@webskill/sdk 0.4.0 → 0.5.0

package/dist/index-D_7ZZjkl.d.ts

@@ -0,0 +1,411 @@
+import { a as InteractionOrigin, b as UiBridge } from "./types-D_hoCri8-BnNPiZCi.js";
+import { x as ExternalToolSource } from "./index-vBz_FC9w.js";
+//#region ../agent/dist/index.d.ts
+//#region src/todo/types.d.ts
+/** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
+type TodoStatus = 'pending' | 'in-progress' | 'completed';
+interface TodoItem {
+  id: string;
+  title: string;
+  status: TodoStatus;
+  /** 委派给子 agent 时填入（串行委派批次使用） */
+  delegatedTo?: string;
+}
+interface TodoList {
+  readonly items: readonly TodoItem[];
+}
+/**
+ * 清单变更事件（FR-3.3）。
+ * 走既有的运行事件通道下发：工具结果里的 `$todo` 标记 → runtime 记 trace →
+ * console 读同一份 trace 文件重建时间线，不新建通道。
+ */
+type TodoEvent = {
+  type: 'todo.created';
+  items: readonly TodoItem[];
+} | {
+  type: 'todo.updated';
+  item: TodoItem;
+} | {
+  type: 'todo.cleared';
+};
+type TodoListener = (event: TodoEvent) => void;
+//#endregion
+//#region src/todo/store.d.ts
+/**
+ * 待办清单状态容器（FR-3.1 / FR-3.2 / FR-3.3）。
+ *
+ * 单一进行中约束在**容器内部**强制，而不是靠提示词约束模型：
+ * 模型偶尔会同时标记多条，UI 上出现两个「进行中」时用户无法判断实际进度。
+ * 这里把 `in-progress` 当成互斥资源，置位即降级其余条目。
+ */
+declare class TodoStore {
+  #private;
+  snapshot(): TodoList;
+  /** 订阅变更；返回退订函数 */
+  subscribe(listener: TodoListener): () => void;
+  /** 整表替换（模型每次给出完整清单，避免第二套增量协议）。多条 in-progress 时只保留第一条 */
+  create(items: readonly TodoItem[]): TodoList;
+  /**
+   * 更新单条。置为 `in-progress` 时其余进行中条目降级为 `pending`，
+   * 每条降级各发一次 `todo.updated`，事件序列与状态变化一一对应。
+   */
+  update(id: string, patch: {
+    status?: TodoStatus;
+    title?: string;
+    delegatedTo?: string;
+  }): TodoList;
+  clear(): void;
+}
+//#endregion
+//#region src/todo/toolSource.d.ts
+declare const MANAGE_TODO_TOOL = "manage_todo";
+interface TodoToolSourceOptions {
+  /** 复用宿主已持有的容器（chatbot 用它驱动消息流内的清单面板）；缺省新建 */
+  store?: TodoStore;
+}
+/**
+ * 把待办清单接到既有的工具协议上（设计 03 §4 红线：不引入第二个循环、
+ * 不引入第二套工具协议、包内不含执行器）。
+ *
+ * 变更经工具结果的 `$todo` 标记回传，runtime 据此记 trace——
+ * 与 `$chart` / `$surface` 同一条既有通道，console 读同一份 trace 文件重建时间线。
+ */
+declare function createTodoToolSource(options?: TodoToolSourceOptions): ExternalToolSource & {
+  store: TodoStore;
+};
+//#endregion
+//#region src/prompts/todo.d.ts
+/**
+ * 待办清单提示词片段（FR-3.4）。
+ *
+ * 体积约束（设计 03 §8）：开启后常驻——每次请求都带，所以必须比生成式 UI 的
+ * ~14 KB catalog 小一个数量级。这里刻意只给规则，不给示例对话。
+ */
+declare const TODO_SYSTEM_PROMPT: string;
+//#endregion
+//#region src/skillGeneration/types.d.ts
+/** 生成产物（设计 02 §1.2）：SKILL.md 全文 + 附带脚本/引用文件 */
+interface GeneratedSkillDraft {
+  name: string;
+  description: string;
+  /** SKILL.md 全文，含 frontmatter */
+  content: string;
+  files?: readonly {
+    path: string;
+    content: string;
+  }[];
+}
+/**
+ * 候选收货端口。实现由宿主注入——`@webskill/agent` 不依赖 `@webskill/governance`
+ * （治理层要求宿主提供治理根与审计存储，是可选层）。
+ * `@webskill/governance` 的 `createCandidateSink()` 是现成实现。
+ */
+interface SkillCandidateSink {
+  submit(input: {
+    draft: GeneratedSkillDraft;
+    /** 触发生成的会话（审计留痕与 console 溯源用） */
+    sessionId?: string;
+    /** 用户确认的时刻（FR-9.7 要求审计能查到确认事实） */
+    confirmedAt: string;
+  }): Promise<{
+    id: string;
+  }>;
+}
+/** 频率约束（设计 02 §1.6） */
+interface SkillGenerationPolicy {
+  /** 单次会话内的生成次数上限，默认 3 */
+  maxPerSession?: number;
+}
+type SkillGenerationOutcome = {
+  status: 'submitted';
+  candidateId: string;
+  name: string;
+} | {
+  status: 'declined';
+};
+//#endregion
+//#region src/skillGeneration/generator.d.ts
+interface SkillGeneratorOptions {
+  /** 确认交互走既有的 UiBridge——不新造交互通道（设计 02 §1.4） */
+  ui: UiBridge;
+  /** 缺省表示宿主没接治理层，调用时报 SKILL_GENERATION_DISABLED */
+  sink?: SkillCandidateSink;
+  policy?: SkillGenerationPolicy;
+  /** 生成所属会话，写入审计与候选 metadata */
+  sessionId?: () => string | undefined;
+  now?: () => Date;
+}
+/**
+ * 技能自动生成策略。生成动作是策略而不是内核：它不进入 `AgentLoop`，
+ * 而是经既有的 `ExternalToolSource` 扩展点接入（设计 02 §0）。
+ *
+ * 固定顺序：生成 → 校验 → 确认 → 提交。任何一步不通过都不产生候选。
+ * @experimental
+ */
+declare class SkillGenerator {
+  #private;
+  constructor(options: SkillGeneratorOptions);
+  /** 本会话剩余的生成次数 */
+  get remaining(): number;
+  generate(draft: GeneratedSkillDraft): Promise<SkillGenerationOutcome>;
+}
+//#endregion
+//#region src/skillGeneration/toolSource.d.ts
+declare const GENERATE_SKILL_TOOL = "generate_skill";
+type SkillGenerationToolSourceOptions = SkillGeneratorOptions;
+/**
+ * 把技能自动生成接到既有的工具协议上（设计 02 §1.3）。
+ *
+ * 该工具源默认不注册：宿主只有在开关打开时才把它放进工具表，
+ * 关闭时模型的工具列表里根本没有这个名字。
+ */
+declare function createSkillGenerationToolSource(options: SkillGenerationToolSourceOptions): ExternalToolSource;
+//#endregion
+//#region src/prompts/skillGeneration.d.ts
+/**
+ * 技能自动生成的系统提示词。默认不注册工具，因此这段提示词只在
+ * 宿主打开开关时才进入上下文（设计 02 §1.3）。
+ */
+declare const SKILL_GENERATION_SYSTEM_PROMPT: string;
+//#endregion
+//#region src/delegation/types.d.ts
+/** 一次委派请求（设计 03 §12） */
+interface DelegationRequest {
+  /** 关联的待办条目；委派关系经它落到清单上（FR-11.5） */
+  todoId: string;
+  task: string;
+  /** 子 agent 可用的工具子集；缺省继承父级 */
+  allowedTools?: readonly string[];
+}
+interface DelegationResult {
+  todoId: string;
+  outcome: 'completed' | 'failed';
+  /** 只回传结论，不回传子 agent 的中间历史（FR-11.3） */
+  summary: string;
+}
+/** 子 agent 的实际预算（父级剩余与自身上限取小，见 §15） */
+interface DelegationBudget {
+  maxTurns: number;
+  timeoutMs: number;
+}
+/** 父 agent 当前剩余的预算；由宿主在委派发生的那一刻读取 */
+interface ParentBudget {
+  remainingTurns: number;
+  remainingTimeoutMs: number;
+}
+interface SubAgentRunInput {
+  task: string;
+  /** 缺省表示继承父级工具集 */
+  allowedTools?: readonly string[];
+  budget: DelegationBudget;
+  /** 超时由编排器统一裁决：宿主须把它透传给子 run，中途取消即抛错 */
+  signal: AbortSignal;
+  /** 子 agent 发起交互时挂在 `InteractionRequest.origin` 上（FR-11.6） */
+  origin: InteractionOrigin;
+}
+/**
+ * 子 agent 执行端口。**实现不在本包内**——包内不得含执行器（FR-A.4）。
+ * 宿主的实现通常是「再跑一次 `AgentLoop.run`，把结论摘要回传」。
+ */
+type SubAgentRunner = (input: SubAgentRunInput) => Promise<{
+  summary: string;
+}>;
+//#endregion
+//#region src/delegation/orchestrator.d.ts
+interface DelegationOrchestratorOptions {
+  /** 缺省表示宿主没接子 agent 执行端口，调用时报 DELEGATION_UNAVAILABLE */
+  runner?: SubAgentRunner;
+  /** 委派发生的那一刻读取父级剩余预算（§15） */
+  parentBudget: () => ParentBudget;
+  /** 子 agent 自身上限；与父级剩余取小 */
+  policy?: Partial<DelegationBudget>;
+  /** 接上清单后委派关系在 UI 可见（FR-11.5） */
+  todos?: TodoStore;
+}
+/**
+ * 串行委派编排器（设计 03 §13–§16）。
+ *
+ * 严格串行由**内部互斥**保证而不是调用方自觉：并发委派会产生并发待决交互，
+ * 而当前交互模型是单一待决 nonce，届时表现为「点了没反应」。
+ * 放开并发必须显式改这里的守卫，不会悄悄发生。
+ *
+ * 上下文隔离靠回值形状达成：只有 `summary` 回到父 agent，
+ * 子 agent 的消息历史根本不经过本对象。
+ * @experimental
+ */
+declare class DelegationOrchestrator {
+  #private;
+  constructor(options: DelegationOrchestratorOptions);
+  /** 当前正在执行的委派任务；无则 undefined */
+  get running(): string | undefined;
+  delegate(request: DelegationRequest): Promise<DelegationResult>;
+}
+//#endregion
+//#region src/delegation/toolSource.d.ts
+declare const DELEGATE_TASK_TOOL = "delegate_task";
+interface DelegationToolSourceOptions extends DelegationOrchestratorOptions {
+  /** 复用宿主已持有的编排器（同一个 run 内父 agent 只能有一个）；缺省新建 */
+  orchestrator?: DelegationOrchestrator;
+}
+/**
+ * 把串行委派接到既有工具协议上（红线：不引入第二个循环、不引入第二套工具协议、
+ * 包内不含执行器——子 run 由宿主注入的 `runner` 执行）。
+ *
+ * 结果里只有 `summary`：上下文隔离不是靠调用方自律，是因为这里根本拿不到子 agent 的历史。
+ * @experimental
+ */
+declare function createDelegationToolSource(options: DelegationToolSourceOptions): ExternalToolSource & {
+  orchestrator: DelegationOrchestrator;
+};
+//#endregion
+//#region src/delegation/origin.d.ts
+/**
+ * 给子 agent 的交互请求打上来源标识（FR-11.6）。
+ *
+ * 为什么是包装 bridge 而不是让编排器去改请求：交互请求由子 run 内部各处发起
+ * （缺参表单、confirm、授权），编排器看不到它们。宿主在构造子 run 的 bridge 时套一层，
+ * 所有出口就都带上了来源。
+ * @experimental
+ */
+declare function withDelegationOrigin(bridge: UiBridge, origin: InteractionOrigin): UiBridge;
+//#endregion
+//#region src/prompts/delegation.d.ts
+/**
+ * 串行委派的策略提示词（设计 03 §13）。
+ *
+ * 「一次只能有一个」是编排器的硬约束，这里写进提示词是为了让模型不去
+ * 尝试并行委派——被拒绝的调用会浪费一轮，而不是产生并发。
+ */
+declare const DELEGATION_SYSTEM_PROMPT: string;
+//#endregion
+//#region src/perception/types.d.ts
+/**
+ * 页面只读感知的策略层类型（需求 10）。
+ *
+ * 这一层刻意不含任何 DOM 概念：遍历实现在 `@webskill/browser`，
+ * 本包只定义「什么允许被读」以及读到的东西长什么样。
+ */
+/**
+ * 可感知范围白名单（FR-10.2，硬约束）。
+ *
+ * **没有默认值，空 `include` 就是什么都读不到。** 宿主忘了配的后果是
+ * 功能不可用，而不是全页泄露——失败方向必须落在安全那一侧。
+ * @experimental
+ */
+interface PerceptionScope {
+  /** 可感知的根节点选择器；未声明即不可读 */
+  include: readonly string[];
+  /** 从 include 子树中剪除的敏感区域（凭据输入、个人信息展示区等） */
+  exclude?: readonly string[];
+}
+/**
+ * 结构化元素描述（FR-10.4，硬约束）：只有角色、名称、值。
+ *
+ * 不下发 HTML 原文有两条理由：HTML 里的 class / data 属性 / 注释远超模型
+ * 完成任务所需；且页面文本一旦以 HTML 形式进上下文，就多了一条注入通道。
+ * @experimental
+ */
+interface PerceivedNode {
+  /** 可访问性角色 */
+  role: string;
+  /** 可访问名称 */
+  name?: string;
+  /** 仅非敏感控件的当前值 */
+  value?: string;
+  children?: readonly PerceivedNode[];
+}
+/**
+ * 页面读取实现的注入口（浏览器侧 `createDomPerceptionReader`）。
+ *
+ * 参数是宿主配置的 scope，不是模型给的——`PagePerceptionPolicy.perceive()`
+ * 根本不接受范围参数，模型没有可以影响它的入口（AC-10.8）。
+ * @experimental
+ */
+interface PagePerceptionReader {
+  read(scope: PerceptionScope): Promise<readonly PerceivedNode[]> | readonly PerceivedNode[];
+}
+/** 一次感知的留痕（FR-10.5 的 UI 提示与 FR-10.6 的审计共用同一条记录） @experimental */
+interface PerceptionRecord {
+  /** ISO 8601 */
+  at: string;
+  /** 本次实际生效的白名单 */
+  include: readonly string[];
+  exclude: readonly string[];
+  /** 读到的顶层节点数；用于「它读的比我预期的多」这类判断 */
+  nodeCount: number;
+}
+/**
+ * 审计落盘端口。刻意只声明 `append` 的结构化子集，`FsAuditLog` 直接满足——
+ * agent 包不能依赖 governance，但审计不能因此变成「记在内存里」。
+ * @experimental
+ */
+interface PerceptionAuditSink {
+  append(event: {
+    type: string;
+    target: string;
+    data?: Record<string, unknown>;
+  }): Promise<unknown>;
+}
+//#endregion
+//#region src/perception/policy.d.ts
+interface PagePerceptionPolicyOptions {
+  /** 宿主声明的白名单；`include` 为空即整个能力不可用 */
+  scope: PerceptionScope;
+  reader: PagePerceptionReader;
+  /** FR-10.6：每次感知写审计。不注入即不留痕，装配方要自己承担这个选择 */
+  audit?: PerceptionAuditSink;
+  /** 审计事件的 target（缺省 `page`）；多页面宿主可用它区分来源 */
+  auditTarget?: string;
+  now?(): string;
+}
+/**
+ * 页面只读感知策略（需求 10）。
+ *
+ * **`perceive()` 不接受任何参数**——这是「白名单判定不受模型输出影响」
+ * （AC-10.8）的实现方式。不是先拿模型给的范围再去校验，而是模型压根没有
+ * 表达范围的入口：能被读的区域只由构造时的 `scope` 决定。
+ *
+ * 本类**没有**任何点击 / 输入 / 提交 / 导航 / 滚动方法（FR-10.7）。
+ * @experimental
+ */
+declare class PagePerceptionPolicy {
+  #private;
+  constructor(options: PagePerceptionPolicyOptions);
+  /** 白名单为空即不可用（FR-10.1/10.2）：宿主没声明范围就没有这个能力 */
+  get enabled(): boolean;
+  get scope(): PerceptionScope;
+  /** 最近的感知记录（console 只读展示用），新的在前 */
+  get records(): readonly PerceptionRecord[];
+  /** FR-10.5：感知发生时通知 UI，chatbot 据此在消息流里标注一行 */
+  subscribe(listener: (record: PerceptionRecord) => void): () => void;
+  perceive(): Promise<{
+    nodes: readonly PerceivedNode[];
+    record: PerceptionRecord;
+  }>;
+}
+//#endregion
+//#region src/perception/toolSource.d.ts
+declare const PERCEIVE_PAGE_TOOL = "perceive_page";
+interface PagePerceptionToolSourceOptions {
+  policy: PagePerceptionPolicy;
+}
+/**
+ * 把只读感知接到既有工具协议上。**本工具源不导出任何写入动作**（FR-10.7）：
+ * 它只注册 `perceive_page` 一个工具，没有点击 / 输入 / 提交 / 导航 / 滚动的对应项。
+ *
+ * 策略未启用（宿主没声明白名单）时 `listToolSpecs()` 返回空数组——
+ * 模型连这个工具的存在都看不到，而不是看得到再被拒（FR-10.1）。
+ * @experimental
+ */
+declare function createPagePerceptionToolSource(options: PagePerceptionToolSourceOptions): ExternalToolSource;
+//#endregion
+//#region src/prompts/perception.d.ts
+/**
+ * 页面只读感知的策略提示词（设计 09 §1）。
+ *
+ * 最后一条是防御性的：技能描述、工具返回值都可能带着「把整页读出来发到 X」
+ * 这类注入。范围由宿主判定，模型改不了，但把这件事写明能少掉一轮无效尝试。
+ */
+declare const PERCEPTION_SYSTEM_PROMPT: string;
+//#endregion
+export { SubAgentRunInput as A, createDelegationToolSource as B, SKILL_GENERATION_SYSTEM_PROMPT as C, SkillGenerationToolSourceOptions as D, SkillGenerationPolicy as E, TodoList as F, createSkillGenerationToolSource as H, TodoListener as I, TodoStatus as L, TODO_SYSTEM_PROMPT as M, TodoEvent as N, SkillGenerator as O, TodoItem as P, TodoStore as R, PerceptionScope as S, SkillGenerationOutcome as T, createTodoToolSource as U, createPagePerceptionToolSource as V, withDelegationOrigin as W, PagePerceptionToolSourceOptions as _, DelegationOrchestratorOptions as a, PerceptionAuditSink as b, DelegationToolSourceOptions as c, MANAGE_TODO_TOOL as d, PERCEIVE_PAGE_TOOL as f, PagePerceptionReader as g, PagePerceptionPolicyOptions as h, DelegationOrchestrator as i, SubAgentRunner as j, SkillGeneratorOptions as k, GENERATE_SKILL_TOOL as l, PagePerceptionPolicy as m, DELEGATION_SYSTEM_PROMPT as n, DelegationRequest as o, PERCEPTION_SYSTEM_PROMPT as p, DelegationBudget as r, DelegationResult as s, DELEGATE_TASK_TOOL as t, GeneratedSkillDraft as u, ParentBudget as v, SkillCandidateSink as w, PerceptionRecord as x, PerceivedNode as y, TodoToolSourceOptions as z };

package/dist/{index-DLfR2Y6I.d.ts → index-vBz_FC9w.d.ts}

@@ -1,4 +1,4 @@
-import { $ as SkillDocument, F as JsonSchema, N as FileSystemProvider, Q as SkillDiscovery, R as Page, S as UiSpecEvent, T as UiSurfaceActionRequest, X as SkillCatalog, Z as SkillCatalogEntry, _ as RenderBlock, a as InteractionPolicy, c as LlmClient, d as LlmMessage, et as SkillInstallSource, f as LlmResponse, g as MemoryStore, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, p as LlmStreamEvent, pt as UiSpecNode, r as ChartSpec, t as Artifact, u as LlmContentPart, v as RenderResultRequest, vt as WebSkillErrorCode, x as UiSpecDrafts, y as UiBridge, z as PageQuery } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { $ as SkillDiscovery, B as PageQuery, C as UiSpecEvent, E as UiSurfaceActionRequest, I as JsonSchema, M as DiscoveryResult, P as FileSystemProvider, Q as SkillCatalogEntry, S as UiSpecDrafts, Z as SkillCatalog, _ as MemoryStore, at as SkillManifest, b as UiBridge, d as LlmContentPart, et as SkillDocument, f as LlmMessage, g as LlmToolSpec, gt as ValidationReport, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, v as RenderBlock, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page } from "./types-D_hoCri8-BnNPiZCi.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -263,6 +263,11 @@ type ExecuteLifecycleData = {
   name: string;
   callId: string;
   args: string;
+  /**
+   * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
+   * “被策略拦下”与“执行出错”在 UI 上是两件事，消费方不应靠解析文案区分。
+   */
+  errorCode?: string;
 } | {
   kind: 'llm-delta';
   delta: string;
@@ -335,7 +340,7 @@ type LifecycleHook = (ctx: LifecycleHookContext) => Promise<void | {
 }>;
 //#endregion
 //#region src/trace/types.d.ts
-type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -360,6 +365,8 @@ interface AgentLoopConfig {
   toolResultMaxBytes?: number;
   /** session paramHistory 保留条数上限（默认 50，超出裁最旧） */
   paramHistoryLimit?: number;
+  /** 跨会话表单填写值的字段数上限（默认 100，超出裁最旧） */
+  formValueLimit?: number;
 }
 /** 技能状态拦截 port（治理装配；无注入默认全放行） */
 interface SkillStateGuard {
@@ -469,8 +476,11 @@ declare function extractUiSpecEvents(data: unknown): UiSpecEvent[];
  * JsonSchema → 表单模型：按 properties 生成字段，required 标记必填；
  * providedArgs 已有的值作为 defaultValue 预填（表单只为补齐缺失项服务）。
  * type 映射：string→text、number/integer→number、boolean→boolean、enum→select、其余→textarea。
+ * 传入 skillName 时给每个字段带上跨会话稳定的 `fieldKey`（FR-5.6）。
  */
-declare function schemaToForm(schema: JsonSchema, providedArgs?: Record<string, unknown>): FormField[];
+declare function schemaToForm(schema: JsonSchema, providedArgs?: Record<string, unknown>, options?: {
+  skillName?: string;
+}): FormField[];
 //#endregion
 //#region src/facade/types.d.ts
 /**
@@ -602,6 +612,36 @@ declare class SerializingMemoryStore implements MemoryStore {
   transaction<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
+//#region src/memory/formValues.d.ts
+/** 跨会话表单填写值在 `user:{userId}` scope 下的 key（FR-5.7） @experimental */
+declare const FORM_VALUES_KEY = "formValues";
+/**
+ * 跨会话稳定的字段标识（FR-5.6）。必须带技能名：
+ * 只有字段名时，两个技能各自的 `email` 会互相串号。
+ * @experimental
+ */
+declare function formFieldKey(skillName: string, fieldName: string): string;
+/** 某个字段最近一次的填写值 @experimental */
+interface FormValueRecord {
+  value: unknown;
+  /** 写入时刻（epoch ms）；超上限裁剪时按它排序 */
+  ts: number;
+}
+/** fieldKey → 最近一次填写值（**只留最近一次**，不是历史序列） @experimental */
+type FormValueMap = Record<string, FormValueRecord>;
+/** memory 里的原始值形状不受控（宿主可能手改文件），逐条过滤而不是整体信任 @experimental */
+declare function readFormValues(raw: unknown): FormValueMap;
+/** 合并本次提交并按上限裁剪最旧（FR-5.12） @experimental */
+declare function putFormValues(current: FormValueMap, updates: FormValueMap, limit: number): FormValueMap;
+/** 清除单个字段；不传 fieldKey 即全部清除（FR-5.11） @experimental */
+declare function clearFormValues(current: FormValueMap, fieldKey?: string): FormValueMap;
+/**
+ * 宿主侧的清除入口（FR-5.11）：设置面板的「清除填写历史」直接调它，
+ * 不必自己知道 scope 与 key 的约定。
+ * @experimental
+ */
+declare function clearStoredFormValues(memory: MemoryStore, userId: string, fieldKey?: string): Promise<void>;
+//#endregion
 //#region src/artifacts/fsArtifactStore.d.ts
 /**
  * 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
@@ -768,6 +808,20 @@ declare class TraceRecorder {
   list(): TraceEvent[];
 }
 //#endregion
+//#region src/trace/todoMarker.d.ts
+interface TodoTraceEvent {
+  type: TraceEventType;
+  data: Record<string, unknown>;
+}
+/**
+ * `$todo` 约定的形状校验：JSON content 的 data 含 `$todo` 键（单条或数组）→ trace 事件。
+ *
+ * 与 `$chart` / `$surface` 同一条既有通道——待办清单的状态机全部在 `@webskill/agent`，
+ * runtime 只认这三个事件类型名，不含任何计划态逻辑。畸形条目忽略不炸。
+ * @experimental
+ */
+declare function extractTodoTraceEvents(data: unknown): TodoTraceEvent[];
+//#endregion
 //#region src/engine/external.d.ts
 /**
  * 外部工具来源（runtime 扩展点，mcp 包实现并插入）。
@@ -919,6 +973,14 @@ interface AgentLoopDeps {
     enabled: true;
     userId: string;
   };
+  /**
+   * 跨会话表单自动填充（FR-5.7）；**不注入即关闭**，关闭时不查也不写。
+   * 与 `longTerm` 分开：后者存的是技能使用统计，本项存的是用户亲手填的内容，
+   * 两者的开关语义不同（AC-5.7）。
+   */
+  formAutofill?: {
+    userId: string;
+  };
   /** 外部工具来源（mcp 插件等）；specs 在 run 开始时并入每轮 tools */
   externalTools?: ExternalToolSource[];
   /** 外部技能提供者（页面动态技能等） */
@@ -988,6 +1050,10 @@ interface WebSkillRuntimeDeps {
     enabled: true;
     userId: string;
   };
+  /** 跨会话表单自动填充（FR-5.7）；不注入即关闭，关闭时不查也不写 */
+  formAutofill?: {
+    userId: string;
+  };
   /** 外部工具来源（mcp 插件等） */
   externalTools?: ExternalToolSource[];
   /** 外部技能提供者（页面动态技能等）；Catalog 合并同名本地优先 */
@@ -1169,6 +1235,13 @@ interface RunToolCall {
   args?: string;
   /** 执行耗时 ms */
   durationMs?: number;
+  /**
+   * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
+   * 消费方据此区分「被策略拒绝」与「执行出错」，不必解析 message 文案。
+   */
+  errorCode?: string;
+  /** failed 时的错误说明（trace 事件的 message） */
+  errorMessage?: string;
 }
 /**
  * 从 run 的 trace 推导终态工具调用列表。
@@ -1272,4 +1345,4 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   delete(id: string): Promise<void>;
 }
 //#endregion
-export { RunSnapshot as $, normalizeToolContent as $t, GoogleGenAiClientConfig as A, TraceClock as At, LifecycleListener as B, buildRenderResult as Bt, FsArtifactStore as C, SkillOutcomeReporter as Ct, FsSessionStore as D, ToolDefinition as Dt, FsRunTraceStore as E, TerminalLifecycleData as Et, InteractLifecycleData as F, VercelToolSpec as Ft, READ_SKILL_FILE_INPUT_SCHEMA as G, fromVercelResult as Gt, OpenAiCompatibleClient as H, createWebSkillApi as Ht, LifecycleEvent as I, WebSkillApi as It, RUN_SNAPSHOT_SCHEMA_VERSION as J, isUnsupportedRunSnapshot as Jt, READ_SKILL_FILE_TOOL as K, fromVercelStreamPart as Kt, LifecycleEventInit as L, WebSkillRuntime as Lt, HookRunnerOptions as M, TraceEventType as Mt, InstalledSkillManifest as N, TraceRecorder as Nt, FullDisclosureRouter as O, ToolResolution as Ot, IntegrityVerdict as P, UnsupportedRunSnapshot as Pt, RunResult as Q, normalizeErrorCode as Qt, LifecycleHook as R, WebSkillRuntimeDeps as Rt, FS_SESSION_PAGE_SIZE as S, SkillIntegrityGuard as St, FsRunSnapshotStore as T, SkillStateGuard as Tt, OpenAiCompatibleClientConfig as U, extractChartSpec as Ut, NetworkPolicy as V, createScriptContext as Vt, ProgressiveRouter as W, extractUiSpecEvents as Wt, RouteLifecycleData as X, networkPolicyLibSource as Xt, RUN_TRACE_SCHEMA_VERSION as Y, mergeCatalogEntries as Yt, RouteResult as Z, networkUrlHost as Zt, CapabilityMode as _, SerializingMemoryStore as _t, AgentLoop as a, summarizeToolCalls as an, RunTraceFilter as at, ExternalSkillProvider as b, SessionStore as bt, AnthropicClient as c, toVercelToolSpecs as cn, RunTraceSummary as ct, ApprovalScope as d, RuntimeSession as dt, normalizeToolError as en, RunSnapshotListEntry as et, BridgeCapabilities as f, RuntimeSessionHandle as ft, CapabilityApproval as g, ScriptExecutor as gt, BridgeResponse as h, ScriptExecutionContext as ht, ActivateLifecycleData as i, schemaToForm as in, RunTraceFile as it, HookRunner as j, TraceEvent as jt, GoogleGenAiClient as k, ToolResult as kt, AnthropicClientConfig as l, validateUiSpecEvent as ln, RuntimePhase as lt, BridgeRequest as m, SchemaInferer as mt, ASK_USER_TOOL as n, partsToText as nn, RunTerminationReason as nt, AgentLoopConfig as o, textParts as on, RunTraceMetrics as ot, BridgeCapability as p, SESSION_SCHEMA_VERSION as pt, READ_SKILL_FILE_TOOL_NAME as q, isNetworkAllowed as qt, ASK_USER_TOOL_NAME as r, resolveToolName as rn, RunToolCall as rt, AgentLoopDeps as s, toLlmToolSpec as sn, RunTraceStore as st, ASK_USER_INPUT_SCHEMA as t, parseBridgeRequest as tn, RunSnapshotStore as tt, ApprovalDecision as u, validateUiSpecNode as un, RuntimeRun as ut, EventBus as v, SessionMeta as vt, FsMemoryStore as w, SkillRouter as wt, ExternalToolSource as x, SkillFailureReport as xt, ExecuteLifecycleData as y, SessionRecord as yt, LifecycleHookContext as z, bridgeError as zt };
+export { RouteLifecycleData as $, fromVercelResult as $t, FsSessionStore as A, TodoTraceEvent as At, LifecycleEventInit as B, WebSkillApi as Bt, FS_SESSION_PAGE_SIZE as C, SessionStore as Ct, FsMemoryStore as D, SkillRouter as Dt, FsArtifactStore as E, SkillOutcomeReporter as Et, HookRunnerOptions as F, TraceEvent as Ft, OpenAiCompatibleClient as G, clearFormValues as Gt, LifecycleHookContext as H, WebSkillRuntimeDeps as Ht, InstalledSkillManifest as I, TraceEventType as It, READ_SKILL_FILE_INPUT_SCHEMA as J, createWebSkillApi as Jt, OpenAiCompatibleClientConfig as K, clearStoredFormValues as Kt, IntegrityVerdict as L, TraceRecorder as Lt, GoogleGenAiClient as M, ToolResolution as Mt, GoogleGenAiClientConfig as N, ToolResult as Nt, FsRunSnapshotStore as O, SkillStateGuard as Ot, HookRunner as P, TraceClock as Pt, RUN_TRACE_SCHEMA_VERSION as Q, formFieldKey as Qt, InteractLifecycleData as R, UnsupportedRunSnapshot as Rt, FORM_VALUES_KEY as S, SessionRecord as St, FormValueRecord as T, SkillIntegrityGuard as Tt, LifecycleListener as U, bridgeError as Ut, LifecycleHook as V, WebSkillRuntime as Vt, NetworkPolicy as W, buildRenderResult as Wt, READ_SKILL_FILE_TOOL_NAME as X, extractTodoTraceEvents as Xt, READ_SKILL_FILE_TOOL as Y, extractChartSpec as Yt, RUN_SNAPSHOT_SCHEMA_VERSION as Z, extractUiSpecEvents as Zt, CapabilityMode as _, toLlmToolSpec as _n, SchemaInferer as _t, AgentLoop as a, networkUrlHost as an, RunTerminationReason as at, ExternalSkillProvider as b, validateUiSpecNode as bn, SerializingMemoryStore as bt, AnthropicClient as c, normalizeToolError as cn, RunTraceFilter as ct, ApprovalScope as d, putFormValues as dn, RunTraceSummary as dt, fromVercelStreamPart as en, RouteResult as et, BridgeCapabilities as f, readFormValues as fn, RuntimePhase as ft, CapabilityApproval as g, textParts as gn, SESSION_SCHEMA_VERSION as gt, BridgeResponse as h, summarizeToolCalls as hn, RuntimeSessionHandle as ht, ActivateLifecycleData as i, networkPolicyLibSource as in, RunSnapshotStore as it, FullDisclosureRouter as j, ToolDefinition as jt, FsRunTraceStore as k, TerminalLifecycleData as kt, AnthropicClientConfig as l, parseBridgeRequest as ln, RunTraceMetrics as lt, BridgeRequest as m, schemaToForm as mn, RuntimeSession as mt, ASK_USER_TOOL as n, isUnsupportedRunSnapshot as nn, RunSnapshot as nt, AgentLoopConfig as o, normalizeErrorCode as on, RunToolCall as ot, BridgeCapability as p, resolveToolName as pn, RuntimeRun as pt, ProgressiveRouter as q, createScriptContext as qt, ASK_USER_TOOL_NAME as r, mergeCatalogEntries as rn, RunSnapshotListEntry as rt, AgentLoopDeps as s, normalizeToolContent as sn, RunTraceFile as st, ASK_USER_INPUT_SCHEMA as t, isNetworkAllowed as tn, RunResult as tt, ApprovalDecision as u, partsToText as un, RunTraceStore as ut, EventBus as v, toVercelToolSpecs as vn, ScriptExecutionContext as vt, FormValueMap as w, SkillFailureReport as wt, ExternalToolSource as x, SessionMeta as xt, ExecuteLifecycleData as y, validateUiSpecEvent as yn, ScriptExecutor as yt, LifecycleEvent as z, VercelToolSpec as zt };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillDocument, A as DEFAULT_ARCHIVE_LIMITS, At as jsonRenderer, B as RemoteUrlPolicy, Bt as resolveArchiveLimits, C as UiSpecPatch, Ct as buildManifest, D as ArchiveLimits, Dt as escapeXml, E as UiSurfaceActionResponse, Et as computeDigest, F as JsonSchema, Ft as parseSkillPackManifest, G as SKILL_NAME_PATTERN, Gt as validateSkills, H as SKILLS_LOCKFILE, Ht as signSkill, I as MANIFEST_EXCLUDED_FILES, It as readResponseWithLimit, J as SignatureAuditSink, Jt as xmlRenderer, K as SKILL_PACK_FILE, Kt as verifyManifest, L as MemoryFS, Lt as readSkillSignature, M as FileStat, Mt as messageOf, N as FileSystemProvider, Nt as normalizePath, O as CatalogRenderer, Ot as exportSkills, P as FsTrustedKeyStore, Pt as parseSkillMarkdown, Q as SkillDiscovery, R as Page, Rt as renderAvailableSkillsXml, S as UiSpecEvent, St as buildCatalog, T as UiSurfaceActionRequest, Tt as checkSkillRules, U as SKILL_MANIFEST_FILE, Ut as signaturePayloadBytes, V as SIGNATURE_SCHEMA_VERSION, Vt as resolveInsideRoot, W as SKILL_NAME_MAX_LENGTH, Wt as unzipWithLimits, X as SkillCatalog, Y as SignatureVerdict, Z as SkillCatalogEntry, _ as RenderBlock, _t as WebSkillError, a as InteractionPolicy, at as SkillMetadata, b as UiSpecActionCapability, bt as assertSafePathSegment, c as LlmClient, ct as SkillSignature, d as LlmMessage, dt as TrustedKey, et as SkillInstallSource, f as LlmResponse, ft as TrustedKeyStore, g as MemoryStore, gt as VerifyResult, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, jt as keyIdOf, k as CryptoKeyLike, kt as isValidSkillName, l as LlmCompleteInput, lt as SkillSource, m as LlmToolCall, mt as UnsignedPolicy, n as ArtifactStore, nt as SkillLocation, o as InteractionRequest, ot as SkillPackManifest, p as LlmStreamEvent, pt as UiSpecNode, q as SKILL_SIGNATURE_FILE, qt as verifySkillSignature, r as ChartSpec, rt as SkillManagerPort, s as InteractionResponse, st as SkillReader, t as Artifact, tt as SkillIssue, u as LlmContentPart, ut as SkillsLockfile, v as RenderResultRequest, vt as WebSkillErrorCode, w as UiSpecSnapshot, wt as checkDependencyCycles, x as UiSpecDrafts, xt as atomicWriteText, y as UiBridge, yt as assertRemoteUrlAllowed, z as PageQuery, zt as renderCatalogJson } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-import { $ as RunSnapshot, $t as normalizeToolContent, A as GoogleGenAiClientConfig, At as TraceClock, B as LifecycleListener, Bt as buildRenderResult, C as FsArtifactStore, Ct as SkillOutcomeReporter, D as FsSessionStore, Dt as ToolDefinition, E as FsRunTraceStore, Et as TerminalLifecycleData, F as InteractLifecycleData, Ft as VercelToolSpec, G as READ_SKILL_FILE_INPUT_SCHEMA, Gt as fromVercelResult, H as OpenAiCompatibleClient, Ht as createWebSkillApi, I as LifecycleEvent, It as WebSkillApi, J as RUN_SNAPSHOT_SCHEMA_VERSION, Jt as isUnsupportedRunSnapshot, K as READ_SKILL_FILE_TOOL, Kt as fromVercelStreamPart, L as LifecycleEventInit, Lt as WebSkillRuntime, M as HookRunnerOptions, Mt as TraceEventType, N as InstalledSkillManifest, Nt as TraceRecorder, O as FullDisclosureRouter, Ot as ToolResolution, P as IntegrityVerdict, Pt as UnsupportedRunSnapshot, Q as RunResult, Qt as normalizeErrorCode, R as LifecycleHook, Rt as WebSkillRuntimeDeps, S as FS_SESSION_PAGE_SIZE, St as SkillIntegrityGuard, T as FsRunSnapshotStore, Tt as SkillStateGuard, U as OpenAiCompatibleClientConfig, Ut as extractChartSpec, V as NetworkPolicy, Vt as createScriptContext, W as ProgressiveRouter, Wt as extractUiSpecEvents, X as RouteLifecycleData, Xt as networkPolicyLibSource, Y as RUN_TRACE_SCHEMA_VERSION, Yt as mergeCatalogEntries, Z as RouteResult, Zt as networkUrlHost, _ as CapabilityMode, _t as SerializingMemoryStore, a as AgentLoop, an as summarizeToolCalls, at as RunTraceFilter, b as ExternalSkillProvider, bt as SessionStore, c as AnthropicClient, cn as toVercelToolSpecs, ct as RunTraceSummary, d as ApprovalScope, dt as RuntimeSession, en as normalizeToolError, et as RunSnapshotListEntry, f as BridgeCapabilities, ft as RuntimeSessionHandle, g as CapabilityApproval, gt as ScriptExecutor, h as BridgeResponse, ht as ScriptExecutionContext, i as ActivateLifecycleData, in as schemaToForm, it as RunTraceFile, j as HookRunner, jt as TraceEvent, k as GoogleGenAiClient, kt as ToolResult, l as AnthropicClientConfig, ln as validateUiSpecEvent, lt as RuntimePhase, m as BridgeRequest, mt as SchemaInferer, n as ASK_USER_TOOL, nn as partsToText, nt as RunTerminationReason, o as AgentLoopConfig, on as textParts, ot as RunTraceMetrics, p as BridgeCapability, pt as SESSION_SCHEMA_VERSION, q as READ_SKILL_FILE_TOOL_NAME, qt as isNetworkAllowed, r as ASK_USER_TOOL_NAME, rn as resolveToolName, rt as RunToolCall, s as AgentLoopDeps, sn as toLlmToolSpec, st as RunTraceStore, t as ASK_USER_INPUT_SCHEMA, tn as parseBridgeRequest, tt as RunSnapshotStore, u as ApprovalDecision, un as validateUiSpecNode, ut as RuntimeRun, v as EventBus, vt as SessionMeta, w as FsMemoryStore, wt as SkillRouter, x as ExternalToolSource, xt as SkillFailureReport, y as ExecuteLifecycleData, yt as SessionRecord, z as LifecycleHookContext, zt as bridgeError } from "./index-DLfR2Y6I.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+import { $ as SkillDiscovery, A as CryptoKeyLike, At as isValidSkillName, B as PageQuery, Bt as renderCatalogJson, C as UiSpecEvent, Ct as buildCatalog, D as UiSurfaceActionResponse, Dt as computeDigest, E as UiSurfaceActionRequest, Et as checkSkillRules, F as FsTrustedKeyStore, Ft as parseSkillMarkdown, G as SKILL_NAME_MAX_LENGTH, Gt as unzipWithLimits, H as SIGNATURE_SCHEMA_VERSION, Ht as resolveInsideRoot, I as JsonSchema, It as parseSkillPackManifest, J as SKILL_SIGNATURE_FILE, Jt as verifySkillSignature, K as SKILL_NAME_PATTERN, Kt as validateSkills, L as MANIFEST_EXCLUDED_FILES, Lt as readResponseWithLimit, M as DiscoveryResult, Mt as keyIdOf, N as FileStat, Nt as messageOf, O as ArchiveLimits, Ot as escapeXml, P as FileSystemProvider, Pt as normalizePath, Q as SkillCatalogEntry, R as MemoryFS, Rt as readSkillSignature, S as UiSpecDrafts, St as atomicWriteText, T as UiSpecSnapshot, Tt as checkDependencyCycles, U as SKILLS_LOCKFILE, Ut as signSkill, V as RemoteUrlPolicy, Vt as resolveArchiveLimits, W as SKILL_MANIFEST_FILE, Wt as signaturePayloadBytes, X as SignatureVerdict, Y as SignatureAuditSink, Yt as xmlRenderer, Z as SkillCatalog, _ as MemoryStore, _t as VerifyResult, a as InteractionOrigin, at as SkillManifest, b as UiBridge, bt as assertRemoteUrlAllowed, c as InteractionResponse, ct as SkillReader, d as LlmContentPart, dt as SkillsLockfile, et as SkillDocument, f as LlmMessage, ft as TrustedKey, g as LlmToolSpec, gt as ValidationReport, h as LlmToolCall, ht as UnsignedPolicy, i as FormField, it as SkillManagerPort, j as DEFAULT_ARCHIVE_LIMITS, jt as jsonRenderer, k as CatalogRenderer, kt as exportSkills, l as LlmClient, lt as SkillSignature, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, nt as SkillIssue, o as InteractionPolicy, ot as SkillMetadata, p as LlmResponse, pt as TrustedKeyStore, q as SKILL_PACK_FILE, qt as verifyManifest, r as ChartSpec, rt as SkillLocation, s as InteractionRequest, st as SkillPackManifest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, ut as SkillSource, v as RenderBlock, vt as WebSkillError, w as UiSpecPatch, wt as buildManifest, x as UiSpecActionCapability, xt as assertSafePathSegment, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page, zt as renderAvailableSkillsXml } from "./types-D_hoCri8-BnNPiZCi.js";
+import { $ as RouteLifecycleData, $t as fromVercelResult, A as FsSessionStore, At as TodoTraceEvent, B as LifecycleEventInit, Bt as WebSkillApi, C as FS_SESSION_PAGE_SIZE, Ct as SessionStore, D as FsMemoryStore, Dt as SkillRouter, E as FsArtifactStore, Et as SkillOutcomeReporter, F as HookRunnerOptions, Ft as TraceEvent, G as OpenAiCompatibleClient, Gt as clearFormValues, H as LifecycleHookContext, Ht as WebSkillRuntimeDeps, I as InstalledSkillManifest, It as TraceEventType, J as READ_SKILL_FILE_INPUT_SCHEMA, Jt as createWebSkillApi, K as OpenAiCompatibleClientConfig, Kt as clearStoredFormValues, L as IntegrityVerdict, Lt as TraceRecorder, M as GoogleGenAiClient, Mt as ToolResolution, N as GoogleGenAiClientConfig, Nt as ToolResult, O as FsRunSnapshotStore, Ot as SkillStateGuard, P as HookRunner, Pt as TraceClock, Q as RUN_TRACE_SCHEMA_VERSION, Qt as formFieldKey, R as InteractLifecycleData, Rt as UnsupportedRunSnapshot, S as FORM_VALUES_KEY, St as SessionRecord, T as FormValueRecord, Tt as SkillIntegrityGuard, U as LifecycleListener, Ut as bridgeError, V as LifecycleHook, Vt as WebSkillRuntime, W as NetworkPolicy, Wt as buildRenderResult, X as READ_SKILL_FILE_TOOL_NAME, Xt as extractTodoTraceEvents, Y as READ_SKILL_FILE_TOOL, Yt as extractChartSpec, Z as RUN_SNAPSHOT_SCHEMA_VERSION, Zt as extractUiSpecEvents, _ as CapabilityMode, _n as toLlmToolSpec, _t as SchemaInferer, a as AgentLoop, an as networkUrlHost, at as RunTerminationReason, b as ExternalSkillProvider, bn as validateUiSpecNode, bt as SerializingMemoryStore, c as AnthropicClient, cn as normalizeToolError, ct as RunTraceFilter, d as ApprovalScope, dn as putFormValues, dt as RunTraceSummary, en as fromVercelStreamPart, et as RouteResult, f as BridgeCapabilities, fn as readFormValues, ft as RuntimePhase, g as CapabilityApproval, gn as textParts, gt as SESSION_SCHEMA_VERSION, h as BridgeResponse, hn as summarizeToolCalls, ht as RuntimeSessionHandle, i as ActivateLifecycleData, in as networkPolicyLibSource, it as RunSnapshotStore, j as FullDisclosureRouter, jt as ToolDefinition, k as FsRunTraceStore, kt as TerminalLifecycleData, l as AnthropicClientConfig, ln as parseBridgeRequest, lt as RunTraceMetrics, m as BridgeRequest, mn as schemaToForm, mt as RuntimeSession, n as ASK_USER_TOOL, nn as isUnsupportedRunSnapshot, nt as RunSnapshot, o as AgentLoopConfig, on as normalizeErrorCode, ot as RunToolCall, p as BridgeCapability, pn as resolveToolName, pt as RuntimeRun, q as ProgressiveRouter, qt as createScriptContext, r as ASK_USER_TOOL_NAME, rn as mergeCatalogEntries, rt as RunSnapshotListEntry, s as AgentLoopDeps, sn as normalizeToolContent, st as RunTraceFile, t as ASK_USER_INPUT_SCHEMA, tn as isNetworkAllowed, tt as RunResult, u as ApprovalDecision, un as partsToText, ut as RunTraceStore, v as EventBus, vn as toVercelToolSpecs, vt as ScriptExecutionContext, w as FormValueMap, wt as SkillFailureReport, x as ExternalToolSource, xt as SessionMeta, y as ExecuteLifecycleData, yn as validateUiSpecEvent, yt as ScriptExecutor, z as LifecycleEvent, zt as VercelToolSpec } from "./index-vBz_FC9w.js";
+export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FORM_VALUES_KEY, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, type FormValueMap, type FormValueRecord, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type TodoTraceEvent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, clearFormValues, clearStoredFormValues, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formFieldKey, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, putFormValues, readFormValues, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };