@webskill/sdk 0.3.0 → 0.5.0

package/dist/{index-8d-oEDww.d.ts → index-vBz_FC9w.d.ts}

@@ -1,5 +1,11 @@
-import { $ as SkillInstallSource, C as UiSurfaceDrafts, I as JsonSchema, M as DiscoveryResult, P as FileSystemProvider, Q as SkillDocument, X as SkillCatalogEntry, Y as SkillCatalog, Z as SkillDiscovery, _ as RenderResultRequest, a as InteractionPolicy, c as LlmClient, d as LlmResponse, f as LlmStreamEvent, g as RenderBlock, gt as WebSkillErrorCode, h as MemoryStore, i as FormField, l as LlmCompleteInput, m as LlmToolSpec, n as ArtifactStore, o as InteractionRequest, pt as ValidationReport, r as ChartSpec, rt as SkillManifest, t as Artifact, u as LlmMessage, v as UiBridge, w as UiSurfaceEvent, x as UiSurfaceActionRequest, y as UiSurface } from "./types-AmKCKJn_-VGabeXK4.js";
+import { $ as SkillDiscovery, B as PageQuery, C as UiSpecEvent, E as UiSurfaceActionRequest, I as JsonSchema, M as DiscoveryResult, P as FileSystemProvider, Q as SkillCatalogEntry, S as UiSpecDrafts, Z as SkillCatalog, _ as MemoryStore, at as SkillManifest, b as UiBridge, d as LlmContentPart, et as SkillDocument, f as LlmMessage, g as LlmToolSpec, gt as ValidationReport, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, v as RenderBlock, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page } from "./types-D_hoCri8-BnNPiZCi.js";
 //#region ../runtime/dist/index.d.ts
+//#region src/llm/parts.d.ts
+/** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
+declare const textParts: (text: string) => LlmContentPart[];
+/** 取出 parts 中的文本（非文本分片在纯文本语境下无法表达，此处按丢弃处理——调用方须先校验） */
+declare const partsToText: (parts: readonly LlmContentPart[] | undefined) => string;
+//#endregion
 //#region src/llm/openAiCompatibleClient.d.ts
 interface OpenAiCompatibleClientConfig {
   baseUrl?: string;
@@ -231,13 +237,100 @@ declare function createScriptContext(deps: {
 //#endregion
 //#region src/lifecycle/types.d.ts
 type RuntimePhase = 'discover' | 'route' | 'activate' | 'prepare' | 'execute' | 'observe' | 'interact' | 'complete' | 'fail';
-interface LifecycleEvent {
-  phase: RuntimePhase;
+/** 路由完成：策略与本次可见的技能候选 */
+interface RouteLifecycleData {
+  strategy: string;
+  candidates: string[];
+}
+/** 技能激活：每激活一个技能一次事件（不是一次性的技能集合） */
+interface ActivateLifecycleData {
+  skillName: string;
+  source: 'local' | 'external';
+  /** 级联激活时的来源技能名（顶层激活没有） */
+  via?: string;
+}
+/**
+ * execute 相位有五种发生场合，用 `kind` 区分。
+ * 0.3.0 时它们各写各的键（`{turn}` / `{resumed}` / `{surfaceAction}` /
+ * `{type:'tool'}` / `{type:'llm.delta'}`），消费方只能靠猜哪个键存在。
+ */
+type ExecuteLifecycleData = {
+  kind: 'turn';
+  turn: number;
+} | {
+  kind: 'tool';
+  status: 'started' | 'completed' | 'failed';
+  name: string;
+  callId: string;
+  args: string;
+  /**
+   * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
+   * “被策略拦下”与“执行出错”在 UI 上是两件事，消费方不应靠解析文案区分。
+   */
+  errorCode?: string;
+} | {
+  kind: 'llm-delta';
+  delta: string;
+} | {
+  kind: 'interaction-resumed';
+  interactionId: string;
+} | {
+  kind: 'surface-action-resumed';
+  surfaceId: string;
+  actionId: string;
+};
+/** interact 相位：脚本发起的交互请求，或声明式 surface 上的动作等待 */
+type InteractLifecycleData = {
+  kind: 'interaction';
+  interactionId: string;
+  interactionType: InteractionRequest['type'];
+} | {
+  kind: 'surface-action';
+  surfaceId: string;
+  actionId: string;
+  nonce: string;
+  resumed: boolean;
+};
+/** complete / fail：终态原因 */
+interface TerminalLifecycleData {
+  reason: RunTerminationReason;
+}
+interface LifecycleEventBase {
   runId: string;
   sessionId: string;
   ts: string;
-  data?: Record<string, unknown>;
 }
+/**
+ * 按 `phase` 判别的联合：每个相位的 `data` 键已穷举，没有 `[k: string]: unknown` 兜底。
+ * 留兜底则新增字段不会让 `pnpm api:check` 变红，快照护栏形同虚设。
+ *
+ * `discover` / `prepare` / `observe` 的 `data?: never` 不是「暂时没有」：
+ * 这三个相位当前没有任何发射点（`RuntimePhase` 保留它们供 `RuntimeRun.phase` 使用），
+ * 将来要带负载就是一次公开表面变更，走正常流程。
+ */
+type LifecycleEvent = (LifecycleEventBase & {
+  phase: 'route';
+  data: RouteLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'activate';
+  data: ActivateLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'execute';
+  data: ExecuteLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'interact';
+  data: InteractLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'complete' | 'fail';
+  data: TerminalLifecycleData;
+}) | (LifecycleEventBase & {
+  phase: 'discover' | 'prepare' | 'observe';
+  data?: never;
+});
+/** 分配式 Omit：直接 `Omit` 会把联合折叠成一个交叉对象，判别性就没了 */
+type DistributiveOmit<T, K extends PropertyKey> = T extends unknown ? Omit<T, K> : never;
+/** 发射方只提供相位与负载，`runId` / `sessionId` / `ts` 由 runtime 填 */
+type LifecycleEventInit = DistributiveOmit<LifecycleEvent, 'runId' | 'sessionId' | 'ts'>;
 interface LifecycleHookContext {
   event: LifecycleEvent;
   run: RuntimeRun;
@@ -247,7 +340,7 @@ type LifecycleHook = (ctx: LifecycleHookContext) => Promise<void | {
 }>;
 //#endregion
 //#region src/trace/types.d.ts
-type TraceEventType = 'skill.routed' | 'skill.activated' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -272,6 +365,8 @@ interface AgentLoopConfig {
   toolResultMaxBytes?: number;
   /** session paramHistory 保留条数上限（默认 50，超出裁最旧） */
   paramHistoryLimit?: number;
+  /** 跨会话表单填写值的字段数上限（默认 100，超出裁最旧） */
+  formValueLimit?: number;
 }
 /** 技能状态拦截 port（治理装配；无注入默认全放行） */
 interface SkillStateGuard {
@@ -279,6 +374,52 @@ interface SkillStateGuard {
   canActivate?(skillName: string): boolean | Promise<boolean>;
   canExecute?(skillName: string): boolean | Promise<boolean>;
 }
+/** 激活期完整性校验结论（D3） */
+interface IntegrityVerdict {
+  ok: boolean;
+  /** 通过时的技能内容摘要（`manifest.integrity.digest`）；进 trace，便于事后对账 */
+  digest?: string;
+  /** 失败原因（英文）：实现方须写清哪些文件不一致，否则宿主无法向用户解释 */
+  reason?: string;
+}
+/**
+ * 激活期完整性校验 port（治理装配；**不注入即关闭**——需求 §3 验收 3 要的开关就是它）。
+ *
+ * 与 `SkillStateGuard` 分开而不是塞进去：后者三个方法返回 `boolean`，语义是
+ * 「状态是否允许」；完整性校验要带回失败原因，且失败要驱动状态变更（→ `quarantined`）。
+ *
+ * 置 `quarantined` 与写审计由**实现方**负责（`SkillStatePolicy.toSkillIntegrityGuard`）：
+ * runtime 不能写治理状态，也不能 import `@webskill/node` 去调 `verifyIntegrity`。
+ */
+interface SkillIntegrityGuard {
+  verifyOnActivate?(skillName: string): Promise<IntegrityVerdict>;
+}
+/** 技能脚本执行失败的上报负载 */
+interface SkillFailureReport {
+  skillName: string;
+  runId: string;
+  /** 结构化错误码（执行器返回 `ok:false` 时取其错误码，抛错时取 `WebSkillError.code`，否则 `TOOL_EXECUTION_FAILED`） */
+  code: string;
+  /** 英文失败说明；上报方须能据此向用户解释，不要传空串 */
+  message: string;
+}
+/**
+ * 技能执行结果上报 port（治理 `SkillStatePolicy.toSkillOutcomeReporter` 装配；**不注入即关闭**）。
+ *
+ * 与 `SkillStateGuard` / `SkillIntegrityGuard` 同形而不合并：那两个是**读**侧
+ * （「状态是否允许」「内容是否可信」），这个是**写**侧——把一次真实失败喂给治理的计数器。
+ *
+ * 0.4.0 F1 之前这条链路是断的：runtime 只把失败记进 memory 的 `skill:{name}` / `stats`，
+ * 而 `SkillStatePolicy` 的失败计数存在 `states.json` 里且没有任何生产调用方，
+ * 于是「失败达阈值自动隔离」在任何真实部署里都不会触发。
+ *
+ * runtime 不能反向依赖 `@webskill/governance`，所以只留 port，装配点在宿主。
+ * 实现方抛出的错误由 runtime 吞掉并降级为 `run.warning`：上报失败不该把一次
+ * 本来只是工具出错的 run 变成崩溃。
+ */
+interface SkillOutcomeReporter {
+  onSkillFailed?(report: SkillFailureReport): Promise<void>;
+}
 interface RuntimeSession {
   id: string;
   createdAt: string;
@@ -323,20 +464,23 @@ declare function extractChartSpec(data: unknown): ChartSpec | undefined;
 declare function buildRenderResult(run: RuntimeRun, output: string, renderBlocks?: RenderBlock[]): RenderResultRequest;
 //#endregion
 //#region src/interaction/surface.d.ts
-/** Validates the allowlisted, data-only shape accepted by a UI surface renderer. @experimental */
-declare function validateUiSurface(value: unknown): UiSurface;
+/** Validates the allowlisted, data-only node tree accepted by a UI surface renderer. @experimental */
+declare function validateUiSpecNode(value: unknown): UiSpecNode;
 /** Validates an individual event in the framework-neutral surface stream. @experimental */
-declare function validateUiSurfaceEvent(value: unknown): UiSurfaceEvent;
+declare function validateUiSpecEvent(value: unknown): UiSpecEvent;
 /** Extracts validated surface stream events from structured tool output. @experimental */
-declare function extractUiSurfaceEvents(data: unknown): UiSurfaceEvent[];
+declare function extractUiSpecEvents(data: unknown): UiSpecEvent[];
 //#endregion
 //#region src/interaction/schemaToForm.d.ts
 /**
  * JsonSchema → 表单模型：按 properties 生成字段，required 标记必填；
  * providedArgs 已有的值作为 defaultValue 预填（表单只为补齐缺失项服务）。
  * type 映射：string→text、number/integer→number、boolean→boolean、enum→select、其余→textarea。
+ * 传入 skillName 时给每个字段带上跨会话稳定的 `fieldKey`（FR-5.6）。
  */
-declare function schemaToForm(schema: JsonSchema, providedArgs?: Record<string, unknown>): FormField[];
+declare function schemaToForm(schema: JsonSchema, providedArgs?: Record<string, unknown>, options?: {
+  skillName?: string;
+}): FormField[];
 //#endregion
 //#region src/facade/types.d.ts
 /**
@@ -409,11 +553,17 @@ interface HookRunnerOptions {
 /** 受控钩子执行器：逐个执行，超时/异常默认降级为 warning，可切严格模式 */
 declare class HookRunner {
   #private;
-  readonly timeoutMs: number;
-  readonly failOnHookError: boolean;
+  /** 宿主可在装配后按 RuntimeConfig 调整（console Settings › Agent Runtime 即经此生效） */
+  timeoutMs: number;
+  failOnHookError: boolean;
   onWarning?: (message: string) => void;
   constructor(options?: HookRunnerOptions);
   register(phase: RuntimePhase | '*', hook: LifecycleHook): this;
+  /**
+   * 已注册钩子的**计数**，按注册相位分组（`'*'` 为全相位钩子）。
+   * 刻意不返回函数引用：那会给 UI 一条调用宿主钩子的执行路径，而面板只需要「装没装上」。
+   */
+  listRegisteredHooks(): ReadonlyMap<RuntimePhase | '*', number>;
   run(phase: RuntimePhase, ctx: LifecycleHookContext): Promise<void>;
 }
 //#endregion
@@ -462,6 +612,36 @@ declare class SerializingMemoryStore implements MemoryStore {
   transaction<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
+//#region src/memory/formValues.d.ts
+/** 跨会话表单填写值在 `user:{userId}` scope 下的 key（FR-5.7） @experimental */
+declare const FORM_VALUES_KEY = "formValues";
+/**
+ * 跨会话稳定的字段标识（FR-5.6）。必须带技能名：
+ * 只有字段名时，两个技能各自的 `email` 会互相串号。
+ * @experimental
+ */
+declare function formFieldKey(skillName: string, fieldName: string): string;
+/** 某个字段最近一次的填写值 @experimental */
+interface FormValueRecord {
+  value: unknown;
+  /** 写入时刻（epoch ms）；超上限裁剪时按它排序 */
+  ts: number;
+}
+/** fieldKey → 最近一次填写值（**只留最近一次**，不是历史序列） @experimental */
+type FormValueMap = Record<string, FormValueRecord>;
+/** memory 里的原始值形状不受控（宿主可能手改文件），逐条过滤而不是整体信任 @experimental */
+declare function readFormValues(raw: unknown): FormValueMap;
+/** 合并本次提交并按上限裁剪最旧（FR-5.12） @experimental */
+declare function putFormValues(current: FormValueMap, updates: FormValueMap, limit: number): FormValueMap;
+/** 清除单个字段；不传 fieldKey 即全部清除（FR-5.11） @experimental */
+declare function clearFormValues(current: FormValueMap, fieldKey?: string): FormValueMap;
+/**
+ * 宿主侧的清除入口（FR-5.11）：设置面板的「清除填写历史」直接调它，
+ * 不必自己知道 scope 与 key 的约定。
+ * @experimental
+ */
+declare function clearStoredFormValues(memory: MemoryStore, userId: string, fieldKey?: string): Promise<void>;
+//#endregion
 //#region src/artifacts/fsArtifactStore.d.ts
 /**
  * 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
@@ -628,6 +808,20 @@ declare class TraceRecorder {
   list(): TraceEvent[];
 }
 //#endregion
+//#region src/trace/todoMarker.d.ts
+interface TodoTraceEvent {
+  type: TraceEventType;
+  data: Record<string, unknown>;
+}
+/**
+ * `$todo` 约定的形状校验：JSON content 的 data 含 `$todo` 键（单条或数组）→ trace 事件。
+ *
+ * 与 `$chart` / `$surface` 同一条既有通道——待办清单的状态机全部在 `@webskill/agent`，
+ * runtime 只认这三个事件类型名，不含任何计划态逻辑。畸形条目忽略不炸。
+ * @experimental
+ */
+declare function extractTodoTraceEvents(data: unknown): TodoTraceEvent[];
+//#endregion
 //#region src/engine/external.d.ts
 /**
  * 外部工具来源（runtime 扩展点，mcp 包实现并插入）。
@@ -636,6 +830,14 @@ declare class TraceRecorder {
 interface ExternalToolSource {
   readonly kind: string;
   listToolSpecs(): Promise<LlmToolSpec[]>;
+  /**
+   * 可选：向 run 的 system 消息追加一段说明（组件 catalog 之类的大段规格）。
+   *
+   * 为什么不塞进工具的 `description`：description 的长度上限与截断行为是
+   * **provider 相关且静默的**——被截断后模型看到的是半份规格，而请求照样成功。
+   * system 消息没有这个隐患，也不必和工具选择耦合在一起。
+   */
+  systemPrompt?(): Promise<string | undefined>;
   canHandle(llmToolName: string): boolean;
   call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
 }
@@ -652,13 +854,13 @@ interface ExternalSkillProvider {
 declare function mergeCatalogEntries(localEntries: SkillCatalogEntry[], providerEntries: SkillCatalogEntry[]): SkillCatalogEntry[];
 //#endregion
 //#region src/engine/snapshot.d.ts
-declare const RUN_SNAPSHOT_SCHEMA_VERSION = 1;
+declare const RUN_SNAPSHOT_SCHEMA_VERSION = 2;
 /**
  * interrupted（等待用户）状态点的可恢复快照（D3 收窄版）
  * @experimental
  */
 interface RunSnapshot {
-  schemaVersion: 1;
+  schemaVersion: 2;
   runId: string;
   sessionId: string;
   userPrompt: string;
@@ -677,11 +879,11 @@ interface RunSnapshot {
   /** 等待中的 surface action；其工具结果已入消息历史，无需重跑工具。 */
   pendingSurfaceAction?: UiSurfaceActionRequest;
   /** 未提交的 surface form values；仅在 interrupted surface action 等待期间保存。 */
-  surfaceDrafts?: UiSurfaceDrafts;
+  surfaceDrafts?: UiSpecDrafts;
   /** $chart 等内容收集的渲染块（0.2.0 起跨 resume 保留；旧快照缺省视为空） */
   renderBlocks?: RenderBlock[];
   /** 已成功渲染的 surface 事件；resume 时按原序重放（旧快照缺省视为空） */
-  surfaceEvents?: UiSurfaceEvent[];
+  surfaceEvents?: UiSpecEvent[];
   /** 交互 id 序号（resume 后续算，避免 id 冲突；旧快照缺省从 0 起） */
   interactionSeq?: number;
   /** Runtime 注入的 surface action nonce 序号（resume 后续算；旧快照缺省从 0 起） */
@@ -700,12 +902,30 @@ interface RunSnapshot {
   };
   snapshotAt: string;
 }
+/**
+ * schema 版本不受支持的快照：文件是好的，但本版本读不了。
+ * 仅用于列表的只读展示，不可恢复。
+ * @experimental
+ */
+interface UnsupportedRunSnapshot {
+  unsupported: true;
+  schemaVersion: number;
+  runId: string;
+  sessionId?: string;
+  userPrompt?: string;
+  snapshotAt: string;
+  interactionExpiresAt?: string;
+}
+/** @experimental */
+type RunSnapshotListEntry = RunSnapshot | UnsupportedRunSnapshot;
+/** @experimental */
+declare function isUnsupportedRunSnapshot(entry: RunSnapshotListEntry): entry is UnsupportedRunSnapshot;
 /** @experimental */
 interface RunSnapshotStore {
   save(snapshot: RunSnapshot): Promise<void>;
   load(runId: string): Promise<RunSnapshot | undefined>;
   delete(runId: string): Promise<void>;
-  list(): Promise<RunSnapshot[]>;
+  list(): Promise<RunSnapshotListEntry[]>;
 }
 /**
  * FileSystemProvider 后端的快照存储：<root>/<runId>.snapshot.json。
@@ -725,7 +945,7 @@ declare class FsRunSnapshotStore implements RunSnapshotStore {
   save(snapshot: RunSnapshot): Promise<void>;
   load(runId: string): Promise<RunSnapshot | undefined>;
   delete(runId: string): Promise<void>;
-  list(): Promise<RunSnapshot[]>;
+  list(): Promise<RunSnapshotListEntry[]>;
 }
 //#endregion
 //#region src/engine/agentLoop.d.ts
@@ -753,6 +973,14 @@ interface AgentLoopDeps {
     enabled: true;
     userId: string;
   };
+  /**
+   * 跨会话表单自动填充（FR-5.7）；**不注入即关闭**，关闭时不查也不写。
+   * 与 `longTerm` 分开：后者存的是技能使用统计，本项存的是用户亲手填的内容，
+   * 两者的开关语义不同（AC-5.7）。
+   */
+  formAutofill?: {
+    userId: string;
+  };
   /** 外部工具来源（mcp 插件等）；specs 在 run 开始时并入每轮 tools */
   externalTools?: ExternalToolSource[];
   /** 外部技能提供者（页面动态技能等） */
@@ -761,6 +989,10 @@ interface AgentLoopDeps {
   catalogFilter?: (entries: SkillCatalogEntry[]) => SkillCatalogEntry[] | Promise<SkillCatalogEntry[]>;
   /** 技能状态拦截（read/activate/execute 三入口一致执行；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
+  /** D3 激活期完整性校验 port（治理装配；无注入即关闭） */
+  skillIntegrityGuard?: SkillIntegrityGuard;
+  /** F1 技能执行失败上报 port（治理装配；无注入即关闭） */
+  skillOutcomeReporter?: SkillOutcomeReporter;
   /** D3：interrupt 点快照存储（无配置则行为与现状完全一致） */
   snapshotStore?: RunSnapshotStore;
 }
@@ -818,6 +1050,10 @@ interface WebSkillRuntimeDeps {
     enabled: true;
     userId: string;
   };
+  /** 跨会话表单自动填充（FR-5.7）；不注入即关闭，关闭时不查也不写 */
+  formAutofill?: {
+    userId: string;
+  };
   /** 外部工具来源（mcp 插件等） */
   externalTools?: ExternalToolSource[];
   /** 外部技能提供者（页面动态技能等）；Catalog 合并同名本地优先 */
@@ -833,6 +1069,10 @@ interface WebSkillRuntimeDeps {
   snapshotStore?: RunSnapshotStore;
   /** 技能状态拦截 port（治理 SkillStatePolicy.toSkillStateGuard 装配；无注入默认全放行） */
   skillStateGuard?: SkillStateGuard;
+  /** D3 激活期完整性校验 port（治理 SkillStatePolicy.toSkillIntegrityGuard 装配；无注入即关闭） */
+  skillIntegrityGuard?: SkillIntegrityGuard;
+  /** F1 技能执行失败上报 port（治理 SkillStatePolicy.toSkillOutcomeReporter 装配；无注入即关闭） */
+  skillOutcomeReporter?: SkillOutcomeReporter;
 }
 /**
  * runtime 门面：组合 discovery / router / agent loop / lifecycle
@@ -866,11 +1106,11 @@ declare class WebSkillRuntime {
     sessionId?: string;
     history?: LlmMessage[];
   }): Promise<RunResult>;
-  /** D3：列出可恢复的 interrupted run（供 UI 展示"未完成任务"） */
-  listInterruptedRuns(): Promise<RunSnapshot[]>;
+  /** D3：列出 interrupted run（供 UI 展示"未完成任务"）；版本不受支持的项带 unsupported 标记 */
+  listInterruptedRuns(): Promise<RunSnapshotListEntry[]>;
   /**
    * D3 恢复 interrupted run：
-   * 不存在 → RUN_SNAPSHOT_NOT_FOUND；schemaVersion 不匹配 → 删除 + RUN_SNAPSHOT_INCOMPATIBLE；
+   * 不存在 → RUN_SNAPSHOT_NOT_FOUND；schema 版本不受支持 → RUN_SNAPSHOT_SCHEMA_UNSUPPORTED（由 store 抛出，不删文件）；
    * 已过期 → interaction-timeout 终态并删快照；否则重建 LoopState 重新发起交互续跑。
    * @experimental
    */
@@ -995,6 +1235,13 @@ interface RunToolCall {
   args?: string;
   /** 执行耗时 ms */
   durationMs?: number;
+  /**
+   * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
+   * 消费方据此区分「被策略拒绝」与「执行出错」，不必解析 message 文案。
+   */
+  errorCode?: string;
+  /** failed 时的错误说明（trace 事件的 message） */
+  errorMessage?: string;
 }
 /**
  * 从 run 的 trace 推导终态工具调用列表。
@@ -1009,6 +1256,8 @@ declare function summarizeToolCalls(run: RuntimeRun): RunToolCall[];
 //#endregion
 //#region src/engine/session.d.ts
 declare const SESSION_SCHEMA_VERSION = 1;
+/** `FsSessionStore` 的缺省页长。缺省值属于实现，不属于调用方——否则「下推」只推了一半 */
+declare const FS_SESSION_PAGE_SIZE = 50;
 /** 会话列表行：不含消息正文，`list()` 的返回元素 */
 interface SessionMeta {
   id: string;
@@ -1033,10 +1282,21 @@ interface SessionRecord<TMessage = unknown> extends SessionMeta {
  * runtime 不能认识它，所以泛型默认 `unknown`（只读消费方直接用默认参数即可）。
  */
 interface SessionStore<TMessage = unknown> {
+  /**
+   * 会话列表页。翻页方向固定为**从新到旧**（聊天 UI 的「加载更多」总是向历史走），
+   * 页内元素仍按 `createdAt` 升序，与 0.3.0 的全量 `list()` 同序。
+   */
   list(options?: {
     includeArchived?: boolean;
-  }): Promise<SessionMeta[]>;
+  } & PageQuery): Promise<Page<SessionMeta>>;
   get(id: string): Promise<SessionRecord<TMessage> | undefined>;
+  /**
+   * 消息分页读。与 `list()` 同方向：无游标时给**最后**一页（最新的 `limit` 条），
+   * `nextCursor` 指向更早的历史。页内元素按时间升序，UI 直接前插即可。
+   *
+   * 存在的理由是 `get()` 拿的是全量：长会话下 UI 只需要末尾几十条。
+   */
+  listMessages(id: string, options?: PageQuery): Promise<Page<TMessage>>;
   create(init?: {
     id?: string;
     title?: string;
@@ -1065,7 +1325,12 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   });
   list(options?: {
     includeArchived?: boolean;
-  }): Promise<SessionMeta[]>;
+  } & PageQuery): Promise<Page<SessionMeta>>;
+  /**
+   * 整文件读后切片。磁盘 I/O 复杂度没有改善（备案 D25），
+   * 但**跨出端口的记录数**已是常量——这正是分页对上层的意义。
+   */
+  listMessages(id: string, options?: PageQuery): Promise<Page<TMessage>>;
   get(id: string): Promise<SessionRecord<TMessage> | undefined>;
   create(init?: {
     id?: string;
@@ -1080,4 +1345,4 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   delete(id: string): Promise<void>;
 }
 //#endregion
-export { RunTraceStore as $, InstalledSkillManifest as A, extractChartSpec as At, READ_SKILL_FILE_TOOL as B, normalizeToolError as Bt, FsRunTraceStore as C, WebSkillApi as Ct, GoogleGenAiClientConfig as D, buildRenderResult as Dt, GoogleGenAiClient as E, bridgeError as Et, NetworkPolicy as F, mergeCatalogEntries as Ft, RunResult as G, toLlmToolSpec as Gt, RUN_SNAPSHOT_SCHEMA_VERSION as H, resolveToolName as Ht, OpenAiCompatibleClient as I, networkPolicyLibSource as It, RunTerminationReason as J, validateUiSurfaceEvent as Jt, RunSnapshot as K, toVercelToolSpecs as Kt, OpenAiCompatibleClientConfig as L, networkUrlHost as Lt, LifecycleHook as M, fromVercelResult as Mt, LifecycleHookContext as N, fromVercelStreamPart as Nt, HookRunner as O, createScriptContext as Ot, LifecycleListener as P, isNetworkAllowed as Pt, RunTraceMetrics as Q, ProgressiveRouter as R, normalizeErrorCode as Rt, FsRunSnapshotStore as S, VercelToolSpec as St, FullDisclosureRouter as T, WebSkillRuntimeDeps as Tt, RUN_TRACE_SCHEMA_VERSION as U, schemaToForm as Ut, READ_SKILL_FILE_TOOL_NAME as V, parseBridgeRequest as Vt, RouteResult as W, summarizeToolCalls as Wt, RunTraceFile as X, RunToolCall as Y, RunTraceFilter as Z, EventBus as _, ToolResult as _t, AgentLoopConfig as a, SESSION_SCHEMA_VERSION as at, FsArtifactStore as b, TraceEventType as bt, AnthropicClientConfig as c, ScriptExecutor as ct, BridgeCapabilities as d, SessionRecord as dt, RunTraceSummary as et, BridgeCapability as f, SessionStore as ft, CapabilityMode as g, ToolResolution as gt, CapabilityApproval as h, ToolDefinition as ht, AgentLoop as i, RuntimeSessionHandle as it, LifecycleEvent as j, extractUiSurfaceEvents as jt, HookRunnerOptions as k, createWebSkillApi as kt, ApprovalDecision as l, SerializingMemoryStore as lt, BridgeResponse as m, SkillStateGuard as mt, ASK_USER_TOOL as n, RuntimeRun as nt, AgentLoopDeps as o, SchemaInferer as ot, BridgeRequest as p, SkillRouter as pt, RunSnapshotStore as q, validateUiSurface as qt, ASK_USER_TOOL_NAME as r, RuntimeSession as rt, AnthropicClient as s, ScriptExecutionContext as st, ASK_USER_INPUT_SCHEMA as t, RuntimePhase as tt, ApprovalScope as u, SessionMeta as ut, ExternalSkillProvider as v, TraceClock as vt, FsSessionStore as w, WebSkillRuntime as wt, FsMemoryStore as x, TraceRecorder as xt, ExternalToolSource as y, TraceEvent as yt, READ_SKILL_FILE_INPUT_SCHEMA as z, normalizeToolContent as zt };
+export { RouteLifecycleData as $, fromVercelResult as $t, FsSessionStore as A, TodoTraceEvent as At, LifecycleEventInit as B, WebSkillApi as Bt, FS_SESSION_PAGE_SIZE as C, SessionStore as Ct, FsMemoryStore as D, SkillRouter as Dt, FsArtifactStore as E, SkillOutcomeReporter as Et, HookRunnerOptions as F, TraceEvent as Ft, OpenAiCompatibleClient as G, clearFormValues as Gt, LifecycleHookContext as H, WebSkillRuntimeDeps as Ht, InstalledSkillManifest as I, TraceEventType as It, READ_SKILL_FILE_INPUT_SCHEMA as J, createWebSkillApi as Jt, OpenAiCompatibleClientConfig as K, clearStoredFormValues as Kt, IntegrityVerdict as L, TraceRecorder as Lt, GoogleGenAiClient as M, ToolResolution as Mt, GoogleGenAiClientConfig as N, ToolResult as Nt, FsRunSnapshotStore as O, SkillStateGuard as Ot, HookRunner as P, TraceClock as Pt, RUN_TRACE_SCHEMA_VERSION as Q, formFieldKey as Qt, InteractLifecycleData as R, UnsupportedRunSnapshot as Rt, FORM_VALUES_KEY as S, SessionRecord as St, FormValueRecord as T, SkillIntegrityGuard as Tt, LifecycleListener as U, bridgeError as Ut, LifecycleHook as V, WebSkillRuntime as Vt, NetworkPolicy as W, buildRenderResult as Wt, READ_SKILL_FILE_TOOL_NAME as X, extractTodoTraceEvents as Xt, READ_SKILL_FILE_TOOL as Y, extractChartSpec as Yt, RUN_SNAPSHOT_SCHEMA_VERSION as Z, extractUiSpecEvents as Zt, CapabilityMode as _, toLlmToolSpec as _n, SchemaInferer as _t, AgentLoop as a, networkUrlHost as an, RunTerminationReason as at, ExternalSkillProvider as b, validateUiSpecNode as bn, SerializingMemoryStore as bt, AnthropicClient as c, normalizeToolError as cn, RunTraceFilter as ct, ApprovalScope as d, putFormValues as dn, RunTraceSummary as dt, fromVercelStreamPart as en, RouteResult as et, BridgeCapabilities as f, readFormValues as fn, RuntimePhase as ft, CapabilityApproval as g, textParts as gn, SESSION_SCHEMA_VERSION as gt, BridgeResponse as h, summarizeToolCalls as hn, RuntimeSessionHandle as ht, ActivateLifecycleData as i, networkPolicyLibSource as in, RunSnapshotStore as it, FullDisclosureRouter as j, ToolDefinition as jt, FsRunTraceStore as k, TerminalLifecycleData as kt, AnthropicClientConfig as l, parseBridgeRequest as ln, RunTraceMetrics as lt, BridgeRequest as m, schemaToForm as mn, RuntimeSession as mt, ASK_USER_TOOL as n, isUnsupportedRunSnapshot as nn, RunSnapshot as nt, AgentLoopConfig as o, normalizeErrorCode as on, RunToolCall as ot, BridgeCapability as p, resolveToolName as pn, RuntimeRun as pt, ProgressiveRouter as q, createScriptContext as qt, ASK_USER_TOOL_NAME as r, mergeCatalogEntries as rn, RunSnapshotListEntry as rt, AgentLoopDeps as s, normalizeToolContent as sn, RunTraceFile as st, ASK_USER_INPUT_SCHEMA as t, isNetworkAllowed as tn, RunResult as tt, ApprovalDecision as u, partsToText as un, RunTraceStore as ut, EventBus as v, toVercelToolSpecs as vn, ScriptExecutionContext as vt, FormValueMap as w, SkillFailureReport as wt, ExternalToolSource as x, SessionMeta as xt, ExecuteLifecycleData as y, validateUiSpecEvent as yn, ScriptExecutor as yt, LifecycleEvent as z, VercelToolSpec as zt };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillInstallSource, A as CryptoKeyLike, At as messageOf, B as SIGNATURE_SCHEMA_VERSION, Bt as signSkill, C as UiSurfaceDrafts, Ct as checkSkillRules, D as UiSurfaceSnapshot, Dt as isValidSkillName, E as UiSurfacePatch, Et as exportSkills, F as FsTrustedKeyStore, Ft as readSkillSignature, G as SKILL_PACK_FILE, Gt as verifySkillSignature, H as SKILL_MANIFEST_FILE, Ht as unzipWithLimits, I as JsonSchema, It as renderAvailableSkillsXml, J as SignatureVerdict, K as SKILL_SIGNATURE_FILE, Kt as xmlRenderer, L as MANIFEST_EXCLUDED_FILES, Lt as renderCatalogJson, M as DiscoveryResult, Mt as parseSkillMarkdown, N as FileStat, Nt as parseSkillPackManifest, O as ArchiveLimits, Ot as jsonRenderer, P as FileSystemProvider, Pt as readResponseWithLimit, Q as SkillDocument, R as MemoryFS, Rt as resolveArchiveLimits, S as UiSurfaceActionResponse, St as checkDependencyCycles, T as UiSurfaceFormField, Tt as escapeXml, U as SKILL_NAME_MAX_LENGTH, Ut as validateSkills, V as SKILLS_LOCKFILE, Vt as signaturePayloadBytes, W as SKILL_NAME_PATTERN, Wt as verifyManifest, X as SkillCatalogEntry, Y as SkillCatalog, Z as SkillDiscovery, _ as RenderResultRequest, _t as assertRemoteUrlAllowed, a as InteractionPolicy, at as SkillPackManifest, b as UiSurfaceAction, bt as buildCatalog, c as LlmClient, ct as SkillSource, d as LlmResponse, dt as TrustedKeyStore, et as SkillIssue, f as LlmStreamEvent, ft as UnsignedPolicy, g as RenderBlock, gt as WebSkillErrorCode, h as MemoryStore, ht as WebSkillError, i as FormField, it as SkillMetadata, j as DEFAULT_ARCHIVE_LIMITS, jt as normalizePath, k as CatalogRenderer, kt as keyIdOf, l as LlmCompleteInput, lt as SkillsLockfile, m as LlmToolSpec, mt as VerifyResult, n as ArtifactStore, nt as SkillManagerPort, o as InteractionRequest, ot as SkillReader, p as LlmToolCall, pt as ValidationReport, q as SignatureAuditSink, r as ChartSpec, rt as SkillManifest, s as InteractionResponse, st as SkillSignature, t as Artifact, tt as SkillLocation, u as LlmMessage, ut as TrustedKey, v as UiBridge, vt as assertSafePathSegment, w as UiSurfaceEvent, wt as computeDigest, x as UiSurfaceActionRequest, xt as buildManifest, y as UiSurface, yt as atomicWriteText, z as RemoteUrlPolicy, zt as resolveInsideRoot } from "./types-AmKCKJn_-VGabeXK4.js";
-import { $ as RunTraceStore, A as InstalledSkillManifest, At as extractChartSpec, B as READ_SKILL_FILE_TOOL, Bt as normalizeToolError, C as FsRunTraceStore, Ct as WebSkillApi, D as GoogleGenAiClientConfig, Dt as buildRenderResult, E as GoogleGenAiClient, Et as bridgeError, F as NetworkPolicy, Ft as mergeCatalogEntries, G as RunResult, Gt as toLlmToolSpec, H as RUN_SNAPSHOT_SCHEMA_VERSION, Ht as resolveToolName, I as OpenAiCompatibleClient, It as networkPolicyLibSource, J as RunTerminationReason, Jt as validateUiSurfaceEvent, K as RunSnapshot, Kt as toVercelToolSpecs, L as OpenAiCompatibleClientConfig, Lt as networkUrlHost, M as LifecycleHook, Mt as fromVercelResult, N as LifecycleHookContext, Nt as fromVercelStreamPart, O as HookRunner, Ot as createScriptContext, P as LifecycleListener, Pt as isNetworkAllowed, Q as RunTraceMetrics, R as ProgressiveRouter, Rt as normalizeErrorCode, S as FsRunSnapshotStore, St as VercelToolSpec, T as FullDisclosureRouter, Tt as WebSkillRuntimeDeps, U as RUN_TRACE_SCHEMA_VERSION, Ut as schemaToForm, V as READ_SKILL_FILE_TOOL_NAME, Vt as parseBridgeRequest, W as RouteResult, Wt as summarizeToolCalls, X as RunTraceFile, Y as RunToolCall, Z as RunTraceFilter, _ as EventBus, _t as ToolResult, a as AgentLoopConfig, at as SESSION_SCHEMA_VERSION, b as FsArtifactStore, bt as TraceEventType, c as AnthropicClientConfig, ct as ScriptExecutor, d as BridgeCapabilities, dt as SessionRecord, et as RunTraceSummary, f as BridgeCapability, ft as SessionStore, g as CapabilityMode, gt as ToolResolution, h as CapabilityApproval, ht as ToolDefinition, i as AgentLoop, it as RuntimeSessionHandle, j as LifecycleEvent, jt as extractUiSurfaceEvents, k as HookRunnerOptions, kt as createWebSkillApi, l as ApprovalDecision, lt as SerializingMemoryStore, m as BridgeResponse, mt as SkillStateGuard, n as ASK_USER_TOOL, nt as RuntimeRun, o as AgentLoopDeps, ot as SchemaInferer, p as BridgeRequest, pt as SkillRouter, q as RunSnapshotStore, qt as validateUiSurface, r as ASK_USER_TOOL_NAME, rt as RuntimeSession, s as AnthropicClient, st as ScriptExecutionContext, t as ASK_USER_INPUT_SCHEMA, tt as RuntimePhase, u as ApprovalScope, ut as SessionMeta, v as ExternalSkillProvider, vt as TraceClock, w as FsSessionStore, wt as WebSkillRuntime, x as FsMemoryStore, xt as TraceRecorder, y as ExternalToolSource, yt as TraceEvent, z as READ_SKILL_FILE_INPUT_SCHEMA, zt as normalizeToolContent } from "./index-8d-oEDww.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExternalSkillProvider, type ExternalToolSource, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillInstallSource, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSurface, type UiSurfaceAction, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UiSurfaceDrafts, type UiSurfaceEvent, type UiSurfaceFormField, type UiSurfacePatch, type UiSurfaceSnapshot, type UnsignedPolicy, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, verifySkillSignature, xmlRenderer };
+import { $ as SkillDiscovery, A as CryptoKeyLike, At as isValidSkillName, B as PageQuery, Bt as renderCatalogJson, C as UiSpecEvent, Ct as buildCatalog, D as UiSurfaceActionResponse, Dt as computeDigest, E as UiSurfaceActionRequest, Et as checkSkillRules, F as FsTrustedKeyStore, Ft as parseSkillMarkdown, G as SKILL_NAME_MAX_LENGTH, Gt as unzipWithLimits, H as SIGNATURE_SCHEMA_VERSION, Ht as resolveInsideRoot, I as JsonSchema, It as parseSkillPackManifest, J as SKILL_SIGNATURE_FILE, Jt as verifySkillSignature, K as SKILL_NAME_PATTERN, Kt as validateSkills, L as MANIFEST_EXCLUDED_FILES, Lt as readResponseWithLimit, M as DiscoveryResult, Mt as keyIdOf, N as FileStat, Nt as messageOf, O as ArchiveLimits, Ot as escapeXml, P as FileSystemProvider, Pt as normalizePath, Q as SkillCatalogEntry, R as MemoryFS, Rt as readSkillSignature, S as UiSpecDrafts, St as atomicWriteText, T as UiSpecSnapshot, Tt as checkDependencyCycles, U as SKILLS_LOCKFILE, Ut as signSkill, V as RemoteUrlPolicy, Vt as resolveArchiveLimits, W as SKILL_MANIFEST_FILE, Wt as signaturePayloadBytes, X as SignatureVerdict, Y as SignatureAuditSink, Yt as xmlRenderer, Z as SkillCatalog, _ as MemoryStore, _t as VerifyResult, a as InteractionOrigin, at as SkillManifest, b as UiBridge, bt as assertRemoteUrlAllowed, c as InteractionResponse, ct as SkillReader, d as LlmContentPart, dt as SkillsLockfile, et as SkillDocument, f as LlmMessage, ft as TrustedKey, g as LlmToolSpec, gt as ValidationReport, h as LlmToolCall, ht as UnsignedPolicy, i as FormField, it as SkillManagerPort, j as DEFAULT_ARCHIVE_LIMITS, jt as jsonRenderer, k as CatalogRenderer, kt as exportSkills, l as LlmClient, lt as SkillSignature, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, nt as SkillIssue, o as InteractionPolicy, ot as SkillMetadata, p as LlmResponse, pt as TrustedKeyStore, q as SKILL_PACK_FILE, qt as verifyManifest, r as ChartSpec, rt as SkillLocation, s as InteractionRequest, st as SkillPackManifest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, ut as SkillSource, v as RenderBlock, vt as WebSkillError, w as UiSpecPatch, wt as buildManifest, x as UiSpecActionCapability, xt as assertSafePathSegment, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page, zt as renderAvailableSkillsXml } from "./types-D_hoCri8-BnNPiZCi.js";
+import { $ as RouteLifecycleData, $t as fromVercelResult, A as FsSessionStore, At as TodoTraceEvent, B as LifecycleEventInit, Bt as WebSkillApi, C as FS_SESSION_PAGE_SIZE, Ct as SessionStore, D as FsMemoryStore, Dt as SkillRouter, E as FsArtifactStore, Et as SkillOutcomeReporter, F as HookRunnerOptions, Ft as TraceEvent, G as OpenAiCompatibleClient, Gt as clearFormValues, H as LifecycleHookContext, Ht as WebSkillRuntimeDeps, I as InstalledSkillManifest, It as TraceEventType, J as READ_SKILL_FILE_INPUT_SCHEMA, Jt as createWebSkillApi, K as OpenAiCompatibleClientConfig, Kt as clearStoredFormValues, L as IntegrityVerdict, Lt as TraceRecorder, M as GoogleGenAiClient, Mt as ToolResolution, N as GoogleGenAiClientConfig, Nt as ToolResult, O as FsRunSnapshotStore, Ot as SkillStateGuard, P as HookRunner, Pt as TraceClock, Q as RUN_TRACE_SCHEMA_VERSION, Qt as formFieldKey, R as InteractLifecycleData, Rt as UnsupportedRunSnapshot, S as FORM_VALUES_KEY, St as SessionRecord, T as FormValueRecord, Tt as SkillIntegrityGuard, U as LifecycleListener, Ut as bridgeError, V as LifecycleHook, Vt as WebSkillRuntime, W as NetworkPolicy, Wt as buildRenderResult, X as READ_SKILL_FILE_TOOL_NAME, Xt as extractTodoTraceEvents, Y as READ_SKILL_FILE_TOOL, Yt as extractChartSpec, Z as RUN_SNAPSHOT_SCHEMA_VERSION, Zt as extractUiSpecEvents, _ as CapabilityMode, _n as toLlmToolSpec, _t as SchemaInferer, a as AgentLoop, an as networkUrlHost, at as RunTerminationReason, b as ExternalSkillProvider, bn as validateUiSpecNode, bt as SerializingMemoryStore, c as AnthropicClient, cn as normalizeToolError, ct as RunTraceFilter, d as ApprovalScope, dn as putFormValues, dt as RunTraceSummary, en as fromVercelStreamPart, et as RouteResult, f as BridgeCapabilities, fn as readFormValues, ft as RuntimePhase, g as CapabilityApproval, gn as textParts, gt as SESSION_SCHEMA_VERSION, h as BridgeResponse, hn as summarizeToolCalls, ht as RuntimeSessionHandle, i as ActivateLifecycleData, in as networkPolicyLibSource, it as RunSnapshotStore, j as FullDisclosureRouter, jt as ToolDefinition, k as FsRunTraceStore, kt as TerminalLifecycleData, l as AnthropicClientConfig, ln as parseBridgeRequest, lt as RunTraceMetrics, m as BridgeRequest, mn as schemaToForm, mt as RuntimeSession, n as ASK_USER_TOOL, nn as isUnsupportedRunSnapshot, nt as RunSnapshot, o as AgentLoopConfig, on as normalizeErrorCode, ot as RunToolCall, p as BridgeCapability, pn as resolveToolName, pt as RuntimeRun, q as ProgressiveRouter, qt as createScriptContext, r as ASK_USER_TOOL_NAME, rn as mergeCatalogEntries, rt as RunSnapshotListEntry, s as AgentLoopDeps, sn as normalizeToolContent, st as RunTraceFile, t as ASK_USER_INPUT_SCHEMA, tn as isNetworkAllowed, tt as RunResult, u as ApprovalDecision, un as partsToText, ut as RunTraceStore, v as EventBus, vn as toVercelToolSpecs, vt as ScriptExecutionContext, w as FormValueMap, wt as SkillFailureReport, x as ExternalToolSource, xt as SessionMeta, y as ExecuteLifecycleData, yn as validateUiSpecEvent, yt as ScriptExecutor, z as LifecycleEvent, zt as VercelToolSpec } from "./index-vBz_FC9w.js";
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FORM_VALUES_KEY, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, type FormValueMap, type FormValueRecord, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type TodoTraceEvent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clearFormValues, clearStoredFormValues, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formFieldKey, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, putFormValues, readFormValues, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,4 +1,5 @@
 import { A as parseSkillMarkdown, B as unzipWithLimits, C as escapeXml, D as keyIdOf, E as jsonRenderer, F as renderCatalogJson, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, P as renderAvailableSkillsXml, R as signSkill, S as computeDigest, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, W as xmlRenderer, _ as atomicWriteText, a as SIGNATURE_SCHEMA_VERSION, b as checkDependencyCycles, c as SKILL_NAME_MAX_LENGTH, d as SKILL_SIGNATURE_FILE, f as SkillDiscovery, g as assertSafePathSegment, h as assertRemoteUrlAllowed, i as MemoryFS, j as parseSkillPackManifest, k as normalizePath, l as SKILL_NAME_PATTERN, m as WebSkillError, n as FsTrustedKeyStore, o as SKILLS_LOCKFILE, p as SkillReader, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as SKILL_PACK_FILE, v as buildCatalog, w as exportSkills, x as checkSkillRules, y as buildManifest, z as signaturePayloadBytes } from "./dist-8oQRa8Xz.js";
-import { A as createWebSkillApi, B as normalizeToolContent, C as SESSION_SCHEMA_VERSION, D as bridgeError, E as WebSkillRuntime, F as isNetworkAllowed, G as summarizeToolCalls, H as parseBridgeRequest, I as mergeCatalogEntries, J as validateUiSurface, K as toLlmToolSpec, L as networkPolicyLibSource, M as extractUiSurfaceEvents, N as fromVercelResult, O as buildRenderResult, P as fromVercelStreamPart, R as networkUrlHost, S as RUN_TRACE_SCHEMA_VERSION, T as TraceRecorder, U as resolveToolName, V as normalizeToolError, W as schemaToForm, Y as validateUiSurfaceEvent, _ as ProgressiveRouter, a as AnthropicClient, b as READ_SKILL_FILE_TOOL_NAME, c as FsArtifactStore, d as FsRunTraceStore, f as FsSessionStore, g as OpenAiCompatibleClient, h as HookRunner, i as AgentLoop, j as extractChartSpec, k as createScriptContext, l as FsMemoryStore, m as GoogleGenAiClient, n as ASK_USER_TOOL, o as CapabilityApproval, p as FullDisclosureRouter, q as toVercelToolSpecs, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsRunSnapshotStore, v as READ_SKILL_FILE_INPUT_SCHEMA, w as SerializingMemoryStore, x as RUN_SNAPSHOT_SCHEMA_VERSION, y as READ_SKILL_FILE_TOOL, z as normalizeErrorCode } from "./dist-rorEJsNi.js";
+import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
+import { $ as schemaToForm, A as buildRenderResult, B as fromVercelStreamPart, C as RUN_SNAPSHOT_SCHEMA_VERSION, D as TraceRecorder, E as SerializingMemoryStore, F as extractChartSpec, G as networkUrlHost, H as isUnsupportedRunSnapshot, I as extractTodoTraceEvents, J as normalizeToolError, K as normalizeErrorCode, L as extractUiSpecEvents, M as clearStoredFormValues, N as createScriptContext, O as WebSkillRuntime, P as createWebSkillApi, Q as resolveToolName, R as formFieldKey, S as READ_SKILL_FILE_TOOL_NAME, T as SESSION_SCHEMA_VERSION, U as mergeCatalogEntries, V as isNetworkAllowed, W as networkPolicyLibSource, X as putFormValues, Y as parseBridgeRequest, Z as readFormValues, _ as HookRunner, a as AnthropicClient, b as READ_SKILL_FILE_INPUT_SCHEMA, c as FORM_VALUES_KEY, d as FsMemoryStore, et as summarizeToolCalls, f as FsRunSnapshotStore, g as GoogleGenAiClient, h as FullDisclosureRouter, i as AgentLoop, it as validateUiSpecNode, j as clearFormValues, k as bridgeError, l as FS_SESSION_PAGE_SIZE, m as FsSessionStore, n as ASK_USER_TOOL, nt as toVercelToolSpecs, o as CapabilityApproval, p as FsRunTraceStore, q as normalizeToolContent, r as ASK_USER_TOOL_NAME, rt as validateUiSpecEvent, s as EventBus, t as ASK_USER_INPUT_SCHEMA, tt as toLlmToolSpec, u as FsArtifactStore, v as OpenAiCompatibleClient, w as RUN_TRACE_SCHEMA_VERSION, x as READ_SKILL_FILE_TOOL, y as ProgressiveRouter, z as fromVercelResult } from "./dist-6C03DShK.js";
 
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSurfaceEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSurface, validateUiSurfaceEvent, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FORM_VALUES_KEY, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clearFormValues, clearStoredFormValues, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formFieldKey, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, putFormValues, readFormValues, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { I as JsonSchema, Q as SkillDocument, X as SkillCatalogEntry, m as LlmToolSpec } from "./types-AmKCKJn_-VGabeXK4.js";
-import { Ft as mergeCatalogEntries, _t as ToolResult, v as ExternalSkillProvider, y as ExternalToolSource } from "./index-8d-oEDww.js";
+import { I as JsonSchema, Q as SkillCatalogEntry, et as SkillDocument, g as LlmToolSpec } from "./types-D_hoCri8-BnNPiZCi.js";
+import { Nt as ToolResult, b as ExternalSkillProvider, rn as mergeCatalogEntries, x as ExternalToolSource } from "./index-vBz_FC9w.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { O as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { B as normalizeToolContent, I as mergeCatalogEntries } from "./dist-rorEJsNi.js";
+import { U as mergeCatalogEntries, q as normalizeToolContent } from "./dist-6C03DShK.js";
 
 //#region ../mcp/dist/index.js
 /**