@webskill/sdk 0.3.0 → 0.4.0

package/dist/{index-8d-oEDww.d.ts → index-DLfR2Y6I.d.ts}

@@ -1,5 +1,11 @@
-import { $ as SkillInstallSource, C as UiSurfaceDrafts, I as JsonSchema, M as DiscoveryResult, P as FileSystemProvider, Q as SkillDocument, X as SkillCatalogEntry, Y as SkillCatalog, Z as SkillDiscovery, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, gt as WebSkillErrorCode, h as MemoryStore, i as FormField, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, pt as ValidationReport, r as ChartSpec, rt as SkillManifest, t as Artifact, u as LlmMessage, v as UiBridge, w as UiSurfaceEvent, x as UiSurfaceActionRequest, y as UiSurface } from "./types-AmKCKJn_-VGabeXK4.js";
+import { $ as SkillDocument, F as JsonSchema, N as FileSystemProvider, Q as SkillDiscovery, R as Page, S as UiSpecEvent, T as UiSurfaceActionRequest, X as SkillCatalog, Z as SkillCatalogEntry, _ as RenderBlock, a as InteractionPolicy, c as LlmClient, d as LlmMessage, et as SkillInstallSource, f as LlmResponse, g as MemoryStore, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, p as LlmStreamEvent, pt as UiSpecNode, r as ChartSpec, t as Artifact, u as LlmContentPart, v as RenderResultRequest, vt as WebSkillErrorCode, x as UiSpecDrafts, y as UiBridge, z as PageQuery } from "./types-7Wcg--Vh-1YlQ4jF9.js";
 //#region ../runtime/dist/index.d.ts
+//#region src/llm/parts.d.ts
+/** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
+declare const textParts: (text: string) => LlmContentPart[];
+/** 取出 parts 中的文本（非文本分片在纯文本语境下无法表达，此处按丢弃处理——调用方须先校验） */
+declare const partsToText: (parts: readonly LlmContentPart[] | undefined) => string;
+//#endregion
 //#region src/llm/openAiCompatibleClient.d.ts
 interface OpenAiCompatibleClientConfig {
   baseUrl?: string;
@@ -231,13 +237,95 @@ declare function createScriptContext(deps: {
 //#endregion
 //#region src/lifecycle/types.d.ts
 type RuntimePhase = 'discover' | 'route' | 'activate' | 'prepare' | 'execute' | 'observe' | 'interact' | 'complete' | 'fail';
-interface LifecycleEvent {
-  phase: RuntimePhase;
+/** 路由完成：策略与本次可见的技能候选 */
+interface RouteLifecycleData {
+  strategy: string;
+  candidates: string[];
+}
+/** 技能激活：每激活一个技能一次事件（不是一次性的技能集合） */
+interface ActivateLifecycleData {
+  skillName: string;
+  source: 'local' | 'external';
+  /** 级联激活时的来源技能名（顶层激活没有） */
+  via?: string;
+}
+/**
+ * execute 相位有五种发生场合，用 `kind` 区分。
+ * 0.3.0 时它们各写各的键（`{turn}` / `{resumed}` / `{surfaceAction}` /
+ * `{type:'tool'}` / `{type:'llm.delta'}`），消费方只能靠猜哪个键存在。
+ */
+type ExecuteLifecycleData = {
+  kind: 'turn';
+  turn: number;
+} | {
+  kind: 'tool';
+  status: 'started' | 'completed' | 'failed';
+  name: string;
+  callId: string;
+  args: string;
+} | {
+  kind: 'llm-delta';
+  delta: string;
+} | {
+  kind: 'interaction-resumed';
+  interactionId: string;
+} | {
+  kind: 'surface-action-resumed';
+  surfaceId: string;
+  actionId: string;
+};
+/** interact 相位：脚本发起的交互请求，或声明式 surface 上的动作等待 */
+type InteractLifecycleData = {
+  kind: 'interaction';
+  interactionId: string;
+  interactionType: InteractionRequest['type'];
+} | {
+  kind: 'surface-action';
+  surfaceId: string;
+  actionId: string;
+  nonce: string;
+  resumed: boolean;
+};
+/** complete / fail：终态原因 */
+interface TerminalLifecycleData {
+  reason: RunTerminationReason;
+}
+interface LifecycleEventBase {
   runId: string;
   sessionId: string;
   ts: string;
-  data?: Record<string, unknown>;
 }
+/**
+ * 按 `phase` 判别的联合：每个相位的 `data` 键已穷举，没有 `[k: string]: unknown` 兜底。
+ * 留兜底则新增字段不会让 `pnpm api:check` 变红，快照护栏形同虚设。
+ *
+ * `discover` / `prepare` / `observe` 的 `data?: never` 不是「暂时没有」：
+ * 这三个相位当前没有任何发射点（`RuntimePhase` 保留它们供 `RuntimeRun.phase` 使用），
+ * 将来要带负载就是一次公开表面变更，走正常流程。
+ */
+type LifecycleEvent = (LifecycleEventBase & {
+  phase: 'route';
+  data: RouteLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'activate';
+  data: ActivateLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'execute';
+  data: ExecuteLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'interact';
+  data: InteractLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'complete' | 'fail';
+  data: TerminalLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'discover' | 'prepare' | 'observe';
+  data?: never;
+});
+/** 分配式 Omit：直接 `Omit` 会把联合折叠成一个交叉对象，判别性就没了 */
+type DistributiveOmit<T, K extends PropertyKey> = T extends unknown ? Omit<T, K> : never;
+/** 发射方只提供相位与负载，`runId` / `sessionId` / `ts` 由 runtime 填 */
+type LifecycleEventInit = DistributiveOmit<LifecycleEvent, 'runId' | 'sessionId' | 'ts'>;
 interface LifecycleHookContext {
   event: LifecycleEvent;
   run: RuntimeRun;
@@ -247,7 +335,7 @@ type LifecycleHook = (ctx: LifecycleHookContext) => Promise<void | {
 }>;
 //#endregion
 //#region src/trace/types.d.ts
-type TraceEventType = 'skill.routed' | 'skill.activated' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -279,6 +367,52 @@ interface SkillStateGuard {
   canActivate?(skillName: string): boolean | Promise<boolean>;
   canExecute?(skillName: string): boolean | Promise<boolean>;
 }
+/** 激活期完整性校验结论（D3） */
+interface IntegrityVerdict {
+  ok: boolean;
+  /** 通过时的技能内容摘要（`manifest.integrity.digest`）；进 trace，便于事后对账 */
+  digest?: string;
+  /** 失败原因（英文）：实现方须写清哪些文件不一致，否则宿主无法向用户解释 */
+  reason?: string;
+}
+/**
+ * 激活期完整性校验 port（治理装配；**不注入即关闭**——需求 §3 验收 3 要的开关就是它）。
+ *
+ * 与 `SkillStateGuard` 分开而不是塞进去：后者三个方法返回 `boolean`，语义是
+ * 「状态是否允许」；完整性校验要带回失败原因，且失败要驱动状态变更（→ `quarantined`）。
+ *
+ * 置 `quarantined` 与写审计由**实现方**负责（`SkillStatePolicy.toSkillIntegrityGuard`）：
+ * runtime 不能写治理状态，也不能 import `@webskill/node` 去调 `verifyIntegrity`。
+ */
+interface SkillIntegrityGuard {
+  verifyOnActivate?(skillName: string): Promise<IntegrityVerdict>;
+}
+/** 技能脚本执行失败的上报负载 */
+interface SkillFailureReport {
+  skillName: string;
+  runId: string;
+  /** 结构化错误码（执行器返回 `ok:false` 时取其错误码，抛错时取 `WebSkillError.code`，否则 `TOOL_EXECUTION_FAILED`） */
+  code: string;
+  /** 英文失败说明；上报方须能据此向用户解释，不要传空串 */
+  message: string;
+}
+/**
+ * 技能执行结果上报 port（治理 `SkillStatePolicy.toSkillOutcomeReporter` 装配；**不注入即关闭**）。
+ *
+ * 与 `SkillStateGuard` / `SkillIntegrityGuard` 同形而不合并：那两个是**读**侧
+ * （「状态是否允许」「内容是否可信」），这个是**写**侧——把一次真实失败喂给治理的计数器。
+ *
+ * 0.4.0 F1 之前这条链路是断的：runtime 只把失败记进 memory 的 `skill:{name}` / `stats`，
+ * 而 `SkillStatePolicy` 的失败计数存在 `states.json` 里且没有任何生产调用方，
+ * 于是「失败达阈值自动隔离」在任何真实部署里都不会触发。
+ *
+ * runtime 不能反向依赖 `@webskill/governance`，所以只留 port，装配点在宿主。
+ * 实现方抛出的错误由 runtime 吞掉并降级为 `run.warning`：上报失败不该把一次
+ * 本来只是工具出错的 run 变成崩溃。
+ */
+interface SkillOutcomeReporter {
+  onSkillFailed?(report: SkillFailureReport): Promise<void>;
+}
 interface RuntimeSession {
   id: string;
   createdAt: string;
@@ -323,12 +457,12 @@ declare function extractChartSpec(data: unknown): ChartSpec | undefined;
 declare function buildRenderResult(run: RuntimeRun, output: string, renderBlocks?: RenderBlock[]): RenderResultRequest;
 //#endregion
 //#region src/interaction/surface.d.ts
-/** Validates the allowlisted, data-only shape accepted by a UI surface renderer. @experimental */
-declare function validateUiSurface(value: unknown): UiSurface;
+/** Validates the allowlisted, data-only node tree accepted by a UI surface renderer. @experimental */
+declare function validateUiSpecNode(value: unknown): UiSpecNode;
 /** Validates an individual event in the framework-neutral surface stream. @experimental */
-declare function validateUiSurfaceEvent(value: unknown): UiSurfaceEvent;
+declare function validateUiSpecEvent(value: unknown): UiSpecEvent;
 /** Extracts validated surface stream events from structured tool output. @experimental */
-declare function extractUiSurfaceEvents(data: unknown): UiSurfaceEvent[];
+declare function extractUiSpecEvents(data: unknown): UiSpecEvent[];
 //#endregion
 //#region src/interaction/schemaToForm.d.ts
 /**
@@ -409,11 +543,17 @@ interface HookRunnerOptions {
 /** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
 declare class HookRunner {
   #private;
-  readonly timeoutMs: number;
-  readonly failOnHookError: boolean;
+  /** 宿主可在装配后按 RuntimeConfig 调整（console Settings › Agent Runtime 即经此生效） */
+  timeoutMs: number;
+  failOnHookError: boolean;
   onWarning?: (message: string) => void;
   constructor(options?: HookRunnerOptions);
   register(phase: RuntimePhase | '*', hook: LifecycleHook): this;
+  /**
+   * 已注册钩子的**计数**，按注册相位分组（`'*'` 为全相位钩子）。
+   * 刻意不返回函数引用：那会给 UI 一条调用宿主钩子的执行路径，而面板只需要「装没装上」。
+   */
+  listRegisteredHooks(): ReadonlyMap<RuntimePhase | '*', number>;
   run(phase: RuntimePhase, ctx: LifecycleHookContext): Promise<void>;
 }
 //#endregion
@@ -636,6 +776,14 @@ declare class TraceRecorder {
 interface ExternalToolSource {
   readonly kind: string;
   listToolSpecs(): Promise<LlmToolSpec[]>;
+  /**
+   * 可选：向 run 的 system 消息追加一段说明（组件 catalog 之类的大段规格）。
+   *
+   * 为什么不塞进工具的 `description`：description 的长度上限与截断行为是
+   * **provider 相关且静默的**——被截断后模型看到的是半份规格，而请求照样成功。
+   * system 消息没有这个隐患，也不必和工具选择耦合在一起。
+   */
+  systemPrompt?(): Promise<string | undefined>;
   canHandle(llmToolName: string): boolean;
   call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
 }
@@ -652,13 +800,13 @@ interface ExternalSkillProvider {
 declare function mergeCatalogEntries(localEntries: SkillCatalogEntry[], providerEntries: SkillCatalogEntry[]): SkillCatalogEntry[];
 //#endregion
 //#region src/engine/snapshot.d.ts
-declare const RUN_SNAPSHOT_SCHEMA_VERSION = 1;
+declare const RUN_SNAPSHOT_SCHEMA_VERSION = 2;
 /**
  * interrupted（等待用户）状态点的可恢复快照（D3 收窄版）
  * @experimental
  */
 interface RunSnapshot {
-  schemaVersion: 1;
+  schemaVersion: 2;
   runId: string;
   sessionId: string;
   userPrompt: string;
@@ -677,11 +825,11 @@ interface RunSnapshot {
   /** 等待中的 surface action；其工具结果已入消息历史，无需重跑工具。 */
   pendingSurfaceAction?: UiSurfaceActionRequest;
   /** 未提交的 surface form values；仅在 interrupted surface action 等待期间保存。 */
-  surfaceDrafts?: UiSurfaceDrafts;
+  surfaceDrafts?: UiSpecDrafts;
   /** $chart 等内容收集的渲染块（0.2.0 起跨 resume 保留；旧快照缺省视为空） */
   renderBlocks?: RenderBlock[];
   /** 已成功渲染的 surface 事件；resume 时按原序重放（旧快照缺省视为空） */
-  surfaceEvents?: UiSurfaceEvent[];
+  surfaceEvents?: UiSpecEvent[];
   /** 交互 id 序号（resume 后续算，避免 id 冲突；旧快照缺省从 0 起） */
   interactionSeq?: number;
   /** Runtime 注入的 surface action nonce 序号（resume 后续算；旧快照缺省从 0 起） */
@@ -700,12 +848,30 @@ interface RunSnapshot {
   };
   snapshotAt: string;
 }
+/**
+ * schema 版本不受支持的快照：文件是好的，但本版本读不了。
+ * 仅用于列表的只读展示，不可恢复。
+ * @experimental
+ */
+interface UnsupportedRunSnapshot {
+  unsupported: true;
+  schemaVersion: number;
+  runId: string;
+  sessionId?: string;
+  userPrompt?: string;
+  snapshotAt: string;
+  interactionExpiresAt?: string;
+}
+/** @experimental */
+type RunSnapshotListEntry = RunSnapshot | UnsupportedRunSnapshot;
+/** @experimental */
+declare function isUnsupportedRunSnapshot(entry: RunSnapshotListEntry): entry is UnsupportedRunSnapshot;
 /** @experimental */
 interface RunSnapshotStore {
   save(snapshot: RunSnapshot): Promise<void>;
   load(runId: string): Promise<RunSnapshot | undefined>;
   delete(runId: string): Promise<void>;
-  list(): Promise<RunSnapshot[]>;
+  list(): Promise<RunSnapshotListEntry[]>;
 }
 /**
  * FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
@@ -725,7 +891,7 @@ declare class FsRunSnapshotStore implements RunSnapshotStore {
   save(snapshot: RunSnapshot): Promise<void>;
   load(runId: string): Promise<RunSnapshot | undefined>;
   delete(runId: string): Promise<void>;
-  list(): Promise<RunSnapshot[]>;
+  list(): Promise<RunSnapshotListEntry[]>;
 }
 //#endregion
 //#region src/engine/agentLoop.d.ts
@@ -761,6 +927,10 @@ interface AgentLoopDeps {
   catalogFilter?: (entries: SkillCatalogEntry[]) => SkillCatalogEntry[] | Promise<SkillCatalogEntry[]>;
   /** 技能状态拦截（read/activate/execute 三入口一致执行；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
+  /** D3 激活期完整性校验 port（治理装配；无注入即关闭） */
+  skillIntegrityGuard?: SkillIntegrityGuard;
+  /** F1 技能执行失败上报 port（治理装配；无注入即关闭） */
+  skillOutcomeReporter?: SkillOutcomeReporter;
   /** D3：interrupt 点快照存储（无配置则行为与现状完全一致） */
   snapshotStore?: RunSnapshotStore;
 }
@@ -833,6 +1003,10 @@ interface WebSkillRuntimeDeps {
   snapshotStore?: RunSnapshotStore;
   /** 技能状态拦截 port（治理 SkillStatePolicy.toSkillStateGuard 装配；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
+  /** D3 激活期完整性校验 port（治理 SkillStatePolicy.toSkillIntegrityGuard 装配；无注入即关闭） */
+  skillIntegrityGuard?: SkillIntegrityGuard;
+  /** F1 技能执行失败上报 port（治理 SkillStatePolicy.toSkillOutcomeReporter 装配；无注入即关闭） */
+  skillOutcomeReporter?: SkillOutcomeReporter;
 }
 /**
  * runtime 门面：组合 discovery / router / agent loop / lifecycle
@@ -866,11 +1040,11 @@ declare class WebSkillRuntime {
     sessionId?: string;
     history?: LlmMessage[];
   }): Promise<RunResult>;
-  /** D3：列出可恢复的 interrupted run（供 UI 展示"未完成任务"） */
-  listInterruptedRuns(): Promise<RunSnapshot[]>;
+  /** D3：列出 interrupted run（供 UI 展示"未完成任务"）；版本不受支持的项带 unsupported 标记 */
+  listInterruptedRuns(): Promise<RunSnapshotListEntry[]>;
   /**
    * D3 恢复 interrupted run：
-   * 不存在 → RUN_SNAPSHOT_NOT_FOUND；schemaVersion 不匹配 → 删除 + RUN_SNAPSHOT_INCOMPATIBLE；
+   * 不存在 → RUN_SNAPSHOT_NOT_FOUND；schema 版本不受支持 → RUN_SNAPSHOT_SCHEMA_UNSUPPORTED（由 store 抛出，不删文件）；
    * 已过期 → interaction-timeout 终态并删快照；否则重建 LoopState 重新发起交互续跑。
    * @experimental
    */
@@ -1009,6 +1183,8 @@ declare function summarizeToolCalls(run: RuntimeRun): RunToolCall[];
 //#endregion
 //#region src/engine/session.d.ts
 declare const SESSION_SCHEMA_VERSION = 1;
+/** `FsSessionStore` 的缺省页长。缺省值属于实现，不属于调用方——否则「下推」只推了一半 */
+declare const FS_SESSION_PAGE_SIZE = 50;
 /** 会话列表行：不含消息正文，`list()` 的返回元素 */
 interface SessionMeta {
   id: string;
@@ -1033,10 +1209,21 @@ interface SessionRecord<TMessage = unknown> extends SessionMeta {
  * runtime 不能认识它，所以泛型默认 `unknown`（只读消费方直接用默认参数即可）。
  */
 interface SessionStore<TMessage = unknown> {
+  /**
+   * 会话列表页。翻页方向固定为**从新到旧**（聊天 UI 的「加载更多」总是向历史走），
+   * 页内元素仍按 `createdAt` 升序，与 0.3.0 的全量 `list()` 同序。
+   */
   list(options?: {
     includeArchived?: boolean;
-  }): Promise<SessionMeta[]>;
+  } & PageQuery): Promise<Page<SessionMeta>>;
   get(id: string): Promise<SessionRecord<TMessage> | undefined>;
+  /**
+   * 消息分页读。与 `list()` 同方向：无游标时给**最后**一页（最新的 `limit` 条），
+   * `nextCursor` 指向更早的历史。页内元素按时间升序，UI 直接前插即可。
+   *
+   * 存在的理由是 `get()` 拿的是全量：长会话下 UI 只需要末尾几十条。
+   */
+  listMessages(id: string, options?: PageQuery): Promise<Page<TMessage>>;
   create(init?: {
     id?: string;
     title?: string;
@@ -1065,7 +1252,12 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   });
   list(options?: {
     includeArchived?: boolean;
-  }): Promise<SessionMeta[]>;
+  } & PageQuery): Promise<Page<SessionMeta>>;
+  /**
+   * 整文件读后切片。磁盘 I/O 复杂度没有改善（备案 D25），
+   * 但**跨出端口的记录数**已是常量——这正是分页对上层的意义。
+   */
+  listMessages(id: string, options?: PageQuery): Promise<Page<TMessage>>;
   get(id: string): Promise<SessionRecord<TMessage> | undefined>;
   create(init?: {
     id?: string;
@@ -1080,4 +1272,4 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   delete(id: string): Promise<void>;
 }
 //#endregion
-export { RunTraceStore as $, InstalledSkillManifest as A, extractChartSpec as At, READ_SKILL_FILE_TOOL as B, normalizeToolError as Bt, FsRunTraceStore as C, WebSkillApi as Ct, GoogleGenAiClientConfig as D, buildRenderResult as Dt, GoogleGenAiClient as E, bridgeError as Et, NetworkPolicy as F, mergeCatalogEntries as Ft, RunResult as G, toLlmToolSpec as Gt, RUN_SNAPSHOT_SCHEMA_VERSION as H, resolveToolName as Ht, OpenAiCompatibleClient as I, networkPolicyLibSource as It, RunTerminationReason as J, validateUiSurfaceEvent as Jt, RunSnapshot as K, toVercelToolSpecs as Kt, OpenAiCompatibleClientConfig as L, networkUrlHost as Lt, LifecycleHook as M, fromVercelResult as Mt, LifecycleHookContext as N, fromVercelStreamPart as Nt, HookRunner as O, createScriptContext as Ot, LifecycleListener as P, isNetworkAllowed as Pt, RunTraceMetrics as Q, ProgressiveRouter as R, normalizeErrorCode as Rt, FsRunSnapshotStore as S, VercelToolSpec as St, FullDisclosureRouter as T, WebSkillRuntimeDeps as Tt, RUN_TRACE_SCHEMA_VERSION as U, schemaToForm as Ut, READ_SKILL_FILE_TOOL_NAME as V, parseBridgeRequest as Vt, RouteResult as W, summarizeToolCalls as Wt, RunTraceFile as X, RunToolCall as Y, RunTraceFilter as Z, EventBus as _, ToolResult as _t, AgentLoopConfig as a, SESSION_SCHEMA_VERSION as at, FsArtifactStore as b, TraceEventType as bt, AnthropicClientConfig as c, ScriptExecutor as ct, BridgeCapabilities as d, SessionRecord as dt, RunTraceSummary as et, BridgeCapability as f, SessionStore as ft, CapabilityMode as g, ToolResolution as gt, CapabilityApproval as h, ToolDefinition as ht, AgentLoop as i, RuntimeSessionHandle as it, LifecycleEvent as j, extractUiSurfaceEvents as jt, HookRunnerOptions as k, createWebSkillApi as kt, ApprovalDecision as l, SerializingMemoryStore as lt, BridgeResponse as m, SkillStateGuard as mt, ASK_USER_TOOL as n, RuntimeRun as nt, AgentLoopDeps as o, SchemaInferer as ot, BridgeRequest as p, SkillRouter as pt, RunSnapshotStore as q, validateUiSurface as qt, ASK_USER_TOOL_NAME as r, RuntimeSession as rt, AnthropicClient as s, ScriptExecutionContext as st, ASK_USER_INPUT_SCHEMA as t, RuntimePhase as tt, ApprovalScope as u, SessionMeta as ut, ExternalSkillProvider as v, TraceClock as vt, FsSessionStore as w, WebSkillRuntime as wt, FsMemoryStore as x, TraceRecorder as xt, ExternalToolSource as y, TraceEvent as yt, READ_SKILL_FILE_INPUT_SCHEMA as z, normalizeToolContent as zt };
+export { RunSnapshot as $, normalizeToolContent as $t, GoogleGenAiClientConfig as A, TraceClock as At, LifecycleListener as B, buildRenderResult as Bt, FsArtifactStore as C, SkillOutcomeReporter as Ct, FsSessionStore as D, ToolDefinition as Dt, FsRunTraceStore as E, TerminalLifecycleData as Et, InteractLifecycleData as F, VercelToolSpec as Ft, READ_SKILL_FILE_INPUT_SCHEMA as G, fromVercelResult as Gt, OpenAiCompatibleClient as H, createWebSkillApi as Ht, LifecycleEvent as I, WebSkillApi as It, RUN_SNAPSHOT_SCHEMA_VERSION as J, isUnsupportedRunSnapshot as Jt, READ_SKILL_FILE_TOOL as K, fromVercelStreamPart as Kt, LifecycleEventInit as L, WebSkillRuntime as Lt, HookRunnerOptions as M, TraceEventType as Mt, InstalledSkillManifest as N, TraceRecorder as Nt, FullDisclosureRouter as O, ToolResolution as Ot, IntegrityVerdict as P, UnsupportedRunSnapshot as Pt, RunResult as Q, normalizeErrorCode as Qt, LifecycleHook as R, WebSkillRuntimeDeps as Rt, FS_SESSION_PAGE_SIZE as S, SkillIntegrityGuard as St, FsRunSnapshotStore as T, SkillStateGuard as Tt, OpenAiCompatibleClientConfig as U, extractChartSpec as Ut, NetworkPolicy as V, createScriptContext as Vt, ProgressiveRouter as W, extractUiSpecEvents as Wt, RouteLifecycleData as X, networkPolicyLibSource as Xt, RUN_TRACE_SCHEMA_VERSION as Y, mergeCatalogEntries as Yt, RouteResult as Z, networkUrlHost as Zt, CapabilityMode as _, SerializingMemoryStore as _t, AgentLoop as a, summarizeToolCalls as an, RunTraceFilter as at, ExternalSkillProvider as b, SessionStore as bt, AnthropicClient as c, toVercelToolSpecs as cn, RunTraceSummary as ct, ApprovalScope as d, RuntimeSession as dt, normalizeToolError as en, RunSnapshotListEntry as et, BridgeCapabilities as f, RuntimeSessionHandle as ft, CapabilityApproval as g, ScriptExecutor as gt, BridgeResponse as h, ScriptExecutionContext as ht, ActivateLifecycleData as i, schemaToForm as in, RunTraceFile as it, HookRunner as j, TraceEvent as jt, GoogleGenAiClient as k, ToolResult as kt, AnthropicClientConfig as l, validateUiSpecEvent as ln, RuntimePhase as lt, BridgeRequest as m, SchemaInferer as mt, ASK_USER_TOOL as n, partsToText as nn, RunTerminationReason as nt, AgentLoopConfig as o, textParts as on, RunTraceMetrics as ot, BridgeCapability as p, SESSION_SCHEMA_VERSION as pt, READ_SKILL_FILE_TOOL_NAME as q, isNetworkAllowed as qt, ASK_USER_TOOL_NAME as r, resolveToolName as rn, RunToolCall as rt, AgentLoopDeps as s, toLlmToolSpec as sn, RunTraceStore as st, ASK_USER_INPUT_SCHEMA as t, parseBridgeRequest as tn, RunSnapshotStore as tt, ApprovalDecision as u, validateUiSpecNode as un, RuntimeRun as ut, EventBus as v, SessionMeta as vt, FsMemoryStore as w, SkillRouter as wt, ExternalToolSource as x, SkillFailureReport as xt, ExecuteLifecycleData as y, SessionRecord as yt, LifecycleHookContext as z, bridgeError as zt };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillInstallSource, A as CryptoKeyLike, At as messageOf, B as SIGNATURE_SCHEMA_VERSION, Bt as signSkill, C as UiSurfaceDrafts, Ct as checkSkillRules, D as UiSurfaceSnapshot, Dt as isValidSkillName, E as UiSurfacePatch, Et as exportSkills, F as FsTrustedKeyStore, Ft as readSkillSignature, G as SKILL_PACK_FILE, Gt as verifySkillSignature, H as SKILL_MANIFEST_FILE, Ht as unzipWithLimits, I as JsonSchema, It as renderAvailableSkillsXml, J as SignatureVerdict, K as SKILL_SIGNATURE_FILE, Kt as xmlRenderer, L as MANIFEST_EXCLUDED_FILES, Lt as renderCatalogJson, M as DiscoveryResult, Mt as parseSkillMarkdown, N as FileStat, Nt as parseSkillPackManifest, O as ArchiveLimits, Ot as jsonRenderer, P as FileSystemProvider, Pt as readResponseWithLimit, Q as SkillDocument, R as MemoryFS, Rt as resolveArchiveLimits, S as UiSurfaceActionResponse, St as checkDependencyCycles, T as UiSurfaceFormField, Tt as escapeXml, U as SKILL_NAME_MAX_LENGTH, Ut as validateSkills, V as SKILLS_LOCKFILE, Vt as signaturePayloadBytes, W as SKILL_NAME_PATTERN, Wt as verifyManifest, X as SkillCatalogEntry, Y as SkillCatalog, Z as SkillDiscovery, _ as RenderResultRequest, _t as assertRemoteUrlAllowed, a as InteractionPolicy, at as SkillPackManifest, b as UiSurfaceAction, bt as buildCatalog, c as LlmClient, ct as SkillSource, d as LlmResponse, dt as TrustedKeyStore, et as SkillIssue, f as LlmStreamEvent, ft as UnsignedPolicy, g as RenderBlock, gt as WebSkillErrorCode, h as MemoryStore, ht as WebSkillError, i as FormField, it as SkillMetadata, j as DEFAULT_ARCHIVE_LIMITS, jt as normalizePath, k as CatalogRenderer, kt as keyIdOf, l as LlmCompleteInput, lt as SkillsLockfile, m as LlmToolSpec, mt as VerifyResult, n as ArtifactStore, nt as SkillManagerPort, o as InteractionRequest, ot as SkillReader, p as LlmToolCall, pt as ValidationReport, q as SignatureAuditSink, r as ChartSpec, rt as SkillManifest, s as InteractionResponse, st as SkillSignature, t as Artifact, tt as SkillLocation, u as LlmMessage, ut as TrustedKey, v as UiBridge, vt as assertSafePathSegment, w as UiSurfaceEvent, wt as computeDigest, x as UiSurfaceActionRequest, xt as buildManifest, y as UiSurface, yt as atomicWriteText, z as RemoteUrlPolicy, zt as resolveInsideRoot } from "./types-AmKCKJn_-VGabeXK4.js";
-import { $ as RunTraceStore, A as InstalledSkillManifest, At as extractChartSpec, B as READ_SKILL_FILE_TOOL, Bt as normalizeToolError, C as FsRunTraceStore, Ct as WebSkillApi, D as GoogleGenAiClientConfig, Dt as buildRenderResult, E as GoogleGenAiClient, Et as bridgeError, F as NetworkPolicy, Ft as mergeCatalogEntries, G as RunResult, Gt as toLlmToolSpec, H as RUN_SNAPSHOT_SCHEMA_VERSION, Ht as resolveToolName, I as OpenAiCompatibleClient, It as networkPolicyLibSource, J as RunTerminationReason, Jt as validateUiSurfaceEvent, K as RunSnapshot, Kt as toVercelToolSpecs, L as OpenAiCompatibleClientConfig, Lt as networkUrlHost, M as LifecycleHook, Mt as fromVercelResult, N as LifecycleHookContext, Nt as fromVercelStreamPart, O as HookRunner, Ot as createScriptContext, P as LifecycleListener, Pt as isNetworkAllowed, Q as RunTraceMetrics, R as ProgressiveRouter, Rt as normalizeErrorCode, S as FsRunSnapshotStore, St as VercelToolSpec, T as FullDisclosureRouter, Tt as WebSkillRuntimeDeps, U as RUN_TRACE_SCHEMA_VERSION, Ut as schemaToForm, V as READ_SKILL_FILE_TOOL_NAME, Vt as parseBridgeRequest, W as RouteResult, Wt as summarizeToolCalls, X as RunTraceFile, Y as RunToolCall, Z as RunTraceFilter, _ as EventBus, _t as ToolResult, a as AgentLoopConfig, at as SESSION_SCHEMA_VERSION, b as FsArtifactStore, bt as TraceEventType, c as AnthropicClientConfig, ct as ScriptExecutor, d as BridgeCapabilities, dt as SessionRecord, et as RunTraceSummary, f as BridgeCapability, ft as SessionStore, g as CapabilityMode, gt as ToolResolution, h as CapabilityApproval, ht as ToolDefinition, i as AgentLoop, it as RuntimeSessionHandle, j as LifecycleEvent, jt as extractUiSurfaceEvents, k as HookRunnerOptions, kt as createWebSkillApi, l as ApprovalDecision, lt as SerializingMemoryStore, m as BridgeResponse, mt as SkillStateGuard, n as ASK_USER_TOOL, nt as RuntimeRun, o as AgentLoopDeps, ot as SchemaInferer, p as BridgeRequest, pt as SkillRouter, q as RunSnapshotStore, qt as validateUiSurface, r as ASK_USER_TOOL_NAME, rt as RuntimeSession, s as AnthropicClient, st as ScriptExecutionContext, t as ASK_USER_INPUT_SCHEMA, tt as RuntimePhase, u as ApprovalScope, ut as SessionMeta, v as ExternalSkillProvider, vt as TraceClock, w as FsSessionStore, wt as WebSkillRuntime, x as FsMemoryStore, xt as TraceRecorder, y as ExternalToolSource, yt as TraceEvent, z as READ_SKILL_FILE_INPUT_SCHEMA, zt as normalizeToolContent } from "./index-8d-oEDww.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSurface, type UiSurfaceAction, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UiSurfaceDrafts, type UiSurfaceEvent, type UiSurfaceFormField, type UiSurfacePatch, type UiSurfaceSnapshot, type UnsignedPolicy, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, verifySkillSignature, xmlRenderer };
+import { $ as SkillDocument, A as DEFAULT_ARCHIVE_LIMITS, At as jsonRenderer, B as RemoteUrlPolicy, Bt as resolveArchiveLimits, C as UiSpecPatch, Ct as buildManifest, D as ArchiveLimits, Dt as escapeXml, E as UiSurfaceActionResponse, Et as computeDigest, F as JsonSchema, Ft as parseSkillPackManifest, G as SKILL_NAME_PATTERN, Gt as validateSkills, H as SKILLS_LOCKFILE, Ht as signSkill, I as MANIFEST_EXCLUDED_FILES, It as readResponseWithLimit, J as SignatureAuditSink, Jt as xmlRenderer, K as SKILL_PACK_FILE, Kt as verifyManifest, L as MemoryFS, Lt as readSkillSignature, M as FileStat, Mt as messageOf, N as FileSystemProvider, Nt as normalizePath, O as CatalogRenderer, Ot as exportSkills, P as FsTrustedKeyStore, Pt as parseSkillMarkdown, Q as SkillDiscovery, R as Page, Rt as renderAvailableSkillsXml, S as UiSpecEvent, St as buildCatalog, T as UiSurfaceActionRequest, Tt as checkSkillRules, U as SKILL_MANIFEST_FILE, Ut as signaturePayloadBytes, V as SIGNATURE_SCHEMA_VERSION, Vt as resolveInsideRoot, W as SKILL_NAME_MAX_LENGTH, Wt as unzipWithLimits, X as SkillCatalog, Y as SignatureVerdict, Z as SkillCatalogEntry, _ as RenderBlock, _t as WebSkillError, a as InteractionPolicy, at as SkillMetadata, b as UiSpecActionCapability, bt as assertSafePathSegment, c as LlmClient, ct as SkillSignature, d as LlmMessage, dt as TrustedKey, et as SkillInstallSource, f as LlmResponse, ft as TrustedKeyStore, g as MemoryStore, gt as VerifyResult, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, jt as keyIdOf, k as CryptoKeyLike, kt as isValidSkillName, l as LlmCompleteInput, lt as SkillSource, m as LlmToolCall, mt as UnsignedPolicy, n as ArtifactStore, nt as SkillLocation, o as InteractionRequest, ot as SkillPackManifest, p as LlmStreamEvent, pt as UiSpecNode, q as SKILL_SIGNATURE_FILE, qt as verifySkillSignature, r as ChartSpec, rt as SkillManagerPort, s as InteractionResponse, st as SkillReader, t as Artifact, tt as SkillIssue, u as LlmContentPart, ut as SkillsLockfile, v as RenderResultRequest, vt as WebSkillErrorCode, w as UiSpecSnapshot, wt as checkDependencyCycles, x as UiSpecDrafts, xt as atomicWriteText, y as UiBridge, yt as assertRemoteUrlAllowed, z as PageQuery, zt as renderCatalogJson } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { $ as RunSnapshot, $t as normalizeToolContent, A as GoogleGenAiClientConfig, At as TraceClock, B as LifecycleListener, Bt as buildRenderResult, C as FsArtifactStore, Ct as SkillOutcomeReporter, D as FsSessionStore, Dt as ToolDefinition, E as FsRunTraceStore, Et as TerminalLifecycleData, F as InteractLifecycleData, Ft as VercelToolSpec, G as READ_SKILL_FILE_INPUT_SCHEMA, Gt as fromVercelResult, H as OpenAiCompatibleClient, Ht as createWebSkillApi, I as LifecycleEvent, It as WebSkillApi, J as RUN_SNAPSHOT_SCHEMA_VERSION, Jt as isUnsupportedRunSnapshot, K as READ_SKILL_FILE_TOOL, Kt as fromVercelStreamPart, L as LifecycleEventInit, Lt as WebSkillRuntime, M as HookRunnerOptions, Mt as TraceEventType, N as InstalledSkillManifest, Nt as TraceRecorder, O as FullDisclosureRouter, Ot as ToolResolution, P as IntegrityVerdict, Pt as UnsupportedRunSnapshot, Q as RunResult, Qt as normalizeErrorCode, R as LifecycleHook, Rt as WebSkillRuntimeDeps, S as FS_SESSION_PAGE_SIZE, St as SkillIntegrityGuard, T as FsRunSnapshotStore, Tt as SkillStateGuard, U as OpenAiCompatibleClientConfig, Ut as extractChartSpec, V as NetworkPolicy, Vt as createScriptContext, W as ProgressiveRouter, Wt as extractUiSpecEvents, X as RouteLifecycleData, Xt as networkPolicyLibSource, Y as RUN_TRACE_SCHEMA_VERSION, Yt as mergeCatalogEntries, Z as RouteResult, Zt as networkUrlHost, _ as CapabilityMode, _t as SerializingMemoryStore, a as AgentLoop, an as summarizeToolCalls, at as RunTraceFilter, b as ExternalSkillProvider, bt as SessionStore, c as AnthropicClient, cn as toVercelToolSpecs, ct as RunTraceSummary, d as ApprovalScope, dt as RuntimeSession, en as normalizeToolError, et as RunSnapshotListEntry, f as BridgeCapabilities, ft as RuntimeSessionHandle, g as CapabilityApproval, gt as ScriptExecutor, h as BridgeResponse, ht as ScriptExecutionContext, i as ActivateLifecycleData, in as schemaToForm, it as RunTraceFile, j as HookRunner, jt as TraceEvent, k as GoogleGenAiClient, kt as ToolResult, l as AnthropicClientConfig, ln as validateUiSpecEvent, lt as RuntimePhase, m as BridgeRequest, mt as SchemaInferer, n as ASK_USER_TOOL, nn as partsToText, nt as RunTerminationReason, o as AgentLoopConfig, on as textParts, ot as RunTraceMetrics, p as BridgeCapability, pt as SESSION_SCHEMA_VERSION, q as READ_SKILL_FILE_TOOL_NAME, qt as isNetworkAllowed, r as ASK_USER_TOOL_NAME, rn as resolveToolName, rt as RunToolCall, s as AgentLoopDeps, sn as toLlmToolSpec, st as RunTraceStore, t as ASK_USER_INPUT_SCHEMA, tn as parseBridgeRequest, tt as RunSnapshotStore, u as ApprovalDecision, un as validateUiSpecNode, ut as RuntimeRun, v as EventBus, vt as SessionMeta, w as FsMemoryStore, wt as SkillRouter, x as ExternalToolSource, xt as SkillFailureReport, y as ExecuteLifecycleData, yt as SessionRecord, z as LifecycleHookContext, zt as bridgeError } from "./index-DLfR2Y6I.js";
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,4 +1,5 @@
 import { A as parseSkillMarkdown, B as unzipWithLimits, C as escapeXml, D as keyIdOf, E as jsonRenderer, F as renderCatalogJson, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, P as renderAvailableSkillsXml, R as signSkill, S as computeDigest, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, W as xmlRenderer, _ as atomicWriteText, a as SIGNATURE_SCHEMA_VERSION, b as checkDependencyCycles, c as SKILL_NAME_MAX_LENGTH, d as SKILL_SIGNATURE_FILE, f as SkillDiscovery, g as assertSafePathSegment, h as assertRemoteUrlAllowed, i as MemoryFS, j as parseSkillPackManifest, k as normalizePath, l as SKILL_NAME_PATTERN, m as WebSkillError, n as FsTrustedKeyStore, o as SKILLS_LOCKFILE, p as SkillReader, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as SKILL_PACK_FILE, v as buildCatalog, w as exportSkills, x as checkSkillRules, y as buildManifest, z as signaturePayloadBytes } from "./dist-8oQRa8Xz.js";
-import { A as createWebSkillApi, B as normalizeToolContent, C as SESSION_SCHEMA_VERSION, D as bridgeError, E as WebSkillRuntime, F as isNetworkAllowed, G as summarizeToolCalls, H as parseBridgeRequest, I as mergeCatalogEntries, J as validateUiSurface, K as toLlmToolSpec, L as networkPolicyLibSource, M as extractUiSurfaceEvents, N as fromVercelResult, O as buildRenderResult, P as fromVercelStreamPart, R as networkUrlHost, S as RUN_TRACE_SCHEMA_VERSION, T as TraceRecorder, U as resolveToolName, V as normalizeToolError, W as schemaToForm, Y as validateUiSurfaceEvent, _ as ProgressiveRouter, a as AnthropicClient, b as READ_SKILL_FILE_TOOL_NAME, c as FsArtifactStore, d as FsRunTraceStore, f as FsSessionStore, g as OpenAiCompatibleClient, h as HookRunner, i as AgentLoop, j as extractChartSpec, k as createScriptContext, l as FsMemoryStore, m as GoogleGenAiClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as FullDisclosureRouter, q as toVercelToolSpecs, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_INPUT_SCHEMA, w as SerializingMemoryStore, x as RUN_SNAPSHOT_SCHEMA_VERSION, y as READ_SKILL_FILE_TOOL, z as normalizeErrorCode } from "./dist-rorEJsNi.js";
+import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
+import { A as createScriptContext, B as networkUrlHost, C as RUN_TRACE_SCHEMA_VERSION, D as WebSkillRuntime, E as TraceRecorder, F as fromVercelStreamPart, G as resolveToolName, H as normalizeToolContent, I as isNetworkAllowed, J as toLlmToolSpec, K as schemaToForm, L as isUnsupportedRunSnapshot, M as extractChartSpec, N as extractUiSpecEvents, O as bridgeError, P as fromVercelResult, R as mergeCatalogEntries, S as RUN_SNAPSHOT_SCHEMA_VERSION, T as SerializingMemoryStore, U as normalizeToolError, V as normalizeErrorCode, W as parseBridgeRequest, X as validateUiSpecEvent, Y as toVercelToolSpecs, Z as validateUiSpecNode, _ as OpenAiCompatibleClient, a as AnthropicClient, b as READ_SKILL_FILE_TOOL, c as FS_SESSION_PAGE_SIZE, d as FsRunSnapshotStore, f as FsRunTraceStore, g as HookRunner, h as GoogleGenAiClient, i as AgentLoop, j as createWebSkillApi, k as buildRenderResult, l as FsArtifactStore, m as FullDisclosureRouter, n as ASK_USER_TOOL, o as CapabilityApproval, p as FsSessionStore, q as summarizeToolCalls, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsMemoryStore, v as ProgressiveRouter, w as SESSION_SCHEMA_VERSION, x as READ_SKILL_FILE_TOOL_NAME, y as READ_SKILL_FILE_INPUT_SCHEMA, z as networkPolicyLibSource } from "./dist-C-Sh0MDU.js";
 
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { I as JsonSchema, Q as SkillDocument, X as SkillCatalogEntry, m as LlmToolSpec } from "./types-AmKCKJn_-VGabeXK4.js";
-import { Ft as mergeCatalogEntries, _t as ToolResult, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-8d-oEDww.js";
+import { $ as SkillDocument, F as JsonSchema, Z as SkillCatalogEntry, h as LlmToolSpec } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { Yt as mergeCatalogEntries, b as ExternalSkillProvider, kt as ToolResult, x as ExternalToolSource } from "./index-DLfR2Y6I.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { O as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { B as normalizeToolContent, I as mergeCatalogEntries } from "./dist-rorEJsNi.js";
+import { H as normalizeToolContent, R as mergeCatalogEntries } from "./dist-C-Sh0MDU.js";
 
 //#region ../mcp/dist/index.js
 /**

package/dist/memoryArtifactStore-BtOeB_hm-tj3fC5ip.js

@@ -0,0 +1,78 @@
+import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
+
+//#region ../runtime/dist/memoryArtifactStore-BtOeB_hm.js
+/** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
+const textParts = (text) => [{
+	type: "text",
+	text
+}];
+/** 取出 parts 中的文本（非文本分片在纯文本语境下无法表达，此处按丢弃处理——调用方须先校验） */
+const partsToText = (parts) => (parts ?? []).reduce((acc, part) => part.type === "text" ? acc + part.text : acc, "");
+const isContentPart = (value) => {
+	if (typeof value !== "object" || value === null) return false;
+	const part = value;
+	if (part["type"] === "text") return typeof part["text"] === "string";
+	if (part["type"] === "image" || part["type"] === "file") return typeof part["mimeType"] === "string" && typeof part["data"] === "string";
+	return false;
+};
+/**
+* 0.4.0 起 `content` 是 parts 数组。旧的 `string` content 一律拒绝，不做静默转换：
+* 转换会让「模型看到的输入」与「历史记录的输入」悄悄分叉。
+*/
+function validateLlmMessages(messages) {
+	messages.forEach((message, index) => {
+		if (typeof message.content === "string") throw new WebSkillError("VALIDATION_FAILED", `messages[${index}].content is a string; since schema version 2 it must be an array of content parts. Legacy data is not converted automatically.`);
+		if (!Array.isArray(message.content) || !message.content.every(isContentPart)) throw new WebSkillError("VALIDATION_FAILED", `messages[${index}].content is not a valid array of content parts`);
+	});
+}
+/** provider 不支持某类分片时的统一拒绝：静默丢弃会让模型回答一个它没看见的附件 */
+function rejectUnsupportedPart(part, provider, where) {
+	throw new WebSkillError("VALIDATION_FAILED", `${provider} does not support ${part.type} content in ${where} messages`);
+}
+/** 内存 ArtifactStore：测试与浏览器降级用；索引随进程生命周期存在 */
+var MemoryArtifactStore = class {
+	#byRun = /* @__PURE__ */ new Map();
+	#seq = 0;
+	async createTextArtifact(input) {
+		return this.#record({
+			runId: input.runId,
+			path: input.path,
+			type: "text",
+			size: new TextEncoder().encode(input.content).length,
+			mimeType: input.mimeType,
+			metadata: input.metadata
+		});
+	}
+	async createBinaryArtifact(input) {
+		return this.#record({
+			runId: input.runId,
+			path: input.path,
+			type: "binary",
+			size: input.content.length,
+			mimeType: input.mimeType,
+			metadata: input.metadata
+		});
+	}
+	async listArtifacts(runId) {
+		return [...this.#byRun.get(runId) ?? []];
+	}
+	#record(input) {
+		const artifact = {
+			id: `art-${++this.#seq}`,
+			runId: input.runId,
+			path: input.path,
+			type: input.type,
+			mimeType: input.mimeType,
+			size: input.size,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			metadata: input.metadata
+		};
+		const list = this.#byRun.get(input.runId) ?? [];
+		list.push(artifact);
+		this.#byRun.set(input.runId, list);
+		return artifact;
+	}
+};
+
+//#endregion
+export { validateLlmMessages as a, textParts as i, partsToText as n, rejectUnsupportedPart as r, MemoryArtifactStore as t };

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { $ as SkillInstallSource, H as SKILL_MANIFEST_FILE, I as JsonSchema, N as FileStat, O as ArchiveLimits, P as FileSystemProvider, V as SKILLS_LOCKFILE, _ as RenderResultRequest, dt as TrustedKeyStore, ft as UnsignedPolicy, lt as SkillsLockfile, mt as VerifyResult, nt as SkillManagerPort, o as InteractionRequest, q as SignatureAuditSink, rt as SkillManifest, s as InteractionResponse, v as UiBridge } from "./types-AmKCKJn_-VGabeXK4.js";
-import { F as NetworkPolicy, Ot as createScriptContext, Tt as WebSkillRuntimeDeps, _t as ToolResult, b as FsArtifactStore, ct as ScriptExecutor, d as BridgeCapabilities, ht as ToolDefinition, ot as SchemaInferer, st as ScriptExecutionContext, u as ApprovalScope, wt as WebSkillRuntime, x as FsMemoryStore } from "./index-8d-oEDww.js";
-import { a as AuditLog, c as CandidateSkill, d as CandidateStore, h as SkillVersionStore, r as ApprovalPolicy } from "./skillVersionStore-DOEI9ptb-BxbYL70B.js";
+import { D as ArchiveLimits, F as JsonSchema, H as SKILLS_LOCKFILE, J as SignatureAuditSink, M as FileStat, N as FileSystemProvider, U as SKILL_MANIFEST_FILE, et as SkillInstallSource, ft as TrustedKeyStore, gt as VerifyResult, it as SkillManifest, mt as UnsignedPolicy, o as InteractionRequest, rt as SkillManagerPort, s as InteractionResponse, ut as SkillsLockfile, v as RenderResultRequest, y as UiBridge } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { C as FsArtifactStore, Dt as ToolDefinition, Lt as WebSkillRuntime, Rt as WebSkillRuntimeDeps, V as NetworkPolicy, Vt as createScriptContext, d as ApprovalScope, f as BridgeCapabilities, gt as ScriptExecutor, ht as ScriptExecutionContext, kt as ToolResult, mt as SchemaInferer, w as FsMemoryStore } from "./index-DLfR2Y6I.js";
+import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-uyefLPR1-DXOzbksv.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-BPUBZCwJ-4jat_SVG.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
@@ -217,7 +217,11 @@ declare class SkillManager implements SkillManagerPort {
      */
     signature?: {
       trustedKeys?: TrustedKeyStore;
-      /** 未签名包的处置，默认 warn */
+      /**
+       * 未签名包的处置，默认 `warn`（0.4.0 D2 复核后维持）。
+       * 收成 `deny` 必须同时注入 `trustedKeys`：空信任库 + deny 的接受集为空，
+       * 任何包都装不上。
+       */
       unsigned?: UnsignedPolicy;
       /** 验签结论落审计（governance 的 FsAuditLog 结构上兼容） */
       audit?: SignatureAuditSink;

package/dist/node.js

@@ -1,5 +1,5 @@
 import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
-import { B as normalizeToolContent, D as bridgeError, E as WebSkillRuntime, H as parseBridgeRequest, L as networkPolicyLibSource, V as normalizeToolError, c as FsArtifactStore, k as createScriptContext, l as FsMemoryStore, o as CapabilityApproval } from "./dist-rorEJsNi.js";
+import { A as createScriptContext, D as WebSkillRuntime, H as normalizeToolContent, O as bridgeError, U as normalizeToolError, W as parseBridgeRequest, l as FsArtifactStore, o as CapabilityApproval, u as FsMemoryStore, z as networkPolicyLibSource } from "./dist-C-Sh0MDU.js";
 import { i as probeLlmCapabilities } from "./env--jJB-TSX-04klhTYi.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";