@webskill/sdk 0.22.0 → 0.23.0

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { K as FileSystemProvider, S as UiBridge, _t as SkillDocument, et as Page, f as LlmMessage, ht as SkillCatalogEntry, l as LlmClient, tt as PageQuery, xt as SkillManagerPort } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { Wt as RuntimeRun, dn as SkillIntegrityGuard, fn as SkillOutcomeReporter, gn as SkillStateGuard, hr as WebSkillRuntime, tt as IntegrityVerdict } from "./index-YPd8ZSEa.js";
-import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-B24Jjjry-BY1H7Krp.js";
+import { K as FileSystemProvider, S as UiBridge, _t as SkillDocument, et as Page, f as LlmMessage, ht as SkillCatalogEntry, l as LlmClient, tt as PageQuery, xt as SkillManagerPort } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { Wt as RuntimeRun, dn as SkillIntegrityGuard, fn as SkillOutcomeReporter, gn as SkillStateGuard, hr as WebSkillRuntime, tt as IntegrityVerdict } from "./index-7No55dRb.js";
+import { S as candidateToCatalogEntry, _ as SKILL_VERSION_PAGE_SIZE, a as AuditLog, b as SkillVersionPage, c as CandidateBinaryRef, d as CandidateRisk, f as CandidateSkill, g as CompositeApprovalPolicy, h as CandidateStore, i as AuditEvent, l as CandidateFile, m as CandidateStatus, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateSource, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidatePage, v as SkillState, x as SkillVersionStore, y as SkillVersion } from "./skillVersionStore-S4_HJ_Fl-Cvy9LqVu.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -10,10 +10,14 @@ declare function sanitizeCandidateName(raw: string): string;
 /**
  * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
  * scripts/ 下必须是 .ts/.js。
+ *
+ * 路径校验对两种形态**一视同仁**（0.23.0 分册 20 FR-20.3）：这套校验本来就与内容无关，
+ * 二进制条目走另一套校验等于给越界路径开第二道门。
  */
 declare function normalizeCandidateFiles(files: Array<{
   path: string;
   content: string;
+  binary?: CandidateBinaryRef;
 }>, name: string, description: string): CandidateFile[];
 /** 含脚本且 LLM 自报 low → 强制 medium 并追加"必须人工审批"原因 */
 declare function normalizeRisk(declared: unknown, files: CandidateFile[], reasons: string[]): {
@@ -53,6 +57,20 @@ interface GeneratedSkillSubmission {
   sessionId?: string;
   /** 用户确认的时刻（FR-9.7 的「用户确认事实」） */
   confirmedAt: string;
+  /**
+   * 已物化的二进制，键是 `draft.files[].path`（0.23.0 分册 20）。
+   * 字节由 agent 侧在用户确认之前取好——候选一旦生成就必须能脱离会话附件独立存活（FR-20.6）。
+   */
+  binaries?: ReadonlyMap<string, SubmittedBinary>;
+}
+/** 一份随候选提交的字节及其校验信息（0.23.0 分册 20） */
+interface SubmittedBinary {
+  bytes: Uint8Array;
+  size: number;
+  /** 十六进制小写 */
+  sha256: string;
+  /** 上传时的原始文件名 */
+  sourceName: string;
 }
 interface CandidateSinkOptions {
   store: CandidateStore;
@@ -561,4 +579,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidatePage, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, type SkillVersionPage, SkillVersionStore, type SourceDocument, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateBinaryRef, type CandidateFile, type CandidatePage, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, type SkillVersionPage, SkillVersionStore, type SourceDocument, type SubmittedBinary, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/governance.js

@@ -1,6 +1,6 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { y as isValidSkillName } from "./skill-CAJMsLod.js";
-import { a as atomicWriteText, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { y as isValidSkillName } from "./skill-WSUDp6A1.js";
+import { a as atomicWriteBinary, o as atomicWriteText, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { d as partsToText, p as textParts } from "./llm-eIQNO9tr.js";
 import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";
 
@@ -36,8 +36,32 @@ const kindOf = (path) => {
 	return "asset";
 };
 /**
+* 二进制引用的形状校验（0.23.0 分册 20）。
+*
+* 这条管线的既定前提是「不信任全链路」，所以引用也要逐字段查过才收下：
+* 一条字段缺失的引用会一路活到安装那一步，届时才表现为读不到字节的技能包。
+* `file` 必须是单个文件名——带路径分隔符的值等于一条越出候选旁路目录的通路。
+*/
+function readBinaryRef(raw) {
+	if (raw === void 0 || raw === null) return void 0;
+	if (typeof raw !== "object" || Array.isArray(raw)) return invalid("Candidate file \"binary\" must be an object");
+	const { file, size, sha256, sourceName } = raw;
+	if (typeof file !== "string" || file === "" || file.includes("/") || file.includes("\\") || file.includes("..")) return invalid(`Candidate binary file name is not allowed: ${JSON.stringify(file)}`);
+	if (typeof size !== "number" || !Number.isFinite(size) || size < 0) return invalid(`Candidate binary "${file}" has an invalid size`);
+	if (typeof sha256 !== "string" || !/^[0-9a-f]{64}$/.test(sha256)) return invalid(`Candidate binary "${file}" has an invalid sha256`);
+	return {
+		file,
+		size,
+		sha256,
+		sourceName: typeof sourceName === "string" ? sourceName : file
+	};
+}
+/**
 * 文件归一：补 SKILL.md；路径含 `..` / 以 `/` 开头 / 含 `\` → CANDIDATE_INVALID；
 * scripts/ 下必须是 .ts/.js。
+*
+* 路径校验对两种形态**一视同仁**（0.23.0 分册 20 FR-20.3）：这套校验本来就与内容无关，
+* 二进制条目走另一套校验等于给越界路径开第二道门。
 */
 function normalizeCandidateFiles(files, name, description) {
 	const out = [];
@@ -49,7 +73,8 @@ function normalizeCandidateFiles(files, name, description) {
 		out.push({
 			path: p,
 			kind,
-			content: String(file.content ?? "")
+			content: String(file.content ?? ""),
+			...file.binary !== void 0 ? { binary: file.binary } : {}
 		});
 	}
 	if (!out.some((f) => f.kind === "skill-md")) out.unshift({
@@ -77,10 +102,15 @@ function normalizeCandidate(input) {
 	const description = typeof raw["description"] === "string" ? raw["description"] : "";
 	if (description.trim() === "") invalid("Candidate is missing a description");
 	const name = sanitizeCandidateName(typeof raw["name"] === "string" ? raw["name"] : invalid("Candidate is missing a name"));
-	const files = normalizeCandidateFiles((Array.isArray(raw["files"]) ? raw["files"] : []).map((f) => ({
-		path: String(f?.["path"] ?? ""),
-		content: String(f?.["content"] ?? "")
-	})), name, description);
+	const files = normalizeCandidateFiles((Array.isArray(raw["files"]) ? raw["files"] : []).map((f) => {
+		const record = f ?? {};
+		const binary = readBinaryRef(record["binary"]);
+		return {
+			path: String(record["path"] ?? ""),
+			content: String(record["content"] ?? ""),
+			...binary !== void 0 ? { binary } : {}
+		};
+	}), name, description);
 	const declaredReasons = Array.isArray(raw["riskReasons"]) ? raw["riskReasons"].map(String) : [];
 	const { risk, reasons } = normalizeRisk(raw["risk"], files, declaredReasons);
 	const now = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
@@ -137,6 +167,8 @@ function takeTailPage(all, options, defaultLimit, what) {
 //#endregion
 //#region ../governance/src/candidate/candidateStore.ts
 const dirOf$1 = (root) => `${root}/.webskill/candidates`;
+/** 候选的二进制旁路目录（0.23.0 分册 20 §3）：与元数据 JSON 同级，整目录随候选一起删 */
+const candidateBinaryDir = (root, id) => `${dirOf$1(root)}/${id}.files`;
 /** 候选列表的缺省页长。缺省属于实现，不属于调用方 */
 const CANDIDATE_PAGE_SIZE = 50;
 /** 逐文件持久化的候选存储：<managedRoot>/.webskill/candidates/<id>.json */
@@ -149,11 +181,37 @@ var CandidateStore = class {
 		this.#fs = deps.fs;
 		this.#isSkillInstalled = deps.isSkillInstalled;
 	}
-	async save(candidate) {
+	/**
+	* 存候选。`binaries` 的键是 `CandidateFile.binary.file`，缺省即本候选全是文本。
+	*
+	* 落盘顺序是**先字节、后 JSON**（0.23.0 分册 20 §3.2）：反过来的话，
+	* 崩溃会留下一条指向不存在字节的元数据，而那种候选要到审批安装那一步才暴露——
+	* 正是 FR-20.6 要避免的那类「延迟到审批才失败」。
+	*/
+	async save(candidate, binaries) {
 		validateCandidate(candidate);
 		assertSafePathSegment(candidate.id, "candidate id");
+		for (const file of candidate.files) {
+			if (file.binary === void 0) continue;
+			const bytes = binaries?.get(file.binary.file);
+			if (bytes === void 0) {
+				if (await this.#fs.exists(this.#binaryPath(candidate.id, file.binary.file))) continue;
+				throw new WebSkillError("CANDIDATE_INVALID", `Candidate "${candidate.name}" declares binary "${file.path}" but its bytes were not provided`);
+			}
+			assertSafePathSegment(file.binary.file, "candidate binary file");
+			await atomicWriteBinary(this.#fs, this.#binaryPath(candidate.id, file.binary.file), bytes);
+		}
 		await atomicWriteText(this.#fs, `${dirOf$1(this.#root)}/${candidate.id}.json`, JSON.stringify(candidate, null, 2));
 	}
+	/** 读回候选旁路里的一份字节（安装时按原样写进技能目录，0.23.0 分册 20 FR-20.8） */
+	readCandidateBinary(id, file) {
+		assertSafePathSegment(id, "candidate id");
+		assertSafePathSegment(file, "candidate binary file");
+		return this.#fs.readBinary(this.#binaryPath(id, file));
+	}
+	#binaryPath(id, file) {
+		return `${candidateBinaryDir(this.#root, id)}/${file}`;
+	}
 	async get(id) {
 		assertSafePathSegment(id, "candidate id");
 		const path = `${dirOf$1(this.#root)}/${id}.json`;
@@ -202,6 +260,8 @@ var CandidateStore = class {
 		if (candidate.status === "approved") throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" cannot be removed from status "${candidate.status}"`);
 		if (candidate.status === "published" && await this.#skillStillInstalled(candidate.name)) throw new WebSkillError("GOVERNANCE_FAILED", `Candidate "${candidate.name}" is the provenance record of an installed skill and cannot be removed; uninstall the skill first`);
 		await this.#fs.remove(`${dirOf$1(this.#root)}/${id}.json`);
+		const binaryDir = candidateBinaryDir(this.#root, id);
+		if (await this.#fs.exists(binaryDir)) await this.#fs.remove(binaryDir, { recursive: true });
 	}
 	async #skillStillInstalled(name) {
 		return this.#isSkillInstalled === void 0 ? true : await this.#isSkillInstalled(name);
@@ -224,6 +284,16 @@ function candidateToCatalogEntry(candidate) {
 //#endregion
 //#region ../governance/src/candidate/candidateSink.ts
 /**
+* 旁路文件名：序号在前保证唯一，原名跟在后面是为了让人在文件管理器里也认得出
+* 哪个是哪个（0.23.0 分册 20 §3）。直接拿技能内路径当文件名不行——
+* 那是一个平铺目录，`references/a/t.xlsx` 与 `references/b/t.xlsx` 会撞在一起。
+* 权威的原名记在 `sourceName` 里，这里只保留能安全落盘的那部分。
+*/
+const binaryFileNameOf = (index, path) => {
+	const safe = (path.split("/").pop() ?? "").replace(/[^A-Za-z0-9._-]/g, "_").replace(/^\.+/, "");
+	return `${index}-${safe === "" ? "file" : safe}`;
+};
+/**
 * 把 agent 生成的技能草稿接进既有的候选管线（设计 02 §5）。
 *
 * 走的是与文档抽取、runtime-miss 完全相同的 `normalizeCandidate` → `CandidateStore.save`，
@@ -232,6 +302,26 @@ function candidateToCatalogEntry(candidate) {
 function createCandidateSink(options) {
 	return { async submit(input) {
 		const { draft } = input;
+		const bytes = /* @__PURE__ */ new Map();
+		const files = (draft.files ?? []).map((file, index) => {
+			const payload = input.binaries?.get(file.path);
+			if (payload === void 0) return {
+				path: file.path,
+				content: file.content
+			};
+			const name = binaryFileNameOf(index, file.path);
+			bytes.set(name, payload.bytes);
+			return {
+				path: file.path,
+				content: "",
+				binary: {
+					file: name,
+					size: payload.size,
+					sha256: payload.sha256,
+					sourceName: payload.sourceName
+				}
+			};
+		});
 		const candidate = normalizeCandidate({
 			raw: {
 				name: draft.name,
@@ -239,7 +329,7 @@ function createCandidateSink(options) {
 				files: [{
 					path: "SKILL.md",
 					content: draft.content
-				}, ...draft.files ?? []]
+				}, ...files]
 			},
 			source: "generated",
 			...options.now ? { now: options.now } : {},
@@ -250,7 +340,7 @@ function createCandidateSink(options) {
 			confirmedAt: input.confirmedAt,
 			...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {}
 		};
-		await options.store.save(candidate);
+		await options.store.save(candidate, bytes);
 		await options.audit?.append({
 			type: AUDIT_EVENT_TYPES.candidateCreated,
 			target: candidate.id,

package/dist/{index-YPd8ZSEa.d.ts → index-7No55dRb.d.ts}

@@ -1,4 +1,4 @@
-import { Ft as ValidationReport, H as DiscoveryResult, K as FileSystemProvider, Nt as UiSpecNode, O as UiSurfaceActionRequest, Rt as WebSkillErrorCode, S as UiBridge, St as SkillManifest, T as UiSpecEvent, X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, b as RenderResultRequest, d as LlmContentPart, et as Page, f as LlmMessage, g as LlmToolCall, gt as SkillDiscovery, h as LlmTokenUsage, ht as SkillCatalogEntry, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as SkillCatalog, n as ArtifactStore, nt as RemoteUrlPolicy, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as PageQuery, u as LlmCompleteInput, v as MemoryStore, vt as SkillInstallSource, w as UiSpecDrafts, y as RenderBlock } from "./types-CpDRZ0rA-BM5FI9oN.js";
+import { Ft as ValidationReport, H as DiscoveryResult, K as FileSystemProvider, Nt as UiSpecNode, O as UiSurfaceActionRequest, Rt as WebSkillErrorCode, S as UiBridge, St as SkillManifest, T as UiSpecEvent, X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, b as RenderResultRequest, d as LlmContentPart, et as Page, f as LlmMessage, g as LlmToolCall, gt as SkillDiscovery, h as LlmTokenUsage, ht as SkillCatalogEntry, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as SkillCatalog, n as ArtifactStore, nt as RemoteUrlPolicy, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as PageQuery, u as LlmCompleteInput, v as MemoryStore, vt as SkillInstallSource, w as UiSpecDrafts, y as RenderBlock } from "./types-CpDRZ0rA-BiZBXGm4.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -1409,8 +1409,11 @@ declare class FsArtifactStore implements ArtifactStore {
 /**
  * 把表格规格编码为 xlsx 字节。
  *
- * 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份
- * 实现，AC-10.8「双消费面逐字节相同」是结构性成立的。
+ * 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份实现。
+ *
+ * 「纯函数」只保证三个消费面走的是同一条代码路径，**不足以**保证输出逐字节相同：
+ * 归档格式本身会把编码时刻写进字节。AC-10.8「双消费面逐字节相同」靠的是
+ * `withFixedTimestamps()` 把那个时刻拿掉（0.23.0 分册 24）。
  *
  * `resolveImage` 是图片引用的解析出口（0.22.0 分册 20 FR-20.3）。它同样不破坏纯函数性：
  * 给定相同的规格与相同的解析结果，输出逐字节相同。规格里有图片却没给它，是

package/dist/{index-BiO9_XRk.d.ts → index-ShvCB5I9.d.ts}

@@ -1,5 +1,5 @@
-import { C as UiSpecActionCapability, D as UiSpecSnapshot, Nt as UiSpecNode, S as UiBridge, X as JsonSchema, b as RenderResultRequest, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { B as ExternalToolSource } from "./index-YPd8ZSEa.js";
+import { C as UiSpecActionCapability, D as UiSpecSnapshot, Nt as UiSpecNode, S as UiBridge, X as JsonSchema, b as RenderResultRequest, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { B as ExternalToolSource } from "./index-7No55dRb.js";
 import { z } from "zod";
 import { ComponentType, ReactNode } from "react";
 //#region ../ui/dist/index.d.ts

package/dist/{index-CjwdZQOS.d.ts → index-V76_OFj2.d.ts}

@@ -1,5 +1,5 @@
-import { L as ChatAttachmentKind, Rt as WebSkillErrorCode, S as UiBridge, a as InteractionOrigin, c as InteractionResponse, nt as RemoteUrlPolicy, s as InteractionRequest, t as Artifact } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { B as ExternalToolSource, F as DocxTextExtractor, Fn as ToolStepReader, M as DataSourceInfo, kn as ToolCallContext, mt as PptxTextExtractor, pt as PdfTextExtractor, vr as XlsxTextExtractor, xn as SpreadsheetImageBytes } from "./index-YPd8ZSEa.js";
+import { L as ChatAttachmentKind, Rt as WebSkillErrorCode, S as UiBridge, a as InteractionOrigin, c as InteractionResponse, nt as RemoteUrlPolicy, s as InteractionRequest, t as Artifact } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { B as ExternalToolSource, F as DocxTextExtractor, Fn as ToolStepReader, M as DataSourceInfo, kn as ToolCallContext, mt as PptxTextExtractor, pt as PdfTextExtractor, vr as XlsxTextExtractor, xn as SpreadsheetImageBytes } from "./index-7No55dRb.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -48,11 +48,18 @@ declare class TodoStore {
   /**
    * 更新单条。置为 `in-progress` 时其余进行中条目降级为 `pending`，
    * 每条降级各发一次 `todo.updated`，事件序列与状态变化一一对应。
+   *
+   * `options.concurrent` 由**编排器**在并发委派时传（0.23.0 分册 19 FR-19.9）：
+   * 几个子 agent 真的在同时跑，把别人降级回 `pending` 是在界面上说谎。
+   * 模型经 `manage_todo` 的写入不传它，仍维持「同时只有一条进行中」——
+   * 那条约束针对的是模型乱标（名义并行、实则一件事），不是真并发。
    */
   update(id: string, patch: {
     status?: TodoStatus;
     title?: string;
     delegatedTo?: string;
+  }, options?: {
+    concurrent?: boolean;
   }): TodoList;
   clear(): void;
 }
@@ -90,9 +97,14 @@ interface GeneratedSkillDraft {
   description: string;
   /** SKILL.md 全文，含 frontmatter */
   content: string;
+  /**
+   * 附带文件。`attachmentId` 在场即本条目的内容是**本会话已上传的那个附件的字节**，
+   * 此时 `content` 恒为空串——模型从没持有过那些字节，让它复述等于让它编（0.23.0 分册 20）。
+   */
   files?: readonly {
     path: string;
     content: string;
+    attachmentId?: string;
   }[];
   /**
    * 模型声称这个技能会执行的工具调用（分册 30 / FR-30.4）。
@@ -105,6 +117,30 @@ interface GeneratedSkillDraft {
     args?: Record<string, unknown>;
   }[];
 }
+/**
+ * 一个被指认的附件的字节与身份（0.23.0 分册 20）。
+ * 由宿主的 `SkillGeneratorOptions.resolveAttachment` 交出。
+ */
+interface SkillAttachmentBytes {
+  bytes: Uint8Array;
+  /** 上传时的原始文件名，供审核者辨认（FR-20.10） */
+  name: string;
+  contentType?: string;
+}
+/**
+ * 已物化的一份二进制：字节加上它的身份与校验信息（0.23.0 分册 20）。
+ *
+ * `sha256` 不是装饰——AC-20.1 的「逐字节相同」靠它判，
+ * 而本册要防的失败模式正是**悄悄损坏**：被 UTF-8 往返污染过的 `.xlsx`
+ * 仍能被宽容的解析器打开，却在用户手里丢数据。
+ */
+interface SkillBinaryPayload {
+  bytes: Uint8Array;
+  size: number;
+  /** 十六进制小写 */
+  sha256: string;
+  sourceName: string;
+}
 /**
  * 候选收货端口。实现由宿主注入——`@webskill/agent` 不依赖 `@webskill/governance`
  * （治理层要求宿主提供治理根与审计存储，是可选层）。
@@ -117,6 +153,11 @@ interface SkillCandidateSink {
     sessionId?: string;
     /** 用户确认的时刻（FR-9.7 要求审计能查到确认事实） */
     confirmedAt: string;
+    /**
+     * 已物化的二进制，键是 `draft.files[].path`。缺省即本次生成全是文本（0.23.0 分册 20）。
+     * 字节在这里就已经读出来了：候选必须能脱离会话附件独立存活（FR-20.6）。
+     */
+    binaries?: ReadonlyMap<string, SkillBinaryPayload>;
   }): Promise<{
     id: string;
   }>;
@@ -125,6 +166,10 @@ interface SkillCandidateSink {
 interface SkillGenerationPolicy {
   /** 单次会话内的生成次数上限，默认 3 */
   maxPerSession?: number;
+  /** 单个二进制条目的字节上限（0.23.0 分册 20 FR-20.12） */
+  maxBinaryBytes?: number;
+  /** 一个技能内所有二进制条目的字节总量上限（0.23.0 分册 20 FR-20.12） */
+  maxTotalBinaryBytes?: number;
 }
 type SkillGenerationOutcome = {
   status: 'submitted';
@@ -151,6 +196,16 @@ interface SkillGeneratorOptions {
    * 这既让本册可分步落地，也给 AC-30.14 的反向对照留了现成的造法。
    */
   steps?: ToolStepReader;
+  /**
+   * 按 id 取本会话已上传附件的字节（0.23.0 分册 20 FR-20.2）。
+   *
+   * **按 id 查而不是按路径取**是安全边界：路径入参等于给模型一条把宿主磁盘上
+   * 任意文件复制进技能包的通路；按 id 在本会话附件表里查，能被指认的集合
+   * 恰好等于「用户自己这次会话上传的东西」。查不到（含跨会话的 id）返回 `undefined`。
+   *
+   * 不注入即本宿主不支持指认附件，模型给了 `attachmentId` 也按拒绝处理。
+   */
+  resolveAttachment?: (id: string) => Promise<SkillAttachmentBytes | undefined>;
 }
 /** 生成器面向用户的文案；缺省全部为英文模板 */
 interface SkillGenerationMessages {
@@ -263,13 +318,21 @@ interface DelegationOrchestratorOptions {
   policy?: Partial<DelegationBudget>;
   /** 接上清单后委派关系在 UI 可见（FR-11.5） */
   todos?: TodoStore;
+  /**
+   * 同时在跑的子 agent 数上限（0.23.0 分册 19 FR-19.5/19.16）。
+   *
+   * 每次委派入口都会重新调用它：用户在确认卡里选的并发数是会话中途才定下来的，
+   * 装配期读一次就固化的话，那个旋钮永远停在默认值上。
+   * 缺省 1，即维持 0.22.x 之前的串行行为——只是超额的请求改为排队而不再报错。
+   */
+  concurrencyLimit?: () => number;
 }
 /**
- * 串行委派编排器（设计 03 §13–§16）。
+ * 委派编排器（设计 03 §13–§16，并发改造见 0.23.0 分册 19）。
  *
- * 严格串行由**内部互斥**保证而不是调用方自觉：并发委派会产生并发待决交互，
- * 而当前交互模型是单一待决 nonce，届时表现为「点了没反应」。
- * 放开并发必须显式改这里的守卫，不会悄悄发生。
+ * 并发放开的前提是**并行的是执行、不是提问**：待决交互仍然一次只呈现一张，
+ * 由 `ReactBridgeState` / `specInteractionChannel` 的队列保证。
+ * 若要在别处复用本编排器，那两处的排队语义是它的前置条件。
  *
  * 上下文隔离靠回值形状达成：只有 `summary` 回到父 agent，
  * 子 agent 的消息历史根本不经过本对象。
@@ -278,7 +341,7 @@ interface DelegationOrchestratorOptions {
 declare class DelegationOrchestrator {
   #private;
   constructor(options: DelegationOrchestratorOptions);
-  /** 当前正在执行的委派任务；无则 undefined */
+  /** 正在执行的委派任务之一；全部空闲则 undefined。仅供诊断 */
   get running(): string | undefined;
   delegate(request: DelegationRequest): Promise<DelegationResult>;
 }
@@ -313,10 +376,10 @@ declare function withDelegationOrigin(bridge: UiBridge, origin: InteractionOrigi
 //#endregion
 //#region src/prompts/delegation.d.ts
 /**
- * 串行委派的策略提示词（设计 03 §13）。
+ * 委派的策略提示词（设计 03 §13；并发改造见 0.23.0 分册 19）。
  *
- * 「一次只能有一个」是编排器的硬约束，这里写进提示词是为了让模型不去
- * 尝试并行委派——被拒绝的调用会浪费一轮，而不是产生并发。
+ * 并发数那两句是**建议**而非约束：真正拦住数量的是编排器的排队与宿主硬上限。
+ * 写在这里是为了让模型按任务真实需要给值，而不是一口气派出一大批。
  */
 declare const DELEGATION_SYSTEM_PROMPT: string;
 //#endregion
@@ -444,8 +507,23 @@ interface PerceivedNode {
    * 它的其余子节点在前一段或后一段里。缺省不带该字段。
    */
   continued?: boolean;
+  /**
+   * 此处还能往哪些方向滚（0.23.0 分册 22 FR-22.1）。只在该元素**自身**是可滚容器、
+   * 且该方向尚未到头时出现；两端都到头字段就消失。
+   *
+   * 不表达滚动量：给了数值模型就会算「还要滚几次」，而列虚拟化下 `scrollWidth`
+   * 随列的重建而变，那个算法必然算错（沿用 0.18.0 FR-10.2）。
+   *
+   * **出现该字段的节点必然带 `ref`**——标了能滚却给不出句柄，模型就处在
+   * 「知道能滚、够不着」的状态，正是 AC-G8 要禁的那种幽灵能力。
+   */
+  scrollable?: readonly ScrollDirection[];
   children?: readonly PerceivedNode[];
 }
+/** 滚动方向（0.23.0 分册 22）。感知的 `scrollable` 与动作记录的 `direction` 共用，避免两处漂移 */
+type ScrollDirection = 'up' | 'down' | 'left' | 'right';
+/** 四个方向的规范清单；工具层校验与文案生成都从这里取，不各写一份 */
+declare const SCROLL_DIRECTIONS: readonly ScrollDirection[];
 /** 随感知一起下发的一张图像（FR-12.1） @experimental */
 interface PerceivedImage {
   /** 与 `PerceivedNode.imageId` 对应 */
@@ -1274,9 +1352,11 @@ interface PageActionRecord {
    * 本次滚动的方向与实际位移（0.18.0 FR-10.8）；非 `scroll` 动作不带。
    * 位移要进留痕：只记「滚了」而不记「滚了多少」，事后分不出
    * 「滚到底了」与「根本没滚动」。
+   *
+   * 0.23.0 分册 22 起方向扩到四向：横向滚动记成 `down` 会让留痕说谎。
    */
   scrolled?: {
-    direction: 'down' | 'up';
+    direction: ScrollDirection;
     movedBy: number;
     atEnd: boolean;
   };
@@ -2666,4 +2746,4 @@ declare function dwgViewsOf(doc: DwgDocumentContent): readonly DwgView[];
 /** 按 id 取视图；取不到就退回第一个，而不是什么都没有 */
 declare function dwgPickView(doc: DwgDocumentContent, viewId: string | undefined): DwgView;
 //#endregion
-export { DownloadedFileEntry as $, SkillGenerationToolSourceOptions as $n, createPageImageToolSource as $r, PERCEPTION_PAGING_DEFAULTS as $t, DataSourceRecord as A, PerceptionAuditSink as An, TodoListener as Ar, FILL_TEMPLATE_TOOL as At, DocumentFileSource as B, READ_DOCUMENT_TOOL as Bn, XlsxTemplateEngine as Br, LIST_PAGE_TABS_TOOL as Bt, DataSourceCandidateRecord as C, toActionFrameScopes as Ci, ParentBudget as Cn, TemplateParagraphSkeleton as Cr, DwgView as Ct, DataSourcePolicy as D, PdfTextQuality as Dn, TodoEvent as Dr, EMU_PER_TWIP as Dt, DataSourceKind as E, PdfPageImage as En, TemplateToolSourceOptions as Er, EMU_PER_POINT as Et, DelegationRequest as F, PerceptionScope as Fn, WorksetTab as Fr, GeneratedSkillDraft as Ft, DocumentToolSourceOptions as G, RemoteImageToolSourceOptions as Gn, clampWorksetMax as Gr, OpenedTabSignal as Gt, DocumentImageRole as H, RemoteImageFetch as Hn, XlsxTemplateSkeleton as Hr, MAX_DIGIT_WIDTH as Ht, DelegationResult as I, PerceptionScopeInput as In, WorksetTabView as Ir, HttpDataSourceOptions as It, DocxTemplateEngine as J, Size as Jn, createDocumentToolSource as Jr, PAGE_ACTION_TOOL as Jt, DocxDocumentContent as K, RenderedImage as Kn, columnWidthToPixels as Kr, PAGE_ACTION_KINDS as Kt, DelegationToolSourceOptions as L, PptxDocumentContent as Ln, XlsxDocumentContent as Lr, INSPECT_TEMPLATE_TOOL as Lt, DelegationBudget as M, PerceptionPagingBudget as Mn, TodoStore as Mr, FrameNote as Mt, DelegationOrchestrator as N, PerceptionRecord as Nn, TodoToolSourceOptions as Nr, FrameScope as Nt, DataSourcePolicyOptions as O, PerceivedImage as On, TodoItem as Or, EXPORT_SPREADSHEET_TOOL as Ot, DelegationOrchestratorOptions as P, PerceptionResult as Pn, VIEW_DWG_TOOL as Pr, GENERATE_SKILL_TOOL as Pt, DownloadedFileConsent as Q, SkillGenerationPolicy as Qn, createPageActionToolSource as Qr, PERCEIVE_PAGE_TOOL as Qt, DocumentBlock as R, PptxDocumentReader as Rn, XlsxDocumentReader as Rr, ImageCaptureBudget as Rt, DataSourceCandidatePolicyOptions as S, takesImage as Si, PagePerceptionToolSourceOptions as Sn, TemplateImageResolver as Sr, DwgUnits as St, DataSourceDef as T, withDelegationOrigin as Ti, PdfDocumentReader as Tn, TemplateTableCellSkeleton as Tr, EMU_PER_PIXEL as Tt, DocumentReadBudget as U, RemoteImageFetchFailure as Un, asReadMode as Ur, NestedFrameRef as Ut, DocumentFormat as V, READ_DOWNLOADED_FILE_TOOL as Vn, XlsxTemplateFillSpec as Vr, MANAGE_TODO_TOOL as Vt, DocumentReadMode as W, RemoteImageResult as Wn, clampDownloadWaitMs as Wr, OpenedPageInfo as Wt, DocxTemplateSkeleton as X, SkillGenerationMessages as Xn, createDwgToolSource as Xr, PDF_GARBLED_RATIO as Xt, DocxTemplateFillSpec as Y, SkillCandidateSink as Yn, createDownloadedFileToolSource as Yr, PAGE_DOCUMENT_REF as Yt, DownloadedFileAction as Z, SkillGenerationOutcome as Zn, createHttpDataSourceTransport as Zr, PDF_LARGE_IMAGE_RATIO as Zt, DWG_MODEL_VIEW_ID as _, parseCellAddress as _i, PageImageResult as _n, TabWorksetPort as _r, DwgOmission as _t, ActionTabWindow as a, createTemplateToolSource as ai, PageActionPolicy as an, SubAgentRunInput as ar, DownloadedFileRecord as at, DataSourceCandidateAuditSink as b, readImageSize as bi, PagePerceptionPolicyOptions as bn, TemplateFileSource as br, DwgProjection as bt, CellAddress as c, dwgPickView as ci, PageActionRequest as cn, TAB_WORKSET_DEFAULT_MAX as cr, DwgComponent as ct, DELEGATE_TASK_TOOL as d, formatCellAddress as di, PageActionTarget as dn, TAB_WORKSET_SYSTEM_PROMPT as dr, DwgEntity as dt, createPagePerceptionToolSource as ei, PERCEPTION_SYSTEM_PROMPT as en, SkillGenerator as er, DownloadedFileListing as et, DELEGATION_SYSTEM_PROMPT as f, frameLabel as fi, PageActionToolSourceOptions as fn, TEMPLATE_INSPECT_BUDGET as fr, DwgFill as ft, DOWNLOAD_WAIT_MIN_MS as g, measurePdfTextQuality as gi, PageImageFailure as gn, TabWorksetPolicyOptions as gr, DwgLoadedDrawing as gt, DOWNLOAD_WAIT_MAX_MS as h, isRangeTopLeft as hi, PageImageCapture as hn, TabWorksetPolicy as hr, DwgLayer as ht, ActionTabWatcher as i, createTabWorksetToolSource as ii, PageActionOutcome as in, SpreadsheetToolSourceOptions as ir, DownloadedFileReader as it, DataSourceTransport as j, PerceptionCaptureOptions as jn, TodoStatus as jr, FOCUS_PAGE_TAB_TOOL as jt, DataSourceProvenance as k, PerceivedNode as kn, TodoList as kr, FETCH_REMOTE_IMAGE_TOOL as kt, CellRange as l, dwgViewsOf as li, PageActionScope as ln, TAB_WORKSET_MAX_MAX as lr, DwgDocumentContent as lt, DOWNLOAD_WAIT_DEFAULT_MS as m, isPdfTextTrustworthy as mi, PageAuditSink as mn, TabAdmission as mr, DwgGeometry as mt, ActionDownloadWindow as n, createSkillGenerationToolSource as ni, PageActionExecutor as nn, SkillTraceEvidence as nr, DownloadedFilePolicyOptions as nt, CAPTURE_PAGE_IMAGE_TOOL as o, createTodoToolSource as oi, PageActionPolicyOptions as on, SubAgentRunner as or, DownloadedFileToolSourceOptions as ot, DOCUMENT_READ_BUDGET as p, frameSteps as pi, PageActionUi as pn, TODO_SYSTEM_PROMPT as pr, DwgFont as pt, DocxDocumentReader as q, SKILL_GENERATION_SYSTEM_PROMPT as qn, createDelegationToolSource as qr, PAGE_ACTION_SYSTEM_PROMPT as qt, ActionFrameScope as r, createSpreadsheetToolSource as ri, PageActionKind as rn, SkillTraceEvidenceStep as rr, DownloadedFileReadResult as rt, CLOSE_PAGE_TAB_TOOL as s, defersImage as si, PageActionRecord as sn, SubtreeRejection as sr, DwgBounds as st, ActionDownloadWatcher as t, createRemoteImageToolSource as ti, PageActionConsent as tn, SkillGeneratorOptions as tr, DownloadedFilePolicy as tt, ConsentUi as u, fitWithin as ui, PageActionScopeInput as un, TAB_WORKSET_MIN_MAX as ur, DwgDocumentReader as ut, DataSourceAuditSink as v, parseCellRange as vi, PageImageToolSourceOptions as vn, TabWorksetToolSourceOptions as vr, DwgPoint as vt, DataSourceCandidateStore as w, toFrameScopes as wi, PdfDocumentHandle as wn, TemplateSheetSkeleton as wr, DwgViewport as wt, DataSourceCandidatePolicy as x, sniffDocumentFormat as xi, PagePerceptionReader as xn, TemplateImageBytes as xr, DwgToolSourceOptions as xt, DataSourceCandidate as y, rangeContains as yi, PagePerceptionPolicy as yn, TemplateCellSkeleton as yr, DwgProjectedDrawing as yt, DocumentFileBytes as z, PptxSlideContent as zn, XlsxSheetContent as zr, LIST_DOWNLOADED_FILES_TOOL as zt };
+export { DownloadedFileEntry as $, SkillCandidateSink as $n, createDownloadedFileToolSource as $r, PERCEPTION_PAGING_DEFAULTS as $t, DataSourceRecord as A, PerceptionAuditSink as An, TemplateToolSourceOptions as Ar, FILL_TEMPLATE_TOOL as At, DocumentFileSource as B, READ_DOCUMENT_TOOL as Bn, WorksetTabView as Br, LIST_PAGE_TABS_TOOL as Bt, DataSourceCandidateRecord as C, rangeContains as Ci, ParentBudget as Cn, TemplateCellSkeleton as Cr, DwgView as Ct, DataSourcePolicy as D, toActionFrameScopes as Di, PdfTextQuality as Dn, TemplateParagraphSkeleton as Dr, EMU_PER_TWIP as Dt, DataSourceKind as E, takesImage as Ei, PdfPageImage as En, TemplateImageResolver as Er, EMU_PER_POINT as Et, DelegationRequest as F, PerceptionScope as Fn, TodoStatus as Fr, GeneratedSkillDraft as Ft, DocumentToolSourceOptions as G, RemoteImageToolSourceOptions as Gn, XlsxTemplateFillSpec as Gr, OpenedTabSignal as Gt, DocumentImageRole as H, RemoteImageFetch as Hn, XlsxDocumentReader as Hr, MAX_DIGIT_WIDTH as Ht, DelegationResult as I, PerceptionScopeInput as In, TodoStore as Ir, HttpDataSourceOptions as It, DocxTemplateEngine as J, SKILL_GENERATION_SYSTEM_PROMPT as Jn, clampDownloadWaitMs as Jr, PAGE_ACTION_TOOL as Jt, DocxDocumentContent as K, RenderedImage as Kn, XlsxTemplateSkeleton as Kr, PAGE_ACTION_KINDS as Kt, DelegationToolSourceOptions as L, PptxDocumentContent as Ln, TodoToolSourceOptions as Lr, INSPECT_TEMPLATE_TOOL as Lt, DelegationBudget as M, PerceptionPagingBudget as Mn, TodoItem as Mr, FrameNote as Mt, DelegationOrchestrator as N, PerceptionRecord as Nn, TodoList as Nr, FrameScope as Nt, DataSourcePolicyOptions as O, toFrameScopes as Oi, PerceivedImage as On, TemplateSheetSkeleton as Or, EXPORT_SPREADSHEET_TOOL as Ot, DelegationOrchestratorOptions as P, PerceptionResult as Pn, TodoListener as Pr, GENERATE_SKILL_TOOL as Pt, DownloadedFileConsent as Q, SkillBinaryPayload as Qn, createDocumentToolSource as Qr, PERCEIVE_PAGE_TOOL as Qt, DocumentBlock as R, PptxDocumentReader as Rn, VIEW_DWG_TOOL as Rr, ImageCaptureBudget as Rt, DataSourceCandidatePolicyOptions as S, parseCellRange as Si, PagePerceptionToolSourceOptions as Sn, TabWorksetToolSourceOptions as Sr, DwgUnits as St, DataSourceDef as T, sniffDocumentFormat as Ti, PdfDocumentReader as Tn, TemplateImageBytes as Tr, EMU_PER_PIXEL as Tt, DocumentReadBudget as U, RemoteImageFetchFailure as Un, XlsxSheetContent as Ur, NestedFrameRef as Ut, DocumentFormat as V, READ_DOWNLOADED_FILE_TOOL as Vn, XlsxDocumentContent as Vr, MANAGE_TODO_TOOL as Vt, DocumentReadMode as W, RemoteImageResult as Wn, XlsxTemplateEngine as Wr, OpenedPageInfo as Wt, DocxTemplateSkeleton as X, Size as Xn, columnWidthToPixels as Xr, PDF_GARBLED_RATIO as Xt, DocxTemplateFillSpec as Y, ScrollDirection as Yn, clampWorksetMax as Yr, PAGE_DOCUMENT_REF as Yt, DownloadedFileAction as Z, SkillAttachmentBytes as Zn, createDelegationToolSource as Zr, PDF_LARGE_IMAGE_RATIO as Zt, DWG_MODEL_VIEW_ID as _, frameSteps as _i, PageImageResult as _n, TODO_SYSTEM_PROMPT as _r, DwgOmission as _t, ActionTabWindow as a, createRemoteImageToolSource as ai, PageActionPolicy as an, SkillGeneratorOptions as ar, DownloadedFileRecord as at, DataSourceCandidateAuditSink as b, measurePdfTextQuality as bi, PagePerceptionPolicyOptions as bn, TabWorksetPolicyOptions as br, DwgProjection as bt, CellAddress as c, createTabWorksetToolSource as ci, PageActionRequest as cn, SpreadsheetToolSourceOptions as cr, DwgComponent as ct, DELEGATE_TASK_TOOL as d, defersImage as di, PageActionTarget as dn, SubtreeRejection as dr, DwgEntity as dt, createDwgToolSource as ei, PERCEPTION_SYSTEM_PROMPT as en, SkillGenerationMessages as er, DownloadedFileListing as et, DELEGATION_SYSTEM_PROMPT as f, dwgPickView as fi, PageActionToolSourceOptions as fn, TAB_WORKSET_DEFAULT_MAX as fr, DwgFill as ft, DOWNLOAD_WAIT_MIN_MS as g, frameLabel as gi, PageImageFailure as gn, TEMPLATE_INSPECT_BUDGET as gr, DwgLoadedDrawing as gt, DOWNLOAD_WAIT_MAX_MS as h, formatCellAddress as hi, PageImageCapture as hn, TAB_WORKSET_SYSTEM_PROMPT as hr, DwgLayer as ht, ActionTabWatcher as i, createPagePerceptionToolSource as ii, PageActionOutcome as in, SkillGenerator as ir, DownloadedFileReader as it, DataSourceTransport as j, PerceptionCaptureOptions as jn, TodoEvent as jr, FOCUS_PAGE_TAB_TOOL as jt, DataSourceProvenance as k, withDelegationOrigin as ki, PerceivedNode as kn, TemplateTableCellSkeleton as kr, FETCH_REMOTE_IMAGE_TOOL as kt, CellRange as l, createTemplateToolSource as li, PageActionScope as ln, SubAgentRunInput as lr, DwgDocumentContent as lt, DOWNLOAD_WAIT_DEFAULT_MS as m, fitWithin as mi, PageAuditSink as mn, TAB_WORKSET_MIN_MAX as mr, DwgGeometry as mt, ActionDownloadWindow as n, createPageActionToolSource as ni, PageActionExecutor as nn, SkillGenerationPolicy as nr, DownloadedFilePolicyOptions as nt, CAPTURE_PAGE_IMAGE_TOOL as o, createSkillGenerationToolSource as oi, PageActionPolicyOptions as on, SkillTraceEvidence as or, DownloadedFileToolSourceOptions as ot, DOCUMENT_READ_BUDGET as p, dwgViewsOf as pi, PageActionUi as pn, TAB_WORKSET_MAX_MAX as pr, DwgFont as pt, DocxDocumentReader as q, SCROLL_DIRECTIONS as qn, asReadMode as qr, PAGE_ACTION_SYSTEM_PROMPT as qt, ActionFrameScope as r, createPageImageToolSource as ri, PageActionKind as rn, SkillGenerationToolSourceOptions as rr, DownloadedFileReadResult as rt, CLOSE_PAGE_TAB_TOOL as s, createSpreadsheetToolSource as si, PageActionRecord as sn, SkillTraceEvidenceStep as sr, DwgBounds as st, ActionDownloadWatcher as t, createHttpDataSourceTransport as ti, PageActionConsent as tn, SkillGenerationOutcome as tr, DownloadedFilePolicy as tt, ConsentUi as u, createTodoToolSource as ui, PageActionScopeInput as un, SubAgentRunner as ur, DwgDocumentReader as ut, DataSourceAuditSink as v, isPdfTextTrustworthy as vi, PageImageToolSourceOptions as vn, TabAdmission as vr, DwgPoint as vt, DataSourceCandidateStore as w, readImageSize as wi, PdfDocumentHandle as wn, TemplateFileSource as wr, DwgViewport as wt, DataSourceCandidatePolicy as x, parseCellAddress as xi, PagePerceptionReader as xn, TabWorksetPort as xr, DwgToolSourceOptions as xt, DataSourceCandidate as y, isRangeTopLeft as yi, PagePerceptionPolicy as yn, TabWorksetPolicy as yr, DwgProjectedDrawing as yt, DocumentFileBytes as z, PptxSlideContent as zn, WorksetTab as zr, LIST_DOWNLOADED_FILES_TOOL as zt };

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { $ as PPTX_MIME, $t as extractedDocumentFormat, A as extractSkillCandidate, At as TrustedKey, B as DOCX_MIME, Bt as assertRemoteUrlAllowed, C as UiSpecActionCapability, Cn as xmlRenderer, Ct as SkillMetadata, D as UiSpecSnapshot, Dt as SkillSource, E as UiSpecPatch, Et as SkillSignature, F as BINARY_EXTENSIONS, Ft as ValidationReport, G as FileStat, Gt as checkDependencyCycles, H as DiscoveryResult, Ht as atomicWriteText, I as CatalogRenderer, It as VerifyResult, J as FsTrustedKeyStore, Jt as computeDigest, K as FileSystemProvider, Kt as checkSkillRules, L as ChatAttachmentKind, Lt as WebSkillError, M as ATTACHMENT_TEXT_LIMIT, Mt as UNTRUSTED_LINE_LIMIT, N as ArchiveLimits, Nt as UiSpecNode, O as UiSurfaceActionRequest, Ot as SkillsLockfile, P as AttachmentTextInput, Pt as UnsignedPolicy, Q as MemoryFS, Qt as exportSkills, R as CryptoKeyLike, Rt as WebSkillErrorCode, S as UiBridge, Sn as verifySkillSignature, St as SkillManifest, T as UiSpecEvent, Tt as SkillReader, U as ExtractedDocumentFormat, Ut as buildCatalog, V as DWG_MIME_TYPES, Vt as assertSafePathSegment, W as FILE_MIME_TYPES, Wt as buildManifest, X as JsonSchema, Xt as detectSkillArchiveShapeFromFs, Y as IMAGE_MIME_TYPES, Yt as detectSkillArchiveShape, Z as MANIFEST_EXCLUDED_FILES, Zt as escapeXml, _ as LlmToolSpec, _n as signaturePayloadBytes, _t as SkillDocument, a as InteractionOrigin, an as messageOf, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, bn as validateSkills, bt as SkillLocation, c as InteractionResponse, cn as parseSkillPackManifest, ct as SKILL_PACK_FILE, d as LlmContentPart, dn as renderAvailableSkillsXml, dt as SignatureVerdict, en as formatAttachmentText, et as Page, f as LlmMessage, fn as renderCatalogJson, ft as SkillArchiveDetection, g as LlmToolCall, gn as signSkill, gt as SkillDiscovery, h as LlmTokenUsage, hn as sanitizeUntrustedLine, ht as SkillCatalogEntry, i as FormField, in as keyIdOf, it as SKILLS_LOCKFILE, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as TrustedKeyStore, k as UiSurfaceActionResponse, kt as TEXT_EXTENSIONS, l as LlmClient, ln as readResponseWithLimit, lt as SKILL_SIGNATURE_FILE, m as LlmStreamEvent, mn as resolveInsideRoot, mt as SkillCatalog, n as ArtifactStore, nn as isValidSkillName, nt as RemoteUrlPolicy, o as InteractionPolicy, on as normalizePath, ot as SKILL_NAME_MAX_LENGTH, p as LlmResponse, pn as resolveArchiveLimits, pt as SkillArchiveShape, q as FileWriteStream, qt as classifyAttachment, r as ChartSpec, rn as jsonRenderer, rt as SIGNATURE_SCHEMA_VERSION, s as InteractionRequest, sn as parseSkillMarkdown, st as SKILL_NAME_PATTERN, t as Artifact, tn as isAtomicTempPath, tt as PageQuery, u as LlmCompleteInput, un as readSkillSignature, ut as SignatureAuditSink, v as MemoryStore, vn as stripArchiveRoot, vt as SkillInstallSource, w as UiSpecDrafts, wt as SkillPackManifest, x as SkillCandidateMarker, xn as verifyManifest, xt as SkillManagerPort, y as RenderBlock, yn as unzipWithLimits, yt as SkillIssue, z as DEFAULT_ARCHIVE_LIMITS, zt as XLSX_MIME } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { $ as ImageOmission, $n as UserProfileEntry, $r as readProfileEntries, $t as SchemaInferer, A as DEFAULT_MAX_UPLOAD_FILE_BYTES, An as ToolContent, Ar as extractChartSpec, At as RunResult, B as ExternalToolSource, Bn as TraceEvent, Br as isUnsupportedRunSnapshot, Bt as RunTraceSummary, C as BridgeResponse, Cn as SpreadsheetSheet, Cr as buildRenderResult, Ct as RedactedArgs, D as DEFAULT_MAX_DATA_SOURCE_BYTES, Dn as TextualToolContent, Dr as diffUserProfile, Dt as RunBinaryEntry, E as DEFAULT_LOOP_LIMITS, En as TerminalLifecycleData, Er as createWebSkillApi, Et as RouteResult, F as DocxTextExtractor, Fn as ToolStepReader, Fr as fromVercelResult, Ft as RunToolCall, G as FsRunTraceStore, Gn as USER_PROFILE_EXPORT_VERSION, Gr as networkUrlHost, Gt as RuntimeSession, H as FsArtifactStore, Hn as TraceRecorder, Hr as mergeCatalogEntries, Ht as RunUsageSummary, I as EMPTY_USER_PROFILE, In as ToolStepRecord, Ir as fromVercelStreamPart, It as RunTraceFile, J as FullDisclosureRouter, Jn as USER_PROFILE_PROMPT_HEADER, Jr as normalizeToolError, Jt as SESSION_SCHEMA_VERSION, K as FsSessionStore, Kn as USER_PROFILE_KEY, Kr as normalizeErrorCode, Kt as RuntimeSessionHandle, L as EventBus, Ln as ToolStepStore, Lr as interruptedToolResult, Lt as RunTraceFilter, M as DataSourceInfo, Mn as ToolDisclosure, Mr as extractUiSpecEvents, Mt as RunSnapshotListEntry, N as DocumentSurfaceHost, Nn as ToolResolution, Nr as findUnpairedToolCalls, Nt as RunSnapshotStore, O as DEFAULT_MAX_DOCUMENT_BYTES, On as TodoTraceEvent, Or as encodeSpreadsheet, Ot as RunBinaryStore, P as DocumentSurfacePort, Pn as ToolResult, Pr as formatSkillScriptManifest, Pt as RunTerminationReason, Q as HookRunnerOptions, Qn as UserProfile, Qr as readBehaviorRecords, Qt as SUPPORTED_DOCUMENT_MIME, R as ExecuteLifecycleData, Rn as ToolStepTrust, Rr as isBytesOnlyDocument, Rt as RunTraceMetrics, S as BridgeRequest, Sn as SpreadsheetImageResolver, Sr as bridgeError, St as RUN_TRACE_SCHEMA_VERSION, T as CapabilityMode, Tn as TEXT_BUDGETED_CONTENT_TYPES, Tr as createScriptContext, Tt as RouteLifecycleData, U as FsMemoryStore, Un as UNSUPPORTED_DOCUMENT_MESSAGE, Ur as mergeProfileEntries, Ut as RuntimePhase, V as FS_SESSION_PAGE_SIZE, Vn as TraceEventType, Vr as listSkillScripts, Vt as RunUploadFiles, W as FsRunSnapshotStore, Wn as UPLOAD_FILES_UNAVAILABLE, Wr as networkPolicyLibSource, Wt as RuntimeRun, X as GoogleGenAiClientConfig, Xn as UnsupportedRunSnapshot, Xr as parseUserProfileExport, Xt as SPREADSHEET_LIMITS, Y as GoogleGenAiClient, Yn as USER_PROFILE_REFINE_PROMPT, Yr as parseBridgeRequest, Yt as SPREADSHEET_EXTENSION, Z as HookRunner, Zn as UploadFileInfo, Zr as partsToText, Zt as SPREADSHEET_MIME_TYPE, _ as BehaviorRecord, _i as toVercelToolSpecs, _n as SkillSuccessReport, _r as XLSX_UNSUPPORTED, _t as READ_LINKED_DOCUMENT_TOOL_NAME, a as ASK_USER_TOOL, ai as runVisionBatch, an as SerializingMemoryStore, ar as VISION_SLOW_THRESHOLD_MS, at as LifecycleHook, b as BridgeCapabilities, bn as SpreadsheetImageAnchor, br as appendBehaviorRecords, bt as READ_SKILL_FILE_TOOL_NAME, c as AgentLoop, ci as schemaToForm, cn as SessionRecord, cr as VisionBatchOptions, ct as LinkedDocumentReader, d as AnthropicClient, di as summarizeRunUsage, dn as SkillIntegrityGuard, dr as VisionDelegateImage, dt as OpenAiCompatibleClient, ei as readUserProfile, en as ScriptExecutionContext, er as UserProfileExport, et as InstalledSkillManifest, f as AnthropicClientConfig, fi as summarizeToolCalls, fn as SkillOutcomeReporter, fr as VisionDelegateRequest, ft as OpenAiCompatibleClientConfig, g as BYTES_ONLY_DOCUMENT_MIME, gi as toRecordDigests, gn as SkillStateGuard, gr as WebSkillRuntimeDeps, gt as READ_LINKED_DOCUMENT_TOOL, h as BEHAVIOR_RECORDS_KEY, hi as toLlmToolSpec, hn as SkillScriptSchemaSource, hr as WebSkillRuntime, ht as ProgressiveRouter, i as ASK_USER_MAX_FIELDS, ii as resolveToolName, in as SealResult, ir as VISION_MAX_CONCURRENCY, it as LifecycleEventInit, j as DEFAULT_USER_PROFILE_LIMITS, jn as ToolDefinition, jr as extractTodoTraceEvents, jt as RunSnapshot, k as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, kn as ToolCallContext, kr as exportUserProfile, kt as RunLimitErrorDetails, l as AgentLoopConfig, li as scriptToolName, ln as SessionStore, lr as VisionBatchOutcome, lt as MAX_TOOL_STEP_ARG_BYTES, m as ApprovalScope, mi as toBase64, mn as SkillScriptDescriptor, mr as WebSkillApi, mt as PptxTextExtractor, n as ASK_USER_FIELD_TYPES, ni as refineUserProfile, nn as SealOptions, nr as UserProfileLimits, nt as InteractLifecycleData, o as ASK_USER_TOOL_NAME, oi as sampleBehaviorRecords, on as SessionListPage, or as VercelToolSpec, ot as LifecycleHookContext, p as ApprovalDecision, pi as textParts, pn as SkillRouter, pr as VisionDelegateResult, pt as PdfTextExtractor, q as FsToolStepStore, qn as USER_PROFILE_NO_INVENTION_RULE, qr as normalizeToolContent, qt as SENSITIVE_ANNOTATION, r as ASK_USER_INPUT_SCHEMA, ri as renderUserProfileContext, rn as SealRecord, rr as VISION_DEFAULT_CONCURRENCY, rt as LifecycleEvent, s as ActivateLifecycleData, si as schemaSourceLabel, sn as SessionMeta, sr as ViewerImageFact, st as LifecycleListener, t as ALLOWED_TOOLS_EXCLUSION_REASON, ti as redactToolStepArgs, tn as ScriptExecutor, tr as UserProfileImportDiff, tt as IntegrityVerdict, u as AgentLoopDeps, ui as sealToolCallPairs, un as SkillFailureReport, ur as VisionDelegate, ut as NetworkPolicy, v as BehaviorRecordKind, vi as validateUiSpecEvent, vn as SpreadsheetCell, vr as XlsxTextExtractor, vt as READ_SKILL_FILE_INPUT_SCHEMA, w as CapabilityApproval, wn as SpreadsheetSpec, wr as clampVisionConcurrency, wt as RefineUserProfileInput, x as BridgeCapability, xn as SpreadsheetImageBytes, xr as applyUserProfileImport, xt as RUN_SNAPSHOT_SCHEMA_VERSION, y as BehaviorScene, yi as validateUiSpecNode, yn as SpreadsheetImage, yr as XlsxUnsupportedFeature, yt as READ_SKILL_FILE_TOOL, z as ExternalSkillProvider, zn as TraceClock, zr as isNetworkAllowed, zt as RunTraceStore } from "./index-YPd8ZSEa.js";
+import { $ as PPTX_MIME, $t as exportSkills, A as extractSkillCandidate, At as TrustedKey, B as DOCX_MIME, Bt as assertRemoteUrlAllowed, C as UiSpecActionCapability, Cn as verifySkillSignature, Ct as SkillMetadata, D as UiSpecSnapshot, Dt as SkillSource, E as UiSpecPatch, Et as SkillSignature, F as BINARY_EXTENSIONS, Ft as ValidationReport, G as FileStat, Gt as buildManifest, H as DiscoveryResult, Ht as atomicWriteBinary, I as CatalogRenderer, It as VerifyResult, J as FsTrustedKeyStore, Jt as classifyAttachment, K as FileSystemProvider, Kt as checkDependencyCycles, L as ChatAttachmentKind, Lt as WebSkillError, M as ATTACHMENT_TEXT_LIMIT, Mt as UNTRUSTED_LINE_LIMIT, N as ArchiveLimits, Nt as UiSpecNode, O as UiSurfaceActionRequest, Ot as SkillsLockfile, P as AttachmentTextInput, Pt as UnsignedPolicy, Q as MemoryFS, Qt as escapeXml, R as CryptoKeyLike, Rt as WebSkillErrorCode, S as UiBridge, Sn as verifyManifest, St as SkillManifest, T as UiSpecEvent, Tt as SkillReader, U as ExtractedDocumentFormat, Ut as atomicWriteText, V as DWG_MIME_TYPES, Vt as assertSafePathSegment, W as FILE_MIME_TYPES, Wt as buildCatalog, X as JsonSchema, Xt as detectSkillArchiveShape, Y as IMAGE_MIME_TYPES, Yt as computeDigest, Z as MANIFEST_EXCLUDED_FILES, Zt as detectSkillArchiveShapeFromFs, _ as LlmToolSpec, _n as signSkill, _t as SkillDocument, a as InteractionOrigin, an as keyIdOf, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, bn as unzipWithLimits, bt as SkillLocation, c as InteractionResponse, cn as parseSkillMarkdown, ct as SKILL_PACK_FILE, d as LlmContentPart, dn as readSkillSignature, dt as SignatureVerdict, en as extractedDocumentFormat, et as Page, f as LlmMessage, fn as renderAvailableSkillsXml, ft as SkillArchiveDetection, g as LlmToolCall, gn as sanitizeUntrustedLine, gt as SkillDiscovery, h as LlmTokenUsage, hn as resolveInsideRoot, ht as SkillCatalogEntry, i as FormField, in as jsonRenderer, it as SKILLS_LOCKFILE, j as ATOMIC_TMP_SUFFIX_PATTERN, jt as TrustedKeyStore, k as UiSurfaceActionResponse, kt as TEXT_EXTENSIONS, l as LlmClient, ln as parseSkillPackManifest, lt as SKILL_SIGNATURE_FILE, m as LlmStreamEvent, mn as resolveArchiveLimits, mt as SkillCatalog, n as ArtifactStore, nn as isAtomicTempPath, nt as RemoteUrlPolicy, o as InteractionPolicy, on as messageOf, ot as SKILL_NAME_MAX_LENGTH, p as LlmResponse, pn as renderCatalogJson, pt as SkillArchiveShape, q as FileWriteStream, qt as checkSkillRules, r as ChartSpec, rn as isValidSkillName, rt as SIGNATURE_SCHEMA_VERSION, s as InteractionRequest, sn as normalizePath, st as SKILL_NAME_PATTERN, t as Artifact, tn as formatAttachmentText, tt as PageQuery, u as LlmCompleteInput, un as readResponseWithLimit, ut as SignatureAuditSink, v as MemoryStore, vn as signaturePayloadBytes, vt as SkillInstallSource, w as UiSpecDrafts, wn as xmlRenderer, wt as SkillPackManifest, x as SkillCandidateMarker, xn as validateSkills, xt as SkillManagerPort, y as RenderBlock, yn as stripArchiveRoot, yt as SkillIssue, z as DEFAULT_ARCHIVE_LIMITS, zt as XLSX_MIME } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { $ as ImageOmission, $n as UserProfileEntry, $r as readProfileEntries, $t as SchemaInferer, A as DEFAULT_MAX_UPLOAD_FILE_BYTES, An as ToolContent, Ar as extractChartSpec, At as RunResult, B as ExternalToolSource, Bn as TraceEvent, Br as isUnsupportedRunSnapshot, Bt as RunTraceSummary, C as BridgeResponse, Cn as SpreadsheetSheet, Cr as buildRenderResult, Ct as RedactedArgs, D as DEFAULT_MAX_DATA_SOURCE_BYTES, Dn as TextualToolContent, Dr as diffUserProfile, Dt as RunBinaryEntry, E as DEFAULT_LOOP_LIMITS, En as TerminalLifecycleData, Er as createWebSkillApi, Et as RouteResult, F as DocxTextExtractor, Fn as ToolStepReader, Fr as fromVercelResult, Ft as RunToolCall, G as FsRunTraceStore, Gn as USER_PROFILE_EXPORT_VERSION, Gr as networkUrlHost, Gt as RuntimeSession, H as FsArtifactStore, Hn as TraceRecorder, Hr as mergeCatalogEntries, Ht as RunUsageSummary, I as EMPTY_USER_PROFILE, In as ToolStepRecord, Ir as fromVercelStreamPart, It as RunTraceFile, J as FullDisclosureRouter, Jn as USER_PROFILE_PROMPT_HEADER, Jr as normalizeToolError, Jt as SESSION_SCHEMA_VERSION, K as FsSessionStore, Kn as USER_PROFILE_KEY, Kr as normalizeErrorCode, Kt as RuntimeSessionHandle, L as EventBus, Ln as ToolStepStore, Lr as interruptedToolResult, Lt as RunTraceFilter, M as DataSourceInfo, Mn as ToolDisclosure, Mr as extractUiSpecEvents, Mt as RunSnapshotListEntry, N as DocumentSurfaceHost, Nn as ToolResolution, Nr as findUnpairedToolCalls, Nt as RunSnapshotStore, O as DEFAULT_MAX_DOCUMENT_BYTES, On as TodoTraceEvent, Or as encodeSpreadsheet, Ot as RunBinaryStore, P as DocumentSurfacePort, Pn as ToolResult, Pr as formatSkillScriptManifest, Pt as RunTerminationReason, Q as HookRunnerOptions, Qn as UserProfile, Qr as readBehaviorRecords, Qt as SUPPORTED_DOCUMENT_MIME, R as ExecuteLifecycleData, Rn as ToolStepTrust, Rr as isBytesOnlyDocument, Rt as RunTraceMetrics, S as BridgeRequest, Sn as SpreadsheetImageResolver, Sr as bridgeError, St as RUN_TRACE_SCHEMA_VERSION, T as CapabilityMode, Tn as TEXT_BUDGETED_CONTENT_TYPES, Tr as createScriptContext, Tt as RouteLifecycleData, U as FsMemoryStore, Un as UNSUPPORTED_DOCUMENT_MESSAGE, Ur as mergeProfileEntries, Ut as RuntimePhase, V as FS_SESSION_PAGE_SIZE, Vn as TraceEventType, Vr as listSkillScripts, Vt as RunUploadFiles, W as FsRunSnapshotStore, Wn as UPLOAD_FILES_UNAVAILABLE, Wr as networkPolicyLibSource, Wt as RuntimeRun, X as GoogleGenAiClientConfig, Xn as UnsupportedRunSnapshot, Xr as parseUserProfileExport, Xt as SPREADSHEET_LIMITS, Y as GoogleGenAiClient, Yn as USER_PROFILE_REFINE_PROMPT, Yr as parseBridgeRequest, Yt as SPREADSHEET_EXTENSION, Z as HookRunner, Zn as UploadFileInfo, Zr as partsToText, Zt as SPREADSHEET_MIME_TYPE, _ as BehaviorRecord, _i as toVercelToolSpecs, _n as SkillSuccessReport, _r as XLSX_UNSUPPORTED, _t as READ_LINKED_DOCUMENT_TOOL_NAME, a as ASK_USER_TOOL, ai as runVisionBatch, an as SerializingMemoryStore, ar as VISION_SLOW_THRESHOLD_MS, at as LifecycleHook, b as BridgeCapabilities, bn as SpreadsheetImageAnchor, br as appendBehaviorRecords, bt as READ_SKILL_FILE_TOOL_NAME, c as AgentLoop, ci as schemaToForm, cn as SessionRecord, cr as VisionBatchOptions, ct as LinkedDocumentReader, d as AnthropicClient, di as summarizeRunUsage, dn as SkillIntegrityGuard, dr as VisionDelegateImage, dt as OpenAiCompatibleClient, ei as readUserProfile, en as ScriptExecutionContext, er as UserProfileExport, et as InstalledSkillManifest, f as AnthropicClientConfig, fi as summarizeToolCalls, fn as SkillOutcomeReporter, fr as VisionDelegateRequest, ft as OpenAiCompatibleClientConfig, g as BYTES_ONLY_DOCUMENT_MIME, gi as toRecordDigests, gn as SkillStateGuard, gr as WebSkillRuntimeDeps, gt as READ_LINKED_DOCUMENT_TOOL, h as BEHAVIOR_RECORDS_KEY, hi as toLlmToolSpec, hn as SkillScriptSchemaSource, hr as WebSkillRuntime, ht as ProgressiveRouter, i as ASK_USER_MAX_FIELDS, ii as resolveToolName, in as SealResult, ir as VISION_MAX_CONCURRENCY, it as LifecycleEventInit, j as DEFAULT_USER_PROFILE_LIMITS, jn as ToolDefinition, jr as extractTodoTraceEvents, jt as RunSnapshot, k as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, kn as ToolCallContext, kr as exportUserProfile, kt as RunLimitErrorDetails, l as AgentLoopConfig, li as scriptToolName, ln as SessionStore, lr as VisionBatchOutcome, lt as MAX_TOOL_STEP_ARG_BYTES, m as ApprovalScope, mi as toBase64, mn as SkillScriptDescriptor, mr as WebSkillApi, mt as PptxTextExtractor, n as ASK_USER_FIELD_TYPES, ni as refineUserProfile, nn as SealOptions, nr as UserProfileLimits, nt as InteractLifecycleData, o as ASK_USER_TOOL_NAME, oi as sampleBehaviorRecords, on as SessionListPage, or as VercelToolSpec, ot as LifecycleHookContext, p as ApprovalDecision, pi as textParts, pn as SkillRouter, pr as VisionDelegateResult, pt as PdfTextExtractor, q as FsToolStepStore, qn as USER_PROFILE_NO_INVENTION_RULE, qr as normalizeToolContent, qt as SENSITIVE_ANNOTATION, r as ASK_USER_INPUT_SCHEMA, ri as renderUserProfileContext, rn as SealRecord, rr as VISION_DEFAULT_CONCURRENCY, rt as LifecycleEvent, s as ActivateLifecycleData, si as schemaSourceLabel, sn as SessionMeta, sr as ViewerImageFact, st as LifecycleListener, t as ALLOWED_TOOLS_EXCLUSION_REASON, ti as redactToolStepArgs, tn as ScriptExecutor, tr as UserProfileImportDiff, tt as IntegrityVerdict, u as AgentLoopDeps, ui as sealToolCallPairs, un as SkillFailureReport, ur as VisionDelegate, ut as NetworkPolicy, v as BehaviorRecordKind, vi as validateUiSpecEvent, vn as SpreadsheetCell, vr as XlsxTextExtractor, vt as READ_SKILL_FILE_INPUT_SCHEMA, w as CapabilityApproval, wn as SpreadsheetSpec, wr as clampVisionConcurrency, wt as RefineUserProfileInput, x as BridgeCapability, xn as SpreadsheetImageBytes, xr as applyUserProfileImport, xt as RUN_SNAPSHOT_SCHEMA_VERSION, y as BehaviorScene, yi as validateUiSpecNode, yn as SpreadsheetImage, yr as XlsxUnsupportedFeature, yt as READ_SKILL_FILE_TOOL, z as ExternalSkillProvider, zn as TraceClock, zr as isNetworkAllowed, zt as RunTraceStore } from "./index-7No55dRb.js";
 //#region src/version.d.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
 /**
  * Version of the published `@webskill/sdk` package, injected at build time.
  * @stable
  */
-declare const SDK_VERSION = "0.22.0";
+declare const SDK_VERSION = "0.23.0";
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type AttachmentTextInput, BEHAVIOR_RECORDS_KEY, BINARY_EXTENSIONS, BYTES_ONLY_DOCUMENT_MIME, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type ChatAttachmentKind, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, DWG_MIME_TYPES, type DataSourceInfo, type DiscoveryResult, type DocumentSurfaceHost, type DocumentSurfacePort, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, type ExtractedDocumentFormat, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FileWriteStream, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, IMAGE_MIME_TYPES, type ImageOmission, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, PPTX_MIME, type Page, type PageQuery, type PdfTextExtractor, type PptxTextExtractor, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunBinaryEntry, type RunBinaryStore, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUploadFiles, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SPREADSHEET_EXTENSION, SPREADSHEET_LIMITS, SPREADSHEET_MIME_TYPE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, type SpreadsheetCell, type SpreadsheetImage, type SpreadsheetImageAnchor, type SpreadsheetImageBytes, type SpreadsheetImageResolver, type SpreadsheetSheet, type SpreadsheetSpec, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolCallContext, type ToolContent, type ToolDefinition, type ToolDisclosure, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UploadFileInfo, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, VISION_DEFAULT_CONCURRENCY, VISION_MAX_CONCURRENCY, VISION_SLOW_THRESHOLD_MS, type ValidationReport, type VercelToolSpec, type VerifyResult, type ViewerImageFact, type VisionBatchOptions, type VisionBatchOutcome, type VisionDelegate, type VisionDelegateImage, type VisionDelegateRequest, type VisionDelegateResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, XLSX_MIME, XLSX_UNSUPPORTED, type XlsxTextExtractor, type XlsxUnsupportedFeature, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clampVisionConcurrency, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, encodeSpreadsheet, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, extractedDocumentFormat, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isBytesOnlyDocument, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, runVisionBatch, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type AttachmentTextInput, BEHAVIOR_RECORDS_KEY, BINARY_EXTENSIONS, BYTES_ONLY_DOCUMENT_MIME, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type ChatAttachmentKind, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, DWG_MIME_TYPES, type DataSourceInfo, type DiscoveryResult, type DocumentSurfaceHost, type DocumentSurfacePort, type DocxTextExtractor, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, type ExtractedDocumentFormat, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FileWriteStream, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, IMAGE_MIME_TYPES, type ImageOmission, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LinkedDocumentReader, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmTokenUsage, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, PPTX_MIME, type Page, type PageQuery, type PdfTextExtractor, type PptxTextExtractor, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RedactedArgs, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunBinaryEntry, type RunBinaryStore, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RunUploadFiles, type RunUsageSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SPREADSHEET_EXTENSION, SPREADSHEET_LIMITS, SPREADSHEET_MIME_TYPE, SUPPORTED_DOCUMENT_MIME, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, type SpreadsheetCell, type SpreadsheetImage, type SpreadsheetImageAnchor, type SpreadsheetImageBytes, type SpreadsheetImageResolver, type SpreadsheetSheet, type SpreadsheetSpec, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolCallContext, type ToolContent, type ToolDefinition, type ToolDisclosure, type ToolResolution, type ToolResult, type ToolStepReader, type ToolStepRecord, type ToolStepStore, type ToolStepTrust, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UploadFileInfo, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, VISION_DEFAULT_CONCURRENCY, VISION_MAX_CONCURRENCY, VISION_SLOW_THRESHOLD_MS, type ValidationReport, type VercelToolSpec, type VerifyResult, type ViewerImageFact, type VisionBatchOptions, type VisionBatchOutcome, type VisionDelegate, type VisionDelegateImage, type VisionDelegateRequest, type VisionDelegateResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, XLSX_MIME, XLSX_UNSUPPORTED, type XlsxTextExtractor, type XlsxUnsupportedFeature, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteBinary, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clampVisionConcurrency, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, encodeSpreadsheet, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, extractedDocumentFormat, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isBytesOnlyDocument, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, runVisionBatch, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };