@webskill/sdk 0.22.0 → 0.23.0

package/dist/index.js

@@ -1,16 +1,16 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { A as SKILL_MANIFEST_FILE, C as keyIdOf, D as verifySkillSignature, E as signaturePayloadBytes, M as buildManifest, N as computeDigest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, S as SIGNATURE_SCHEMA_VERSION, T as signSkill, _ as SKILL_NAME_MAX_LENGTH, a as DEFAULT_ARCHIVE_LIMITS, b as parseSkillMarkdown, c as unzipWithLimits, d as stripArchiveRoot, f as SKILL_PACK_FILE, g as checkSkillRules, h as checkDependencyCycles, i as buildCatalog, j as SKILL_SIGNATURE_FILE, k as SKILLS_LOCKFILE, l as detectSkillArchiveShape, m as parseSkillPackManifest, n as SkillDiscovery, o as readResponseWithLimit, p as exportSkills, r as SkillReader, s as resolveArchiveLimits, t as validateSkills, u as detectSkillArchiveShapeFromFs, v as SKILL_NAME_PATTERN, w as readSkillSignature, x as FsTrustedKeyStore, y as isValidSkillName } from "./skill-CAJMsLod.js";
-import { a as atomicWriteText, i as ATOMIC_TMP_SUFFIX_PATTERN, n as normalizePath, o as isAtomicTempPath, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { A as SKILL_MANIFEST_FILE, C as keyIdOf, D as verifySkillSignature, E as signaturePayloadBytes, M as buildManifest, N as computeDigest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, S as SIGNATURE_SCHEMA_VERSION, T as signSkill, _ as SKILL_NAME_MAX_LENGTH, a as DEFAULT_ARCHIVE_LIMITS, b as parseSkillMarkdown, c as unzipWithLimits, d as stripArchiveRoot, f as SKILL_PACK_FILE, g as checkSkillRules, h as checkDependencyCycles, i as buildCatalog, j as SKILL_SIGNATURE_FILE, k as SKILLS_LOCKFILE, l as detectSkillArchiveShape, m as parseSkillPackManifest, n as SkillDiscovery, o as readResponseWithLimit, p as exportSkills, r as SkillReader, s as resolveArchiveLimits, t as validateSkills, u as detectSkillArchiveShapeFromFs, v as SKILL_NAME_PATTERN, w as readSkillSignature, x as FsTrustedKeyStore, y as isValidSkillName } from "./skill-WSUDp6A1.js";
+import { a as atomicWriteBinary, i as ATOMIC_TMP_SUFFIX_PATTERN, n as normalizePath, o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
 import { n as sanitizeUntrustedLine, t as UNTRUSTED_LINE_LIMIT } from "./untrustedText-BIaRvPZK.js";
 import { a as FILE_MIME_TYPES, c as TEXT_EXTENSIONS, d as extractedDocumentFormat, f as formatAttachmentText, i as DWG_MIME_TYPES, l as XLSX_MIME, n as BINARY_EXTENSIONS, o as IMAGE_MIME_TYPES, r as DOCX_MIME, s as PPTX_MIME, t as ATTACHMENT_TEXT_LIMIT, u as classifyAttachment } from "./kind-Dc8x0HWz.js";
-import { $ as READ_SKILL_FILE_TOOL, A as BEHAVIOR_RECORDS_KEY, B as renderUserProfileContext, C as extractTodoTraceEvents, D as VISION_SLOW_THRESHOLD_MS, E as VISION_MAX_CONCURRENCY, F as readProfileEntries, G as schemaToForm, H as EMPTY_USER_PROFILE, I as readUserProfile, J as ASK_USER_INPUT_SCHEMA, K as createScriptContext, L as sampleBehaviorRecords, M as appendBehaviorRecords, N as mergeProfileEntries, O as clampVisionConcurrency, P as readBehaviorRecords, Q as READ_SKILL_FILE_INPUT_SCHEMA, R as USER_PROFILE_NO_INVENTION_RULE, S as extractSkillCandidate, T as VISION_DEFAULT_CONCURRENCY, U as SerializingMemoryStore, V as DEFAULT_USER_PROFILE_LIMITS, W as EventBus, X as ASK_USER_TOOL, Y as ASK_USER_MAX_FIELDS, Z as ASK_USER_TOOL_NAME, _ as FsRunSnapshotStore, a as networkPolicyLibSource, at as scriptToolName, b as DEFAULT_LOOP_LIMITS, c as bridgeError, ct as ProgressiveRouter, d as FsMemoryStore, dt as xmlRenderer, et as READ_SKILL_FILE_TOOL_NAME, f as WebSkillRuntime, g as redactToolStepArgs, h as SENSITIVE_ANNOTATION, i as isNetworkAllowed, it as schemaSourceLabel, j as USER_PROFILE_KEY, k as runVisionBatch, l as parseBridgeRequest, lt as escapeXml, m as AgentLoop, n as normalizeErrorCode, nt as formatSkillScriptManifest, o as networkUrlHost, ot as resolveToolName, p as summarizeRunUsage, q as ASK_USER_FIELD_TYPES, r as normalizeToolError, rt as listSkillScripts, s as UPLOAD_FILES_UNAVAILABLE, st as toLlmToolSpec, t as CapabilityApproval, tt as ALLOWED_TOOLS_EXCLUSION_REASON, u as FsArtifactStore, ut as renderAvailableSkillsXml, v as RUN_SNAPSHOT_SCHEMA_VERSION, w as TraceRecorder, x as MAX_TOOL_STEP_ARG_BYTES, y as isUnsupportedRunSnapshot, z as USER_PROFILE_PROMPT_HEADER } from "./approval-DWQlDPbY.js";
+import { $ as READ_SKILL_FILE_TOOL, A as BEHAVIOR_RECORDS_KEY, B as renderUserProfileContext, C as extractTodoTraceEvents, D as VISION_SLOW_THRESHOLD_MS, E as VISION_MAX_CONCURRENCY, F as readProfileEntries, G as schemaToForm, H as EMPTY_USER_PROFILE, I as readUserProfile, J as ASK_USER_INPUT_SCHEMA, K as createScriptContext, L as sampleBehaviorRecords, M as appendBehaviorRecords, N as mergeProfileEntries, O as clampVisionConcurrency, P as readBehaviorRecords, Q as READ_SKILL_FILE_INPUT_SCHEMA, R as USER_PROFILE_NO_INVENTION_RULE, S as extractSkillCandidate, T as VISION_DEFAULT_CONCURRENCY, U as SerializingMemoryStore, V as DEFAULT_USER_PROFILE_LIMITS, W as EventBus, X as ASK_USER_TOOL, Y as ASK_USER_MAX_FIELDS, Z as ASK_USER_TOOL_NAME, _ as FsRunSnapshotStore, a as networkPolicyLibSource, at as scriptToolName, b as DEFAULT_LOOP_LIMITS, c as bridgeError, ct as ProgressiveRouter, d as FsMemoryStore, dt as xmlRenderer, et as READ_SKILL_FILE_TOOL_NAME, f as WebSkillRuntime, g as redactToolStepArgs, h as SENSITIVE_ANNOTATION, i as isNetworkAllowed, it as schemaSourceLabel, j as USER_PROFILE_KEY, k as runVisionBatch, l as parseBridgeRequest, lt as escapeXml, m as AgentLoop, n as normalizeErrorCode, nt as formatSkillScriptManifest, o as networkUrlHost, ot as resolveToolName, p as summarizeRunUsage, q as ASK_USER_FIELD_TYPES, r as normalizeToolError, rt as listSkillScripts, s as UPLOAD_FILES_UNAVAILABLE, st as toLlmToolSpec, t as CapabilityApproval, tt as ALLOWED_TOOLS_EXCLUSION_REASON, u as FsArtifactStore, ut as renderAvailableSkillsXml, v as RUN_SNAPSHOT_SCHEMA_VERSION, w as TraceRecorder, x as MAX_TOOL_STEP_ARG_BYTES, y as isUnsupportedRunSnapshot, z as USER_PROFILE_PROMPT_HEADER } from "./approval-7CuZS3Z4.js";
 import { a as GoogleGenAiClient, c as findUnpairedToolCalls, d as partsToText, f as promptText, i as toVercelToolSpecs, l as interruptedToolResult, n as fromVercelResult, o as AnthropicClient, p as textParts, r as fromVercelStreamPart, s as OpenAiCompatibleClient, u as sealToolCallPairs } from "./llm-eIQNO9tr.js";
-import { _ as DEFAULT_MAX_UPLOAD_FILE_BYTES, a as UNSUPPORTED_DOCUMENT_MESSAGE, c as toBase64, d as SPREADSHEET_LIMITS, f as SPREADSHEET_MIME_TYPE, g as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, h as DEFAULT_MAX_DOCUMENT_BYTES, i as SUPPORTED_DOCUMENT_MIME, l as encodeSpreadsheet, m as DEFAULT_MAX_DATA_SOURCE_BYTES, n as READ_LINKED_DOCUMENT_TOOL, p as XLSX_UNSUPPORTED, r as READ_LINKED_DOCUMENT_TOOL_NAME, s as isBytesOnlyDocument, t as BYTES_ONLY_DOCUMENT_MIME, u as SPREADSHEET_EXTENSION, v as TEXT_BUDGETED_CONTENT_TYPES } from "./linkedDocument-CIuh_Yp0.js";
+import { _ as DEFAULT_MAX_UPLOAD_FILE_BYTES, a as UNSUPPORTED_DOCUMENT_MESSAGE, c as toBase64, d as SPREADSHEET_LIMITS, f as SPREADSHEET_MIME_TYPE, g as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, h as DEFAULT_MAX_DOCUMENT_BYTES, i as SUPPORTED_DOCUMENT_MIME, l as encodeSpreadsheet, m as DEFAULT_MAX_DATA_SOURCE_BYTES, n as READ_LINKED_DOCUMENT_TOOL, p as XLSX_UNSUPPORTED, r as READ_LINKED_DOCUMENT_TOOL_NAME, s as isBytesOnlyDocument, t as BYTES_ONLY_DOCUMENT_MIME, u as SPREADSHEET_EXTENSION, v as TEXT_BUDGETED_CONTENT_TYPES } from "./linkedDocument-CZZOl9cO.js";
 import { n as normalizeToolContent, t as mergeCatalogEntries } from "./external-_ZRQe-V9.js";
 import { n as extractChartSpec, t as buildRenderResult } from "./renderResult-D9Q-Vu2x.js";
 import { n as validateUiSpecEvent, r as validateUiSpecNode, t as extractUiSpecEvents } from "./surface-DVGiCmwq.js";
-import { t as createWebSkillApi } from "./webSkillApi-Dy-Zjv0y.js";
+import { t as createWebSkillApi } from "./webSkillApi-D5VMUnrv.js";
 
 //#region ../core/src/fs/memoryFs.ts
 const ROOT = "/";
@@ -873,8 +873,10 @@ var FsSessionStore = class {
 			console.warn(`[webskill] ${skipped.length} session file(s) under ${this.#root} are unreadable (possible data loss from an interrupted write): ${skipped.join(", ")}`);
 		}
 		metas.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+		const page = takeTailPage(metas, options, "session");
 		return {
-			...takeTailPage(metas, options, "session"),
+			...page,
+			items: [...page.items].reverse(),
 			source: "ok",
 			skipped
 		};
@@ -1010,7 +1012,7 @@ var FsToolStepStore = class {
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.22.0";
+const SDK_VERSION = "0.23.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, BINARY_EXTENSIONS, BYTES_ONLY_DOCUMENT_MIME, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, DWG_MIME_TYPES, EMPTY_USER_PROFILE, EventBus, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, IMAGE_MIME_TYPES, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, PPTX_MIME, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SPREADSHEET_EXTENSION, SPREADSHEET_LIMITS, SPREADSHEET_MIME_TYPE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, VISION_DEFAULT_CONCURRENCY, VISION_MAX_CONCURRENCY, VISION_SLOW_THRESHOLD_MS, WebSkillError, WebSkillRuntime, XLSX_MIME, XLSX_UNSUPPORTED, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clampVisionConcurrency, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, encodeSpreadsheet, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, extractedDocumentFormat, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isBytesOnlyDocument, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, runVisionBatch, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, ATTACHMENT_TEXT_LIMIT, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, BINARY_EXTENSIONS, BYTES_ONLY_DOCUMENT_MIME, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_MAX_UPLOAD_FILE_BYTES, DEFAULT_USER_PROFILE_LIMITS, DOCX_MIME, DWG_MIME_TYPES, EMPTY_USER_PROFILE, EventBus, FILE_MIME_TYPES, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, IMAGE_MIME_TYPES, MANIFEST_EXCLUDED_FILES, MAX_TOOL_STEP_ARG_BYTES, MemoryFS, OpenAiCompatibleClient, PPTX_MIME, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SENSITIVE_ANNOTATION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SPREADSHEET_EXTENSION, SPREADSHEET_LIMITS, SPREADSHEET_MIME_TYPE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TEXT_EXTENSIONS, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, UNTRUSTED_LINE_LIMIT, UPLOAD_FILES_UNAVAILABLE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, VISION_DEFAULT_CONCURRENCY, VISION_MAX_CONCURRENCY, VISION_SLOW_THRESHOLD_MS, WebSkillError, WebSkillRuntime, XLSX_MIME, XLSX_UNSUPPORTED, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteBinary, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clampVisionConcurrency, classifyAttachment, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, encodeSpreadsheet, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, extractedDocumentFormat, findUnpairedToolCalls, formatAttachmentText, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isBytesOnlyDocument, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, redactToolStepArgs, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, runVisionBatch, sampleBehaviorRecords, sanitizeUntrustedLine, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toBase64, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/{linkedDocument-CIuh_Yp0.js → linkedDocument-CZZOl9cO.js}

@@ -1,4 +1,5 @@
 import { t as WebSkillError } from "./errors-BDZNpC13.js";
+import { unzipSync, zipSync } from "fflate";
 import writeXlsxFile from "write-excel-file/universal";
 
 //#region ../runtime/src/tools/types.ts
@@ -120,6 +121,40 @@ const ROW_PADDING_PT = 4;
 */
 const COLUMN_CHAR_PX = 7;
 const COLUMN_PADDING_PX = 5;
+/**
+* 归档里写死的时间戳（0.23.0 分册 24 FR-24.2）。
+*
+* `write-excel-file` 调 fflate 的 `zip(files, callback)` 时不传 options，
+* mtime 于是缺省成 `new Date()`——同一份规格在不同时刻编出的字节因此不同。
+* ZIP 的时间戳只有 2 秒精度，所以这件事表现为「偶发」而不是「必现」。
+*
+* 取值约束：ZIP 的纪元是 1980 而不是 Unix 的 1970，且 fflate 拒绝纪元 0，
+* 因此必须用本地时区构造，不能用 `Date.UTC`。
+* `verify/scripts/documents.mjs` 里有同值的一份（两处不共享实现——那些脚本
+* 一个仓内包都不引；一致性由 `test/spreadsheetMtimeSingleSource.test.ts` 钉住）。
+*
+* 不导出：它是实现细节，导出就进 api-snapshot，而本册的准入标准是零契约变更。
+*/
+const XLSX_ZIP_MTIME = new Date(1980, 0, 1, 0, 0, 0);
+/**
+* 解包再用固定 mtime 重打包。
+*
+* 不直接改 ZIP 字节里的时间戳字段：那要手写本地文件头与中央目录的偏移解析，
+* 而时间戳在两处各存一份，漏一处就是坏档，坏档还不一定报错（FR-24.4 明令禁止）。
+* `unzipSync` 保留中央目录的条目顺序，`zipSync` 按对象键顺序写回，
+* 所以 OOXML 要求的 `[Content_Types].xml` 居首不会被打乱。
+*/
+function withFixedTimestamps(bytes) {
+	return zipSync(unzipSync(bytes), {
+		level: 6,
+		mtime: XLSX_ZIP_MTIME
+	});
+}
+/** 字节数是唯一无法预先算出的上限，只能编码后查 */
+function assertWithinByteLimit(length) {
+	if (length <= SPREADSHEET_LIMITS.bytes) return;
+	throw invalid(`The encoded spreadsheet is ${length} bytes (max ${SPREADSHEET_LIMITS.bytes}); reduce the number of rows, sheets or images.`);
+}
 function invalid(message) {
 	return new WebSkillError("VALIDATION_FAILED", message);
 }
@@ -311,8 +346,11 @@ function applyImageSizing(data, images) {
 /**
 * 把表格规格编码为 xlsx 字节。
 *
-* 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份
-* 实现，AC-10.8「双消费面逐字节相同」是结构性成立的。
+* 纯函数——不认识产物、run 与工具，因此工具、脚本能力、测试三个消费面共用同一份实现。
+*
+* 「纯函数」只保证三个消费面走的是同一条代码路径，**不足以**保证输出逐字节相同：
+* 归档格式本身会把编码时刻写进字节。AC-10.8「双消费面逐字节相同」靠的是
+* `withFixedTimestamps()` 把那个时刻拿掉（0.23.0 分册 24）。
 *
 * `resolveImage` 是图片引用的解析出口（0.22.0 分册 20 FR-20.3）。它同样不破坏纯函数性：
 * 给定相同的规格与相同的解析结果，输出逐字节相同。规格里有图片却没给它，是
@@ -340,8 +378,10 @@ async function encodeSpreadsheet(spec, resolveImage) {
 		});
 	}
 	const blob = await writeXlsxFile(payload).toBlob();
-	const bytes = new Uint8Array(await blob.arrayBuffer());
-	if (bytes.length > SPREADSHEET_LIMITS.bytes) throw invalid(`The encoded spreadsheet is ${bytes.length} bytes (max ${SPREADSHEET_LIMITS.bytes}); reduce the number of rows, sheets or images.`);
+	const encoded = new Uint8Array(await blob.arrayBuffer());
+	assertWithinByteLimit(encoded.length);
+	const bytes = withFixedTimestamps(encoded);
+	assertWithinByteLimit(bytes.length);
 	return bytes;
 }
 

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, ht as SkillCatalogEntry } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { B as ExternalToolSource, Hr as mergeCatalogEntries, Mn as ToolDisclosure, Pn as ToolResult, z as ExternalSkillProvider } from "./index-YPd8ZSEa.js";
+import { X as JsonSchema, _ as LlmToolSpec, _t as SkillDocument, ht as SkillCatalogEntry } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { B as ExternalToolSource, Hr as mergeCatalogEntries, Mn as ToolDisclosure, Pn as ToolResult, z as ExternalSkillProvider } from "./index-7No55dRb.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-YPd8ZSEa.js";
-import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-B24Jjjry-BY1H7Krp.js";
+import { G as FileStat, It as VerifyResult, K as FileSystemProvider, N as ArchiveLimits, Ot as SkillsLockfile, Pt as UnsignedPolicy, S as UiBridge, St as SkillManifest, X as JsonSchema, at as SKILL_MANIFEST_FILE, b as RenderResultRequest, c as InteractionResponse, it as SKILLS_LOCKFILE, jt as TrustedKeyStore, q as FileWriteStream, s as InteractionRequest, ut as SignatureAuditSink, vt as SkillInstallSource, xt as SkillManagerPort } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { $t as SchemaInferer, H as FsArtifactStore, Pn as ToolResult, Tr as createScriptContext, U as FsMemoryStore, b as BridgeCapabilities, en as ScriptExecutionContext, gr as WebSkillRuntimeDeps, hr as WebSkillRuntime, jn as ToolDefinition, m as ApprovalScope, tn as ScriptExecutor, ut as NetworkPolicy } from "./index-7No55dRb.js";
+import { a as AuditLog, f as CandidateSkill, h as CandidateStore, r as ApprovalPolicy, x as SkillVersionStore } from "./skillVersionStore-S4_HJ_Fl-Cvy9LqVu.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -1,9 +1,9 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-CAJMsLod.js";
-import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot, t as assertSafePathSegment } from "./pathSecurity-B1owvJAF.js";
+import { A as SKILL_MANIFEST_FILE, D as verifySkillSignature, M as buildManifest, O as MANIFEST_EXCLUDED_FILES, P as verifyManifest, b as parseSkillMarkdown, c as unzipWithLimits, f as SKILL_PACK_FILE, k as SKILLS_LOCKFILE, m as parseSkillPackManifest, o as readResponseWithLimit, p as exportSkills, s as resolveArchiveLimits, t as validateSkills, w as readSkillSignature, y as isValidSkillName } from "./skill-WSUDp6A1.js";
+import { a as atomicWriteBinary, o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath, t as assertSafePathSegment } from "./pathSecurity-CirkQwWP.js";
 import { t as assertRemoteUrlAllowed } from "./urlSafety-CiSuCJvX.js";
-import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-DWQlDPbY.js";
-import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-CIuh_Yp0.js";
+import { K as createScriptContext, a as networkPolicyLibSource, c as bridgeError, d as FsMemoryStore, f as WebSkillRuntime, l as parseBridgeRequest, r as normalizeToolError, s as UPLOAD_FILES_UNAVAILABLE, t as CapabilityApproval, u as FsArtifactStore } from "./approval-7CuZS3Z4.js";
+import { f as SPREADSHEET_MIME_TYPE } from "./linkedDocument-CZZOl9cO.js";
 import { n as normalizeToolContent } from "./external-_ZRQe-V9.js";
 import { i as probeLlmCapabilities } from "./env-Bj1MI2Ww.js";
 import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DcTQXSV1.js";
@@ -2469,7 +2469,14 @@ var ApprovalWorkflow = class {
 		const stagingRoot = (await mkdtemp(path.join(tmpdir(), "webskill-candidate-"))).split(path.sep).join("/");
 		try {
 			const skillDir = `${stagingRoot}/${candidate.name}`;
-			for (const file of candidate.files) await atomicWriteText(this.#fs, resolveInsideRoot(skillDir, file.path), file.content);
+			for (const file of candidate.files) {
+				const target = resolveInsideRoot(skillDir, file.path);
+				if (file.binary === void 0) {
+					await atomicWriteText(this.#fs, target, file.content);
+					continue;
+				}
+				await atomicWriteBinary(this.#fs, target, await this.#store.readCandidateBinary(candidate.id, file.binary.file));
+			}
 			const report = await validateSkills(this.#fs, [stagingRoot]);
 			if (!report.ok) {
 				const errors = report.issues.filter((i) => i.severity === "error");

package/dist/{pathSecurity-B1owvJAF.js → pathSecurity-CirkQwWP.js}

@@ -20,6 +20,17 @@ async function atomicWriteText(fs, path, content) {
 	await fs.writeText(tmp, content);
 	await fs.rename(tmp, path);
 }
+/**
+* 原子写二进制：与 `atomicWriteText` 逐字对称，只换写入方法（0.23.0 分册 20）。
+*
+* 临时名必须沿用同一条 `ATOMIC_TMP_SUFFIX_PATTERN` 形状——打包与列举侧靠那条正则
+* 排除中断残留，另起一套命名会让残留的临时文件被打进技能包。
+*/
+async function atomicWriteBinary(fs, path, content) {
+	const tmp = `${path}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+	await fs.writeBinary(tmp, content);
+	await fs.rename(tmp, path);
+}
 
 //#endregion
 //#region ../core/src/fs/pathSecurity.ts
@@ -62,4 +73,4 @@ function resolveInsideRoot(root, relativePath) {
 }
 
 //#endregion
-export { atomicWriteText as a, ATOMIC_TMP_SUFFIX_PATTERN as i, normalizePath as n, isAtomicTempPath as o, resolveInsideRoot as r, assertSafePathSegment as t };
+export { atomicWriteBinary as a, ATOMIC_TMP_SUFFIX_PATTERN as i, normalizePath as n, atomicWriteText as o, resolveInsideRoot as r, isAtomicTempPath as s, assertSafePathSegment as t };

package/dist/{skill-CAJMsLod.js → skill-WSUDp6A1.js}

@@ -1,5 +1,5 @@
 import { n as messageOf, t as WebSkillError } from "./errors-BDZNpC13.js";
-import { a as atomicWriteText, o as isAtomicTempPath, r as resolveInsideRoot } from "./pathSecurity-B1owvJAF.js";
+import { o as atomicWriteText, r as resolveInsideRoot, s as isAtomicTempPath } from "./pathSecurity-CirkQwWP.js";
 import { parse } from "yaml";
 import { Unzip, UnzipInflate, zipSync } from "fflate";
 

package/dist/{skillVersionStore-B24Jjjry-BY1H7Krp.d.ts → skillVersionStore-S4_HJ_Fl-Cvy9LqVu.d.ts}

@@ -1,5 +1,5 @@
-import { K as FileSystemProvider, St as SkillManifest, et as Page, ht as SkillCatalogEntry, tt as PageQuery } from "./types-CpDRZ0rA-BM5FI9oN.js";
-//#region ../governance/dist/skillVersionStore-B24Jjjry.d.ts
+import { K as FileSystemProvider, St as SkillManifest, et as Page, ht as SkillCatalogEntry, tt as PageQuery } from "./types-CpDRZ0rA-BiZBXGm4.js";
+//#region ../governance/dist/skillVersionStore-S4_HJ_Fl.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 /** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
@@ -8,7 +8,29 @@ type CandidateRisk = 'low' | 'medium' | 'high';
 interface CandidateFile {
   path: string;
   kind: 'skill-md' | 'script' | 'reference' | 'asset';
+  /**
+   * 文件正文。二进制条目为空串——字节存在候选自己的旁路里，见 `binary`。
+   * 保持必填 `string`：它的消费方遍布审核 UI、发布链路与测试，
+   * 改成联合类型会让每一处都要分支，而其中大多数只关心文本。
+   */
   content: string;
+  /** 在场即本条目是二进制，正文在旁路文件里（0.23.0 分册 20） */
+  binary?: CandidateBinaryRef;
+}
+/**
+ * 候选二进制旁路里的一份字节（0.23.0 分册 20）。
+ *
+ * 字节**不内嵌进候选 JSON**：`CandidateStore.list()` 会把目录里每一个 JSON 全文读出来解析，
+ * 内嵌等于审批列表每翻一页都要把所有候选的二进制读进内存再做一次 base64 往返。
+ */
+interface CandidateBinaryRef {
+  /** 候选二进制目录（`<id>.files/`）下的文件名，不是路径 */
+  file: string;
+  size: number;
+  /** sha-256，十六进制小写；AC-20.1 的「逐字节相同」靠它判 */
+  sha256: string;
+  /** 来源附件的原始文件名，供审核者辨认（FR-20.10） */
+  sourceName: string;
 }
 interface CandidateSkill {
   id: string;
@@ -97,7 +119,16 @@ declare class CandidateStore {
     /** 治理根下该技能是否仍装着；不注入则 published 一律拒删（见 `remove`） */
     isSkillInstalled?: (name: string) => Promise<boolean>;
   });
-  save(candidate: CandidateSkill): Promise<void>;
+  /**
+   * 存候选。`binaries` 的键是 `CandidateFile.binary.file`，缺省即本候选全是文本。
+   *
+   * 落盘顺序是**先字节、后 JSON**（0.23.0 分册 20 §3.2）：反过来的话，
+   * 崩溃会留下一条指向不存在字节的元数据，而那种候选要到审批安装那一步才暴露——
+   * 正是 FR-20.6 要避免的那类「延迟到审批才失败」。
+   */
+  save(candidate: CandidateSkill, binaries?: ReadonlyMap<string, Uint8Array>): Promise<void>;
+  /** 读回候选旁路里的一份字节（安装时按原样写进技能目录，0.23.0 分册 20 FR-20.8） */
+  readCandidateBinary(id: string, file: string): Promise<Uint8Array>;
   get(id: string): Promise<CandidateSkill>;
   /**
    * 候选（= 审批队列）分页。`status` 是端口参数而不是上层 `.filter()`：
@@ -182,4 +213,4 @@ declare class SkillVersionStore {
   }): Promise<SkillVersion>;
 }
 //#endregion
-export { SkillState as _, AuditLog as a, SkillVersionStore as b, CandidateFile as c, CandidateSkill as d, CandidateSource as f, SKILL_VERSION_PAGE_SIZE as g, CompositeApprovalPolicy as h, AuditEvent as i, CandidatePage as l, CandidateStore as m, ApprovalDecision as n, AuditQueryFilter as o, CandidateStatus as p, ApprovalPolicy as r, CANDIDATE_PAGE_SIZE as s, AlwaysHumanApprovalPolicy as t, CandidateRisk as u, SkillVersion as v, candidateToCatalogEntry as x, SkillVersionPage as y };
+export { candidateToCatalogEntry as S, SKILL_VERSION_PAGE_SIZE as _, AuditLog as a, SkillVersionPage as b, CandidateBinaryRef as c, CandidateRisk as d, CandidateSkill as f, CompositeApprovalPolicy as g, CandidateStore as h, AuditEvent as i, CandidateFile as l, CandidateStatus as m, ApprovalDecision as n, AuditQueryFilter as o, CandidateSource as p, ApprovalPolicy as r, CANDIDATE_PAGE_SIZE as s, AlwaysHumanApprovalPolicy as t, CandidatePage as u, SkillState as v, SkillVersionStore as x, SkillVersion as y };

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-CpDRZ0rA-BM5FI9oN.js";
+import { S as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, v as MemoryStore } from "./types-CpDRZ0rA-BiZBXGm4.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/{types-CpDRZ0rA-BM5FI9oN.d.ts → types-CpDRZ0rA-BiZBXGm4.d.ts}

@@ -416,6 +416,13 @@ declare const isAtomicTempPath: (path: string) => boolean;
  * 对崩溃一致性要求极高的场景在浏览器侧需知悉此前提。
  */
 declare function atomicWriteText(fs: FileSystemProvider, path: string, content: string): Promise<void>;
+/**
+ * 原子写二进制：与 `atomicWriteText` 逐字对称，只换写入方法（0.23.0 分册 20）。
+ *
+ * 临时名必须沿用同一条 `ATOMIC_TMP_SUFFIX_PATTERN` 形状——打包与列举侧靠那条正则
+ * 排除中断残留，另起一套命名会让残留的临时文件被打进技能包。
+ */
+declare function atomicWriteBinary(fs: FileSystemProvider, path: string, content: Uint8Array): Promise<void>;
 //#endregion
 //#region src/fs/pathSecurity.d.ts
 /** 统一分隔符为 `/`，去除 `.` 段与重复分隔符（不解析 `..`） */
@@ -1261,4 +1268,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { PPTX_MIME as $, extractedDocumentFormat as $t, extractSkillCandidate as A, TrustedKey as At, DOCX_MIME as B, assertRemoteUrlAllowed as Bt, UiSpecActionCapability as C, xmlRenderer as Cn, SkillMetadata as Ct, UiSpecSnapshot as D, SkillSource as Dt, UiSpecPatch as E, SkillSignature as Et, BINARY_EXTENSIONS as F, ValidationReport as Ft, FileStat as G, checkDependencyCycles as Gt, DiscoveryResult as H, atomicWriteText as Ht, CatalogRenderer as I, VerifyResult as It, FsTrustedKeyStore as J, computeDigest as Jt, FileSystemProvider as K, checkSkillRules as Kt, ChatAttachmentKind as L, WebSkillError as Lt, ATTACHMENT_TEXT_LIMIT as M, UNTRUSTED_LINE_LIMIT as Mt, ArchiveLimits as N, UiSpecNode as Nt, UiSurfaceActionRequest as O, SkillsLockfile as Ot, AttachmentTextInput as P, UnsignedPolicy as Pt, MemoryFS as Q, exportSkills as Qt, CryptoKeyLike as R, WebSkillErrorCode as Rt, UiBridge as S, verifySkillSignature as Sn, SkillManifest as St, UiSpecEvent as T, SkillReader as Tt, ExtractedDocumentFormat as U, buildCatalog as Ut, DWG_MIME_TYPES as V, assertSafePathSegment as Vt, FILE_MIME_TYPES as W, buildManifest as Wt, JsonSchema as X, detectSkillArchiveShapeFromFs as Xt, IMAGE_MIME_TYPES as Y, detectSkillArchiveShape as Yt, MANIFEST_EXCLUDED_FILES as Z, escapeXml as Zt, LlmToolSpec as _, signaturePayloadBytes as _n, SkillDocument as _t, InteractionOrigin as a, messageOf as an, SKILL_MANIFEST_FILE as at, RenderResultRequest as b, validateSkills as bn, SkillLocation as bt, InteractionResponse as c, parseSkillPackManifest as cn, SKILL_PACK_FILE as ct, LlmContentPart as d, renderAvailableSkillsXml as dn, SignatureVerdict as dt, formatAttachmentText as en, Page as et, LlmMessage as f, renderCatalogJson as fn, SkillArchiveDetection as ft, LlmToolCall as g, signSkill as gn, SkillDiscovery as gt, LlmTokenUsage as h, sanitizeUntrustedLine as hn, SkillCatalogEntry as ht, FormField as i, keyIdOf as in, SKILLS_LOCKFILE as it, ATOMIC_TMP_SUFFIX_PATTERN as j, TrustedKeyStore as jt, UiSurfaceActionResponse as k, TEXT_EXTENSIONS as kt, LlmClient as l, readResponseWithLimit as ln, SKILL_SIGNATURE_FILE as lt, LlmStreamEvent as m, resolveInsideRoot as mn, SkillCatalog as mt, ArtifactStore as n, isValidSkillName as nn, RemoteUrlPolicy as nt, InteractionPolicy as o, normalizePath as on, SKILL_NAME_MAX_LENGTH as ot, LlmResponse as p, resolveArchiveLimits as pn, SkillArchiveShape as pt, FileWriteStream as q, classifyAttachment as qt, ChartSpec as r, jsonRenderer as rn, SIGNATURE_SCHEMA_VERSION as rt, InteractionRequest as s, parseSkillMarkdown as sn, SKILL_NAME_PATTERN as st, Artifact as t, isAtomicTempPath as tn, PageQuery as tt, LlmCompleteInput as u, readSkillSignature as un, SignatureAuditSink as ut, MemoryStore as v, stripArchiveRoot as vn, SkillInstallSource as vt, UiSpecDrafts as w, SkillPackManifest as wt, SkillCandidateMarker as x, verifyManifest as xn, SkillManagerPort as xt, RenderBlock as y, unzipWithLimits as yn, SkillIssue as yt, DEFAULT_ARCHIVE_LIMITS as z, XLSX_MIME as zt };
+export { PPTX_MIME as $, exportSkills as $t, extractSkillCandidate as A, TrustedKey as At, DOCX_MIME as B, assertRemoteUrlAllowed as Bt, UiSpecActionCapability as C, verifySkillSignature as Cn, SkillMetadata as Ct, UiSpecSnapshot as D, SkillSource as Dt, UiSpecPatch as E, SkillSignature as Et, BINARY_EXTENSIONS as F, ValidationReport as Ft, FileStat as G, buildManifest as Gt, DiscoveryResult as H, atomicWriteBinary as Ht, CatalogRenderer as I, VerifyResult as It, FsTrustedKeyStore as J, classifyAttachment as Jt, FileSystemProvider as K, checkDependencyCycles as Kt, ChatAttachmentKind as L, WebSkillError as Lt, ATTACHMENT_TEXT_LIMIT as M, UNTRUSTED_LINE_LIMIT as Mt, ArchiveLimits as N, UiSpecNode as Nt, UiSurfaceActionRequest as O, SkillsLockfile as Ot, AttachmentTextInput as P, UnsignedPolicy as Pt, MemoryFS as Q, escapeXml as Qt, CryptoKeyLike as R, WebSkillErrorCode as Rt, UiBridge as S, verifyManifest as Sn, SkillManifest as St, UiSpecEvent as T, SkillReader as Tt, ExtractedDocumentFormat as U, atomicWriteText as Ut, DWG_MIME_TYPES as V, assertSafePathSegment as Vt, FILE_MIME_TYPES as W, buildCatalog as Wt, JsonSchema as X, detectSkillArchiveShape as Xt, IMAGE_MIME_TYPES as Y, computeDigest as Yt, MANIFEST_EXCLUDED_FILES as Z, detectSkillArchiveShapeFromFs as Zt, LlmToolSpec as _, signSkill as _n, SkillDocument as _t, InteractionOrigin as a, keyIdOf as an, SKILL_MANIFEST_FILE as at, RenderResultRequest as b, unzipWithLimits as bn, SkillLocation as bt, InteractionResponse as c, parseSkillMarkdown as cn, SKILL_PACK_FILE as ct, LlmContentPart as d, readSkillSignature as dn, SignatureVerdict as dt, extractedDocumentFormat as en, Page as et, LlmMessage as f, renderAvailableSkillsXml as fn, SkillArchiveDetection as ft, LlmToolCall as g, sanitizeUntrustedLine as gn, SkillDiscovery as gt, LlmTokenUsage as h, resolveInsideRoot as hn, SkillCatalogEntry as ht, FormField as i, jsonRenderer as in, SKILLS_LOCKFILE as it, ATOMIC_TMP_SUFFIX_PATTERN as j, TrustedKeyStore as jt, UiSurfaceActionResponse as k, TEXT_EXTENSIONS as kt, LlmClient as l, parseSkillPackManifest as ln, SKILL_SIGNATURE_FILE as lt, LlmStreamEvent as m, resolveArchiveLimits as mn, SkillCatalog as mt, ArtifactStore as n, isAtomicTempPath as nn, RemoteUrlPolicy as nt, InteractionPolicy as o, messageOf as on, SKILL_NAME_MAX_LENGTH as ot, LlmResponse as p, renderCatalogJson as pn, SkillArchiveShape as pt, FileWriteStream as q, checkSkillRules as qt, ChartSpec as r, isValidSkillName as rn, SIGNATURE_SCHEMA_VERSION as rt, InteractionRequest as s, normalizePath as sn, SKILL_NAME_PATTERN as st, Artifact as t, formatAttachmentText as tn, PageQuery as tt, LlmCompleteInput as u, readResponseWithLimit as un, SignatureAuditSink as ut, MemoryStore as v, signaturePayloadBytes as vn, SkillInstallSource as vt, UiSpecDrafts as w, xmlRenderer as wn, SkillPackManifest as wt, SkillCandidateMarker as x, validateSkills as xn, SkillManagerPort as xt, RenderBlock as y, stripArchiveRoot as yn, SkillIssue as yt, DEFAULT_ARCHIVE_LIMITS as z, XLSX_MIME as zt };

package/dist/ui-react.d.ts

@@ -1,6 +1,6 @@
-import { C as UiSpecActionCapability, D as UiSpecSnapshot, Nt as UiSpecNode, O as UiSurfaceActionRequest, S as UiBridge, T as UiSpecEvent, b as RenderResultRequest, c as InteractionResponse, k as UiSurfaceActionResponse, s as InteractionRequest, w as UiSpecDrafts } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { P as DocumentSurfacePort } from "./index-YPd8ZSEa.js";
-import { F as InteractionSpecLabels, J as SurfaceFormTexts, Y as SurfaceHostControlTexts, v as ChartFontSizes } from "./index-BiO9_XRk.js";
+import { C as UiSpecActionCapability, D as UiSpecSnapshot, Nt as UiSpecNode, O as UiSurfaceActionRequest, S as UiBridge, T as UiSpecEvent, b as RenderResultRequest, c as InteractionResponse, k as UiSurfaceActionResponse, s as InteractionRequest, w as UiSpecDrafts } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { P as DocumentSurfacePort } from "./index-7No55dRb.js";
+import { F as InteractionSpecLabels, J as SurfaceFormTexts, Y as SurfaceHostControlTexts, v as ChartFontSizes } from "./index-ShvCB5I9.js";
 import { z } from "zod";
 import React$1, { ComponentType, ReactNode } from "react";
 import "react/jsx-runtime";

package/dist/ui-react.js

@@ -258,6 +258,8 @@ var ReactBridgeState = class {
 	streamingRunId = null;
 	streamingText = "";
 	#listeners = /* @__PURE__ */ new Set();
+	/** 待决交互队列，队头即 `pending`（0.23.0 分册 19 FR-19.6） */
+	#queue = [];
 	#resolvers = /* @__PURE__ */ new Map();
 	#surfaceActionResolvers = /* @__PURE__ */ new Map();
 	#processedSurfaceActionNonces = /* @__PURE__ */ new Set();
@@ -301,10 +303,11 @@ var ReactBridgeState = class {
 		for (const listener of [...this.#listeners]) listener();
 	}
 	request(input) {
-		this.pending = input;
-		this.#emit();
 		return new Promise((resolve) => {
 			this.#resolvers.set(input.id, resolve);
+			this.#queue.push(input);
+			this.pending = this.#queue[0] ?? null;
+			this.#emit();
 		});
 	}
 	/** 组件提交/取消回调 */
@@ -312,7 +315,8 @@ var ReactBridgeState = class {
 		const resolver = this.#resolvers.get(response.id);
 		if (!resolver) return;
 		this.#resolvers.delete(response.id);
-		this.pending = null;
+		this.#queue = this.#queue.filter((request) => request.id !== response.id);
+		this.pending = this.#queue[0] ?? null;
 		this.#emit();
 		resolver(response);
 	}
@@ -134885,7 +134889,14 @@ async function probeJsonRenderAvailability() {
 var SpecInteractionChannel = class {
 	/** 宿主注入的界面文案（本地化）；未设时用 FormModel 的英文默认值 */
 	labelsFor = () => ({});
-	#current;
+	/**
+	* 待决交互队列，队头即 `current`（0.23.0 分册 19 FR-19.6）。
+	*
+	* 原本是单槽，新请求到来时把旧请求主动取消。并发子 agent 下那一句
+	* 「正常路径 runtime 串行」不再成立，而主动取消比悬挂还糟：
+	* 子 agent 会收到一个看似正常的 `cancelled: true`，然后把「用户拒绝了」写进结论。
+	*/
+	#queue = [];
 	#listeners = /* @__PURE__ */ new Set();
 	#attached = 0;
 	#failure;
@@ -134895,7 +134906,7 @@ var SpecInteractionChannel = class {
 		return () => this.#listeners.delete(listener);
 	};
 	get current() {
-		return this.#current?.session;
+		return this.#queue[0]?.session;
 	}
 	get isAttached() {
 		return this.#attached > 0;
@@ -134911,26 +134922,22 @@ var SpecInteractionChannel = class {
 		this.#attached = Math.max(0, this.#attached - 1);
 	}
 	request(input) {
-		if (this.#current) this.#settle({
-			id: this.#current.session.request.id,
-			cancelled: true
-		});
 		return new Promise((resolve, reject) => {
 			const session = {
 				request: input,
 				spec: interactionToUiSpec(input, this.labelsFor(input))
 			};
-			this.#current = {
+			this.#queue.push({
 				session,
 				resolve,
 				reject
-			};
+			});
 			this.#emit();
 		});
 	}
 	/** runtime 交互超时/取消：以 cancelled resolve 挂起的 request（防悬挂 + 残留） */
 	cancel(id) {
-		if (this.#current?.session.request.id === id) this.#settle({
+		if (this.#queue.some((entry) => entry.session.request.id === id)) this.#settle({
 			id,
 			cancelled: true
 		});
@@ -134941,14 +134948,14 @@ var SpecInteractionChannel = class {
 	* 本通道只提供入口：裸用本通道的宿主不调就维持原来的 cancelled 语义。
 	*/
 	decline(id) {
-		if (this.#current?.session.request.id === id) this.#settle({
+		if (this.#queue.some((entry) => entry.session.request.id === id)) this.#settle({
 			id,
 			value: false
 		});
 	}
 	/** react 层动作回传：submit 归形提交值，其余意图（cancel）按取消收尾 */
 	handleAction(event) {
-		const pending = this.#current;
+		const pending = this.#queue[0];
 		if (!pending) return;
 		const { request } = pending.session;
 		if (event.intent !== "submit") {
@@ -134967,14 +134974,16 @@ var SpecInteractionChannel = class {
 	/** react 层初始化失败：挂起请求 reject 并记录原因（桥读取后降级 native） */
 	fail(message) {
 		this.#failure = message;
-		const pending = this.#current;
-		this.#current = void 0;
+		const pendings = this.#queue;
+		this.#queue = [];
 		this.#emit();
-		pending?.reject(new Error(message));
+		const error = new Error(message);
+		for (const pending of pendings) pending.reject(error);
 	}
 	#settle(response) {
-		const pending = this.#current;
-		this.#current = void 0;
+		const index = this.#queue.findIndex((entry) => entry.session.request.id === response.id);
+		if (index < 0) return;
+		const [pending] = this.#queue.splice(index, 1);
 		this.#emit();
 		pending?.resolve(response);
 	}

package/dist/ui-vue.d.ts

@@ -1,4 +1,4 @@
-import { S as UiBridge, b as RenderResultRequest, c as InteractionResponse, s as InteractionRequest } from "./types-CpDRZ0rA-BM5FI9oN.js";
+import { S as UiBridge, b as RenderResultRequest, c as InteractionResponse, s as InteractionRequest } from "./types-CpDRZ0rA-BiZBXGm4.js";
 import { PropType } from "vue";
 //#region ../ui-vue/dist/index.d.ts
 //#region src/bridgeState.d.ts

package/dist/ui.d.ts

@@ -1,4 +1,4 @@
-import { Nt as UiSpecNode } from "./types-CpDRZ0rA-BM5FI9oN.js";
-import { Cr as buildRenderResult } from "./index-YPd8ZSEa.js";
-import { $ as UI_PRESET_NAMES, $t as normalizeColumnWidths, A as EvaluateFieldConditionOptions, At as applySuggestion, B as NormalizedColumnWidths, Bt as ensureStyles, C as DEFAULT_INTERACTION_TEXTS, Ct as WEBSKILL_A2UI_CATALOG_ID, D as DOCUMENT_COMPONENTS, Dt as ZodRuntime, E as DESCRIBE_UI_PRESET_TOOL, Et as WebFormBridge, F as InteractionSpecLabels, Ft as collectScopedValues, G as SPEC_TABLE_MIN_COLUMN_VAR, Gt as fromVercelToolResult, H as OpenUiRuntime, Ht as fromA2uiSpecAction, I as InteractionTexts, It as collectSpecActions, J as SurfaceFormTexts, Jt as interactionToUiSpec, K as SPEC_TABLE_MIN_COLUMN_WIDTH, Kt as gaugePercent, L as JsonRenderSpec, Lt as collectValues, M as FieldConditionResult, Mt as chartSpecFromProps, N as FieldOption, Nt as chartToTable, O as DocumentComponentName, Ot as a2uiComponentSchema, P as FormModel, Pt as collectFormScopes, Q as UI_PRESETS, Qt as mountViewerComponents, R as LoadedOpenUiPeers, Rt as createUiCatalogToolSource, S as DEFAULT_CHART_FONT_SIZES, St as ViewerComponentsOptions, T as DEFAULT_SURFACE_HOST_CONTROL_TEXTS, Tt as WEBSKILL_SURFACE_ACTION, U as PLANNED_INCREMENT, Ut as fromA2uiSurfaceAction, V as OpenUiRendererProps, Vt as evaluateFieldCondition, W as RENDER_UI_TOOL, Wt as fromUiSurfaceActionDispatch, X as UI_CATALOG_GROUPS, Xt as loadWebSkillLitCatalog, Y as SurfaceHostControlTexts, Yt as loadOpenUiPeers, Z as UI_CATALOG_PROMPT_BUDGET_BYTES, Zt as mountEchart, _ as CHART_PALETTE, _n as toUiSurfaceActionDispatch, _t as VIEWER_FALLBACK_ATTR, a as A2UI_SURFACE_ACTION, an as renderRenderResult, at as UiComponentDef, b as ColumnWidthsRejection, bn as uiPreset, bt as VercelUiBridge, c as A2uiCatalogDefinition, cn as resolveInteractionTexts, ct as UiPresetName, d as A2uiMessage, dn as shapeInteractionValue, dt as UiSpecIssue, en as normalizeFieldOptions, et as UiActionDef, f as A2uiSpecActionEvent, fn as toA2uiSpecMessages, ft as UiSpecSanitization, g as CATALOG_SCHEMA_MAX, gn as toOpenUiSpecLang, gt as VIEWER_COMPONENT_ATTR, h as CATALOG_PROMPT_MAX, hn as toJsonRenderSpec, ht as VERCEL_INTERACTION_TOOL_NAME, i as A2UI_SPEC_FORM_PATH, in as renderMiniMarkdown, it as UiCatalogToolSourceOptions, j as FieldCondition, jt as buildA2uiCatalogDefinition, k as EchartHandle, kt as a2uiComponentShapes, l as A2uiCatalogHandle, ln as resolveSurfaceFormTexts, lt as UiSpecDegradation, m as CATALOG_BUDGET_STAGE, mn as toEchartsOption, mt as UiSurfaceActionDispatch, n as A2UI_COMMON_TYPES, nn as renderBlocks, nt as UiCatalogInput, o as A2UI_VERSION, on as resolveChartFontSizes, ot as UiFormScope, p as A2uiSpecMessageOptions, pn as toA2uiSurfaceAction, pt as UiSpecValidation, q as SpecColumnMeta, qt as interactionToFormModel, r as A2UI_SPEC_ACTION, rn as renderMiniChart, rt as UiCatalogPromptOptions, s as A2uiCatalogComponent, sn as resolveColumnWidths, st as UiPreset, t as A2UI_BASIC_CATALOG_ID, tn as qualifyFieldName, tt as UiCatalog, u as A2uiComponentShape, un as resolveSurfaceHostControlTexts, ut as UiSpecDegradationCode, v as ChartFontSizes, vn as toVercelToolInvocation, vt as VIEWER_PROPS_ATTR, w as DEFAULT_SURFACE_FORM_TEXTS, wt as WEBSKILL_STYLES_CSS, x as ControlModel, xt as ViewerComponentsHandle, y as CollectedValues, yn as uiCatalog, yt as VercelToolInvocation, z as MAX_CONDITION_DEPTH, zt as defineUiCatalog } from "./index-BiO9_XRk.js";
+import { Nt as UiSpecNode } from "./types-CpDRZ0rA-BiZBXGm4.js";
+import { Cr as buildRenderResult } from "./index-7No55dRb.js";
+import { $ as UI_PRESET_NAMES, $t as normalizeColumnWidths, A as EvaluateFieldConditionOptions, At as applySuggestion, B as NormalizedColumnWidths, Bt as ensureStyles, C as DEFAULT_INTERACTION_TEXTS, Ct as WEBSKILL_A2UI_CATALOG_ID, D as DOCUMENT_COMPONENTS, Dt as ZodRuntime, E as DESCRIBE_UI_PRESET_TOOL, Et as WebFormBridge, F as InteractionSpecLabels, Ft as collectScopedValues, G as SPEC_TABLE_MIN_COLUMN_VAR, Gt as fromVercelToolResult, H as OpenUiRuntime, Ht as fromA2uiSpecAction, I as InteractionTexts, It as collectSpecActions, J as SurfaceFormTexts, Jt as interactionToUiSpec, K as SPEC_TABLE_MIN_COLUMN_WIDTH, Kt as gaugePercent, L as JsonRenderSpec, Lt as collectValues, M as FieldConditionResult, Mt as chartSpecFromProps, N as FieldOption, Nt as chartToTable, O as DocumentComponentName, Ot as a2uiComponentSchema, P as FormModel, Pt as collectFormScopes, Q as UI_PRESETS, Qt as mountViewerComponents, R as LoadedOpenUiPeers, Rt as createUiCatalogToolSource, S as DEFAULT_CHART_FONT_SIZES, St as ViewerComponentsOptions, T as DEFAULT_SURFACE_HOST_CONTROL_TEXTS, Tt as WEBSKILL_SURFACE_ACTION, U as PLANNED_INCREMENT, Ut as fromA2uiSurfaceAction, V as OpenUiRendererProps, Vt as evaluateFieldCondition, W as RENDER_UI_TOOL, Wt as fromUiSurfaceActionDispatch, X as UI_CATALOG_GROUPS, Xt as loadWebSkillLitCatalog, Y as SurfaceHostControlTexts, Yt as loadOpenUiPeers, Z as UI_CATALOG_PROMPT_BUDGET_BYTES, Zt as mountEchart, _ as CHART_PALETTE, _n as toUiSurfaceActionDispatch, _t as VIEWER_FALLBACK_ATTR, a as A2UI_SURFACE_ACTION, an as renderRenderResult, at as UiComponentDef, b as ColumnWidthsRejection, bn as uiPreset, bt as VercelUiBridge, c as A2uiCatalogDefinition, cn as resolveInteractionTexts, ct as UiPresetName, d as A2uiMessage, dn as shapeInteractionValue, dt as UiSpecIssue, en as normalizeFieldOptions, et as UiActionDef, f as A2uiSpecActionEvent, fn as toA2uiSpecMessages, ft as UiSpecSanitization, g as CATALOG_SCHEMA_MAX, gn as toOpenUiSpecLang, gt as VIEWER_COMPONENT_ATTR, h as CATALOG_PROMPT_MAX, hn as toJsonRenderSpec, ht as VERCEL_INTERACTION_TOOL_NAME, i as A2UI_SPEC_FORM_PATH, in as renderMiniMarkdown, it as UiCatalogToolSourceOptions, j as FieldCondition, jt as buildA2uiCatalogDefinition, k as EchartHandle, kt as a2uiComponentShapes, l as A2uiCatalogHandle, ln as resolveSurfaceFormTexts, lt as UiSpecDegradation, m as CATALOG_BUDGET_STAGE, mn as toEchartsOption, mt as UiSurfaceActionDispatch, n as A2UI_COMMON_TYPES, nn as renderBlocks, nt as UiCatalogInput, o as A2UI_VERSION, on as resolveChartFontSizes, ot as UiFormScope, p as A2uiSpecMessageOptions, pn as toA2uiSurfaceAction, pt as UiSpecValidation, q as SpecColumnMeta, qt as interactionToFormModel, r as A2UI_SPEC_ACTION, rn as renderMiniChart, rt as UiCatalogPromptOptions, s as A2uiCatalogComponent, sn as resolveColumnWidths, st as UiPreset, t as A2UI_BASIC_CATALOG_ID, tn as qualifyFieldName, tt as UiCatalog, u as A2uiComponentShape, un as resolveSurfaceHostControlTexts, ut as UiSpecDegradationCode, v as ChartFontSizes, vn as toVercelToolInvocation, vt as VIEWER_PROPS_ATTR, w as DEFAULT_SURFACE_FORM_TEXTS, wt as WEBSKILL_STYLES_CSS, x as ControlModel, xt as ViewerComponentsHandle, y as CollectedValues, yn as uiCatalog, yt as VercelToolInvocation, z as MAX_CONDITION_DEPTH, zt as defineUiCatalog } from "./index-ShvCB5I9.js";
 export { A2UI_BASIC_CATALOG_ID, A2UI_COMMON_TYPES, A2UI_SPEC_ACTION, A2UI_SPEC_FORM_PATH, A2UI_SURFACE_ACTION, A2UI_VERSION, type A2uiCatalogComponent, type A2uiCatalogDefinition, type A2uiCatalogHandle, type A2uiComponentShape, type A2uiMessage, type A2uiSpecActionEvent, type A2uiSpecMessageOptions, CATALOG_BUDGET_STAGE, CATALOG_PROMPT_MAX, CATALOG_SCHEMA_MAX, CHART_PALETTE, type ChartFontSizes, type CollectedValues, type ColumnWidthsRejection, type ControlModel, DEFAULT_CHART_FONT_SIZES, DEFAULT_INTERACTION_TEXTS, DEFAULT_SURFACE_FORM_TEXTS, DEFAULT_SURFACE_HOST_CONTROL_TEXTS, DESCRIBE_UI_PRESET_TOOL, DOCUMENT_COMPONENTS, type DocumentComponentName, type EchartHandle, type EvaluateFieldConditionOptions, type FieldCondition, type FieldConditionResult, type FieldOption, type FormModel, type InteractionSpecLabels, type InteractionTexts, type JsonRenderSpec, type LoadedOpenUiPeers, MAX_CONDITION_DEPTH, type NormalizedColumnWidths, type OpenUiRendererProps, type OpenUiRuntime, PLANNED_INCREMENT, RENDER_UI_TOOL, SPEC_TABLE_MIN_COLUMN_VAR, SPEC_TABLE_MIN_COLUMN_WIDTH, type SpecColumnMeta, type SurfaceFormTexts, type SurfaceHostControlTexts, UI_CATALOG_GROUPS, UI_CATALOG_PROMPT_BUDGET_BYTES, UI_PRESETS, UI_PRESET_NAMES, type UiActionDef, type UiCatalog, type UiCatalogInput, type UiCatalogPromptOptions, type UiCatalogToolSourceOptions, type UiComponentDef, type UiFormScope, type UiPreset, type UiPresetName, type UiSpecDegradation, type UiSpecDegradationCode, type UiSpecIssue, type UiSpecNode, type UiSpecSanitization, type UiSpecValidation, type UiSurfaceActionDispatch, VERCEL_INTERACTION_TOOL_NAME, VIEWER_COMPONENT_ATTR, VIEWER_FALLBACK_ATTR, VIEWER_PROPS_ATTR, type VercelToolInvocation, VercelUiBridge, type ViewerComponentsHandle, type ViewerComponentsOptions, WEBSKILL_A2UI_CATALOG_ID, WEBSKILL_STYLES_CSS, WEBSKILL_SURFACE_ACTION, WebFormBridge, type ZodRuntime, a2uiComponentSchema, a2uiComponentShapes, applySuggestion, buildA2uiCatalogDefinition, buildRenderResult, chartSpecFromProps, chartToTable, collectFormScopes, collectScopedValues, collectSpecActions, collectValues, createUiCatalogToolSource, defineUiCatalog, ensureStyles, evaluateFieldCondition, fromA2uiSpecAction, fromA2uiSurfaceAction, fromUiSurfaceActionDispatch, fromVercelToolResult, gaugePercent, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, mountEchart, mountViewerComponents, normalizeColumnWidths, normalizeFieldOptions, qualifyFieldName, renderBlocks, renderMiniChart, renderMiniMarkdown, renderRenderResult, resolveChartFontSizes, resolveColumnWidths, resolveInteractionTexts, resolveSurfaceFormTexts, resolveSurfaceHostControlTexts, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toEchartsOption, toJsonRenderSpec, toOpenUiSpecLang, toUiSurfaceActionDispatch, toVercelToolInvocation, uiCatalog, uiPreset };

package/dist/{webSkillApi-Dy-Zjv0y.js → webSkillApi-D5VMUnrv.js}

@@ -1,6 +1,6 @@
 import { t as WebSkillError } from "./errors-BDZNpC13.js";
-import { b as parseSkillMarkdown, i as buildCatalog, n as SkillDiscovery, t as validateSkills } from "./skill-CAJMsLod.js";
-import { f as WebSkillRuntime } from "./approval-DWQlDPbY.js";
+import { b as parseSkillMarkdown, i as buildCatalog, n as SkillDiscovery, t as validateSkills } from "./skill-WSUDp6A1.js";
+import { f as WebSkillRuntime } from "./approval-7CuZS3Z4.js";
 
 //#region ../runtime/src/facade/webSkillApi.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webskill/sdk",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "WebSkill — browser/Node agent skill runtime (skills, tools, MCP, governance, UI)",
   "license": "MIT",
   "type": "module",