@webskill/sdk 0.17.0 → 0.19.0

package/dist/agent.d.ts

@@ -1,3 +1,3 @@
 import { E as DEFAULT_MAX_DATA_SOURCE_BYTES } from "./index-BDyXe-a5.js";
-import { $ as NestedFrameRef, $t as TAB_WORKSET_MIN_MAX, A as DelegationRequest, An as withDelegationOrigin, At as PerceptionAuditSink, B as DownloadedFileReader, Bt as SkillGenerationMessages, C as DataSourcePolicyOptions, Cn as createSkillGenerationToolSource, Ct as PagePerceptionPolicy, D as DelegationBudget, Dn as frameSteps, Dt as ParentBudget, E as DataSourceTransport, En as frameLabel, Et as PagePerceptionToolSourceOptions, F as DownloadedFileEntry, Ft as PerceptionScope, G as FrameScope, Gt as SkillGeneratorOptions, H as DownloadedFileToolSourceOptions, Ht as SkillGenerationPolicy, I as DownloadedFileListing, It as PerceptionScopeInput, J as HttpDataSourceOptions, Jt as SubAgentRunInput, K as GENERATE_SKILL_TOOL, Kt as SkillTraceEvidence, L as DownloadedFilePolicy, Lt as READ_DOWNLOADED_FILE_TOOL, M as DelegationToolSourceOptions, Mt as PerceptionPagingBudget, N as DownloadedFileAction, Nt as PerceptionRecord, O as DelegationOrchestrator, On as toActionFrameScopes, Ot as PerceivedImage, P as DownloadedFileConsent, Pt as PerceptionResult, Q as MANAGE_TODO_TOOL, Qt as TAB_WORKSET_MAX_MAX, R as DownloadedFilePolicyOptions, Rt as SKILL_GENERATION_SYSTEM_PROMPT, S as DataSourcePolicy, Sn as createPagePerceptionToolSource, St as PageAuditSink, T as DataSourceRecord, Tn as createTodoToolSource, Tt as PagePerceptionReader, U as FOCUS_PAGE_TAB_TOOL, Ut as SkillGenerationToolSourceOptions, V as DownloadedFileRecord, Vt as SkillGenerationOutcome, W as FrameNote, Wt as SkillGenerator, X as LIST_DOWNLOADED_FILES_TOOL, Xt as SubtreeRejection, Y as ImageCaptureBudget, Yt as SubAgentRunner, Z as LIST_PAGE_TABS_TOOL, Zt as TAB_WORKSET_DEFAULT_MAX, _ as DataSourceCandidatePolicyOptions, _n as clampWorksetMax, _t as PageActionScope, a as ActionTabWindow, an as TabWorksetPort, at as PAGE_DOCUMENT_REF, b as DataSourceDef, bn as createHttpDataSourceTransport, bt as PageActionToolSourceOptions, c as DELEGATE_TASK_TOOL, cn as TodoItem, ct as PERCEPTION_SYSTEM_PROMPT, d as DOWNLOAD_WAIT_MAX_MS, dn as TodoStatus, dt as PageActionKind, en as TAB_WORKSET_SYSTEM_PROMPT, et as OpenedPageInfo, f as DOWNLOAD_WAIT_MIN_MS, fn as TodoStore, ft as PageActionOutcome, g as DataSourceCandidatePolicy, gn as clampDownloadWaitMs, gt as PageActionRequest, h as DataSourceCandidateAuditSink, hn as WorksetTabView, ht as PageActionRecord, i as ActionTabWatcher, in as TabWorksetPolicyOptions, it as PAGE_ACTION_TOOL, j as DelegationResult, jt as PerceptionCaptureOptions, k as DelegationOrchestratorOptions, kn as toFrameScopes, kt as PerceivedNode, l as DELEGATION_SYSTEM_PROMPT, ln as TodoList, lt as PageActionConsent, m as DataSourceCandidate, mn as WorksetTab, mt as PageActionPolicyOptions, n as ActionDownloadWindow, nn as TabAdmission, nt as PAGE_ACTION_KINDS, o as CLOSE_PAGE_TAB_TOOL, on as TabWorksetToolSourceOptions, ot as PERCEIVE_PAGE_TOOL, p as DataSourceAuditSink, pn as TodoToolSourceOptions, pt as PageActionPolicy, q as GeneratedSkillDraft, qt as SkillTraceEvidenceStep, r as ActionFrameScope, rn as TabWorksetPolicy, rt as PAGE_ACTION_SYSTEM_PROMPT, s as ConsentUi, sn as TodoEvent, st as PERCEPTION_PAGING_DEFAULTS, t as ActionDownloadWatcher, tn as TODO_SYSTEM_PROMPT, tt as OpenedTabSignal, u as DOWNLOAD_WAIT_DEFAULT_MS, un as TodoListener, ut as PageActionExecutor, v as DataSourceCandidateRecord, vn as createDelegationToolSource, vt as PageActionScopeInput, w as DataSourceProvenance, wn as createTabWorksetToolSource, wt as PagePerceptionPolicyOptions, x as DataSourceKind, xn as createPageActionToolSource, xt as PageActionUi, y as DataSourceCandidateStore, yn as createDownloadedFileToolSource, yt as PageActionTarget, z as DownloadedFileReadResult, zt as SkillCandidateSink } from "./index-1sQZ4VBN.js";
+import { $ as NestedFrameRef, $t as TAB_WORKSET_MIN_MAX, A as DelegationRequest, An as withDelegationOrigin, At as PerceptionAuditSink, B as DownloadedFileReader, Bt as SkillGenerationMessages, C as DataSourcePolicyOptions, Cn as createSkillGenerationToolSource, Ct as PagePerceptionPolicy, D as DelegationBudget, Dn as frameSteps, Dt as ParentBudget, E as DataSourceTransport, En as frameLabel, Et as PagePerceptionToolSourceOptions, F as DownloadedFileEntry, Ft as PerceptionScope, G as FrameScope, Gt as SkillGeneratorOptions, H as DownloadedFileToolSourceOptions, Ht as SkillGenerationPolicy, I as DownloadedFileListing, It as PerceptionScopeInput, J as HttpDataSourceOptions, Jt as SubAgentRunInput, K as GENERATE_SKILL_TOOL, Kt as SkillTraceEvidence, L as DownloadedFilePolicy, Lt as READ_DOWNLOADED_FILE_TOOL, M as DelegationToolSourceOptions, Mt as PerceptionPagingBudget, N as DownloadedFileAction, Nt as PerceptionRecord, O as DelegationOrchestrator, On as toActionFrameScopes, Ot as PerceivedImage, P as DownloadedFileConsent, Pt as PerceptionResult, Q as MANAGE_TODO_TOOL, Qt as TAB_WORKSET_MAX_MAX, R as DownloadedFilePolicyOptions, Rt as SKILL_GENERATION_SYSTEM_PROMPT, S as DataSourcePolicy, Sn as createPagePerceptionToolSource, St as PageAuditSink, T as DataSourceRecord, Tn as createTodoToolSource, Tt as PagePerceptionReader, U as FOCUS_PAGE_TAB_TOOL, Ut as SkillGenerationToolSourceOptions, V as DownloadedFileRecord, Vt as SkillGenerationOutcome, W as FrameNote, Wt as SkillGenerator, X as LIST_DOWNLOADED_FILES_TOOL, Xt as SubtreeRejection, Y as ImageCaptureBudget, Yt as SubAgentRunner, Z as LIST_PAGE_TABS_TOOL, Zt as TAB_WORKSET_DEFAULT_MAX, _ as DataSourceCandidatePolicyOptions, _n as clampWorksetMax, _t as PageActionScope, a as ActionTabWindow, an as TabWorksetPort, at as PAGE_DOCUMENT_REF, b as DataSourceDef, bn as createHttpDataSourceTransport, bt as PageActionToolSourceOptions, c as DELEGATE_TASK_TOOL, cn as TodoItem, ct as PERCEPTION_SYSTEM_PROMPT, d as DOWNLOAD_WAIT_MAX_MS, dn as TodoStatus, dt as PageActionKind, en as TAB_WORKSET_SYSTEM_PROMPT, et as OpenedPageInfo, f as DOWNLOAD_WAIT_MIN_MS, fn as TodoStore, ft as PageActionOutcome, g as DataSourceCandidatePolicy, gn as clampDownloadWaitMs, gt as PageActionRequest, h as DataSourceCandidateAuditSink, hn as WorksetTabView, ht as PageActionRecord, i as ActionTabWatcher, in as TabWorksetPolicyOptions, it as PAGE_ACTION_TOOL, j as DelegationResult, jt as PerceptionCaptureOptions, k as DelegationOrchestratorOptions, kn as toFrameScopes, kt as PerceivedNode, l as DELEGATION_SYSTEM_PROMPT, ln as TodoList, lt as PageActionConsent, m as DataSourceCandidate, mn as WorksetTab, mt as PageActionPolicyOptions, n as ActionDownloadWindow, nn as TabAdmission, nt as PAGE_ACTION_KINDS, o as CLOSE_PAGE_TAB_TOOL, on as TabWorksetToolSourceOptions, ot as PERCEIVE_PAGE_TOOL, p as DataSourceAuditSink, pn as TodoToolSourceOptions, pt as PageActionPolicy, q as GeneratedSkillDraft, qt as SkillTraceEvidenceStep, r as ActionFrameScope, rn as TabWorksetPolicy, rt as PAGE_ACTION_SYSTEM_PROMPT, s as ConsentUi, sn as TodoEvent, st as PERCEPTION_PAGING_DEFAULTS, t as ActionDownloadWatcher, tn as TODO_SYSTEM_PROMPT, tt as OpenedTabSignal, u as DOWNLOAD_WAIT_DEFAULT_MS, un as TodoListener, ut as PageActionExecutor, v as DataSourceCandidateRecord, vn as createDelegationToolSource, vt as PageActionScopeInput, w as DataSourceProvenance, wn as createTabWorksetToolSource, wt as PagePerceptionPolicyOptions, x as DataSourceKind, xn as createPageActionToolSource, xt as PageActionUi, y as DataSourceCandidateStore, yn as createDownloadedFileToolSource, yt as PageActionTarget, z as DownloadedFileReadResult, zt as SkillCandidateSink } from "./index-DQ3-6GFu.js";
 export { type ActionDownloadWatcher, type ActionDownloadWindow, type ActionFrameScope, type ActionTabWatcher, type ActionTabWindow, CLOSE_PAGE_TAB_TOOL, type ConsentUi, DEFAULT_MAX_DATA_SOURCE_BYTES, DELEGATE_TASK_TOOL, DELEGATION_SYSTEM_PROMPT, DOWNLOAD_WAIT_DEFAULT_MS, DOWNLOAD_WAIT_MAX_MS, DOWNLOAD_WAIT_MIN_MS, type DataSourceAuditSink, type DataSourceCandidate, type DataSourceCandidateAuditSink, DataSourceCandidatePolicy, type DataSourceCandidatePolicyOptions, type DataSourceCandidateRecord, type DataSourceCandidateStore, type DataSourceDef, type DataSourceKind, DataSourcePolicy, type DataSourcePolicyOptions, type DataSourceProvenance, type DataSourceRecord, type DataSourceTransport, type DelegationBudget, DelegationOrchestrator, type DelegationOrchestratorOptions, type DelegationRequest, type DelegationResult, type DelegationToolSourceOptions, type DownloadedFileAction, type DownloadedFileConsent, type DownloadedFileEntry, type DownloadedFileListing, DownloadedFilePolicy, type DownloadedFilePolicyOptions, type DownloadedFileReadResult, type DownloadedFileReader, type DownloadedFileRecord, type DownloadedFileToolSourceOptions, FOCUS_PAGE_TAB_TOOL, type FrameNote, type FrameScope, GENERATE_SKILL_TOOL, type GeneratedSkillDraft, type HttpDataSourceOptions, type ImageCaptureBudget, LIST_DOWNLOADED_FILES_TOOL, LIST_PAGE_TABS_TOOL, MANAGE_TODO_TOOL, type NestedFrameRef, type OpenedPageInfo, type OpenedTabSignal, PAGE_ACTION_KINDS, PAGE_ACTION_SYSTEM_PROMPT, PAGE_ACTION_TOOL, PAGE_DOCUMENT_REF, PERCEIVE_PAGE_TOOL, PERCEPTION_PAGING_DEFAULTS, PERCEPTION_SYSTEM_PROMPT, type PageActionConsent, type PageActionExecutor, type PageActionKind, type PageActionOutcome, PageActionPolicy, type PageActionPolicyOptions, type PageActionRecord, type PageActionRequest, type PageActionScope, type PageActionScopeInput, type PageActionTarget, type PageActionToolSourceOptions, type PageActionUi, type PageAuditSink, PagePerceptionPolicy, type PagePerceptionPolicyOptions, type PagePerceptionReader, type PagePerceptionToolSourceOptions, type ParentBudget, type PerceivedImage, type PerceivedNode, type PerceptionAuditSink, type PerceptionCaptureOptions, type PerceptionPagingBudget, type PerceptionRecord, type PerceptionResult, type PerceptionScope, type PerceptionScopeInput, READ_DOWNLOADED_FILE_TOOL, SKILL_GENERATION_SYSTEM_PROMPT, type SkillCandidateSink, type SkillGenerationMessages, type SkillGenerationOutcome, type SkillGenerationPolicy, type SkillGenerationToolSourceOptions, SkillGenerator, type SkillGeneratorOptions, type SkillTraceEvidence, type SkillTraceEvidenceStep, type SubAgentRunInput, type SubAgentRunner, type SubtreeRejection, TAB_WORKSET_DEFAULT_MAX, TAB_WORKSET_MAX_MAX, TAB_WORKSET_MIN_MAX, TAB_WORKSET_SYSTEM_PROMPT, TODO_SYSTEM_PROMPT, type TabAdmission, TabWorksetPolicy, type TabWorksetPolicyOptions, type TabWorksetPort, type TabWorksetToolSourceOptions, type TodoEvent, type TodoItem, type TodoList, type TodoListener, type TodoStatus, TodoStore, type TodoToolSourceOptions, type WorksetTab, type WorksetTabView, clampDownloadWaitMs, clampWorksetMax, createDelegationToolSource, createDownloadedFileToolSource, createHttpDataSourceTransport, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTabWorksetToolSource, createTodoToolSource, frameLabel, frameSteps, toActionFrameScopes, toFrameScopes, withDelegationOrigin };

package/dist/agent.js

@@ -3,7 +3,7 @@ import { b as parseSkillMarkdown, y as isValidSkillName } from "./skill-CAJMsLod
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
 import { c as formatAttachmentText, l as UNTRUSTED_LINE_LIMIT, o as XLSX_MIME, s as classifyAttachment, u as sanitizeUntrustedLine } from "./kind-DxgS8LM-.js";
 import { o as toBase64, s as DEFAULT_MAX_DATA_SOURCE_BYTES } from "./linkedDocument-xNXF-z8n.js";
-import { a as frameLabel, i as toFrameScopes, n as PAGE_DOCUMENT_REF, o as frameSteps, r as toActionFrameScopes, t as PAGE_ACTION_KINDS } from "./types-BuacBov_.js";
+import { a as frameLabel, i as toFrameScopes, n as PAGE_DOCUMENT_REF, o as frameSteps, r as toActionFrameScopes, t as PAGE_ACTION_KINDS } from "./types-DOJI5YC3.js";
 
 //#region ../agent/src/todo/store.ts
 const STATUSES = [
@@ -1274,7 +1274,7 @@ const PERCEPTION_SYSTEM_PROMPT = [
 //#endregion
 //#region ../agent/src/perception/toolSource.ts
 const PERCEIVE_PAGE_TOOL = "perceive_page";
-const DESCRIPTION$1 = "Read the parts of the current page the host made readable, as a structured accessibility outline. Read-only: it cannot click, type, submit, navigate or scroll.";
+const DESCRIPTION$1 = "Read the parts of the current page the host made readable, as a structured accessibility outline. Read-only: it cannot click, type, submit or navigate.";
 /**
 * 两个参数，且它们都扩不出一寸新范围（AC-10.8 的判据由 0.14.0 分册 22 §3 修订）。
 *
@@ -2000,7 +2000,7 @@ var PageActionPolicy = class {
 		const where = target.frame === void 0 ? "on the page" : `in the embedded frame "${target.frame}"`;
 		const scopeNote = target.elevated === true ? " This dialog is outside the usual allowlist; it was opened by this task." : "";
 		const scopeLabel = rememberable ? this.#options.consent?.describeScope?.(target, request.action) : void 0;
-		const message = request.action === "back" ? `Allow the assistant to go back to the previous page${target.name === void 0 ? "" : ` on "${target.name}"`}?${scopeNote}` : `Allow the assistant to ${request.action} "${target.name ?? target.role}" ${where}?${scopeNote}`;
+		const message = request.action === "back" ? `Allow the assistant to go back to the previous page${target.name === void 0 ? "" : ` on "${target.name}"`}?${scopeNote}` : request.action === "scroll" ? `Allow the assistant to scroll ${request.value === "up" ? "up" : "down"} the area around "${target.name ?? target.role}" ${where}?${scopeNote}` : `Allow the assistant to ${request.action} "${target.name ?? target.role}" ${where}?${scopeNote}`;
 		const response = await this.#options.ui.request({
 			type: "authorize",
 			id: `page-action-${this.#seq}`,
@@ -2016,7 +2016,8 @@ var PageActionPolicy = class {
 				},
 				...rememberable ? { rememberable: true } : {},
 				...scopeLabel !== void 0 ? { rememberLabel: scopeLabel } : {},
-				...request.action === "fill" && request.value !== void 0 ? { value: target.secret === true ? "••••••" : request.value } : {}
+				...request.action === "fill" && request.value !== void 0 ? { value: target.secret === true ? "••••••" : request.value } : {},
+				...request.action === "scroll" ? { direction: request.value === "up" ? "up" : "down" } : {}
 			}
 		});
 		if (response.cancelled === true || response.value === false) return false;
@@ -2046,6 +2047,10 @@ var PageActionPolicy = class {
 			approved,
 			ok: outcome.ok,
 			...request.action === "fill" && request.value !== void 0 && !secret ? { value: request.value } : {},
+			...request.action === "scroll" && outcome.scrolled !== void 0 ? { scrolled: {
+				direction: request.value === "up" ? "up" : "down",
+				...outcome.scrolled
+			} } : {},
 			...outcome.reason !== void 0 ? { reason: outcome.reason } : {}
 		};
 		this.#records = [record, ...this.#records].slice(0, 50);
@@ -2093,7 +2098,8 @@ const PAGE_ACTION_SYSTEM_PROMPT = [
 	"Every action asks the user to confirm it first, so do not chain actions speculatively: act only when the user asked for something that requires it.",
 	"A reference expires as soon as the page is perceived again; perceive first, then act.",
 	"After an action, the result tells you where it led. \"openedTab\" means a new page opened — switch to it with focus_page_tab to read it. \"navigated\" means this page itself moved to a new address. \"elevatedModal\" means a dialog opened on this page. If none of the three appear, the page did not change.",
-	"Use the \"back\" action to return to the previous page in this page's history. It takes no \"ref\" and no \"value\", and it only affects the page you are currently on. After going back, always perceive_page again: every reference from before the action is dead."
+	"Use the \"back\" action to return to the previous page in this page's history. It takes no \"ref\" and no \"value\", and it only affects the page you are currently on. After going back, always perceive_page again: every reference from before the action is dead.",
+	"Use the \"scroll\" action only when the page itself says there is more than you can see (for example a list that says it has 20 rows but shows 13). Pass the \"ref\" of any element inside the region you want to scroll and a \"value\" of \"down\" or \"up\"; the region is found for you, so do not look for a reference to the scrollbar or the container. The result carries \"scrolled\": when \"atEnd\" is true there is nothing further in that direction — stop scrolling and answer with what you have. Perceive the page again after each scroll: rows that left the screen no longer exist and their references are dead."
 ].join("\n");
 
 //#endregion
@@ -2118,7 +2124,7 @@ const INPUT_SCHEMA = {
 		},
 		value: {
 			type: "string",
-			description: "Text for \"fill\", the option name for \"select\", or \"true\"/\"false\" for \"set\""
+			description: "Text for \"fill\", the option name for \"select\", \"true\"/\"false\" for \"set\", or \"down\"/\"up\" for \"scroll\""
 		}
 	},
 	required: ["action"],
@@ -2209,6 +2215,7 @@ function createPageActionToolSource(options) {
 				"select",
 				"set"
 			].includes(action) && typeof value !== "string") return toolError$2("VALIDATION_FAILED", `act_on_page needs a "value" string when the action is "${action}".`);
+			if (action === "scroll" && value !== "down" && value !== "up") return toolError$2("VALIDATION_FAILED", "act_on_page with \"scroll\" needs a \"value\" of \"down\" or \"up\".");
 			return await run({
 				ref,
 				action,

package/dist/{approval-CBPnGPIm.js → approval-Bbh_Apwg.js}

@@ -2,7 +2,7 @@ import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { b as parseSkillMarkdown, i as buildCatalog, n as SkillDiscovery, r as SkillReader } from "./skill-CAJMsLod.js";
 import { a as atomicWriteText, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { c as findUnpairedToolCalls, d as partsToText, f as promptText, l as interruptedToolResult, p as textParts, u as sealToolCallPairs } from "./llm-B7lLH0ZI.js";
+import { c as findUnpairedToolCalls, d as partsToText, f as promptText, l as interruptedToolResult, p as textParts, u as sealToolCallPairs } from "./llm-eIQNO9tr.js";
 import { a as fromBase64, c as DEFAULT_MAX_DOCUMENT_BYTES, d as TEXT_BUDGETED_CONTENT_TYPES, i as UNSUPPORTED_DOCUMENT_MESSAGE, l as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, n as READ_LINKED_DOCUMENT_TOOL_NAME, o as toBase64, r as SUPPORTED_DOCUMENT_MIME, t as READ_LINKED_DOCUMENT_TOOL } from "./linkedDocument-xNXF-z8n.js";
 import { t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
 import { i as isArtifactCardHidden, n as extractChartSpec, r as admitArtifactMetadata, t as buildRenderResult } from "./renderResult-D9Q-Vu2x.js";
@@ -657,6 +657,27 @@ function sampleBehaviorRecords(records, limits = DEFAULT_USER_PROFILE_LIMITS) {
 */
 const PLAIN_CHAT_SYSTEM_PROMPT = "You are a helpful assistant. Answer the user's question directly and concisely. You have no tools available; do not describe or simulate tool calls.";
 
+//#endregion
+//#region ../runtime/src/routing/currentTimePrompt.ts
+/**
+* 每个 run 注入的「现在几点」。
+*
+* 做成提示词而不是工具是有意的：模型不会为它**自以为知道**的事去调工具——
+* 问「下月 1 日」时它直接拿训练截止日期算，或者反过来开一张表单问用户今天几号。
+* 两种都不是缺一个工具，是缺一个事实。日期是上下文不是动作，每轮都要，代价又是零。
+*
+* 时区取运行环境的（`Intl` 在 Node 与浏览器都在），因为「下月 1 日」是按用户所在时区算的。
+*/
+function renderCurrentTimePrompt(nowIso) {
+	const now = new Date(nowIso);
+	if (Number.isNaN(now.getTime())) return "";
+	const { timeZone } = Intl.DateTimeFormat().resolvedOptions();
+	return `Current date and time: ${new Intl.DateTimeFormat("en-US", {
+		dateStyle: "full",
+		timeStyle: "long"
+	}).format(now)} (time zone ${timeZone}, ISO ${now.toISOString()}).\nResolve every relative date the user mentions ("tomorrow", "next month", "in three days", "how long until this deadline") against this value, and do so silently. Never ask the user what today's date is.`;
+}
+
 //#endregion
 //#region ../runtime/src/routing/onDemandToolsHint.ts
 /**
@@ -1289,11 +1310,11 @@ var AgentLoop = class {
 				return false;
 			}
 		});
-		const systemPrompt = this.#config.toolCallingDisabled ? PLAIN_CHAT_SYSTEM_PROMPT : [
+		const systemPrompt = [this.#config.toolCallingDisabled ? PLAIN_CHAT_SYSTEM_PROMPT : [
 			route.systemPrompt,
 			...externalSystemPrompts,
 			...hasOnDemand ? [ON_DEMAND_TOOLS_HINT] : []
-		].join("\n\n");
+		].join("\n\n"), renderCurrentTimePrompt(startedAt)].filter((part) => part !== "").join("\n\n");
 		const profileMessage = await this.#userProfileMessage(state);
 		state.messages = [
 			{

package/dist/browser.d.ts

@@ -1,6 +1,6 @@
 import { Ct as SkillsLockfile, Et as TrustedKeyStore, H as FileStat, Mt as WebSkillError, N as ArchiveLimits, S as UiBridge, U as FileSystemProvider, _t as SkillManifest, b as RenderResultRequest, c as InteractionResponse, jt as VerifyResult, kt as UnsignedPolicy, l as LlmClient, m as LlmStreamEvent, o as InteractionPolicy, p as LlmResponse, pt as SkillInstallSource, s as InteractionRequest, u as LlmCompleteInput, v as MemoryStore } from "./types-Btpdd1y--BcxQ10Fa.js";
 import { Kt as ScriptExecutionContext, M as DocumentSurfaceHost, R as ExternalSkillProvider, S as BridgeResponse, Un as WebSkillApi, Yn as bridgeError, ct as NetworkPolicy, gn as ToolDefinition, m as ApprovalScope, ot as LinkedDocumentReader, qt as ScriptExecutor, x as BridgeRequest, y as BridgeCapabilities, yn as ToolResult, yr as parseBridgeRequest, z as ExternalToolSource } from "./index-BDyXe-a5.js";
-import { $ as NestedFrameRef, Ct as PagePerceptionPolicy, It as PerceptionScopeInput, Pt as PerceptionResult, Tt as PagePerceptionReader, Xt as SubtreeRejection, ft as PageActionOutcome, gt as PageActionRequest, jt as PerceptionCaptureOptions, kt as PerceivedNode, ut as PageActionExecutor, vt as PageActionScopeInput, yt as PageActionTarget } from "./index-1sQZ4VBN.js";
+import { $ as NestedFrameRef, Ct as PagePerceptionPolicy, It as PerceptionScopeInput, Pt as PerceptionResult, Tt as PagePerceptionReader, Xt as SubtreeRejection, ft as PageActionOutcome, gt as PageActionRequest, jt as PerceptionCaptureOptions, kt as PerceivedNode, ut as PageActionExecutor, vt as PageActionScopeInput, yt as PageActionTarget } from "./index-DQ3-6GFu.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -146,6 +146,32 @@ declare function extractZipWeb(fs: FileSystemProvider, data: Uint8Array, destRoo
 /** WebCrypto sha256（浏览器/Worker 通用；Node 20+ 全局 crypto 同样可用） */
 declare function sha256HexWeb(data: Uint8Array | string): Promise<string>;
 //#endregion
+//#region src/skillManagement/seedSkillsFromHttp.d.ts
+/**
+ * 把随应用发布的内置技能（`public/skills/builtin/*`）抓进技能存储（0.19.0 分册 13）。
+ *
+ * 幂等靠 `stamp`：戳存在即整体跳过，一次请求都不发。每次刷新都重写会覆盖用户
+ * 对内置技能的改动；反过来，改了技能内容却不改戳，已经打开过应用的浏览器永远
+ * 拿不到新内容——戳的递增是接入方的责任（FR-13.1 / §4）。
+ */
+/** 技能目录名 → 该技能的文件清单。HTTP 无法列目录，清单必须显式给出。 */
+type BuiltinSkillManifest = Readonly<Record<string, readonly string[]>>;
+interface SeedSkillsFromHttpOptions {
+  manifest: BuiltinSkillManifest;
+  /** 幂等戳的完整路径，例如 `/skills/builtin/.seeded-v6` */
+  stamp: string;
+  /** 应用的部署前缀（vite 的 `import.meta.env.BASE_URL`）；缺省 `/` */
+  baseUrl?: string;
+  /** HTTP 侧的技能根，相对 `baseUrl`；缺省 `skills/builtin` */
+  sourceRoot?: string;
+  /** 存储侧的技能根；缺省 `/skills/builtin` */
+  targetRoot?: string;
+  /** 覆盖二进制扩展名名单（不含点号，小写） */
+  binaryExtensions?: readonly string[];
+  fetch?: typeof globalThis.fetch;
+}
+declare function seedSkillsFromHttp(fs: FileSystemProvider, options: SeedSkillsFromHttpOptions): Promise<void>;
+//#endregion
 //#region src/executor/workerScriptExecutor.d.ts
 /** 主线程持有的 Worker 最小接口（vitest 可用 loopback 替身） */
 interface WorkerLike {
@@ -583,6 +609,14 @@ interface DomPageActionOptions {
    * 其余动作不用它——它们的文档从元素自带的 `ownerDocument` 取，跨帧时才不会拿错。
    */
   document?: Document;
+  /**
+   * 滚动后等待页面稳定的上限（毫秒，0.18.0 FR-10.6）。
+   * SDK 夹在 `SCROLL_SETTLE_BOUNDS` 之间；不注入即用缺省值。
+   *
+   * **模型无法影响它**：这是装配期参数，工具入参里没有任何相关字段。
+   * 重 ERP 的首屏渲染可能超过缺省上限，宿主据此上调。
+   */
+  scrollSettleMs?: () => number | undefined;
 }
 /**
  * @experimental
@@ -1588,4 +1622,4 @@ declare function watchBlockedResources(host: ViewerBlockedHost, notice: ViewerBl
 /** 提示文案的单一来源；判据直接引用，不各写一份字面量 */
 declare function blockedMessage(origins: readonly string[]): string;
 //#endregion
-export { type BlockedEventLike, type BridgeCapabilities, type BridgeRequest, type BridgeResponse, type BrowserHostBundle, type BrowserHostOptions, type BrowserHostOverrides, BrowserSkillManager, BrowserWorkerScriptExecutor, type CameraAvailability, type CameraOptions, type CameraSession, type CaptureFailure, type CaptureLevel, type CapturePhotoOptions, type CapturedImage, type ChromeBuiltinAvailability, ChromeBuiltinLlmClient, type CompressResult, type ConfiguredLlmClient, DEFAULT_CAMERA_MAX_DIMENSION, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, type DictationAvailability, type DictationOptions, type DictationSession, type DocumentLocationView, type DocumentSurfaceAudit, type DocumentSurfaceOptions, type DomPageActionExecutor, type DomPageActionOptions, type DomPerceptionReader, type DomPerceptionReaderOptions, type FetchLinkedDocumentOptions, type FrameBudget, type FrameDelivery, type FrameDispatcher, type FrameResolveContext, type FrameRouter, type FrameRouterOptions, HOST_PORT_MATRIX, type HandleKind, type HostChatbotAdapterShape, type HostConnectFacadeShape, type HostConsoleBackendShape, type HostKind, type HostSurface, type IframeSandboxOptions, IframeWorkerLike, type InspectHostWiringInput, type LlmClientConfig, type LlmEntryConfig, type MainToWorkerMessage, type OpenDocumentInput, OpfsProvider, type PageAgentHandler, type PageAgentHandlerOptions, type PageAgentReply, type PageAgentRequest, type PageAgentTargetEntry, type PageAgentTransport, type PageDocumentIdentity, type PortApplicability, type PortReport, type PortSpec, type PortStatus, type RemotePageActionExecutorOptions, type RemotePerceptionReaderOptions, type RemoteTargetRegistry, type RemoteTargetRegistryOptions, type RoleHint, SANDBOX_PAGE_SCRIPT_SOURCE, SHARD_SOFT_LIMIT, type SandboxMode, type SerializedError, type TargetResolution, TsTranspiler, type TypeScriptSupportOptions, VIEWER_SANDBOX_TOKENS, type ViewerBlockedHost, type ViewerBlockedNotice, type ViewerBlockedResult, type ViewerCspOptions, type ViewerDocument, type ViewerShellHost, type ViewerShellMount, type ViewerShellResult, WORKER_BOOTSTRAP_SOURCE, type WindowLike, type WorkerEvent, type WorkerFactory, type WorkerLike, type WorkerRequest, WorkerRuntimeClient, type WorkerRuntimeClientDeps, type WorkerRuntimeHostOverrides, type WorkerScopeLike, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, documentKey, explainResolution, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openCamera, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };
+export { type BlockedEventLike, type BridgeCapabilities, type BridgeRequest, type BridgeResponse, type BrowserHostBundle, type BrowserHostOptions, type BrowserHostOverrides, BrowserSkillManager, BrowserWorkerScriptExecutor, type BuiltinSkillManifest, type CameraAvailability, type CameraOptions, type CameraSession, type CaptureFailure, type CaptureLevel, type CapturePhotoOptions, type CapturedImage, type ChromeBuiltinAvailability, ChromeBuiltinLlmClient, type CompressResult, type ConfiguredLlmClient, DEFAULT_CAMERA_MAX_DIMENSION, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, type DictationAvailability, type DictationOptions, type DictationSession, type DocumentLocationView, type DocumentSurfaceAudit, type DocumentSurfaceOptions, type DomPageActionExecutor, type DomPageActionOptions, type DomPerceptionReader, type DomPerceptionReaderOptions, type FetchLinkedDocumentOptions, type FrameBudget, type FrameDelivery, type FrameDispatcher, type FrameResolveContext, type FrameRouter, type FrameRouterOptions, HOST_PORT_MATRIX, type HandleKind, type HostChatbotAdapterShape, type HostConnectFacadeShape, type HostConsoleBackendShape, type HostKind, type HostSurface, type IframeSandboxOptions, IframeWorkerLike, type InspectHostWiringInput, type LlmClientConfig, type LlmEntryConfig, type MainToWorkerMessage, type OpenDocumentInput, OpfsProvider, type PageAgentHandler, type PageAgentHandlerOptions, type PageAgentReply, type PageAgentRequest, type PageAgentTargetEntry, type PageAgentTransport, type PageDocumentIdentity, type PortApplicability, type PortReport, type PortSpec, type PortStatus, type RemotePageActionExecutorOptions, type RemotePerceptionReaderOptions, type RemoteTargetRegistry, type RemoteTargetRegistryOptions, type RoleHint, SANDBOX_PAGE_SCRIPT_SOURCE, SHARD_SOFT_LIMIT, type SandboxMode, type SeedSkillsFromHttpOptions, type SerializedError, type TargetResolution, TsTranspiler, type TypeScriptSupportOptions, VIEWER_SANDBOX_TOKENS, type ViewerBlockedHost, type ViewerBlockedNotice, type ViewerBlockedResult, type ViewerCspOptions, type ViewerDocument, type ViewerShellHost, type ViewerShellMount, type ViewerShellResult, WORKER_BOOTSTRAP_SOURCE, type WindowLike, type WorkerEvent, type WorkerFactory, type WorkerLike, type WorkerRequest, WorkerRuntimeClient, type WorkerRuntimeClientDeps, type WorkerRuntimeHostOverrides, type WorkerScopeLike, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, documentKey, explainResolution, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openCamera, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, seedSkillsFromHttp, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };

package/dist/browser.js

@@ -2,11 +2,11 @@ import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, i as buildCatalog, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, n as SkillDiscovery, o as readResponseWithLimit, p as exportSkills, t as validateSkills, u as detectSkillArchiveShapeFromFs, w as readSkillSignature, y as isValidSkillName } from "./skill-CAJMsLod.js";
 import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot } from "./pathSecurity-B1owvJAF.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, g as FsRunSnapshotStore, l as parseBridgeRequest, nt as ProgressiveRouter, p as AgentLoop, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-CBPnGPIm.js";
-import { a as GoogleGenAiClient, o as AnthropicClient, s as OpenAiCompatibleClient, t as MockLlmClient } from "./llm-B7lLH0ZI.js";
+import { a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, g as FsRunSnapshotStore, l as parseBridgeRequest, nt as ProgressiveRouter, p as AgentLoop, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-Bbh_Apwg.js";
+import { a as GoogleGenAiClient, o as AnthropicClient, s as OpenAiCompatibleClient, t as MockLlmClient } from "./llm-eIQNO9tr.js";
 import { n as normalizeToolContent, t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
-import { t as createWebSkillApi } from "./webSkillApi-Ce2OO5S5.js";
-import { a as frameLabel, i as toFrameScopes, o as frameSteps, r as toActionFrameScopes } from "./types-BuacBov_.js";
+import { t as createWebSkillApi } from "./webSkillApi-CsvA69qk.js";
+import { a as frameLabel, i as toFrameScopes, o as frameSteps, r as toActionFrameScopes } from "./types-DOJI5YC3.js";
 
 //#region ../browser/src/fs/featureDetection.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */
@@ -927,6 +927,72 @@ var BrowserSkillManager = class {
 	}
 };
 
+//#endregion
+//#region ../browser/src/skillManagement/seedSkillsFromHttp.ts
+/** 按扩展名走 `writeBinary` 的默认名单（FR-13.2） */
+const DEFAULT_BINARY_EXTENSIONS = [
+	"png",
+	"jpg",
+	"jpeg",
+	"gif",
+	"webp",
+	"ico",
+	"woff",
+	"woff2",
+	"ttf",
+	"otf",
+	"pdf"
+];
+const trimTrailingSlash = (value) => value.replace(/\/+$/, "");
+const joinUrl = (baseUrl, path) => `${baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`}${path.replace(/^\/+/, "")}`;
+const extensionOf = (file) => {
+	const dot = file.lastIndexOf(".");
+	return dot === -1 ? "" : file.slice(dot + 1).toLowerCase();
+};
+/**
+* 清掉上一版留在存储里、这一版清单已不再包含的文件。
+* 只照清单重抓不够：删掉的脚本会以旧内容继续注册成工具，而 SKILL.md 已经不再提它，
+* 模型拿到的是一份自相矛盾的技能。作用域严格限定在本技能目录内（FR-13.4）。
+*/
+async function pruneStaleFiles(fs, skillRoot, files) {
+	const keep = new Set(files);
+	const walk = async (dir, prefix) => {
+		for (const entry of await fs.list(dir).catch(() => [])) {
+			const name = entry.path.slice(entry.path.lastIndexOf("/") + 1);
+			const rel = prefix === "" ? name : `${prefix}/${name}`;
+			if (entry.type === "directory") await walk(`${dir}/${name}`, rel);
+			else if (!keep.has(rel)) await fs.remove(`${dir}/${name}`).catch(() => void 0);
+		}
+	};
+	await walk(skillRoot, "");
+}
+async function seedSkillsFromHttp(fs, options) {
+	if (await fs.exists(options.stamp)) return;
+	const baseUrl = options.baseUrl ?? "/";
+	const sourceRoot = trimTrailingSlash(options.sourceRoot ?? "skills/builtin");
+	const targetRoot = trimTrailingSlash(options.targetRoot ?? "/skills/builtin");
+	const binary = new Set(options.binaryExtensions ?? DEFAULT_BINARY_EXTENSIONS);
+	const fetchImpl = options.fetch ?? globalThis.fetch;
+	for (const [skill, files] of Object.entries(options.manifest)) {
+		const skillRoot = `${targetRoot}/${skill}`;
+		await fs.mkdir(skillRoot).catch(() => void 0);
+		for (const file of files) {
+			const url = joinUrl(baseUrl, `${sourceRoot}/${skill}/${file}`);
+			const response = await fetchImpl(url);
+			if (!response.ok) throw new Error(`Builtin skill asset missing: ${url} (HTTP ${response.status})`);
+			if (binary.has(extensionOf(file))) {
+				await fs.writeBinary(`${skillRoot}/${file}`, new Uint8Array(await response.arrayBuffer()));
+				continue;
+			}
+			const text = await response.text();
+			if (file === "SKILL.md" && !text.startsWith("---")) throw new Error(`Builtin skill asset is not a SKILL.md contract: ${url}`);
+			await fs.writeText(`${skillRoot}/${file}`, text);
+		}
+		await pruneStaleFiles(fs, skillRoot, files);
+	}
+	await fs.writeText(options.stamp, (/* @__PURE__ */ new Date()).toISOString());
+}
+
 //#endregion
 //#region ../browser/src/executor/iframeSandbox.ts
 const ENVELOPE = "__webskill_sandbox__";
@@ -3198,6 +3264,31 @@ function documentKey(view) {
 //#endregion
 //#region ../browser/src/dom/pageAction.ts
 const FILLABLE_TAGS = /* @__PURE__ */ new Set(["INPUT", "TEXTAREA"]);
+/**
+* 滚动稳定化的等待边界（毫秒）；宿主注入值被夹在这之间。
+* 刻意**不导出**：本册只登记了一处新增公开契约（`scrollSettleMs`），
+* 多导出一个常量就是多一处要维护的公开面，而宿主注入超界值本来就会被夹住。
+*/
+const SCROLL_SETTLE_BOUNDS = {
+	min: 300,
+	max: 5e3,
+	default: 800
+};
+/**
+* 滚动后等待渲染的两个时长。
+*
+* 只有「静默窗口」是不够的，而且这里的顺序容易搞反：虚拟列表在 `scroll` 事件后要经过
+* 一次 rAF、甚至一段节流才**开始**重渲染，那之前观察器一直是静默的。
+* 若把「一直没动静」直接判成「渲染完了」，就会在渲染开始之前返回，读到滚动前的旧行——
+* 而且页面越慢越容易中招，正好是最需要滚动的那类页面。
+*
+* 所以两段分开：**还没见过任何变更**时按「等首次变更」的宽限期算，
+* 见过之后才按静默窗口算。宽限期取 250ms 是为了盖住常见的 100ms 节流加一帧渲染。
+*/
+const SCROLL_SETTLE_FIRST_CHANGE_MS = 250;
+const SCROLL_SETTLE_QUIET_MS = 80;
+/** 两屏之间的重叠身位（像素）。必须大于 0，否则横跨视口边界的那一行会在两次感知之间消失 */
+const SCROLL_OVERLAP_PX = 64;
 /** 只看显式声明，不看尺寸：jsdom 有 getComputedStyle 但没有布局 */
 function hidden(element) {
 	if (element.hasAttribute("hidden")) return true;
@@ -3445,6 +3536,75 @@ function attachFiles(input, files) {
 	input.dispatchEvent(new Event("input", { bubbles: true }));
 	input.dispatchEvent(new Event("change", { bubbles: true }));
 }
+const scrolls = (overflow) => overflow === "auto" || overflow === "scroll" || overflow === "overlay";
+/**
+* 滚动落点（FR-10.3）：从被指认元素**自身**起沿祖先链上溯，取第一个真正能滚的容器。
+*
+* 判据是两个条件的**合取**，第二个不能省：现代布局里 `overflow-y: auto` 的祖先
+* 常有好几层（卡片、面板、栅格），其中绝大多数内容并没有溢出。只看 overflow 会命中
+* 最近的那个 `auto`，往它的 `scrollTop` 写值没有任何效果——表现是操作报成功、
+* 页面没动、也没有新行，即向模型报了一次假成功。
+*
+* 判据里不含任何组件库特征（class 名、data 属性、组件实例）：这是「通用」二字的判据。
+*
+* 根滚动容器单独兜底而不是靠链上命中：`documentElement` 的 `overflow-y` 计算值
+* 通常是 `visible`（滚动被传播到视口），不会被上面的判据命中，但文档确实可滚。
+* 顺序必须是先链后兜底——嵌套场景下先命中的必须是内层列表。
+*/
+function scrollTargetOf(element) {
+	const doc = element.ownerDocument;
+	const view = doc.defaultView;
+	if (view === null) return void 0;
+	for (let node = element; node !== null; node = node.parentElement) {
+		const style = view.getComputedStyle(node);
+		if (scrolls(style.overflowY) && node.scrollHeight > node.clientHeight) return {
+			container: node,
+			isRoot: false
+		};
+	}
+	const root = doc.scrollingElement ?? doc.documentElement;
+	if (root !== null && root.scrollHeight > root.clientHeight) return {
+		container: root,
+		isRoot: true
+	};
+}
+function clampScrollSettleMs(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return SCROLL_SETTLE_BOUNDS.default;
+	return Math.min(Math.max(Math.round(value), SCROLL_SETTLE_BOUNDS.min), SCROLL_SETTLE_BOUNDS.max);
+}
+/**
+* 等落点容器的子树安静下来（FR-10.6）。
+*
+* 观察器必须在**写 `scrollTop` 之前**挂上：写值到第一次变更之间不能有空档，
+* 否则渲染快的页面会在挂上观察器之前就完成变更，然后被静默窗口判成「没动静」。
+*
+* 只观察落点子树，不观察整个文档：ERP 页面上到处是无关的轮询与徽标刷新，
+* 观察全文档等于永远等不到静默。
+*/
+function watchQuiescence(container) {
+	const Observer = container.ownerDocument.defaultView?.MutationObserver;
+	let lastChange;
+	const observer = Observer === void 0 ? void 0 : new Observer(() => lastChange = Date.now());
+	observer?.observe(container, {
+		childList: true,
+		subtree: true
+	});
+	return { settle: async (budgetMs) => {
+		const started = Date.now();
+		try {
+			for (;;) {
+				await new Promise((resolve) => setTimeout(resolve, 20));
+				const now = Date.now();
+				if (now - started >= budgetMs) return;
+				if (lastChange === void 0) {
+					if (now - started >= SCROLL_SETTLE_FIRST_CHANGE_MS) return;
+				} else if (now - lastChange >= SCROLL_SETTLE_QUIET_MS) return;
+			}
+		} finally {
+			observer?.disconnect();
+		}
+	} };
+}
 /** @experimental */
 function createDomPageActionExecutor(options) {
 	const { reader } = options;
@@ -3501,6 +3661,40 @@ function createDomPageActionExecutor(options) {
 			documentUrl: view.location.href
 		};
 	};
+	/**
+	* 滚动一屏（0.18.0 分册 10）。
+	*
+	* 不走 `done()`：滚动不会导航、也不会打开模态，套那段等待只是白等一个预算。
+	* 稳定化是滚动自己的收尾，见 `watchQuiescence`。
+	*/
+	const scrollRegion = async (element, target, direction) => {
+		const found = scrollTargetOf(element);
+		if (found === void 0) return {
+			ok: false,
+			target,
+			reason: "This area cannot be scrolled: nothing around this element has a scrollable region."
+		};
+		const { container, isRoot } = found;
+		if (!isRoot && !reader.inActionScope(container)) return {
+			ok: false,
+			target,
+			reason: "The scrollable region around this element is outside the actionable scope."
+		};
+		const step = Math.max(container.clientHeight - SCROLL_OVERLAP_PX, Math.round(container.clientHeight / 2), 1);
+		const before = container.scrollTop;
+		const watch = watchQuiescence(container);
+		container.scrollTop = direction === "down" ? before + step : before - step;
+		await watch.settle(clampScrollSettleMs(options.scrollSettleMs?.()));
+		const after = container.scrollTop;
+		return {
+			ok: true,
+			target,
+			scrolled: {
+				atEnd: direction === "down" ? after >= container.scrollHeight - container.clientHeight - 1 : after <= 0,
+				movedBy: Math.abs(after - before)
+			}
+		};
+	};
 	const execute = async (request) => {
 		if (request.action === "back") return await goBack();
 		const element = reader.resolve(request.ref);
@@ -3571,6 +3765,10 @@ function createDomPageActionExecutor(options) {
 			};
 		}
 		if (request.action === "set") return await done(setToggle(element, request.value ?? "", target));
+		if (request.action === "scroll") {
+			if (request.value !== "down" && request.value !== "up") return fail("Use \"down\" or \"up\".");
+			return await scrollRegion(element, target, request.value);
+		}
 		if (request.action === "attach") {
 			const files = await options.pickFiles?.();
 			if (files === void 0 || files.length === 0) return {
@@ -5591,4 +5789,4 @@ function originOf(blockedURI) {
 }
 
 //#endregion
-export { BrowserSkillManager, BrowserWorkerScriptExecutor, ChromeBuiltinLlmClient, DEFAULT_CAMERA_MAX_DIMENSION, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, HOST_PORT_MATRIX, IframeWorkerLike, OpfsProvider, SANDBOX_PAGE_SCRIPT_SOURCE, SHARD_SOFT_LIMIT, TsTranspiler, VIEWER_SANDBOX_TOKENS, WORKER_BOOTSTRAP_SOURCE, WorkerRuntimeClient, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, documentKey, explainResolution, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openCamera, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };
+export { BrowserSkillManager, BrowserWorkerScriptExecutor, ChromeBuiltinLlmClient, DEFAULT_CAMERA_MAX_DIMENSION, DEFAULT_FRAME_BUDGET, DEFAULT_MAX_VIEWER_PAYLOAD_BYTES, DOCUMENT_SURFACE_AUDIT_EVENT, DOCX_UNEXTRACTED, HOST_PORT_MATRIX, IframeWorkerLike, OpfsProvider, SANDBOX_PAGE_SCRIPT_SOURCE, SHARD_SOFT_LIMIT, TsTranspiler, VIEWER_SANDBOX_TOKENS, WORKER_BOOTSTRAP_SOURCE, WorkerRuntimeClient, WorkerUiBridge, XLSX_UNEXTRACTED, blockedMessage, bridgeError, captureElementImage, capturePhoto, checkCameraAvailability, checkDictationAvailability, compressImageToBudget, createBrowserChatbotHost, createDocumentSurfaceHost, createDomPageActionExecutor, createDomPerceptionReader, createEncryptedMemoryStore, createFetchLinkedDocumentReader, createFrameRouter, createIframeWorker, createLlmClient, createPageAgentHandler, createRemotePageActionExecutor, createRemotePerceptionReader, createRemoteTargetRegistry, deleteMemoryEncryptionKey, documentKey, explainResolution, extractDocxText, extractXlsxText, extractZipWeb, generateMemoryEncryptionKey, inspectHostWiring, installWebSkillNavigator, isCapturableElement, isCaptureFailure, isEncryptedMemoryValue, isOpfsAvailable, missingPorts, openCamera, openDocumentSurface, openMemoryEncryptionKey, parseBridgeRequest, parseMainMessage, parseWorkerEvent, probeChromeBuiltinAvailability, seedSkillsFromHttp, sha256HexWeb, startDictation, startViewerShell, startWorkerRuntimeHost, viewerCspHeader, watchBlockedResources };

package/dist/governance.js

@@ -1,7 +1,7 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
 import { y as isValidSkillName } from "./skill-CAJMsLod.js";
 import { a as atomicWriteText, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
-import { d as partsToText, p as textParts } from "./llm-B7lLH0ZI.js";
+import { d as partsToText, p as textParts } from "./llm-eIQNO9tr.js";
 import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-CwciaqCU.js";
 
 //#region ../governance/src/candidate/candidateNormalizer.ts

package/dist/{index-1sQZ4VBN.d.ts → index-DQ3-6GFu.d.ts}

@@ -1119,15 +1119,15 @@ type PageActionScopeInput = PageActionScope | {
  */
 declare function toActionFrameScopes(scope: PageActionScopeInput): readonly ActionFrameScope[];
 /**
- * 本版的操作集（FR-25.1 / 0.16.0 FR-13.6）。拖拽、滚动仍不在内；
+ * 本版的操作集（FR-25.1 / 0.16.0 FR-13.6 / 0.18.0 FR-10.1）。拖拽仍不在内（D64）；
  * 导航只有 `back` 一个，且它**不接受地址**——可达面被浏览器历史封死（SC-1）。
  *
- * `select`/`set`/`attach` 与既有三个走**同一条** policy 路径，
+ * `select`/`set`/`attach`/`scroll` 与既有几个走**同一条** policy 路径，
  * 范围白名单、逐次确认、审计三条硬约束因此天然覆盖到它们——
- * 前提是新动作不绕过 policy 直接调执行器（AC-25.4 守这一点）。
+ * 前提是新动作不绕过 policy 直调执行器（AC-25.4 守这一点）。
  * @experimental
  */
-declare const PAGE_ACTION_KINDS: readonly ["click", "fill", "submit", "select", "set", "attach", "back"];
+declare const PAGE_ACTION_KINDS: readonly ["click", "fill", "submit", "select", "set", "attach", "scroll", "back"];
 type PageActionKind = (typeof PAGE_ACTION_KINDS)[number];
 /**
  * `back` 的目标占位（0.16.0 分册 13 §4.1）。
@@ -1145,8 +1145,8 @@ interface PageActionRequest {
   action: PageActionKind;
   /**
    * `fill` 填入的文本；`select` 要选中的选项可访问名；
-   * `set` 的目标态（`'true'` | `'false'`）。`attach` 不用它——
-   * 文件**始终由用户在确认卡里选**，Agent 传不进本地路径（FR-25.5）。
+   * `set` 的目标态（`'true'` | `'false'`）；`scroll` 的方向（`'down'` | `'up'`）。
+   * `attach` 不用它——文件**始终由用户在确认卡里选**，Agent 传不进本地路径（FR-25.5）。
    */
   value?: string;
 }
@@ -1197,6 +1197,17 @@ interface PageActionOutcome {
    * 带 `admitted: false` 即开出来了但没接进来（例如工作集触顶）。
    */
   openedTab?: OpenedTabSignal;
+  /**
+   * 本次滚动的位移与边界状态（0.18.0 分册 10 · FR-10.7）。
+   * 非 `scroll` 动作**不带**该字段，与 `navigated` 同口径。
+   *
+   * 两个值都在**稳定化之后**回读：虚拟列表加载新行会改变 `scrollHeight`，
+   * 用滚动前的值算 `atEnd` 会提前报到底，模型于是停在半路。
+   */
+  scrolled?: {
+    atEnd: boolean;
+    movedBy: number;
+  };
   /** 失败原因（英文） */
   reason?: string;
 }
@@ -1247,6 +1258,16 @@ interface PageActionRecord {
   noop?: boolean;
   /** 非密码类控件填入的值；密码类控件**整个字段不存在** */
   value?: string;
+  /**
+   * 本次滚动的方向与实际位移（0.18.0 FR-10.8）；非 `scroll` 动作不带。
+   * 位移要进留痕：只记「滚了」而不记「滚了多少」，事后分不出
+   * 「滚到底了」与「根本没滚动」。
+   */
+  scrolled?: {
+    direction: 'down' | 'up';
+    movedBy: number;
+    atEnd: boolean;
+  };
   reason?: string;
 }
 //#endregion

package/dist/{index-CaLsVI-m.d.ts → index-ad11wflI.d.ts}

@@ -82,6 +82,8 @@ interface SurfaceFormTexts {
   useSuggestion: string;
   /** `OpenDocument` 按钮的缺省文案（0.15.0 分册 13；技能的 `props.label` 优先） */
   openDocument: string;
+  /** select / multi-select 拿到空选项时的说明（代替一个点不动的空下拉） */
+  noOptions: string;
 }
 /** 可复用的部分取自 DEFAULT_INTERACTION_TEXTS，不另抄一份（AC-G10） */
 declare const DEFAULT_SURFACE_FORM_TEXTS: SurfaceFormTexts;
@@ -620,6 +622,18 @@ declare function normalizeColumnWidths(raw: readonly number[] | undefined, colum
  */
 declare function resolveColumnWidths(weights: readonly number[], available: number, minWidth: number): number[];
 //#endregion
+//#region src/catalog/fieldOptions.d.ts
+interface FieldOption {
+  label: string;
+  value: string | number;
+}
+/**
+ * 模型给出的选项形状五花八门：裸标量（`['January', 'February']`）、只有 `label`、
+ * 只有 `value`。整项丢掉的代价是下拉变空，必填字段再也交不出去，
+ * 所以能补的一律补齐；补不出标签的（既无 label 又无 value）才丢。
+ */
+declare function normalizeFieldOptions(raw: unknown): FieldOption[];
+//#endregion
 //#region src/catalog/presets.d.ts
 /** 场景预设名（FR-6.4） */
 type UiPresetName = 'charts' | 'cards' | 'dashboards' | 'slides' | 'reports';
@@ -969,4 +983,4 @@ interface LoadedOpenUiPeers {
  */
 declare function loadOpenUiPeers(): Promise<LoadedOpenUiPeers>;
 //#endregion
-export { UiActionDef as $, qualifyFieldName as $t, EvaluateFieldConditionOptions as A, buildA2uiCatalogDefinition as At, OpenUiRendererProps as B, evaluateFieldCondition as Bt, DEFAULT_INTERACTION_TEXTS as C, WEBSKILL_STYLES_CSS as Ct, DOCUMENT_COMPONENTS as D, a2uiComponentSchema as Dt, DESCRIBE_UI_PRESET_TOOL as E, ZodRuntime as Et, InteractionTexts as F, collectSpecActions as Ft, SPEC_TABLE_MIN_COLUMN_WIDTH as G, gaugePercent as Gt, PLANNED_INCREMENT as H, fromA2uiSurfaceAction as Ht, JsonRenderSpec as I, collectValues as It, SurfaceHostControlTexts as J, loadOpenUiPeers as Jt, SpecColumnMeta as K, interactionToFormModel as Kt, LoadedOpenUiPeers as L, createUiCatalogToolSource as Lt, FieldConditionResult as M, chartToTable as Mt, FormModel as N, collectFormScopes as Nt, DocumentComponentName as O, a2uiComponentShapes as Ot, InteractionSpecLabels as P, collectScopedValues as Pt, UI_PRESET_NAMES as Q, normalizeColumnWidths as Qt, MAX_CONDITION_DEPTH as R, defineUiCatalog as Rt, DEFAULT_CHART_FONT_SIZES as S, WEBSKILL_A2UI_CATALOG_ID as St, DEFAULT_SURFACE_HOST_CONTROL_TEXTS as T, WebFormBridge as Tt, RENDER_UI_TOOL as U, fromUiSurfaceActionDispatch as Ut, OpenUiRuntime as V, fromA2uiSpecAction as Vt, SPEC_TABLE_MIN_COLUMN_VAR as W, fromVercelToolResult as Wt, UI_CATALOG_PROMPT_BUDGET_BYTES as X, mountEchart as Xt, UI_CATALOG_GROUPS as Y, loadWebSkillLitCatalog as Yt, UI_PRESETS as Z, mountViewerComponents as Zt, CHART_PALETTE as _, uiCatalog as _n, VIEWER_PROPS_ATTR as _t, A2UI_SURFACE_ACTION as a, resolveColumnWidths as an, UiFormScope as at, ColumnWidthsRejection as b, ViewerComponentsHandle as bt, A2uiCatalogDefinition as c, resolveSurfaceHostControlTexts as cn, UiSpecDegradation as ct, A2uiMessage as d, toA2uiSurfaceAction as dn, UiSpecSanitization as dt, renderBlocks as en, UiCatalog as et, A2uiSpecActionEvent as f, toEchartsOption as fn, UiSpecValidation as ft, CATALOG_SCHEMA_MAX as g, toVercelToolInvocation as gn, VIEWER_FALLBACK_ATTR as gt, CATALOG_PROMPT_MAX as h, toUiSurfaceActionDispatch as hn, VIEWER_COMPONENT_ATTR as ht, A2UI_SPEC_FORM_PATH as i, resolveChartFontSizes as in, UiComponentDef as it, FieldCondition as j, chartSpecFromProps as jt, EchartHandle as k, applySuggestion as kt, A2uiCatalogHandle as l, shapeInteractionValue as ln, UiSpecDegradationCode as lt, CATALOG_BUDGET_STAGE as m, toOpenUiSpecLang as mn, VERCEL_INTERACTION_TOOL_NAME as mt, A2UI_COMMON_TYPES as n, renderMiniMarkdown as nn, UiCatalogPromptOptions as nt, A2UI_VERSION as o, resolveInteractionTexts as on, UiPreset as ot, A2uiSpecMessageOptions as p, toJsonRenderSpec as pn, UiSurfaceActionDispatch as pt, SurfaceFormTexts as q, interactionToUiSpec as qt, A2UI_SPEC_ACTION as r, renderRenderResult as rn, UiCatalogToolSourceOptions as rt, A2uiCatalogComponent as s, resolveSurfaceFormTexts as sn, UiPresetName as st, A2UI_BASIC_CATALOG_ID as t, renderMiniChart as tn, UiCatalogInput as tt, A2uiComponentShape as u, toA2uiSpecMessages as un, UiSpecIssue as ut, ChartFontSizes as v, uiPreset as vn, VercelToolInvocation as vt, DEFAULT_SURFACE_FORM_TEXTS as w, WEBSKILL_SURFACE_ACTION as wt, ControlModel as x, ViewerComponentsOptions as xt, CollectedValues as y, VercelUiBridge as yt, NormalizedColumnWidths as z, ensureStyles as zt };
+export { UI_PRESET_NAMES as $, normalizeColumnWidths as $t, EvaluateFieldConditionOptions as A, applySuggestion as At, NormalizedColumnWidths as B, ensureStyles as Bt, DEFAULT_INTERACTION_TEXTS as C, WEBSKILL_A2UI_CATALOG_ID as Ct, DOCUMENT_COMPONENTS as D, ZodRuntime as Dt, DESCRIBE_UI_PRESET_TOOL as E, WebFormBridge as Et, InteractionSpecLabels as F, collectScopedValues as Ft, SPEC_TABLE_MIN_COLUMN_VAR as G, fromVercelToolResult as Gt, OpenUiRuntime as H, fromA2uiSpecAction as Ht, InteractionTexts as I, collectSpecActions as It, SurfaceFormTexts as J, interactionToUiSpec as Jt, SPEC_TABLE_MIN_COLUMN_WIDTH as K, gaugePercent as Kt, JsonRenderSpec as L, collectValues as Lt, FieldConditionResult as M, chartSpecFromProps as Mt, FieldOption as N, chartToTable as Nt, DocumentComponentName as O, a2uiComponentSchema as Ot, FormModel as P, collectFormScopes as Pt, UI_PRESETS as Q, mountViewerComponents as Qt, LoadedOpenUiPeers as R, createUiCatalogToolSource as Rt, DEFAULT_CHART_FONT_SIZES as S, ViewerComponentsOptions as St, DEFAULT_SURFACE_HOST_CONTROL_TEXTS as T, WEBSKILL_SURFACE_ACTION as Tt, PLANNED_INCREMENT as U, fromA2uiSurfaceAction as Ut, OpenUiRendererProps as V, evaluateFieldCondition as Vt, RENDER_UI_TOOL as W, fromUiSurfaceActionDispatch as Wt, UI_CATALOG_GROUPS as X, loadWebSkillLitCatalog as Xt, SurfaceHostControlTexts as Y, loadOpenUiPeers as Yt, UI_CATALOG_PROMPT_BUDGET_BYTES as Z, mountEchart as Zt, CHART_PALETTE as _, toUiSurfaceActionDispatch as _n, VIEWER_FALLBACK_ATTR as _t, A2UI_SURFACE_ACTION as a, renderRenderResult as an, UiComponentDef as at, ColumnWidthsRejection as b, uiPreset as bn, VercelUiBridge as bt, A2uiCatalogDefinition as c, resolveInteractionTexts as cn, UiPresetName as ct, A2uiMessage as d, shapeInteractionValue as dn, UiSpecIssue as dt, normalizeFieldOptions as en, UiActionDef as et, A2uiSpecActionEvent as f, toA2uiSpecMessages as fn, UiSpecSanitization as ft, CATALOG_SCHEMA_MAX as g, toOpenUiSpecLang as gn, VIEWER_COMPONENT_ATTR as gt, CATALOG_PROMPT_MAX as h, toJsonRenderSpec as hn, VERCEL_INTERACTION_TOOL_NAME as ht, A2UI_SPEC_FORM_PATH as i, renderMiniMarkdown as in, UiCatalogToolSourceOptions as it, FieldCondition as j, buildA2uiCatalogDefinition as jt, EchartHandle as k, a2uiComponentShapes as kt, A2uiCatalogHandle as l, resolveSurfaceFormTexts as ln, UiSpecDegradation as lt, CATALOG_BUDGET_STAGE as m, toEchartsOption as mn, UiSurfaceActionDispatch as mt, A2UI_COMMON_TYPES as n, renderBlocks as nn, UiCatalogInput as nt, A2UI_VERSION as o, resolveChartFontSizes as on, UiFormScope as ot, A2uiSpecMessageOptions as p, toA2uiSurfaceAction as pn, UiSpecValidation as pt, SpecColumnMeta as q, interactionToFormModel as qt, A2UI_SPEC_ACTION as r, renderMiniChart as rn, UiCatalogPromptOptions as rt, A2uiCatalogComponent as s, resolveColumnWidths as sn, UiPreset as st, A2UI_BASIC_CATALOG_ID as t, qualifyFieldName as tn, UiCatalog as tt, A2uiComponentShape as u, resolveSurfaceHostControlTexts as un, UiSpecDegradationCode as ut, ChartFontSizes as v, toVercelToolInvocation as vn, VIEWER_PROPS_ATTR as vt, DEFAULT_SURFACE_FORM_TEXTS as w, WEBSKILL_STYLES_CSS as wt, ControlModel as x, ViewerComponentsHandle as xt, CollectedValues as y, uiCatalog as yn, VercelToolInvocation as yt, MAX_CONDITION_DEPTH as z, defineUiCatalog as zt };