@webskill/sdk 0.16.0 → 0.18.0

package/dist/browser.js

@@ -2,11 +2,11 @@ import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, i as buildCatalog, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, n as SkillDiscovery, o as readResponseWithLimit, p as exportSkills, t as validateSkills, u as detectSkillArchiveShapeFromFs, w as readSkillSignature, y as isValidSkillName } from "./skill-CAJMsLod.js";
 import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot } from "./pathSecurity-B1owvJAF.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, g as FsRunSnapshotStore, l as parseBridgeRequest, nt as ProgressiveRouter, p as AgentLoop, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-BnLLCOG0.js";
-import { a as GoogleGenAiClient, o as AnthropicClient, s as OpenAiCompatibleClient, t as MockLlmClient } from "./llm-B7lLH0ZI.js";
+import { a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, g as FsRunSnapshotStore, l as parseBridgeRequest, nt as ProgressiveRouter, p as AgentLoop, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-B7GW86u2.js";
+import { a as GoogleGenAiClient, o as AnthropicClient, s as OpenAiCompatibleClient, t as MockLlmClient } from "./llm-eIQNO9tr.js";
 import { n as normalizeToolContent, t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
-import { t as createWebSkillApi } from "./webSkillApi-DOOyz2G5.js";
-import { a as frameLabel, i as toFrameScopes, o as frameSteps, r as toActionFrameScopes } from "./types-BuacBov_.js";
+import { t as createWebSkillApi } from "./webSkillApi-DMENIqW0.js";
+import { a as frameLabel, i as toFrameScopes, o as frameSteps, r as toActionFrameScopes } from "./types-DOJI5YC3.js";
 
 //#region ../browser/src/fs/featureDetection.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -1355,13 +1355,16 @@ var BrowserWorkerScriptExecutor = class {
 	}
 	/** 能力桥宿主侧处理：能力关闭/授权拒绝即 TOOL_UNSUPPORTED；判定逻辑共用 runtime/sandbox/approval */
 	async #handleBridge(request, context) {
-		const gate = async (capability, message, details) => {
+		const gate = async (capability, message, details = {}) => {
 			const decision = await this.#approval.authorize({
 				runId: context.runId,
 				capability,
 				mode: this.#capabilities[capability],
 				message,
-				...details !== void 0 ? { details } : {}
+				details: {
+					skill: context.skillName,
+					...details
+				}
 			});
 			if (decision === "allowed") return void 0;
 			return bridgeError(request.id, "TOOL_UNSUPPORTED", decision === "disabled" ? `Capability "${capability}" is disabled by the sandbox capability settings` : `Capability "${capability}" was denied by the user`);
@@ -1419,7 +1422,7 @@ var BrowserWorkerScriptExecutor = class {
 				}
 				case "confirm": {
 					if (!context.confirm) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"confirm\" is disabled");
-					const denied = await gate("confirm", `Script "${context.skillName}" asks for confirmation: ${request.message}`);
+					const denied = await gate("confirm", `Script "${context.skillName}" asks for confirmation: ${request.message}`, { question: request.message });
 					if (denied) return denied;
 					return {
 						id: request.id,
@@ -1677,7 +1680,7 @@ function checkDictationAvailability() {
 	return { available: true };
 }
 /** 浏览器的 error 码 → 稳定错误码；权限被拒要单独区分，UI 的降级提示不一样（FR-7.6） */
-function toError(code, message) {
+function toError$1(code, message) {
 	if (code === "not-allowed" || code === "service-not-allowed") return new WebSkillError("DICTATION_PERMISSION_DENIED", "Microphone access was denied. Voice input is unavailable until you allow it in the browser.", { reason: code });
 	return new WebSkillError("DICTATION_FAILED", message ?? `Speech recognition failed: ${code}`, { reason: code });
 }
@@ -1713,7 +1716,7 @@ function startDictation(options) {
 	recognition.onerror = (event) => {
 		if (stopped) return;
 		if (event.error === "no-speech" || event.error === "aborted") return;
-		options.onError(toError(event.error, event.message));
+		options.onError(toError$1(event.error, event.message));
 	};
 	try {
 		recognition.start();
@@ -1730,6 +1733,107 @@ function startDictation(options) {
 	} };
 }
 
+//#endregion
+//#region ../browser/src/media/camera.ts
+/**
+* 默认最长边：宿主要「最大分辨率」，给一个远超当前消费级摄像头的 ideal 让浏览器自己贴顶
+* @experimental
+*/
+const DEFAULT_CAMERA_MAX_DIMENSION = 5e3;
+function mediaDevices() {
+	return globalThis.navigator?.mediaDevices;
+}
+/**
+* 渲染期调用（FR-14.2）：不可用时按钮置灰并说明原因。
+*
+* 顺序与语音一致——`getUserMedia` 压根不存在时谈安全上下文没有意义；
+* API 在但站点是 http，取流一定会被浏览器拒绝，这条原因用户能自己解决。
+* @experimental
+*/
+function checkCameraAvailability() {
+	if (typeof mediaDevices()?.getUserMedia !== "function") return {
+		available: false,
+		reason: "api-missing"
+	};
+	if (globalThis.isSecureContext === false) return {
+		available: false,
+		reason: "insecure-context"
+	};
+	return { available: true };
+}
+/** DOMException 的 name → 稳定错误码；权限被拒要单独区分，UI 的降级提示不一样（FR-14.6） */
+function toError(e) {
+	const raw = e?.name;
+	const name = typeof raw === "string" ? raw : "";
+	if (name === "NotAllowedError" || name === "SecurityError") return new WebSkillError("CAMERA_PERMISSION_DENIED", "Camera access was denied. Photo capture is unavailable until you allow it in the browser.", { reason: name });
+	const message = e?.message;
+	return new WebSkillError("CAMERA_UNAVAILABLE", `The camera could not be opened: ${typeof message === "string" && message !== "" ? message : String(e)}`, { ...name !== "" ? { reason: name } : {} });
+}
+/**
+* 打开摄像头取景（FR-14.1）。
+*
+* **只能由用户手势调用**（FR-14.4）。设计上的保证是它不进工具列表：
+* agent 拿不到「打开摄像头」这个动作，因此不存在自主开摄像头的路径。
+* @experimental
+*/
+async function openCamera(options = {}) {
+	const devices = mediaDevices();
+	if (typeof devices?.getUserMedia !== "function") throw new WebSkillError("CAMERA_UNAVAILABLE", "Camera capture is not available in this browser.");
+	const max = options.maxDimension ?? 5e3;
+	let stream;
+	try {
+		stream = await devices.getUserMedia({
+			video: {
+				width: { ideal: max },
+				height: { ideal: max },
+				...options.facingMode !== void 0 ? { facingMode: options.facingMode } : {}
+			},
+			audio: false
+		});
+	} catch (e) {
+		throw toError(e);
+	}
+	return {
+		stream,
+		resolution() {
+			const settings = stream.getVideoTracks()[0]?.getSettings();
+			return {
+				width: settings?.width ?? 0,
+				height: settings?.height ?? 0
+			};
+		},
+		close() {
+			for (const track of stream.getTracks()) track.stop();
+		}
+	};
+}
+/**
+* 把取景元素的**当前一帧**编码成文件（FR-14.5）。
+*
+* 尺寸取 `videoWidth`/`videoHeight`（轨道原生分辨率），不取 CSS 尺寸——
+* 预览区被布局缩到 320px 宽，照着画出来的就是 320px 的照片。
+* 编码交给平台的 canvas，不手写编码器（AGENTS.md §6）。
+* @experimental
+*/
+async function capturePhoto(video, options = {}) {
+	const width = video.videoWidth;
+	const height = video.videoHeight;
+	if (width === 0 || height === 0) throw new WebSkillError("CAMERA_CAPTURE_FAILED", "The camera has not produced a frame yet.");
+	const type = options.type ?? "image/jpeg";
+	const canvas = document.createElement("canvas");
+	canvas.width = width;
+	canvas.height = height;
+	const context = canvas.getContext("2d");
+	if (context === null) throw new WebSkillError("CAMERA_CAPTURE_FAILED", "This browser did not provide a 2D canvas context.");
+	context.drawImage(video, 0, 0, width, height);
+	const blob = await new Promise((resolve) => {
+		canvas.toBlob(resolve, type, options.quality ?? .92);
+	});
+	if (blob === null) throw new WebSkillError("CAMERA_CAPTURE_FAILED", `The captured frame could not be encoded as ${type}.`);
+	const name = options.fileName ?? `photo-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.jpg`;
+	return new File([blob], name, { type: blob.type === "" ? type : blob.type });
+}
+
 //#endregion
 //#region ../browser/src/media/compressImage.ts
 /** 动图无法在不丢帧的前提下走单帧编码管线，超限直接拒绝（裁决 D-2） */
@@ -2013,6 +2117,17 @@ function isAnimatedWebp(bytes) {
 	].every((byte, index) => bytes[12 + index] === byte) && ((bytes[20] ?? 0) & 2) !== 0;
 }
 /**
+* APNG：`acTL` 块。规范要求它排在第一个 `IDAT` 之前，所以嗅探头部就够。
+* 魔数与静态 PNG 完全相同，只看魔数会让加载动画这类素材当作静态图原样发出去。
+*/
+function isAnimatedPng(bytes) {
+	for (let i = 8; i + 4 <= bytes.length; i += 1) {
+		if (bytes[i] === 73 && bytes[i + 1] === 68 && bytes[i + 2] === 65 && bytes[i + 3] === 84) return false;
+		if (bytes[i] === 97 && bytes[i + 1] === 99 && bytes[i + 2] === 84 && bytes[i + 3] === 76) return true;
+	}
+	return false;
+}
+/**
 * 按魔数认图片类型（服务端声明只作兜底）。
 *
 * 图片接口常年是「无扩展名 + `application/octet-stream`」这种组合（查询串带 file id 的尤其多），
@@ -2065,7 +2180,7 @@ async function rasterizeToPng(blob) {
 * 照抄声明会让端点解码失败并连累整次请求（一张图 400，37 张全废）。
 *
 * 魔数对得上也不等于发得出去，还有两类会被端点整次拒收，必须重编码成单帧位图：
-* - **动图**（GIF 天然多帧，WebP 看 `VP8X` 的动画位）：图片通道普遍只收静态图；
+* - **动图**（GIF 天然多帧，WebP 看 `VP8X` 的动画位，PNG 看 `acTL` 块）：图片通道普遍只收静态图；
 * - **超长边**：横幅类素材常见 7680×120 这种尺寸，字节数却很小，
 *   纯按字节压缩的预算根本不会触发，原样发出去就撞上端点的边长上限。
 *
@@ -2077,7 +2192,7 @@ async function toDeliverableBlob(blob, oversized = false) {
 	const sniffed = sniffImageMime(head);
 	if (sniffed !== void 0 && DELIVERABLE_IMAGE_MIME_TYPES.has(sniffed)) {
 		const typed = sniffed === declared ? blob : new Blob([blob], { type: sniffed });
-		const animated = sniffed === "image/gif" || sniffed === "image/webp" && isAnimatedWebp(head);
+		const animated = sniffed === "image/gif" || sniffed === "image/webp" && isAnimatedWebp(head) || sniffed === "image/png" && isAnimatedPng(head);
 		return oversized || animated ? await rasterizeToPng(typed) : typed;
 	}
 	const mimeType = sniffed ?? (declared.startsWith("image/") ? declared : void 0);
@@ -2158,11 +2273,20 @@ const ROUTE_ATTRIBUTES = [
 	"data-href",
 	"data-url"
 ];
-/** 只有这三种角色会被提升：其余角色要么本就能发句柄，要么带着不该被覆盖的语义（D-15-3） */
+/**
+* 可被启发式信号提升的角色：其余角色要么本就能发句柄，要么带着不该被覆盖的语义（D-15-3）。
+*
+* `listitem` 在列表里本该只是结构，但 `<ul><li>` 是自绘下拉 / 菜单的主流写法，
+* 选项往往就是不带 role 的 `<li>`（0.17.0 分册 11）。它与另外三个一样受
+* 「有可操作后代就不提升」约束，所以真正的语义列表不会被误伤。
+*
+* 这张白名单**只约束启发式信号**。宿主探针点名的元素走另一条路（分册 12）。
+*/
 const PROMOTABLE_ROLES = /* @__PURE__ */ new Set([
 	"generic",
 	"img",
-	"cell"
+	"cell",
+	"listitem"
 ]);
 /** 合成名的前缀，必须让模型看得出「这不是页面上的字，别拿它去搜」（FR-15.4 第 3 级） */
 const SYNTHETIC_NAME_PREFIX = "unlabeled control";
@@ -2264,10 +2388,11 @@ function synthesizeName(element, nameOf) {
 }
 /** 提升后的角色与导航目标；未提升时返回 undefined */
 function promoteRole(input) {
-	const { element, role, doc, hasActionableDescendant, context } = input;
+	const { element, role, doc, hasActionableDescendant, selfActionable, context } = input;
 	const hinted = hintedRoleOf(element, context.roleHints);
 	if (hinted !== void 0) return { role: hinted };
-	if (!PROMOTABLE_ROLES.has(role)) return void 0;
+	if (selfActionable) return void 0;
+	if (!(context.interactiveHint?.(element) === true) && !PROMOTABLE_ROLES.has(role)) return void 0;
 	if (hasActionableDescendant && role !== "img") return void 0;
 	if (!looksInteractive(element, context)) return void 0;
 	const href = navigationTargetOf(element, doc);
@@ -2495,6 +2620,7 @@ function describe(element, excluded, doc, view, capture, handles, frame, provena
 			role,
 			doc,
 			hasActionableDescendant: children.some((child) => child.ref !== void 0 && handles?.isAction(child.ref) === true),
+			selfActionable: ACTIONABLE_ROLES.has(role),
 			context: promotion
 		});
 		if (promoted !== void 0) {
@@ -3072,6 +3198,31 @@ function documentKey(view) {
 //#endregion
 //#region ../browser/src/dom/pageAction.ts
 const FILLABLE_TAGS = /* @__PURE__ */ new Set(["INPUT", "TEXTAREA"]);
+/**
+* 滚动稳定化的等待边界（毫秒）；宿主注入值被夹在这之间。
+* 刻意**不导出**：本册只登记了一处新增公开契约（`scrollSettleMs`），
+* 多导出一个常量就是多一处要维护的公开面，而宿主注入超界值本来就会被夹住。
+*/
+const SCROLL_SETTLE_BOUNDS = {
+	min: 300,
+	max: 5e3,
+	default: 800
+};
+/**
+* 滚动后等待渲染的两个时长。
+*
+* 只有「静默窗口」是不够的，而且这里的顺序容易搞反：虚拟列表在 `scroll` 事件后要经过
+* 一次 rAF、甚至一段节流才**开始**重渲染，那之前观察器一直是静默的。
+* 若把「一直没动静」直接判成「渲染完了」，就会在渲染开始之前返回，读到滚动前的旧行——
+* 而且页面越慢越容易中招，正好是最需要滚动的那类页面。
+*
+* 所以两段分开：**还没见过任何变更**时按「等首次变更」的宽限期算，
+* 见过之后才按静默窗口算。宽限期取 250ms 是为了盖住常见的 100ms 节流加一帧渲染。
+*/
+const SCROLL_SETTLE_FIRST_CHANGE_MS = 250;
+const SCROLL_SETTLE_QUIET_MS = 80;
+/** 两屏之间的重叠身位（像素）。必须大于 0，否则横跨视口边界的那一行会在两次感知之间消失 */
+const SCROLL_OVERLAP_PX = 64;
 /** 只看显式声明，不看尺寸：jsdom 有 getComputedStyle 但没有布局 */
 function hidden(element) {
 	if (element.hasAttribute("hidden")) return true;
@@ -3154,6 +3305,19 @@ function fillValue(element, value) {
 }
 const norm = (text) => (text ?? "").replace(/\s+/g, " ").trim().toLowerCase();
 /**
+* 激活一个元素。
+*
+* `click()` 只定义在 `HTMLElement` 上：内联 `<svg>`（以及其它外来命名空间的元素）
+* 拿到的是 `undefined`，直接调会抛 `TypeError`，整次操作倒在最后一步。
+* 图标把监听器挂在 `<svg>` 本体上是常见写法，所以这条路径必须通。
+* 退路是派发一个真正的 `click` 事件：它照样冒泡，祖先 `<a>` 的激活行为也照样跑。
+*/
+function activate(element, init) {
+	const native = element.click;
+	if (typeof native === "function") native.call(element);
+	else element.dispatchEvent(new MouseEvent("click", init));
+}
+/**
 * 一次「像人一样」的点击。
 *
 * `HTMLElement.click()` **只**派发 `click`，不派发指针/鼠标序列，也不移动焦点。
@@ -3199,7 +3363,7 @@ function press(element) {
 		...base,
 		buttons: 0
 	}));
-	element.click();
+	activate(element, base);
 }
 /** 轮询等待，上限固定：等不到就失败，不能无限挂着一次工具调用 */
 async function waitFor(probe, timeoutMs = 2e3) {
@@ -3244,7 +3408,13 @@ async function selectOption(element, value) {
 	if (listbox === null || listbox === void 0) return fail("The options panel did not open.");
 	const option = [...listbox.querySelectorAll("[role=option], [role=gridcell], [role=menuitem], option")].find((candidate) => norm(accessibleName(candidate)) === norm(value));
 	if (option === void 0) return fail(`No option named "${value}" is available.`);
-	option.click();
+	activate(option, {
+		bubbles: true,
+		cancelable: true,
+		composed: true,
+		detail: 1,
+		button: 0
+	});
 	return await waitFor(() => {
 		const shown = `${accessibleName(element) ?? ""} ${element.value ?? ""}`;
 		return norm(shown).includes(norm(value)) ? true : void 0;
@@ -3300,6 +3470,75 @@ function attachFiles(input, files) {
 	input.dispatchEvent(new Event("input", { bubbles: true }));
 	input.dispatchEvent(new Event("change", { bubbles: true }));
 }
+const scrolls = (overflow) => overflow === "auto" || overflow === "scroll" || overflow === "overlay";
+/**
+* 滚动落点（FR-10.3）：从被指认元素**自身**起沿祖先链上溯，取第一个真正能滚的容器。
+*
+* 判据是两个条件的**合取**，第二个不能省：现代布局里 `overflow-y: auto` 的祖先
+* 常有好几层（卡片、面板、栅格），其中绝大多数内容并没有溢出。只看 overflow 会命中
+* 最近的那个 `auto`，往它的 `scrollTop` 写值没有任何效果——表现是操作报成功、
+* 页面没动、也没有新行，即向模型报了一次假成功。
+*
+* 判据里不含任何组件库特征（class 名、data 属性、组件实例）：这是「通用」二字的判据。
+*
+* 根滚动容器单独兜底而不是靠链上命中：`documentElement` 的 `overflow-y` 计算值
+* 通常是 `visible`（滚动被传播到视口），不会被上面的判据命中，但文档确实可滚。
+* 顺序必须是先链后兜底——嵌套场景下先命中的必须是内层列表。
+*/
+function scrollTargetOf(element) {
+	const doc = element.ownerDocument;
+	const view = doc.defaultView;
+	if (view === null) return void 0;
+	for (let node = element; node !== null; node = node.parentElement) {
+		const style = view.getComputedStyle(node);
+		if (scrolls(style.overflowY) && node.scrollHeight > node.clientHeight) return {
+			container: node,
+			isRoot: false
+		};
+	}
+	const root = doc.scrollingElement ?? doc.documentElement;
+	if (root !== null && root.scrollHeight > root.clientHeight) return {
+		container: root,
+		isRoot: true
+	};
+}
+function clampScrollSettleMs(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return SCROLL_SETTLE_BOUNDS.default;
+	return Math.min(Math.max(Math.round(value), SCROLL_SETTLE_BOUNDS.min), SCROLL_SETTLE_BOUNDS.max);
+}
+/**
+* 等落点容器的子树安静下来（FR-10.6）。
+*
+* 观察器必须在**写 `scrollTop` 之前**挂上：写值到第一次变更之间不能有空档，
+* 否则渲染快的页面会在挂上观察器之前就完成变更，然后被静默窗口判成「没动静」。
+*
+* 只观察落点子树，不观察整个文档：ERP 页面上到处是无关的轮询与徽标刷新，
+* 观察全文档等于永远等不到静默。
+*/
+function watchQuiescence(container) {
+	const Observer = container.ownerDocument.defaultView?.MutationObserver;
+	let lastChange;
+	const observer = Observer === void 0 ? void 0 : new Observer(() => lastChange = Date.now());
+	observer?.observe(container, {
+		childList: true,
+		subtree: true
+	});
+	return { settle: async (budgetMs) => {
+		const started = Date.now();
+		try {
+			for (;;) {
+				await new Promise((resolve) => setTimeout(resolve, 20));
+				const now = Date.now();
+				if (now - started >= budgetMs) return;
+				if (lastChange === void 0) {
+					if (now - started >= SCROLL_SETTLE_FIRST_CHANGE_MS) return;
+				} else if (now - lastChange >= SCROLL_SETTLE_QUIET_MS) return;
+			}
+		} finally {
+			observer?.disconnect();
+		}
+	} };
+}
 /** @experimental */
 function createDomPageActionExecutor(options) {
 	const { reader } = options;
@@ -3356,6 +3595,40 @@ function createDomPageActionExecutor(options) {
 			documentUrl: view.location.href
 		};
 	};
+	/**
+	* 滚动一屏（0.18.0 分册 10）。
+	*
+	* 不走 `done()`：滚动不会导航、也不会打开模态，套那段等待只是白等一个预算。
+	* 稳定化是滚动自己的收尾，见 `watchQuiescence`。
+	*/
+	const scrollRegion = async (element, target, direction) => {
+		const found = scrollTargetOf(element);
+		if (found === void 0) return {
+			ok: false,
+			target,
+			reason: "This area cannot be scrolled: nothing around this element has a scrollable region."
+		};
+		const { container, isRoot } = found;
+		if (!isRoot && !reader.inActionScope(container)) return {
+			ok: false,
+			target,
+			reason: "The scrollable region around this element is outside the actionable scope."
+		};
+		const step = Math.max(container.clientHeight - SCROLL_OVERLAP_PX, Math.round(container.clientHeight / 2), 1);
+		const before = container.scrollTop;
+		const watch = watchQuiescence(container);
+		container.scrollTop = direction === "down" ? before + step : before - step;
+		await watch.settle(clampScrollSettleMs(options.scrollSettleMs?.()));
+		const after = container.scrollTop;
+		return {
+			ok: true,
+			target,
+			scrolled: {
+				atEnd: direction === "down" ? after >= container.scrollHeight - container.clientHeight - 1 : after <= 0,
+				movedBy: Math.abs(after - before)
+			}
+		};
+	};
 	const execute = async (request) => {
 		if (request.action === "back") return await goBack();
 		const element = reader.resolve(request.ref);
@@ -3370,7 +3643,7 @@ function createDomPageActionExecutor(options) {
 			target,
 			reason
 		});
-		if (reader.handleKindOf(request.ref) === "anchor") return fail("That reference points at a container, which cannot be acted on. Use it with perceive_page to read inside it, then act on an element found there.");
+		if (reader.handleKindOf(request.ref) === "anchor") return fail("That reference points at a container, which cannot be acted on. Use it with perceive_page to read inside it, then act on an element that carries its own reference. If nothing inside it has one, this part of the page offers no action and retrying here will not help.");
 		if (reader.modalStateOf(element) === "unelevated") return fail("That dialog is not in the authorized scope because it was opened manually. Ask me to open it, or add it to the host allowlist.");
 		if (reader.modalStateOf(element) !== "elevated" && !reader.inActionScope(element)) return fail("The element is no longer inside the actionable scope.");
 		if (hidden(element)) return fail("The element is not visible.");
@@ -3426,6 +3699,10 @@ function createDomPageActionExecutor(options) {
 			};
 		}
 		if (request.action === "set") return await done(setToggle(element, request.value ?? "", target));
+		if (request.action === "scroll") {
+			if (request.value !== "down" && request.value !== "up") return fail("Use \"down\" or \"up\".");
+			return await scrollRegion(element, target, request.value);
+		}
 		if (request.action === "attach") {
 			const files = await options.pickFiles?.();
 			if (files === void 0 || files.length === 0) return {
@@ -3463,8 +3740,10 @@ function createDomPageActionExecutor(options) {
 * 它**不是** FR-11.5 那个容量闸门：那一条管的是「同时有几个**标签页**可操作」，
 * 触顶硬拒绝，落在 `TabWorksetPolicy`。这里管的是同一个标签页里连续跳页攒下的历史分片，
 * 那些本来就该失效，按最久未使用逐出即可，逐出不构成对模型的拒绝。
+* 软上限必须宽于 `TAB_WORKSET_MAX_MAX`（分册 18），否则工作集里**还活着**的页
+* 会因为别的页新发分片而被逐出；64 = 天花板 32 × 每页两代历史。
 */
-const SHARD_SOFT_LIMIT = 24;
+const SHARD_SOFT_LIMIT = 64;
 /** 不给 `shard` 时用的分片键；单分片宿主全程待在这一个分片里 */
 const DEFAULT_SHARD = "";
 /**
@@ -3486,7 +3765,7 @@ function explainResolution(resolution) {
 }
 /** @experimental */
 function createRemoteTargetRegistry(options = {}) {
-	const maxShards = Math.max(1, Math.trunc(options.maxShards ?? 24));
+	const maxShards = Math.max(1, Math.trunc(options.maxShards ?? 64));
 	let shards = /* @__PURE__ */ new Map();
 	let refIndex = /* @__PURE__ */ new Map();
 	let focused = DEFAULT_SHARD;
@@ -5444,4 +5723,4 @@ function originOf(blockedURI) {
 }
 
 //#endregion
-export { BrowserSkillManager, BrowserWorkerScriptExecutor, ChromeBuiltinLlmClient, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, HOST_PORT_MATRIX, IframeWorkerLike, OpfsProvider, SANDBOX_PAGE_SCRIPT_SOURCE, SHARD_SOFT_LIMIT, TsTranspiler, VIEWER_SANDBOX_TOKENS, WORKER_BOOTSTRAP_SOURCE, WorkerRuntimeClient, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, documentKey, explainResolution, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };
+export { BrowserSkillManager, BrowserWorkerScriptExecutor, ChromeBuiltinLlmClient, DEFAULT_CAMERA_MAX_DIMENSION, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, HOST_PORT_MATRIX, IframeWorkerLike, OpfsProvider, SANDBOX_PAGE_SCRIPT_SOURCE, SHARD_SOFT_LIMIT, TsTranspiler, VIEWER_SANDBOX_TOKENS, WORKER_BOOTSTRAP_SOURCE, WorkerRuntimeClient, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, documentKey, explainResolution, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openCamera, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { S as UiBridge, U as FileSystemProvider, X as PageQuery, Y as Page, f as LlmMessage, ft as SkillDocument, gt as SkillManagerPort, l as LlmClient, ut as SkillCatalogEntry } from "./types-C3V6lAeO-BUpcRLER.js";
-import { $ as IntegrityVerdict, Wn as WebSkillRuntime, cn as SkillStateGuard, in as SkillOutcomeReporter, rn as SkillIntegrityGuard, zt as RuntimeRun } from "./index-DbVqg2V3.js";
-import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-B24Jjjry-CsbzF7Oe.js";
+import { S as UiBridge, U as FileSystemProvider, X as PageQuery, Y as Page, f as LlmMessage, ft as SkillDocument, gt as SkillManagerPort, l as LlmClient, ut as SkillCatalogEntry } from "./types-Btpdd1y--BcxQ10Fa.js";
+import { $ as IntegrityVerdict, Wn as WebSkillRuntime, cn as SkillStateGuard, in as SkillOutcomeReporter, rn as SkillIntegrityGuard, zt as RuntimeRun } from "./index-BDyXe-a5.js";
+import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-B24Jjjry-v2CCU0Xo.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */

package/dist/governance.js

@@ -1,7 +1,7 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { y as isValidSkillName } from "./skill-CAJMsLod.js";
 import { a as atomicWriteText, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
-import { d as partsToText, p as textParts } from "./llm-B7lLH0ZI.js";
+import { d as partsToText, p as textParts } from "./llm-eIQNO9tr.js";
 import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-CwciaqCU.js";
 
 //#region ../governance/src/candidate/candidateNormalizer.ts

package/dist/{index-DbVqg2V3.d.ts → index-BDyXe-a5.d.ts}

@@ -1,4 +1,4 @@
-import { At as ValidationReport, B as DiscoveryResult, K as JsonSchema, Nt as WebSkillErrorCode, O as UiSurfaceActionRequest, Ot as UiSpecNode, S as UiBridge, T as UiSpecEvent, U as FileSystemProvider, X as PageQuery, Y as Page, Z as RemoteUrlPolicy, _ as LlmToolSpec, _t as SkillManifest, b as RenderResultRequest, d as LlmContentPart, dt as SkillDiscovery, f as LlmMessage, ft as SkillDocument, g as LlmToolCall, h as LlmTokenUsage, i as FormField, l as LlmClient, lt as SkillCatalog, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, p as LlmResponse, pt as SkillInstallSource, r as ChartSpec, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, ut as SkillCatalogEntry, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-C3V6lAeO-BUpcRLER.js";
+import { At as ValidationReport, B as DiscoveryResult, K as JsonSchema, Nt as WebSkillErrorCode, O as UiSurfaceActionRequest, Ot as UiSpecNode, S as UiBridge, T as UiSpecEvent, U as FileSystemProvider, X as PageQuery, Y as Page, Z as RemoteUrlPolicy, _ as LlmToolSpec, _t as SkillManifest, b as RenderResultRequest, d as LlmContentPart, dt as SkillDiscovery, f as LlmMessage, ft as SkillDocument, g as LlmToolCall, h as LlmTokenUsage, i as FormField, l as LlmClient, lt as SkillCatalog, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, p as LlmResponse, pt as SkillInstallSource, r as ChartSpec, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, ut as SkillCatalogEntry, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-Btpdd1y--BcxQ10Fa.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */

package/dist/{index-DeXgdtHa.d.ts → index-CaLsVI-m.d.ts}

@@ -1,5 +1,5 @@
-import { C as UiSpecActionCapability, D as UiSpecSnapshot, K as JsonSchema, Ot as UiSpecNode, S as UiBridge, b as RenderResultRequest, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-C3V6lAeO-BUpcRLER.js";
-import { z as ExternalToolSource } from "./index-DbVqg2V3.js";
+import { C as UiSpecActionCapability, D as UiSpecSnapshot, K as JsonSchema, Ot as UiSpecNode, S as UiBridge, b as RenderResultRequest, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-Btpdd1y--BcxQ10Fa.js";
+import { z as ExternalToolSource } from "./index-BDyXe-a5.js";
 import { z } from "zod";
 import { ComponentType, ReactNode } from "react";
 //#region ../ui/dist/index.d.ts
@@ -668,6 +668,11 @@ interface InteractionSpecLabels {
   title?: string;
   submitLabel?: string;
   cancelLabel?: string;
+  /**
+   * 正文覆写（分册 19 FR-19.1）。runtime 拼的英文原句是无字典层的正确产物，
+   * 但持有字典的宿主要能把它换成本地化文案；空串表示不渲染正文（同 `title`）。
+   */
+  message?: string;
 }
 /**
  * 五类 `InteractionRequest` → catalog 声明树。

package/dist/{index-BLfnO7sz.d.ts → index-DQ3-6GFu.d.ts}

@@ -1,5 +1,5 @@
-import { I as ChatAttachmentKind, Nt as WebSkillErrorCode, S as UiBridge, Z as RemoteUrlPolicy, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-C3V6lAeO-BUpcRLER.js";
-import { Kn as XlsxTextExtractor, P as DocxTextExtractor, bn as ToolStepReader, j as DataSourceInfo, z as ExternalToolSource } from "./index-DbVqg2V3.js";
+import { I as ChatAttachmentKind, Nt as WebSkillErrorCode, S as UiBridge, Z as RemoteUrlPolicy, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-Btpdd1y--BcxQ10Fa.js";
+import { Kn as XlsxTextExtractor, P as DocxTextExtractor, bn as ToolStepReader, j as DataSourceInfo, z as ExternalToolSource } from "./index-BDyXe-a5.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -1119,15 +1119,15 @@ type PageActionScopeInput = PageActionScope | {
  */
 declare function toActionFrameScopes(scope: PageActionScopeInput): readonly ActionFrameScope[];
 /**
- * 本版的操作集（FR-25.1 / 0.16.0 FR-13.6）。拖拽、滚动仍不在内；
+ * 本版的操作集（FR-25.1 / 0.16.0 FR-13.6 / 0.18.0 FR-10.1）。拖拽仍不在内（D64）；
  * 导航只有 `back` 一个，且它**不接受地址**——可达面被浏览器历史封死（SC-1）。
  *
- * `select`/`set`/`attach` 与既有三个走**同一条** policy 路径，
+ * `select`/`set`/`attach`/`scroll` 与既有几个走**同一条** policy 路径，
  * 范围白名单、逐次确认、审计三条硬约束因此天然覆盖到它们——
- * 前提是新动作不绕过 policy 直接调执行器（AC-25.4 守这一点）。
+ * 前提是新动作不绕过 policy 直调执行器（AC-25.4 守这一点）。
  * @experimental
  */
-declare const PAGE_ACTION_KINDS: readonly ["click", "fill", "submit", "select", "set", "attach", "back"];
+declare const PAGE_ACTION_KINDS: readonly ["click", "fill", "submit", "select", "set", "attach", "scroll", "back"];
 type PageActionKind = (typeof PAGE_ACTION_KINDS)[number];
 /**
  * `back` 的目标占位（0.16.0 分册 13 §4.1）。
@@ -1145,8 +1145,8 @@ interface PageActionRequest {
   action: PageActionKind;
   /**
    * `fill` 填入的文本；`select` 要选中的选项可访问名；
-   * `set` 的目标态（`'true'` | `'false'`）。`attach` 不用它——
-   * 文件**始终由用户在确认卡里选**，Agent 传不进本地路径（FR-25.5）。
+   * `set` 的目标态（`'true'` | `'false'`）；`scroll` 的方向（`'down'` | `'up'`）。
+   * `attach` 不用它——文件**始终由用户在确认卡里选**，Agent 传不进本地路径（FR-25.5）。
    */
   value?: string;
 }
@@ -1197,6 +1197,17 @@ interface PageActionOutcome {
    * 带 `admitted: false` 即开出来了但没接进来（例如工作集触顶）。
    */
   openedTab?: OpenedTabSignal;
+  /**
+   * 本次滚动的位移与边界状态（0.18.0 分册 10 · FR-10.7）。
+   * 非 `scroll` 动作**不带**该字段，与 `navigated` 同口径。
+   *
+   * 两个值都在**稳定化之后**回读：虚拟列表加载新行会改变 `scrollHeight`，
+   * 用滚动前的值算 `atEnd` 会提前报到底，模型于是停在半路。
+   */
+  scrolled?: {
+    atEnd: boolean;
+    movedBy: number;
+  };
   /** 失败原因（英文） */
   reason?: string;
 }
@@ -1247,6 +1258,16 @@ interface PageActionRecord {
   noop?: boolean;
   /** 非密码类控件填入的值；密码类控件**整个字段不存在** */
   value?: string;
+  /**
+   * 本次滚动的方向与实际位移（0.18.0 FR-10.8）；非 `scroll` 动作不带。
+   * 位移要进留痕：只记「滚了」而不记「滚了多少」，事后分不出
+   * 「滚到底了」与「根本没滚动」。
+   */
+  scrolled?: {
+    direction: 'down' | 'up';
+    movedBy: number;
+    atEnd: boolean;
+  };
   reason?: string;
 }
 //#endregion
@@ -1464,11 +1485,11 @@ declare function createPageActionToolSource(options: PageActionToolSourceOptions
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
 //#region src/tabs/policy.d.ts
-/** 工作集容量缺省；「起点页 + 若干详情页」的常见规模 */
-declare const TAB_WORKSET_DEFAULT_MAX = 8;
+/** 工作集容量缺省（分册 18）；一屏索引视图的行数就是它要盖住的量，撞 `workset-full` 时模型没有任何入口能要更多 */
+declare const TAB_WORKSET_DEFAULT_MAX = 32;
 /** 地板：2 的含义是「起点页 + 至少一个详情页」，低于它工作集这个概念就没有意义 */
 declare const TAB_WORKSET_MIN_MAX = 2;
-/** 天花板：宿主写错一个 0 不该让一轮任务铺开几百个标签页 */
+/** 天花板：宿主写错一个 0 不该让一轮任务铺开几百个标签页。与缺省同值，宿主只调得低不调得高 */
 declare const TAB_WORKSET_MAX_MAX = 32;
 /**
  * 夹取工作集容量（FR-11.5 / D-11-3）。