@webskill/sdk 0.2.8 → 0.4.0

package/dist/{types-AmKCKJn_-BogJPQHU.d.ts → types-7Wcg--Vh-1YlQ4jF9.d.ts}

@@ -1,6 +1,6 @@
 //#region ../core/dist/index.d.ts
 //#region src/errors.d.ts
-type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE';
+type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT';
 /**
  * 所有公开 API 抛出的结构化错误，code 供上层可编程处理
  * @stable
@@ -29,6 +29,27 @@ interface JsonSchema {
   [key: string]: unknown;
 }
 //#endregion
+//#region src/contracts/pagination.d.ts
+/**
+ * 全仓统一的游标分页形状。会话、消息、治理列表共用同一套，
+ * 不为每个存储端口各造一种（形状一多，调用方就得为每个端口重写一遍翻页逻辑）。
+ */
+interface PageQuery {
+  /**
+   * 不透明续读位置，只能来自上一页的 `nextCursor`。
+   * 刻意不是数字 offset：追加型存储上并发追加会让 offset 错位，
+   * 而不透明串让实现方自己决定编码。
+   */
+  cursor?: string;
+  /** 本页最多返回多少条；缺省值由**存储实现**决定，不由调用方兜底 */
+  limit?: number;
+}
+/** 一页结果。`nextCursor` 缺席即已到末页，不用额外的 `hasMore` 布尔 */
+interface Page<T> {
+  items: T[];
+  nextCursor?: string;
+}
+//#endregion
 //#region src/skill/manifest.d.ts
 type SkillInstallSource = {
   type: 'local';
@@ -91,6 +112,29 @@ interface VerifyResult {
 declare const SKILL_MANIFEST_FILE = "webskill.skill-manifest.json";
 /** managed root 下的锁定文件名（不参与 files 列表与 digest） */
 declare const SKILLS_LOCKFILE = "skills.lock.json";
+/** 技能目录内的签名文件名（不参与 files 列表与 digest） */
+declare const SKILL_SIGNATURE_FILE = "webskill.skill-signature.json";
+/**
+ * 不参与 digest 的技能目录内文件。
+ *
+ * 这份名单原本在 node / browser / console / core 各抄一份，签名文件一旦漏抄一处，
+ * 写签名就会改变该处算出的 digest、让签名当场自我失效——而且只在「先签盘上的包、
+ * 再从盘上验」时才暴露。收成一处是为了让「漏抄」这件事不再可能发生。
+ */
+declare const MANIFEST_EXCLUDED_FILES: ReadonlySet<string>;
+/**
+ * 技能管理器的最小端口。
+ *
+ * 只声明**环境无关的调用方实际用到的方法**：治理层需要卸载技能，但不该因此
+ * 依赖 `@webskill/node` 的 `SkillManager` 类——那会把 `node:*` 类型拖进
+ * `/governance` 的 d.ts chunk（D21）。刻意不镜像 `SkillManager` 的全部方法，
+ * 否则只是换个名字保留同一份耦合。
+ *
+ * @stable
+ */
+interface SkillManagerPort {
+  uninstall(name: string): Promise<void>;
+}
 type Sha256Fn = (data: Uint8Array | string) => string | Promise<string>;
 /** 整体 digest：逐文件 "<path>:<sha256>\n" 拼接串（文件按 path 排序）的 sha256（hash 由调用方提供，可为 WebCrypto 异步实现） */
 declare function computeDigest(files: Array<{
@@ -144,6 +188,123 @@ interface FileSystemProvider {
   withRoot?(root: string): FileSystemProvider;
 }
 //#endregion
+//#region src/skill/signature.d.ts
+declare const SIGNATURE_SCHEMA_VERSION = 1;
+/** `webskill.skill-signature.json` 的落盘形态 */
+interface SkillSignature {
+  schemaVersion: number;
+  algorithm: 'ed25519';
+  /** 公钥 SHA-256 的前 16 字节 hex */
+  keyId: string;
+  /** base64url，raw 32 bytes */
+  publicKey: string;
+  /** base64url，raw 64 bytes */
+  signature: string;
+  signedAt: string;
+}
+/**
+ * 未签名包的处置策略。默认是 `warn`，0.4.0（D2）复核后维持不变：
+ * 默认信任库是空的，`deny` 之下未签名包报 `SIGNATURE_MISSING`、签名再正确也报
+ * `SIGNATURE_UNTRUSTED_KEY`——接受集为空，那不是更严的默认值而是恒失败的安装。
+ * `deny` 必须与装配好的 `TrustedKeyStore` 成对启用。
+ */
+type UnsignedPolicy = 'allow' | 'warn' | 'deny';
+interface TrustedKey {
+  keyId: string;
+  publicKey: string;
+  label: string;
+  addedAt: string;
+}
+interface TrustedKeyStore {
+  list(): Promise<TrustedKey[]>;
+  get(keyId: string): Promise<TrustedKey | undefined>;
+  add(key: Omit<TrustedKey, 'addedAt'>): Promise<void>;
+  remove(keyId: string): Promise<void>;
+}
+interface SignatureVerdict {
+  ok: boolean;
+  /** 未签名且策略放行时为 true；调用方据此决定是否发 warning 事件 */
+  unsigned: boolean;
+  /** 验签通过时是信任库里的 keyId */
+  keyId?: string;
+  /** 放行但需提醒的原因（英文，进审计与 UI） */
+  warning?: string;
+}
+/**
+ * 验签结论的审计投递口。governance 的 `FsAuditLog` 结构上满足它，
+ * 因此宿主可以直接传进来——core 不反向依赖 governance。
+ */
+interface SignatureAuditSink {
+  append(event: {
+    type: string;
+    target: string;
+    data?: Record<string, unknown>;
+  }): Promise<unknown>;
+}
+/** 已导入的密钥句柄；真实 WebCrypto `CryptoKey` 结构上兼容 */
+interface CryptoKeyLike {
+  readonly type: string;
+  readonly algorithm: {
+    readonly name: string;
+  };
+}
+/**
+ * 签名载荷：固定键序手写拼装，**不依赖 JSON.stringify 的属性顺序**
+ * （对象字面量顺序与运行时插入顺序不是同一件事，签验两侧字节必须逐字一致）。
+ *
+ * 载荷带 skill/version 而非裸 digest：只签 digest 时，同内容不同名的两个包
+ * 签名可以互换，等于允许把 A 技能的签名挪到 B 技能上。
+ */
+declare function signaturePayloadBytes(manifest: SkillManifest): Uint8Array;
+declare function keyIdOf(publicKey: Uint8Array): Promise<string>;
+/** 从技能目录读签名文件；文件不存在返回 undefined（缺签名由策略层判定，不是错误） */
+declare function readSkillSignature(fs: FileSystemProvider, skillRoot: string): Promise<SkillSignature | undefined>;
+/**
+ * 验签。四种失败各自一个错误码，因为宿主的处置完全不同：
+ * 缺签名要引导选策略，坏文件要提示重下，不受信的 key 要引导添加密钥，
+ * 而验签不通过是安全事件，不提供「继续」。
+ *
+ * 包内自带的 publicKey **不产生任何信任**——它只是让「摘要不匹配」与
+ * 「公钥不受信」两种失败可区分。信任判定只认信任库里的 keyId。
+ */
+declare function verifySkillSignature(input: {
+  manifest: SkillManifest;
+  signature: SkillSignature | undefined;
+  trustedKeys: TrustedKeyStore;
+  policy: {
+    unsigned: UnsignedPolicy;
+  };
+}): Promise<SignatureVerdict>;
+/**
+ * 为已生成 manifest 的技能产出签名。生产与测试走同一条路径——
+ * 只提供 CLI 会让测试无法覆盖真正被调用的代码。
+ *
+ * `publicKey` 必须显式传入：WebCrypto 没有「由私钥导出公钥」的 API，
+ * 密钥对的两半只能一起来。
+ */
+declare function signSkill(input: {
+  manifest: SkillManifest;
+  /** 已导入的密钥句柄，或 pkcs8 DER 字节 */
+  privateKey: CryptoKeyLike | Uint8Array;
+  /** raw 32 字节公钥 */
+  publicKey: Uint8Array;
+  signedAt?: string;
+}): Promise<SkillSignature>;
+/**
+ * `FileSystemProvider` 后端的信任库：单个 JSON 文件，写入走原子替换。
+ *
+ * 「OPFS 还是 IndexedDB 还是宿主注入」不在这层回答——`FileSystemProvider`
+ * 已经是那层抽象，浏览器里落在哪由宿主注入的 fs 决定。
+ */
+declare class FsTrustedKeyStore implements TrustedKeyStore {
+  #private;
+  constructor(fs: FileSystemProvider, path: string);
+  list(): Promise<TrustedKey[]>;
+  get(keyId: string): Promise<TrustedKey | undefined>;
+  add(key: Omit<TrustedKey, 'addedAt'>): Promise<void>;
+  remove(keyId: string): Promise<void>;
+}
+//#endregion
 //#region src/fs/memoryFs.d.ts
 /** 内存文件系统：路径一律规范化为 `/` 分隔，写入自动创建父目录 */
 declare class MemoryFS implements FileSystemProvider {
@@ -207,6 +368,22 @@ interface RemoteUrlPolicy {
  */
 declare function assertRemoteUrlAllowed(rawUrl: string, policy?: RemoteUrlPolicy): URL;
 //#endregion
+//#region src/ui/types.d.ts
+/**
+ * 声明式 UI 的节点：框架无关，技能脚本与 LLM 产出同一形状。
+ *
+ * 定义放在 core 而不是 ui/runtime：runtime 要用它做结构校验，ui 要用它做 catalog
+ * 语义校验，两者互不依赖。`@webskill/ui` 以同名 re-export，公开名不变。
+ */
+interface UiSpecNode {
+  /** catalog 中声明过的组件名 */
+  component: string;
+  props?: Record<string, unknown>;
+  children?: UiSpecNode[];
+  /** 稳定 id（回放与 action 关联用；交互节点以此作为 actionId） */
+  id?: string;
+}
+//#endregion
 //#region src/skill/types.d.ts
 type SkillSource = 'local' | 'mcp' | 'generated' | 'installed';
 /**
@@ -405,7 +582,7 @@ declare function escapeXml(text: string): string;
 declare function renderAvailableSkillsXml(catalog: SkillCatalog): string;
 declare const xmlRenderer: CatalogRenderer;
 //#endregion
-//#region ../runtime/dist/types-AmKCKJn_.d.ts
+//#region ../runtime/dist/types-7Wcg--Vh.d.ts
 //#region src/llm/streamTypes.d.ts
 /** 流式 LLM 事件（OpenAI SSE / Vercel fullStream 统一映射） */
 type LlmStreamEvent = {
@@ -420,9 +597,26 @@ type LlmStreamEvent = {
 };
 //#endregion
 //#region src/llm/types.d.ts
+/**
+ * 消息内容分片。二进制一律 base64 内联：引用形态（URL / 句柄）需要生命周期管理，
+ * 不属于本批。代价是快照体积。
+ */
+type LlmContentPart = {
+  type: 'text';
+  text: string;
+} | {
+  type: 'image';
+  mimeType: string;
+  data: string;
+} | {
+  type: 'file';
+  mimeType: string;
+  data: string;
+  name?: string;
+};
 interface LlmMessage {
   role: 'system' | 'user' | 'assistant' | 'tool';
-  content: string;
+  content: LlmContentPart[];
   /** role=tool 时必填 */
   toolCallId?: string;
   /** role=assistant 发起工具调用时携带 */
@@ -441,7 +635,7 @@ interface LlmToolCall {
   argumentsParseError?: string;
 }
 interface LlmResponse {
-  content?: string;
+  content?: LlmContentPart[];
   toolCalls?: LlmToolCall[];
   raw?: unknown;
 }
@@ -568,14 +762,16 @@ interface RenderResultRequest {
   artifacts?: Artifact[];
 }
 /** A user action exposed by a generative UI surface. @experimental */
-interface UiSurfaceAction {
+interface UiSpecActionCapability {
+  /** Matches the `id` of the interactive node that declares the action. */
   id: string;
-  label: string;
   intent: 'submit' | 'cancel' | 'select' | 'download' | 'refresh';
-  disabled?: boolean;
   /** Requests that the producing run waits for this action before continuing. @experimental */
   awaitResponse?: boolean;
-  /** Runtime-generated action capability; model-provided values are never trusted. @experimental */
+  /**
+   * Runtime-generated action capability. Kept out of the node tree on purpose:
+   * the tree is model-writable, so a nonce carried inside it would be forgeable.
+   */
   nonce?: string;
 }
 /** A runtime-owned request for a user action on a rendered UI surface. @experimental */
@@ -583,7 +779,7 @@ interface UiSurfaceActionRequest {
   runId: string;
   surfaceId: string;
   actionId: string;
-  intent: UiSurfaceAction['intent'];
+  intent: UiSpecActionCapability['intent'];
   nonce: string;
 }
 /** A structured action returned by a renderer to the waiting run. @experimental */
@@ -592,75 +788,26 @@ interface UiSurfaceActionResponse extends UiSurfaceActionRequest {
   cancelled?: boolean;
 }
 /** Serializable draft values for forms that belong to one interrupted run. @experimental */
-type UiSurfaceDrafts = Record<string, Record<string, unknown>>;
-/** A structured form field rendered inside a generative UI surface. @experimental */
-interface UiSurfaceFormField {
-  name: string;
-  label: string;
-  type: 'text' | 'number' | 'date' | 'textarea' | 'select' | 'multi-select' | 'toggle' | 'file';
-  required?: boolean;
-  description?: string;
-  defaultValue?: unknown;
-  options?: Array<{
-    label: string;
-    value: unknown;
-  }>;
-}
-/** Framework-neutral generative UI surface. @experimental */
-type UiSurface = {
-  kind: 'form';
-  id: string;
-  title?: string;
-  fields: UiSurfaceFormField[];
-  actions: UiSurfaceAction[];
-} | {
-  kind: 'chart';
-  id: string;
-  chart: ChartSpec;
-  actions?: UiSurfaceAction[];
-} | {
-  kind: 'table';
-  id: string;
-  columns: string[];
-  rows: unknown[][];
-  actions?: UiSurfaceAction[];
-} | {
-  kind: 'metric';
-  id: string;
-  label: string;
-  value: string | number;
-  trend?: 'up' | 'down' | 'neutral';
-} | {
-  kind: 'file';
-  id: string;
-  path: string;
-  mimeType?: string;
-  size?: number;
-  actions?: UiSurfaceAction[];
-} | {
-  kind: 'custom';
-  id: string;
-  component: string;
-  props: unknown;
-  actions?: UiSurfaceAction[];
-};
-/** A bounded mutation applied to an existing UI surface. @experimental */
-interface UiSurfacePatch {
+type UiSpecDrafts = Record<string, Record<string, unknown>>;
+/** A bounded mutation applied to an existing UI spec tree. @experimental */
+interface UiSpecPatch {
   op: 'replace' | 'merge' | 'append';
   path: string;
   value: unknown;
 }
 /** Incremental lifecycle event for a framework-neutral generative UI surface. @experimental */
-type UiSurfaceEvent = {
+type UiSpecEvent = {
   runId?: string;
 } & ({
   type: 'open';
-  surface: UiSurface;
+  id: string;
+  node: UiSpecNode;
+  actions?: UiSpecActionCapability[];
 } | {
   type: 'patch';
   id: string;
   revision: number;
-  operations: UiSurfacePatch[];
+  operations: UiSpecPatch[];
 } | {
   type: 'complete';
   id: string;
@@ -675,8 +822,10 @@ type UiSurfaceEvent = {
   id: string;
 });
 /** Persisted state of a generative UI surface. @experimental */
-interface UiSurfaceSnapshot {
-  surface: UiSurface;
+interface UiSpecSnapshot {
+  id: string;
+  node: UiSpecNode;
+  actions?: UiSpecActionCapability[];
   revision: number;
   status: 'active' | 'complete' | 'error' | 'cancelled';
   /** Immutable producing run; supplied on open to support session persistence and replay. */
@@ -699,7 +848,7 @@ interface UiBridge {
   /** 定义即可，阶段 7 消费 */
   renderResult?(input: RenderResultRequest): Promise<void>;
   /** Framework-neutral generative UI surface stream. @experimental */
-  renderSurface?(event: UiSurfaceEvent): Promise<void>;
+  renderSurface?(event: UiSpecEvent): Promise<void>;
   /** Waits for an action declared with awaitResponse; optional for compatibility with legacy bridges. @experimental */
   requestSurfaceAction?(input: UiSurfaceActionRequest): Promise<UiSurfaceActionResponse>;
   /** Best-effort cleanup when a surface action wait times out or is cancelled. @experimental */
@@ -743,4 +892,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { SkillSource as $, DEFAULT_ARCHIVE_LIMITS as A, SKILL_NAME_PATTERN as B, UiSurfaceDrafts as C, renderCatalogJson as Ct, UiSurfaceSnapshot as D, validateSkills as Dt, UiSurfacePatch as E, unzipWithLimits as Et, MemoryFS as F, SkillDocument as G, SkillCatalog as H, RemoteUrlPolicy as I, SkillLocation as J, SkillInstallSource as K, SKILLS_LOCKFILE as L, FileStat as M, FileSystemProvider as N, ArchiveLimits as O, verifyManifest as Ot, JsonSchema as P, SkillReader as Q, SKILL_MANIFEST_FILE as R, UiSurfaceActionResponse as S, renderAvailableSkillsXml as St, UiSurfaceFormField as T, resolveInsideRoot as Tt, SkillCatalogEntry as U, SKILL_PACK_FILE as V, SkillDiscovery as W, SkillMetadata as X, SkillManifest as Y, SkillPackManifest as Z, RenderResultRequest as _, messageOf as _t, InteractionPolicy as a, assertRemoteUrlAllowed as at, UiSurfaceAction as b, parseSkillPackManifest as bt, LlmClient as c, buildCatalog as ct, LlmResponse as d, checkSkillRules as dt, SkillsLockfile as et, LlmStreamEvent as f, computeDigest as ft, RenderBlock as g, jsonRenderer as gt, MemoryStore as h, isValidSkillName as ht, FormField as i, WebSkillErrorCode as it, DiscoveryResult as j, CatalogRenderer as k, xmlRenderer as kt, LlmCompleteInput as l, buildManifest as lt, LlmToolSpec as m, exportSkills as mt, ArtifactStore as n, VerifyResult as nt, InteractionRequest as o, assertSafePathSegment as ot, LlmToolCall as p, escapeXml as pt, SkillIssue as q, ChartSpec as r, WebSkillError as rt, InteractionResponse as s, atomicWriteText as st, Artifact as t, ValidationReport as tt, LlmMessage as u, checkDependencyCycles as ut, UiBridge as v, normalizePath as vt, UiSurfaceEvent as w, resolveArchiveLimits as wt, UiSurfaceActionRequest as x, readResponseWithLimit as xt, UiSurface as y, parseSkillMarkdown as yt, SKILL_NAME_MAX_LENGTH as z };
+export { SkillDocument as $, DEFAULT_ARCHIVE_LIMITS as A, jsonRenderer as At, RemoteUrlPolicy as B, resolveArchiveLimits as Bt, UiSpecPatch as C, buildManifest as Ct, ArchiveLimits as D, escapeXml as Dt, UiSurfaceActionResponse as E, computeDigest as Et, JsonSchema as F, parseSkillPackManifest as Ft, SKILL_NAME_PATTERN as G, validateSkills as Gt, SKILLS_LOCKFILE as H, signSkill as Ht, MANIFEST_EXCLUDED_FILES as I, readResponseWithLimit as It, SignatureAuditSink as J, xmlRenderer as Jt, SKILL_PACK_FILE as K, verifyManifest as Kt, MemoryFS as L, readSkillSignature as Lt, FileStat as M, messageOf as Mt, FileSystemProvider as N, normalizePath as Nt, CatalogRenderer as O, exportSkills as Ot, FsTrustedKeyStore as P, parseSkillMarkdown as Pt, SkillDiscovery as Q, Page as R, renderAvailableSkillsXml as Rt, UiSpecEvent as S, buildCatalog as St, UiSurfaceActionRequest as T, checkSkillRules as Tt, SKILL_MANIFEST_FILE as U, signaturePayloadBytes as Ut, SIGNATURE_SCHEMA_VERSION as V, resolveInsideRoot as Vt, SKILL_NAME_MAX_LENGTH as W, unzipWithLimits as Wt, SkillCatalog as X, SignatureVerdict as Y, SkillCatalogEntry as Z, RenderBlock as _, WebSkillError as _t, InteractionPolicy as a, SkillMetadata as at, UiSpecActionCapability as b, assertSafePathSegment as bt, LlmClient as c, SkillSignature as ct, LlmMessage as d, TrustedKey as dt, SkillInstallSource as et, LlmResponse as f, TrustedKeyStore as ft, MemoryStore as g, VerifyResult as gt, LlmToolSpec as h, ValidationReport as ht, FormField as i, SkillManifest as it, DiscoveryResult as j, keyIdOf as jt, CryptoKeyLike as k, isValidSkillName as kt, LlmCompleteInput as l, SkillSource as lt, LlmToolCall as m, UnsignedPolicy as mt, ArtifactStore as n, SkillLocation as nt, InteractionRequest as o, SkillPackManifest as ot, LlmStreamEvent as p, UiSpecNode as pt, SKILL_SIGNATURE_FILE as q, verifySkillSignature as qt, ChartSpec as r, SkillManagerPort as rt, InteractionResponse as s, SkillReader as st, Artifact as t, SkillIssue as tt, LlmContentPart as u, SkillsLockfile as ut, RenderResultRequest as v, WebSkillErrorCode as vt, UiSpecSnapshot as w, checkDependencyCycles as wt, UiSpecDrafts as x, atomicWriteText as xt, UiBridge as y, assertRemoteUrlAllowed as yt, PageQuery as z, renderCatalogJson as zt };