@webskill/sdk 0.2.7 → 0.3.0

package/dist/{openUiLibrary-B8-Cvou9-Cu1QZqoT.js → openUiLibrary-B8-Cvou9-BbpNTXS3.js}

@@ -1,5 +1,5 @@
-import { ft as uiCatalog } from "./dist-CtBLBbEz.js";
-import { n as catalogComponentImpls } from "./catalogComponents-C_V39rbF-B94i0fW7.js";
+import { ft as uiCatalog } from "./dist-ZKaM8j06.js";
+import { n as catalogComponentImpls } from "./catalogComponents-C_V39rbF-BOHveMWa.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/sandboxWorkerEntry.js

@@ -151,6 +151,7 @@ function setupNetworkGuards(task) {
 */
 const internalExit = process.reallyExit.bind(process);
 function stripProcessEscapeHatches() {
+	const remaining = [];
 	for (const key of [
 		"binding",
 		"_linkedBinding",
@@ -158,9 +159,17 @@ function stripProcessEscapeHatches() {
 		"openStdin",
 		"reallyExit",
 		"abort"
-	]) try {
-		Reflect.deleteProperty(process, key);
-	} catch {}
+	]) {
+		try {
+			Reflect.deleteProperty(process, key);
+		} catch {}
+		if (key in process) remaining.push(key);
+	}
+	if (remaining.length > 0) {
+		const err = /* @__PURE__ */ new Error(`Sandbox hardening failed: cannot remove process escape hatches (${remaining.join(", ")})`);
+		err.code = "TOOL_EXECUTION_FAILED";
+		throw err;
+	}
 }
 async function main() {
 	const task = workerData;

package/dist/skillVersionStore-DOEI9ptb-BxbYL70B.d.ts

@@ -0,0 +1,127 @@
+import { P as FileSystemProvider, X as SkillCatalogEntry, rt as SkillManifest } from "./types-AmKCKJn_-VGabeXK4.js";
+//#region ../governance/dist/skillVersionStore-DOEI9ptb.d.ts
+//#region src/types.d.ts
+type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
+type CandidateSource = 'runtime-miss' | 'document' | 'manual';
+type CandidateRisk = 'low' | 'medium' | 'high';
+interface CandidateFile {
+  path: string;
+  kind: 'skill-md' | 'script' | 'reference' | 'asset';
+  content: string;
+}
+interface CandidateSkill {
+  id: string;
+  name: string;
+  description: string;
+  status: CandidateStatus;
+  source: CandidateSource;
+  risk: CandidateRisk;
+  riskReasons: string[];
+  files: CandidateFile[];
+  suggestedTests?: string[];
+  createdAt: string;
+  updatedAt: string;
+  metadata?: Record<string, unknown>;
+}
+interface AuditEvent {
+  id: string;
+  type: string;
+  target: string;
+  actor?: string;
+  ts: string;
+  data?: Record<string, unknown>;
+  /** hash 链：上一条事件的 hash（首条为 GENESIS） */
+  prevHash?: string;
+  /** 本事件规范化载荷 + prevHash 的 sha256 */
+  hash?: string;
+}
+interface AuditLog {
+  append(event: Omit<AuditEvent, 'id' | 'ts'> & {
+    id?: string;
+    ts?: string;
+  }): Promise<AuditEvent>;
+  query(filter: {
+    target?: string;
+    type?: string;
+    since?: string;
+  }): Promise<AuditEvent[]>;
+}
+interface SkillVersion {
+  versionId: string;
+  parentVersionId?: string;
+  createdAt: string;
+  reason: string;
+  manifest: SkillManifest;
+  auditEventId?: string;
+  /** 发布时捕获的技能归档（zip 相对路径，applyRollback 恢复用；0.2.0 起记录） */
+  archivePath?: string;
+}
+type SkillState = 'active' | 'quarantined' | 'deprecated' | 'disabled';
+//#endregion
+//#region src/candidate/candidateStore.d.ts
+/** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
+declare class CandidateStore {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+  });
+  save(candidate: CandidateSkill): Promise<void>;
+  get(id: string): Promise<CandidateSkill>;
+  list(): Promise<CandidateSkill[]>;
+  updateStatus(id: string, status: CandidateStatus, now?: string): Promise<CandidateSkill>;
+}
+/** 硬门禁：仅 published 可转换为 Catalog 条目，否则 APPROVAL_REQUIRED */
+declare function candidateToCatalogEntry(candidate: CandidateSkill): SkillCatalogEntry;
+//#endregion
+//#region src/approval/policies.d.ts
+interface ApprovalDecision {
+  needsHuman: boolean;
+  reason: string;
+}
+interface ApprovalPolicy {
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+/** 默认策略：任何候选都必须人工审批 */
+declare class AlwaysHumanApprovalPolicy implements ApprovalPolicy {
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+/** 规则组合策略：首个命中的规则胜出，全部未命中走 fallback（默认 AlwaysHuman） */
+declare class CompositeApprovalPolicy implements ApprovalPolicy {
+  #private;
+  constructor(rules: Array<(candidate: CandidateSkill) => ApprovalDecision | undefined>, fallback?: ApprovalPolicy);
+  evaluate(candidate: CandidateSkill): ApprovalDecision;
+}
+//#endregion
+//#region src/versioning/skillVersionStore.d.ts
+/** 版本存储：manifest 快照 + parentVersionId 链；回滚 = 追加新版本（谱系不断）。
+ *  保留策略：maxArchivesPerSkill（默认 5）超出时清理最旧版本（json + zip 归档一并删除）。 */
+declare class SkillVersionStore {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+    now?: () => string;
+    createId?: () => string;
+    audit?: AuditLog;
+    /** 每技能保留的版本/归档上限（默认 5，超出清理最旧） */
+    maxArchivesPerSkill?: number;
+  });
+  add(skillName: string, input: {
+    reason: string;
+    manifest: SkillManifest;
+    parentVersionId?: string;
+    archive?: Uint8Array;
+  }): Promise<SkillVersion>;
+  /** 读取版本归档字节（applyRollback 用；未捕获归档的旧版本 → GOVERNANCE_FAILED） */
+  readArchive(skillName: string, versionId: string): Promise<Uint8Array>;
+  list(skillName: string): Promise<SkillVersion[]>;
+  get(skillName: string, versionId: string): Promise<SkillVersion>;
+  /** 回滚：基于旧 manifest 追加新版本 + skill.rolled_back 审计 */
+  rollback(skillName: string, targetVersionId: string, input: {
+    actor?: string;
+    reason?: string;
+  }): Promise<SkillVersion>;
+}
+//#endregion
+export { AuditLog as a, CandidateSkill as c, CandidateStore as d, CompositeApprovalPolicy as f, candidateToCatalogEntry as g, SkillVersionStore as h, AuditEvent as i, CandidateSource as l, SkillVersion as m, ApprovalDecision as n, CandidateFile as o, SkillState as p, ApprovalPolicy as r, CandidateRisk as s, AlwaysHumanApprovalPolicy as t, CandidateStatus as u };

package/dist/stdio-CFMoANJJ-BxrTeXh7.js

@@ -0,0 +1,31 @@
+import { y as JSONRPCMessageSchema } from "./types-WovEf4ED-CZSDiiBU.js";
+
+//#region ../node/dist/stdio-CFMoANJJ.js
+/**
+* Buffers a continuous stdio stream into discrete JSON-RPC messages.
+*/
+var ReadBuffer = class {
+	append(chunk) {
+		this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
+	}
+	readMessage() {
+		if (!this._buffer) return null;
+		const index = this._buffer.indexOf("\n");
+		if (index === -1) return null;
+		const line = this._buffer.toString("utf8", 0, index).replace(/\r$/, "");
+		this._buffer = this._buffer.subarray(index + 1);
+		return deserializeMessage(line);
+	}
+	clear() {
+		this._buffer = void 0;
+	}
+};
+function deserializeMessage(line) {
+	return JSONRPCMessageSchema.parse(JSON.parse(line));
+}
+function serializeMessage(message) {
+	return JSON.stringify(message) + "\n";
+}
+
+//#endregion
+export { ReadBuffer, deserializeMessage, serializeMessage };

package/dist/{testing-BUoXvm1u.js → testing-CsrG3XLz.js}

@@ -1,4 +1,4 @@
-import { u as WebSkillError } from "./dist-BQzncxXg.js";
+import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
 
 //#region ../runtime/dist/testing.js
 /**

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { c as LlmClient, d as LlmResponse, f as LlmStreamEvent, h as MemoryStore, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, s as InteractionResponse, t as Artifact, v as UiBridge } from "./types-7fnqDVrf-BnRQjVU3.js";
+import { c as LlmClient, d as LlmResponse, f as LlmStreamEvent, h as MemoryStore, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, s as InteractionResponse, t as Artifact, v as UiBridge } from "./types-AmKCKJn_-VGabeXK4.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-BPUBZCwJ-4jat_SVG.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/testing.js

@@ -1,5 +1,5 @@
 import { t as MemoryArtifactStore } from "./memoryArtifactStore-C9lFVqPF-yFz6yJj0.js";
 import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env--jJB-TSX-04klhTYi.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-BUoXvm1u.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-CsrG3XLz.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };

package/dist/{types-7fnqDVrf-BnRQjVU3.d.ts → types-AmKCKJn_-VGabeXK4.d.ts}

@@ -1,6 +1,6 @@
 //#region ../core/dist/index.d.ts
 //#region src/errors.d.ts
-type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE';
+type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT';
 /**
  * 所有公开 API 抛出的结构化错误，code 供上层可编程处理
  * @stable
@@ -91,6 +91,29 @@ interface VerifyResult {
 declare const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
 /** managed root 下的锁定文件名（不参与 files 列表与 digest） */
 declare const SKILLS_LOCKFILE = "skills.lock.json";
+/** 技能目录内的签名文件名（不参与 files 列表与 digest） */
+declare const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
+/**
+ * 不参与 digest 的技能目录内文件。
+ *
+ * 这份名单原本在 node / browser / console / core 各抄一份，签名文件一旦漏抄一处，
+ * 写签名就会改变该处算出的 digest、让签名当场自我失效——而且只在「先签盘上的包、
+ * 再从盘上验」时才暴露。收成一处是为了让「漏抄」这件事不再可能发生。
+ */
+declare const MANIFEST_EXCLUDED_FILES: ReadonlySet<string>;
+/**
+ * 技能管理器的最小端口。
+ *
+ * 只声明**环境无关的调用方实际用到的方法**：治理层需要卸载技能，但不该因此
+ * 依赖 `@webskill/node` 的 `SkillManager` 类——那会把 `node:*` 类型拖进
+ * `/governance` 的 d.ts chunk（D21）。刻意不镜像 `SkillManager` 的全部方法，
+ * 否则只是换个名字保留同一份耦合。
+ *
+ * @stable
+ */
+interface SkillManagerPort {
+  uninstall(name: string): Promise<void>;
+}
 type Sha256Fn = (data: Uint8Array | string) => string | Promise<string>;
 /** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256（hash 由调用方提供，可为 WebCrypto 异步实现） */
 declare function computeDigest(files: Array<{
@@ -144,6 +167,118 @@ interface FileSystemProvider {
   withRoot?(root: string): FileSystemProvider;
 }
 //#endregion
+//#region src/skill/signature.d.ts
+declare const SIGNATURE_SCHEMA_VERSION = 1;
+/** `webskill.skill-signature.json` 的落盘形态 */
+interface SkillSignature {
+  schemaVersion: number;
+  algorithm: 'ed25519';
+  /** 公钥 SHA-256 的前 16 字节 hex */
+  keyId: string;
+  /** base64url，raw 32 bytes */
+  publicKey: string;
+  /** base64url，raw 64 bytes */
+  signature: string;
+  signedAt: string;
+}
+/** 未签名包的处置策略；0.3.0 默认 `warn`，0.4.0 与 D10 一起收紧 */
+type UnsignedPolicy = 'allow' | 'warn' | 'deny';
+interface TrustedKey {
+  keyId: string;
+  publicKey: string;
+  label: string;
+  addedAt: string;
+}
+interface TrustedKeyStore {
+  list(): Promise<TrustedKey[]>;
+  get(keyId: string): Promise<TrustedKey | undefined>;
+  add(key: Omit<TrustedKey, 'addedAt'>): Promise<void>;
+  remove(keyId: string): Promise<void>;
+}
+interface SignatureVerdict {
+  ok: boolean;
+  /** 未签名且策略放行时为 true；调用方据此决定是否发 warning 事件 */
+  unsigned: boolean;
+  /** 验签通过时是信任库里的 keyId */
+  keyId?: string;
+  /** 放行但需提醒的原因（英文，进审计与 UI） */
+  warning?: string;
+}
+/**
+ * 验签结论的审计投递口。governance 的 `FsAuditLog` 结构上满足它，
+ * 因此宿主可以直接传进来——core 不反向依赖 governance。
+ */
+interface SignatureAuditSink {
+  append(event: {
+    type: string;
+    target: string;
+    data?: Record<string, unknown>;
+  }): Promise<unknown>;
+}
+/** 已导入的密钥句柄；真实 WebCrypto `CryptoKey` 结构上兼容 */
+interface CryptoKeyLike {
+  readonly type: string;
+  readonly algorithm: {
+    readonly name: string;
+  };
+}
+/**
+ * 签名载荷：固定键序手写拼装，**不依赖 JSON.stringify 的属性顺序**
+ * （对象字面量顺序与运行时插入顺序不是同一件事，签验两侧字节必须逐字一致）。
+ *
+ * 载荷带 skill/version 而非裸 digest：只签 digest 时，同内容不同名的两个包
+ * 签名可以互换，等于允许把 A 技能的签名挪到 B 技能上。
+ */
+declare function signaturePayloadBytes(manifest: SkillManifest): Uint8Array;
+declare function keyIdOf(publicKey: Uint8Array): Promise<string>;
+/** 从技能目录读签名文件；文件不存在返回 undefined（缺签名由策略层判定，不是错误） */
+declare function readSkillSignature(fs: FileSystemProvider, skillRoot: string): Promise<SkillSignature | undefined>;
+/**
+ * 验签。四种失败各自一个错误码，因为宿主的处置完全不同：
+ * 缺签名要引导选策略，坏文件要提示重下，不受信的 key 要引导添加密钥，
+ * 而验签不通过是安全事件，不提供「继续」。
+ *
+ * 包内自带的 publicKey **不产生任何信任**——它只是让「摘要不匹配」与
+ * 「公钥不受信」两种失败可区分。信任判定只认信任库里的 keyId。
+ */
+declare function verifySkillSignature(input: {
+  manifest: SkillManifest;
+  signature: SkillSignature | undefined;
+  trustedKeys: TrustedKeyStore;
+  policy: {
+    unsigned: UnsignedPolicy;
+  };
+}): Promise<SignatureVerdict>;
+/**
+ * 为已生成 manifest 的技能产出签名。生产与测试走同一条路径——
+ * 只提供 CLI 会让测试无法覆盖真正被调用的代码。
+ *
+ * `publicKey` 必须显式传入：WebCrypto 没有「由私钥导出公钥」的 API，
+ * 密钥对的两半只能一起来。
+ */
+declare function signSkill(input: {
+  manifest: SkillManifest;
+  /** 已导入的密钥句柄，或 pkcs8 DER 字节 */
+  privateKey: CryptoKeyLike | Uint8Array;
+  /** raw 32 字节公钥 */
+  publicKey: Uint8Array;
+  signedAt?: string;
+}): Promise<SkillSignature>;
+/**
+ * `FileSystemProvider` 后端的信任库：单个 JSON 文件，写入走原子替换。
+ *
+ * 「OPFS 还是 IndexedDB 还是宿主注入」不在这层回答——`FileSystemProvider`
+ * 已经是那层抽象，浏览器里落在哪由宿主注入的 fs 决定。
+ */
+declare class FsTrustedKeyStore implements TrustedKeyStore {
+  #private;
+  constructor(fs: FileSystemProvider, path: string);
+  list(): Promise<TrustedKey[]>;
+  get(keyId: string): Promise<TrustedKey | undefined>;
+  add(key: Omit<TrustedKey, 'addedAt'>): Promise<void>;
+  remove(keyId: string): Promise<void>;
+}
+//#endregion
 //#region src/fs/memoryFs.d.ts
 /** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
 declare class MemoryFS implements FileSystemProvider {
@@ -405,7 +540,7 @@ declare function escapeXml(text: string): string;
 declare function renderAvailableSkillsXml(catalog: SkillCatalog): string;
 declare const xmlRenderer: CatalogRenderer;
 //#endregion
-//#region ../runtime/dist/types-7fnqDVrf.d.ts
+//#region ../runtime/dist/types-AmKCKJn_.d.ts
 //#region src/llm/streamTypes.d.ts
 /** 流式 LLM 事件（OpenAI SSE / Vercel fullStream 统一映射） */
 type LlmStreamEvent = {
@@ -437,6 +572,8 @@ interface LlmToolCall {
   id: string;
   name: string;
   arguments: Record<string, unknown>;
+  /** 流式拼接后的 arguments 不是合法 JSON 时的错误描述；设置时 arguments 不可信 */
+  argumentsParseError?: string;
 }
 interface LlmResponse {
   content?: string;
@@ -741,4 +878,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { SkillSource as $, DEFAULT_ARCHIVE_LIMITS as A, SKILL_NAME_PATTERN as B, UiSurfaceDrafts as C, renderCatalogJson as Ct, UiSurfaceSnapshot as D, validateSkills as Dt, UiSurfacePatch as E, unzipWithLimits as Et, MemoryFS as F, SkillDocument as G, SkillCatalog as H, RemoteUrlPolicy as I, SkillLocation as J, SkillInstallSource as K, SKILLS_LOCKFILE as L, FileStat as M, FileSystemProvider as N, ArchiveLimits as O, verifyManifest as Ot, JsonSchema as P, SkillReader as Q, SKILL_MANIFEST_FILE as R, UiSurfaceActionResponse as S, renderAvailableSkillsXml as St, UiSurfaceFormField as T, resolveInsideRoot as Tt, SkillCatalogEntry as U, SKILL_PACK_FILE as V, SkillDiscovery as W, SkillMetadata as X, SkillManifest as Y, SkillPackManifest as Z, RenderResultRequest as _, messageOf as _t, InteractionPolicy as a, assertRemoteUrlAllowed as at, UiSurfaceAction as b, parseSkillPackManifest as bt, LlmClient as c, buildCatalog as ct, LlmResponse as d, checkSkillRules as dt, SkillsLockfile as et, LlmStreamEvent as f, computeDigest as ft, RenderBlock as g, jsonRenderer as gt, MemoryStore as h, isValidSkillName as ht, FormField as i, WebSkillErrorCode as it, DiscoveryResult as j, CatalogRenderer as k, xmlRenderer as kt, LlmCompleteInput as l, buildManifest as lt, LlmToolSpec as m, exportSkills as mt, ArtifactStore as n, VerifyResult as nt, InteractionRequest as o, assertSafePathSegment as ot, LlmToolCall as p, escapeXml as pt, SkillIssue as q, ChartSpec as r, WebSkillError as rt, InteractionResponse as s, atomicWriteText as st, Artifact as t, ValidationReport as tt, LlmMessage as u, checkDependencyCycles as ut, UiBridge as v, normalizePath as vt, UiSurfaceEvent as w, resolveArchiveLimits as wt, UiSurfaceActionRequest as x, readResponseWithLimit as xt, UiSurface as y, parseSkillMarkdown as yt, SKILL_NAME_MAX_LENGTH as z };
+export { SkillInstallSource as $, CryptoKeyLike as A, messageOf as At, SIGNATURE_SCHEMA_VERSION as B, signSkill as Bt, UiSurfaceDrafts as C, checkSkillRules as Ct, UiSurfaceSnapshot as D, isValidSkillName as Dt, UiSurfacePatch as E, exportSkills as Et, FsTrustedKeyStore as F, readSkillSignature as Ft, SKILL_PACK_FILE as G, verifySkillSignature as Gt, SKILL_MANIFEST_FILE as H, unzipWithLimits as Ht, JsonSchema as I, renderAvailableSkillsXml as It, SignatureVerdict as J, SKILL_SIGNATURE_FILE as K, xmlRenderer as Kt, MANIFEST_EXCLUDED_FILES as L, renderCatalogJson as Lt, DiscoveryResult as M, parseSkillMarkdown as Mt, FileStat as N, parseSkillPackManifest as Nt, ArchiveLimits as O, jsonRenderer as Ot, FileSystemProvider as P, readResponseWithLimit as Pt, SkillDocument as Q, MemoryFS as R, resolveArchiveLimits as Rt, UiSurfaceActionResponse as S, checkDependencyCycles as St, UiSurfaceFormField as T, escapeXml as Tt, SKILL_NAME_MAX_LENGTH as U, validateSkills as Ut, SKILLS_LOCKFILE as V, signaturePayloadBytes as Vt, SKILL_NAME_PATTERN as W, verifyManifest as Wt, SkillCatalogEntry as X, SkillCatalog as Y, SkillDiscovery as Z, RenderResultRequest as _, assertRemoteUrlAllowed as _t, InteractionPolicy as a, SkillPackManifest as at, UiSurfaceAction as b, buildCatalog as bt, LlmClient as c, SkillSource as ct, LlmResponse as d, TrustedKeyStore as dt, SkillIssue as et, LlmStreamEvent as f, UnsignedPolicy as ft, RenderBlock as g, WebSkillErrorCode as gt, MemoryStore as h, WebSkillError as ht, FormField as i, SkillMetadata as it, DEFAULT_ARCHIVE_LIMITS as j, normalizePath as jt, CatalogRenderer as k, keyIdOf as kt, LlmCompleteInput as l, SkillsLockfile as lt, LlmToolSpec as m, VerifyResult as mt, ArtifactStore as n, SkillManagerPort as nt, InteractionRequest as o, SkillReader as ot, LlmToolCall as p, ValidationReport as pt, SignatureAuditSink as q, ChartSpec as r, SkillManifest as rt, InteractionResponse as s, SkillSignature as st, Artifact as t, SkillLocation as tt, LlmMessage as u, TrustedKey as ut, UiBridge as v, assertSafePathSegment as vt, UiSurfaceEvent as w, computeDigest as wt, UiSurfaceActionRequest as x, buildManifest as xt, UiSurface as y, atomicWriteText as yt, RemoteUrlPolicy as z, resolveInsideRoot as zt };