@webskill/sdk 0.2.5 → 0.2.6

package/dist/browser.d.ts

@@ -1,5 +1,5 @@
 import { B as SkillManifest, C as FileStat, G as SkillsLockfile, L as SkillInstallSource, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, o as InteractionRequest, q as VerifyResult, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { Et as parseBridgeRequest, N as NetworkPolicy, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-DfINBEOy.js";
+import { Et as parseBridgeRequest, N as NetworkPolicy, Q as ScriptExecutor, Z as ScriptExecutionContext, d as BridgeCapabilities, it as ToolResult, m as BridgeResponse, nt as ToolDefinition, p as BridgeRequest, pt as bridgeError, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-DJOha4b6.js";
 //#region ../browser/dist/index.d.ts
 //#region src/fs/featureDetection.d.ts
 /** 检测当前环境是否可用 OPFS（navigator.storage.getDirectory） */

package/dist/browser.js

@@ -1,5 +1,5 @@
 import { C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, M as unzipWithLimits, N as validateSkills, P as verifyManifest, T as parseSkillMarkdown, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, m as buildCatalog, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { A as isNetworkAllowed, C as bridgeError, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-B77plHjw.js";
+import { A as isNetworkAllowed, C as bridgeError, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, l as FsMemoryStore, m as OpenAiCompatibleClient, o as CapabilityApproval, u as FsRunSnapshotStore, y as RUN_SNAPSHOT_SCHEMA_VERSION } from "./dist-BXpDDZpR.js";
 import { n as MockLlmClient } from "./testing-BUoXvm1u.js";
 
 //#region ../browser/dist/index.js

package/dist/{dist-B77plHjw.js → dist-BXpDDZpR.js}

@@ -40,7 +40,7 @@ var OpenAiCompatibleClient = class {
 	#fetch;
 	constructor(config) {
 		this.#config = config;
-		this.#fetch = config.fetchImpl ?? fetch;
+		this.#fetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
 	}
 	#requireConfig() {
 		const { baseUrl, apiKey, model } = this.#config;
@@ -262,7 +262,7 @@ var AnthropicClient = class {
 	#fetch;
 	constructor(config) {
 		this.#config = config;
-		this.#fetch = config.fetchImpl ?? fetch;
+		this.#fetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
 	}
 	#baseUrl() {
 		return (this.#config.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");
@@ -491,7 +491,7 @@ var GoogleGenAiClient = class {
 	#fetch;
 	constructor(config) {
 		this.#config = config;
-		this.#fetch = config.fetchImpl ?? fetch;
+		this.#fetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
 	}
 	#baseUrl() {
 		return (this.#config.baseUrl ?? "https://generativelanguage.googleapis.com").replace(/\/+$/, "");
@@ -1092,6 +1092,11 @@ const toolError = (code, message) => ({
 		message
 	}
 });
+/** 工具参数摘要（JSON 截断 100 字符；trace 与实时事件同一口径，ToolCallCard 展开详情用） */
+const summarizeArgs = (args) => {
+	const json = JSON.stringify(args);
+	return json.length > 100 ? `${json.slice(0, 100)}…` : json;
+};
 /**
 * 多轮 Agent 循环。
 * 工具失败一律转为 ToolResult{ok:false} 回喂 LLM 继续循环；
@@ -1101,6 +1106,10 @@ var AgentLoop = class {
 	#deps;
 	#config;
 	#policy;
+	/** 活跃 run 的 AbortController（cancel(runId) 触发；终态清理） */
+	#controllers = /* @__PURE__ */ new Map();
+	/** 经 cancel() 主动取消的 run（aborted 分支据此区分 cancelled 与 timeout） */
+	#cancelled = /* @__PURE__ */ new Set();
 	constructor(deps, config = {}) {
 		this.#deps = {
 			...deps,
@@ -1121,6 +1130,18 @@ var AgentLoop = class {
 			interactionTimeoutMs: deps.interaction?.interactionTimeoutMs ?? 3e5
 		};
 	}
+	/**
+	* 取消进行中的 run：触发该 run 的 AbortController（与 totalTimeout 硬期限同一通道），
+	* run 以 cancelled（RUN_CANCELLED）终止；未找到（已终态或不属于本实例）返回 false。
+	* 取消在下一个中断点生效（LLM complete/stream 调用；交互等待不强制中断）。
+	*/
+	cancel(runId) {
+		const controller = this.#controllers.get(runId);
+		if (!controller) return false;
+		this.#cancelled.add(runId);
+		controller.abort();
+		return true;
+	}
 	async run(input) {
 		const now = this.#deps.clock?.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
 		const runId = input.runId ?? `run-${Math.random().toString(36).slice(2, 10)}`;
@@ -1156,6 +1177,7 @@ var AgentLoop = class {
 			totalTimeoutMs: this.#config.totalTimeoutMs,
 			controller: new AbortController()
 		};
+		this.#controllers.set(runId, state.controller);
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		const route = this.#deps.catalogFilter ? {
 			...input.route,
@@ -1250,7 +1272,10 @@ var AgentLoop = class {
 						signal: state.controller.signal
 					});
 				} catch (e) {
-					if (state.controller.signal.aborted) return finish("failed", "timeout", `Agent loop exceeded the total timeout of ${state.totalTimeoutMs}ms`, "RUN_TIMEOUT");
+					if (state.controller.signal.aborted) {
+						if (this.#cancelled.has(state.runId)) return finish("cancelled", "user-cancelled", "Run cancelled by user", "RUN_CANCELLED");
+						return finish("failed", "timeout", `Agent loop exceeded the total timeout of ${state.totalTimeoutMs}ms`, "RUN_TIMEOUT");
+					}
 					const code = e instanceof WebSkillError && (e.code === "LLM_UNAVAILABLE" || e.code === "LLM_REQUEST_FAILED") ? e.code : "LLM_REQUEST_FAILED";
 					return finish("failed", "llm-error", messageOf(e), code);
 				}
@@ -1294,6 +1319,8 @@ var AgentLoop = class {
 	/** 统一终态处理：completed/failed/cancelled；终态即删快照（快照是续命机制，审计归治理） */
 	async #finish(state, status, reason, output, errorCode) {
 		this.#disarmDeadline(state);
+		this.#controllers.delete(state.runId);
+		this.#cancelled.delete(state.runId);
 		const { run, trace } = state;
 		run.status = status;
 		run.terminationReason = reason;
@@ -1408,6 +1435,7 @@ var AgentLoop = class {
 			totalTimeoutMs: snapshot.config.totalTimeoutMs,
 			controller: new AbortController()
 		};
+		this.#controllers.set(runId, state.controller);
 		if (this.#deps.hooks && !this.#deps.hooks.onWarning) this.#deps.hooks.onWarning = (message) => trace.record("run.warning", { message });
 		trace.record("run.resumed", { data: {
 			snapshotAt: snapshot.snapshotAt,
@@ -1628,10 +1656,14 @@ var AgentLoop = class {
 		});
 	}
 	async #executeCall(call, state) {
+		const argsSummary = summarizeArgs(call.arguments);
+		const callStartMs = Date.parse(state.now());
 		state.trace.record("tool.started", { data: {
 			name: call.name,
-			callId: call.id
+			callId: call.id,
+			args: argsSummary
 		} });
+		this.#emitTool(state, "started", call);
 		let result;
 		if (call.name === "read_skill_file") result = await this.#handleReadSkillFile(call, state);
 		else if (call.name === "ask_user") result = await this.#handleAskUser(call, state);
@@ -1643,11 +1675,15 @@ var AgentLoop = class {
 				result = source ? await source.call(call.name, call.arguments) : toolError(resolution.code, resolution.message);
 			}
 		}
+		const durationMs = Date.parse(state.now()) - callStartMs;
 		if (result.ok) {
 			state.trace.record("tool.completed", { data: {
 				name: call.name,
-				callId: call.id
+				callId: call.id,
+				args: argsSummary,
+				durationMs
 			} });
+			this.#emitTool(state, "completed", call);
 			for (const item of result.content) {
 				if (item.type !== "json") continue;
 				const chart = extractChartSpec(item.data);
@@ -1656,20 +1692,45 @@ var AgentLoop = class {
 					chart
 				});
 			}
-		} else state.trace.record("tool.failed", {
-			message: result.error?.message,
-			data: {
-				name: call.name,
-				callId: call.id,
-				code: result.error?.code
-			}
-		});
+		} else {
+			state.trace.record("tool.failed", {
+				message: result.error?.message,
+				data: {
+					name: call.name,
+					callId: call.id,
+					code: result.error?.code,
+					args: argsSummary,
+					durationMs
+				}
+			});
+			this.#emitTool(state, "failed", call);
+		}
 		for (const artifact of result.artifacts ?? []) state.trace.record("artifact.created", { data: {
 			artifactId: artifact.id,
 			path: artifact.path
 		} });
 		return result;
 	}
+	/**
+	* 逐工具实时事件（execute 相位，data.type='tool'）：chatbot ToolCallCard 等的 live 状态源；
+	* 与既有 execute 相位事件（{turn}）并存，监听方按 data.type 区分。
+	* data.args 为参数摘要（JSON 截断 100 字符，卡片展开详情用）。
+	*/
+	#emitTool(state, status, call) {
+		this.#deps.eventBus?.emit({
+			phase: "execute",
+			runId: state.runId,
+			sessionId: state.run.sessionId,
+			ts: state.now(),
+			data: {
+				type: "tool",
+				status,
+				name: call.name,
+				callId: call.id,
+				args: summarizeArgs(call.arguments)
+			}
+		});
+	}
 	async #handleAskUser(call, state) {
 		const question = call.arguments["question"];
 		if (typeof question !== "string" || question === "") return toolError("TOOL_EXECUTION_FAILED", "ask_user requires a non-empty \"question\" string argument");
@@ -2140,6 +2201,8 @@ var WebSkillRuntime = class {
 	#session;
 	#events;
 	#catalogCache;
+	/** 活跃 run 的 loop 实例（cancel(runId) 路由；终态清理） */
+	#loops = /* @__PURE__ */ new Map();
 	constructor(deps) {
 		this.#deps = {
 			...deps,
@@ -2224,7 +2287,7 @@ var WebSkillRuntime = class {
 		const catalog = providerEntries.length > 0 ? { entries: mergeCatalogEntries(cache.catalog.entries, providerEntries) } : cache.catalog;
 		const filteredCatalog = this.#deps.catalogFilter ? { entries: await this.#deps.catalogFilter(catalog.entries) } : catalog;
 		const route = await this.#router.route(filteredCatalog);
-		const result = await new AgentLoop({
+		const loop = new AgentLoop({
 			llm: this.#deps.llm,
 			executor: this.#deps.executor,
 			schemaInferer: this.#deps.schemaInferer,
@@ -2243,12 +2306,21 @@ var WebSkillRuntime = class {
 			catalogFilter: this.#deps.catalogFilter,
 			snapshotStore: this.#deps.snapshotStore,
 			skillStateGuard: this.#deps.skillStateGuard
-		}, this.#deps.config).run({
-			sessionId: options.sessionId ?? this.#session.id,
-			userPrompt,
-			route,
-			...options.history ? { history: options.history } : {}
-		});
+		}, this.#deps.config);
+		const runId = `run-${Math.random().toString(36).slice(2, 10)}`;
+		this.#loops.set(runId, loop);
+		let result;
+		try {
+			result = await loop.run({
+				sessionId: options.sessionId ?? this.#session.id,
+				userPrompt,
+				route,
+				runId,
+				...options.history ? { history: options.history } : {}
+			});
+		} finally {
+			this.#loops.delete(runId);
+		}
 		for (const failure of providerFailures) result.run.trace.push({
 			id: `evt-provider-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
 			runId: result.run.id,
@@ -2323,7 +2395,7 @@ var WebSkillRuntime = class {
 		if (!this.#catalogCache) await this.discover();
 		const cache = this.#catalogCache;
 		if (!cache) throw new WebSkillError("RUN_FAILED", "discover() did not populate the catalog cache");
-		return new AgentLoop({
+		const loop = new AgentLoop({
 			llm: this.#deps.llm,
 			executor: this.#deps.executor,
 			schemaInferer: this.#deps.schemaInferer,
@@ -2342,7 +2414,21 @@ var WebSkillRuntime = class {
 			catalogFilter: this.#deps.catalogFilter,
 			snapshotStore: store,
 			skillStateGuard: this.#deps.skillStateGuard
-		}, this.#deps.config).resume(snapshot);
+		}, this.#deps.config);
+		this.#loops.set(runId, loop);
+		try {
+			return await loop.resume(snapshot);
+		} finally {
+			this.#loops.delete(runId);
+		}
+	}
+	/**
+	* 取消进行中的 run（chatbot Stop 按钮等）：触发该 run 的 AbortController，
+	* run 以 cancelled（RUN_CANCELLED）终止；未找到活跃 run 返回 false。
+	* 取消在下一个中断点生效（LLM complete/stream；交互等待不强制中断）。
+	*/
+	cancel(runId) {
+		return this.#loops.get(runId)?.cancel(runId) ?? false;
 	}
 };
 /**

package/dist/{dist-Chk8iB-E.js → dist-DWFDb1Ww.js}

@@ -1,5 +1,5 @@
 import { A as resolveArchiveLimits, C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, M as unzipWithLimits, N as validateSkills, P as verifyManifest, T as parseSkillMarkdown, b as exportSkills, d as assertRemoteUrlAllowed, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { A as isNetworkAllowed, C as bridgeError, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, l as FsMemoryStore, o as CapabilityApproval } from "./dist-B77plHjw.js";
+import { A as isNetworkAllowed, C as bridgeError, F as normalizeToolError, I as parseBridgeRequest, M as networkUrlHost, P as normalizeToolContent, c as FsArtifactStore, l as FsMemoryStore, o as CapabilityApproval } from "./dist-BXpDDZpR.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";

package/dist/governance.d.ts

@@ -1,7 +1,7 @@
 import { B as SkillManifest, I as SkillDocument, P as SkillCatalogEntry, c as LlmClient, u as LlmMessage, v as UiBridge, w as FileSystemProvider } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, q as RuntimeRun, tt as SkillStateGuard } from "./index-DfINBEOy.js";
-import { d as SkillManager } from "./index-CsDJvYGV.js";
-//#region ../governance/dist/index.d.ts
+import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, q as RuntimeRun, tt as SkillStateGuard } from "./index-DJOha4b6.js";
+import { d as SkillManager } from "./index-DRlYzdr2.js";
+//#region ../governance/dist/documentSource-9dhqKIVQ.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 type CandidateSource = 'runtime-miss' | 'document' | 'manual';
@@ -60,32 +60,6 @@ interface SkillVersion {
 }
 type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
 //#endregion
-//#region src/candidate/candidateNormalizer.d.ts
-/** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
-declare function parseJsonObject(raw: string): Record<string, unknown>;
-/** 小写连字符化、≤64、过 isValidSkillName */
-declare function sanitizeCandidateName(raw: string): string;
-/**
- * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
- * scripts/ 下必须是 .ts/.js。
- */
-declare function normalizeCandidateFiles(files: Array<{
-  path: string;
-  content: string;
-}>, name: string, description: string): CandidateFile[];
-/** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
-declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
-  risk: CandidateRisk;
-  reasons: string[];
-};
-/** 不信任归一化管线全链路；状态恒为 draft */
-declare function normalizeCandidate(input: {
-  raw: Record<string, unknown>;
-  source: CandidateSource;
-  now?: () => string;
-  createId?: () => string;
-}): CandidateSkill;
-//#endregion
 //#region src/candidate/candidateValidator.d.ts
 /** 候选校验：缺 SKILL.md / 非法扩展名 → CANDIDATE_INVALID */
 declare function validateCandidate(candidate: CandidateSkill): void;
@@ -123,25 +97,6 @@ declare class LlmCandidateGenerator {
   }): Promise<CandidateSkill>;
 }
 //#endregion
-//#region src/approval/policies.d.ts
-interface ApprovalDecision {
-  needsHuman: boolean;
-  reason: string;
-}
-interface ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 默认策略：任何候选都必须人工审批 */
-declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-declare class CompositeApprovalPolicy implements ApprovalPolicy {
-  #private;
-  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
-  evaluate(candidate: CandidateSkill): ApprovalDecision;
-}
-//#endregion
 //#region src/versioning/skillVersionStore.d.ts
 /** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
  *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
@@ -173,38 +128,6 @@ declare class SkillVersionStore {
   }): Promise<SkillVersion>;
 }
 //#endregion
-//#region src/approval/approvalWorkflow.d.ts
-/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
-declare class ApprovalWorkflow {
-  #private;
-  constructor(deps: {
-    policy: ApprovalPolicy;
-    audit: AuditLog;
-    store: CandidateStore;
-    skillManager: SkillManager;
-    versions: SkillVersionStore;
-    fs?: FileSystemProvider;
-  });
-  /** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
-  review(candidateId: string, input: {
-    actor: string;
-    uiBridge?: UiBridge;
-  }): Promise<CandidateSkill>;
-  /** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
-  publish(candidateId: string, input: {
-    actor: string;
-  }): Promise<SkillManifest>;
-  /**
-   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
-   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
-   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
-   */
-  applyRollback(skillName: string, versionId: string, input: {
-    actor: string;
-    reason?: string;
-  }): Promise<SkillManifest>;
-}
-//#endregion
 //#region src/audit/fsAuditLog.d.ts
 interface AuditChainVerification {
   ok: boolean;
@@ -365,18 +288,6 @@ declare class EvaluationRunner {
   run(tasks: EvaluationTask[]): Promise<EvaluationReport>;
 }
 //#endregion
-//#region src/evaluation/evaluationRuntime.d.ts
-/**
- * 治理评估专用 runtime 装配（不可信技能试用路径）：
- * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
- * env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
- * 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
- * 非安全边界；envWhitelist 同样适用于该执行器）。
- */
-declare function createEvaluationRuntime(deps: WebSkillRuntimeDeps & {
-  executor?: ScriptExecutor;
-}): WebSkillRuntime;
-//#endregion
 //#region src/evaluation/testSuggestion.d.ts
 /** 失败 trace → 回归评估任务建议（prompt 复现 + expected 错误模式） */
 declare function suggestFromFailedRun(run: RuntimeRun): EvaluationTask;
@@ -448,6 +359,96 @@ interface SourceDocument {
 /** 读文档 + sha256 hash（变更检测用） */
 declare function readDocument(fs: FileSystemProvider, path: string): Promise<SourceDocument>;
 //#endregion
+//#region ../governance/dist/index.d.ts
+//#region src/candidate/candidateNormalizer.d.ts
+/** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
+declare function parseJsonObject(raw: string): Record<string, unknown>;
+/** 小写连字符化、≤64、过 isValidSkillName */
+declare function sanitizeCandidateName(raw: string): string;
+/**
+ * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
+ * scripts/ 下必须是 .ts/.js。
+ */
+declare function normalizeCandidateFiles(files: Array<{
+  path: string;
+  content: string;
+}>, name: string, description: string): CandidateFile[];
+/** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
+declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
+  risk: CandidateRisk;
+  reasons: string[];
+};
+/** 不信任归一化管线全链路；状态恒为 draft */
+declare function normalizeCandidate(input: {
+  raw: Record<string, unknown>;
+  source: CandidateSource;
+  now?: () => string;
+  createId?: () => string;
+}): CandidateSkill;
+//#endregion
+//#region src/approval/policies.d.ts
+interface ApprovalDecision {
+  needsHuman: boolean;
+  reason: string;
+}
+interface ApprovalPolicy {
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+/** 默认策略：任何候选都必须人工审批 */
+declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
+declare class CompositeApprovalPolicy implements ApprovalPolicy {
+  #private;
+  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+//#endregion
+//#region src/approval/approvalWorkflow.d.ts
+/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
+declare class ApprovalWorkflow {
+  #private;
+  constructor(deps: {
+    policy: ApprovalPolicy;
+    audit: AuditLog;
+    store: CandidateStore;
+    skillManager: SkillManager;
+    versions: SkillVersionStore;
+    fs?: FileSystemProvider;
+  });
+  /** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
+  review(candidateId: string, input: {
+    actor: string;
+    uiBridge?: UiBridge;
+  }): Promise<CandidateSkill>;
+  /** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
+  publish(candidateId: string, input: {
+    actor: string;
+  }): Promise<SkillManifest>;
+  /**
+   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
+   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
+   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
+   */
+  applyRollback(skillName: string, versionId: string, input: {
+    actor: string;
+    reason?: string;
+  }): Promise<SkillManifest>;
+}
+//#endregion
+//#region src/evaluation/evaluationRuntime.d.ts
+/**
+ * 治理评估专用 runtime 装配（不可信技能试用路径）：
+ * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
+ * env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
+ * 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
+ * 非安全边界；envWhitelist 同样适用于该执行器）。
+ */
+declare function createEvaluationRuntime(deps: WebSkillRuntimeDeps & {
+  executor?: ScriptExecutor;
+}): WebSkillRuntime;
+//#endregion
 //#region src/documents/documentSkillExtractor.d.ts
 /** 文档 → LLM 抽取 → 完整防御管线 → draft 候选（source: document） */
 declare class DocumentSkillExtractor {

package/dist/governance.js

@@ -1,12 +1,11 @@
 import { C as messageOf, M as unzipWithLimits, N as validateSkills, f as assertSafePathSegment, j as resolveInsideRoot, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { S as WebSkillRuntime } from "./dist-B77plHjw.js";
-import { i as NodeFS, s as ProcessSandboxExecutor, u as exportArchive } from "./dist-Chk8iB-E.js";
+import { S as WebSkillRuntime } from "./dist-BXpDDZpR.js";
+import { i as NodeFS, s as ProcessSandboxExecutor, u as exportArchive } from "./dist-DWFDb1Ww.js";
 import path from "node:path";
 import { tmpdir } from "node:os";
 import { mkdtemp } from "node:fs/promises";
-import { createHash } from "node:crypto";
 
-//#region ../governance/dist/index.js
+//#region ../governance/dist/documentSource-C6gq6pbk.js
 const invalid = (message, details) => {
 	throw new WebSkillError("CANDIDATE_INVALID", message, details);
 };
@@ -217,180 +216,12 @@ var LlmCandidateGenerator = class {
 		return candidate;
 	}
 };
-/** 默认策略：任何候选都必须人工审批 */
-var AlwaysHumanApprovalPolicy = class {
-	evaluate(candidate) {
-		return {
-			needsHuman: true,
-			reason: `Candidate "${candidate.name}" requires human approval (risk: ${candidate.risk})`
-		};
-	}
-};
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-var CompositeApprovalPolicy = class {
-	#rules;
-	#fallback;
-	constructor(rules, fallback) {
-		this.#rules = rules;
-		this.#fallback = fallback ?? new AlwaysHumanApprovalPolicy();
-	}
-	evaluate(candidate) {
-		for (const rule of this.#rules) {
-			const decision = rule(candidate);
-			if (decision) return decision;
-		}
-		return this.#fallback.evaluate(candidate);
-	}
-};
-/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
-var ApprovalWorkflow = class {
-	#policy;
-	#audit;
-	#store;
-	#skillManager;
-	#versions;
-	#fs;
-	constructor(deps) {
-		this.#policy = deps.policy;
-		this.#audit = deps.audit;
-		this.#store = deps.store;
-		this.#skillManager = deps.skillManager;
-		this.#versions = deps.versions;
-		this.#fs = deps.fs ?? new NodeFS();
-	}
-	/** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
-	async review(candidateId, input) {
-		const candidate = await this.#store.get(candidateId);
-		if (candidate.status !== "draft" && candidate.status !== "pending-review") throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidateId}" cannot be reviewed from status "${candidate.status}"`);
-		const decision = this.#policy.evaluate(candidate);
-		let approved;
-		if (decision.needsHuman) {
-			if (!input.uiBridge) {
-				await this.#store.updateStatus(candidateId, "pending-review");
-				throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" requires human approval: ${decision.reason}`);
-			}
-			await this.#store.updateStatus(candidateId, "pending-review");
-			const response = await input.uiBridge.request({
-				type: "confirm",
-				id: `approval-${candidateId}`,
-				message: `Approve candidate "${candidate.name}" (risk: ${candidate.risk})? ${decision.reason}`,
-				defaultValue: false
-			});
-			approved = response.cancelled !== true && response.value === true;
-		} else approved = true;
-		const updated = await this.#store.updateStatus(candidateId, approved ? "approved" : "rejected");
-		await this.#audit.append({
-			type: "candidate.reviewed",
-			target: candidateId,
-			actor: input.actor,
-			data: {
-				approved,
-				reason: decision.reason
-			}
-		});
-		return updated;
-	}
-	/** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
-	async publish(candidateId, input) {
-		const candidate = await this.#store.get(candidateId);
-		if (candidate.status !== "approved") throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" must be approved before publishing (status: ${candidate.status})`);
-		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-candidate-"))).split(path.sep).join("/");
-		try {
-			const skillDir = `${stagingRoot}/${candidate.name}`;
-			for (const file of candidate.files) await this.#fs.writeText(resolveInsideRoot(skillDir, file.path), file.content);
-			const report = await validateSkills(this.#fs, [stagingRoot]);
-			if (!report.ok) {
-				const errors = report.issues.filter((i) => i.severity === "error");
-				throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
-			}
-			const manifest = await this.#skillManager.install({
-				type: "local",
-				path: skillDir
-			});
-			const archiveOut = `${stagingRoot}/version-archive.zip`;
-			await exportArchive(this.#fs, `${this.#skillManager.managedRoot}/${candidate.name}`, {
-				format: "zip",
-				outPath: archiveOut
-			});
-			await this.#versions.add(candidate.name, {
-				reason: `Publish candidate ${candidateId}`,
-				manifest,
-				archive: await this.#fs.readBinary(archiveOut)
-			});
-			await this.#store.updateStatus(candidateId, "published");
-			await this.#audit.append({
-				type: "skill.published",
-				target: candidate.name,
-				actor: input.actor,
-				data: {
-					candidateId,
-					digest: manifest.integrity.digest
-				}
-			});
-			return manifest;
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to publish candidate "${candidateId}": ${messageOf(e)}`, e);
-		} finally {
-			try {
-				await this.#fs.remove(stagingRoot, { recursive: true });
-			} catch {}
-		}
-	}
-	/**
-	* 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
-	* 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
-	* RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
-	*/
-	async applyRollback(skillName, versionId, input) {
-		assertSafePathSegment(skillName, "skill name");
-		assertSafePathSegment(versionId, "version id");
-		const version = await this.#versions.get(skillName, versionId);
-		const archive = await this.#versions.readArchive(skillName, versionId);
-		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-rollback-"))).split(path.sep).join("/");
-		try {
-			const skillDir = `${stagingRoot}/${skillName}`;
-			for (const [rel, content] of await unzipWithLimits(archive)) {
-				if (rel.endsWith("/")) continue;
-				await this.#fs.writeBinary(resolveInsideRoot(skillDir, rel), content);
-			}
-			const report = await validateSkills(this.#fs, [stagingRoot]);
-			if (!report.ok) {
-				const errors = report.issues.filter((i) => i.severity === "error");
-				throw new WebSkillError("GOVERNANCE_FAILED", `Rollback archive of "${skillName}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
-			}
-			const manifest = await this.#skillManager.install({
-				type: "local",
-				path: skillDir
-			});
-			if (manifest.integrity.digest !== version.manifest.integrity.digest) throw new WebSkillError("GOVERNANCE_FAILED", `Rollback of "${skillName}" to version "${versionId}" produced a digest mismatch: expected ${version.manifest.integrity.digest}, got ${manifest.integrity.digest}`);
-			await this.#versions.add(skillName, {
-				reason: input.reason ?? `Rollback to version ${versionId}`,
-				manifest,
-				archive
-			});
-			await this.#audit.append({
-				type: "skill.rolled_back",
-				target: skillName,
-				actor: input.actor,
-				data: {
-					targetVersionId: versionId,
-					reason: input.reason
-				}
-			});
-			return manifest;
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to roll back "${skillName}" to version "${versionId}": ${messageOf(e)}`, e);
-		} finally {
-			try {
-				await this.#fs.remove(stagingRoot, { recursive: true });
-			} catch {}
-		}
-	}
-};
 const fileOf$1 = (root) => `${root}/.webskill/audit.jsonl`;
-const sha256Hex = (text) => createHash("sha256").update(text, "utf8").digest("hex");
+/** 环境无关 sha256（WebCrypto；Node ≥17 与浏览器均有 globalThis.crypto.subtle） */
+const sha256Hex$1 = async (text) => {
+	const digest = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(text));
+	return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+};
 /** 链字段之外的规范化事件载荷（hash 计算输入） */
 function canonical(event) {
 	return JSON.stringify({
@@ -432,7 +263,7 @@ var FsAuditLog = class {
 		if (lines.length === 0) return "GENESIS";
 		try {
 			const last = JSON.parse(lines.at(-1));
-			return last.hash ?? sha256Hex(canonical(last));
+			return last.hash ?? await sha256Hex$1(canonical(last));
 		} catch (e) {
 			throw new WebSkillError("GOVERNANCE_FAILED", `Audit log tail line at ${path} is corrupted; refusing to append (the chain must not silently restart)`, e);
 		}
@@ -448,7 +279,7 @@ var FsAuditLog = class {
 			...event.data !== void 0 ? { data: event.data } : {},
 			prevHash
 		};
-		full.hash = sha256Hex(canonical(full));
+		full.hash = await sha256Hex$1(canonical(full));
 		await this.#fs.appendText(fileOf$1(this.#root), `${JSON.stringify(full)}\n`);
 		this.#lastHash = full.hash;
 		return full;
@@ -495,7 +326,7 @@ var FsAuditLog = class {
 				brokenAt: i,
 				reason: "prevHash link mismatch (events may have been removed or reordered)"
 			};
-			const expectedHash = sha256Hex(canonical(event));
+			const expectedHash = await sha256Hex$1(canonical(event));
 			if (event.hash !== expectedHash) return {
 				ok: false,
 				brokenAt: i,
@@ -871,19 +702,6 @@ var EvaluationRunner = class {
 		};
 	}
 };
-/**
-* 治理评估专用 runtime 装配（不可信技能试用路径）：
-* 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
-* env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
-* 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
-* 非安全边界；envWhitelist 同样适用于该执行器）。
-*/
-function createEvaluationRuntime(deps) {
-	return new WebSkillRuntime({
-		...deps,
-		executor: deps.executor ?? new ProcessSandboxExecutor(deps.fs)
-	});
-}
 /** 失败 trace → 回归评估任务建议（prompt 复现 + expected 错误模式） */
 function suggestFromFailedRun(run) {
 	const errorPatterns = run.trace.filter((e) => e.type === "tool.failed" || e.type === "run.failed").map((e) => String(e.data?.["code"] ?? e.message ?? "")).filter(Boolean);
@@ -977,15 +795,208 @@ var DependencyGraph = class DependencyGraph {
 		return out.sort();
 	}
 };
+/** 环境无关 sha256（WebCrypto；Node ≥17 与浏览器均有 globalThis.crypto.subtle） */
+async function sha256Hex(text) {
+	const digest = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(text));
+	return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
 /** 读文档 + sha256 hash（变更检测用） */
 async function readDocument(fs, path) {
 	const content = await fs.readText(path);
 	return {
 		path,
 		content,
-		hash: createHash("sha256").update(content).digest("hex")
+		hash: await sha256Hex(content)
 	};
 }
+
+//#endregion
+//#region ../governance/dist/index.js
+/** 默认策略：任何候选都必须人工审批 */
+var AlwaysHumanApprovalPolicy = class {
+	evaluate(candidate) {
+		return {
+			needsHuman: true,
+			reason: `Candidate "${candidate.name}" requires human approval (risk: ${candidate.risk})`
+		};
+	}
+};
+/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
+var CompositeApprovalPolicy = class {
+	#rules;
+	#fallback;
+	constructor(rules, fallback) {
+		this.#rules = rules;
+		this.#fallback = fallback ?? new AlwaysHumanApprovalPolicy();
+	}
+	evaluate(candidate) {
+		for (const rule of this.#rules) {
+			const decision = rule(candidate);
+			if (decision) return decision;
+		}
+		return this.#fallback.evaluate(candidate);
+	}
+};
+/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
+var ApprovalWorkflow = class {
+	#policy;
+	#audit;
+	#store;
+	#skillManager;
+	#versions;
+	#fs;
+	constructor(deps) {
+		this.#policy = deps.policy;
+		this.#audit = deps.audit;
+		this.#store = deps.store;
+		this.#skillManager = deps.skillManager;
+		this.#versions = deps.versions;
+		this.#fs = deps.fs ?? new NodeFS();
+	}
+	/** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
+	async review(candidateId, input) {
+		const candidate = await this.#store.get(candidateId);
+		if (candidate.status !== "draft" && candidate.status !== "pending-review") throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidateId}" cannot be reviewed from status "${candidate.status}"`);
+		const decision = this.#policy.evaluate(candidate);
+		let approved;
+		if (decision.needsHuman) {
+			if (!input.uiBridge) {
+				await this.#store.updateStatus(candidateId, "pending-review");
+				throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" requires human approval: ${decision.reason}`);
+			}
+			await this.#store.updateStatus(candidateId, "pending-review");
+			const response = await input.uiBridge.request({
+				type: "confirm",
+				id: `approval-${candidateId}`,
+				message: `Approve candidate "${candidate.name}" (risk: ${candidate.risk})? ${decision.reason}`,
+				defaultValue: false
+			});
+			approved = response.cancelled !== true && response.value === true;
+		} else approved = true;
+		const updated = await this.#store.updateStatus(candidateId, approved ? "approved" : "rejected");
+		await this.#audit.append({
+			type: "candidate.reviewed",
+			target: candidateId,
+			actor: input.actor,
+			data: {
+				approved,
+				reason: decision.reason
+			}
+		});
+		return updated;
+	}
+	/** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
+	async publish(candidateId, input) {
+		const candidate = await this.#store.get(candidateId);
+		if (candidate.status !== "approved") throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" must be approved before publishing (status: ${candidate.status})`);
+		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-candidate-"))).split(path.sep).join("/");
+		try {
+			const skillDir = `${stagingRoot}/${candidate.name}`;
+			for (const file of candidate.files) await this.#fs.writeText(resolveInsideRoot(skillDir, file.path), file.content);
+			const report = await validateSkills(this.#fs, [stagingRoot]);
+			if (!report.ok) {
+				const errors = report.issues.filter((i) => i.severity === "error");
+				throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
+			}
+			const manifest = await this.#skillManager.install({
+				type: "local",
+				path: skillDir
+			});
+			const archiveOut = `${stagingRoot}/version-archive.zip`;
+			await exportArchive(this.#fs, `${this.#skillManager.managedRoot}/${candidate.name}`, {
+				format: "zip",
+				outPath: archiveOut
+			});
+			await this.#versions.add(candidate.name, {
+				reason: `Publish candidate ${candidateId}`,
+				manifest,
+				archive: await this.#fs.readBinary(archiveOut)
+			});
+			await this.#store.updateStatus(candidateId, "published");
+			await this.#audit.append({
+				type: "skill.published",
+				target: candidate.name,
+				actor: input.actor,
+				data: {
+					candidateId,
+					digest: manifest.integrity.digest
+				}
+			});
+			return manifest;
+		} catch (e) {
+			if (e instanceof WebSkillError) throw e;
+			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to publish candidate "${candidateId}": ${messageOf(e)}`, e);
+		} finally {
+			try {
+				await this.#fs.remove(stagingRoot, { recursive: true });
+			} catch {}
+		}
+	}
+	/**
+	* 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
+	* 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
+	* RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
+	*/
+	async applyRollback(skillName, versionId, input) {
+		assertSafePathSegment(skillName, "skill name");
+		assertSafePathSegment(versionId, "version id");
+		const version = await this.#versions.get(skillName, versionId);
+		const archive = await this.#versions.readArchive(skillName, versionId);
+		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-rollback-"))).split(path.sep).join("/");
+		try {
+			const skillDir = `${stagingRoot}/${skillName}`;
+			for (const [rel, content] of await unzipWithLimits(archive)) {
+				if (rel.endsWith("/")) continue;
+				await this.#fs.writeBinary(resolveInsideRoot(skillDir, rel), content);
+			}
+			const report = await validateSkills(this.#fs, [stagingRoot]);
+			if (!report.ok) {
+				const errors = report.issues.filter((i) => i.severity === "error");
+				throw new WebSkillError("GOVERNANCE_FAILED", `Rollback archive of "${skillName}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
+			}
+			const manifest = await this.#skillManager.install({
+				type: "local",
+				path: skillDir
+			});
+			if (manifest.integrity.digest !== version.manifest.integrity.digest) throw new WebSkillError("GOVERNANCE_FAILED", `Rollback of "${skillName}" to version "${versionId}" produced a digest mismatch: expected ${version.manifest.integrity.digest}, got ${manifest.integrity.digest}`);
+			await this.#versions.add(skillName, {
+				reason: input.reason ?? `Rollback to version ${versionId}`,
+				manifest,
+				archive
+			});
+			await this.#audit.append({
+				type: "skill.rolled_back",
+				target: skillName,
+				actor: input.actor,
+				data: {
+					targetVersionId: versionId,
+					reason: input.reason
+				}
+			});
+			return manifest;
+		} catch (e) {
+			if (e instanceof WebSkillError) throw e;
+			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to roll back "${skillName}" to version "${versionId}": ${messageOf(e)}`, e);
+		} finally {
+			try {
+				await this.#fs.remove(stagingRoot, { recursive: true });
+			} catch {}
+		}
+	}
+};
+/**
+* 治理评估专用 runtime 装配（不可信技能试用路径）：
+* 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
+* env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
+* 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
+* 非安全边界；envWhitelist 同样适用于该执行器）。
+*/
+function createEvaluationRuntime(deps) {
+	return new WebSkillRuntime({
+		...deps,
+		executor: deps.executor ?? new ProcessSandboxExecutor(deps.fs)
+	});
+}
 const EXTRACT_PROMPT = (doc, nameHint) => [
 	"Extract an executable skill from the following document as STRICT JSON only.",
 	"Schema: {\"name\": string, \"description\": string, \"risk\": \"low\"|\"medium\"|\"high\",",

package/dist/{index-DfINBEOy.d.ts → index-DJOha4b6.d.ts}

@@ -738,6 +738,12 @@ interface AgentLoopDeps {
 declare class AgentLoop {
   #private;
   constructor(deps: AgentLoopDeps, config?: AgentLoopConfig);
+  /**
+   * 取消进行中的 run：触发该 run 的 AbortController（与 totalTimeout 硬期限同一通道），
+   * run 以 cancelled（RUN_CANCELLED）终止；未找到（已终态或不属于本实例）返回 false。
+   * 取消在下一个中断点生效（LLM complete/stream 调用；交互等待不强制中断）。
+   */
+  cancel(runId: string): boolean;
   run(input: {
     sessionId: string;
     userPrompt: string;
@@ -835,6 +841,12 @@ declare class WebSkillRuntime {
    * @experimental
    */
   resumeRun(runId: string): Promise<RunResult>;
+  /**
+   * 取消进行中的 run（chatbot Stop 按钮等）：触发该 run 的 AbortController，
+   * run 以 cancelled（RUN_CANCELLED）终止；未找到活跃 run 返回 false。
+   * 取消在下一个中断点生效（LLM complete/stream；交互等待不强制中断）。
+   */
+  cancel(runId: string): boolean;
 }
 //#endregion
 export { SerializingMemoryStore as $, LifecycleHook as A, toVercelToolSpecs as At, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, normalizeErrorCode as Ct, HookRunnerOptions as D, resolveToolName as Dt, HookRunner as E, parseBridgeRequest as Et, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, NetworkPolicy as N, InstalledSkillManifest as O, schemaToForm as Ot, OpenAiCompatibleClient as P, ScriptExecutor as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, networkUrlHost as St, GoogleGenAiClientConfig as T, normalizeToolError as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, SchemaInferer as X, RuntimeSessionHandle as Y, ScriptExecutionContext as Z, EventBus as _, extractChartSpec as _t, AgentLoopConfig as a, TraceClock as at, FsArtifactStore as b, isNetworkAllowed as bt, AnthropicClientConfig as c, TraceRecorder as ct, BridgeCapabilities as d, WebSkillRuntime as dt, SkillRouter as et, BridgeCapability as f, WebSkillRuntimeDeps as ft, CapabilityMode as g, createWebSkillApi as gt, CapabilityApproval as h, createScriptContext as ht, AgentLoop as i, ToolResult as it, LifecycleHookContext as j, LifecycleEvent as k, toLlmToolSpec as kt, ApprovalDecision as l, VercelToolSpec as lt, BridgeResponse as m, buildRenderResult as mt, ASK_USER_TOOL as n, ToolDefinition as nt, AgentLoopDeps as o, TraceEvent as ot, BridgeRequest as p, bridgeError as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, ToolResolution as rt, AnthropicClient as s, TraceEventType as st, ASK_USER_INPUT_SCHEMA as t, SkillStateGuard as tt, ApprovalScope as u, WebSkillApi as ut, ExternalSkillProvider as v, fromVercelResult as vt, GoogleGenAiClient as w, normalizeToolContent as wt, FsMemoryStore as x, mergeCatalogEntries as xt, ExternalToolSource as y, fromVercelStreamPart as yt, READ_SKILL_FILE_TOOL_NAME as z };

package/dist/{index-CsDJvYGV.d.ts → index-DRlYzdr2.d.ts}

@@ -1,5 +1,5 @@
 import { B as SkillManifest, C as FileStat, G as SkillsLockfile, L as SkillInstallSource, T as JsonSchema, _ as RenderResultRequest, o as InteractionRequest, q as VerifyResult, s as InteractionResponse, v as UiBridge, w as FileSystemProvider, y as ArchiveLimits } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { N as NetworkPolicy, Q as ScriptExecutor, X as SchemaInferer, Z as ScriptExecutionContext, b as FsArtifactStore, d as BridgeCapabilities, it as ToolResult, nt as ToolDefinition, u as ApprovalScope, x as FsMemoryStore } from "./index-DfINBEOy.js";
+import { N as NetworkPolicy, Q as ScriptExecutor, X as SchemaInferer, Z as ScriptExecutionContext, b as FsArtifactStore, d as BridgeCapabilities, it as ToolResult, nt as ToolDefinition, u as ApprovalScope, x as FsMemoryStore } from "./index-DJOha4b6.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
 //#region src/fs/nodeFs.d.ts

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 import { $ as buildCatalog, A as SKILL_NAME_MAX_LENGTH, B as SkillManifest, C as FileStat, D as RemoteUrlPolicy, E as MemoryFS, F as SkillDiscovery, G as SkillsLockfile, H as SkillPackManifest, I as SkillDocument, J as WebSkillError, K as ValidationReport, L as SkillInstallSource, M as SKILL_PACK_FILE, N as SkillCatalog, O as SKILLS_LOCKFILE, P as SkillCatalogEntry, Q as atomicWriteText, R as SkillIssue, S as DiscoveryResult, T as JsonSchema, U as SkillReader, V as SkillMetadata, W as SkillSource, X as assertRemoteUrlAllowed, Y as WebSkillErrorCode, Z as assertSafePathSegment, _ as RenderResultRequest, _t as unzipWithLimits, a as InteractionPolicy, at as exportSkills, b as CatalogRenderer, bt as xmlRenderer, c as LlmClient, ct as messageOf, d as LlmResponse, dt as parseSkillPackManifest, et as buildManifest, f as LlmStreamEvent, ft as readResponseWithLimit, g as RenderBlock, gt as resolveInsideRoot, h as MemoryStore, ht as resolveArchiveLimits, i as FormField, it as escapeXml, j as SKILL_NAME_PATTERN, k as SKILL_MANIFEST_FILE, l as LlmCompleteInput, lt as normalizePath, m as LlmToolSpec, mt as renderCatalogJson, n as ArtifactStore, nt as checkSkillRules, o as InteractionRequest, ot as isValidSkillName, p as LlmToolCall, pt as renderAvailableSkillsXml, q as VerifyResult, r as ChartSpec, rt as computeDigest, s as InteractionResponse, st as jsonRenderer, t as Artifact, tt as checkDependencyCycles, u as LlmMessage, ut as parseSkillMarkdown, v as UiBridge, vt as validateSkills, w as FileSystemProvider, x as DEFAULT_ARCHIVE_LIMITS, y as ArchiveLimits, yt as verifyManifest, z as SkillLocation } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { $ as SerializingMemoryStore, A as LifecycleHook, At as toVercelToolSpecs, B as RUN_SNAPSHOT_SCHEMA_VERSION, C as FullDisclosureRouter, Ct as normalizeErrorCode, D as HookRunnerOptions, Dt as resolveToolName, E as HookRunner, Et as parseBridgeRequest, F as OpenAiCompatibleClientConfig, G as RunTerminationReason, H as RunResult, I as ProgressiveRouter, J as RuntimeSession, K as RuntimePhase, L as READ_SKILL_FILE_INPUT_SCHEMA, M as LifecycleListener, N as NetworkPolicy, O as InstalledSkillManifest, Ot as schemaToForm, P as OpenAiCompatibleClient, Q as ScriptExecutor, R as READ_SKILL_FILE_TOOL, S as FsRunSnapshotStore, St as networkUrlHost, T as GoogleGenAiClientConfig, Tt as normalizeToolError, U as RunSnapshot, V as RouteResult, W as RunSnapshotStore, X as SchemaInferer, Y as RuntimeSessionHandle, Z as ScriptExecutionContext, _ as EventBus, _t as extractChartSpec, a as AgentLoopConfig, at as TraceClock, b as FsArtifactStore, bt as isNetworkAllowed, c as AnthropicClientConfig, ct as TraceRecorder, d as BridgeCapabilities, dt as WebSkillRuntime, et as SkillRouter, f as BridgeCapability, ft as WebSkillRuntimeDeps, g as CapabilityMode, gt as createWebSkillApi, h as CapabilityApproval, ht as createScriptContext, i as AgentLoop, it as ToolResult, j as LifecycleHookContext, k as LifecycleEvent, kt as toLlmToolSpec, l as ApprovalDecision, lt as VercelToolSpec, m as BridgeResponse, mt as buildRenderResult, n as ASK_USER_TOOL, nt as ToolDefinition, o as AgentLoopDeps, ot as TraceEvent, p as BridgeRequest, pt as bridgeError, q as RuntimeRun, r as ASK_USER_TOOL_NAME, rt as ToolResolution, s as AnthropicClient, st as TraceEventType, t as ASK_USER_INPUT_SCHEMA, tt as SkillStateGuard, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, vt as fromVercelResult, w as GoogleGenAiClient, wt as normalizeToolContent, x as FsMemoryStore, xt as mergeCatalogEntries, y as ExternalToolSource, yt as fromVercelStreamPart, z as READ_SKILL_FILE_TOOL_NAME } from "./index-DfINBEOy.js";
+import { $ as SerializingMemoryStore, A as LifecycleHook, At as toVercelToolSpecs, B as RUN_SNAPSHOT_SCHEMA_VERSION, C as FullDisclosureRouter, Ct as normalizeErrorCode, D as HookRunnerOptions, Dt as resolveToolName, E as HookRunner, Et as parseBridgeRequest, F as OpenAiCompatibleClientConfig, G as RunTerminationReason, H as RunResult, I as ProgressiveRouter, J as RuntimeSession, K as RuntimePhase, L as READ_SKILL_FILE_INPUT_SCHEMA, M as LifecycleListener, N as NetworkPolicy, O as InstalledSkillManifest, Ot as schemaToForm, P as OpenAiCompatibleClient, Q as ScriptExecutor, R as READ_SKILL_FILE_TOOL, S as FsRunSnapshotStore, St as networkUrlHost, T as GoogleGenAiClientConfig, Tt as normalizeToolError, U as RunSnapshot, V as RouteResult, W as RunSnapshotStore, X as SchemaInferer, Y as RuntimeSessionHandle, Z as ScriptExecutionContext, _ as EventBus, _t as extractChartSpec, a as AgentLoopConfig, at as TraceClock, b as FsArtifactStore, bt as isNetworkAllowed, c as AnthropicClientConfig, ct as TraceRecorder, d as BridgeCapabilities, dt as WebSkillRuntime, et as SkillRouter, f as BridgeCapability, ft as WebSkillRuntimeDeps, g as CapabilityMode, gt as createWebSkillApi, h as CapabilityApproval, ht as createScriptContext, i as AgentLoop, it as ToolResult, j as LifecycleHookContext, k as LifecycleEvent, kt as toLlmToolSpec, l as ApprovalDecision, lt as VercelToolSpec, m as BridgeResponse, mt as buildRenderResult, n as ASK_USER_TOOL, nt as ToolDefinition, o as AgentLoopDeps, ot as TraceEvent, p as BridgeRequest, pt as bridgeError, q as RuntimeRun, r as ASK_USER_TOOL_NAME, rt as ToolResolution, s as AnthropicClient, st as TraceEventType, t as ASK_USER_INPUT_SCHEMA, tt as SkillStateGuard, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, vt as fromVercelResult, w as GoogleGenAiClient, wt as normalizeToolContent, x as FsMemoryStore, xt as mergeCatalogEntries, y as ExternalToolSource, yt as fromVercelStreamPart, z as READ_SKILL_FILE_TOOL_NAME } from "./index-DJOha4b6.js";
 export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSource, type SkillStateGuard, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type UiBridge, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, verifyManifest, xmlRenderer };

package/dist/index.js

@@ -1,4 +1,4 @@
 import { A as resolveArchiveLimits, C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, F as xmlRenderer, M as unzipWithLimits, N as validateSkills, O as renderAvailableSkillsXml, P as verifyManifest, S as jsonRenderer, T as parseSkillMarkdown, _ as checkSkillRules, a as SKILL_NAME_MAX_LENGTH, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, f as assertSafePathSegment, g as checkDependencyCycles, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, k as renderCatalogJson, l as SkillReader, m as buildCatalog, n as MemoryFS, o as SKILL_NAME_PATTERN, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as WebSkillError, v as computeDigest, w as normalizePath, x as isValidSkillName, y as escapeXml } from "./dist-BQzncxXg.js";
-import { A as isNetworkAllowed, B as toVercelToolSpecs, C as bridgeError, D as extractChartSpec, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, L as resolveToolName, M as networkUrlHost, N as normalizeErrorCode, O as fromVercelResult, P as normalizeToolContent, R as schemaToForm, S as WebSkillRuntime, T as createScriptContext, _ as READ_SKILL_FILE_TOOL, a as AnthropicClient, b as SerializingMemoryStore, c as FsArtifactStore, d as FullDisclosureRouter, f as GoogleGenAiClient, g as READ_SKILL_FILE_INPUT_SCHEMA, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, k as fromVercelStreamPart, l as FsMemoryStore, m as OpenAiCompatibleClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as HookRunner, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_TOOL_NAME, w as buildRenderResult, x as TraceRecorder, y as RUN_SNAPSHOT_SCHEMA_VERSION, z as toLlmToolSpec } from "./dist-B77plHjw.js";
+import { A as isNetworkAllowed, B as toVercelToolSpecs, C as bridgeError, D as extractChartSpec, E as createWebSkillApi, F as normalizeToolError, I as parseBridgeRequest, L as resolveToolName, M as networkUrlHost, N as normalizeErrorCode, O as fromVercelResult, P as normalizeToolContent, R as schemaToForm, S as WebSkillRuntime, T as createScriptContext, _ as READ_SKILL_FILE_TOOL, a as AnthropicClient, b as SerializingMemoryStore, c as FsArtifactStore, d as FullDisclosureRouter, f as GoogleGenAiClient, g as READ_SKILL_FILE_INPUT_SCHEMA, h as ProgressiveRouter, i as AgentLoop, j as mergeCatalogEntries, k as fromVercelStreamPart, l as FsMemoryStore, m as OpenAiCompatibleClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as HookRunner, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_TOOL_NAME, w as buildRenderResult, x as TraceRecorder, y as RUN_SNAPSHOT_SCHEMA_VERSION, z as toLlmToolSpec } from "./dist-BXpDDZpR.js";
 
 export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, verifyManifest, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { I as SkillDocument, P as SkillCatalogEntry, T as JsonSchema, m as LlmToolSpec } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { it as ToolResult, v as ExternalSkillProvider, xt as mergeCatalogEntries, y as ExternalToolSource } from "./index-DfINBEOy.js";
+import { it as ToolResult, v as ExternalSkillProvider, xt as mergeCatalogEntries, y as ExternalToolSource } from "./index-DJOha4b6.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { C as messageOf, d as assertRemoteUrlAllowed, u as WebSkillError } from "./dist-BQzncxXg.js";
-import { P as normalizeToolContent, j as mergeCatalogEntries } from "./dist-B77plHjw.js";
+import { P as normalizeToolContent, j as mergeCatalogEntries } from "./dist-BXpDDZpR.js";
 
 //#region ../mcp/dist/index.js
 /**

package/dist/node.d.ts

@@ -1,5 +1,5 @@
 import { B as SkillManifest, G as SkillsLockfile, L as SkillInstallSource, O as SKILLS_LOCKFILE, k as SKILL_MANIFEST_FILE, q as VerifyResult } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { ht as createScriptContext } from "./index-DfINBEOy.js";
+import { ht as createScriptContext } from "./index-DJOha4b6.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-BPUBZCwJ-4jat_SVG.js";
-import { a as NodeScriptExecutor, c as ProcessSandboxOptions, d as SkillManager, f as exportArchive, i as NodeFS, l as SandboxOptions, n as FileArtifactStore, o as OxcSchemaInferer, p as readArchiveManifest, r as FileMemoryStore, s as ProcessSandboxExecutor, t as CliUiBridge, u as SandboxedScriptExecutor } from "./index-CsDJvYGV.js";
+import { a as NodeScriptExecutor, c as ProcessSandboxOptions, d as SkillManager, f as exportArchive, i as NodeFS, l as SandboxOptions, n as FileArtifactStore, o as OxcSchemaInferer, p as readArchiveManifest, r as FileMemoryStore, s as ProcessSandboxExecutor, t as CliUiBridge, u as SandboxedScriptExecutor } from "./index-DRlYzdr2.js";
 export { CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, type ProcessSandboxOptions, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };

package/dist/node.js

@@ -1,6 +1,6 @@
 import { i as SKILL_MANIFEST_FILE, r as SKILLS_LOCKFILE } from "./dist-BQzncxXg.js";
-import { T as createScriptContext } from "./dist-B77plHjw.js";
+import { T as createScriptContext } from "./dist-BXpDDZpR.js";
 import { i as probeLlmCapabilities } from "./env--jJB-TSX-04klhTYi.js";
-import { a as NodeScriptExecutor, c as SandboxedScriptExecutor, d as readArchiveManifest, i as NodeFS, l as SkillManager, n as FileArtifactStore, o as OxcSchemaInferer, r as FileMemoryStore, s as ProcessSandboxExecutor, t as CliUiBridge, u as exportArchive } from "./dist-Chk8iB-E.js";
+import { a as NodeScriptExecutor, c as SandboxedScriptExecutor, d as readArchiveManifest, i as NodeFS, l as SkillManager, n as FileArtifactStore, o as OxcSchemaInferer, r as FileMemoryStore, s as ProcessSandboxExecutor, t as CliUiBridge, u as exportArchive } from "./dist-DWFDb1Ww.js";
 
 export { CliUiBridge, FileArtifactStore, FileMemoryStore, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SandboxedScriptExecutor, SkillManager, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };

package/dist/ui.d.ts

@@ -1,5 +1,5 @@
 import { _ as RenderResultRequest, g as RenderBlock, o as InteractionRequest, r as ChartSpec, s as InteractionResponse, v as UiBridge } from "./types-CKm5G_eQ-krKWW8WV.js";
-import { mt as buildRenderResult } from "./index-DfINBEOy.js";
+import { mt as buildRenderResult } from "./index-DJOha4b6.js";
 //#region ../ui/dist/index.d.ts
 //#region src/model/formModel.d.ts
 interface FormModel {

package/dist/ui.js

@@ -1,4 +1,4 @@
-import { w as buildRenderResult } from "./dist-B77plHjw.js";
+import { w as buildRenderResult } from "./dist-BXpDDZpR.js";
 import { C as renderMiniChart, D as toA2uiMessages, E as shapeInteractionValue, O as toOpenUiLang, S as renderBlocks, T as renderRenderResult, _ as ensureStyles, a as CHART_PALETTE, b as fromVercelToolResult, c as OPENUI_CANCEL_ACTION, d as VercelUiBridge, f as WEBSKILL_STYLES_CSS, g as decodeInteractionResponse, h as collectValues, i as A2UI_VERSION, k as toVercelToolInvocation, l as OPENUI_SUBMIT_ACTION, m as chartToTable, n as A2UI_CANCEL_ACTION, o as LitRendererBridge, p as WebFormBridge, r as A2UI_SUBMIT_ACTION, s as OPENUI_AUTHORIZE_ACTION, t as A2UI_BASIC_CATALOG_ID, u as VERCEL_INTERACTION_TOOL_NAME, v as fromA2uiAction, w as renderMiniMarkdown, x as interactionToFormModel, y as fromOpenUiAction } from "./dist-DNSG9FqC.js";
 
 export { A2UI_BASIC_CATALOG_ID, A2UI_CANCEL_ACTION, A2UI_SUBMIT_ACTION, A2UI_VERSION, CHART_PALETTE, LitRendererBridge, OPENUI_AUTHORIZE_ACTION, OPENUI_CANCEL_ACTION, OPENUI_SUBMIT_ACTION, VERCEL_INTERACTION_TOOL_NAME, VercelUiBridge, WEBSKILL_STYLES_CSS, WebFormBridge, buildRenderResult, chartToTable, collectValues, decodeInteractionResponse, ensureStyles, fromA2uiAction, fromOpenUiAction, fromVercelToolResult, interactionToFormModel, renderBlocks, renderMiniChart, renderMiniMarkdown, renderRenderResult, shapeInteractionValue, toA2uiMessages, toOpenUiLang, toVercelToolInvocation };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webskill/sdk",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "WebSkill \u2014 browser/Node agent skill runtime (skills, tools, MCP, governance, UI)",
   "license": "MIT",
   "type": "module",