@webskill/sdk 0.2.8 → 0.4.0

package/dist/{index-QrHtAudz.d.ts → index-DLfR2Y6I.d.ts}

@@ -1,5 +1,11 @@
-import { C as UiSurfaceDrafts, G as SkillDocument, H as SkillCatalog, K as SkillInstallSource, N as FileSystemProvider, P as JsonSchema, U as SkillCatalogEntry, W as SkillDiscovery, Y as SkillManifest, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, h as MemoryStore, i as FormField, it as WebSkillErrorCode, j as DiscoveryResult, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, r as ChartSpec, t as Artifact, tt as ValidationReport, u as LlmMessage, v as UiBridge, w as UiSurfaceEvent, x as UiSurfaceActionRequest, y as UiSurface } from "./types-AmKCKJn_-BogJPQHU.js";
+import { $ as SkillDocument, F as JsonSchema, N as FileSystemProvider, Q as SkillDiscovery, R as Page, S as UiSpecEvent, T as UiSurfaceActionRequest, X as SkillCatalog, Z as SkillCatalogEntry, _ as RenderBlock, a as InteractionPolicy, c as LlmClient, d as LlmMessage, et as SkillInstallSource, f as LlmResponse, g as MemoryStore, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, p as LlmStreamEvent, pt as UiSpecNode, r as ChartSpec, t as Artifact, u as LlmContentPart, v as RenderResultRequest, vt as WebSkillErrorCode, x as UiSpecDrafts, y as UiBridge, z as PageQuery } from "./types-7Wcg--Vh-1YlQ4jF9.js";
 //#region ../runtime/dist/index.d.ts
+//#region src/llm/parts.d.ts
+/** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
+declare const textParts: (text: string) => LlmContentPart[];
+/** 取出 parts 中的文本（非文本分片在纯文本语境下无法表达，此处按丢弃处理——调用方须先校验） */
+declare const partsToText: (parts: readonly LlmContentPart[] | undefined) => string;
+//#endregion
 //#region src/llm/openAiCompatibleClient.d.ts
 interface OpenAiCompatibleClientConfig {
   baseUrl?: string;
@@ -231,13 +237,95 @@ declare function createScriptContext(deps: {
 //#endregion
 //#region src/lifecycle/types.d.ts
 type RuntimePhase = 'discover' | 'route' | 'activate' | 'prepare' | 'execute' | 'observe' | 'interact' | 'complete' | 'fail';
-interface LifecycleEvent {
-  phase: RuntimePhase;
+/** 路由完成：策略与本次可见的技能候选 */
+interface RouteLifecycleData {
+  strategy: string;
+  candidates: string[];
+}
+/** 技能激活：每激活一个技能一次事件（不是一次性的技能集合） */
+interface ActivateLifecycleData {
+  skillName: string;
+  source: 'local' | 'external';
+  /** 级联激活时的来源技能名（顶层激活没有） */
+  via?: string;
+}
+/**
+ * execute 相位有五种发生场合，用 `kind` 区分。
+ * 0.3.0 时它们各写各的键（`{turn}` / `{resumed}` / `{surfaceAction}` /
+ * `{type:'tool'}` / `{type:'llm.delta'}`），消费方只能靠猜哪个键存在。
+ */
+type ExecuteLifecycleData = {
+  kind: 'turn';
+  turn: number;
+} | {
+  kind: 'tool';
+  status: 'started' | 'completed' | 'failed';
+  name: string;
+  callId: string;
+  args: string;
+} | {
+  kind: 'llm-delta';
+  delta: string;
+} | {
+  kind: 'interaction-resumed';
+  interactionId: string;
+} | {
+  kind: 'surface-action-resumed';
+  surfaceId: string;
+  actionId: string;
+};
+/** interact 相位：脚本发起的交互请求，或声明式 surface 上的动作等待 */
+type InteractLifecycleData = {
+  kind: 'interaction';
+  interactionId: string;
+  interactionType: InteractionRequest['type'];
+} | {
+  kind: 'surface-action';
+  surfaceId: string;
+  actionId: string;
+  nonce: string;
+  resumed: boolean;
+};
+/** complete / fail：终态原因 */
+interface TerminalLifecycleData {
+  reason: RunTerminationReason;
+}
+interface LifecycleEventBase {
   runId: string;
   sessionId: string;
   ts: string;
-  data?: Record<string, unknown>;
 }
+/**
+ * 按 `phase` 判别的联合：每个相位的 `data` 键已穷举，没有 `[k: string]: unknown` 兜底。
+ * 留兜底则新增字段不会让 `pnpm api:check` 变红，快照护栏形同虚设。
+ *
+ * `discover` / `prepare` / `observe` 的 `data?: never` 不是「暂时没有」：
+ * 这三个相位当前没有任何发射点（`RuntimePhase` 保留它们供 `RuntimeRun.phase` 使用），
+ * 将来要带负载就是一次公开表面变更，走正常流程。
+ */
+type LifecycleEvent = (LifecycleEventBase & {
+  phase: 'route';
+  data: RouteLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'activate';
+  data: ActivateLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'execute';
+  data: ExecuteLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'interact';
+  data: InteractLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'complete' | 'fail';
+  data: TerminalLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'discover' | 'prepare' | 'observe';
+  data?: never;
+});
+/** 分配式 Omit：直接 `Omit` 会把联合折叠成一个交叉对象，判别性就没了 */
+type DistributiveOmit<T, K extends PropertyKey> = T extends unknown ? Omit<T, K> : never;
+/** 发射方只提供相位与负载，`runId` / `sessionId` / `ts` 由 runtime 填 */
+type LifecycleEventInit = DistributiveOmit<LifecycleEvent, 'runId' | 'sessionId' | 'ts'>;
 interface LifecycleHookContext {
   event: LifecycleEvent;
   run: RuntimeRun;
@@ -247,7 +335,7 @@ type LifecycleHook = (ctx: LifecycleHookContext) => Promise<void | {
 }>;
 //#endregion
 //#region src/trace/types.d.ts
-type TraceEventType = 'skill.routed' | 'skill.activated' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -279,6 +367,52 @@ interface SkillStateGuard {
   canActivate?(skillName: string): boolean | Promise<boolean>;
   canExecute?(skillName: string): boolean | Promise<boolean>;
 }
+/** 激活期完整性校验结论（D3） */
+interface IntegrityVerdict {
+  ok: boolean;
+  /** 通过时的技能内容摘要（`manifest.integrity.digest`）；进 trace，便于事后对账 */
+  digest?: string;
+  /** 失败原因（英文）：实现方须写清哪些文件不一致，否则宿主无法向用户解释 */
+  reason?: string;
+}
+/**
+ * 激活期完整性校验 port（治理装配；**不注入即关闭**——需求 §3 验收 3 要的开关就是它）。
+ *
+ * 与 `SkillStateGuard` 分开而不是塞进去：后者三个方法返回 `boolean`，语义是
+ * 「状态是否允许」；完整性校验要带回失败原因，且失败要驱动状态变更（→ `quarantined`）。
+ *
+ * 置 `quarantined` 与写审计由**实现方**负责（`SkillStatePolicy.toSkillIntegrityGuard`）：
+ * runtime 不能写治理状态，也不能 import `@webskill/node` 去调 `verifyIntegrity`。
+ */
+interface SkillIntegrityGuard {
+  verifyOnActivate?(skillName: string): Promise<IntegrityVerdict>;
+}
+/** 技能脚本执行失败的上报负载 */
+interface SkillFailureReport {
+  skillName: string;
+  runId: string;
+  /** 结构化错误码（执行器返回 `ok:false` 时取其错误码，抛错时取 `WebSkillError.code`，否则 `TOOL_EXECUTION_FAILED`） */
+  code: string;
+  /** 英文失败说明；上报方须能据此向用户解释，不要传空串 */
+  message: string;
+}
+/**
+ * 技能执行结果上报 port（治理 `SkillStatePolicy.toSkillOutcomeReporter` 装配；**不注入即关闭**）。
+ *
+ * 与 `SkillStateGuard` / `SkillIntegrityGuard` 同形而不合并：那两个是**读**侧
+ * （「状态是否允许」「内容是否可信」），这个是**写**侧——把一次真实失败喂给治理的计数器。
+ *
+ * 0.4.0 F1 之前这条链路是断的：runtime 只把失败记进 memory 的 `skill:{name}` / `stats`，
+ * 而 `SkillStatePolicy` 的失败计数存在 `states.json` 里且没有任何生产调用方，
+ * 于是「失败达阈值自动隔离」在任何真实部署里都不会触发。
+ *
+ * runtime 不能反向依赖 `@webskill/governance`，所以只留 port，装配点在宿主。
+ * 实现方抛出的错误由 runtime 吞掉并降级为 `run.warning`：上报失败不该把一次
+ * 本来只是工具出错的 run 变成崩溃。
+ */
+interface SkillOutcomeReporter {
+  onSkillFailed?(report: SkillFailureReport): Promise<void>;
+}
 interface RuntimeSession {
   id: string;
   createdAt: string;
@@ -323,12 +457,12 @@ declare function extractChartSpec(data: unknown): ChartSpec | undefined;
 declare function buildRenderResult(run: RuntimeRun, output: string, renderBlocks?: RenderBlock[]): RenderResultRequest;
 //#endregion
 //#region src/interaction/surface.d.ts
-/** Validates the allowlisted, data-only shape accepted by a UI surface renderer. @experimental */
-declare function validateUiSurface(value: unknown): UiSurface;
+/** Validates the allowlisted, data-only node tree accepted by a UI surface renderer. @experimental */
+declare function validateUiSpecNode(value: unknown): UiSpecNode;
 /** Validates an individual event in the framework-neutral surface stream. @experimental */
-declare function validateUiSurfaceEvent(value: unknown): UiSurfaceEvent;
+declare function validateUiSpecEvent(value: unknown): UiSpecEvent;
 /** Extracts validated surface stream events from structured tool output. @experimental */
-declare function extractUiSurfaceEvents(data: unknown): UiSurfaceEvent[];
+declare function extractUiSpecEvents(data: unknown): UiSpecEvent[];
 //#endregion
 //#region src/interaction/schemaToForm.d.ts
 /**
@@ -409,11 +543,17 @@ interface HookRunnerOptions {
 /** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
 declare class HookRunner {
   #private;
-  readonly timeoutMs: number;
-  readonly failOnHookError: boolean;
+  /** 宿主可在装配后按 RuntimeConfig 调整（console Settings › Agent Runtime 即经此生效） */
+  timeoutMs: number;
+  failOnHookError: boolean;
   onWarning?: (message: string) => void;
   constructor(options?: HookRunnerOptions);
   register(phase: RuntimePhase | '*', hook: LifecycleHook): this;
+  /**
+   * 已注册钩子的**计数**，按注册相位分组（`'*'` 为全相位钩子）。
+   * 刻意不返回函数引用：那会给 UI 一条调用宿主钩子的执行路径，而面板只需要「装没装上」。
+   */
+  listRegisteredHooks(): ReadonlyMap<RuntimePhase | '*', number>;
   run(phase: RuntimePhase, ctx: LifecycleHookContext): Promise<void>;
 }
 //#endregion
@@ -636,6 +776,14 @@ declare class TraceRecorder {
 interface ExternalToolSource {
   readonly kind: string;
   listToolSpecs(): Promise<LlmToolSpec[]>;
+  /**
+   * 可选：向 run 的 system 消息追加一段说明（组件 catalog 之类的大段规格）。
+   *
+   * 为什么不塞进工具的 `description`：description 的长度上限与截断行为是
+   * **provider 相关且静默的**——被截断后模型看到的是半份规格，而请求照样成功。
+   * system 消息没有这个隐患，也不必和工具选择耦合在一起。
+   */
+  systemPrompt?(): Promise<string | undefined>;
   canHandle(llmToolName: string): boolean;
   call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
 }
@@ -652,13 +800,13 @@ interface ExternalSkillProvider {
 declare function mergeCatalogEntries(localEntries: SkillCatalogEntry[], providerEntries: SkillCatalogEntry[]): SkillCatalogEntry[];
 //#endregion
 //#region src/engine/snapshot.d.ts
-declare const RUN_SNAPSHOT_SCHEMA_VERSION = 1;
+declare const RUN_SNAPSHOT_SCHEMA_VERSION = 2;
 /**
  * interrupted（等待用户）状态点的可恢复快照（D3 收窄版）
  * @experimental
  */
 interface RunSnapshot {
-  schemaVersion: 1;
+  schemaVersion: 2;
   runId: string;
   sessionId: string;
   userPrompt: string;
@@ -670,16 +818,18 @@ interface RunSnapshot {
   activeSkillNames: string[];
   /** 已注册脚本工具定义（恢复后免重新激活） */
   activatedTools: ToolDefinition[];
+  /** 声明了 allowed-tools 的技能 → 其清单（D10；旧快照缺省视为无人声明） */
+  skillAllowedTools?: Record<string, string[]>;
   /** 等待中的旧交互（恢复时重新发起，表单重新渲染） */
   pendingInteraction?: InteractionRequest;
   /** 等待中的 surface action；其工具结果已入消息历史，无需重跑工具。 */
   pendingSurfaceAction?: UiSurfaceActionRequest;
   /** 未提交的 surface form values；仅在 interrupted surface action 等待期间保存。 */
-  surfaceDrafts?: UiSurfaceDrafts;
+  surfaceDrafts?: UiSpecDrafts;
   /** $chart 等内容收集的渲染块（0.2.0 起跨 resume 保留；旧快照缺省视为空） */
   renderBlocks?: RenderBlock[];
   /** 已成功渲染的 surface 事件；resume 时按原序重放（旧快照缺省视为空） */
-  surfaceEvents?: UiSurfaceEvent[];
+  surfaceEvents?: UiSpecEvent[];
   /** 交互 id 序号（resume 后续算，避免 id 冲突；旧快照缺省从 0 起） */
   interactionSeq?: number;
   /** Runtime 注入的 surface action nonce 序号（resume 后续算；旧快照缺省从 0 起） */
@@ -698,12 +848,30 @@ interface RunSnapshot {
   };
   snapshotAt: string;
 }
+/**
+ * schema 版本不受支持的快照：文件是好的，但本版本读不了。
+ * 仅用于列表的只读展示，不可恢复。
+ * @experimental
+ */
+interface UnsupportedRunSnapshot {
+  unsupported: true;
+  schemaVersion: number;
+  runId: string;
+  sessionId?: string;
+  userPrompt?: string;
+  snapshotAt: string;
+  interactionExpiresAt?: string;
+}
+/** @experimental */
+type RunSnapshotListEntry = RunSnapshot | UnsupportedRunSnapshot;
+/** @experimental */
+declare function isUnsupportedRunSnapshot(entry: RunSnapshotListEntry): entry is UnsupportedRunSnapshot;
 /** @experimental */
 interface RunSnapshotStore {
   save(snapshot: RunSnapshot): Promise<void>;
   load(runId: string): Promise<RunSnapshot | undefined>;
   delete(runId: string): Promise<void>;
-  list(): Promise<RunSnapshot[]>;
+  list(): Promise<RunSnapshotListEntry[]>;
 }
 /**
  * FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
@@ -723,7 +891,7 @@ declare class FsRunSnapshotStore implements RunSnapshotStore {
   save(snapshot: RunSnapshot): Promise<void>;
   load(runId: string): Promise<RunSnapshot | undefined>;
   delete(runId: string): Promise<void>;
-  list(): Promise<RunSnapshot[]>;
+  list(): Promise<RunSnapshotListEntry[]>;
 }
 //#endregion
 //#region src/engine/agentLoop.d.ts
@@ -759,6 +927,10 @@ interface AgentLoopDeps {
   catalogFilter?: (entries: SkillCatalogEntry[]) => SkillCatalogEntry[] | Promise<SkillCatalogEntry[]>;
   /** 技能状态拦截（read/activate/execute 三入口一致执行；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
+  /** D3 激活期完整性校验 port（治理装配；无注入即关闭） */
+  skillIntegrityGuard?: SkillIntegrityGuard;
+  /** F1 技能执行失败上报 port（治理装配；无注入即关闭） */
+  skillOutcomeReporter?: SkillOutcomeReporter;
   /** D3：interrupt 点快照存储（无配置则行为与现状完全一致） */
   snapshotStore?: RunSnapshotStore;
 }
@@ -831,6 +1003,10 @@ interface WebSkillRuntimeDeps {
   snapshotStore?: RunSnapshotStore;
   /** 技能状态拦截 port（治理 SkillStatePolicy.toSkillStateGuard 装配；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
+  /** D3 激活期完整性校验 port（治理 SkillStatePolicy.toSkillIntegrityGuard 装配；无注入即关闭） */
+  skillIntegrityGuard?: SkillIntegrityGuard;
+  /** F1 技能执行失败上报 port（治理 SkillStatePolicy.toSkillOutcomeReporter 装配；无注入即关闭） */
+  skillOutcomeReporter?: SkillOutcomeReporter;
 }
 /**
  * runtime 门面：组合 discovery / router / agent loop / lifecycle
@@ -864,11 +1040,11 @@ declare class WebSkillRuntime {
     sessionId?: string;
     history?: LlmMessage[];
   }): Promise<RunResult>;
-  /** D3：列出可恢复的 interrupted run（供 UI 展示"未完成任务"） */
-  listInterruptedRuns(): Promise<RunSnapshot[]>;
+  /** D3：列出 interrupted run（供 UI 展示"未完成任务"）；版本不受支持的项带 unsupported 标记 */
+  listInterruptedRuns(): Promise<RunSnapshotListEntry[]>;
   /**
    * D3 恢复 interrupted run：
-   * 不存在 → RUN_SNAPSHOT_NOT_FOUND；schemaVersion 不匹配 → 删除 + RUN_SNAPSHOT_INCOMPATIBLE；
+   * 不存在 → RUN_SNAPSHOT_NOT_FOUND；schema 版本不受支持 → RUN_SNAPSHOT_SCHEMA_UNSUPPORTED（由 store 抛出，不删文件）；
    * 已过期 → interaction-timeout 终态并删快照；否则重建 LoopState 重新发起交互续跑。
    * @experimental
    */
@@ -881,4 +1057,219 @@ declare class WebSkillRuntime {
   cancel(runId: string): boolean;
 }
 //#endregion
-export { SerializingMemoryStore as $, LifecycleHook as A, schemaToForm as At, RUN_SNAPSHOT_SCHEMA_VERSION as B, FullDisclosureRouter as C, networkPolicyLibSource as Ct, HookRunnerOptions as D, normalizeToolError as Dt, HookRunner as E, normalizeToolContent as Et, OpenAiCompatibleClientConfig as F, RunTerminationReason as G, RunResult as H, ProgressiveRouter as I, RuntimeSession as J, RuntimePhase as K, READ_SKILL_FILE_INPUT_SCHEMA as L, LifecycleListener as M, toVercelToolSpecs as Mt, NetworkPolicy as N, validateUiSurface as Nt, InstalledSkillManifest as O, parseBridgeRequest as Ot, OpenAiCompatibleClient as P, validateUiSurfaceEvent as Pt, ScriptExecutor as Q, READ_SKILL_FILE_TOOL as R, FsRunSnapshotStore as S, mergeCatalogEntries as St, GoogleGenAiClientConfig as T, normalizeErrorCode as Tt, RunSnapshot as U, RouteResult as V, RunSnapshotStore as W, SchemaInferer as X, RuntimeSessionHandle as Y, ScriptExecutionContext as Z, EventBus as _, extractChartSpec as _t, AgentLoopConfig as a, TraceClock as at, FsArtifactStore as b, fromVercelStreamPart as bt, AnthropicClientConfig as c, TraceRecorder as ct, BridgeCapabilities as d, WebSkillRuntime as dt, SkillRouter as et, BridgeCapability as f, WebSkillRuntimeDeps as ft, CapabilityMode as g, createWebSkillApi as gt, CapabilityApproval as h, createScriptContext as ht, AgentLoop as i, ToolResult as it, LifecycleHookContext as j, toLlmToolSpec as jt, LifecycleEvent as k, resolveToolName as kt, ApprovalDecision as l, VercelToolSpec as lt, BridgeResponse as m, buildRenderResult as mt, ASK_USER_TOOL as n, ToolDefinition as nt, AgentLoopDeps as o, TraceEvent as ot, BridgeRequest as p, bridgeError as pt, RuntimeRun as q, ASK_USER_TOOL_NAME as r, ToolResolution as rt, AnthropicClient as s, TraceEventType as st, ASK_USER_INPUT_SCHEMA as t, SkillStateGuard as tt, ApprovalScope as u, WebSkillApi as ut, ExternalSkillProvider as v, extractUiSurfaceEvents as vt, GoogleGenAiClient as w, networkUrlHost as wt, FsMemoryStore as x, isNetworkAllowed as xt, ExternalToolSource as y, fromVercelResult as yt, READ_SKILL_FILE_TOOL_NAME as z };
+//#region src/engine/runTrace.d.ts
+declare const RUN_TRACE_SCHEMA_VERSION = 1;
+/**
+ * 一次运行的完整 trace 落盘格式。
+ *
+ * 0.0.1 时代 chatbot 与 console 各写了一份同形状的私有类型，靠注释「字段名不得
+ * 擅自变更」维系——本类型把那条口头约定升级为受 api:check 守护的公开契约。
+ * 刻意**不留开放扩展位**：演进手段是 `schemaVersion`，`extra?: Record<…>` 会让
+ * 快照对字段变更完全失明。
+ * @stable
+ */
+interface RunTraceFile {
+  /** 缺省视为 0（0.0.1 时代文件） */
+  schemaVersion: number;
+  runId: string;
+  sessionId?: string;
+  startedAt: string;
+  endedAt?: string;
+  /** completed | failed | cancelled；读取侧原样透传 */
+  status: string;
+  activeSkills: string[];
+  events: TraceEvent[];
+}
+/**
+ * 运行列表行。由写入侧一次算好，读取侧不再扫描事件。
+ * @stable
+ */
+interface RunTraceSummary {
+  runId: string;
+  sessionId?: string;
+  startedAt: string;
+  endedAt?: string;
+  status: string;
+  activeSkills: string[];
+  /** 终止原因，取自 run.completed/cancelled/failed 事件的 data.reason */
+  endReason?: string;
+  eventCount: number;
+  /** llm.request 事件数（指标里的「轮次」） */
+  turnCount: number;
+  /** endedAt - startedAt，无 endedAt 或时间戳不可解析时缺省 */
+  durationMs?: number;
+}
+/** @stable */
+interface RunTraceFilter {
+  /** 状态精确匹配 */
+  status?: string;
+  /** 大小写不敏感子串：匹配 runId 或任一激活技能名 */
+  search?: string;
+  limit?: number;
+  offset?: number;
+}
+/** @stable */
+interface RunTraceMetrics {
+  totalRuns: number;
+  succeeded: number;
+  failed: number;
+  /** succeeded / totalRuns（无 run 时为 0） */
+  successRate: number;
+  /** turnCount 均值（无可用 run 时为 0） */
+  avgTurns: number;
+  /** 摘要不可解析、已排除在统计外的 run 数（正常为 0） */
+  skippedRuns: number;
+  /** 有 durationMs 的 run 的均值 ms（无则 0） */
+  avgDurationMs: number;
+  /** 近期失败（status === 'failed'，按 startedAt 降序，至多 5 条） */
+  recentFailures: RunTraceSummary[];
+}
+/** @stable */
+interface RunTraceStore {
+  put(run: RuntimeRun): Promise<void>;
+  get(runId: string): Promise<RunTraceFile>;
+  list(filter?: RunTraceFilter): Promise<RunTraceSummary[]>;
+  metrics(filter?: RunTraceFilter): Promise<RunTraceMetrics>;
+}
+/**
+ * `FileSystemProvider` 后端：`<root>/<runId>.json` 存全量 trace，
+ * `<root>/index.jsonl` 是 append-only 的摘要旁路索引。
+ *
+ * 索引存在的唯一理由是**读次数**：0.0.1 的实现为了拼一份列表要整读每个 trace
+ * 文件，点一次指标再来一遍。有了索引，`list()` 与 `metrics()` 各只读一个文件。
+ *
+ * 索引与 trace 目录发散（写完 trace 崩在追加前）的检测不引入新的读放大：
+ * 目录列举本来就要做，比较 `*.json` 个数与索引行数即可；不等则整体重建。
+ * @stable
+ */
+declare class FsRunTraceStore implements RunTraceStore {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+    /** 落盘失败的降级处理；默认 console.warn，保持「写失败不阻断对话」的产品语义 */
+    onError?: (error: unknown, run: RuntimeRun) => void;
+  });
+  put(run: RuntimeRun): Promise<void>;
+  get(runId: string): Promise<RunTraceFile>;
+  list(filter?: RunTraceFilter): Promise<RunTraceSummary[]>;
+  metrics(filter?: RunTraceFilter): Promise<RunTraceMetrics>;
+}
+//#endregion
+//#region src/engine/toolCalls.d.ts
+/**
+ * 一次工具调用的终态摘要（completed / failed）。
+ * @stable
+ */
+interface RunToolCall {
+  callId: string;
+  name: string;
+  status: 'completed' | 'failed';
+  /** 参数摘要（JSON 截断 100 字符） */
+  args?: string;
+  /** 执行耗时 ms */
+  durationMs?: number;
+}
+/**
+ * 从 run 的 trace 推导终态工具调用列表。
+ *
+ * 消费者过去要靠自己遍历 trace 才能拿到这份列表，而遍历 trace 的同一段代码
+ * 又顺手承担了「补发漏掉的 live 事件」的职责——两件事绑在一起，谁也删不掉。
+ * 幂等归 runtime（见 `AgentLoop` 的 per-run 已发集合）之后，
+ * 推导终态列表就是纯函数，独立导出。
+ * @stable
+ */
+declare function summarizeToolCalls(run: RuntimeRun): RunToolCall[];
+//#endregion
+//#region src/engine/session.d.ts
+declare const SESSION_SCHEMA_VERSION = 1;
+/** `FsSessionStore` 的缺省页长。缺省值属于实现，不属于调用方——否则「下推」只推了一半 */
+declare const FS_SESSION_PAGE_SIZE = 50;
+/** 会话列表行：不含消息正文，`list()` 的返回元素 */
+interface SessionMeta {
+  id: string;
+  createdAt: string;
+  title?: string;
+  /** 用户已手动重命名：调用方不应再用首条消息覆盖标题 */
+  titleLocked?: boolean;
+  /** 归档标记：默认 `list()` 不返回 */
+  archived?: boolean;
+  messageCount: number;
+}
+/**
+ * 会话落盘形态。`schemaVersion` 反映**磁盘上的实际值**：
+ * 0.0.1 时代的文件没有该字段，读出来是 0（写回时一律升到当前版本，不做读时原地升级）。
+ */
+interface SessionRecord<TMessage = unknown> extends SessionMeta {
+  schemaVersion: number;
+  messages: TMessage[];
+}
+/**
+ * 会话持久化端口。消息载荷对 runtime 不透明——`ChatMessage` 是 chatbot 的 UI 类型，
+ * runtime 不能认识它，所以泛型默认 `unknown`（只读消费方直接用默认参数即可）。
+ */
+interface SessionStore<TMessage = unknown> {
+  /**
+   * 会话列表页。翻页方向固定为**从新到旧**（聊天 UI 的「加载更多」总是向历史走），
+   * 页内元素仍按 `createdAt` 升序，与 0.3.0 的全量 `list()` 同序。
+   */
+  list(options?: {
+    includeArchived?: boolean;
+  } & PageQuery): Promise<Page<SessionMeta>>;
+  get(id: string): Promise<SessionRecord<TMessage> | undefined>;
+  /**
+   * 消息分页读。与 `list()` 同方向：无游标时给**最后**一页（最新的 `limit` 条），
+   * `nextCursor` 指向更早的历史。页内元素按时间升序，UI 直接前插即可。
+   *
+   * 存在的理由是 `get()` 拿的是全量：长会话下 UI 只需要末尾几十条。
+   */
+  listMessages(id: string, options?: PageQuery): Promise<Page<TMessage>>;
+  create(init?: {
+    id?: string;
+    title?: string;
+  }): Promise<SessionMeta>;
+  /** 追加消息；同一 id 的并发调用互相串行，不丢消息 */
+  appendMessages(id: string, messages: readonly TMessage[]): Promise<void>;
+  /** 整体替换消息列表（删除单条 / 编辑重发截断历史用；破坏性，不与 append 竞争） */
+  replaceMessages(id: string, messages: readonly TMessage[]): Promise<void>;
+  setTitle(id: string, title: string, options?: {
+    lock?: boolean;
+  }): Promise<void>;
+  setArchived(id: string, archived: boolean): Promise<void>;
+  delete(id: string): Promise<void>;
+}
+/**
+ * `FileSystemProvider` 后端的会话存储：`<root>/<id>.json`。
+ *
+ * 所有变更操作按 id 串到一条 promise 链上：会话文件是整读整写的，
+ * 两个并发 `appendMessages` 若都先读后写，后写的会覆盖先写的那条消息。
+ */
+declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessage> {
+  #private;
+  constructor(deps: {
+    root: string;
+    fs: FileSystemProvider;
+  });
+  list(options?: {
+    includeArchived?: boolean;
+  } & PageQuery): Promise<Page<SessionMeta>>;
+  /**
+   * 整文件读后切片。磁盘 I/O 复杂度没有改善（备案 D25），
+   * 但**跨出端口的记录数**已是常量——这正是分页对上层的意义。
+   */
+  listMessages(id: string, options?: PageQuery): Promise<Page<TMessage>>;
+  get(id: string): Promise<SessionRecord<TMessage> | undefined>;
+  create(init?: {
+    id?: string;
+    title?: string;
+  }): Promise<SessionMeta>;
+  appendMessages(id: string, messages: readonly TMessage[]): Promise<void>;
+  replaceMessages(id: string, messages: readonly TMessage[]): Promise<void>;
+  setTitle(id: string, title: string, options?: {
+    lock?: boolean;
+  }): Promise<void>;
+  setArchived(id: string, archived: boolean): Promise<void>;
+  delete(id: string): Promise<void>;
+}
+//#endregion
+export { RunSnapshot as $, normalizeToolContent as $t, GoogleGenAiClientConfig as A, TraceClock as At, LifecycleListener as B, buildRenderResult as Bt, FsArtifactStore as C, SkillOutcomeReporter as Ct, FsSessionStore as D, ToolDefinition as Dt, FsRunTraceStore as E, TerminalLifecycleData as Et, InteractLifecycleData as F, VercelToolSpec as Ft, READ_SKILL_FILE_INPUT_SCHEMA as G, fromVercelResult as Gt, OpenAiCompatibleClient as H, createWebSkillApi as Ht, LifecycleEvent as I, WebSkillApi as It, RUN_SNAPSHOT_SCHEMA_VERSION as J, isUnsupportedRunSnapshot as Jt, READ_SKILL_FILE_TOOL as K, fromVercelStreamPart as Kt, LifecycleEventInit as L, WebSkillRuntime as Lt, HookRunnerOptions as M, TraceEventType as Mt, InstalledSkillManifest as N, TraceRecorder as Nt, FullDisclosureRouter as O, ToolResolution as Ot, IntegrityVerdict as P, UnsupportedRunSnapshot as Pt, RunResult as Q, normalizeErrorCode as Qt, LifecycleHook as R, WebSkillRuntimeDeps as Rt, FS_SESSION_PAGE_SIZE as S, SkillIntegrityGuard as St, FsRunSnapshotStore as T, SkillStateGuard as Tt, OpenAiCompatibleClientConfig as U, extractChartSpec as Ut, NetworkPolicy as V, createScriptContext as Vt, ProgressiveRouter as W, extractUiSpecEvents as Wt, RouteLifecycleData as X, networkPolicyLibSource as Xt, RUN_TRACE_SCHEMA_VERSION as Y, mergeCatalogEntries as Yt, RouteResult as Z, networkUrlHost as Zt, CapabilityMode as _, SerializingMemoryStore as _t, AgentLoop as a, summarizeToolCalls as an, RunTraceFilter as at, ExternalSkillProvider as b, SessionStore as bt, AnthropicClient as c, toVercelToolSpecs as cn, RunTraceSummary as ct, ApprovalScope as d, RuntimeSession as dt, normalizeToolError as en, RunSnapshotListEntry as et, BridgeCapabilities as f, RuntimeSessionHandle as ft, CapabilityApproval as g, ScriptExecutor as gt, BridgeResponse as h, ScriptExecutionContext as ht, ActivateLifecycleData as i, schemaToForm as in, RunTraceFile as it, HookRunner as j, TraceEvent as jt, GoogleGenAiClient as k, ToolResult as kt, AnthropicClientConfig as l, validateUiSpecEvent as ln, RuntimePhase as lt, BridgeRequest as m, SchemaInferer as mt, ASK_USER_TOOL as n, partsToText as nn, RunTerminationReason as nt, AgentLoopConfig as o, textParts as on, RunTraceMetrics as ot, BridgeCapability as p, SESSION_SCHEMA_VERSION as pt, READ_SKILL_FILE_TOOL_NAME as q, isNetworkAllowed as qt, ASK_USER_TOOL_NAME as r, resolveToolName as rn, RunToolCall as rt, AgentLoopDeps as s, toLlmToolSpec as sn, RunTraceStore as st, ASK_USER_INPUT_SCHEMA as t, parseBridgeRequest as tn, RunSnapshotStore as tt, ApprovalDecision as u, validateUiSpecNode as un, RuntimeRun as ut, EventBus as v, SessionMeta as vt, FsMemoryStore as w, SkillRouter as wt, ExternalToolSource as x, SkillFailureReport as xt, ExecuteLifecycleData as y, SessionRecord as yt, LifecycleHookContext as z, bridgeError as zt };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillSource, A as DEFAULT_ARCHIVE_LIMITS, B as SKILL_NAME_PATTERN, C as UiSurfaceDrafts, Ct as renderCatalogJson, D as UiSurfaceSnapshot, Dt as validateSkills, E as UiSurfacePatch, Et as unzipWithLimits, F as MemoryFS, G as SkillDocument, H as SkillCatalog, I as RemoteUrlPolicy, J as SkillLocation, K as SkillInstallSource, L as SKILLS_LOCKFILE, M as FileStat, N as FileSystemProvider, O as ArchiveLimits, Ot as verifyManifest, P as JsonSchema, Q as SkillReader, R as SKILL_MANIFEST_FILE, S as UiSurfaceActionResponse, St as renderAvailableSkillsXml, T as UiSurfaceFormField, Tt as resolveInsideRoot, U as SkillCatalogEntry, V as SKILL_PACK_FILE, W as SkillDiscovery, X as SkillMetadata, Y as SkillManifest, Z as SkillPackManifest, _ as RenderResultRequest, _t as messageOf, a as InteractionPolicy, at as assertRemoteUrlAllowed, b as UiSurfaceAction, bt as parseSkillPackManifest, c as LlmClient, ct as buildCatalog, d as LlmResponse, dt as checkSkillRules, et as SkillsLockfile, f as LlmStreamEvent, ft as computeDigest, g as RenderBlock, gt as jsonRenderer, h as MemoryStore, ht as isValidSkillName, i as FormField, it as WebSkillErrorCode, j as DiscoveryResult, k as CatalogRenderer, kt as xmlRenderer, l as LlmCompleteInput, lt as buildManifest, m as LlmToolSpec, mt as exportSkills, n as ArtifactStore, nt as VerifyResult, o as InteractionRequest, ot as assertSafePathSegment, p as LlmToolCall, pt as escapeXml, q as SkillIssue, r as ChartSpec, rt as WebSkillError, s as InteractionResponse, st as atomicWriteText, t as Artifact, tt as ValidationReport, u as LlmMessage, ut as checkDependencyCycles, v as UiBridge, vt as normalizePath, w as UiSurfaceEvent, wt as resolveArchiveLimits, x as UiSurfaceActionRequest, xt as readResponseWithLimit, y as UiSurface, yt as parseSkillMarkdown, z as SKILL_NAME_MAX_LENGTH } from "./types-AmKCKJn_-BogJPQHU.js";
-import { $ as SerializingMemoryStore, A as LifecycleHook, At as schemaToForm, B as RUN_SNAPSHOT_SCHEMA_VERSION, C as FullDisclosureRouter, Ct as networkPolicyLibSource, D as HookRunnerOptions, Dt as normalizeToolError, E as HookRunner, Et as normalizeToolContent, F as OpenAiCompatibleClientConfig, G as RunTerminationReason, H as RunResult, I as ProgressiveRouter, J as RuntimeSession, K as RuntimePhase, L as READ_SKILL_FILE_INPUT_SCHEMA, M as LifecycleListener, Mt as toVercelToolSpecs, N as NetworkPolicy, Nt as validateUiSurface, O as InstalledSkillManifest, Ot as parseBridgeRequest, P as OpenAiCompatibleClient, Pt as validateUiSurfaceEvent, Q as ScriptExecutor, R as READ_SKILL_FILE_TOOL, S as FsRunSnapshotStore, St as mergeCatalogEntries, T as GoogleGenAiClientConfig, Tt as normalizeErrorCode, U as RunSnapshot, V as RouteResult, W as RunSnapshotStore, X as SchemaInferer, Y as RuntimeSessionHandle, Z as ScriptExecutionContext, _ as EventBus, _t as extractChartSpec, a as AgentLoopConfig, at as TraceClock, b as FsArtifactStore, bt as fromVercelStreamPart, c as AnthropicClientConfig, ct as TraceRecorder, d as BridgeCapabilities, dt as WebSkillRuntime, et as SkillRouter, f as BridgeCapability, ft as WebSkillRuntimeDeps, g as CapabilityMode, gt as createWebSkillApi, h as CapabilityApproval, ht as createScriptContext, i as AgentLoop, it as ToolResult, j as LifecycleHookContext, jt as toLlmToolSpec, k as LifecycleEvent, kt as resolveToolName, l as ApprovalDecision, lt as VercelToolSpec, m as BridgeResponse, mt as buildRenderResult, n as ASK_USER_TOOL, nt as ToolDefinition, o as AgentLoopDeps, ot as TraceEvent, p as BridgeRequest, pt as bridgeError, q as RuntimeRun, r as ASK_USER_TOOL_NAME, rt as ToolResolution, s as AnthropicClient, st as TraceEventType, t as ASK_USER_INPUT_SCHEMA, tt as SkillStateGuard, u as ApprovalScope, ut as WebSkillApi, v as ExternalSkillProvider, vt as extractUiSurfaceEvents, w as GoogleGenAiClient, wt as networkUrlHost, x as FsMemoryStore, xt as isNetworkAllowed, y as ExternalToolSource, yt as fromVercelResult, z as READ_SKILL_FILE_TOOL_NAME } from "./index-QrHtAudz.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSource, type SkillStateGuard, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type UiBridge, type UiSurface, type UiSurfaceAction, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UiSurfaceDrafts, type UiSurfaceEvent, type UiSurfaceFormField, type UiSurfacePatch, type UiSurfaceSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, xmlRenderer };
+import { $ as SkillDocument, A as DEFAULT_ARCHIVE_LIMITS, At as jsonRenderer, B as RemoteUrlPolicy, Bt as resolveArchiveLimits, C as UiSpecPatch, Ct as buildManifest, D as ArchiveLimits, Dt as escapeXml, E as UiSurfaceActionResponse, Et as computeDigest, F as JsonSchema, Ft as parseSkillPackManifest, G as SKILL_NAME_PATTERN, Gt as validateSkills, H as SKILLS_LOCKFILE, Ht as signSkill, I as MANIFEST_EXCLUDED_FILES, It as readResponseWithLimit, J as SignatureAuditSink, Jt as xmlRenderer, K as SKILL_PACK_FILE, Kt as verifyManifest, L as MemoryFS, Lt as readSkillSignature, M as FileStat, Mt as messageOf, N as FileSystemProvider, Nt as normalizePath, O as CatalogRenderer, Ot as exportSkills, P as FsTrustedKeyStore, Pt as parseSkillMarkdown, Q as SkillDiscovery, R as Page, Rt as renderAvailableSkillsXml, S as UiSpecEvent, St as buildCatalog, T as UiSurfaceActionRequest, Tt as checkSkillRules, U as SKILL_MANIFEST_FILE, Ut as signaturePayloadBytes, V as SIGNATURE_SCHEMA_VERSION, Vt as resolveInsideRoot, W as SKILL_NAME_MAX_LENGTH, Wt as unzipWithLimits, X as SkillCatalog, Y as SignatureVerdict, Z as SkillCatalogEntry, _ as RenderBlock, _t as WebSkillError, a as InteractionPolicy, at as SkillMetadata, b as UiSpecActionCapability, bt as assertSafePathSegment, c as LlmClient, ct as SkillSignature, d as LlmMessage, dt as TrustedKey, et as SkillInstallSource, f as LlmResponse, ft as TrustedKeyStore, g as MemoryStore, gt as VerifyResult, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, jt as keyIdOf, k as CryptoKeyLike, kt as isValidSkillName, l as LlmCompleteInput, lt as SkillSource, m as LlmToolCall, mt as UnsignedPolicy, n as ArtifactStore, nt as SkillLocation, o as InteractionRequest, ot as SkillPackManifest, p as LlmStreamEvent, pt as UiSpecNode, q as SKILL_SIGNATURE_FILE, qt as verifySkillSignature, r as ChartSpec, rt as SkillManagerPort, s as InteractionResponse, st as SkillReader, t as Artifact, tt as SkillIssue, u as LlmContentPart, ut as SkillsLockfile, v as RenderResultRequest, vt as WebSkillErrorCode, w as UiSpecSnapshot, wt as checkDependencyCycles, x as UiSpecDrafts, xt as atomicWriteText, y as UiBridge, yt as assertRemoteUrlAllowed, z as PageQuery, zt as renderCatalogJson } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { $ as RunSnapshot, $t as normalizeToolContent, A as GoogleGenAiClientConfig, At as TraceClock, B as LifecycleListener, Bt as buildRenderResult, C as FsArtifactStore, Ct as SkillOutcomeReporter, D as FsSessionStore, Dt as ToolDefinition, E as FsRunTraceStore, Et as TerminalLifecycleData, F as InteractLifecycleData, Ft as VercelToolSpec, G as READ_SKILL_FILE_INPUT_SCHEMA, Gt as fromVercelResult, H as OpenAiCompatibleClient, Ht as createWebSkillApi, I as LifecycleEvent, It as WebSkillApi, J as RUN_SNAPSHOT_SCHEMA_VERSION, Jt as isUnsupportedRunSnapshot, K as READ_SKILL_FILE_TOOL, Kt as fromVercelStreamPart, L as LifecycleEventInit, Lt as WebSkillRuntime, M as HookRunnerOptions, Mt as TraceEventType, N as InstalledSkillManifest, Nt as TraceRecorder, O as FullDisclosureRouter, Ot as ToolResolution, P as IntegrityVerdict, Pt as UnsupportedRunSnapshot, Q as RunResult, Qt as normalizeErrorCode, R as LifecycleHook, Rt as WebSkillRuntimeDeps, S as FS_SESSION_PAGE_SIZE, St as SkillIntegrityGuard, T as FsRunSnapshotStore, Tt as SkillStateGuard, U as OpenAiCompatibleClientConfig, Ut as extractChartSpec, V as NetworkPolicy, Vt as createScriptContext, W as ProgressiveRouter, Wt as extractUiSpecEvents, X as RouteLifecycleData, Xt as networkPolicyLibSource, Y as RUN_TRACE_SCHEMA_VERSION, Yt as mergeCatalogEntries, Z as RouteResult, Zt as networkUrlHost, _ as CapabilityMode, _t as SerializingMemoryStore, a as AgentLoop, an as summarizeToolCalls, at as RunTraceFilter, b as ExternalSkillProvider, bt as SessionStore, c as AnthropicClient, cn as toVercelToolSpecs, ct as RunTraceSummary, d as ApprovalScope, dt as RuntimeSession, en as normalizeToolError, et as RunSnapshotListEntry, f as BridgeCapabilities, ft as RuntimeSessionHandle, g as CapabilityApproval, gt as ScriptExecutor, h as BridgeResponse, ht as ScriptExecutionContext, i as ActivateLifecycleData, in as schemaToForm, it as RunTraceFile, j as HookRunner, jt as TraceEvent, k as GoogleGenAiClient, kt as ToolResult, l as AnthropicClientConfig, ln as validateUiSpecEvent, lt as RuntimePhase, m as BridgeRequest, mt as SchemaInferer, n as ASK_USER_TOOL, nn as partsToText, nt as RunTerminationReason, o as AgentLoopConfig, on as textParts, ot as RunTraceMetrics, p as BridgeCapability, pt as SESSION_SCHEMA_VERSION, q as READ_SKILL_FILE_TOOL_NAME, qt as isNetworkAllowed, r as ASK_USER_TOOL_NAME, rn as resolveToolName, rt as RunToolCall, s as AgentLoopDeps, sn as toLlmToolSpec, st as RunTraceStore, t as ASK_USER_INPUT_SCHEMA, tn as parseBridgeRequest, tt as RunSnapshotStore, u as ApprovalDecision, un as validateUiSpecNode, ut as RuntimeRun, v as EventBus, vt as SessionMeta, w as FsMemoryStore, wt as SkillRouter, x as ExternalToolSource, xt as SkillFailureReport, y as ExecuteLifecycleData, yt as SessionRecord, z as LifecycleHookContext, zt as bridgeError } from "./index-DLfR2Y6I.js";
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,4 +1,5 @@
-import { A as resolveArchiveLimits, C as messageOf, D as readResponseWithLimit, E as parseSkillPackManifest, F as xmlRenderer, M as unzipWithLimits, N as validateSkills, O as renderAvailableSkillsXml, P as verifyManifest, S as jsonRenderer, T as parseSkillMarkdown, _ as checkSkillRules, a as SKILL_NAME_MAX_LENGTH, b as exportSkills, c as SkillDiscovery, d as assertRemoteUrlAllowed, f as assertSafePathSegment, g as checkDependencyCycles, h as buildManifest, i as SKILL_MANIFEST_FILE, j as resolveInsideRoot, k as renderCatalogJson, l as SkillReader, m as buildCatalog, n as MemoryFS, o as SKILL_NAME_PATTERN, p as atomicWriteText, r as SKILLS_LOCKFILE, s as SKILL_PACK_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as WebSkillError, v as computeDigest, w as normalizePath, x as isValidSkillName, y as escapeXml } from "./dist-BQzncxXg.js";
-import { A as fromVercelStreamPart, B as schemaToForm, C as bridgeError, D as extractChartSpec, E as createWebSkillApi, F as normalizeErrorCode, H as toVercelToolSpecs, I as normalizeToolContent, L as normalizeToolError, M as mergeCatalogEntries, N as networkPolicyLibSource, O as extractUiSurfaceEvents, P as networkUrlHost, R as parseBridgeRequest, S as WebSkillRuntime, T as createScriptContext, U as validateUiSurface, V as toLlmToolSpec, W as validateUiSurfaceEvent, _ as READ_SKILL_FILE_TOOL, a as AnthropicClient, b as SerializingMemoryStore, c as FsArtifactStore, d as FullDisclosureRouter, f as GoogleGenAiClient, g as READ_SKILL_FILE_INPUT_SCHEMA, h as ProgressiveRouter, i as AgentLoop, j as isNetworkAllowed, k as fromVercelResult, l as FsMemoryStore, m as OpenAiCompatibleClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as HookRunner, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_TOOL_NAME, w as buildRenderResult, x as TraceRecorder, y as RUN_SNAPSHOT_SCHEMA_VERSION, z as resolveToolName } from "./dist-B9VLwOME.js";
+import { A as parseSkillMarkdown, B as unzipWithLimits, C as escapeXml, D as keyIdOf, E as jsonRenderer, F as renderCatalogJson, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, P as renderAvailableSkillsXml, R as signSkill, S as computeDigest, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, W as xmlRenderer, _ as atomicWriteText, a as SIGNATURE_SCHEMA_VERSION, b as checkDependencyCycles, c as SKILL_NAME_MAX_LENGTH, d as SKILL_SIGNATURE_FILE, f as SkillDiscovery, g as assertSafePathSegment, h as assertRemoteUrlAllowed, i as MemoryFS, j as parseSkillPackManifest, k as normalizePath, l as SKILL_NAME_PATTERN, m as WebSkillError, n as FsTrustedKeyStore, o as SKILLS_LOCKFILE, p as SkillReader, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as SKILL_PACK_FILE, v as buildCatalog, w as exportSkills, x as checkSkillRules, y as buildManifest, z as signaturePayloadBytes } from "./dist-8oQRa8Xz.js";
+import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
+import { A as createScriptContext, B as networkUrlHost, C as RUN_TRACE_SCHEMA_VERSION, D as WebSkillRuntime, E as TraceRecorder, F as fromVercelStreamPart, G as resolveToolName, H as normalizeToolContent, I as isNetworkAllowed, J as toLlmToolSpec, K as schemaToForm, L as isUnsupportedRunSnapshot, M as extractChartSpec, N as extractUiSpecEvents, O as bridgeError, P as fromVercelResult, R as mergeCatalogEntries, S as RUN_SNAPSHOT_SCHEMA_VERSION, T as SerializingMemoryStore, U as normalizeToolError, V as normalizeErrorCode, W as parseBridgeRequest, X as validateUiSpecEvent, Y as toVercelToolSpecs, Z as validateUiSpecNode, _ as OpenAiCompatibleClient, a as AnthropicClient, b as READ_SKILL_FILE_TOOL, c as FS_SESSION_PAGE_SIZE, d as FsRunSnapshotStore, f as FsRunTraceStore, g as HookRunner, h as GoogleGenAiClient, i as AgentLoop, j as createWebSkillApi, k as buildRenderResult, l as FsArtifactStore, m as FullDisclosureRouter, n as ASK_USER_TOOL, o as CapabilityApproval, p as FsSessionStore, q as summarizeToolCalls, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsMemoryStore, v as ProgressiveRouter, w as SESSION_SCHEMA_VERSION, x as READ_SKILL_FILE_TOOL_NAME, y as READ_SKILL_FILE_INPUT_SCHEMA, z as networkPolicyLibSource } from "./dist-C-Sh0MDU.js";
 
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, xmlRenderer };
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { G as SkillDocument, P as JsonSchema, U as SkillCatalogEntry, m as LlmToolSpec } from "./types-AmKCKJn_-BogJPQHU.js";
-import { St as mergeCatalogEntries, it as ToolResult, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-QrHtAudz.js";
+import { $ as SkillDocument, F as JsonSchema, Z as SkillCatalogEntry, h as LlmToolSpec } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { Yt as mergeCatalogEntries, b as ExternalSkillProvider, kt as ToolResult, x as ExternalToolSource } from "./index-DLfR2Y6I.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";