@webskill/sdk 0.2.3 → 0.2.5

package/dist/{dist-BJobG0i-.js → dist-DNSG9FqC.js}

@@ -1,4 +1,4 @@
-import { u as WebSkillError } from "./dist-D0saNPi_.js";
+import { u as WebSkillError } from "./dist-BQzncxXg.js";
 
 //#region ../ui/dist/index.js
 /** 提交值按请求类型归形（WebFormBridge 与框架组件库共享单一来源） */
@@ -78,8 +78,16 @@ function interactionToFormModel(request) {
 }
 const isEmpty = (v) => v === void 0 || v === "";
 /**
+* 控件名 → 属性选择器：优先 CSS.escape（标识符形式，免引号转义）；
+* 无 CSS.escape 的环境退化为引号包裹 + 转义反斜杠/双引号（防选择器注入崩溃）
+*/
+function controlSelector(name) {
+	if (typeof CSS !== "undefined" && typeof CSS.escape === "function") return `[data-webskill-control=${CSS.escape(name)}]`;
+	return `[data-webskill-control="${name.replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"]`;
+}
+/**
 * 严格类型化控件值收集：
-* - number 空串 → undefined（非 0）
+* - number 空串 → undefined（非 0）；非数值输入（NaN）按缺失处理（required 时入 missingRequired）
 * - select 用 option 值本身经 JSON 编码比对命中（对象值可正确命中）
 * - required 空值列入 missingRequired（由调用方阻止提交并标记）
 */
@@ -87,13 +95,17 @@ function collectValues(controls, container) {
 	const values = {};
 	const missingRequired = [];
 	for (const control of controls) {
-		const el = container.querySelector(`[data-webskill-control="${control.name}"]`);
+		const el = container.querySelector(controlSelector(control.name));
 		let value;
 		if (el === null) value = void 0;
 		else if (control.control === "boolean") value = el.checked;
 		else if (control.control === "number") {
 			const raw = el.value.trim();
-			value = raw === "" ? void 0 : Number(raw);
+			if (raw === "") value = void 0;
+			else {
+				const n = Number(raw);
+				value = Number.isNaN(n) ? void 0 : n;
+			}
 		} else if (control.control === "select") {
 			const attr = el.value;
 			const hit = control.options?.find((o) => JSON.stringify(o.value) === attr);
@@ -736,12 +748,15 @@ var VercelUiBridge = class {
 * - 每行一条语句 `identifier = Expression`，`root = Component(...)` 为入口
 * - 组件调用参数为位置参数；字符串双引号反斜杠转义
 * - 组件词汇（与应用 Library 约定）：Form(title, children)、
+*   Text(content)（纯展示文本，authorize 的能力描述用）、
 *   TextField(name, label, required?, defaultValue?)、NumberField、BooleanField(name, label, default?)、
 *   SelectField(name, label, options)、SubmitButton(label, actionType, requestId)、
 *   CancelButton(label, actionType, requestId)
 */
 const OPENUI_SUBMIT_ACTION = "webskill:submit";
 const OPENUI_CANCEL_ACTION = "webskill:cancel";
+/** authorize 的 Allow 专用动作（提交即批准 → value:true；Deny 走 cancel → cancelled:true） */
+const OPENUI_AUTHORIZE_ACTION = "webskill:authorize";
 const str = (s) => JSON.stringify(s);
 const val = (v) => JSON.stringify(v ?? null);
 function fieldStatements(fields) {
@@ -808,18 +823,19 @@ function toOpenUiLang(request) {
 			break;
 		case "authorize":
 			title = "Authorization required";
-			fields = [{
-				name: "approved",
-				label: request.message,
-				control: "boolean",
-				defaultValue: false
-			}];
+			fields = [];
 			break;
 	}
 	lines.push(...fieldStatements(fields));
 	const children = fields.map((_, i) => `f${i}`);
-	lines.push(`submit = SubmitButton("Submit", ${str(OPENUI_SUBMIT_ACTION)}, ${str(request.id)})`);
-	lines.push(`cancel = CancelButton("Cancel", ${str(OPENUI_CANCEL_ACTION)}, ${str(request.id)})`);
+	const isAuthorize = request.type === "authorize";
+	if (isAuthorize) {
+		lines.push(`message = Text(${str(request.message)})`);
+		children.push("message");
+	}
+	const submitAction = isAuthorize ? OPENUI_AUTHORIZE_ACTION : OPENUI_SUBMIT_ACTION;
+	lines.push(`submit = SubmitButton(${str(isAuthorize ? "Allow" : "Submit")}, ${str(submitAction)}, ${str(request.id)})`);
+	lines.push(`cancel = CancelButton(${str(isAuthorize ? "Deny" : "Cancel")}, ${str(OPENUI_CANCEL_ACTION)}, ${str(request.id)})`);
 	lines.push(`root = Form(${val(title)}, [${[
 		...children,
 		"submit",
@@ -838,6 +854,10 @@ function fromOpenUiAction(action) {
 		id,
 		cancelled: true
 	};
+	if (a.type === "webskill:authorize") return {
+		id,
+		value: true
+	};
 	if (a.type === "webskill:submit") {
 		const formState = a.formState;
 		if (formState) return {
@@ -1002,20 +1022,70 @@ function toA2uiMessages(request) {
 	return messages;
 }
 /**
-* A2UI client→server action 事件 → InteractionResponse
+* 按 InteractionRequest.type 解码提交值（绑定模型原样回传的是表单对象）：
+* confirm 仅 confirmed===true 批准；select 还原原始 option 值（非字符串值经 JSON 编码比对）；
+* form 的 number 字段转 number（NaN 保留原值）；ask 取 answer；authorize 提交即批准。
+* 纯转换器：任何直接使用 fromA2uiAction 的消费者都应经此拿到正确类型。
+* @experimental
+*/
+function decodeInteractionResponse(request, response) {
+	if (response.cancelled) return response;
+	const values = response.value;
+	switch (request.type) {
+		case "confirm": return {
+			...response,
+			value: values?.confirmed === true
+		};
+		case "ask": return {
+			...response,
+			value: values?.answer
+		};
+		case "select": {
+			const raw = values?.selected;
+			const option = request.options.find((o) => o.value === raw || JSON.stringify(o.value) === raw);
+			return {
+				...response,
+				value: option ? option.value : raw
+			};
+		}
+		case "form": {
+			if (typeof values !== "object" || values === null) return response;
+			const out = { ...values };
+			for (const field of request.fields) if (field.type === "number" && out[field.name] !== void 0) {
+				const n = Number(out[field.name]);
+				if (!Number.isNaN(n)) out[field.name] = n;
+			}
+			return {
+				...response,
+				value: out
+			};
+		}
+		case "authorize": return {
+			...response,
+			value: true
+		};
+		default: return response;
+	}
+}
+/**
+* A2UI client→server action 事件 → InteractionResponse。
+* 传入 request 时按类型解码提交值（见 decodeInteractionResponse）。
 * @experimental
 */
-function fromA2uiAction(event) {
+function fromA2uiAction(event, request) {
 	const e = event ?? {};
 	const id = String(e.context?.["requestId"] ?? "");
 	if (e.name === "webskill:cancel") return {
 		id,
 		cancelled: true
 	};
-	if (e.name === "webskill:submit") return {
-		id,
-		value: e.context?.["values"] ?? e.context?.["form"] ?? e.context
-	};
+	if (e.name === "webskill:submit") {
+		const response = {
+			id,
+			value: e.context?.["values"] ?? e.context?.["form"] ?? e.context
+		};
+		return request ? decodeInteractionResponse(request, response) : response;
+	}
 	return {
 		id,
 		value: e.context
@@ -1041,6 +1111,8 @@ function loadA2uiRuntime() {
 var LitRendererBridge = class {
 	#mount;
 	#doc;
+	/** 进行中的交互：id → resolve 与 surface 元素（cancel 时清理并以 cancelled resolve） */
+	#pending = /* @__PURE__ */ new Map();
 	constructor(deps) {
 		this.#mount = deps.mount;
 		this.#doc = deps.document ?? deps.mount.ownerDocument;
@@ -1050,75 +1122,42 @@ var LitRendererBridge = class {
 		const messages = toA2uiMessages(input);
 		const surfaceId = `webskill-${input.id}`;
 		return new Promise((resolve) => {
-			const cleanup = (el) => el?.remove();
-			let surfaceEl;
+			const entry = { resolve };
+			this.#pending.set(input.id, entry);
 			const processor = new MessageProcessor([basicCatalog], (action) => {
 				const surfaces = processor.getClientDataModel("v0.9.1")?.surfaces;
 				const formValues = typeof surfaces?.[surfaceId] === "object" && surfaces[surfaceId] !== null ? surfaces[surfaceId]["form"] ?? action.context : action.context;
-				cleanup(surfaceEl);
-				const response = fromA2uiAction({
+				this.#pending.delete(input.id);
+				entry.surfaceEl?.remove();
+				resolve(fromA2uiAction({
 					...action,
 					context: {
 						...action.context,
 						values: formValues
 					}
-				});
-				resolve(this.#decodeValue(input, response));
+				}, input));
 			}, { version: "v0.9.1" });
 			processor.onSurfaceCreated((surface) => {
 				const el = this.#doc.createElement("a2ui-surface");
 				el.surface = surface;
-				surfaceEl = el;
+				entry.surfaceEl = el;
 				this.#mount.appendChild(el);
 			});
 			processor.processMessages(messages);
 		});
 	}
-	/**
-	* 按 InteractionRequest.type 解码提交值（绑定模型原样回传的是表单对象）：
-	* confirm 仅 confirmed===true 批准；select 还原原始 option 值（非字符串值经 JSON 编码比对）；
-	* form 的 number 字段转 number；ask 取 answer；authorize 提交即批准。
-	*/
-	#decodeValue(input, response) {
-		if (response.cancelled) return response;
-		const values = response.value;
-		switch (input.type) {
-			case "confirm": return {
-				...response,
-				value: values?.confirmed === true
-			};
-			case "ask": return {
-				...response,
-				value: values?.answer
-			};
-			case "select": {
-				const raw = values?.selected;
-				const option = input.options.find((o) => o.value === raw || JSON.stringify(o.value) === raw);
-				return {
-					...response,
-					value: option ? option.value : raw
-				};
-			}
-			case "form": {
-				if (typeof values !== "object" || values === null) return response;
-				const out = { ...values };
-				for (const field of input.fields) if (field.type === "number" && out[field.name] !== void 0) {
-					const n = Number(out[field.name]);
-					if (!Number.isNaN(n)) out[field.name] = n;
-				}
-				return {
-					...response,
-					value: out
-				};
-			}
-			case "authorize": return {
-				...response,
-				value: true
-			};
-			default: return response;
-		}
+	/** runtime 交互超时/取消：移除 surface 并以 cancelled resolve pending Promise（防悬挂 + DOM 残留） */
+	cancel(id) {
+		const entry = this.#pending.get(id);
+		if (!entry) return;
+		this.#pending.delete(id);
+		entry.surfaceEl?.remove();
+		entry.resolve({
+			id,
+			cancelled: true
+		});
 	}
 };
 
 //#endregion
-export { renderRenderResult as C, toVercelToolInvocation as D, toOpenUiLang as E, renderMiniMarkdown as S, toA2uiMessages as T, fromOpenUiAction as _, CHART_PALETTE as a, renderBlocks as b, OPENUI_SUBMIT_ACTION as c, WEBSKILL_STYLES_CSS as d, WebFormBridge as f, fromA2uiAction as g, ensureStyles as h, A2UI_VERSION as i, VERCEL_INTERACTION_TOOL_NAME as l, collectValues as m, A2UI_CANCEL_ACTION as n, LitRendererBridge as o, chartToTable as p, A2UI_SUBMIT_ACTION as r, OPENUI_CANCEL_ACTION as s, A2UI_BASIC_CATALOG_ID as t, VercelUiBridge as u, fromVercelToolResult as v, shapeInteractionValue as w, renderMiniChart as x, interactionToFormModel as y };
+export { renderMiniChart as C, toA2uiMessages as D, shapeInteractionValue as E, toOpenUiLang as O, renderBlocks as S, renderRenderResult as T, ensureStyles as _, CHART_PALETTE as a, fromVercelToolResult as b, OPENUI_CANCEL_ACTION as c, VercelUiBridge as d, WEBSKILL_STYLES_CSS as f, decodeInteractionResponse as g, collectValues as h, A2UI_VERSION as i, toVercelToolInvocation as k, OPENUI_SUBMIT_ACTION as l, chartToTable as m, A2UI_CANCEL_ACTION as n, LitRendererBridge as o, WebFormBridge as p, A2UI_SUBMIT_ACTION as r, OPENUI_AUTHORIZE_ACTION as s, A2UI_BASIC_CATALOG_ID as t, VERCEL_INTERACTION_TOOL_NAME as u, fromA2uiAction as v, renderMiniMarkdown as w, interactionToFormModel as x, fromOpenUiAction as y };

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { F as SkillDocument, N as SkillCatalogEntry, c as LlmClient, u as LlmMessage, v as UiBridge, w as FileSystemProvider, z as SkillManifest } from "./types-CKm5G_eQ-8W8FnP4u.js";
-import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, q as RuntimeRun, tt as SkillStateGuard } from "./index-gjFuBevI.js";
-import { d as SkillManager } from "./index-iqcz3_NS.js";
+import { B as SkillManifest, I as SkillDocument, P as SkillCatalogEntry, c as LlmClient, u as LlmMessage, v as UiBridge, w as FileSystemProvider } from "./types-CKm5G_eQ-krKWW8WV.js";
+import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, q as RuntimeRun, tt as SkillStateGuard } from "./index-DfINBEOy.js";
+import { d as SkillManager } from "./index-CsDJvYGV.js";
 //#region ../governance/dist/index.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
@@ -143,7 +143,8 @@ declare class CompositeApprovalPolicy implements ApprovalPolicy {
 }
 //#endregion
 //#region src/versioning/skillVersionStore.d.ts
-/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断） */
+/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
+ *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
 declare class SkillVersionStore {
   #private;
   constructor(deps: {
@@ -152,6 +153,8 @@ declare class SkillVersionStore {
     now?: () => string;
     createId?: () => string;
     audit?: AuditLog;
+    /** 每技能保留的版本/归档上限（默认 5，超出清理最旧） */
+    maxArchivesPerSkill?: number;
   });
   add(skillName: string, input: {
     reason: string;
@@ -209,7 +212,12 @@ interface AuditChainVerification {
   brokenAt?: number;
   reason?: string;
 }
-/** JSONL 追加的审计日志：<managedRoot>/.webskill/audit.jsonl；跨实例可恢复查询；prevHash 链可校验完整性 */
+/**
+ * JSONL 追加式审计日志（<managedRoot>/.webskill/audit.jsonl）：
+ * 真追加（fs.appendText，不整读改写）+ lastHash 内存缓存（同实例不重读）。
+ * 语义：**tamper-evident, not tamper-proof**——verifyChain 能检出篡改/删除/换序，
+ * 但不阻止有写权限者直接改写文件；更强保证需要签名信任体系（未排期）。
+ */
 declare class FsAuditLog implements AuditLog {
   #private;
   constructor(deps: {

package/dist/governance.js

@@ -1,6 +1,6 @@
-import { A as unzipWithLimits, b as isValidSkillName, d as assertSafePathSegment, j as validateSkills, k as resolveInsideRoot, u as WebSkillError } from "./dist-D0saNPi_.js";
-import { S as WebSkillRuntime } from "./dist-NM4Mylx4.js";
-import { i as NodeFS, s as ProcessSandboxExecutor, u as exportArchive } from "./dist-CvIMVwr3.js";
+import { C as messageOf, M as unzipWithLimits, N as validateSkills, f as assertSafePathSegment, j as resolveInsideRoot, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
+import { S as WebSkillRuntime } from "./dist-B77plHjw.js";
+import { i as NodeFS, s as ProcessSandboxExecutor, u as exportArchive } from "./dist-Chk8iB-E.js";
 import path from "node:path";
 import { tmpdir } from "node:os";
 import { mkdtemp } from "node:fs/promises";
@@ -242,7 +242,6 @@ var CompositeApprovalPolicy = class {
 		return this.#fallback.evaluate(candidate);
 	}
 };
-const messageOf$1 = (e) => e instanceof Error ? e.message : String(e);
 /** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
 var ApprovalWorkflow = class {
 	#policy;
@@ -331,7 +330,7 @@ var ApprovalWorkflow = class {
 			return manifest;
 		} catch (e) {
 			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to publish candidate "${candidateId}": ${messageOf$1(e)}`, e);
+			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to publish candidate "${candidateId}": ${messageOf(e)}`, e);
 		} finally {
 			try {
 				await this.#fs.remove(stagingRoot, { recursive: true });
@@ -382,7 +381,7 @@ var ApprovalWorkflow = class {
 			return manifest;
 		} catch (e) {
 			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to roll back "${skillName}" to version "${versionId}": ${messageOf$1(e)}`, e);
+			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to roll back "${skillName}" to version "${versionId}": ${messageOf(e)}`, e);
 		} finally {
 			try {
 				await this.#fs.remove(stagingRoot, { recursive: true });
@@ -404,29 +403,42 @@ function canonical(event) {
 		prevHash: event.prevHash
 	});
 }
-/** JSONL 追加的审计日志：<managedRoot>/.webskill/audit.jsonl；跨实例可恢复查询；prevHash 链可校验完整性 */
+/**
+* JSONL 追加式审计日志（<managedRoot>/.webskill/audit.jsonl）：
+* 真追加（fs.appendText，不整读改写）+ lastHash 内存缓存（同实例不重读）。
+* 语义：**tamper-evident, not tamper-proof**——verifyChain 能检出篡改/删除/换序，
+* 但不阻止有写权限者直接改写文件；更强保证需要签名信任体系（未排期）。
+*/
 var FsAuditLog = class {
 	#root;
 	#fs;
 	#now;
 	#createId;
+	/** lastHash 内存缓存（同实例内追加不重读文件） */
+	#lastHash;
+	#lastHashSeeded = false;
 	constructor(deps) {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
 		this.#now = deps.now;
 		this.#createId = deps.createId;
 	}
-	async append(event) {
+	/** 首追加时播种 lastHash（读一次尾部；尾行损坏 → 抛错，不静默重开链） */
+	async #seedLastHash() {
+		this.#lastHashSeeded = true;
 		const path = fileOf$1(this.#root);
-		const existing = await this.#fs.exists(path) ? await this.#fs.readText(path) : "";
-		const lines = existing.split("\n").filter((l) => l.trim() !== "");
-		let prevHash = "GENESIS";
-		if (lines.length > 0) try {
+		if (!await this.#fs.exists(path)) return "GENESIS";
+		const lines = (await this.#fs.readText(path)).split("\n").filter((l) => l.trim() !== "");
+		if (lines.length === 0) return "GENESIS";
+		try {
 			const last = JSON.parse(lines.at(-1));
-			prevHash = last.hash ?? sha256Hex(canonical(last));
-		} catch {
-			prevHash = "GENESIS";
+			return last.hash ?? sha256Hex(canonical(last));
+		} catch (e) {
+			throw new WebSkillError("GOVERNANCE_FAILED", `Audit log tail line at ${path} is corrupted; refusing to append (the chain must not silently restart)`, e);
 		}
+	}
+	async append(event) {
+		const prevHash = this.#lastHashSeeded ? this.#lastHash : await this.#seedLastHash();
 		const full = {
 			id: event.id ?? this.#createId?.() ?? `audit-${Math.random().toString(36).slice(2, 10)}`,
 			ts: event.ts ?? this.#now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
@@ -437,8 +449,8 @@ var FsAuditLog = class {
 			prevHash
 		};
 		full.hash = sha256Hex(canonical(full));
-		const prefix = existing === "" || existing.endsWith("\n") ? existing : `${existing}\n`;
-		await this.#fs.writeText(path, `${prefix}${JSON.stringify(full)}\n`);
+		await this.#fs.appendText(fileOf$1(this.#root), `${JSON.stringify(full)}\n`);
+		this.#lastHash = full.hash;
 		return full;
 	}
 	async query(filter) {
@@ -448,7 +460,12 @@ var FsAuditLog = class {
 		const events = [];
 		for (const line of raw.split("\n")) {
 			if (line.trim() === "") continue;
-			const event = JSON.parse(line);
+			let event;
+			try {
+				event = JSON.parse(line);
+			} catch {
+				continue;
+			}
 			if (filter.target !== void 0 && event.target !== filter.target) continue;
 			if (filter.type !== void 0 && event.type !== filter.type) continue;
 			if (filter.since !== void 0 && event.ts < filter.since) continue;
@@ -493,19 +510,22 @@ const dirOf = (root, skillName) => {
 	assertSafePathSegment(skillName, "skill name");
 	return `${root}/.webskill/versions/${skillName}`;
 };
-/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断） */
+/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
+*  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
 var SkillVersionStore = class {
 	#root;
 	#fs;
 	#now;
 	#createId;
 	#audit;
+	#maxArchives;
 	constructor(deps) {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
 		this.#now = deps.now;
 		this.#createId = deps.createId;
 		this.#audit = deps.audit;
+		this.#maxArchives = deps.maxArchivesPerSkill ?? 5;
 	}
 	async add(skillName, input) {
 		const existing = await this.list(skillName);
@@ -523,8 +543,19 @@ var SkillVersionStore = class {
 			version.archivePath = archivePath;
 		}
 		await this.#fs.writeText(`${dirOf(this.#root, skillName)}/${version.versionId}.json`, JSON.stringify(version, null, 2));
+		await this.#prune(skillName);
 		return version;
 	}
+	/** 保留策略：超出 maxArchivesPerSkill 时按 createdAt 清理最旧版本（json + zip） */
+	async #prune(skillName) {
+		const versions = await this.list(skillName);
+		const excess = versions.length - this.#maxArchives;
+		if (excess <= 0) return;
+		for (const old of versions.slice(0, excess)) {
+			await this.#fs.remove(`${dirOf(this.#root, skillName)}/${old.versionId}.json`);
+			if (old.archivePath && await this.#fs.exists(old.archivePath)) await this.#fs.remove(old.archivePath);
+		}
+	}
 	/** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
 	async readArchive(skillName, versionId) {
 		const version = await this.get(skillName, versionId);
@@ -786,7 +817,6 @@ var SkillStatePolicy = class {
 		});
 	}
 };
-const messageOf = (e) => e instanceof Error ? e.message : String(e);
 function matchExpected(expected, output, run) {
 	if (expected === void 0) return run.status === "completed";
 	if (typeof expected === "string") return output.includes(expected);

package/dist/{index-iqcz3_NS.d.ts → index-CsDJvYGV.d.ts}

@@ -1,5 +1,5 @@
-import { C as FileStat, I as SkillInstallSource, K as VerifyResult, T as JsonSchema, W as SkillsLockfile, _ as RenderResultRequest, o as InteractionRequest, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits, z as SkillManifest } from "./types-CKm5G_eQ-8W8FnP4u.js";
-import { N as NetworkPolicy, Q as ScriptExecutor, X as SchemaInferer, Z as ScriptExecutionContext, b as FsArtifactStore, d as BridgeCapabilities, it as ToolResult, nt as ToolDefinition, u as ApprovalScope, x as FsMemoryStore } from "./index-gjFuBevI.js";
+import { B as SkillManifest, C as FileStat, G as SkillsLockfile, L as SkillInstallSource, T as JsonSchema, _ as RenderResultRequest, o as InteractionRequest, q as VerifyResult, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits } from "./types-CKm5G_eQ-krKWW8WV.js";
+import { N as NetworkPolicy, Q as ScriptExecutor, X as SchemaInferer, Z as ScriptExecutionContext, b as FsArtifactStore, d as BridgeCapabilities, it as ToolResult, nt as ToolDefinition, u as ApprovalScope, x as FsMemoryStore } from "./index-DfINBEOy.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
 //#region src/fs/nodeFs.d.ts
@@ -14,8 +14,11 @@ declare class NodeFS implements FileSystemProvider {
   constructor(deps?: {
     root?: string;
   });
+  /** root 模式：全部方法（read/write/exists/stat/list/mkdir/remove/rename）目标 realpath 必须落在 root realpath 前缀内 */
+  withRoot(root: string): NodeFS;
   readText(p: string): Promise<string>;
   writeText(p: string, content: string): Promise<void>;
+  appendText(p: string, content: string): Promise<void>;
   readBinary(p: string): Promise<Uint8Array>;
   writeBinary(p: string, content: Uint8Array): Promise<void>;
   exists(p: string): Promise<boolean>;
@@ -103,6 +106,8 @@ interface ProcessSandboxOptions {
   uiBridge?: UiBridge;
   /** 授权粒度：默认 'once-per-run' */
   approvalScope?: ApprovalScope;
+  /** 池维护告警出口（recycle 重生失败等；默认 console.warn） */
+  onWarning?: (message: string) => void;
 }
 /**
  * child_process.fork + --permission 进程沙箱（真实进程隔离）。
@@ -117,7 +122,7 @@ declare class ProcessSandboxExecutor implements ScriptExecutor {
   #private;
   constructor(fs: FileSystemProvider, options?: ProcessSandboxOptions);
   get poolSize(): number;
-  /** 池全部子进程销毁（测试收尾/进程退出前调用） */
+  /** 池全部子进程销毁（测试收尾/进程退出前调用）；排队中的 acquire 一律 reject（不悬挂） */
   dispose(): Promise<void>;
   loadDefinition(skillRoot: string, scriptName: string): Promise<ToolDefinition>;
   execute(input: {

package/dist/{index-gjFuBevI.d.ts → index-DfINBEOy.d.ts}

@@ -1,4 +1,4 @@
-import { F as SkillDocument, G as ValidationReport, I as SkillInstallSource, M as SkillCatalog, N as SkillCatalogEntry, P as SkillDiscovery, S as DiscoveryResult, T as JsonSchema, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, u as LlmMessage, v as UiBridge, w as FileSystemProvider, z as SkillManifest } from "./types-CKm5G_eQ-8W8FnP4u.js";
+import { B as SkillManifest, F as SkillDiscovery, I as SkillDocument, K as ValidationReport, L as SkillInstallSource, N as SkillCatalog, P as SkillCatalogEntry, S as DiscoveryResult, T as JsonSchema, Y as WebSkillErrorCode, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, u as LlmMessage, v as UiBridge, w as FileSystemProvider } from "./types-CKm5G_eQ-krKWW8WV.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/openAiCompatibleClient.d.ts
 interface OpenAiCompatibleClientConfig {
@@ -33,6 +33,11 @@ interface AnthropicClientConfig {
   requestTimeoutMs?: number;
   /** max_tokens（Messages API 必填），默认 4096 */
   maxTokens?: number;
+  /**
+   * 浏览器直调 opt-in：true 时发送 anthropic-dangerous-direct-browser-access 头
+   * （默认 false 不发——仅在明确运行于浏览器且无服务端代理时开启）
+   */
+  dangerouslyAllowDirectBrowserAccess?: boolean;
 }
 /** Anthropic Messages API 客户端（零依赖 fetch；Node/浏览器通用） */
 declare class AnthropicClient implements LlmClient {
@@ -265,6 +270,8 @@ interface AgentLoopConfig {
   renderResult?: 'off';
   /** 工具结果回喂上限（字节，默认 100_000；超长头尾保留 + 完整内容落 artifact） */
   toolResultMaxBytes?: number;
+  /** session paramHistory 保留条数上限（默认 50，超出裁最旧） */
+  paramHistoryLimit?: number;
 }
 /** 技能状态拦截 port（治理装配；无注入默认全放行） */
 interface SkillStateGuard {
@@ -374,6 +381,7 @@ type LifecycleListener = (event: LifecycleEvent) => void;
 /** 生命周期事件总线：只读观测，支持按阶段或通配订阅 */
 declare class EventBus {
   #private;
+  constructor(onListenerError?: (error: unknown, event: LifecycleEvent) => void);
   /** 返回取消订阅函数 */
   on(phase: RuntimePhase | '*', listener: LifecycleListener): () => void;
   /** 当前订阅者数量（流式 delta 零订阅零开销判断用） */
@@ -431,6 +439,8 @@ declare class FsMemoryStore implements MemoryStore {
 declare class SerializingMemoryStore implements MemoryStore {
   #private;
   constructor(inner: MemoryStore);
+  /** 当前链上的 scope 数（监控/测试用；空闲时应回落到 0） */
+  get trackedScopeCount(): number;
   get(scope: string, key: string): Promise<unknown>;
   set(scope: string, key: string, value: unknown): Promise<void>;
   delete(scope: string, key: string): Promise<void>;
@@ -540,6 +550,18 @@ declare function isNetworkAllowed(policy: NetworkPolicy, url: string): boolean;
 /** 阻断 trace 用的脱敏 host（解析失败返回占位，不记录完整 URL） */
 declare function networkUrlHost(url: string): string;
 //#endregion
+//#region src/sandbox/errorCodes.d.ts
+/**
+ * 错误码白名单归一：沙箱/桥消息里出现的非白名单码（DOMException 数值码、
+ * Node 任意 ERR_* 码等）一律归为 TOOL_EXECUTION_FAILED。
+ */
+declare function normalizeErrorCode(code: unknown): WebSkillErrorCode;
+/** 归一化后的 (code, message)：非白名单码保留在 message 尾部（[original code: X]） */
+declare function normalizeToolError(code: unknown, message: string): {
+  code: WebSkillErrorCode;
+  message: string;
+};
+//#endregion
 //#region src/sandbox/approval.d.ts
 /** 桥消息对应的三类能力 */
 type BridgeCapability = 'readReference' | 'writeArtifact' | 'confirm';
@@ -632,6 +654,8 @@ interface RunSnapshot {
   renderBlocks?: RenderBlock[];
   /** 交互 id 序号（resume 后续算，避免 id 冲突；旧快照缺省从 0 起） */
   interactionSeq?: number;
+  /** 已累计的交互等待 ms（resume 后续算，保持 totalTimeout 排除交互等待的语义；旧快照缺省为 0） */
+  pausedMs?: number;
   /** 进入 interrupted 时计算的过期时间 */
   interactionExpiresAt: string;
   config: {
@@ -790,9 +814,12 @@ declare class WebSkillRuntime {
   /**
    * 多会话：session 对象的 run(prompt) 跨 run 延续消息历史（同一 session 对话上下文连续）。
    * 既有 runtime.run(prompt) 保持无状态单次语义不变。
+   * 同 handle 并发 run 经 per-handle 队列串行化（防历史 last-writer-wins 丢轮次）；
+   * maxHistoryMessages（默认 100）超出时滚动裁剪中段（保留首尾；边界对齐 tool 契约）。
    */
   createSession(options?: {
     sessionId?: string;
+    maxHistoryMessages?: number;
   }): RuntimeSessionHandle;
   discover(): Promise<DiscoveryResult>;
   run(userPrompt: string, options?: {
@@ -810,4 +837,4 @@ declare class WebSkillRuntime {
   resumeRun(runId: string): Promise<RunResult>;
 }
 //#endregion
-export { SerializingMemoryStore as $, LifecycleHook as A, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, normalizeToolContent as Ct, HookRunnerOptions as D, toLlmToolSpec as Dt, HookRunner as E, schemaToForm as Et, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, NetworkPolicy as N, InstalledSkillManifest as O, toVercelToolSpecs as Ot, OpenAiCompatibleClient as P, ScriptExecutor as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, networkUrlHost as St, GoogleGenAiClientConfig as T, resolveToolName as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, SchemaInferer as X, RuntimeSessionHandle as Y, ScriptExecutionContext as Z, EventBus as _, extractChartSpec as _t, AgentLoopConfig as a, TraceClock as at, FsArtifactStore as b, isNetworkAllowed as bt, AnthropicClientConfig as c, TraceRecorder as ct, BridgeCapabilities as d, WebSkillRuntime as dt, SkillRouter as et, BridgeCapability as f, WebSkillRuntimeDeps as ft, CapabilityMode as g, createWebSkillApi as gt, CapabilityApproval as h, createScriptContext as ht, AgentLoop as i, ToolResult as it, LifecycleHookContext as j, LifecycleEvent as k, ApprovalDecision as l, VercelToolSpec as lt, BridgeResponse as m, buildRenderResult as mt, ASK_USER_TOOL as n, ToolDefinition as nt, AgentLoopDeps as o, TraceEvent as ot, BridgeRequest as p, bridgeError as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, ToolResolution as rt, AnthropicClient as s, TraceEventType as st, ASK_USER_INPUT_SCHEMA as t, SkillStateGuard as tt, ApprovalScope as u, WebSkillApi as ut, ExternalSkillProvider as v, fromVercelResult as vt, GoogleGenAiClient as w, parseBridgeRequest as wt, FsMemoryStore as x, mergeCatalogEntries as xt, ExternalToolSource as y, fromVercelStreamPart as yt, READ_SKILL_FILE_TOOL_NAME as z };
+export { SerializingMemoryStore as $, LifecycleHook as A, toVercelToolSpecs as At, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, normalizeErrorCode as Ct, HookRunnerOptions as D, resolveToolName as Dt, HookRunner as E, parseBridgeRequest as Et, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, NetworkPolicy as N, InstalledSkillManifest as O, schemaToForm as Ot, OpenAiCompatibleClient as P, ScriptExecutor as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, networkUrlHost as St, GoogleGenAiClientConfig as T, normalizeToolError as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, SchemaInferer as X, RuntimeSessionHandle as Y, ScriptExecutionContext as Z, EventBus as _, extractChartSpec as _t, AgentLoopConfig as a, TraceClock as at, FsArtifactStore as b, isNetworkAllowed as bt, AnthropicClientConfig as c, TraceRecorder as ct, BridgeCapabilities as d, WebSkillRuntime as dt, SkillRouter as et, BridgeCapability as f, WebSkillRuntimeDeps as ft, CapabilityMode as g, createWebSkillApi as gt, CapabilityApproval as h, createScriptContext as ht, AgentLoop as i, ToolResult as it, LifecycleHookContext as j, LifecycleEvent as k, toLlmToolSpec as kt, ApprovalDecision as l, VercelToolSpec as lt, BridgeResponse as m, buildRenderResult as mt, ASK_USER_TOOL as n, ToolDefinition as nt, AgentLoopDeps as o, TraceEvent as ot, BridgeRequest as p, bridgeError as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, ToolResolution as rt, AnthropicClient as s, TraceEventType as st, ASK_USER_INPUT_SCHEMA as t, SkillStateGuard as tt, ApprovalScope as u, WebSkillApi as ut, ExternalSkillProvider as v, fromVercelResult as vt, GoogleGenAiClient as w, normalizeToolContent as wt, FsMemoryStore as x, mergeCatalogEntries as xt, ExternalToolSource as y, fromVercelStreamPart as yt, READ_SKILL_FILE_TOOL_NAME as z };