@webskill/sdk 0.2.7 → 0.2.8

package/dist/governance.js

@@ -1,11 +1,6 @@
-import { C as messageOf, M as unzipWithLimits, N as validateSkills, f as assertSafePathSegment, j as resolveInsideRoot, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
-import { S as WebSkillRuntime } from "./dist-BdOW8N4V.js";
-import { i as NodeFS, s as ProcessSandboxExecutor, u as exportArchive } from "./dist-CcMIUXeZ.js";
-import path from "node:path";
-import { tmpdir } from "node:os";
-import { mkdtemp } from "node:fs/promises";
+import { C as messageOf, f as assertSafePathSegment, u as WebSkillError, x as isValidSkillName } from "./dist-BQzncxXg.js";
 
-//#region ../governance/dist/documentSource-C6gq6pbk.js
+//#region ../governance/dist/index.js
 const invalid = (message, details) => {
 	throw new WebSkillError("CANDIDATE_INVALID", message, details);
 };
@@ -216,6 +211,31 @@ var LlmCandidateGenerator = class {
 		return candidate;
 	}
 };
+/** 默认策略：任何候选都必须人工审批 */
+var AlwaysHumanApprovalPolicy = class {
+	evaluate(candidate) {
+		return {
+			needsHuman: true,
+			reason: `Candidate "${candidate.name}" requires human approval (risk: ${candidate.risk})`
+		};
+	}
+};
+/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
+var CompositeApprovalPolicy = class {
+	#rules;
+	#fallback;
+	constructor(rules, fallback) {
+		this.#rules = rules;
+		this.#fallback = fallback ?? new AlwaysHumanApprovalPolicy();
+	}
+	evaluate(candidate) {
+		for (const rule of this.#rules) {
+			const decision = rule(candidate);
+			if (decision) return decision;
+		}
+		return this.#fallback.evaluate(candidate);
+	}
+};
 const fileOf$1 = (root) => `${root}/.webskill/audit.jsonl`;
 /** 环境无关 sha256（WebCrypto；Node ≥17 与浏览器均有 globalThis.crypto.subtle） */
 const sha256Hex$1 = async (text) => {
@@ -289,12 +309,14 @@ var FsAuditLog = class {
 		if (!await this.#fs.exists(path)) return [];
 		const raw = await this.#fs.readText(path);
 		const events = [];
+		let skippedLines = 0;
 		for (const line of raw.split("\n")) {
 			if (line.trim() === "") continue;
 			let event;
 			try {
 				event = JSON.parse(line);
 			} catch {
+				skippedLines += 1;
 				continue;
 			}
 			if (filter.target !== void 0 && event.target !== filter.target) continue;
@@ -302,6 +324,7 @@ var FsAuditLog = class {
 			if (filter.since !== void 0 && event.ts < filter.since) continue;
 			events.push(event);
 		}
+		if (skippedLines > 0) console.warn(`[webskill] Audit log at ${path} contains ${skippedLines} unparsable line(s) skipped by query; run verifyChain() to check integrity`);
 		return events;
 	}
 	/** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接 */
@@ -461,14 +484,18 @@ var FailureAnalyzer = class {
 				return {
 					cause: String(parsed["cause"] ?? "Unknown cause"),
 					suggestedFix: String(parsed["suggestedFix"] ?? "Manual inspection required"),
-					...typeof parsed["errorCode"] === "string" ? { errorCode: parsed["errorCode"] } : firstCode ? { errorCode: firstCode } : {}
+					...typeof parsed["errorCode"] === "string" ? { errorCode: parsed["errorCode"] } : firstCode ? { errorCode: firstCode } : {},
+					source: "llm"
 				};
-			} catch {}
+			} catch (e) {
+				console.warn(`[webskill] LLM diagnosis output was not valid JSON, falling back to rule-based diagnosis: ${e instanceof Error ? e.message : String(e)}`);
+			}
 		}
 		return {
 			cause: firstCode ? ERROR_CAUSES[firstCode] ?? `Failure with code ${firstCode}` : "Unknown failure (no error code in trace)",
 			suggestedFix: firstCode ? `Inspect the component responsible for ${firstCode}` : "Inspect the run trace manually",
-			...firstCode ? { errorCode: firstCode } : {}
+			...firstCode ? { errorCode: firstCode } : {},
+			source: "rules"
 		};
 	}
 };
@@ -809,194 +836,6 @@ async function readDocument(fs, path) {
 		hash: await sha256Hex(content)
 	};
 }
-
-//#endregion
-//#region ../governance/dist/index.js
-/** 默认策略：任何候选都必须人工审批 */
-var AlwaysHumanApprovalPolicy = class {
-	evaluate(candidate) {
-		return {
-			needsHuman: true,
-			reason: `Candidate "${candidate.name}" requires human approval (risk: ${candidate.risk})`
-		};
-	}
-};
-/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
-var CompositeApprovalPolicy = class {
-	#rules;
-	#fallback;
-	constructor(rules, fallback) {
-		this.#rules = rules;
-		this.#fallback = fallback ?? new AlwaysHumanApprovalPolicy();
-	}
-	evaluate(candidate) {
-		for (const rule of this.#rules) {
-			const decision = rule(candidate);
-			if (decision) return decision;
-		}
-		return this.#fallback.evaluate(candidate);
-	}
-};
-/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
-var ApprovalWorkflow = class {
-	#policy;
-	#audit;
-	#store;
-	#skillManager;
-	#versions;
-	#fs;
-	constructor(deps) {
-		this.#policy = deps.policy;
-		this.#audit = deps.audit;
-		this.#store = deps.store;
-		this.#skillManager = deps.skillManager;
-		this.#versions = deps.versions;
-		this.#fs = deps.fs ?? new NodeFS();
-	}
-	/** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
-	async review(candidateId, input) {
-		const candidate = await this.#store.get(candidateId);
-		if (candidate.status !== "draft" && candidate.status !== "pending-review") throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidateId}" cannot be reviewed from status "${candidate.status}"`);
-		const decision = this.#policy.evaluate(candidate);
-		let approved;
-		if (decision.needsHuman) {
-			if (!input.uiBridge) {
-				await this.#store.updateStatus(candidateId, "pending-review");
-				throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" requires human approval: ${decision.reason}`);
-			}
-			await this.#store.updateStatus(candidateId, "pending-review");
-			const response = await input.uiBridge.request({
-				type: "confirm",
-				id: `approval-${candidateId}`,
-				message: `Approve candidate "${candidate.name}" (risk: ${candidate.risk})? ${decision.reason}`,
-				defaultValue: false
-			});
-			approved = response.cancelled !== true && response.value === true;
-		} else approved = true;
-		const updated = await this.#store.updateStatus(candidateId, approved ? "approved" : "rejected");
-		await this.#audit.append({
-			type: "candidate.reviewed",
-			target: candidateId,
-			actor: input.actor,
-			data: {
-				approved,
-				reason: decision.reason
-			}
-		});
-		return updated;
-	}
-	/** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
-	async publish(candidateId, input) {
-		const candidate = await this.#store.get(candidateId);
-		if (candidate.status !== "approved") throw new WebSkillError("APPROVAL_REQUIRED", `Candidate "${candidate.name}" must be approved before publishing (status: ${candidate.status})`);
-		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-candidate-"))).split(path.sep).join("/");
-		try {
-			const skillDir = `${stagingRoot}/${candidate.name}`;
-			for (const file of candidate.files) await this.#fs.writeText(resolveInsideRoot(skillDir, file.path), file.content);
-			const report = await validateSkills(this.#fs, [stagingRoot]);
-			if (!report.ok) {
-				const errors = report.issues.filter((i) => i.severity === "error");
-				throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
-			}
-			const manifest = await this.#skillManager.install({
-				type: "local",
-				path: skillDir
-			});
-			const archiveOut = `${stagingRoot}/version-archive.zip`;
-			await exportArchive(this.#fs, `${this.#skillManager.managedRoot}/${candidate.name}`, {
-				format: "zip",
-				outPath: archiveOut
-			});
-			await this.#versions.add(candidate.name, {
-				reason: `Publish candidate ${candidateId}`,
-				manifest,
-				archive: await this.#fs.readBinary(archiveOut)
-			});
-			await this.#store.updateStatus(candidateId, "published");
-			await this.#audit.append({
-				type: "skill.published",
-				target: candidate.name,
-				actor: input.actor,
-				data: {
-					candidateId,
-					digest: manifest.integrity.digest
-				}
-			});
-			return manifest;
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to publish candidate "${candidateId}": ${messageOf(e)}`, e);
-		} finally {
-			try {
-				await this.#fs.remove(stagingRoot, { recursive: true });
-			} catch {}
-		}
-	}
-	/**
-	* 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
-	* 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
-	* RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
-	*/
-	async applyRollback(skillName, versionId, input) {
-		assertSafePathSegment(skillName, "skill name");
-		assertSafePathSegment(versionId, "version id");
-		const version = await this.#versions.get(skillName, versionId);
-		const archive = await this.#versions.readArchive(skillName, versionId);
-		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-rollback-"))).split(path.sep).join("/");
-		try {
-			const skillDir = `${stagingRoot}/${skillName}`;
-			for (const [rel, content] of await unzipWithLimits(archive)) {
-				if (rel.endsWith("/")) continue;
-				await this.#fs.writeBinary(resolveInsideRoot(skillDir, rel), content);
-			}
-			const report = await validateSkills(this.#fs, [stagingRoot]);
-			if (!report.ok) {
-				const errors = report.issues.filter((i) => i.severity === "error");
-				throw new WebSkillError("GOVERNANCE_FAILED", `Rollback archive of "${skillName}" failed validation: ${errors.map((i) => i.message).join("; ")}`, errors);
-			}
-			const manifest = await this.#skillManager.install({
-				type: "local",
-				path: skillDir
-			});
-			if (manifest.integrity.digest !== version.manifest.integrity.digest) throw new WebSkillError("GOVERNANCE_FAILED", `Rollback of "${skillName}" to version "${versionId}" produced a digest mismatch: expected ${version.manifest.integrity.digest}, got ${manifest.integrity.digest}`);
-			await this.#versions.add(skillName, {
-				reason: input.reason ?? `Rollback to version ${versionId}`,
-				manifest,
-				archive
-			});
-			await this.#audit.append({
-				type: "skill.rolled_back",
-				target: skillName,
-				actor: input.actor,
-				data: {
-					targetVersionId: versionId,
-					reason: input.reason
-				}
-			});
-			return manifest;
-		} catch (e) {
-			if (e instanceof WebSkillError) throw e;
-			throw new WebSkillError("GOVERNANCE_FAILED", `Failed to roll back "${skillName}" to version "${versionId}": ${messageOf(e)}`, e);
-		} finally {
-			try {
-				await this.#fs.remove(stagingRoot, { recursive: true });
-			} catch {}
-		}
-	}
-};
-/**
-* 治理评估专用 runtime 装配（不可信技能试用路径）：
-* 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
-* env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
-* 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
-* 非安全边界；envWhitelist 同样适用于该执行器）。
-*/
-function createEvaluationRuntime(deps) {
-	return new WebSkillRuntime({
-		...deps,
-		executor: deps.executor ?? new ProcessSandboxExecutor(deps.fs)
-	});
-}
 const EXTRACT_PROMPT = (doc, nameHint) => [
 	"Extract an executable skill from the following document as STRICT JSON only.",
 	"Schema: {\"name\": string, \"description\": string, \"risk\": \"low\"|\"medium\"|\"high\",",
@@ -1080,4 +919,4 @@ function createMissHook(deps) {
 }
 
 //#endregion
-export { AlwaysHumanApprovalPolicy, ApprovalWorkflow, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, RepairPlanner, SCORING_WEIGHTS, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createEvaluationRuntime, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AlwaysHumanApprovalPolicy, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, RepairPlanner, SCORING_WEIGHTS, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/{index-BNQNSDKg.d.ts → index-7DVaZJU7.d.ts}

@@ -1,5 +1,5 @@
-import { D as UiSurfaceSnapshot, P as JsonSchema, _ as RenderResultRequest, b as UiSurfaceAction, g as RenderBlock, o as InteractionRequest, r as ChartSpec, s as InteractionResponse, v as UiBridge, y as UiSurface } from "./types-7fnqDVrf-BnRQjVU3.js";
-import { y as ExternalToolSource } from "./index-BpIK7tJM.js";
+import { D as UiSurfaceSnapshot, P as JsonSchema, _ as RenderResultRequest, b as UiSurfaceAction, g as RenderBlock, o as InteractionRequest, r as ChartSpec, s as InteractionResponse, v as UiBridge, y as UiSurface } from "./types-AmKCKJn_-BogJPQHU.js";
+import { y as ExternalToolSource } from "./index-QrHtAudz.js";
 import { z } from "zod";
 import { ComponentType, ReactNode } from "react";
 //#region ../ui/dist/index.d.ts
@@ -499,6 +499,23 @@ declare class LitRendererBridge implements UiBridge {
 }
 //#endregion
 //#region src/a2uiRuntime/loadLitCatalog.d.ts
+/** catalog 里单个组件的最小可见面（A2UI `LitComponentApi` 的结构子集） */
+interface A2uiCatalogComponent {
+  readonly name: string;
+  readonly tagName: string;
+  readonly schema: unknown;
+}
+/**
+ * A2UI catalog 句柄的最小结构契约。
+ *
+ * 与 optionalPeers/openUiRuntime.ts 同一约定：**不引用** `@a2ui/*` 的包类型。
+ * 它们是 optional peer，写进签名后会原样进入已发布的 `.d.ts`，
+ * 未安装 A2UI 的消费方 `tsc --noEmit` 会撞 TS2307（install-smoke 的类型探针实测）。
+ */
+interface A2uiCatalogHandle {
+  readonly id: string;
+  readonly components: ReadonlyMap<string, A2uiCatalogComponent>;
+}
 /**
  * BYOC Lit 元素的加载入口。
  *
@@ -506,7 +523,7 @@ declare class LitRendererBridge implements UiBridge {
  * 因此只能经动态 import 进来：未用 A2UI 档的应用不为这段体积买单，
  * 缺依赖时给出带安装提示的 `UI_UNAVAILABLE`，而不是一个空白 surface。
  */
-declare function loadWebSkillLitCatalog(): Promise<import('@a2ui/web_core/v0_9').Catalog<import('@a2ui/lit/v0_9').LitComponentApi>>;
+declare function loadWebSkillLitCatalog(): Promise<A2uiCatalogHandle>;
 //#endregion
 //#region src/optionalPeers/openUiRuntime.d.ts
 /**
@@ -577,4 +594,4 @@ interface LoadedOpenUiPeers {
  */
 declare function loadOpenUiPeers(): Promise<LoadedOpenUiPeers>;
 //#endregion
-export { ZodRuntime as $, UI_SPEC_COMPONENT as A, toJsonRenderSpec as At, UiSpecValidation as B, OPENUI_SUBMIT_ACTION as C, renderMiniMarkdown as Ct, RENDER_UI_TOOL as D, toA2uiSpecMessages as Dt, OpenUiRuntime as E, toA2uiMessages as Et, UiCatalogToolSourceOptions as F, toUiSurfaceActionDispatch as Ft, VERCEL_SURFACE_DATA_PART_TYPE as G, UiSurfaceDescriptor as H, UiComponentDef as I, toUiSurfaceDescriptor as It, VercelUiBridge as J, VercelSurfaceDataPart as K, UiSpecIssue as L, toVercelSurfaceDataPart as Lt, UiCatalog as M, toOpenUiSpecLang as Mt, UiCatalogInput as N, toOpenUiSurfaceLang as Nt, SurfaceRendererProvenance as O, toA2uiSurfaceAction as Ot, UiCatalogPromptOptions as P, toSurface as Pt, WebFormBridge as Q, UiSpecNode as R, toVercelToolInvocation as Rt, OPENUI_CANCEL_ACTION as S, renderMiniChart as St, OpenUiRendererProps as T, shapeInteractionValue as Tt, VERCEL_INTERACTION_TOOL_NAME as U, UiSurfaceActionDispatch as V, VERCEL_SURFACE_ACTION_DATA_PART_TYPE as W, WEBSKILL_STYLES_CSS as X, WEBSKILL_A2UI_CATALOG_ID as Y, WEBSKILL_SURFACE_ACTION as Z, FormModel as _, interactionToFormModel as _t, A2UI_SPEC_FORM_PATH as a, createUiCatalogToolSource as at, LoadedOpenUiPeers as b, loadWebSkillLitCatalog as bt, A2UI_VERSION as c, ensureStyles as ct, A2uiMessage as d, fromA2uiSurfaceAction as dt, a2uiComponentSchema as et, A2uiSpecActionEvent as f, fromOpenUiAction as ft, ControlModel as g, fromVercelToolResult as gt, CollectedValues as h, fromVercelSurfaceAction as ht, A2UI_SPEC_ACTION as i, collectValues as it, UiActionDef as j, toOpenUiLang as jt, UI_CATALOG_GROUPS as k, toA2uiSurfaceMessages as kt, A2uiCatalogDefinition as l, fromA2uiAction as lt, CHART_PALETTE as m, fromUiSurfaceActionDispatch as mt, A2UI_CANCEL_ACTION as n, buildA2uiCatalogDefinition as nt, A2UI_SUBMIT_ACTION as o, decodeInteractionResponse as ot, A2uiSpecMessageOptions as p, fromOpenUiSurfaceAction as pt, VercelToolInvocation as q, A2UI_COMMON_TYPES as r, chartToTable as rt, A2UI_SURFACE_ACTION as s, defineUiCatalog as st, A2UI_BASIC_CATALOG_ID as t, a2uiComponentShapes as tt, A2uiComponentShape as u, fromA2uiSpecAction as ut, JsonRenderSpec as v, isUiSpecSurface as vt, OPENUI_SURFACE_ACTION as w, renderRenderResult as wt, OPENUI_AUTHORIZE_ACTION as x, renderBlocks as xt, LitRendererBridge as y, loadOpenUiPeers as yt, UiSpecSurfaceProps as z, uiCatalog as zt };
+export { WEBSKILL_SURFACE_ACTION as $, SurfaceRendererProvenance as A, toA2uiSurfaceAction as At, UiSpecNode as B, toVercelToolInvocation as Bt, OPENUI_AUTHORIZE_ACTION as C, renderBlocks as Ct, OpenUiRendererProps as D, shapeInteractionValue as Dt, OPENUI_SURFACE_ACTION as E, renderRenderResult as Et, UiCatalogInput as F, toOpenUiSurfaceLang as Ft, VERCEL_INTERACTION_TOOL_NAME as G, UiSpecValidation as H, UiCatalogPromptOptions as I, toSurface as It, VercelSurfaceDataPart as J, VERCEL_SURFACE_ACTION_DATA_PART_TYPE as K, UiCatalogToolSourceOptions as L, toUiSurfaceActionDispatch as Lt, UI_SPEC_COMPONENT as M, toJsonRenderSpec as Mt, UiActionDef as N, toOpenUiLang as Nt, OpenUiRuntime as O, toA2uiMessages as Ot, UiCatalog as P, toOpenUiSpecLang as Pt, WEBSKILL_STYLES_CSS as Q, UiComponentDef as R, toUiSurfaceDescriptor as Rt, LoadedOpenUiPeers as S, loadWebSkillLitCatalog as St, OPENUI_SUBMIT_ACTION as T, renderMiniMarkdown as Tt, UiSurfaceActionDispatch as U, UiSpecSurfaceProps as V, uiCatalog as Vt, UiSurfaceDescriptor as W, VercelUiBridge as X, VercelToolInvocation as Y, WEBSKILL_A2UI_CATALOG_ID as Z, CollectedValues as _, fromVercelSurfaceAction as _t, A2UI_SPEC_FORM_PATH as a, chartToTable as at, JsonRenderSpec as b, isUiSpecSurface as bt, A2UI_VERSION as c, decodeInteractionResponse as ct, A2uiCatalogHandle as d, fromA2uiAction as dt, WebFormBridge as et, A2uiComponentShape as f, fromA2uiSpecAction as ft, CHART_PALETTE as g, fromUiSurfaceActionDispatch as gt, A2uiSpecMessageOptions as h, fromOpenUiSurfaceAction as ht, A2UI_SPEC_ACTION as i, buildA2uiCatalogDefinition as it, UI_CATALOG_GROUPS as j, toA2uiSurfaceMessages as jt, RENDER_UI_TOOL as k, toA2uiSpecMessages as kt, A2uiCatalogComponent as l, defineUiCatalog as lt, A2uiSpecActionEvent as m, fromOpenUiAction as mt, A2UI_CANCEL_ACTION as n, a2uiComponentSchema as nt, A2UI_SUBMIT_ACTION as o, collectValues as ot, A2uiMessage as p, fromA2uiSurfaceAction as pt, VERCEL_SURFACE_DATA_PART_TYPE as q, A2UI_COMMON_TYPES as r, a2uiComponentShapes as rt, A2UI_SURFACE_ACTION as s, createUiCatalogToolSource as st, A2UI_BASIC_CATALOG_ID as t, ZodRuntime as tt, A2uiCatalogDefinition as u, ensureStyles as ut, ControlModel as v, fromVercelToolResult as vt, OPENUI_CANCEL_ACTION as w, renderMiniChart as wt, LitRendererBridge as x, loadOpenUiPeers as xt, FormModel as y, interactionToFormModel as yt, UiSpecIssue as z, toVercelSurfaceDataPart as zt };

package/dist/{index-BpIK7tJM.d.ts → index-QrHtAudz.d.ts}

@@ -1,4 +1,4 @@
-import { C as UiSurfaceDrafts, G as SkillDocument, H as SkillCatalog, K as SkillInstallSource, N as FileSystemProvider, P as JsonSchema, U as SkillCatalogEntry, W as SkillDiscovery, Y as SkillManifest, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, it as WebSkillErrorCode, j as DiscoveryResult, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, tt as ValidationReport, u as LlmMessage, v as UiBridge, w as UiSurfaceEvent, x as UiSurfaceActionRequest, y as UiSurface } from "./types-7fnqDVrf-BnRQjVU3.js";
+import { C as UiSurfaceDrafts, G as SkillDocument, H as SkillCatalog, K as SkillInstallSource, N as FileSystemProvider, P as JsonSchema, U as SkillCatalogEntry, W as SkillDiscovery, Y as SkillManifest, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, it as WebSkillErrorCode, j as DiscoveryResult, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, tt as ValidationReport, u as LlmMessage, v as UiBridge, w as UiSurfaceEvent, x as UiSurfaceActionRequest, y as UiSurface } from "./types-AmKCKJn_-BogJPQHU.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/openAiCompatibleClient.d.ts
 interface OpenAiCompatibleClientConfig {
@@ -428,6 +428,7 @@ declare class FsMemoryStore implements MemoryStore {
   constructor(deps: {
     root: string;
     fs: FileSystemProvider;
+    onWarning?: (message: string) => void;
   });
   get(scope: string, key: string): Promise<unknown>;
   set(scope: string, key: string, value: unknown): Promise<void>;
@@ -472,6 +473,7 @@ declare class FsArtifactStore implements ArtifactStore {
   constructor(deps: {
     root: string;
     fs: FileSystemProvider;
+    onWarning?: (message: string) => void;
   });
   createTextArtifact(input: {
     runId: string;
@@ -557,6 +559,18 @@ type NetworkPolicy = 'deny-all' | 'allow-all' | {
 declare function isNetworkAllowed(policy: NetworkPolicy, url: string): boolean;
 /** 阻断 trace 用的脱敏 host（解析失败返回占位，不记录完整 URL） */
 declare function networkUrlHost(url: string): string;
+/**
+ * 网络策略判定逻辑的可注入源码（单一来源）。
+ *
+ * 0.2.8 C4：此前各注入点直接拼 `isNetworkAllowed.toString()`，依赖**函数名在产物里保持不变**。
+ * SDK 自身不压缩，但消费方一旦跑生产构建，打包器会把导出函数改名（`function Ke(...)`），
+ * 注入后的沙箱里 `isNetworkAllowed` 就是 undefined —— 沙箱内任何 fetch 直接
+ * TOOL_EXECUTION_FAILED，网络白名单形同虚设。dev server 不压缩，所以只在真实产物上暴露。
+ *
+ * 因此改为把函数源码绑定到**固定的变量名**上：`var isNetworkAllowed = function Ke(...) {…};`
+ * ——名字随便压缩，绑定名恒定。两个函数都自包含（不引用模块内其它符号），故可独立绑定。
+ */
+declare function networkPolicyLibSource(): string;
 //#endregion
 //#region src/sandbox/errorCodes.d.ts
 /**
@@ -867,4 +881,4 @@ declare class WebSkillRuntime {
   cancel(runId: string): boolean;
 }
 //#endregion
-export { SerializingMemoryStore as $, LifecycleHook as A, toLlmToolSpec as At, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, networkUrlHost as Ct, HookRunnerOptions as D, parseBridgeRequest as Dt, HookRunner as E, normalizeToolError as Et, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, validateUiSurface as Mt, NetworkPolicy as N, validateUiSurfaceEvent as Nt, InstalledSkillManifest as O, resolveToolName as Ot, OpenAiCompatibleClient as P, ScriptExecutor as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, mergeCatalogEntries as St, GoogleGenAiClientConfig as T, normalizeToolContent as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, SchemaInferer as X, RuntimeSessionHandle as Y, ScriptExecutionContext as Z, EventBus as _, extractChartSpec as _t, AgentLoopConfig as a, TraceClock as at, FsArtifactStore as b, fromVercelStreamPart as bt, AnthropicClientConfig as c, TraceRecorder as ct, BridgeCapabilities as d, WebSkillRuntime as dt, SkillRouter as et, BridgeCapability as f, WebSkillRuntimeDeps as ft, CapabilityMode as g, createWebSkillApi as gt, CapabilityApproval as h, createScriptContext as ht, AgentLoop as i, ToolResult as it, LifecycleHookContext as j, toVercelToolSpecs as jt, LifecycleEvent as k, schemaToForm as kt, ApprovalDecision as l, VercelToolSpec as lt, BridgeResponse as m, buildRenderResult as mt, ASK_USER_TOOL as n, ToolDefinition as nt, AgentLoopDeps as o, TraceEvent as ot, BridgeRequest as p, bridgeError as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, ToolResolution as rt, AnthropicClient as s, TraceEventType as st, ASK_USER_INPUT_SCHEMA as t, SkillStateGuard as tt, ApprovalScope as u, WebSkillApi as ut, ExternalSkillProvider as v, extractUiSurfaceEvents as vt, GoogleGenAiClient as w, normalizeErrorCode as wt, FsMemoryStore as x, isNetworkAllowed as xt, ExternalToolSource as y, fromVercelResult as yt, READ_SKILL_FILE_TOOL_NAME as z };
+export { SerializingMemoryStore as $, LifecycleHook as A, schemaToForm as At, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, networkPolicyLibSource as Ct, HookRunnerOptions as D, normalizeToolError as Dt, HookRunner as E, normalizeToolContent as Et, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, toVercelToolSpecs as Mt, NetworkPolicy as N, validateUiSurface as Nt, InstalledSkillManifest as O, parseBridgeRequest as Ot, OpenAiCompatibleClient as P, validateUiSurfaceEvent as Pt, ScriptExecutor as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, mergeCatalogEntries as St, GoogleGenAiClientConfig as T, normalizeErrorCode as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, SchemaInferer as X, RuntimeSessionHandle as Y, ScriptExecutionContext as Z, EventBus as _, extractChartSpec as _t, AgentLoopConfig as a, TraceClock as at, FsArtifactStore as b, fromVercelStreamPart as bt, AnthropicClientConfig as c, TraceRecorder as ct, BridgeCapabilities as d, WebSkillRuntime as dt, SkillRouter as et, BridgeCapability as f, WebSkillRuntimeDeps as ft, CapabilityMode as g, createWebSkillApi as gt, CapabilityApproval as h, createScriptContext as ht, AgentLoop as i, ToolResult as it, LifecycleHookContext as j, toLlmToolSpec as jt, LifecycleEvent as k, resolveToolName as kt, ApprovalDecision as l, VercelToolSpec as lt, BridgeResponse as m, buildRenderResult as mt, ASK_USER_TOOL as n, ToolDefinition as nt, AgentLoopDeps as o, TraceEvent as ot, BridgeRequest as p, bridgeError as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, ToolResolution as rt, AnthropicClient as s, TraceEventType as st, ASK_USER_INPUT_SCHEMA as t, SkillStateGuard as tt, ApprovalScope as u, WebSkillApi as ut, ExternalSkillProvider as v, extractUiSurfaceEvents as vt, GoogleGenAiClient as w, networkUrlHost as wt, FsMemoryStore as x, isNetworkAllowed as xt, ExternalToolSource as y, fromVercelResult as yt, READ_SKILL_FILE_TOOL_NAME as z };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillSource, A as DEFAULT_ARCHIVE_LIMITS, B as SKILL_NAME_PATTERN, C as UiSurfaceDrafts, Ct as renderCatalogJson, D as UiSurfaceSnapshot, Dt as validateSkills, E as UiSurfacePatch, Et as unzipWithLimits, F as MemoryFS, G as SkillDocument, H as SkillCatalog, I as RemoteUrlPolicy, J as SkillLocation, K as SkillInstallSource, L as SKILLS_LOCKFILE, M as FileStat, N as FileSystemProvider, O as ArchiveLimits, Ot as verifyManifest, P as JsonSchema, Q as SkillReader, R as SKILL_MANIFEST_FILE, S as UiSurfaceActionResponse, St as renderAvailableSkillsXml, T as UiSurfaceFormField, Tt as resolveInsideRoot, U as SkillCatalogEntry, V as SKILL_PACK_FILE, W as SkillDiscovery, X as SkillMetadata, Y as SkillManifest, Z as SkillPackManifest, _ as RenderResultRequest, _t as messageOf, a as InteractionPolicy, at as assertRemoteUrlAllowed, b as UiSurfaceAction, bt as parseSkillPackManifest, c as LlmClient, ct as buildCatalog, d as LlmResponse, dt as checkSkillRules, et as SkillsLockfile, f as LlmStreamEvent, ft as computeDigest, g as RenderBlock, gt as jsonRenderer, h as MemoryStore, ht as isValidSkillName, i as FormField, it as WebSkillErrorCode, j as DiscoveryResult, k as CatalogRenderer, kt as xmlRenderer, l as LlmCompleteInput, lt as buildManifest, m as LlmToolSpec, mt as exportSkills, n as ArtifactStore, nt as VerifyResult, o as InteractionRequest, ot as assertSafePathSegment, p as LlmToolCall, pt as escapeXml, q as SkillIssue, r as ChartSpec, rt as WebSkillError, s as InteractionResponse, st as atomicWriteText, t as Artifact, tt as ValidationReport, u as LlmMessage, ut as checkDependencyCycles, v as UiBridge, vt as normalizePath, w as UiSurfaceEvent, wt as resolveArchiveLimits, x as UiSurfaceActionRequest, xt as readResponseWithLimit, y as UiSurface, yt as parseSkillMarkdown, z as SKILL_NAME_MAX_LENGTH } from "./types-7fnqDVrf-BnRQjVU3.js";
-import { $ as SerializingMemoryStore, A as LifecycleHook, At as toLlmToolSpec, B as RUN_SNAPSHOT_SCHEMA_VERSION, C as FullDisclosureRouter, Ct as networkUrlHost, D as HookRunnerOptions, Dt as parseBridgeRequest, E as HookRunner, Et as normalizeToolError, F as OpenAiCompatibleClientConfig, G as RunTerminationReason, H as RunResult, I as ProgressiveRouter, J as RuntimeSession, K as RuntimePhase, L as READ_SKILL_FILE_INPUT_SCHEMA, M as LifecycleListener, Mt as validateUiSurface, N as NetworkPolicy, Nt as validateUiSurfaceEvent, O as InstalledSkillManifest, Ot as resolveToolName, P as OpenAiCompatibleClient, Q as ScriptExecutor, R as READ_SKILL_FILE_TOOL, S as FsRunSnapshotStore, St as mergeCatalogEntries, T as GoogleGenAiClientConfig, Tt as normalizeToolContent, U as RunSnapshot, V as RouteResult, W as RunSnapshotStore, X as SchemaInferer, Y as RuntimeSessionHandle, Z as ScriptExecutionContext, _ as EventBus, _t as extractChartSpec, a as AgentLoopConfig, at as TraceClock, b as FsArtifactStore, bt as fromVercelStreamPart, c as AnthropicClientConfig, ct as TraceRecorder, d as BridgeCapabilities, dt as WebSkillRuntime, et as SkillRouter, f as BridgeCapability, ft as WebSkillRuntimeDeps, g as CapabilityMode, gt as createWebSkillApi, h as CapabilityApproval, ht as createScriptContext, i as AgentLoop, it as ToolResult, j as LifecycleHookContext, jt as toVercelToolSpecs, k as LifecycleEvent, kt as schemaToForm, l as ApprovalDecision, lt as VercelToolSpec, m as BridgeResponse, mt as buildRenderResult, n as ASK_USER_TOOL, nt as ToolDefinition, o as AgentLoopDeps, ot as TraceEvent, p as BridgeRequest, pt as bridgeError, q as RuntimeRun, r as ASK_USER_TOOL_NAME, rt as ToolResolution, s as AnthropicClient, st as TraceEventType, t as ASK_USER_INPUT_SCHEMA, tt as SkillStateGuard, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, vt as extractUiSurfaceEvents, w as GoogleGenAiClient, wt as normalizeErrorCode, x as FsMemoryStore, xt as isNetworkAllowed, y as ExternalToolSource, yt as fromVercelResult, z as READ_SKILL_FILE_TOOL_NAME } from "./index-BpIK7tJM.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSource, type SkillStateGuard, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type UiBridge, type UiSurface, type UiSurfaceAction, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UiSurfaceDrafts, type UiSurfaceEvent, type UiSurfaceFormField, type UiSurfacePatch, type UiSurfaceSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, xmlRenderer };
+import { $ as SkillSource, A as DEFAULT_ARCHIVE_LIMITS, B as SKILL_NAME_PATTERN, C as UiSurfaceDrafts, Ct as renderCatalogJson, D as UiSurfaceSnapshot, Dt as validateSkills, E as UiSurfacePatch, Et as unzipWithLimits, F as MemoryFS, G as SkillDocument, H as SkillCatalog, I as RemoteUrlPolicy, J as SkillLocation, K as SkillInstallSource, L as SKILLS_LOCKFILE, M as FileStat, N as FileSystemProvider, O as ArchiveLimits, Ot as verifyManifest, P as JsonSchema, Q as SkillReader, R as SKILL_MANIFEST_FILE, S as UiSurfaceActionResponse, St as renderAvailableSkillsXml, T as UiSurfaceFormField, Tt as resolveInsideRoot, U as SkillCatalogEntry, V as SKILL_PACK_FILE, W as SkillDiscovery, X as SkillMetadata, Y as SkillManifest, Z as SkillPackManifest, _ as RenderResultRequest, _t as messageOf, a as InteractionPolicy, at as assertRemoteUrlAllowed, b as UiSurfaceAction, bt as parseSkillPackManifest, c as LlmClient, ct as buildCatalog, d as LlmResponse, dt as checkSkillRules, et as SkillsLockfile, f as LlmStreamEvent, ft as computeDigest, g as RenderBlock, gt as jsonRenderer, h as MemoryStore, ht as isValidSkillName, i as FormField, it as WebSkillErrorCode, j as DiscoveryResult, k as CatalogRenderer, kt as xmlRenderer, l as LlmCompleteInput, lt as buildManifest, m as LlmToolSpec, mt as exportSkills, n as ArtifactStore, nt as VerifyResult, o as InteractionRequest, ot as assertSafePathSegment, p as LlmToolCall, pt as escapeXml, q as SkillIssue, r as ChartSpec, rt as WebSkillError, s as InteractionResponse, st as atomicWriteText, t as Artifact, tt as ValidationReport, u as LlmMessage, ut as checkDependencyCycles, v as UiBridge, vt as normalizePath, w as UiSurfaceEvent, wt as resolveArchiveLimits, x as UiSurfaceActionRequest, xt as readResponseWithLimit, y as UiSurface, yt as parseSkillMarkdown, z as SKILL_NAME_MAX_LENGTH } from "./types-AmKCKJn_-BogJPQHU.js";
+import { $ as SerializingMemoryStore, A as LifecycleHook, At as schemaToForm, B as RUN_SNAPSHOT_SCHEMA_VERSION, C as FullDisclosureRouter, Ct as networkPolicyLibSource, D as HookRunnerOptions, Dt as normalizeToolError, E as HookRunner, Et as normalizeToolContent, F as OpenAiCompatibleClientConfig, G as RunTerminationReason, H as RunResult, I as ProgressiveRouter, J as RuntimeSession, K as RuntimePhase, L as READ_SKILL_FILE_INPUT_SCHEMA, M as LifecycleListener, Mt as toVercelToolSpecs, N as NetworkPolicy, Nt as validateUiSurface, O as InstalledSkillManifest, Ot as parseBridgeRequest, P as OpenAiCompatibleClient, Pt as validateUiSurfaceEvent, Q as ScriptExecutor, R as READ_SKILL_FILE_TOOL, S as FsRunSnapshotStore, St as mergeCatalogEntries, T as GoogleGenAiClientConfig, Tt as normalizeErrorCode, U as RunSnapshot, V as RouteResult, W as RunSnapshotStore, X as SchemaInferer, Y as RuntimeSessionHandle, Z as ScriptExecutionContext, _ as EventBus, _t as extractChartSpec, a as AgentLoopConfig, at as TraceClock, b as FsArtifactStore, bt as fromVercelStreamPart, c as AnthropicClientConfig, ct as TraceRecorder, d as BridgeCapabilities, dt as WebSkillRuntime, et as SkillRouter, f as BridgeCapability, ft as WebSkillRuntimeDeps, g as CapabilityMode, gt as createWebSkillApi, h as CapabilityApproval, ht as createScriptContext, i as AgentLoop, it as ToolResult, j as LifecycleHookContext, jt as toLlmToolSpec, k as LifecycleEvent, kt as resolveToolName, l as ApprovalDecision, lt as VercelToolSpec, m as BridgeResponse, mt as buildRenderResult, n as ASK_USER_TOOL, nt as ToolDefinition, o as AgentLoopDeps, ot as TraceEvent, p as BridgeRequest, pt as bridgeError, q as RuntimeRun, r as ASK_USER_TOOL_NAME, rt as ToolResolution, s as AnthropicClient, st as TraceEventType, t as ASK_USER_INPUT_SCHEMA, tt as SkillStateGuard, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, vt as extractUiSurfaceEvents, w as GoogleGenAiClient, wt as networkUrlHost, x as FsMemoryStore, xt as isNetworkAllowed, y as ExternalToolSource, yt as fromVercelResult, z as READ_SKILL_FILE_TOOL_NAME } from "./index-QrHtAudz.js";
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSource, type SkillStateGuard, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type UiBridge, type UiSurface, type UiSurfaceAction, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UiSurfaceDrafts, type UiSurfaceEvent, type UiSurfaceFormField, type UiSurfacePatch, type UiSurfaceSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, xmlRenderer };

package/dist/index.js

@@ -1,4 +1,4 @@
 import { A as resolveArchiveLimits, C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, F as xmlRenderer, M as unzipWithLimits, N as validateSkills, O as renderAvailableSkillsXml, P as verifyManifest, S as jsonRenderer, T as parseSkillMarkdown, _ as checkSkillRules, a as SKILL_NAME_MAX_LENGTH, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, f as assertSafePathSegment, g as checkDependencyCycles, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, k as renderCatalogJson, l as SkillReader, m as buildCatalog, n as MemoryFS, o as SKILL_NAME_PATTERN, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as WebSkillError, v as computeDigest, w as normalizePath, x as isValidSkillName, y as escapeXml } from "./dist-BQzncxXg.js";
-import { A as fromVercelStreamPart, B as toLlmToolSpec, C as bridgeError, D as extractChartSpec, E as createWebSkillApi, F as normalizeToolContent, H as validateUiSurface, I as normalizeToolError, L as parseBridgeRequest, M as mergeCatalogEntries, N as networkUrlHost, O as extractUiSurfaceEvents, P as normalizeErrorCode, R as resolveToolName, S as WebSkillRuntime, T as createScriptContext, U as validateUiSurfaceEvent, V as toVercelToolSpecs, _ as READ_SKILL_FILE_TOOL, a as AnthropicClient, b as SerializingMemoryStore, c as FsArtifactStore, d as FullDisclosureRouter, f as GoogleGenAiClient, g as READ_SKILL_FILE_INPUT_SCHEMA, h as ProgressiveRouter, i as AgentLoop, j as isNetworkAllowed, k as fromVercelResult, l as FsMemoryStore, m as OpenAiCompatibleClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as HookRunner, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_TOOL_NAME, w as buildRenderResult, x as TraceRecorder, y as RUN_SNAPSHOT_SCHEMA_VERSION, z as schemaToForm } from "./dist-BdOW8N4V.js";
+import { A as fromVercelStreamPart, B as schemaToForm, C as bridgeError, D as extractChartSpec, E as createWebSkillApi, F as normalizeErrorCode, H as toVercelToolSpecs, I as normalizeToolContent, L as normalizeToolError, M as mergeCatalogEntries, N as networkPolicyLibSource, O as extractUiSurfaceEvents, P as networkUrlHost, R as parseBridgeRequest, S as WebSkillRuntime, T as createScriptContext, U as validateUiSurface, V as toLlmToolSpec, W as validateUiSurfaceEvent, _ as READ_SKILL_FILE_TOOL, a as AnthropicClient, b as SerializingMemoryStore, c as FsArtifactStore, d as FullDisclosureRouter, f as GoogleGenAiClient, g as READ_SKILL_FILE_INPUT_SCHEMA, h as ProgressiveRouter, i as AgentLoop, j as isNetworkAllowed, k as fromVercelResult, l as FsMemoryStore, m as OpenAiCompatibleClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as HookRunner, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_TOOL_NAME, w as buildRenderResult, x as TraceRecorder, y as RUN_SNAPSHOT_SCHEMA_VERSION, z as resolveToolName } from "./dist-B9VLwOME.js";
 
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, xmlRenderer };
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, xmlRenderer };

package/dist/{jsonRenderRegistry-9GrWP_hE-CMkryt1H.js → jsonRenderRegistry-9GrWP_hE-CQY8bT9w.js}

@@ -1,5 +1,5 @@
 import { ft as uiCatalog } from "./dist-CtBLBbEz.js";
-import { n as catalogComponentImpls } from "./catalogComponents-C_V39rbF-B94i0fW7.js";
+import { n as catalogComponentImpls } from "./catalogComponents-C_V39rbF-BOHveMWa.js";
 import { z } from "zod";
 import React, { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { G as SkillDocument, P as JsonSchema, U as SkillCatalogEntry, m as LlmToolSpec } from "./types-7fnqDVrf-BnRQjVU3.js";
-import { St as mergeCatalogEntries, it as ToolResult, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-BpIK7tJM.js";
+import { G as SkillDocument, P as JsonSchema, U as SkillCatalogEntry, m as LlmToolSpec } from "./types-AmKCKJn_-BogJPQHU.js";
+import { St as mergeCatalogEntries, it as ToolResult, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-QrHtAudz.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -214,7 +214,7 @@ declare class ExperimentalWebMcpAdapter {
     enabled?: boolean;
   });
   isAvailable(): boolean;
-  /** 工具清单（listTools 缺失/失败时返回 undefined）；描述含 inputSchema 时透传 */
+  /** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
   listTools(): Promise<WebMcpToolDescriptor[] | undefined>;
   /** 工具名清单（listTools 缺失/失败时返回 undefined） */
   listToolNames(): Promise<string[] | undefined>;
@@ -235,6 +235,8 @@ declare class McpRuntimePlugin implements ExternalToolSource {
     resolver?: McpToolResolver;
     /** 已知的 endpoint 名（注销后仍按 MCP_ENDPOINT_UNAVAILABLE 响应，而非 TOOL_NOT_FOUND） */
     endpoints?: string[];
+    /** endpoint 不可用时的告警出口（默认 console.warn） */
+    onWarning?(message: string): void;
   });
   listToolSpecs(): Promise<LlmToolSpec[]>;
   canHandle(llmToolName: string): boolean;

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { C as messageOf, d as assertRemoteUrlAllowed, u as WebSkillError } from "./dist-BQzncxXg.js";
-import { F as normalizeToolContent, M as mergeCatalogEntries } from "./dist-BdOW8N4V.js";
+import { I as normalizeToolContent, M as mergeCatalogEntries } from "./dist-B9VLwOME.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -418,13 +418,14 @@ var ExperimentalWebMcpAdapter = class {
 	isAvailable() {
 		return this.#enabled && typeof this.#resolveApi()?.executeTool === "function";
 	}
-	/** 工具清单（listTools 缺失/失败时返回 undefined）；描述含 inputSchema 时透传 */
+	/** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
 	async listTools() {
 		const api = this.#resolveApi();
 		if (typeof api?.listTools !== "function") return void 0;
 		try {
 			return extractToolDescriptors(await api.listTools());
-		} catch {
+		} catch (e) {
+			console.warn(`[webskill] navigator.modelContext.listTools() failed: ${e instanceof Error ? e.message : String(e)}`);
 			return;
 		}
 	}
@@ -460,11 +461,13 @@ var McpRuntimePlugin = class {
 	#resolver;
 	#webMcp;
 	#configuredEndpoints;
+	#onWarning;
 	constructor(deps) {
 		this.#registry = deps.registry;
 		this.#resolver = deps.resolver ?? new McpToolResolver(deps.registry);
 		this.#webMcp = deps.webMcp;
 		this.#configuredEndpoints = deps.endpoints ?? [];
+		this.#onWarning = deps.onWarning ?? ((message) => console.warn(message));
 	}
 	#endpoints() {
 		return [.../* @__PURE__ */ new Set([...this.#configuredEndpoints, ...this.#registry.endpoints()])];
@@ -481,7 +484,9 @@ var McpRuntimePlugin = class {
 					properties: {}
 				}
 			});
-		} catch {}
+		} catch (e) {
+			this.#onWarning(`[webskill] MCP endpoint "${endpoint}" is unavailable; its tools are omitted from this turn: ${e instanceof Error ? e.message : String(e)}`);
+		}
 		if (this.#webMcp?.isAvailable()) {
 			const tools = await this.#webMcp.listTools();
 			for (const tool of tools ?? []) specs.push({

package/dist/node.d.ts

@@ -1,5 +1,50 @@
-import { K as SkillInstallSource, L as SKILLS_LOCKFILE, R as SKILL_MANIFEST_FILE, Y as SkillManifest, et as SkillsLockfile, nt as VerifyResult } from "./types-7fnqDVrf-BnRQjVU3.js";
-import { ht as createScriptContext } from "./index-BpIK7tJM.js";
+import { K as SkillInstallSource, L as SKILLS_LOCKFILE, N as FileSystemProvider, R as SKILL_MANIFEST_FILE, Y as SkillManifest, et as SkillsLockfile, nt as VerifyResult, v as UiBridge } from "./types-AmKCKJn_-BogJPQHU.js";
+import { Q as ScriptExecutor, dt as WebSkillRuntime, ft as WebSkillRuntimeDeps, ht as createScriptContext } from "./index-QrHtAudz.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-BPUBZCwJ-4jat_SVG.js";
-import { a as NodeScriptExecutor, c as ProcessSandboxOptions, d as SkillManager, f as exportArchive, i as NodeFS, l as SandboxOptions, n as FileArtifactStore, o as OxcSchemaInferer, p as readArchiveManifest, r as FileMemoryStore, s as ProcessSandboxExecutor, t as CliUiBridge, u as SandboxedScriptExecutor } from "./index-BHL5FWGw.js";
-export { CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, type ProcessSandboxOptions, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };
+import { C as ProcessSandboxExecutor, D as SkillManager, E as SandboxedScriptExecutor, O as exportArchive, S as OxcSchemaInferer, T as SandboxOptions, _ as CliUiBridge, a as AuditLog, b as NodeFS, c as CandidateSkill, d as CandidateStore, h as SkillVersionStore, k as readArchiveManifest, r as ApprovalPolicy, v as FileArtifactStore, w as ProcessSandboxOptions, x as NodeScriptExecutor, y as FileMemoryStore } from "./skillVersionStore-B7rGjtMi-BgnQho9v.js";
+//#region ../governance/dist/node.d.ts
+//#region src/approval/approvalWorkflow.d.ts
+/** 审批工作流：review（UiBridge confirm 真实接线）/ publish（校验→安装→版本→审计） */
+declare class ApprovalWorkflow {
+  #private;
+  constructor(deps: {
+    policy: ApprovalPolicy;
+    audit: AuditLog;
+    store: CandidateStore;
+    skillManager: SkillManager;
+    versions: SkillVersionStore;
+    fs?: FileSystemProvider;
+  });
+  /** 策略评估；needs-human 时经 UiBridge confirm 真实询问，按应答迁移状态 */
+  review(candidateId: string, input: {
+    actor: string;
+    uiBridge?: UiBridge;
+  }): Promise<CandidateSkill>;
+  /** publish 全链路：approved 前置 → 写出 staging → validateSkills → install → 版本 → 审计 */
+  publish(candidateId: string, input: {
+    actor: string;
+  }): Promise<SkillManifest>;
+  /**
+   * 真实回滚（受审批保护：仅经显式 actor 调用并全程审计）：
+   * 版本归档解包 → staging 校验 → 原子安装（复用安装管线 swap）→ 追加新版本 + 审计。
+   * RepairPlanner 的 rollback 选项（targetVersionId）经本方法执行。
+   */
+  applyRollback(skillName: string, versionId: string, input: {
+    actor: string;
+    reason?: string;
+  }): Promise<SkillManifest>;
+}
+//#endregion
+//#region src/evaluation/evaluationRuntime.d.ts
+/**
+ * 治理评估专用 runtime 装配（不可信技能试用路径）：
+ * 默认注入 ProcessSandboxExecutor（fork + --permission 真实进程隔离；子进程
+ * env 默认清空防密钥泄露，需透传时经 ProcessSandboxOptions.envWhitelist 显式放行）。
+ * 可配置 executor 切回 SandboxedScriptExecutor（worker_threads 能力面收敛形态，
+ * 非安全边界；envWhitelist 同样适用于该执行器）。
+ */
+declare function createEvaluationRuntime(deps: WebSkillRuntimeDeps & {
+  executor?: ScriptExecutor;
+}): WebSkillRuntime;
+//#endregion
+export { ApprovalWorkflow, CliUiBridge, FileArtifactStore, FileMemoryStore, type LlmCapabilities, type LlmEnvConfig, NodeFS, NodeScriptExecutor, OxcSchemaInferer, ProcessSandboxExecutor, type ProcessSandboxOptions, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, type SandboxOptions, SandboxedScriptExecutor, type SkillInstallSource, SkillManager, type SkillManifest, type SkillsLockfile, type VerifyResult, createEvaluationRuntime, createScriptContext, exportArchive, probeLlmCapabilities, readArchiveManifest };