@webskill/sdk 0.13.0 → 0.15.0

package/dist/browser.d.ts

@@ -1,6 +1,6 @@
-import { Ct as VerifyResult, L as FileStat, M as ArchiveLimits, R as FileSystemProvider, S as UiBridge, _t as SkillsLockfile, b as RenderResultRequest, c as InteractionResponse, dt as SkillManifest, l as LlmClient, m as LlmStreamEvent, o as InteractionPolicy, p as LlmResponse, s as InteractionRequest, st as SkillInstallSource, u as LlmCompleteInput, v as MemoryStore, wt as WebSkillError, xt as UnsignedPolicy, yt as TrustedKeyStore } from "./types-DLctJep_-B5G4uk2u.js";
-import { F as ExternalToolSource, Fn as WebSkillApi, Ht as ScriptExecutor, P as ExternalSkillProvider, S as BridgeResponse, Vn as bridgeError, Vt as ScriptExecutionContext, dr as parseBridgeRequest, it as NetworkPolicy, m as ApprovalScope, nt as LinkedDocumentReader, pn as ToolResult, un as ToolDefinition, x as BridgeRequest, y as BridgeCapabilities } from "./index-DkvBhJQy.js";
-import { H as PagePerceptionPolicy, J as PerceivedNode, L as PageActionScopeInput, Q as PerceptionResult, W as PagePerceptionReader, X as PerceptionCaptureOptions, et as PerceptionScopeInput, k as PageActionExecutor } from "./index-iBm9tJL_.js";
+import { Ct as SkillsLockfile, Et as TrustedKeyStore, H as FileStat, Mt as WebSkillError, N as ArchiveLimits, S as UiBridge, U as FileSystemProvider, _t as SkillManifest, b as RenderResultRequest, c as InteractionResponse, jt as VerifyResult, kt as UnsignedPolicy, l as LlmClient, m as LlmStreamEvent, o as InteractionPolicy, p as LlmResponse, pt as SkillInstallSource, s as InteractionRequest, u as LlmCompleteInput, v as MemoryStore } from "./types-C3V6lAeO-BIf7UB2e.js";
+import { Kt as ScriptExecutionContext, M as DocumentSurfaceHost, R as ExternalSkillProvider, S as BridgeResponse, Un as WebSkillApi, Yn as bridgeError, ct as NetworkPolicy, gn as ToolDefinition, m as ApprovalScope, ot as LinkedDocumentReader, qt as ScriptExecutor, x as BridgeRequest, y as BridgeCapabilities, yn as ToolResult, yr as parseBridgeRequest, z as ExternalToolSource } from "./index-Oc3H89TJ.js";
+import { Ct as PerceptionCaptureOptions, Et as PerceptionResult, J as NestedFrameRef, Ot as PerceptionScopeInput, _t as PagePerceptionReader, ct as PageActionRequest, dt as PageActionTarget, ht as PagePerceptionPolicy, it as PageActionOutcome, nt as PageActionExecutor, ut as PageActionScopeInput, xt as PerceivedNode } from "./index-CQYo4tcT.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -39,7 +39,7 @@ declare class OpfsProvider implements FileSystemProvider {
  *
  * 协议（宿主 ↔ Worker）：
  * - 宿主 → Worker：{type:'load', id, source, networkPolicy?} 请求加载脚本定义
- * - 宿主 → Worker：{type:'execute', id, skillName, runId, source, args, networkPolicy?} 请求执行
+ * - 宿主 → Worker：{type:'execute', id, skillName, runId, source, args, networkPolicy?, documentSurface?} 请求执行
  * - Worker → 宿主：{type:'load-result', id, ok, definition?, error?}
  * - Worker → 宿主：{type:'execute-result', id, ok, value?, stdout, stderr, error?}
  * - Worker → 宿主：{type:'bridge', request} 能力桥 RPC（readReference/writeArtifact/confirm）
@@ -204,7 +204,10 @@ declare class BrowserWorkerScriptExecutor implements ScriptExecutor {
  */
 declare class IframeWorkerLike implements WorkerLike {
   #private;
-  constructor(iframe: HTMLIFrameElement, hostWindow: Window, channelId: string);
+  constructor(iframe: HTMLIFrameElement, hostWindow: Window, channelId: string, readyTimeout?: {
+    readonly ms: number;
+    readonly documentUrl: string;
+  });
   get ready(): boolean;
   get channelId(): string;
   markReady(): void;
@@ -216,10 +219,43 @@ declare class IframeWorkerLike implements WorkerLike {
   terminate(): void;
 }
 /**
- * 创建 opaque iframe 沙箱 Worker：sandbox="allow-scripts" srcdoc iframe 承载 classic Worker。
+ * 静态沙箱页的中继脚本源码（分册 12 / FR-12.3）。
+ *
+ * 宿主把它落成一个独立文件并用 `<script src>` 引入——**不得内联**：
+ * sandbox 页虽允许 `unsafe-inline`，但外链能让「沙箱页脚本 = SDK 原样产物」在审计时可核对。
+ *
+ * 与 srcdoc 形态的两点区别，都源于「静态页在加载完时还不知道要跑什么」：
+ * - **引导源码**随宿主的 `sandbox-init` 消息到达，而不是内嵌在文档里；
+ * - **channelId** 由第一条来自 `parent` 的消息 latch。SDK 导出的是一份与宿主无关的源码，
+ *   不可能预知宿主这次生成的 id。latch 前先认 `event.source === parent`：少了这句，
+ *   任何把本页嵌进去的第三方 frame 都能抢先 latch 一个自己的 id，
+ *   让真正的宿主消息全部被丢弃——一个纯粹的拒绝服务面。
+ *
+ * 本源码不含任何扩展 API：sandbox 页拿不到它们（实证）。
+ * `ENVELOPE` 与宿主侧同源（同一个模块常量），两边各写一份字面量会在改名时静默失配。
+ * @experimental
+ */
+declare const SANDBOX_PAGE_SCRIPT_SOURCE: string;
+/**
+ * 静态沙箱文档形态的选项（分册 12 / FR-12.1）。
+ *
+ * MV3 下 srcdoc 继承父页 `extension_pages` CSP，内联脚本必被拒，
+ * 因此扩展宿主必须指定一个自带 sandbox CSP 的静态页。
+ * @experimental
+ */
+interface IframeSandboxOptions {
+  /** 沙箱文档地址（扩展宿主传扩展内 URL）；不给即沿用 srcdoc */
+  documentUrl?: string;
+  /** 承载 iframe 的文档，缺省为全局 `document` */
+  doc?: Document;
+  /** 等 `sandbox-ready` 的上限，缺省 10000。仅 `documentUrl` 形态有效 */
+  readyTimeoutMs?: number;
+}
+/**
+ * 创建 opaque iframe 沙箱 Worker：srcdoc（默认）或宿主指定的静态沙箱页承载 classic Worker。
  * 返回 IframeWorkerLike（协议与 blob Worker 完全一致：load/execute/bridge/network-blocked）。
  */
-declare function createIframeWorker(bootstrapSource: string, doc?: Document): IframeWorkerLike;
+declare function createIframeWorker(bootstrapSource: string, options?: Document | IframeSandboxOptions): IframeWorkerLike;
 //#endregion
 //#region src/navigator.d.ts
 declare global {
@@ -366,6 +402,21 @@ interface CompressResult {
  */
 declare function compressImageToBudget(file: Blob, maxBytes: number): Promise<CompressResult>;
 //#endregion
+//#region src/dom/promotion.d.ts
+/**
+ * 非标可交互元素的识别与角色提升（0.14.0 分册 15）。
+ *
+ * 现代前端用 `div` / `span` 做按钮是常态，它们在无障碍树里全落到 `generic`，
+ * 于是拿不到句柄——模型读得到那几个字，却点不动。本模块补的就是这一段判定。
+ *
+ * 整套逻辑默认关闭，由 `createDomPerceptionReader` 的 `promoteRoles` 开启（D-15-1）。
+ */
+/** 宿主声明的角色逃生舱：四种通用信号都不带的元素，由宿主点名（FR-15.6） */
+interface RoleHint {
+  role: string;
+  selectors: readonly string[];
+}
+//#endregion
 //#region src/dom/perception.d.ts
 interface DomPerceptionReaderOptions {
   /** 选择器求值的根；缺省 `globalThis.document` */
@@ -375,6 +426,31 @@ interface DomPerceptionReaderOptions {
    * 它与感知范围分开声明：可读不等于可操作（FR-23.1）。
    */
   actionScope?: PageActionScopeInput;
+  /**
+   * 非标可交互元素的角色提升（分册 15）。缺省 `false`，行为与 0.13.0 逐字相同（D-15-1）。
+   *
+   * 它改的是「同一个 `include` 命中的元素判成什么角色」，**不是**「读哪些元素」：
+   * 范围外的元素不会因为提升而进快照。
+   */
+  promoteRoles?: boolean;
+  /**
+   * 宿主注入的行为事实：该元素是否挂过 click 类监听器（FR-15.1 信号 0）。
+   * 探针要改页面的 `EventTarget.prototype`，那是扩展的活；SDK 只认这个钩子（D-15-5）。
+   */
+  interactiveHint?: (element: Element) => boolean;
+  /**
+   * 逃生舱：四种通用信号都不带的元素，由宿主显式声明其角色（FR-15.6）。
+   * 性质与范围白名单相同——改它就是改模型的可操作面，只能在装配期声明。
+   */
+  roleHints?: readonly RoleHint[];
+  /**
+   * 嵌套帧自动下钻（分册 16）。缺省 `false`，行为与 0.13.0 逐字相同（D-16-2）。
+   *
+   * 开启后，范围内**未授权**的嵌套帧不再只给一句「没读」：有 http(s) 地址的进
+   * `PerceptionResult.nestedFrames` 交给外壳继续投递，无地址的同源帧就地内联。
+   * 0.13.0 D-18-3 的「不自动下钻」已被 0.14.0 分册 16 §0.1 推翻。
+   */
+  discoverNestedFrames?: boolean;
 }
 /** DOM 遍历是同步的；不取像时比 `PagePerceptionReader` 窄，调用方无需 await @experimental */
 interface DomPerceptionReader extends PagePerceptionReader {
@@ -431,6 +507,241 @@ type DomPageActionExecutor = PageActionExecutor;
 /** @experimental */
 declare function createDomPageActionExecutor(options: DomPageActionOptions): DomPageActionExecutor;
 //#endregion
+//#region src/remote/types.d.ts
+/**
+ * 跨上下文页面代理的传输端口（分册 13 / FR-13.1）。
+ *
+ * SDK 不关心底下是扩展消息、`MessagePort` 还是 WebSocket；
+ * 只要求一次请求对应一次应答，且请求 / 应答都能被 structured clone 搬运。
+ * @experimental
+ */
+interface PageAgentTransport {
+  send(request: PageAgentRequest): Promise<PageAgentReply>;
+}
+/** @experimental */
+type PageAgentRequest = {
+  type: 'perceive';
+  scope: PerceptionScopeInput;
+  capture?: PerceptionCaptureOptions;
+} | {
+  type: 'execute';
+  request: PageActionRequest;
+};
+/**
+ * 应答。失败走 `error` 变体而**不是**让 `send()` reject：
+ * structured clone 不保留原型，跨上下文的 reject 到本地就是一个没有错误码的 `Error`。
+ * 显式回码，本地再重建 `WebSkillError`，错误码才能穿过边界。
+ * @experimental
+ */
+type PageAgentReply = {
+  type: 'perceive-result';
+  result: PerceptionResult;
+  targets: readonly PageAgentTargetEntry[];
+} | {
+  type: 'execute-result';
+  outcome: PageActionOutcome;
+} | {
+  type: 'error';
+  code: string;
+  message: string;
+};
+/**
+ * 感知期随结果一并回传的句柄描述表（D-13-3）；**不进模型上下文**。
+ *
+ * 不塞进 `PerceivedNode`：那会改 `@webskill/agent` 的公开契约，
+ * 且这些字段对本地形态毫无意义（本地执行器直接读 DOM）。
+ * @experimental
+ */
+interface PageAgentTargetEntry {
+  ref: string;
+  role: string;
+  name?: string;
+  secret?: boolean;
+  frame?: string;
+  elevated?: boolean;
+}
+//#endregion
+//#region src/remote/registry.d.ts
+/**
+ * 感知期写入、执行期读取的句柄描述表（分册 13 / FR-13.3）。
+ *
+ * 由**宿主创建并同时交给 reader 和 executor**——两者共享同一个实例是本册的装配前提。
+ * 工厂单独导出就是为了让这件事在宿主代码里显式可见，
+ * 而不是藏在某个工厂内部让人以为「自己会连上」。
+ * @experimental
+ */
+interface RemoteTargetRegistry {
+  /** 用新一批条目**整体替换**旧表 */
+  replace(entries: readonly PageAgentTargetEntry[]): void;
+  get(ref: string): PageActionTarget | undefined;
+  readonly size: number;
+}
+/** @experimental */
+declare function createRemoteTargetRegistry(): RemoteTargetRegistry;
+//#endregion
+//#region src/remote/reader.d.ts
+/** @experimental */
+interface RemotePerceptionReaderOptions {
+  transport: PageAgentTransport;
+  /** 与执行器共享的句柄表；两者必须传同一个实例 */
+  targets: RemoteTargetRegistry;
+  /** 单次感知超时毫秒；缺省 10000 */
+  timeoutMs?: number;
+}
+/**
+ * 跨上下文的页面感知（分册 13 / FR-13.2）。
+ *
+ * 把句柄描述表写进 registry，**只把 `result` 返回给调用方**——
+ * 返回值就是标准 `PerceptionResult`，不夹带任何新字段（AC-13.2）。
+ * @experimental
+ */
+declare function createRemotePerceptionReader(options: RemotePerceptionReaderOptions): PagePerceptionReader;
+//#endregion
+//#region src/remote/executor.d.ts
+/** @experimental */
+interface RemotePageActionExecutorOptions {
+  transport: PageAgentTransport;
+  /** 与 reader 共享的句柄表；两者必须传同一个实例 */
+  targets: RemoteTargetRegistry;
+  /** 单次执行超时毫秒；缺省 10000 */
+  timeoutMs?: number;
+}
+/**
+ * 跨上下文的页面操作执行器（分册 13 / FR-13.3）。
+ * @experimental
+ */
+declare function createRemotePageActionExecutor(options: RemotePageActionExecutorOptions): PageActionExecutor;
+//#endregion
+//#region src/remote/handler.d.ts
+/** @experimental */
+interface PageAgentHandlerOptions {
+  /**
+   * 可操作范围。**由页面侧声明**，不接受请求方传入——
+   * 从请求里读它等于让 agent 自行声明自己能操作什么，是权限提升。
+   */
+  actionScope?: PageActionScopeInput;
+  document?: Document;
+  /** `attach` 的文件来源；必须由用户手势触发。不注入即 `attach` 一律按「用户取消」处理 */
+  pickFiles?: () => Promise<readonly File[] | undefined>;
+  /** 非标可交互元素的角色提升（分册 15）；缺省关闭 */
+  promoteRoles?: boolean;
+  /** 宿主注入的 click 监听器事实（FR-15.1 信号 0） */
+  interactiveHint?: (element: Element) => boolean;
+  /** 宿主声明的角色逃生舱（FR-15.6） */
+  roleHints?: readonly RoleHint[];
+  /** 嵌套帧自动发现（分册 16）；缺省关闭 */
+  discoverNestedFrames?: boolean;
+}
+/** @experimental */
+interface PageAgentHandler {
+  handle(request: PageAgentRequest): Promise<PageAgentReply>;
+}
+/**
+ * 页面侧处理器（分册 13 / FR-13.7）。
+ *
+ * 必须是工厂而不是裸函数：`DomPerceptionReader` **是有状态的**——
+ * `resolve(ref)` 依赖上一次感知发出的句柄表，模态提升状态也跨调用累积。
+ * 每次请求新建 reader，`execute` 就永远 resolve 不到 `perceive` 发出的 ref。
+ *
+ * 它**不自己收发消息**：只做「请求进、应答出」。监听消息通道、判断消息是不是给自己的、
+ * 回不回 `true`——那些全是宿主的事，本包不得出现任何扩展 API。
+ * @experimental
+ */
+declare function createPageAgentHandler(options?: PageAgentHandlerOptions): PageAgentHandler;
+//#endregion
+//#region src/remote/frameRouter.d.ts
+/**
+ * 一次感知能铺开的上限（0.14.0 分册 16 FR-16.4）。
+ *
+ * 兜底的是**帧数与节点总量**，不是层数。0.13.0 D-18-8 用深度上限兜底，
+ * 前提是「路径由宿主写死」；自动发现一进来那个前提就没了：
+ * 三层的页面可能只有 5 个节点，两层的门户可能挂着 40 个 iframe。
+ * 层数是错的度量，总量才是。
+ * @experimental
+ */
+interface FrameBudget {
+  maxFrames: number;
+  maxNodes: number;
+}
+/** @experimental */
+declare const DEFAULT_FRAME_BUDGET: FrameBudget;
+/**
+ * 一次投递的回执。
+ *
+ * `documentUrl` 是应答**实际来自**的文档地址，用于导航漂移判定：
+ * 投递地址是上一刻算出来的，那一帧完全可能在往返之间导航走。
+ * @experimental
+ */
+interface FrameDelivery {
+  reply: PageAgentReply;
+  documentUrl: string;
+}
+/**
+ * 解析嵌套帧时宿主能拿到的上下文。
+ *
+ * `visited` 由路由器攒、由宿主读：去重需要比较地址，而地址对路由器是不透明的
+ * （D-11-1）。让宿主自己在 dispatcher 里存一份则解决不了生命周期——
+ * dispatcher 是长期对象，一次编排结束后没人通知它清空。
+ * @experimental
+ */
+interface FrameResolveContext<A> {
+  /** 发现这个嵌套帧的那一帧的地址 */
+  readonly parent: A;
+  /** 本次感知已投递过的地址，按投递顺序 */
+  readonly visited: readonly A[];
+}
+/**
+ * 宿主实现的那一半（分册 11 FR-11.1）：**寻址**。
+ *
+ * 地址类型 `A` 对路由器完全不透明：不比较、不序列化、不持久化，
+ * 只在同一次编排内原样传递。扩展宿主用帧号，`postMessage` 宿主用 URL，
+ * 两者不需要迁就同一个形状。
+ * @experimental
+ */
+interface FrameDispatcher<A> {
+  /** 从哪里开始下钻 */
+  mainFrame(): A | Promise<A>;
+  /** 把一次请求送到某个地址 */
+  send(address: A, request: PageAgentRequest): Promise<FrameDelivery>;
+  /**
+   * 把某一帧报上来的嵌套帧引用换成可投递的地址。
+   *
+   * 解析不出（跨源、不可达、不在宿主白名单里、已经读过）时返回 `undefined`，
+   * 该帧被跳过并留说明，**不算错误**。这是帧可达性的唯一出口：
+   * SDK 不带任何缺省白名单，也不因为「导出了」就替宿主放行一帧（D-11-4）。
+   */
+  resolveNestedFrame(nested: NestedFrameRef, context: FrameResolveContext<A>): Promise<A | undefined> | A | undefined;
+}
+/** @experimental */
+interface FrameRouterOptions<A> {
+  dispatcher: FrameDispatcher<A>;
+  budget?: Partial<FrameBudget>;
+  /**
+   * 主帧的帧名（D-11-3）。不给则主帧节点**不带** `frame`——
+   * 主帧就是「这个页面」，给它加一段前缀只会让每个节点都变吵。
+   * 主帧本身就是外壳里的一帧时（模型要能区分外壳与业务帧）才给。
+   */
+  mainFrameLabel?: string;
+}
+/** @experimental */
+interface FrameRouter {
+  perceive(request: PageAgentRequest & {
+    type: 'perceive';
+  }): Promise<PageAgentReply>;
+  execute(request: PageAgentRequest & {
+    type: 'execute';
+  }): Promise<PageAgentReply>;
+}
+/**
+ * 逐帧下钻并汇总（分册 16 FR-16.2 / FR-16.3 / FR-16.4，分册 11 FR-11.2）。
+ *
+ * 编排本身与浏览器 API 无关：它只认 `PageAgentRequest` / `PageAgentReply`，
+ * 寻址全压在宿主实现的 `FrameDispatcher` 里。因此这个模块可以在 Service Worker
+ * 里实例化，也可以服务不按帧号寻址的宿主。
+ * @experimental
+ */
+declare function createFrameRouter<A>(options: FrameRouterOptions<A>): FrameRouter;
+//#endregion
 //#region src/dom/imageCapture.d.ts
 /**
  * 取像级别（0.6.0 FR-12.1）。裁决 D-3 已取消 L3 栅格化，只剩两级。
@@ -986,6 +1297,14 @@ declare const DOCUMENT_SURFACE_AUDIT_EVENT = "document.surface.open";
  * 无 `allow-top-navigation` 改不了它的地址。
  */
 declare function openDocumentSurface(input: OpenDocumentInput, options: DocumentSurfaceOptions): Promise<WindowLike>;
+/**
+ * 把 `openDocumentSurface` 柯里化成 `DocumentSurfaceHost`（0.15.0 分册 13 FR-13.3）。
+ *
+ * **只绑定选项，不新增任何逻辑**：体积上限、握手超时、`DOCUMENT_SURFACE_DECLINED`
+ * 与审计事件全部沿用上面那一份实现（FR-13.5「逐条不变」的实现基础）。
+ * @experimental
+ */
+declare function createDocumentSurfaceHost(options: DocumentSurfaceOptions): DocumentSurfaceHost;
 //#endregion
 //#region src/viewer/shell.d.ts
 /**
@@ -1062,4 +1381,4 @@ declare function watchBlockedResources(host: ViewerBlockedHost, notice: ViewerBl
 /** 提示文案的单一来源；判据直接引用，不各写一份字面量 */
 declare function blockedMessage(origins: readonly string[]): string;
 //#endregion
-export { type BlockedEventLike, type BridgeCapabilities, type BridgeRequest, type BridgeResponse, type BrowserHostBundle, type BrowserHostOptions, type BrowserHostOverrides, BrowserSkillManager, BrowserWorkerScriptExecutor, type CaptureFailure, type CaptureLevel, type CapturedImage, type ChromeBuiltinAvailability, ChromeBuiltinLlmClient, type CompressResult, type ConfiguredLlmClient, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, type DictationAvailability, type DictationOptions, type DictationSession, type DocumentSurfaceAudit, type DocumentSurfaceOptions, type DomPageActionExecutor, type DomPageActionOptions, type DomPerceptionReader, type DomPerceptionReaderOptions, type FetchLinkedDocumentOptions, HOST_PORT_MATRIX, type HostChatbotAdapterShape, type HostConnectFacadeShape, type HostConsoleBackendShape, type HostKind, type HostSurface, IframeWorkerLike, type InspectHostWiringInput, type LlmClientConfig, type LlmEntryConfig, type MainToWorkerMessage, type OpenDocumentInput, OpfsProvider, type PortApplicability, type PortReport, type PortSpec, type PortStatus, type SandboxMode, type SerializedError, TsTranspiler, type TypeScriptSupportOptions, VIEWER_SANDBOX_TOKENS, type ViewerBlockedHost, type ViewerBlockedNotice, type ViewerBlockedResult, type ViewerCspOptions, type ViewerDocument, type ViewerShellHost, type ViewerShellMount, type ViewerShellResult, WORKER_BOOTSTRAP_SOURCE, type WindowLike, type WorkerEvent, type WorkerFactory, type WorkerLike, type WorkerRequest, WorkerRuntimeClient, type WorkerRuntimeClientDeps, type WorkerRuntimeHostOverrides, type WorkerScopeLike, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createIframeWorker, createLlmClient, deleteMemoryEncryptionKey, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };
+export { type BlockedEventLike, type BridgeCapabilities, type BridgeRequest, type BridgeResponse, type BrowserHostBundle, type BrowserHostOptions, type BrowserHostOverrides, BrowserSkillManager, BrowserWorkerScriptExecutor, type CaptureFailure, type CaptureLevel, type CapturedImage, type ChromeBuiltinAvailability, ChromeBuiltinLlmClient, type CompressResult, type ConfiguredLlmClient, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, type DictationAvailability, type DictationOptions, type DictationSession, type DocumentSurfaceAudit, type DocumentSurfaceOptions, type DomPageActionExecutor, type DomPageActionOptions, type DomPerceptionReader, type DomPerceptionReaderOptions, type FetchLinkedDocumentOptions, type FrameBudget, type FrameDelivery, type FrameDispatcher, type FrameResolveContext, type FrameRouter, type FrameRouterOptions, HOST_PORT_MATRIX, type HostChatbotAdapterShape, type HostConnectFacadeShape, type HostConsoleBackendShape, type HostKind, type HostSurface, type IframeSandboxOptions, IframeWorkerLike, type InspectHostWiringInput, type LlmClientConfig, type LlmEntryConfig, type MainToWorkerMessage, type OpenDocumentInput, OpfsProvider, type PageAgentHandler, type PageAgentHandlerOptions, type PageAgentReply, type PageAgentRequest, type PageAgentTargetEntry, type PageAgentTransport, type PortApplicability, type PortReport, type PortSpec, type PortStatus, type RemotePageActionExecutorOptions, type RemotePerceptionReaderOptions, type RemoteTargetRegistry, type RoleHint, SANDBOX_PAGE_SCRIPT_SOURCE, type SandboxMode, type SerializedError, TsTranspiler, type TypeScriptSupportOptions, VIEWER_SANDBOX_TOKENS, type ViewerBlockedHost, type ViewerBlockedNotice, type ViewerBlockedResult, type ViewerCspOptions, type ViewerDocument, type ViewerShellHost, type ViewerShellMount, type ViewerShellResult, WORKER_BOOTSTRAP_SOURCE, type WindowLike, type WorkerEvent, type WorkerFactory, type WorkerLike, type WorkerRequest, WorkerRuntimeClient, type WorkerRuntimeClientDeps, type WorkerRuntimeHostOverrides, type WorkerScopeLike, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };