-			}
-		} finally {
-			reader.releaseLock();
-		}
-		const tail = think.flush();
-		if (tail.thinking !== "") yield {
-			type: "thinking-delta",
-			delta: tail.thinking
-		};
-		if (tail.text !== "") yield {
-			type: "text-delta",
-			delta: tail.text
-		};
-		if (toolCallsByIndex.size > 0) yield {
-			type: "tool-calls",
-			toolCalls: [...toolCallsByIndex.entries()].sort(([a], [b]) => a - b).map(([index, acc]) => {
-				let args = {};
-				let parseError;
-				try {
-					args = JSON.parse(acc.arguments || "{}");
-				} catch (e) {
-					parseError = e instanceof Error ? e.message : String(e);
-				}
-				return {
-					id: acc.id || `call-${index}`,
-					name: acc.name,
-					arguments: args,
-					...parseError ? { argumentsParseError: parseError } : {}
-				};
-			})
-		};
-		yield {
-			type: "done",
-			...usage ? { usage } : {}
-		};
-	}
-	async #postChat(input, stream) {
-		const { baseUrl, apiKey, model } = this.#requireConfig();
-		validateLlmMessages(input.messages);
-		const body = {
-			model: input.model ?? model,
-			messages: input.messages.map(toOpenAiMessage)
-		};
-		if (input.tools?.length) {
-			body["tools"] = toOpenAiTools(input.tools);
-			body["tool_choice"] = "auto";
-		}
-		if (input.temperature !== void 0) body["temperature"] = input.temperature;
-		if (stream) {
-			body["stream"] = true;
-			body["stream_options"] = { include_usage: true };
-		}
-		let res;
-		try {
-			res = await this.#fetch(`${baseUrl}/chat/completions`, {
-				method: "POST",
-				headers: {
-					"content-type": "application/json",
-					authorization: `Bearer ${apiKey}`
-				},
-				body: JSON.stringify(body),
-				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
-			});
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage$2(e)}`, e);
-		}
-		if (!res.ok) {
-			const detail = await res.text().catch(() => "");
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`, { status: res.status });
-		}
-		return res;
-	}
-	/** 轻量探测（GET /models），集成测试据此决定 skip */
-	async checkAvailability() {
-		try {
-			const { baseUrl, apiKey } = this.#requireConfig();
-			return (await this.#fetch(`${baseUrl}/models`, { headers: { authorization: `Bearer ${apiKey}` } })).ok;
-		} catch {
-			return false;
-		}
-	}
-	#parseResponse(data) {
-		try {
-			const choice = data.choices?.[0]?.message;
-			if (!choice) throw new Error("response has no choices[0].message");
-			const toolCalls = choice["tool_calls"]?.map((tc) => {
-				let args = {};
-				let parseError;
-				try {
-					args = JSON.parse(tc.function?.arguments ?? "{}");
-				} catch (e) {
-					parseError = e instanceof Error ? e.message : String(e);
-				}
-				return {
-					id: tc.id,
-					name: tc.function?.name ?? "",
-					arguments: args,
-					...parseError ? { argumentsParseError: parseError } : {}
-				};
-			});
-			const raw = choice["content"];
-			const split = typeof raw === "string" ? splitThinkTags(raw) : {
-				text: "",
-				thinking: void 0
-			};
-			const content = split.text;
-			const declared = choice["reasoning_content"];
-			const thinking = typeof declared === "string" && declared !== "" ? declared : split.thinking;
-			const usageRaw = data.usage;
-			const usage = usageRaw && (typeof usageRaw["prompt_tokens"] === "number" || typeof usageRaw["completion_tokens"] === "number") ? {
-				inputTokens: typeof usageRaw["prompt_tokens"] === "number" ? usageRaw["prompt_tokens"] : 0,
-				outputTokens: typeof usageRaw["completion_tokens"] === "number" ? usageRaw["completion_tokens"] : 0
-			} : void 0;
-			return {
-				content: content !== "" ? textParts(content) : void 0,
-				toolCalls: toolCalls?.length ? toolCalls : void 0,
-				...typeof thinking === "string" && thinking !== "" ? { thinking } : {},
-				...usage ? { usage } : {},
-				raw: data
-			};
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage$2(e)}`, data);
-		}
-	}
-};
-const ANTHROPIC_VERSION = "2023-06-01";
-const errorMessage$1 = (e) => e instanceof Error ? e.message : String(e);
-/** parts → Anthropic content blocks（image/document 均为 base64 source） */
-const toAnthropicBlocks = (parts, where) => parts.map((part) => {
-	switch (part.type) {
-		case "text": return {
-			type: "text",
-			text: part.text
-		};
-		case "image": return {
-			type: "image",
-			source: {
-				type: "base64",
-				media_type: part.mimeType,
-				data: part.data
-			}
-		};
-		case "file": return {
-			type: "document",
-			source: {
-				type: "base64",
-				media_type: part.mimeType,
-				data: part.data
-			}
-		};
-		default: return rejectUnsupportedPart(part, "Anthropic", where);
-	}
-});
-/** system 是独立的字符串参数，无多模态形态 */
-const toAnthropicSystemText = (parts) => {
-	const nonText = parts.find((p) => p.type !== "text");
-	if (nonText) rejectUnsupportedPart(nonText, "Anthropic", "system");
-	return partsToText(parts);
-};
-/** LlmMessage 序列 → system 独立参数 + user/assistant 消息（tool 结果合并进 user 消息 tool_result blocks） */
-function toAnthropicMessages(messages) {
-	const system = messages.filter((m) => m.role === "system").map((m) => toAnthropicSystemText(m.content)).join("\n");
-	const out = [];
-	for (const msg of messages) {
-		if (msg.role === "system") continue;
-		if (msg.role === "tool") {
-			const block = {
-				type: "tool_result",
-				tool_use_id: msg.toolCallId ?? "",
-				content: toAnthropicBlocks(msg.content, "tool")
-			};
-			const last = out.at(-1);
-			if (last && last.role === "user" && Array.isArray(last.content)) last.content.push(block);
-			else out.push({
-				role: "user",
-				content: [block]
-			});
-			continue;
-		}
-		if (msg.role === "assistant" && msg.toolCalls?.length) {
-			const content = toAnthropicBlocks(msg.content, "assistant");
-			for (const call of msg.toolCalls) content.push({
-				type: "tool_use",
-				id: call.id,
-				name: call.name,
-				input: call.arguments
-			});
-			out.push({
-				role: "assistant",
-				content
-			});
-			continue;
-		}
-		out.push({
-			role: msg.role,
-			content: toAnthropicBlocks(msg.content, msg.role)
-		});
-	}
-	return system === "" ? { messages: out } : {
-		system,
-		messages: out
-	};
-}
-const toAnthropicTools = (tools) => tools.map((tool) => ({
-	name: tool.name,
-	...tool.description ? { description: tool.description } : {},
-	input_schema: sanitizeForVendor(toPortableToolSchema(stripModelUnfillableParams(tool.inputSchema)), ANTHROPIC_SCHEMA_PROFILE, tool.name)
-}));
-/** Anthropic Messages API 客户端（零依赖 fetch；Node/浏览器通用） */
-var AnthropicClient = class {
-	#config;
-	#fetch;
-	constructor(config) {
-		this.#config = config;
-		this.#fetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
-	}
-	#baseUrl() {
-		return (this.#config.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");
-	}
-	#headers() {
-		return {
-			"content-type": "application/json",
-			"x-api-key": this.#config.apiKey,
-			"anthropic-version": ANTHROPIC_VERSION,
-			...this.#config.dangerouslyAllowDirectBrowserAccess ? { "anthropic-dangerous-direct-browser-access": "true" } : {}
-		};
-	}
-	async complete(input) {
-		const res = await this.#post(input, false);
-		let data;
-		try {
-			data = await res.json();
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage$1(e)}`, e);
-		}
-		return this.#parseResponse(data);
-	}
-	/** SSE 流式：text_delta → text-delta；input_json_delta 按 block index 聚合 → tool-calls */
-	async *stream(input) {
-		const res = await this.#post(input, true);
-		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
-		const toolCallsByIndex = /* @__PURE__ */ new Map();
-		const decoder = new TextDecoder();
-		const reader = res.body.getReader();
-		const frames = createSseFrameReader();
-		let inputTokens;
-		let outputTokens;
-		const handleFrame = function* (data) {
-			let chunk;
-			try {
-				chunk = JSON.parse(data);
-			} catch (e) {
-				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$1(e)}`, data);
-			}
-			const type = chunk["type"];
-			if (type === "error") throw new WebSkillError("LLM_REQUEST_FAILED", `LLM stream error: ${chunk["error"]?.message ?? data}`);
-			if (type === "message_start") {
-				const usage = chunk["message"]?.["usage"];
-				if (typeof usage?.["input_tokens"] === "number") inputTokens = usage["input_tokens"];
-				if (typeof usage?.["output_tokens"] === "number") outputTokens = usage["output_tokens"];
-				return;
-			}
-			if (type === "message_delta") {
-				const usage = chunk["usage"];
-				if (typeof usage?.["output_tokens"] === "number") outputTokens = usage["output_tokens"];
-				return;
-			}
-			if (type === "content_block_start") {
-				const block = chunk["content_block"];
-				if (block?.["type"] === "tool_use") {
-					const index = typeof chunk["index"] === "number" ? chunk["index"] : 0;
-					toolCallsByIndex.set(index, {
-						id: typeof block["id"] === "string" ? block["id"] : "",
-						name: typeof block["name"] === "string" ? block["name"] : "",
-						arguments: ""
-					});
-				}
-				return;
-			}
-			if (type === "content_block_delta") {
-				const index = typeof chunk["index"] === "number" ? chunk["index"] : 0;
-				const delta = chunk["delta"];
-				if (delta?.["type"] === "text_delta" && typeof delta["text"] === "string" && delta["text"] !== "") {
-					yield {
-						type: "text-delta",
-						delta: delta["text"]
-					};
-					return;
-				}
-				if (delta?.["type"] === "thinking_delta" && typeof delta["thinking"] === "string" && delta["thinking"] !== "") {
-					yield {
-						type: "thinking-delta",
-						delta: delta["thinking"]
-					};
-					return;
-				}
-				if (delta?.["type"] === "input_json_delta" && typeof delta["partial_json"] === "string") {
-					const acc = toolCallsByIndex.get(index) ?? {
-						id: "",
-						name: "",
-						arguments: ""
-					};
-					acc.arguments += delta["partial_json"];
-					toolCallsByIndex.set(index, acc);
-				}
-				return;
-			}
-		};
-		try {
-			for (;;) {
-				const { value, done: readerDone } = await reader.read();
-				const payloads = readerDone ? frames.flush() : frames.push(decoder.decode(value, { stream: true }));
-				for (const payload of payloads) yield* handleFrame(payload);
-				if (readerDone) break;
-			}
-		} finally {
-			reader.releaseLock();
-		}
-		if (toolCallsByIndex.size > 0) yield {
-			type: "tool-calls",
-			toolCalls: [...toolCallsByIndex.entries()].sort(([a], [b]) => a - b).map(([index, acc]) => {
-				let args = {};
-				let parseError;
-				try {
-					args = JSON.parse(acc.arguments || "{}");
-				} catch (e) {
-					parseError = e instanceof Error ? e.message : String(e);
-				}
-				return {
-					id: acc.id || `call-${index}`,
-					name: acc.name,
-					arguments: args,
-					...parseError ? { argumentsParseError: parseError } : {}
-				};
-			})
-		};
-		const usage = inputTokens !== void 0 || outputTokens !== void 0 ? {
-			inputTokens: inputTokens ?? 0,
-			outputTokens: outputTokens ?? 0
-		} : void 0;
-		yield {
-			type: "done",
-			...usage ? { usage } : {}
-		};
-	}
-	async #post(input, stream) {
-		validateLlmMessages(input.messages);
-		const { system, messages } = toAnthropicMessages(input.messages);
-		const body = {
-			model: input.model ?? this.#config.model,
-			max_tokens: this.#config.maxTokens ?? 4096,
-			messages
-		};
-		if (system !== void 0) body["system"] = system;
-		if (input.tools?.length) body["tools"] = toAnthropicTools(input.tools);
-		const thinkingBudget = this.#config.thinkingBudgetTokens;
-		if (thinkingBudget !== void 0 && Number.isInteger(thinkingBudget) && thinkingBudget > 0) body["thinking"] = {
-			type: "enabled",
-			budget_tokens: thinkingBudget
-		};
-		else if (input.temperature !== void 0) body["temperature"] = input.temperature;
-		if (stream) body["stream"] = true;
-		let res;
-		try {
-			res = await this.#fetch(`${this.#baseUrl()}/v1/messages`, {
-				method: "POST",
-				headers: this.#headers(),
-				body: JSON.stringify(body),
-				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
-			});
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage$1(e)}`, e);
-		}
-		if (!res.ok) {
-			const detail = await res.text().catch(() => "");
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`, { status: res.status });
-		}
-		return res;
-	}
-	/**
-	* 真实调用路径探测（FR-27.1）：`POST /v1/messages` 最小请求（max_tokens=1），200 即可达。
-	* Anthropic 兼容端点（如 LM Studio 的 /anthropic 层）不实现 `GET /v1/models`，
-	* 用 /models 探测会把「能对话」误判为「不可达」——checkAvailability 的语义从
-	* 「/models 可达」改为「能完成一次真实调用」。
-	*/
-	async checkAvailability() {
-		try {
-			return (await this.#fetch(`${this.#baseUrl()}/v1/messages`, {
-				method: "POST",
-				headers: this.#headers(),
-				body: JSON.stringify({
-					model: this.#config.model,
-					max_tokens: 1,
-					messages: [{
-						role: "user",
-						content: "ping"
-					}]
-				})
-			})).ok;
-		} catch {
-			return false;
-		}
-	}
-	#parseResponse(data) {
-		try {
-			const blocks = data.content;
-			if (!Array.isArray(blocks)) throw new Error("response has no content blocks");
-			const text = blocks.filter((b) => b["type"] === "text").map((b) => String(b["text"] ?? "")).join("");
-			const thinking = blocks.filter((b) => b["type"] === "thinking").map((b) => String(b["thinking"] ?? "")).join("");
-			const toolCalls = blocks.filter((b) => b["type"] === "tool_use").map((b) => ({
-				id: typeof b["id"] === "string" ? b["id"] : "",
-				name: typeof b["name"] === "string" ? b["name"] : "",
-				arguments: typeof b["input"] === "object" && b["input"] !== null ? b["input"] : {}
-			}));
-			const usageRaw = data.usage;
-			const usage = typeof usageRaw?.["input_tokens"] === "number" || typeof usageRaw?.["output_tokens"] === "number" ? {
-				inputTokens: typeof usageRaw["input_tokens"] === "number" ? usageRaw["input_tokens"] : 0,
-				outputTokens: typeof usageRaw["output_tokens"] === "number" ? usageRaw["output_tokens"] : 0
-			} : void 0;
-			return {
-				content: text === "" ? void 0 : textParts(text),
-				toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
-				...thinking === "" ? {} : { thinking },
-				...usage ? { usage } : {},
-				raw: data
-			};
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage$1(e)}`, data);
-		}
-	}
-};
-const errorMessage = (e) => e instanceof Error ? e.message : String(e);
-/** usageMetadata → LlmTokenUsage（promptTokenCount / candidatesTokenCount；无字段返回 undefined） */
-function parseGenAiUsage(data) {
-	const usage = data?.usageMetadata;
-	if (!usage) return void 0;
-	const input = usage["promptTokenCount"];
-	const output = usage["candidatesTokenCount"];
-	if (typeof input !== "number" && typeof output !== "number") return void 0;
-	return {
-		inputTokens: typeof input === "number" ? input : 0,
-		outputTokens: typeof output === "number" ? output : 0
-	};
-}
-/** parts → GenAI parts（二进制统一走 inlineData） */
-const toGenAiParts = (parts, where) => parts.map((part) => {
-	switch (part.type) {
-		case "text": return { text: part.text };
-		case "image":
-		case "file": return { inlineData: {
-			mimeType: part.mimeType,
-			data: part.data
-		} };
-		default: return rejectUnsupportedPart(part, "Google GenAI", where);
-	}
-});
-/** systemInstruction 与 functionResponse 只接受文本 */
-const toGenAiText = (parts, where) => {
-	const nonText = parts.find((p) => p.type !== "text");
-	if (nonText) rejectUnsupportedPart(nonText, "Google GenAI", where);
-	return partsToText(parts);
-};
-/** tool 结果文本包装为 functionResponse.response 对象 */
-function responseObject(content) {
-	try {
-		const parsed = JSON.parse(content);
-		if (typeof parsed === "object" && parsed !== null) return parsed;
-	} catch {}
-	return { result: content };
-}
-/** LlmMessage 序列 → systemInstruction + contents（tool 结果合并进 user 消息 functionResponse parts） */
-function toGenAiContents(messages) {
-	const system = messages.filter((m) => m.role === "system").map((m) => toGenAiText(m.content, "system")).join("\n");
-	const nameByCallId = /* @__PURE__ */ new Map();
-	for (const msg of messages) if (msg.role === "assistant") for (const call of msg.toolCalls ?? []) nameByCallId.set(call.id, call.name);
-	const out = [];
-	for (const msg of messages) {
-		if (msg.role === "system") continue;
-		if (msg.role === "tool") {
-			const callId = msg.toolCallId ?? "";
-			const part = { functionResponse: {
-				name: nameByCallId.get(callId) ?? callId,
-				response: responseObject(toGenAiText(msg.content, "tool"))
-			} };
-			const last = out.at(-1);
-			if (last && last.role === "user") last.parts.push(part);
-			else out.push({
-				role: "user",
-				parts: [part]
-			});
-			continue;
-		}
-		if (msg.role === "assistant") {
-			const parts = toGenAiParts(msg.content, "assistant");
-			for (const call of msg.toolCalls ?? []) {
-				const signature = call.vendor?.["thoughtSignature"];
-				parts.push({
-					functionCall: {
-						name: call.name,
-						args: call.arguments
-					},
-					...typeof signature === "string" ? { thoughtSignature: signature } : {}
-				});
-			}
-			out.push({
-				role: "model",
-				parts: parts.length > 0 ? parts : [{ text: "" }]
-			});
-			continue;
-		}
-		out.push({
-			role: "user",
-			parts: toGenAiParts(msg.content, msg.role)
-		});
-	}
-	return system === "" ? { contents: out } : {
-		systemInstruction: { parts: [{ text: system }] },
-		contents: out
-	};
-}
-const toGenAiTools = (tools) => [{ functionDeclarations: tools.map((tool) => {
-	const portable = toPortableToolSchema(stripModelUnfillableParams(tool.inputSchema));
-	return {
-		name: tool.name,
-		...tool.description ? { description: tool.description } : {},
-		...isExpressibleForVendor(portable, GOOGLE_SCHEMA_PROFILE) ? { parameters: sanitizeForVendor(portable, GOOGLE_SCHEMA_PROFILE, tool.name) } : { parametersJsonSchema: relaxRefLoops(portable) }
-	};
-}) }];
-/** Google GenAI（generateContent / streamGenerateContent）客户端（零依赖 fetch） */
-var GoogleGenAiClient = class {
-	#config;
-	#fetch;
-	constructor(config) {
-		this.#config = config;
-		this.#fetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
-	}
-	#baseUrl() {
-		return (this.#config.baseUrl ?? "https://generativelanguage.googleapis.com").replace(/\/+$/, "");
-	}
-	async complete(input) {
-		const res = await this.#post(input, false);
-		let data;
-		try {
-			data = await res.json();
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM response: ${errorMessage(e)}`, e);
-		}
-		const parts = this.#responseParts(data);
-		const text = parts.filter((p) => typeof p["text"] === "string").map((p) => String(p["text"])).join("");
-		const toolCalls = this.#functionCalls(parts);
-		const usage = parseGenAiUsage(data);
-		return {
-			content: text === "" ? void 0 : textParts(text),
-			toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
-			...usage ? { usage } : {},
-			raw: data
-		};
-	}
-	/** SSE 流式：chunk.parts text → text-delta；functionCall 聚合 → tool-calls */
-	async *stream(input) {
-		const res = await this.#post(input, true);
-		if (!res.body) throw new WebSkillError("LLM_REQUEST_FAILED", "LLM streaming response has no body");
-		const toolCalls = [];
-		const decoder = new TextDecoder();
-		const reader = res.body.getReader();
-		const frames = createSseFrameReader();
-		let usage;
-		const handleFrame = function* (data) {
-			let chunk;
-			try {
-				chunk = JSON.parse(data);
-			} catch (e) {
-				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage(e)}`, data);
-			}
-			usage = parseGenAiUsage(chunk) ?? usage;
-			const parts = chunk.candidates?.[0]?.content?.parts;
-			for (const part of parts ?? []) {
-				if (typeof part["text"] === "string" && part["text"] !== "") {
-					yield {
-						type: "text-delta",
-						delta: part["text"]
-					};
-					continue;
-				}
-				const call = part["functionCall"];
-				if (call) {
-					const signature = part["thoughtSignature"];
-					toolCalls.push({
-						id: `call-${toolCalls.length}`,
-						name: call.name ?? "",
-						arguments: call.args ?? {},
-						...typeof signature === "string" ? { vendor: { thoughtSignature: signature } } : {}
-					});
-				}
-			}
-		};
-		try {
-			for (;;) {
-				const { value, done: readerDone } = await reader.read();
-				const payloads = readerDone ? frames.flush() : frames.push(decoder.decode(value, { stream: true }));
-				for (const payload of payloads) yield* handleFrame(payload);
-				if (readerDone) break;
-			}
-		} finally {
-			reader.releaseLock();
-		}
-		if (toolCalls.length > 0) yield {
-			type: "tool-calls",
-			toolCalls
-		};
-		yield {
-			type: "done",
-			...usage ? { usage } : {}
-		};
-	}
-	async #post(input, stream) {
-		const model = input.model ?? this.#config.model;
-		const action = stream ? ":streamGenerateContent?alt=sse" : ":generateContent";
-		validateLlmMessages(input.messages);
-		const { systemInstruction, contents } = toGenAiContents(input.messages);
-		const body = { contents };
-		if (systemInstruction) body["systemInstruction"] = systemInstruction;
-		if (input.tools?.length) body["tools"] = toGenAiTools(input.tools);
-		if (input.temperature !== void 0) body["generationConfig"] = { temperature: input.temperature };
-		let res;
-		try {
-			res = await this.#fetch(`${this.#baseUrl()}/v1beta/models/${encodeURIComponent(model)}${action}`, {
-				method: "POST",
-				headers: {
-					"content-type": "application/json",
-					"x-goog-api-key": this.#config.apiKey
-				},
-				body: JSON.stringify(body),
-				signal: input.signal ?? (this.#config.requestTimeoutMs ? AbortSignal.timeout(this.#config.requestTimeoutMs) : null)
-			});
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed: ${errorMessage(e)}`, e);
-		}
-		if (!res.ok) {
-			const detail = await res.text().catch(() => "");
-			throw new WebSkillError("LLM_REQUEST_FAILED", `LLM request failed with HTTP ${res.status}${detail ? `: ${detail.slice(0, 500)}` : ""}`, { status: res.status });
-		}
-		return res;
-	}
-	/** 轻量探测（GET /v1beta/models），集成测试据此决定 skip */
-	async checkAvailability() {
-		try {
-			return (await this.#fetch(`${this.#baseUrl()}/v1beta/models`, { headers: { "x-goog-api-key": this.#config.apiKey } })).ok;
-		} catch {
-			return false;
-		}
-	}
-	#responseParts(data) {
-		try {
-			const parts = data.candidates?.[0]?.content?.parts;
-			if (!Array.isArray(parts)) throw new Error("response has no candidates[0].content.parts");
-			return parts;
-		} catch (e) {
-			throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to interpret LLM response: ${errorMessage(e)}`, data);
-		}
-	}
-	#functionCalls(parts) {
-		const out = [];
-		for (const part of parts) {
-			const call = part["functionCall"];
-			if (call) {
-				const signature = part["thoughtSignature"];
-				out.push({
-					id: `call-${out.length}`,
-					name: call.name ?? "",
-					arguments: call.args ?? {},
-					...typeof signature === "string" ? { vendor: { thoughtSignature: signature } } : {}
-				});
-			}
-		}
-		return out;
-	}
-};
-/** v5 { inputTokens, outputTokens } 与 v4 { promptTokens, completionTokens } 两种形状都接 */
-function fromVercelUsage(raw) {
-	const u = raw ?? {};
-	const input = u["inputTokens"] ?? u["promptTokens"];
-	const output = u["outputTokens"] ?? u["completionTokens"];
-	if (typeof input !== "number" && typeof output !== "number") return void 0;
-	return {
-		inputTokens: typeof input === "number" ? input : 0,
-		outputTokens: typeof output === "number" ? output : 0
-	};
-}
-function toVercelToolSpecs(tools) {
-	const out = {};
-	for (const tool of tools) out[tool.name] = {
-		...tool.description ? { description: tool.description } : {},
-		inputSchema: tool.inputSchema
-	};
-	return out;
-}
-/**
-* 归一化供应商思考内容：v5 的 `reasoningText`（字符串）与 v4 的 `reasoning`
-* （Array<{ text; type }>）都能落到同一条 `LlmResponse.thinking`。
-*/
-function normalizeThinking(value) {
-	if (typeof value === "string") return value !== "" ? value : void 0;
-	if (!Array.isArray(value)) return void 0;
-	const text = value.map((part) => typeof part?.text === "string" ? part.text : "").join("");
-	return text !== "" ? text : void 0;
-}
-/** 接受 generateText 的返回值形状：{ text?, toolCalls?: [{ toolCallId, toolName, input|args }] } */
-function fromVercelResult(result) {
-	const r = result;
-	const toolCalls = (r.toolCalls ?? []).map((tc, i) => {
-		const args = tc.input ?? tc.args ?? {};
-		return {
-			id: typeof tc.toolCallId === "string" ? tc.toolCallId : `call-${i}`,
-			name: typeof tc.toolName === "string" ? tc.toolName : "",
-			arguments: typeof args === "object" && args !== null ? args : {}
-		};
-	});
-	const thinking = normalizeThinking(r.reasoningText ?? r.reasoning);
-	const usage = fromVercelUsage(r.usage);
-	return {
-		content: typeof r.text === "string" && r.text !== "" ? textParts(r.text) : void 0,
-		toolCalls: toolCalls.length ? toolCalls : void 0,
-		...thinking !== void 0 ? { thinking } : {},
-		...usage ? { usage } : {},
-		raw: result
-	};
+//#region ../core/src/render/xmlRenderer.ts
+/** 转义 XML 五个特殊字符：& < > " ' */
+function escapeXml(text) {
+	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
-/**
-* Vercel streamText fullStream 片段 → LlmStreamEvent 映射。
-* 未知片段类型返回 undefined（调用方跳过）。
-*/
-function fromVercelStreamPart(part) {
-	const p = part ?? {};
-	switch (p["type"]) {
-		case "text-delta": {
-			const delta = p["text"] ?? p["delta"];
-			return typeof delta === "string" && delta !== "" ? {
-				type: "text-delta",
-				delta
-			} : void 0;
-		}
-		case "reasoning-delta": {
-			const delta = p["text"] ?? p["delta"];
-			return typeof delta === "string" && delta !== "" ? {
-				type: "thinking-delta",
-				delta
-			} : void 0;
-		}
-		case "tool-call": return {
-			type: "tool-calls",
-			toolCalls: [{
-				id: typeof p["toolCallId"] === "string" ? p["toolCallId"] : "call-0",
-				name: typeof p["toolName"] === "string" ? p["toolName"] : "",
-				arguments: typeof p["input"] === "object" && p["input"] !== null ? p["input"] : {}
-			}]
-		};
-		case "finish": {
-			const usage = fromVercelUsage(p["totalUsage"] ?? p["usage"]);
-			return {
-				type: "done",
-				...usage ? { usage } : {}
-			};
-		}
-		default: return;
-	}
+function renderAvailableSkillsXml(catalog) {
+	const lines = ["<available_skills>"];
+	for (const skill of catalog.entries) {
+		lines.push("  <skill>");
+		lines.push(`    <name>${escapeXml(skill.name)}</name>`);
+		lines.push(`    <description>${escapeXml(skill.description)}</description>`);
+		if (skill.version !== void 0) lines.push(`    <version>${escapeXml(skill.version)}</version>`);
+		if (skill.license !== void 0) lines.push(`    <license>${escapeXml(skill.license)}</license>`);
+		lines.push(`    <source>${escapeXml(skill.source)}</source>`);
+		lines.push("  </skill>");
+	}
+	lines.push("</available_skills>");
+	return lines.join("\n");
 }
-const INSTRUCTIONS$1 = `You are an agent that completes tasks by using skills.
+const xmlRenderer = {
+	format: "xml",
+	render: renderAvailableSkillsXml
+};
+
+//#endregion
+//#region ../runtime/src/routing/progressiveRouter.ts
+const INSTRUCTIONS = `You are an agent that completes tasks by using skills.
 
 Skills are disclosed progressively: the catalog below only shows metadata. To use a skill:
 1. Call the "read_skill_file" tool to load the skill's SKILL.md instructions. Reading SKILL.md activates the skill's script tools, which are named "<skillName>__<scriptName>".
@@ -1623,74 +50,13 @@ var ProgressiveRouter = class {
 		return {
 			strategy: "progressive",
 			catalog,
-			systemPrompt: `${INSTRUCTIONS$1}\n\n${renderAvailableSkillsXml(catalog)}`
+			systemPrompt: `${INSTRUCTIONS}\n\n${renderAvailableSkillsXml(catalog)}`
 		};
 	}
 };
-const INSTRUCTIONS = `You are an agent that completes tasks by using skills.
-The full instructions of every available skill are injected below. Follow them directly.
-Script tools are named "<skillName>__<scriptName>".
-When the task is complete, answer in plain text without calling any tool.
 
-Never claim to have created, saved, or installed a skill unless a skill tool call actually succeeded.`;
-/** 全量披露路由（对照用）：注入每个技能的完整 SKILL.md 正文 */
-var FullDisclosureRouter = class {
-	#discovery;
-	constructor(discovery) {
-		this.#discovery = discovery;
-	}
-	async route(catalog) {
-		const sections = [];
-		for (const entry of catalog.entries) {
-			const doc = await this.#discovery.loadDocument(entry.name);
-			sections.push(`<skill name="${entry.name}">\n${doc.body}\n</skill>`);
-		}
-		return {
-			strategy: "full-disclosure",
-			catalog,
-			systemPrompt: `${INSTRUCTIONS}\n\n${sections.join("\n\n")}`
-		};
-	}
-};
-/**
-* 参与 `toolResultMaxBytes` 截断的分片类型（FR-23.3）。**判据的单一来源。**
-*
-* 白名单而不是黑名单：黑名单式下新加的分片默认「参与截断」，
-* 漏改一处就会把一份 PDF 截成坏文件、把 docx 文本腰斩，而且没有任何报错。
-* 白名单式下新分片默认**不参与**，要受文本预算约束必须显式加进来。
-* @experimental
-*/
-const TEXT_BUDGETED_CONTENT_TYPES = /* @__PURE__ */ new Set(["text", "json"]);
-/**
-* `file` 分片的上限（FR-23.4），量的是**实际上线的 base64 长度**而不是解码后的字节——
-* provider 的限额算的是请求载荷。
-*
-* 2026-08-14 查证的三家上限：
-* | provider  | 上限                                    | 出处                    |
-* | --------- | --------------------------------------- | ----------------------- |
-* | Anthropic | **32 MB**（**整个请求载荷**）、600 页   | PDF support / 请求大小  |
-* | OpenAI    | 单文件 50 MB，全部文件合计 50 MB        | File inputs / 使用须知  |
-* | Gemini    | 50 MB 或 1000 页（内联与 Files API 同） | 文档理解 / 技术详情     |
-*
-* 取最小值 Anthropic 的 32 MB。它是**整个请求**的额度，不是文档单独的额度，
-* 所以再留出余量给系统提示词、catalog（约 34 KB）、历史消息与其余分片。
-* 25 000 KB base64 ≈ 18.75 MB 原始 PDF。取 1024 的整数倍：设置界面按 KB 展示，
-* 十进制的 24 000 000 会显示成 23437.5 这种读不出来的数。
-*/
-const DEFAULT_MAX_DOCUMENT_BYTES = 256e5;
-/**
-* `document-text` 分片的上限（FR-23.4）。
-*
-* 约束来自**上下文窗口**而不是请求大小：抽出来的文本要整段进上下文。
-* 按英文约 4 字节/token 折算，500 KB ≈ 128K token，占 200K 窗口的多半，
-* 给历史消息与模型的回答留下其余。
-*/
-const DEFAULT_MAX_DOCUMENT_TEXT_BYTES = 512e3;
-/**
-* 单次 fetchData 结果的字节上限（分册 16，FR-16.6）：1000 KB。
-* 结构化数据不是文档，量级差一个数量级；超出**只拒不截**——截断的 JSON 解不出来。
-*/
-const DEFAULT_MAX_DATA_SOURCE_BYTES = 1024e3;
+//#endregion
+//#region ../runtime/src/tools/toolResolver.ts
 /**
 * 工具名解析规则（单一实现，Agent 循环使用）：
 * 1. `<skillName>__<scriptName>` 且前缀是已激活技能 → 本地脚本
@@ -1744,6 +110,9 @@ function toLlmToolSpec(tool) {
 		}
 	};
 }
+
+//#endregion
+//#region ../runtime/src/tools/skillScripts.ts
 /** 工具名规则：技能**目录名**加双下划线加脚本名，与 frontmatter 的 name 无关 */
 function scriptToolName(skillName, scriptName) {
 	return `${skillName}__${scriptName}`;
@@ -1790,43 +159,9 @@ function formatSkillScriptManifest(descriptors) {
 	if (descriptors.length === 0) return "";
 	return `\n\nAvailable scripts in this skill (from directory listing, authoritative):\n${descriptors.map((item) => item.toolName === void 0 ? `- ${item.path} → not exposed as a tool (${item.unexposedReason ?? "no loadable definition"})` : `- ${item.path} → tool "${item.toolName}" (input schema: ${SCHEMA_SOURCE_TEXT[item.schemaSource]})`).join("\n")}`;
 }
-const MCP_CONTENT_RE = /^(text|json|image|resource|audio)$/;
-/**
-* 脚本返回值归一到 MCP content 格式：数组沿用（逐项归一），
-* 字符串包装为 text，其他值序列化包装。Node/浏览器执行器共享。
-* 产出只有文本型分片：脚本侧没有下发图像的通道（图像只来自页面取像）。
-*/
-function normalizeToolContent(value) {
-	if (Array.isArray(value)) return value.map((item) => {
-		if (typeof item === "object" && item !== null && typeof item.type === "string" && MCP_CONTENT_RE.test(item.type)) {
-			const { type, ...rest } = item;
-			if (type === "json") return {
-				type: "json",
-				data: rest["data"] ?? rest
-			};
-			return {
-				type: "text",
-				text: typeof rest["text"] === "string" ? rest["text"] : JSON.stringify(rest)
-			};
-		}
-		return {
-			type: "text",
-			text: typeof item === "string" ? item : JSON.stringify(item)
-		};
-	});
-	if (typeof value === "string") return [{
-		type: "text",
-		text: value
-	}];
-	if (value === void 0 || value === null) return [{
-		type: "text",
-		text: ""
-	}];
-	return [{
-		type: "text",
-		text: typeof value === "object" ? JSON.stringify(value) : String(value)
-	}];
-}
+
+//#endregion
+//#region ../runtime/src/tools/readSkillFileTool.ts
 const READ_SKILL_FILE_TOOL_NAME = "read_skill_file";
 const READ_SKILL_FILE_INPUT_SCHEMA = {
 	type: "object",
@@ -1849,6 +184,9 @@ const READ_SKILL_FILE_TOOL = {
 	inputSchema: READ_SKILL_FILE_INPUT_SCHEMA,
 	source: "builtin"
 };
+
+//#endregion
+//#region ../runtime/src/tools/askUserTool.ts
 const ASK_USER_TOOL_NAME = "ask_user";
 /** 一次 `ask_user` 能收的字段数上限（FR-11.3 裁决值），可由 `AgentLoopConfig` 覆盖 */
 const ASK_USER_MAX_FIELDS = 20;
@@ -1938,78 +276,9 @@ const ASK_USER_TOOL = {
 	inputSchema: ASK_USER_INPUT_SCHEMA,
 	source: "builtin"
 };
-/**
-* 产物 metadata 的准入与判读（分册 18）。
-*
-* metadata 是能力桥上第一个**开放结构**的入参，且来自沙箱内的技能脚本。
-* 校验落在 `createScriptContext.writeArtifact`——它是 in-process 与三个沙箱执行器
-* 唯一的汇聚点，在此抛错才能带上正确的桥请求 id 回给脚本（DV-10）。
-*/
-/** 序列化后的字节上限；`index.json` 是整覆盖原子写，无上限等于廉价的放大面 */
-const ARTIFACT_METADATA_MAX_BYTES = 4096;
-/** 原型污染键；JSON 解析产生的同名键是**自有键**，可被 getOwnPropertyNames 查出 */
-const FORBIDDEN_KEYS = /* @__PURE__ */ new Set([
-	"__proto__",
-	"constructor",
-	"prototype"
-]);
-function isPlainObject$1(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	const proto = Object.getPrototypeOf(value);
-	return proto === Object.prototype || proto === null;
-}
-/** 函数声明而非箭头函数赋值：只有前者能让 TS 的控制流分析认到 never 终止 */
-function reject$1(message) {
-	throw new WebSkillError("VALIDATION_FAILED", message);
-}
-/**
-* 递归拒绝原型污染键与不可序列化值。
-* `JSON.stringify` 会**静默丢弃**函数与 symbol，而静默正是本需求明令禁止的形态，
-* 所以必须在序列化之前显式查一遍。
-*/
-function assertSerializableShape(value, path, seen) {
-	const kind = typeof value;
-	if (kind === "function" || kind === "symbol" || kind === "bigint") reject$1(`Artifact metadata value at "${path}" is not JSON-serializable (${kind})`);
-	if (kind !== "object" || value === null) return;
-	const container = value;
-	if (seen.has(container)) reject$1(`Artifact metadata contains a circular reference at "${path}"`);
-	seen.add(container);
-	if (Array.isArray(value)) value.forEach((item, index) => assertSerializableShape(item, `${path}[${index}]`, seen));
-	else {
-		if (!isPlainObject$1(value)) reject$1(`Artifact metadata value at "${path}" must be a plain object or array`);
-		for (const key of Object.getOwnPropertyNames(value)) {
-			if (FORBIDDEN_KEYS.has(key)) reject$1(`Artifact metadata must not contain the reserved key "${key}" (at "${path}")`);
-			assertSerializableShape(value[key], `${path}.${key}`, seen);
-		}
-	}
-	seen.delete(container);
-}
-/**
-* 准入校验。通过后返回 `JSON.parse(JSON.stringify(...))` 的副本：
-* in-process 路径由此获得与 JSON stdio 沙箱路径完全相同的语义，
-* 而不是依赖某条传输链路碰巧做了序列化。
-*/
-function admitArtifactMetadata(value) {
-	if (!isPlainObject$1(value)) reject$1("Artifact metadata must be a plain object");
-	assertSerializableShape(value, "metadata", /* @__PURE__ */ new Set());
-	let json;
-	try {
-		json = JSON.stringify(value);
-	} catch (error) {
-		reject$1(`Artifact metadata is not JSON-serializable: ${error.message}`);
-	}
-	const bytes = new TextEncoder().encode(json).length;
-	if (bytes > 4096) reject$1(`Artifact metadata is too large: ${bytes} bytes exceeds the ${ARTIFACT_METADATA_MAX_BYTES} byte limit`);
-	return JSON.parse(json);
-}
-/**
-* 「这份产物不出自动下载卡」的判读。**严格 `=== false`**：
-* 隐式真值转换会让写错的键值静默生效，而隐藏是不可见的失败。
-* `buildRenderResult` 与 agentLoop 的去重集合共用本函数，两处判据不得分叉。
-*/
-function isArtifactCardHidden(artifact) {
-	return artifact.metadata?.["resultCard"] === false;
-}
+
+//#endregion
+//#region ../runtime/src/tools/scriptContext.ts
 /**
 * 越权 / 绝对路径 / 父级遍历的技能目录读取：策略拒绝（FS_PERMISSION_DENIED，
 * 计入 POLICY_DENIAL_CODES → 不计入隔离失败计数），
@@ -2033,7 +302,7 @@ function resolveSkillDir(skillRoot, dir, relativePath) {
 * 四个显式能力，不暴露 fs 本体（沙箱语义，对齐 deferred-items D1）。
 */
 function createScriptContext(deps) {
-	const { fs, artifactStore, skillName, skillRoot, runId, confirm, fetchData, onWarning, onArtifactCreated } = deps;
+	const { fs, artifactStore, skillName, skillRoot, runId, confirm, fetchData, uploadFiles, onWarning, onArtifactCreated } = deps;
 	const readFs = fs.withRoot?.(skillRoot) ?? fs;
 	return {
 		skillName,
@@ -2067,210 +336,17 @@ function createScriptContext(deps) {
 		},
 		...confirm ? { confirm } : {},
 		...fetchData ? { fetchData } : {},
+		...deps.documentSurface ? { documentSurface: true } : {},
+		...uploadFiles ? {
+			listUploadFiles: async () => [...await uploadFiles.list()],
+			readUploadFile: (id) => uploadFiles.read(id)
+		} : {},
 		...onWarning ? { onWarning } : {}
 	};
 }
-const isRecord$4 = (v) => typeof v === "object" && v !== null;
-/**
-* $chart 约定的形状校验：JSON content 的 data 含 $chart 键且形状合法 → ChartSpec；
-* 任何畸形（kind 非法 / labels 非字符串数组 / series 项缺数值 data）→ undefined（忽略不炸）。
-*/
-function extractChartSpec(data) {
-	if (!isRecord$4(data)) return void 0;
-	const raw = data["$chart"];
-	if (!isRecord$4(raw)) return void 0;
-	const { kind, labels, series } = raw;
-	if (kind !== "bar" && kind !== "line" && kind !== "pie") return void 0;
-	if (!Array.isArray(labels) || !labels.every((l) => typeof l === "string")) return void 0;
-	if (!Array.isArray(series)) return void 0;
-	const validSeries = [];
-	for (const item of series) {
-		if (!isRecord$4(item) || !Array.isArray(item["data"]) || !item["data"].every((n) => typeof n === "number")) return;
-		const name = item["name"];
-		validSeries.push({
-			...typeof name === "string" ? { name } : {},
-			data: item["data"]
-		});
-	}
-	const title = raw["title"];
-	return {
-		kind,
-		labels,
-		series: validSeries,
-		...typeof title === "string" ? { title } : {}
-	};
-}
-/**
-* 默认的结果渲染构造：run 内收集的 renderBlocks（chart 等）在前，
-* LLM 最终输出 → markdown block，run.artifacts → file blocks 在后；summary 取 terminationReason。
-* 注入 output block 时一并记下它的下标（S7），供消费方按来源去重。
-*/
-function buildRenderResult(run, output, renderBlocks = []) {
-	const blocks = [...renderBlocks];
-	let outputBlockIndex;
-	if (output.trim() !== "") {
-		outputBlockIndex = blocks.length;
-		blocks.push({
-			type: "markdown",
-			text: output
-		});
-	}
-	for (const artifact of run.artifacts) {
-		if (isArtifactCardHidden(artifact)) continue;
-		blocks.push({
-			type: "file",
-			path: artifact.path,
-			...artifact.mimeType ? { mimeType: artifact.mimeType } : {},
-			size: artifact.size
-		});
-	}
-	return {
-		runId: run.id,
-		summary: run.terminationReason,
-		blocks,
-		artifacts: run.artifacts,
-		...outputBlockIndex === void 0 ? {} : { outputBlockIndex }
-	};
-}
-const MAX_SURFACE_BYTES = 256 * 1024;
-const MAX_ACTIONS = 32;
-const MAX_NODES = 2e3;
-const MAX_NODE_DEPTH = 32;
-const MAX_JSON_DEPTH = 16;
-const MAX_PATCH_OPERATIONS = 128;
-const actionIntents = /* @__PURE__ */ new Set([
-	"submit",
-	"cancel",
-	"select",
-	"download",
-	"refresh"
-]);
-function isRecord$3(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function reject(message) {
-	throw new WebSkillError("VALIDATION_FAILED", message);
-}
-function requireString(value, name) {
-	if (typeof value !== "string" || value.trim() === "") reject(`${name} must be a non-empty string`);
-}
-function requireNonNegativeInteger(value, name) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) reject(`${name} must be a non-negative integer`);
-}
-function isJsonValue(value, depth = 0) {
-	if (depth > MAX_JSON_DEPTH || value === void 0 || typeof value === "function" || typeof value === "symbol") return false;
-	if (value === null || typeof value === "string" || typeof value === "boolean") return true;
-	if (typeof value === "number") return Number.isFinite(value);
-	if (Array.isArray(value)) return value.every((item) => isJsonValue(item, depth + 1));
-	if (!isRecord$3(value)) return false;
-	return Object.keys(value).every((key) => key !== "__proto__" && key !== "constructor" && isJsonValue(value[key], depth + 1));
-}
-/**
-* Runtime 只做结构校验；组件名白名单与 props schema 属于 catalog 语义，
-* 留在 `@webskill/ui`——runtime 不得为了校验反向依赖 ui。
-*/
-function assertNode(value, path, depth, counter) {
-	if (depth > MAX_NODE_DEPTH) reject(`A UI spec tree must not nest deeper than ${MAX_NODE_DEPTH} levels`);
-	if (++counter.nodes > MAX_NODES) reject(`A UI spec tree must contain at most ${MAX_NODES} nodes`);
-	if (!isRecord$3(value)) reject(`${path} must be an object`);
-	requireString(value["component"], `${path}.component`);
-	if (value["id"] !== void 0) requireString(value["id"], `${path}.id`);
-	if (value["props"] !== void 0 && (!isRecord$3(value["props"]) || !isJsonValue(value["props"]))) reject(`${path}.props must be a JSON object`);
-	const children = value["children"];
-	if (children === void 0) return;
-	if (!Array.isArray(children)) reject(`${path}.children must be an array`);
-	children.forEach((child, index) => assertNode(child, `${path}.children[${index}]`, depth + 1, counter));
-}
-function assertActions(value) {
-	if (value === void 0) return;
-	if (!Array.isArray(value) || value.length > MAX_ACTIONS) reject(`Surface actions must contain at most ${MAX_ACTIONS} items`);
-	for (const action of value) {
-		if (!isRecord$3(action)) reject("A surface action must be an object");
-		requireString(action["id"], "Surface action ID");
-		const intent = action["intent"];
-		if (typeof intent !== "string" || !actionIntents.has(intent)) reject("Surface action intent is invalid");
-		if (action["awaitResponse"] !== void 0 && typeof action["awaitResponse"] !== "boolean") reject("Surface action awaitResponse must be a boolean");
-		if (action["nonce"] !== void 0 && (typeof action["nonce"] !== "string" || action["nonce"] === "")) reject("Surface action nonce must be a non-empty string");
-	}
-}
-/** Validates the allowlisted, data-only node tree accepted by a UI surface renderer. @experimental */
-function validateUiSpecNode(value) {
-	assertNode(value, "root", 0, { nodes: 0 });
-	if (!isJsonValue(value)) reject("A UI spec tree must contain JSON data only");
-	if (JSON.stringify(value).length > MAX_SURFACE_BYTES) reject(`A UI spec tree exceeds the ${MAX_SURFACE_BYTES}-byte limit`);
-	return structuredClone(value);
-}
-function assertPatch(value) {
-	if (!isRecord$3(value)) reject("A surface patch operation must be an object");
-	if (value["op"] !== "replace" && value["op"] !== "merge" && value["op"] !== "append") reject("Surface patch operation is invalid");
-	requireString(value["path"], "Surface patch path");
-	if (!value["path"].startsWith("/")) reject("Surface patch path must be a JSON pointer");
-	if (!isJsonValue(value["value"])) reject("Surface patch value must be JSON data");
-}
-/** Validates an individual event in the framework-neutral surface stream. @experimental */
-function validateUiSpecEvent(value) {
-	if (!isRecord$3(value) || typeof value["type"] !== "string") reject("A UI surface event must have a type");
-	if (value["runId"] !== void 0) requireString(value["runId"], "Surface event run ID");
-	switch (value["type"]) {
-		case "open":
-			requireString(value["id"], "UI surface ID");
-			assertActions(value["actions"]);
-			return {
-				type: "open",
-				...value["runId"] ? { runId: value["runId"] } : {},
-				id: value["id"],
-				node: validateUiSpecNode(value["node"]),
-				...value["actions"] ? { actions: structuredClone(value["actions"]) } : {}
-			};
-		case "patch":
-			requireString(value["id"], "Surface patch ID");
-			requireNonNegativeInteger(value["revision"], "Surface patch revision");
-			if (!Array.isArray(value["operations"]) || value["operations"].length === 0) reject("A surface patch requires operations");
-			if (value["operations"].length > MAX_PATCH_OPERATIONS) reject(`A surface patch must contain at most ${MAX_PATCH_OPERATIONS} operations`);
-			for (const operation of value["operations"]) assertPatch(operation);
-			return {
-				type: "patch",
-				...value["runId"] ? { runId: value["runId"] } : {},
-				id: value["id"],
-				revision: value["revision"],
-				operations: structuredClone(value["operations"])
-			};
-		case "complete":
-			requireString(value["id"], "Surface completion ID");
-			requireNonNegativeInteger(value["revision"], "Surface completion revision");
-			return {
-				type: "complete",
-				...value["runId"] ? { runId: value["runId"] } : {},
-				id: value["id"],
-				revision: value["revision"]
-			};
-		case "error":
-			requireString(value["id"], "Surface error ID");
-			requireString(value["code"], "Surface error code");
-			requireString(value["message"], "Surface error message");
-			return {
-				type: "error",
-				...value["runId"] ? { runId: value["runId"] } : {},
-				id: value["id"],
-				code: value["code"],
-				message: value["message"]
-			};
-		case "cancel":
-			requireString(value["id"], "Surface cancellation ID");
-			return {
-				type: "cancel",
-				...value["runId"] ? { runId: value["runId"] } : {},
-				id: value["id"]
-			};
-		default: return reject("UI surface event type is invalid");
-	}
-}
-/** Extracts validated surface stream events from structured tool output. @experimental */
-function extractUiSpecEvents(data) {
-	if (!isRecord$3(data) || data["$surface"] === void 0) return [];
-	const raw = data["$surface"];
-	return (Array.isArray(raw) ? raw : [raw]).map((event) => validateUiSpecEvent(event));
-}
+
+//#endregion
+//#region ../runtime/src/interaction/schemaToForm.ts
 /**
 * JsonSchema → 表单模型：按 properties 生成字段，required 标记必填；
 * providedArgs 已有的值作为 defaultValue 预填（表单只为补齐缺失项服务）。
@@ -2309,6 +385,9 @@ function mapFieldType(prop) {
 		default: return "textarea";
 	}
 }
+
+//#endregion
+//#region ../runtime/src/lifecycle/eventBus.ts
 /** 生命周期事件总线：只读观测，支持按阶段或通配订阅 */
 var EventBus = class {
 	#listeners = /* @__PURE__ */ new Map();
@@ -2349,6 +428,9 @@ var EventBus = class {
 		}
 	}
 };
+
+//#endregion
+//#region ../runtime/src/memory/serializingMemoryStore.ts
 /**
 * per-scope 串行化 MemoryStore 装饰器：同一 scope 的 get/set/delete/list
 * 按 promise 链串行（并发 run 的 read-modify-write 不丢计数）。
@@ -2392,6 +474,9 @@ var SerializingMemoryStore = class {
 		return this.#serialize(scope, () => fn(this.#inner));
 	}
 };
+
+//#endregion
+//#region ../runtime/src/profile/types.ts
 /** @experimental */
 const DEFAULT_USER_PROFILE_LIMITS = {
 	recordLimit: 500,
@@ -2406,6 +491,9 @@ const EMPTY_USER_PROFILE = {
 	entries: [],
 	refinedAt: 0
 };
+
+//#endregion
+//#region ../runtime/src/profile/inject.ts
 /** 注入段的标题。宿主/测试要判断「有没有注入画像」时对它取子串，不要自己再拼一份 @experimental */
 const USER_PROFILE_PROMPT_HEADER = "## About this user (inferred from past behavior; may be outdated)";
 /**
@@ -2436,6 +524,9 @@ function renderUserProfileContext(profile = EMPTY_USER_PROFILE, maxBytes = DEFAU
 	while (kept > 0 && byteLength(render(kept)) > maxBytes) kept -= 1;
 	return kept === 0 ? "" : render(kept);
 }
+
+//#endregion
+//#region ../runtime/src/profile/records.ts
 /** `user:{id}` scope 下的行为记录 key @experimental */
 const BEHAVIOR_RECORDS_KEY = "behaviorRecords";
 /** `user:{id}` scope 下的画像 key @experimental */
@@ -2557,59 +648,26 @@ function sampleBehaviorRecords(records, limits = DEFAULT_USER_PROFILE_LIMITS) {
 	for (const record of [...records].reverse()) take(record);
 	return [...picked.values()].sort((a, b) => a.at - b.at);
 }
+
+//#endregion
+//#region ../runtime/src/routing/plainChatPrompt.ts
 /**
 * 无工具模型的系统提示（0.6.0 FR-14.3）。
 * 最后一句是重点：不明说「没有工具」，模型会凭训练记忆自己编造 tool_call 标记。
 */
 const PLAIN_CHAT_SYSTEM_PROMPT = "You are a helpful assistant. Answer the user's question directly and concisely. You have no tools available; do not describe or simulate tool calls.";
+
+//#endregion
+//#region ../runtime/src/routing/onDemandToolsHint.ts
 /**
 * 按需披露的系统提示（分册 19 / FR-19.7）。
 * 只在本 run 确实存在按需工具时追加——没有按需工具却说「有些工具没列出来」，
 * 是在教模型怀疑一个完整的工具表。
 */
 const ON_DEMAND_TOOLS_HINT = "Some tools are disclosed on demand and are not listed above. If a capability you need seems missing, look for a related skill in the catalog and read its SKILL.md first — activating it may reveal additional tools. Do not conclude the capability does not exist.";
-const READ_LINKED_DOCUMENT_TOOL_NAME = "read_linked_document";
-/**
-* 能直接给模型用的 MIME。其余一律拒绝并列出这份清单——
-* 「尽力而为地猜格式」会让模型收到乱码却以为读成功了。
-*/
-const SUPPORTED_DOCUMENT_MIME = {
-	pdf: "application/pdf",
-	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
-};
-/** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
-const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}), Excel (${SUPPORTED_DOCUMENT_MIME.xlsx}) and plain text documents can be read.`;
-/**
-* 内建工具：读页面链接指向的文档。
-*
-* **始终注册**（只要宿主装配了 reader）：docx / xlsx 与纯文本这条路对所有模型成立。
-* PDF 目标在模型不支持文档时**取数后拒绝**，而不是入口就拦 ——
-* 入口拦会误伤 docx，它抽成文本后根本不需要文档能力。
-*/
-const READ_LINKED_DOCUMENT_TOOL = {
-	name: READ_LINKED_DOCUMENT_TOOL_NAME,
-	description: "Read a document linked from the current page. Pass the exact \"href\" from a perceive_page result. Cross-origin documents need the user to confirm each time.",
-	inputSchema: {
-		type: "object",
-		properties: { url: {
-			type: "string",
-			description: "The href of a link that appeared in a perceive_page result."
-		} },
-		required: ["url"]
-	},
-	source: "builtin"
-};
-/** 二进制转 base64；`btoa` 只吃 latin1，必须逐字节喂而不是先 decode 成字符串 */
-function toBase64(bytes) {
-	let binary = "";
-	for (const byte of bytes) binary += String.fromCharCode(byte);
-	return btoa(binary);
-}
-/** `toBase64` 的逆；分片里的文档要交回抽取器时用（0.13.0 FR-22.3） */
-function fromBase64(data) {
-	return Uint8Array.from(atob(data), (char) => char.charCodeAt(0));
-}
+
+//#endregion
+//#region ../runtime/src/trace/traceRecorder.ts
 /** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
 var TraceRecorder = class {
 	#runId;
@@ -2636,6 +694,9 @@ var TraceRecorder = class {
 		return [...this.#events];
 	}
 };
+
+//#endregion
+//#region ../runtime/src/trace/todoMarker.ts
 const isRecord$2 = (v) => typeof v === "object" && v !== null;
 /** 工具结果可经 `$todo` 标记记入 trace 的事件类型；其余类型不接受，防止工具源伪造 run.* */
 const TODO_TRACE_TYPES = /* @__PURE__ */ new Set([
@@ -2666,6 +727,9 @@ function extractTodoTraceEvents(data) {
 	}
 	return events;
 }
+
+//#endregion
+//#region ../runtime/src/skillGeneration/candidateMarker.ts
 const isRecord$1 = (v) => typeof v === "object" && v !== null;
 /**
 * `$skillCandidate` 约定的形状校验：JSON content 的 data 含合法 `$skillCandidate` 键 → 候选载荷。
@@ -2685,6 +749,9 @@ function extractSkillCandidate(data) {
 		name
 	};
 }
+
+//#endregion
+//#region ../runtime/src/engine/limits.ts
 /**
 * Agent loop 的运行上限默认值。**全仓唯一来源**（S8）。
 *
@@ -2706,6 +773,9 @@ const DEFAULT_LOOP_LIMITS = {
 * @stable
 */
 const MAX_TOOL_STEP_ARG_BYTES = 32768;
+
+//#endregion
+//#region ../runtime/src/engine/snapshot.ts
 const RUN_SNAPSHOT_SCHEMA_VERSION = 3;
 /** @experimental */
 function isUnsupportedRunSnapshot(entry) {
@@ -2751,7 +821,7 @@ var FsRunSnapshotStore = class {
 			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
 		}
 		const schemaVersion = typeof snapshot.schemaVersion === "number" ? snapshot.schemaVersion : 0;
-		if (schemaVersion !== 3) throw new WebSkillError("RUN_SNAPSHOT_SCHEMA_UNSUPPORTED", `Snapshot for run "${runId}" uses schema version ${schemaVersion}; this runtime reads version 3. The file was kept for read-only inspection.`);
+		if (schemaVersion !== 3) throw new WebSkillError("RUN_SNAPSHOT_SCHEMA_UNSUPPORTED", `Snapshot for run "${runId}" uses schema version ${schemaVersion}; this runtime reads version ${3}. The file was kept for read-only inspection.`);
 		if (snapshot.runId !== runId) {
 			await this.#fs.remove(path).catch(() => void 0);
 			throw new WebSkillError("RUN_SNAPSHOT_INCOMPATIBLE", `Snapshot for run "${runId}" has an unexpected shape and was deleted`);
@@ -2803,6 +873,9 @@ var FsRunSnapshotStore = class {
 		} catch {}
 	}
 };
+
+//#endregion
+//#region ../runtime/src/engine/toolAccess.ts
 /**
 * LLM 可见名 → 作者在 SKILL.md 里写的形态。
 * `<已激活技能>__<脚本>` 保持原样（裸标识符按技能作用域单独匹配），
@@ -2872,6 +945,9 @@ function isNamedByActivatedSkill(state, llmToolName) {
 	}
 	return false;
 }
+
+//#endregion
+//#region ../runtime/src/engine/toolStepRedaction.ts
 /**
 * 参数敏感标注关键字（分册 30 / FR-30.3）。
 *
@@ -2935,6 +1011,9 @@ function redactToolStepArgs(args, schema, trust) {
 		redacted
 	};
 }
+
+//#endregion
+//#region ../runtime/src/engine/agentLoop.ts
 const MAX_SURFACE_PATCHES_PER_SECOND = 240;
 /**
 * 一轮 LLM 调用可能抛出、且**值得原样上报**的结构化码。
@@ -2959,6 +1038,17 @@ const MODEL_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
 	"image/webp",
 	"image/gif"
 ]);
+/**
+* 数据源清单里的出处标注（0.14.0 分册 21，FR-21.6）。
+*
+* 措辞必须说出「这段说明来自页面、可能不准确」：`description` 已在候选层剥掉换行与控制字符，
+* 它无法把自己伪装成上下文里的新一行指令——**剥换行与这句标注是一对，只做一件都不够**。
+*/
+const DATA_SOURCE_PROVENANCE_NOTE = {
+	"": "",
+	"page-declared": "  [declared by the current site; this description comes from the page and may be inaccurate]",
+	"tool-projection": "  [projected from a tool the current site registered; this description comes from the page and may be inaccurate]"
+};
 /** 分片是不是 PDF；mime 允许带参数与大小写差异，与 FR-11.1 的判定同口径 */
 const isPdfPart = (part) => part.type === "file" && part.mimeType.split(";")[0]?.trim().toLowerCase() === SUPPORTED_DOCUMENT_MIME.pdf;
 /**
@@ -4008,7 +2098,7 @@ var AgentLoop = class {
 			const source = resolution.kind === "script" ? void 0 : (this.#deps.externalTools ?? []).find((s) => s.canHandle(call.name));
 			if (source === void 0 && !this.#checkToolAccess(state, call.name)) result = this.#deniedToolError(state, call.name);
 			else if (resolution.kind === "script") result = await this.#handleScriptTool(call, resolution.skillName, resolution.scriptName, state);
-			else if (source) result = await source.call(call.name, call.arguments);
+			else if (source) result = await source.call(call.name, call.arguments, { runId: state.runId });
 			else {
 				if (resolution.kind === "not-found") state.unknownToolCalls += 1;
 				result = toolError(resolution.code, resolution.message, resolution.kind === "not-found" ? resolution.data : void 0);
@@ -4789,7 +2879,9 @@ var AgentLoop = class {
 		}
 		const head = text.slice(0, Math.floor(max * .6));
 		const tail = text.slice(-Math.floor(max * .3));
-		return `${head}\n...[truncated ${text.length - head.length - tail.length} chars; ${note}]...\n${tail}`;
+		const omitted = text.length - head.length - tail.length;
+		state.trace.record("run.warning", { message: `Tool result for "${call.name}" exceeded ${String(max)} chars and was truncated in the middle; ${String(omitted)} chars omitted (${note}).` });
+		return `${head}\n...[truncated ${omitted} chars; ${note}]...\n${tail}`;
 	}
 	/** SkillStateGuard 判定（无注入默认全放行；仅显式 false 拦截） */
 	async #guardDenied(kind, skillName) {
@@ -4858,6 +2950,7 @@ var AgentLoop = class {
 		if (!root) return "";
 		let allowedTools;
 		let dependencies = [];
+		let declaredSources = [];
 		try {
 			const { metadata } = parseSkillMarkdown(skillMdText ?? await this.#deps.fs.readText(`${root}/SKILL.md`));
 			const rawDeps = metadata["dependencies"];
@@ -4868,6 +2961,9 @@ var AgentLoop = class {
 				state.skillAllowedTools.set(skillName, allowedTools);
 				this.#warnUnmatchedToolPatterns(state, skillName, allowedTools);
 			} else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "allowed-tools" metadata entry; ignored` });
+			const rawSources = metadata["data-sources"];
+			if (rawSources !== void 0) if (Array.isArray(rawSources)) declaredSources = rawSources.filter((e) => typeof e === "string");
+			else state.trace.record("run.warning", { message: `Skill "${skillName}" has a non-array "data-sources" metadata entry; ignored` });
 		} catch (e) {
 			state.trace.record("run.warning", { message: `Failed to read or parse SKILL.md of skill "${skillName}": ${messageOf(e)}` });
 		}
@@ -4903,6 +2999,7 @@ var AgentLoop = class {
 			}
 		}
 		let note = (loaded.length ? `\n\nActivated tools: ${loaded.join(", ")}` : "") + formatSkillScriptManifest(scripts);
+		note += this.#dataSourceNotice(skillName, declaredSources, state);
 		for (const dep of dependencies) {
 			if (state.activated.has(dep)) continue;
 			if (!this.#deps.skillIndex.has(dep)) {
@@ -4914,6 +3011,26 @@ var AgentLoop = class {
 		return note;
 	}
 	/**
+	* 0.14.0 分册 19：技能声明的源在本宿主缺失时，把「缺哪些 / 有哪些」写进激活回执与 trace。
+	* 宿主没注入清单时一个字不说——那是「未知」，不是「没有」。
+	*
+	* 0.14.0 分册 21（DV-7）：「有哪些」由 id 列表升级为 `<id> — <description>`，
+	* 并对非宿主声明的条目附出处标注。`description` 可能来自页面，
+	* 因此标注必须与它同时出现——只写说明不写出处，等于让站点以宿主口吻讲话。
+	*/
+	#dataSourceNotice(skillName, declared, state) {
+		const declaredSources = this.#deps.dataSources;
+		const available = typeof declaredSources === "function" ? declaredSources() : declaredSources;
+		if (declared.length === 0 || available === void 0) return "";
+		const have = new Set(available.map((source) => source.id));
+		const missing = declared.filter((id) => !have.has(id));
+		if (missing.length === 0) return "";
+		const listed = available.map((source) => `\n- ${source.id} — ${source.description}${DATA_SOURCE_PROVENANCE_NOTE[source.provenance ?? ""] ?? ""}`).join("");
+		const message = `Skill "${skillName}" declares data source(s) this host does not provide: ${missing.join(", ")}. Available here:${listed || " (none)"}\nDo not retry them or invent their values; tell the user which data source is missing.`;
+		state.trace.record("run.warning", { message });
+		return `\n\n${message}`;
+	}
+	/**
 	* D2 Schema 兜底链（同一 run 内激活时只算一次）：
 	* 显式 inputSchema > sidecar scripts/<name>.schema.json > schemaInferer 推导 > schemaUnavailable
 	* 返回值即最终来源，进技能清单告诉模型该信谁（FR-18.1）。
@@ -5009,6 +3126,8 @@ var AgentLoop = class {
 			runId: state.runId,
 			confirm: (message) => this.#confirm(message, state),
 			...this.#deps.fetchData ? { fetchData: this.#deps.fetchData } : {},
+			...this.#deps.documentSurface ? { documentSurface: true } : {},
+			...this.#deps.uploadFiles ? { uploadFiles: this.#uploadFilePort(this.#deps.uploadFiles, skillName, state) } : {},
 			onWarning: (message) => state.trace.record("run.warning", { message }),
 			onArtifactCreated: (artifact) => createdIds.add(artifact.id)
 		});
@@ -5106,6 +3225,71 @@ var AgentLoop = class {
 	#nextInteractionId(state) {
 		return `int-${++state.interactionSeq}`;
 	}
+	/**
+	* 把宿主端口包成「每次读都要人点头」的形态再交给脚本上下文。
+	* 四个执行器共用这一份，避免各自实现一套把关而出现口径差异。
+	*/
+	#uploadFilePort(source, skillName, state) {
+		return {
+			list: () => source.list(),
+			read: async (id) => {
+				const file = (await source.list()).find((f) => f.id === id);
+				if (!file) throw new WebSkillError("UPLOAD_FILE_NOT_FOUND", `Upload file "${id}" is not part of the message that started this run`);
+				const budget = this.#deps.maxUploadFileBytes;
+				if (budget !== void 0 && file.size > budget) throw new WebSkillError("UPLOAD_FILE_TOO_LARGE", `Upload file "${file.name}" is ${file.size} bytes, over the ${budget} byte limit; it was not read`);
+				const approved = await this.#consentUploadFile(file, skillName, state);
+				await this.#auditUploadFile(file, skillName, approved, state);
+				if (!approved) throw new WebSkillError("TOOL_DENIED", `The user declined to share "${file.name}" with skill "${skillName}"`);
+				return source.read(id);
+			}
+		};
+	}
+	/**
+	* 与 `#confirm` 分开是刻意的：那条通路在没接 UI 桥、桥故障或 confirmations=auto-approve
+	* 时都会自动放行，而本能力的「需批准」是恒定的（分册 17 D-17-3），只能失败即拒。
+	*/
+	async #consentUploadFile(file, skillName, state) {
+		if (!this.#deps.uiBridge) {
+			state.trace.record("run.warning", { message: "No UiBridge configured; upload file read denied" });
+			return false;
+		}
+		try {
+			return await this.#interact(state, {
+				type: "confirm",
+				id: this.#nextInteractionId(state),
+				message: `Let skill "${skillName}" read the file you uploaded: ${file.name} (${file.contentType}, ${file.size} bytes)?`,
+				defaultValue: false
+			}, {
+				kind: "confirm",
+				uploadFile: file.id
+			}) === true;
+		} catch (e) {
+			if (e instanceof BridgeRequestError) {
+				state.trace.record("run.warning", { message: `Upload file consent bridge failed, denied: ${e.message}` });
+				return false;
+			}
+			throw e;
+		}
+	}
+	/** 只写文件名 / 类型 / 字节数与是否被拒，**不写内容**（FR-17.7） */
+	async #auditUploadFile(file, skillName, approved, state) {
+		try {
+			await this.#deps.uploadFileAudit?.append({
+				type: "upload.file.read",
+				target: skillName,
+				data: {
+					runId: state.runId,
+					fileId: file.id,
+					fileName: file.name,
+					contentType: file.contentType,
+					bytes: file.size,
+					denied: !approved
+				}
+			});
+		} catch (e) {
+			state.trace.record("run.warning", { message: `Upload file audit failed: ${messageOf(e)}` });
+		}
+	}
 	async #memoryGet(scope, key, state) {
 		try {
 			return await this.#deps.memory?.get(scope, key);
@@ -5276,15 +3460,9 @@ var AgentLoop = class {
 		};
 	}
 };
-/**
-* Catalog 合并：同名本地优先；外部条目的 mcp:// 根 URI 保留，
-* 调用方可凭 URI 强制选择外部技能（绕过本地优先）。
-*/
-function mergeCatalogEntries(localEntries, providerEntries) {
-	const byName = new Map(localEntries.map((e) => [e.name, e]));
-	for (const entry of providerEntries) if (!byName.has(entry.name)) byName.set(entry.name, entry);
-	return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
-}
+
+//#endregion
+//#region ../runtime/src/engine/runtime.ts
 /**
 * session history 滚动裁剪：超出预算时裁掉中段，保留首尾。
 * 边界对齐 LLM tool 契约：head 不以未应答的 assistant toolCalls 结尾，
@@ -5362,11 +3540,12 @@ var WebSkillRuntime = class {
 		return {
 			id: sessionId,
 			createdAt,
-			run: (prompt) => {
+			run: (prompt, runOptions = {}) => {
 				const result = queue.then(async () => {
 					const r = await this.run(prompt, {
 						sessionId,
-						history
+						history,
+						...runOptions
 					});
 					history = trimSessionHistory(r.messages.slice(1), maxHistory);
 					return r;
@@ -5428,11 +3607,16 @@ var WebSkillRuntime = class {
 			skillIntegrityGuard: this.#deps.skillIntegrityGuard,
 			skillOutcomeReporter: this.#deps.skillOutcomeReporter,
 			fetchData: this.#deps.fetchData,
+			dataSources: this.#deps.dataSources,
 			linkedDocuments: this.#deps.linkedDocuments,
 			docxExtractor: this.#deps.docxExtractor,
 			xlsxExtractor: this.#deps.xlsxExtractor,
 			pdfExtractor: this.#deps.pdfExtractor,
-			documentAudit: this.#deps.documentAudit
+			documentAudit: this.#deps.documentAudit,
+			documentSurface: this.#deps.documentSurface,
+			uploadFileAudit: this.#deps.uploadFileAudit,
+			maxUploadFileBytes: this.#deps.maxUploadFileBytes,
+			uploadFiles: options.uploadFiles
 		}, this.#deps.config);
 		const runId = `run-${Math.random().toString(36).slice(2, 10)}`;
 		this.#loops.set(runId, loop);
@@ -5556,176 +3740,35 @@ var WebSkillRuntime = class {
 			skillIntegrityGuard: this.#deps.skillIntegrityGuard,
 			skillOutcomeReporter: this.#deps.skillOutcomeReporter,
 			fetchData: this.#deps.fetchData,
+			dataSources: this.#deps.dataSources,
 			linkedDocuments: this.#deps.linkedDocuments,
 			docxExtractor: this.#deps.docxExtractor,
 			xlsxExtractor: this.#deps.xlsxExtractor,
-			pdfExtractor: this.#deps.pdfExtractor,
-			documentAudit: this.#deps.documentAudit
-		}, this.#deps.config);
-		this.#loops.set(runId, loop);
-		try {
-			return await loop.resume(snapshot);
-		} finally {
-			this.#loops.delete(runId);
-		}
-	}
-	/**
-	* 取消进行中的 run（chatbot Stop 按钮等）：触发该 run 的 AbortController，
-	* run 以 cancelled（RUN_CANCELLED）终止；未找到活跃 run 返回 false。
-	* 取消在下一个中断点生效（LLM complete/stream；交互等待不强制中断）。
-	*/
-	cancel(runId) {
-		return this.#loops.get(runId)?.cancel(runId) ?? false;
-	}
-};
-/**
-* navigator.webskill 门面装配层：零新业务逻辑，全部直转
-* SkillDiscovery / validateSkills / WebSkillRuntime / SkillManager。
-* @stable
-*/
-function createWebSkillApi(deps) {
-	const { fs, roots } = deps;
-	let runtime;
-	const discoveries = /* @__PURE__ */ new Map();
-	const discoveryFor = (paths) => {
-		const key = paths.join("");
-		let discovery = discoveries.get(key);
-		if (!discovery) {
-			discovery = new SkillDiscovery(fs, paths);
-			discoveries.set(key, discovery);
-		}
-		return discovery;
-	};
-	const lazyRuntime = () => {
-		runtime ??= new WebSkillRuntime({
-			fs,
-			roots,
-			llm: deps.llm,
-			...deps.executor ? { executor: deps.executor } : {},
-			...deps.artifactStore ? { artifactStore: deps.artifactStore } : {},
-			...deps.loopConfig ? { config: deps.loopConfig } : {}
-		});
-		return runtime;
-	};
-	const requireManager = () => {
-		if (!deps.skillManager) throw new WebSkillError("TOOL_UNSUPPORTED", "No skill manager is configured; install/uninstall is unavailable");
-		return deps.skillManager;
-	};
-	return {
-		async discover(path) {
-			const { entries } = await discoveryFor([path]).discover();
-			return buildCatalog(entries);
-		},
-		async read(name) {
-			const { entries } = await discoveryFor(roots).discover();
-			const entry = entries.find((e) => e.name === name);
-			if (!entry) throw new WebSkillError("SKILL_NOT_FOUND", `Unknown skill: ${name}`);
-			const skillMdPath = `${entry.root}/SKILL.md`;
-			const { metadata, body } = parseSkillMarkdown(await fs.readText(skillMdPath));
-			return {
-				metadata,
-				body,
-				location: {
-					skillRoot: entry.root,
-					skillMdPath,
-					source: entry.source
-				}
-			};
-		},
-		validate(path) {
-			return validateSkills(fs, [path]);
-		},
-		async run(prompt) {
-			return (await lazyRuntime().run(prompt)).run;
-		},
-		async install(url) {
-			const manifest = await requireManager().install(sourceFromUrl(url));
-			return {
-				name: manifest.name,
-				...manifest.version !== void 0 ? { version: manifest.version } : {},
-				installedAt: manifest.installedAt,
-				integrity: manifest.integrity
-			};
-		},
-		async uninstall(name) {
-			await requireManager().uninstall(name);
-		}
-	};
-}
-/** install URL 分派：http(s) .zip → http；.git → git（无 git 能力的 manager 自行 TOOL_UNSUPPORTED）；
-* 其余 http(s) URL → INSTALL_FAILED（不静默当 local）；非 URL → local */
-function sourceFromUrl(url) {
-	const bare = url.split("?")[0] ?? url;
-	if (/^https?:\/\//.test(url)) {
-		if (bare.endsWith(".zip")) return {
-			type: "http",
-			url
-		};
-		if (bare.endsWith(".git")) return {
-			type: "git",
-			url
-		};
-		throw new WebSkillError("INSTALL_FAILED", `Unsupported install URL "${url}" (supported: http(s) URLs ending in .zip or .git, or local paths)`);
-	}
-	if (bare.endsWith(".git")) return {
-		type: "git",
-		url
-	};
-	return {
-		type: "local",
-		path: url
-	};
-}
-/** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
-var HookRunner = class {
-	#hooks = /* @__PURE__ */ new Map();
-	/** 宿主可在装配后按 RuntimeConfig 调整（console Settings › Agent Runtime 即经此生效） */
-	timeoutMs;
-	failOnHookError;
-	onWarning;
-	constructor(options = {}) {
-		this.timeoutMs = options.timeoutMs ?? 5e3;
-		this.failOnHookError = options.failOnHookError ?? false;
-		this.onWarning = options.onWarning;
-	}
-	register(phase, hook) {
-		const key = phase;
-		const list = this.#hooks.get(key) ?? [];
-		list.push(hook);
-		this.#hooks.set(key, list);
-		return this;
+			pdfExtractor: this.#deps.pdfExtractor,
+			documentAudit: this.#deps.documentAudit,
+			documentSurface: this.#deps.documentSurface,
+			uploadFileAudit: this.#deps.uploadFileAudit,
+			maxUploadFileBytes: this.#deps.maxUploadFileBytes
+		}, this.#deps.config);
+		this.#loops.set(runId, loop);
+		try {
+			return await loop.resume(snapshot);
+		} finally {
+			this.#loops.delete(runId);
+		}
 	}
 	/**
-	* 已注册钩子的**计数**，按注册相位分组（`'*'` 为全相位钩子）。
-	* 刻意不返回函数引用：那会给 UI 一条调用宿主钩子的执行路径，而面板只需要「装没装上」。
+	* 取消进行中的 run（chatbot Stop 按钮等）：触发该 run 的 AbortController，
+	* run 以 cancelled（RUN_CANCELLED）终止；未找到活跃 run 返回 false。
+	* 取消在下一个中断点生效（LLM complete/stream；交互等待不强制中断）。
 	*/
-	listRegisteredHooks() {
-		const counts = /* @__PURE__ */ new Map();
-		for (const [phase, hooks] of this.#hooks) counts.set(phase, hooks.length);
-		return counts;
-	}
-	async run(phase, ctx) {
-		const hooks = [...this.#hooks.get(phase) ?? [], ...this.#hooks.get("*") ?? []];
-		for (const hook of hooks) try {
-			await this.#withTimeout(Promise.resolve().then(() => hook(ctx)), phase);
-		} catch (e) {
-			if (this.failOnHookError) throw e instanceof WebSkillError ? e : new WebSkillError("RUN_FAILED", messageOf(e), e);
-			this.onWarning?.(messageOf(e));
-		}
-	}
-	#withTimeout(promise, phase) {
-		return new Promise((resolve, reject) => {
-			const timer = setTimeout(() => reject(new WebSkillError("RUN_TIMEOUT", `Lifecycle hook for phase "${phase}" timed out after ${this.timeoutMs}ms`)), this.timeoutMs);
-			promise.then((v) => {
-				clearTimeout(timer);
-				resolve(v);
-			}, (e) => {
-				clearTimeout(timer);
-				reject(e instanceof Error ? e : new Error(String(e)));
-			});
-		});
+	cancel(runId) {
+		return this.#loops.get(runId)?.cancel(runId) ?? false;
 	}
 };
+
+//#endregion
+//#region ../runtime/src/memory/fsMemoryStore.ts
 const encode = (s) => encodeURIComponent(s);
 /**
 * 基于 FileSystemProvider 的 MemoryStore：
@@ -5808,191 +3851,10 @@ var FsMemoryStore = class {
 		for (const entry of await this.#fs.list(this.#root)) await this.#fs.remove(entry.path, { recursive: true });
 	}
 };
-/**
-* 提炼提示词。要求返回结论列表而不是散文：条目化是「可见、可编辑、可删除」的前提（FR-19.3）。
-* `id` 由模型给出稳定 slug，才能在下一次提炼时更新同一条而不是无限追加。
-*/
-const USER_PROFILE_REFINE_PROMPT = `You summarize what a single user is like, based on records of what they did in a chat application.
-
-Return ONLY a JSON object with this shape, and nothing else:
-
-{
-  "entries": [
-    { "id": "slug-case-stable-id", "text": "One sentence about the user.", "confidence": "high" | "low" }
-  ]
-}
 
-Rules:
-- Each entry is one durable, reusable fact or preference about the user — how they like answers, what they work on, values they keep entering, languages they use.
-- Reuse the same "id" across runs for the same conclusion so it can be updated instead of duplicated. Use lowercase words joined by hyphens.
-- Use "high" only when several records agree. A single record is "low".
-- Do not restate individual records. Do not include secrets, credentials, or full personal identifiers.
-- Do not invent anything the records do not support. If the records say nothing useful, return {"entries": []}.`;
-/** 采样后的记录 → 送模型的摘要。导出供测试与宿主复核实际请求内容（AC-19.6） @experimental */
-function toRecordDigests(records) {
-	return records.map((record) => ({
-		kind: record.kind,
-		at: new Date(record.at).toISOString(),
-		value: record.value,
-		...record.scene.skillName !== void 0 ? { skill: record.scene.skillName } : {},
-		...record.scene.fieldName !== void 0 ? { field: record.scene.fieldName } : {},
-		...record.scene.fieldSemantics !== void 0 ? { meaning: record.scene.fieldSemantics } : {},
-		...record.scene.options !== void 0 ? { options: record.scene.options } : {},
-		...record.confirmed === true ? { confirmed: true } : {}
-	}));
-}
-/** 模型可能把 JSON 包在 ```json 里；只取第一个对象，解析不出就当没结论 */
-function parseEntries(content, now) {
-	const text = promptText(content ?? []);
-	const start = text.indexOf("{");
-	const end = text.lastIndexOf("}");
-	if (start < 0 || end <= start) return [];
-	let parsed;
-	try {
-		parsed = JSON.parse(text.slice(start, end + 1));
-	} catch {
-		return [];
-	}
-	const raw = parsed?.entries;
-	return readProfileEntries(Array.isArray(raw) ? raw.map((item) => ({
-		updatedAt: now,
-		...item
-	})) : []);
-}
-/**
-* 一次提炼（FR-19.3）。调用方负责持久化返回值；本函数不碰存储，
-* 也不吞异常——「失败不影响会话结束」由调用点的 fire-and-forget 保证，
-* 在这里吞掉会让手动提炼入口无法报错。
-* @experimental
-*/
-async function refineUserProfile(input) {
-	const limits = input.limits ?? DEFAULT_USER_PROFILE_LIMITS;
-	const now = (input.now ?? Date.now)();
-	const current = input.profile ?? EMPTY_USER_PROFILE;
-	const sampled = sampleBehaviorRecords(input.records, limits);
-	if (sampled.length === 0) return current;
-	const existing = current.entries.map((entry) => ({
-		id: entry.id,
-		text: entry.text
-	}));
-	const entries = parseEntries((await input.llm.complete({
-		...input.model !== void 0 ? { model: input.model } : {},
-		...input.signal !== void 0 ? { signal: input.signal } : {},
-		messages: [{
-			role: "system",
-			content: [{
-				type: "text",
-				text: USER_PROFILE_REFINE_PROMPT
-			}]
-		}, {
-			role: "user",
-			content: [{
-				type: "text",
-				text: `Existing conclusions:\n${JSON.stringify(existing)}\n\nRecords:\n${JSON.stringify(toRecordDigests(sampled))}`
-			}]
-		}]
-	})).content, now);
-	if (entries.length === 0) return current;
-	return mergeProfileEntries(current, entries, {
-		now,
-		limits
-	});
-}
-/** 导出文件的版本；导入时逐字校验，不做向前兼容猜测 @experimental */
-const USER_PROFILE_EXPORT_VERSION = 1;
-/** 与偏好导出同一套判据：归一化后按子串匹配，命中即拒 */
-const CREDENTIAL_MARKERS = [
-	"apikey",
-	"secret",
-	"token",
-	"password",
-	"passphrase",
-	"credential",
-	"privatekey"
-];
-const isCredentialKey = (key) => {
-	const normalized = key.toLowerCase().replace(/[-_\s]/g, "");
-	return CREDENTIAL_MARKERS.some((marker) => normalized.includes(marker));
-};
-function findCredentialKey(value) {
-	if (Array.isArray(value)) {
-		for (const item of value) {
-			const hit = findCredentialKey(item);
-			if (hit !== void 0) return hit;
-		}
-		return;
-	}
-	if (typeof value !== "object" || value === null) return void 0;
-	for (const [key, child] of Object.entries(value)) {
-		if (isCredentialKey(key)) return key;
-		const hit = findCredentialKey(child);
-		if (hit !== void 0) return hit;
-	}
-}
-/**
-* 导出画像（FR-19.7）。`excludeIds` 来自导出前的审阅界面：用户勾掉的条目不进文件。
-* @experimental
-*/
-function exportUserProfile(profile, options) {
-	const excluded = new Set(options.excludeIds ?? []);
-	const result = {
-		kind: "webskill.user-profile",
-		version: 1,
-		origin: options.origin,
-		exportedAt: (options.now ?? Date.now)(),
-		entries: profile.entries.filter((entry) => !excluded.has(entry.id))
-	};
-	const leaked = findCredentialKey(result);
-	if (leaked !== void 0) throw new WebSkillError("PROFILE_IMPORT_CREDENTIAL_REJECTED", `A user profile export must not contain credentials, but "${leaked}" was present`);
-	return result;
-}
-/** 解析并校验导入内容（FR-19.7）。含凭据是**拒绝**而不是忽略 @experimental */
-function parseUserProfileExport(raw) {
-	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new WebSkillError("PROFILE_IMPORT_INVALID", "A user profile file must be a JSON object");
-	const record = raw;
-	if (record["kind"] !== "webskill.user-profile") throw new WebSkillError("PROFILE_IMPORT_INVALID", "A user profile file must have \"kind\": \"webskill.user-profile\"");
-	if (record["version"] !== 1) throw new WebSkillError("PROFILE_IMPORT_VERSION_UNSUPPORTED", `Unsupported user profile file version ${JSON.stringify(record["version"])}; expected 1`);
-	const leaked = findCredentialKey(record);
-	if (leaked !== void 0) throw new WebSkillError("PROFILE_IMPORT_CREDENTIAL_REJECTED", `The user profile file contains a credential field "${leaked}"; the import was rejected`);
-	const entries = readProfileEntries(record["entries"]);
-	if (entries.length === 0) throw new WebSkillError("PROFILE_IMPORT_INVALID", "The user profile file has no usable entries");
-	return {
-		kind: "webskill.user-profile",
-		version: 1,
-		origin: typeof record["origin"] === "string" ? record["origin"] : "unknown",
-		exportedAt: typeof record["exportedAt"] === "number" ? record["exportedAt"] : 0,
-		entries
-	};
-}
-function diffUserProfile(current, incoming) {
-	const byId = new Map(current.entries.map((entry) => [entry.id, entry]));
-	const added = [];
-	const updated = [];
-	for (const entry of incoming.entries) {
-		const existing = byId.get(entry.id);
-		if (existing === void 0) added.push(entry);
-		else if (existing.text !== entry.text) updated.push(entry);
-	}
-	return {
-		added,
-		updated
-	};
-}
-/** 确认后落库：同 id 覆盖，其余保留；不触碰模型配置与凭据 @experimental */
-function applyUserProfileImport(current, incoming, options = {}) {
-	const now = (options.now ?? Date.now)();
-	const byId = new Map(current.entries.map((entry) => [entry.id, entry]));
-	for (const entry of incoming.entries) byId.set(entry.id, {
-		...entry,
-		updatedAt: now
-	});
-	return {
-		version: 1,
-		entries: [...byId.values()].sort((a, b) => b.updatedAt - a.updatedAt).slice(0, DEFAULT_USER_PROFILE_LIMITS.entryLimit),
-		refinedAt: current.refinedAt
-	};
-}
-const INDEX_FILE$1 = "index.json";
+//#endregion
+//#region ../runtime/src/artifacts/fsArtifactStore.ts
+const INDEX_FILE = "index.json";
 /**
 * 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
 * 每次写入同步更新 <root>/<runId>/index.json，新实例可凭索引恢复列表。
@@ -6026,7 +3888,7 @@ var FsArtifactStore = class {
 	}
 	async listArtifacts(runId) {
 		assertSafePathSegment(runId, "runId");
-		const indexPath = `${this.#root}/${runId}/${INDEX_FILE$1}`;
+		const indexPath = `${this.#root}/${runId}/${INDEX_FILE}`;
 		if (!await this.#fs.exists(indexPath)) return [];
 		const raw = await this.#fs.readText(indexPath);
 		try {
@@ -6059,10 +3921,13 @@ var FsArtifactStore = class {
 			metadata: input.metadata
 		};
 		const next = [...(await this.listArtifacts(input.runId)).filter((a) => a.id !== artifact.id), artifact];
-		await atomicWriteText(this.#fs, `${this.#root}/${input.runId}/${INDEX_FILE$1}`, JSON.stringify({ artifacts: next }, null, 2));
+		await atomicWriteText(this.#fs, `${this.#root}/${input.runId}/${INDEX_FILE}`, JSON.stringify({ artifacts: next }, null, 2));
 		return artifact;
 	}
 };
+
+//#endregion
+//#region ../runtime/src/sandbox/bridgeProtocol.ts
 const isRecord = (v) => typeof v === "object" && v !== null;
 const isNonEmptyString = (v) => typeof v === "string" && v !== "";
 /** 入站校验：非法 kind / 缺 id / 缺字段 → undefined（调用方忽略并记 warning） */
@@ -6096,6 +3961,15 @@ function parseBridgeRequest(data) {
 			id,
 			message: data["message"]
 		} : void 0;
+		case "listUploadFiles": return {
+			kind,
+			id
+		};
+		case "readUploadFile": return isNonEmptyString(data["fileId"]) ? {
+			kind,
+			id,
+			fileId: data["fileId"]
+		} : void 0;
 		case "fetchData": {
 			if (!isNonEmptyString(data["sourceId"])) return void 0;
 			const params = data["params"];
@@ -6120,6 +3994,14 @@ function bridgeError(id, code, message) {
 	};
 }
 /**
+* 上传文件能力缺席时四个执行器共用的说辞（分册 17 FR-17.6）：
+* 讲清「宿主没接 / 开关没开」，与「用户拒了这一次」（TOOL_DENIED）分得开。
+*/
+const UPLOAD_FILES_UNAVAILABLE = "Capability \"uploadFiles\" is unavailable: this host did not wire access to the files you uploaded, or the sandbox setting for it is off. This is not the same as the read being declined.";
+
+//#endregion
+//#region ../runtime/src/sandbox/networkPolicy.ts
+/**
 * 判定 URL 是否被策略放行：
 * - 'deny-all'（默认）全拒；'allow-all' 全放
 * - { allow } 条目支持三种写法：
@@ -6180,6 +4062,9 @@ function networkUrlHost(url) {
 function networkPolicyLibSource() {
 	return `var isNetworkAllowed = ${isNetworkAllowed.toString()};\nvar networkUrlHost = ${networkUrlHost.toString()};`;
 }
+
+//#endregion
+//#region ../runtime/src/sandbox/errorCodes.ts
 /** WebSkillErrorCode 全量白名单（错误码归一用；与 core errors.ts 保持同步） */
 const WHITELIST = /* @__PURE__ */ new Set([
 	"FS_NOT_FOUND",
@@ -6241,6 +4126,9 @@ function normalizeToolError(code, message) {
 		message: `${message} [original code: ${String(code)}]`
 	};
 }
+
+//#endregion
+//#region ../runtime/src/sandbox/approval.ts
 /**
 * Per-capability 强制授权判定（宿主侧，browser/node 执行器共用单一来源）。
 * 'require-approval' 模式下经注入的 UiBridge 发 authorize 交互；
@@ -6291,551 +4179,6 @@ var CapabilityApproval = class CapabilityApproval {
 		return "allowed";
 	}
 };
-/**
-* 从 run 的 trace 聚合大模型用量（请求次数 + 输入/输出 token）。
-* 与 `summarizeToolCalls` 同型：消费方不再各自遍历 trace。
-* @stable
-*/
-function summarizeRunUsage(trace) {
-	let llmCalls = 0;
-	let inputTokens = 0;
-	let outputTokens = 0;
-	let hasUsage = false;
-	for (const event of trace) {
-		if (event.type === "llm.request") {
-			llmCalls += 1;
-			continue;
-		}
-		if (event.type !== "llm.usage") continue;
-		const input = event.data?.["inputTokens"];
-		const output = event.data?.["outputTokens"];
-		const hasInput = typeof input === "number" && Number.isFinite(input);
-		const hasOutput = typeof output === "number" && Number.isFinite(output);
-		if (hasInput) inputTokens += input;
-		if (hasOutput) outputTokens += output;
-		if (hasInput || hasOutput) hasUsage = true;
-	}
-	return {
-		llmCalls,
-		...hasUsage ? {
-			inputTokens,
-			outputTokens
-		} : {}
-	};
-}
-const RUN_TRACE_SCHEMA_VERSION = 1;
-/** 终止原因：取最后一条 run.completed/cancelled/failed 事件的 data.reason */
-function extractEndReason(events) {
-	for (let i = events.length - 1; i >= 0; i--) {
-		const event = events[i];
-		if (event.type === "run.completed" || event.type === "run.cancelled" || event.type === "run.failed") {
-			const reason = event.data?.["reason"];
-			return typeof reason === "string" ? reason : void 0;
-		}
-	}
-}
-function summarize(trace) {
-	const endReason = extractEndReason(trace.events);
-	const durationMs = trace.endedAt === void 0 ? void 0 : Date.parse(trace.endedAt) - Date.parse(trace.startedAt);
-	const runUsage = summarizeRunUsage(trace.events);
-	return {
-		runId: trace.runId,
-		startedAt: trace.startedAt,
-		status: trace.status,
-		activeSkills: trace.activeSkills,
-		eventCount: trace.events.length,
-		turnCount: trace.events.filter((e) => e.type === "llm.request").length,
-		...trace.sessionId !== void 0 ? { sessionId: trace.sessionId } : {},
-		...trace.endedAt !== void 0 ? { endedAt: trace.endedAt } : {},
-		...endReason !== void 0 ? { endReason } : {},
-		...durationMs !== void 0 && Number.isFinite(durationMs) && durationMs >= 0 ? { durationMs } : {},
-		...runUsage.inputTokens !== void 0 ? { usage: {
-			inputTokens: runUsage.inputTokens,
-			outputTokens: runUsage.outputTokens ?? 0
-		} } : {}
-	};
-}
-function parseTraceFile(raw, path) {
-	let data;
-	try {
-		data = JSON.parse(raw);
-	} catch {
-		return;
-	}
-	if (typeof data !== "object" || data === null) return void 0;
-	if (typeof data.runId !== "string" || typeof data.startedAt !== "string") return void 0;
-	const schemaVersion = typeof data.schemaVersion === "number" ? data.schemaVersion : 0;
-	if (schemaVersion > 1) throw new WebSkillError("RUN_TRACE_INCOMPATIBLE", `Run trace "${path}" declares schemaVersion ${schemaVersion}, which is newer than the supported 1`);
-	return {
-		schemaVersion,
-		runId: data.runId,
-		...typeof data.sessionId === "string" ? { sessionId: data.sessionId } : {},
-		startedAt: data.startedAt,
-		...typeof data.endedAt === "string" ? { endedAt: data.endedAt } : {},
-		status: typeof data.status === "string" ? data.status : "unknown",
-		activeSkills: Array.isArray(data.activeSkills) ? data.activeSkills.filter((s) => typeof s === "string") : [],
-		events: Array.isArray(data.events) ? data.events : []
-	};
-}
-const INDEX_FILE = "index.jsonl";
-/**
-* `FileSystemProvider` 后端：`<root>/<runId>.json` 存全量 trace，
-* `<root>/index.jsonl` 是 append-only 的摘要旁路索引。
-*
-* 索引存在的唯一理由是**读次数**：0.0.1 的实现为了拼一份列表要整读每个 trace
-* 文件，点一次指标再来一遍。有了索引，`list()` 与 `metrics()` 各只读一个文件。
-*
-* 索引与 trace 目录发散（写完 trace 崩在追加前）的检测不引入新的读放大：
-* 目录列举本来就要做，比较 `*.json` 个数与索引行数即可；不等则整体重建。
-* @stable
-*/
-var FsRunTraceStore = class {
-	#root;
-	#fs;
-	#onError;
-	#onIndexError;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-		this.#onError = deps.onError ?? ((error, run) => {
-			console.warn(`Failed to persist run trace "${run.id}": ${messageOf(error)}`);
-		});
-		this.#onIndexError = deps.onIndexError ?? ((error, run) => {
-			console.warn(`Run trace "${run.id}" was saved but its index entry could not be appended: ${messageOf(error)}. The index will be rebuilt on the next read.`);
-		});
-	}
-	#path(runId) {
-		return resolveInsideRoot(this.#root, `${runId}.json`);
-	}
-	async put(run) {
-		const trace = {
-			schemaVersion: 1,
-			runId: run.id,
-			sessionId: run.sessionId,
-			startedAt: run.startedAt,
-			...run.endedAt !== void 0 ? { endedAt: run.endedAt } : {},
-			status: run.status === "completed" || run.status === "cancelled" ? run.status : "failed",
-			activeSkills: run.activeSkillNames,
-			events: run.trace
-		};
-		try {
-			await atomicWriteText(this.#fs, this.#path(run.id), JSON.stringify(trace, null, 2));
-		} catch (e) {
-			this.#onError(e, run);
-			return;
-		}
-		try {
-			await this.#fs.appendText(`${this.#root}/${INDEX_FILE}`, `${JSON.stringify(summarize(trace))}\n`);
-		} catch (e) {
-			this.#onIndexError(e, run);
-		}
-	}
-	async get(runId) {
-		assertSafePathSegment(runId, "run id");
-		const path = this.#path(runId);
-		let raw;
-		try {
-			raw = await this.#fs.readText(path);
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("FS_NOT_FOUND", `Trace not found for run ${JSON.stringify(runId)}: ${path}`);
-		}
-		const trace = parseTraceFile(raw, path);
-		if (!trace) throw new WebSkillError("VALIDATION_FAILED", `Trace file is corrupted or malformed: ${path}`);
-		return trace;
-	}
-	async list(filter = {}) {
-		const { summaries } = await this.#readIndex();
-		const matched = applyFilter(summaries, filter);
-		const offset = Math.max(0, filter.offset ?? 0);
-		const sliced = matched.slice(offset);
-		return filter.limit !== void 0 ? sliced.slice(0, Math.max(0, filter.limit)) : sliced;
-	}
-	async metrics(filter = {}) {
-		const { summaries, skipped } = await this.#readIndex();
-		const runs = applyFilter(summaries, filter);
-		const succeeded = runs.filter((r) => r.status === "completed").length;
-		const failedRuns = runs.filter((r) => r.status === "failed");
-		const durations = runs.map((r) => r.durationMs).filter((ms) => ms !== void 0);
-		return {
-			totalRuns: runs.length,
-			succeeded,
-			failed: failedRuns.length,
-			successRate: runs.length === 0 ? 0 : succeeded / runs.length,
-			avgTurns: runs.length === 0 ? 0 : runs.reduce((sum, r) => sum + r.turnCount, 0) / runs.length,
-			skippedRuns: skipped,
-			avgDurationMs: durations.length === 0 ? 0 : durations.reduce((a, b) => a + b, 0) / durations.length,
-			recentFailures: failedRuns.slice(0, 5)
-		};
-	}
-	/** 健康路径恒为「一次目录列举 + 一次索引读」，与 run 数无关。 */
-	async #readIndex() {
-		if (!await this.#fs.exists(this.#root)) return {
-			summaries: [],
-			skipped: 0
-		};
-		const traceCount = (await this.#fs.list(this.#root)).filter((f) => f.type === "file" && f.path.endsWith(".json")).length;
-		const indexPath = `${this.#root}/${INDEX_FILE}`;
-		let lines = [];
-		if (await this.#fs.exists(indexPath)) lines = (await this.#fs.readText(indexPath)).split("\n").filter((line) => line.trim() !== "");
-		if (lines.length !== traceCount) return {
-			summaries: await this.#rebuildIndex(),
-			skipped: 0
-		};
-		const summaries = [];
-		let skipped = 0;
-		for (const line of lines) try {
-			summaries.push(JSON.parse(line));
-		} catch {
-			skipped += 1;
-		}
-		if (skipped > 0) return {
-			summaries: await this.#rebuildIndex(),
-			skipped
-		};
-		return {
-			summaries: sortByStartedAtDesc(summaries),
-			skipped: 0
-		};
-	}
-	/** 异常路径，允许 O(N)：整读全部 trace 文件后用 temp + rename 原子替换索引 */
-	async #rebuildIndex() {
-		const summaries = [];
-		for (const entry of await this.#fs.list(this.#root)) {
-			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
-			let trace;
-			try {
-				trace = parseTraceFile(await this.#fs.readText(entry.path), entry.path);
-			} catch {
-				continue;
-			}
-			if (!trace) continue;
-			summaries.push(summarize(trace));
-		}
-		const sorted = sortByStartedAtDesc(summaries);
-		const indexPath = `${this.#root}/${INDEX_FILE}`;
-		const tempPath = `${this.#root}/${INDEX_FILE}.rebuilding`;
-		try {
-			await this.#fs.writeText(tempPath, sorted.map((s) => `${JSON.stringify(s)}\n`).join(""));
-			await this.#fs.rename(tempPath, indexPath);
-		} catch {
-			await this.#fs.remove(tempPath).catch(() => void 0);
-		}
-		return sorted;
-	}
-};
-/** ISO 时间戳可按字典序比较 */
-function sortByStartedAtDesc(summaries) {
-	return [...summaries].sort((a, b) => b.startedAt.localeCompare(a.startedAt));
-}
-function applyFilter(summaries, filter) {
-	let runs = summaries;
-	if (filter.status !== void 0 && filter.status !== "") runs = runs.filter((r) => r.status === filter.status);
-	if (filter.sessionId !== void 0 && filter.sessionId !== "") runs = runs.filter((r) => r.sessionId === filter.sessionId);
-	const q = filter.search?.trim().toLowerCase();
-	if (q !== void 0 && q !== "") runs = runs.filter((r) => r.runId.toLowerCase().includes(q) || r.activeSkills.some((s) => s.toLowerCase().includes(q)));
-	return runs;
-}
-/**
-* 从 run 的 trace 推导终态工具调用列表。
-*
-* 消费者过去要靠自己遍历 trace 才能拿到这份列表，而遍历 trace 的同一段代码
-* 又顺手承担了「补发漏掉的 live 事件」的职责——两件事绑在一起，谁也删不掉。
-* 幂等归 runtime（见 `AgentLoop` 的 per-run 已发集合）之后，
-* 推导终态列表就是纯函数，独立导出。
-* @stable
-*/
-function summarizeToolCalls(run) {
-	const startedAtByCallId = /* @__PURE__ */ new Map();
-	for (const event of run.trace) {
-		if (event.type !== "tool.started") continue;
-		const callId = event.data?.["callId"];
-		if (typeof callId === "string" && !startedAtByCallId.has(callId)) startedAtByCallId.set(callId, event.ts);
-	}
-	const calls = [];
-	for (const event of run.trace) {
-		if (event.type !== "tool.completed" && event.type !== "tool.failed") continue;
-		const name = event.data?.["name"];
-		const callId = event.data?.["callId"];
-		if (typeof name !== "string" || typeof callId !== "string") continue;
-		const args = event.data?.["args"];
-		const durationMs = event.data?.["durationMs"];
-		const errorCode = event.data?.["code"];
-		const startedAt = startedAtByCallId.get(callId);
-		calls.push({
-			callId,
-			name,
-			status: event.type === "tool.completed" ? "completed" : "failed",
-			...typeof args === "string" ? { args } : {},
-			...typeof durationMs === "number" ? { durationMs } : {},
-			...typeof errorCode === "string" ? { errorCode } : {},
-			...startedAt !== void 0 ? { startedAt } : {},
-			...event.type === "tool.failed" && typeof event.message === "string" ? { errorMessage: event.message } : {}
-		});
-	}
-	return calls;
-}
-const SESSION_SCHEMA_VERSION = 1;
-/** `FsSessionStore` 的缺省页长。缺省值属于实现，不属于调用方——否则「下推」只推了一半 */
-const FS_SESSION_PAGE_SIZE = 50;
-const toMeta = (record) => ({
-	id: record.id,
-	createdAt: record.createdAt,
-	...record.title !== void 0 ? { title: record.title } : {},
-	...record.titleLocked === true ? { titleLocked: true } : {},
-	...record.archived === true ? { archived: true } : {},
-	...record.modelId !== void 0 ? { modelId: record.modelId } : {},
-	messageCount: record.messages.length
-});
-const newSessionId = () => `session-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
-const baseName = (path) => path.split("/").pop() ?? path;
-/**
-* 从新到旧的一页：无游标取末尾 `limit` 条，有游标取该位置**之前**的 `limit` 条。
-* 游标编码成「本页起点下标」——对会话文件这种整体重写的存储来说下标是稳定的，
-* 但它是不透明串，调用方不得自己构造（构造出来的越界值一律按 `VALIDATION_FAILED` 拒绝）。
-*/
-function takeTailPage(all, options, what) {
-	const limit = options.limit ?? 50;
-	if (!Number.isInteger(limit) || limit <= 0) throw new WebSkillError("VALIDATION_FAILED", `Page limit must be a positive integer, received ${String(limit)}`);
-	let end = all.length;
-	if (options.cursor !== void 0) {
-		end = Number(options.cursor);
-		if (!Number.isInteger(end) || end < 0 || end > all.length) throw new WebSkillError("VALIDATION_FAILED", `Invalid ${what} cursor: ${JSON.stringify(options.cursor)}`);
-	}
-	const start = Math.max(0, end - limit);
-	return {
-		items: all.slice(start, end),
-		...start > 0 ? { nextCursor: String(start) } : {}
-	};
-}
-/**
-* 解析会话文件。缺 `schemaVersion` 视为 0（0.0.1 时代文件，兼容读）；
-* 高于当前版本拒绝读，避免新版写的字段被旧版静默丢弃。
-*/
-function parseSessionFile(raw, path) {
-	let parsed;
-	try {
-		parsed = JSON.parse(raw);
-	} catch (e) {
-		throw new WebSkillError("VALIDATION_FAILED", `Session file is not valid JSON: ${path}`, e);
-	}
-	if (typeof parsed !== "object" || parsed === null) throw new WebSkillError("VALIDATION_FAILED", `Session file is not an object: ${path}`);
-	const file = parsed;
-	const schemaVersion = typeof file.schemaVersion === "number" ? file.schemaVersion : 0;
-	if (schemaVersion > 1) throw new WebSkillError("SESSION_INCOMPATIBLE", `Session file at ${path} has schemaVersion ${schemaVersion}, but this build understands at most 1`);
-	if (typeof file.id !== "string" || typeof file.createdAt !== "string") throw new WebSkillError("VALIDATION_FAILED", `Session file is missing "id" or "createdAt": ${path}`);
-	return {
-		schemaVersion,
-		id: file.id,
-		createdAt: file.createdAt,
-		...typeof file.title === "string" ? { title: file.title } : {},
-		...file.titleLocked === true ? { titleLocked: true } : {},
-		...file.archived === true ? { archived: true } : {},
-		...typeof file.modelId === "string" ? { modelId: file.modelId } : {},
-		messages: Array.isArray(file.messages) ? file.messages : [],
-		messageCount: Array.isArray(file.messages) ? file.messages.length : 0
-	};
-}
-/**
-* `FileSystemProvider` 后端的会话存储：`<root>/<id>.json`。
-*
-* 所有变更操作按 id 串到一条 promise 链上：会话文件是整读整写的，
-* 两个并发 `appendMessages` 若都先读后写，后写的会覆盖先写的那条消息。
-*/
-var FsSessionStore = class {
-	#root;
-	#fs;
-	/** id → 该 id 上最后一次变更的完成时点，用于串行化读改写 */
-	#writes = /* @__PURE__ */ new Map();
-	/** FR-11.4：损坏文件诊断只报一次，避免 list 轮询刷屏 */
-	#warnedDataLoss = false;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-	}
-	#path(id) {
-		assertSafePathSegment(id, "session id");
-		return resolveInsideRoot(this.#root, `${id}.json`);
-	}
-	/** 把 mutation 排到该 id 的队尾；前一个失败不阻塞后一个 */
-	async #serialize(id, work) {
-		const next = (this.#writes.get(id) ?? Promise.resolve()).catch(() => void 0).then(work);
-		this.#writes.set(id, next);
-		try {
-			return await next;
-		} finally {
-			if (this.#writes.get(id) === next) this.#writes.delete(id);
-		}
-	}
-	async #write(record) {
-		const file = {
-			schemaVersion: 1,
-			id: record.id,
-			createdAt: record.createdAt,
-			...record.title !== void 0 ? { title: record.title } : {},
-			...record.titleLocked === true ? { titleLocked: true } : {},
-			...record.archived === true ? { archived: true } : {},
-			...record.modelId !== void 0 ? { modelId: record.modelId } : {},
-			messages: record.messages
-		};
-		await atomicWriteText(this.#fs, this.#path(record.id), JSON.stringify(file, null, 2));
-	}
-	async #require(id) {
-		const record = await this.get(id);
-		if (!record) throw new WebSkillError("FS_NOT_FOUND", `Session "${id}" not found under ${this.#root}`);
-		return record;
-	}
-	async list(options = {}) {
-		if (!await this.#fs.exists(this.#root)) return {
-			items: [],
-			source: "missing-root",
-			skipped: []
-		};
-		const metas = [];
-		const skipped = [];
-		for (const entry of await this.#fs.list(this.#root)) {
-			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
-			let record;
-			try {
-				record = parseSessionFile(await this.#fs.readText(entry.path), entry.path);
-			} catch {
-				skipped.push(baseName(entry.path));
-				continue;
-			}
-			if (record.archived === true && options.includeArchived !== true) continue;
-			metas.push(toMeta(record));
-		}
-		if (skipped.length > 0 && !this.#warnedDataLoss) {
-			this.#warnedDataLoss = true;
-			console.warn(`[webskill] ${skipped.length} session file(s) under ${this.#root} are unreadable (possible data loss from an interrupted write): ${skipped.join(", ")}`);
-		}
-		metas.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
-		return {
-			...takeTailPage(metas, options, "session"),
-			source: "ok",
-			skipped
-		};
-	}
-	/**
-	* 整文件读后切片。磁盘 I/O 复杂度没有改善（备案 D25），
-	* 但**跨出端口的记录数**已是常量——这正是分页对上层的意义。
-	*/
-	async listMessages(id, options = {}) {
-		return takeTailPage((await this.#require(id)).messages, options, "message");
-	}
-	async get(id) {
-		const path = this.#path(id);
-		if (!await this.#fs.exists(path)) return void 0;
-		return parseSessionFile(await this.#fs.readText(path), path);
-	}
-	async create(init = {}) {
-		const record = {
-			schemaVersion: 1,
-			id: init.id ?? newSessionId(),
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			...init.title !== void 0 ? { title: init.title } : {},
-			messages: [],
-			messageCount: 0
-		};
-		return this.#serialize(record.id, async () => {
-			await this.#write(record);
-			return toMeta(record);
-		});
-	}
-	async appendMessages(id, messages) {
-		if (messages.length === 0) return;
-		await this.#serialize(id, async () => {
-			const record = await this.#require(id);
-			record.messages.push(...messages);
-			await this.#write(record);
-		});
-	}
-	async replaceMessages(id, messages) {
-		await this.#serialize(id, async () => {
-			const record = await this.#require(id);
-			record.messages = [...messages];
-			await this.#write(record);
-		});
-	}
-	async setTitle(id, title, options = {}) {
-		await this.#serialize(id, async () => {
-			const record = await this.#require(id);
-			record.title = title;
-			if (options.lock === true) record.titleLocked = true;
-			await this.#write(record);
-		});
-	}
-	async setArchived(id, archived) {
-		await this.#serialize(id, async () => {
-			const record = await this.#require(id);
-			record.archived = archived;
-			await this.#write(record);
-		});
-	}
-	async setModel(id, modelId) {
-		await this.#serialize(id, async () => {
-			const record = await this.#require(id);
-			if (modelId === void 0) delete record.modelId;
-			else record.modelId = modelId;
-			await this.#write(record);
-		});
-	}
-	async getMeta(id) {
-		const record = await this.get(id);
-		return record === void 0 ? void 0 : toMeta(record);
-	}
-	async delete(id) {
-		await this.#serialize(id, async () => {
-			const path = this.#path(id);
-			if (await this.#fs.exists(path)) await this.#fs.remove(path);
-		});
-	}
-};
-/**
-* 按会话分文件的 append-only JSONL 留存。
-*
-* 分文件维度取会话而非 run：读取侧唯一的查询就是「这个会话的全部步骤」，
-* 按 run 分会让一次生成要开 N 个文件。
-*/
-var FsToolStepStore = class {
-	#root;
-	#fs;
-	#onError;
-	constructor(deps) {
-		this.#root = deps.root.replace(/\/+$/, "");
-		this.#fs = deps.fs;
-		this.#onError = deps.onError ?? ((error, record) => {
-			console.warn(`Failed to persist tool step for call "${record.callId}": ${messageOf(error)}`);
-		});
-	}
-	#path(sessionId) {
-		assertSafePathSegment(sessionId, "session id");
-		return resolveInsideRoot(this.#root, `${sessionId}.jsonl`);
-	}
-	async append(record) {
-		const path = this.#path(record.sessionId);
-		try {
-			await this.#fs.appendText(path, `${JSON.stringify(record)}\n`);
-		} catch (e) {
-			this.#onError(e, record);
-		}
-	}
-	async listBySession(sessionId) {
-		const path = this.#path(sessionId);
-		if (!await this.#fs.exists(path)) return [];
-		const raw = await this.#fs.readText(path);
-		const records = [];
-		for (const line of raw.split("\n")) {
-			if (line.trim() === "") continue;
-			try {
-				records.push(JSON.parse(line));
-			} catch {
-				continue;
-			}
-		}
-		return records;
-	}
-};
 
 //#endregion
-export { bridgeError as $, ProgressiveRouter as A, refineUserProfile as At, SUPPORTED_DOCUMENT_MIME as B, toLlmToolSpec as Bt, FsSessionStore as C, normalizeToolError as Ct, HookRunner as D, readProfileEntries as Dt, GoogleGenAiClient as E, readBehaviorRecords as Et, READ_SKILL_FILE_TOOL_NAME as F, schemaToForm as Ft, USER_PROFILE_EXPORT_VERSION as G, TEXT_BUDGETED_CONTENT_TYPES as H, toVercelToolSpecs as Ht, RUN_SNAPSHOT_SCHEMA_VERSION as I, scriptToolName as It, USER_PROFILE_PROMPT_HEADER as J, USER_PROFILE_KEY as K, RUN_TRACE_SCHEMA_VERSION as L, sealToolCallPairs as Lt, READ_LINKED_DOCUMENT_TOOL_NAME as M, resolveToolName as Mt, READ_SKILL_FILE_INPUT_SCHEMA as N, sampleBehaviorRecords as Nt, MAX_TOOL_STEP_ARG_BYTES as O, readUserProfile as Ot, READ_SKILL_FILE_TOOL as P, schemaSourceLabel as Pt, applyUserProfileImport as Q, SENSITIVE_ANNOTATION as R, summarizeRunUsage as Rt, FsRunTraceStore as S, normalizeToolContent as St, FullDisclosureRouter as T, parseUserProfileExport as Tt, TraceRecorder as U, validateUiSpecEvent as Ut, SerializingMemoryStore as V, toRecordDigests as Vt, UNSUPPORTED_DOCUMENT_MESSAGE as W, validateUiSpecNode as Wt, WebSkillRuntime as X, USER_PROFILE_REFINE_PROMPT as Y, appendBehaviorRecords as Z, EventBus as _, mergeCatalogEntries as _t, ASK_USER_TOOL as a, extractChartSpec as at, FsMemoryStore as b, networkUrlHost as bt, AnthropicClient as c, extractUiSpecEvents as ct, DEFAULT_LOOP_LIMITS as d, fromVercelResult as dt, buildRenderResult as et, DEFAULT_MAX_DATA_SOURCE_BYTES as f, fromVercelStreamPart as ft, EMPTY_USER_PROFILE as g, listSkillScripts as gt, DEFAULT_USER_PROFILE_LIMITS as h, isUnsupportedRunSnapshot as ht, ASK_USER_MAX_FIELDS as i, exportUserProfile as it, READ_LINKED_DOCUMENT_TOOL as j, renderUserProfileContext as jt, OpenAiCompatibleClient as k, redactToolStepArgs as kt, BEHAVIOR_RECORDS_KEY as l, findUnpairedToolCalls as lt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as m, isNetworkAllowed as mt, ASK_USER_FIELD_TYPES as n, createWebSkillApi as nt, ASK_USER_TOOL_NAME as o, extractSkillCandidate as ot, DEFAULT_MAX_DOCUMENT_BYTES as p, interruptedToolResult as pt, USER_PROFILE_NO_INVENTION_RULE as q, ASK_USER_INPUT_SCHEMA as r, diffUserProfile as rt, AgentLoop as s, extractTodoTraceEvents as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, createScriptContext as tt, CapabilityApproval as u, formatSkillScriptManifest as ut, FS_SESSION_PAGE_SIZE as v, mergeProfileEntries as vt, FsToolStepStore as w, parseBridgeRequest as wt, FsRunSnapshotStore as x, normalizeErrorCode as xt, FsArtifactStore as y, networkPolicyLibSource as yt, SESSION_SCHEMA_VERSION as z, summarizeToolCalls as zt };
+export { scriptToolName as $, readUserProfile as A, createScriptContext as B, TraceRecorder as C, mergeProfileEntries as D, appendBehaviorRecords as E, DEFAULT_USER_PROFILE_LIMITS as F, ASK_USER_TOOL_NAME as G, ASK_USER_INPUT_SCHEMA as H, EMPTY_USER_PROFILE as I, READ_SKILL_FILE_TOOL_NAME as J, READ_SKILL_FILE_INPUT_SCHEMA as K, SerializingMemoryStore as L, USER_PROFILE_NO_INVENTION_RULE as M, USER_PROFILE_PROMPT_HEADER as N, readBehaviorRecords as O, renderUserProfileContext as P, schemaSourceLabel as Q, EventBus as R, extractTodoTraceEvents as S, USER_PROFILE_KEY as T, ASK_USER_MAX_FIELDS as U, ASK_USER_FIELD_TYPES as V, ASK_USER_TOOL as W, formatSkillScriptManifest as X, ALLOWED_TOOLS_EXCLUSION_REASON as Y, listSkillScripts as Z, RUN_SNAPSHOT_SCHEMA_VERSION as _, networkPolicyLibSource as a, xmlRenderer as at, MAX_TOOL_STEP_ARG_BYTES as b, bridgeError as c, FsMemoryStore as d, resolveToolName as et, WebSkillRuntime as f, FsRunSnapshotStore as g, redactToolStepArgs as h, isNetworkAllowed as i, renderAvailableSkillsXml as it, sampleBehaviorRecords as j, readProfileEntries as k, parseBridgeRequest as l, SENSITIVE_ANNOTATION as m, normalizeErrorCode as n, ProgressiveRouter as nt, networkUrlHost as o, AgentLoop as p, READ_SKILL_FILE_TOOL as q, normalizeToolError as r, escapeXml as rt, UPLOAD_FILES_UNAVAILABLE as s, CapabilityApproval as t, toLlmToolSpec as tt, FsArtifactStore as u, isUnsupportedRunSnapshot as v, BEHAVIOR_RECORDS_KEY as w, extractSkillCandidate as x, DEFAULT_LOOP_LIMITS as y, schemaToForm as z };