@webskill/sdk 0.4.0 → 0.6.0

package/dist/{index-DLfR2Y6I.d.ts → index-C-KFAZoF.d.ts}

@@ -1,4 +1,4 @@
-import { $ as SkillDocument, F as JsonSchema, N as FileSystemProvider, Q as SkillDiscovery, R as Page, S as UiSpecEvent, T as UiSurfaceActionRequest, X as SkillCatalog, Z as SkillCatalogEntry, _ as RenderBlock, a as InteractionPolicy, c as LlmClient, d as LlmMessage, et as SkillInstallSource, f as LlmResponse, g as MemoryStore, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, p as LlmStreamEvent, pt as UiSpecNode, r as ChartSpec, t as Artifact, u as LlmContentPart, v as RenderResultRequest, vt as WebSkillErrorCode, x as UiSpecDrafts, y as UiBridge, z as PageQuery } from "./types-7Wcg--Vh-1YlQ4jF9.js";
+import { $ as SkillDiscovery, B as PageQuery, C as UiSpecEvent, E as UiSurfaceActionRequest, I as JsonSchema, M as DiscoveryResult, P as FileSystemProvider, Q as SkillCatalogEntry, S as UiSpecDrafts, Z as SkillCatalog, _ as MemoryStore, at as SkillManifest, b as UiBridge, d as LlmContentPart, et as SkillDocument, f as LlmMessage, g as LlmToolSpec, gt as ValidationReport, i as FormField, l as LlmClient, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, s as InteractionRequest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, v as RenderBlock, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page } from "./types-4pg-qp_I-Gq63X8Oa.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -130,16 +130,34 @@ interface ToolDefinition {
   source: 'script' | 'mcp' | 'webmcp' | 'builtin';
   skillName?: string;
 }
+/** 文本型分片（参与 `toolResultMaxBytes` 截断） @experimental */
+type TextualToolContent = {
+  type: 'text' | 'json';
+  text?: string;
+  data?: unknown;
+};
+/**
+ * 工具结果的内容分片（0.6.0 §1.1）。
+ * `image` 分片不参与 `toolResultMaxBytes` 截断——那份预算是给文本的，
+ * base64 图像另有 `maxImageBytes` / `maxImagesPerMessage` 预算，混算会让任一方失效。
+ * `text?: undefined` 是故意的：图像分片没有文本，但让调用方能直接读 `part.text` 而不用先窄化。
+ * @experimental
+ */
+type ToolContent = TextualToolContent | {
+  type: 'image';
+  mimeType: string;
+  data: string;
+  id: string;
+  text?: undefined;
+};
 interface ToolResult {
   ok: boolean;
-  content: Array<{
-    type: 'text' | 'json';
-    text?: string;
-    data?: unknown;
-  }>;
+  content: ToolContent[];
+  /** `data` 供宿主编程处理；`message` 是模型实际会读的那一份，两者都要写全 */
   error?: {
     code: string;
     message: string;
+    data?: Record<string, unknown>;
   };
   artifacts?: Artifact[];
 }
@@ -185,6 +203,9 @@ type ToolResolution = {
   kind: 'not-found';
   code: 'TOOL_NOT_FOUND';
   message: string;
+  data: {
+    availableTools: string[];
+  };
 };
 /**
  * 工具名解析规则（单一实现，Agent 循环使用）：
@@ -193,16 +214,55 @@ type ToolResolution = {
  * 3. `mcp#` 前缀 → TOOL_UNSUPPORTED（WebMCP 阶段实现）
  * 4. 其余 → TOOL_NOT_FOUND
  */
-declare function resolveToolName(name: string, activatedSkills: ReadonlySet<string>): ToolResolution;
+declare function resolveToolName(name: string, activatedSkills: ReadonlySet<string>, activatedTools?: Iterable<string>): ToolResolution;
 /** ToolDefinition → LLM 工具 spec；缺 schema 时用宽松 object 兜底并在描述中标记 */
 declare function toLlmToolSpec(tool: ToolDefinition): LlmToolSpec;
 //#endregion
+//#region src/tools/skillScripts.d.ts
+/**
+ * 技能脚本清单（0.6.0 FR-18.1）。
+ * 同一份数据两处用：`AgentLoop` 激活技能时喂给模型，console 技能详情展示给人。
+ * 两处各写一份的话，模型看到的和作者看到的会慢慢对不上，而这正是「反复猜错脚本名」的来源。
+ * 纯函数（入参是技能根目录下的相对路径清单），因此宿主端不需要 FileSystemProvider 也能复用。
+ */
+/** 入参 schema 的来源；`unknown` 表示尚未加载脚本定义（console 只看目录，不执行脚本） */
+type SkillScriptSchemaSource = 'module-export' | 'sidecar' | 'inferred' | 'unavailable' | 'unknown';
+interface SkillScriptDescriptor {
+  /** 技能根目录下的相对路径，如 `scripts/parse.ts` */
+  path: string;
+  /** 去掉目录与扩展名的脚本名，也是工具名的后半段 */
+  scriptName: string;
+  /** 暴露为工具时的工具名；未暴露时为 undefined */
+  toolName?: string;
+  schemaSource: SkillScriptSchemaSource;
+  /** 未暴露为工具的原因（allowed-tools 排除 / 定义加载失败） */
+  unexposedReason?: string;
+}
+/** 工具名规则：技能**目录名**加双下划线加脚本名，与 frontmatter 的 name 无关 */
+declare function scriptToolName(skillName: string, scriptName: string): string;
+/** 展示用的 schema 来源文案（console 与模型清单共用一套措辞） */
+declare function schemaSourceLabel(source: SkillScriptSchemaSource): string;
+/** allowed-tools 排除的脚本对模型不可见；清单里必须写明原因，否则作者只会看到工具凭空消失 */
+declare const ALLOWED_TOOLS_EXCLUSION_REASON = "excluded by the allowed-tools list in SKILL.md";
+/**
+ * 从技能文件清单中挑出脚本并给出工具名映射。
+ * @param files 技能根目录下的相对路径（如 `scripts/parse.ts`、`SKILL.md`）
+ * @param allowedTools SKILL.md 声明的 allowed-tools；未声明传 undefined（全部暴露）
+ */
+declare function listSkillScripts(skillName: string, files: readonly string[], allowedTools?: readonly string[]): SkillScriptDescriptor[];
+/**
+ * 清单 → 喂给模型的文本（FR-18.1）。
+ * 「authoritative」这句是给模型的信号：以目录为准，别照 SKILL.md 的描述猜文件名。
+ */
+declare function formatSkillScriptManifest(descriptors: readonly SkillScriptDescriptor[]): string;
+//#endregion
 //#region src/tools/normalizeContent.d.ts
 /**
  * 脚本返回值归一到 MCP content 格式：数组沿用（逐项归一），
  * 字符串包装为 text，其他值序列化包装。Node/浏览器执行器共享。
+ * 产出只有文本型分片：脚本侧没有下发图像的通道（图像只来自页面取像）。
  */
-declare function normalizeToolContent(value: unknown): ToolResult['content'];
+declare function normalizeToolContent(value: unknown): TextualToolContent[];
 //#endregion
 //#region src/tools/readSkillFileTool.d.ts
 declare const READ_SKILL_FILE_TOOL_NAME = "read_skill_file";
@@ -263,6 +323,11 @@ type ExecuteLifecycleData = {
   name: string;
   callId: string;
   args: string;
+  /**
+   * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
+   * “被策略拦下”与“执行出错”在 UI 上是两件事，消费方不应靠解析文案区分。
+   */
+  errorCode?: string;
 } | {
   kind: 'llm-delta';
   delta: string;
@@ -335,7 +400,7 @@ type LifecycleHook = (ctx: LifecycleHookContext) => Promise<void | {
 }>;
 //#endregion
 //#region src/trace/types.d.ts
-type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -360,6 +425,17 @@ interface AgentLoopConfig {
   toolResultMaxBytes?: number;
   /** session paramHistory 保留条数上限（默认 50，超出裁最旧） */
   paramHistoryLimit?: number;
+  /**
+   * 模型不支持原生工具调用时置 true（0.6.0 FR-14.3）：不注入任何工具定义、
+   * 不收集外部来源的系统提示，并换成精简提示。不这么做的话，不会调工具的模型
+   * 会照着提示词里的语法“演”一个工具调用出来。
+   */
+  toolCallingDisabled?: boolean;
+  /**
+   * 单次 run 内允许的「调用不存在的工具」次数（默认 2，超出即终止 run，0.6.0 FR-18.3）。
+   * 不设上限的话，模型会一路猜到 maxTurns 用完，用户等到最后拿到的还是一句失败。
+   */
+  maxUnknownToolRetries?: number;
 }
 /** 技能状态拦截 port（治理装配；无注入默认全放行） */
 interface SkillStateGuard {
@@ -417,7 +493,9 @@ interface RuntimeSession {
   id: string;
   createdAt: string;
 }
-type RunTerminationReason = 'final-answer' | 'max-turns' | 'timeout' | 'llm-error' | 'interaction-timeout' | 'user-cancelled' | 'hook-error';
+type RunTerminationReason = 'final-answer' | 'max-turns' | 'timeout' | 'llm-error' | 'interaction-timeout' | 'user-cancelled' | 'hook-error' |
+/** 反复调用不存在的工具，提前止损（0.6.0 FR-18.3） */
+'tool-resolution-exhausted';
 interface RuntimeRun {
   id: string;
   sessionId: string;
@@ -441,7 +519,7 @@ interface RunResult {
 }
 /** createSession 返回的会话句柄：跨 run 延续消息历史 */
 interface RuntimeSessionHandle extends RuntimeSession {
-  run(prompt: string): Promise<RunResult>;
+  run(prompt: string | readonly LlmContentPart[]): Promise<RunResult>;
 }
 //#endregion
 //#region src/interaction/renderResult.d.ts
@@ -602,6 +680,199 @@ declare class SerializingMemoryStore implements MemoryStore {
   transaction<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
+//#region src/profile/types.d.ts
+/**
+ * 用户画像（0.6.0 需求 19）。行为记录是原始事实，画像是模型提炼出的结论——
+ * 只有后者会进入后续对话的上下文（FR-19.3）。
+ */
+/** @experimental */
+type BehaviorRecordKind = 'question' | 'choice' | 'text-input' | 'stated-preference';
+/**
+ * 记录发生时的场景。没有场景的记录对提炼没有价值：
+ * 「选了 A」不带候选集与字段语义，模型无从判断这代表什么偏好（FR-19.2）。
+ * @experimental
+ */
+interface BehaviorScene {
+  readonly sessionId: string;
+  readonly skillName?: string;
+  readonly interactionId?: string;
+  readonly fieldName?: string;
+  /** 字段语义（label / description），供提炼时理解字段含义 */
+  readonly fieldSemantics?: string;
+  /** 下拉候选集：理解「用户在什么范围里选了什么」 */
+  readonly options?: readonly string[];
+}
+/** @experimental */
+interface BehaviorRecord {
+  readonly id: string;
+  readonly kind: BehaviorRecordKind;
+  /** epoch ms */
+  readonly at: number;
+  readonly scene: BehaviorScene;
+  readonly value: string;
+  /** 用户是否显式确认过（采样维度之一） */
+  readonly confirmed?: boolean;
+}
+/** 一条自然语言结论。条目化而不是整段文本，才谈得上逐条查看与删除（FR-19.3） @experimental */
+interface UserProfileEntry {
+  readonly id: string;
+  readonly text: string;
+  readonly confidence: 'high' | 'low';
+  /** epoch ms */
+  readonly updatedAt: number;
+  readonly sourceKinds: readonly BehaviorRecordKind[];
+}
+/** @experimental */
+interface UserProfile {
+  readonly version: 1;
+  readonly entries: readonly UserProfileEntry[];
+  /** epoch ms；从未提炼过时为 0 */
+  readonly refinedAt: number;
+}
+/** @experimental */
+interface UserProfileLimits {
+  /** 行为记录容量上限，超出淘汰最旧 */
+  recordLimit: number;
+  /** 单条 value 的字符上限（用户输入需保留语义，故远大于感知截断） */
+  valueMaxChars: number;
+  /** 送入一次提炼的记录条数上限 */
+  sampleLimit: number;
+  /** 画像注入系统提示的字节上限 */
+  injectMaxBytes: number;
+  /** 画像条目数上限，超出按 updatedAt 淘汰 */
+  entryLimit: number;
+}
+/** @experimental */
+declare const DEFAULT_USER_PROFILE_LIMITS: UserProfileLimits;
+/** @experimental */
+declare const EMPTY_USER_PROFILE: UserProfile;
+//#endregion
+//#region src/profile/records.d.ts
+/** `user:{id}` scope 下的行为记录 key @experimental */
+declare const BEHAVIOR_RECORDS_KEY = "behaviorRecords";
+/** `user:{id}` scope 下的画像 key @experimental */
+declare const USER_PROFILE_KEY = "userProfile";
+/** 存储里的形状不受控（宿主可能手改文件），逐条筛而不是整体信任 @experimental */
+declare function readBehaviorRecords(raw: unknown): BehaviorRecord[];
+/**
+ * 追加并按容量淘汰最旧（FR-19.2）。`value` 同时截断：
+ * 一条被粘贴进来的长文本能把整个 JSON 撑爆，而提炼只需要语义。
+ * @experimental
+ */
+declare function appendBehaviorRecords(current: readonly BehaviorRecord[], incoming: readonly BehaviorRecord[], limits?: UserProfileLimits): BehaviorRecord[];
+/** @experimental */
+declare function readUserProfile(raw: unknown): UserProfile;
+/** @experimental */
+declare function readProfileEntries(raw: unknown): UserProfileEntry[];
+/**
+ * 合并提炼结果：同 id 更新，新 id 追加，超上限按 `updatedAt` 淘汰最旧（设计 09 §1.4）。
+ * @experimental
+ */
+declare function mergeProfileEntries(current: UserProfile, incoming: readonly UserProfileEntry[], options: {
+  now: number;
+  limits?: UserProfileLimits;
+}): UserProfile;
+/**
+ * 提炼采样（FR-19.3）：最近的 + 高频的 + 被用户显式确认过的，去重后截到上限。
+ * 三个维度缺一不可——只取最近会让长期偏好被一次突发淹没，只取高频则学不到新变化。
+ * @experimental
+ */
+declare function sampleBehaviorRecords(records: readonly BehaviorRecord[], limits?: UserProfileLimits): BehaviorRecord[];
+//#endregion
+//#region src/profile/refine.d.ts
+/**
+ * 提炼提示词。要求返回结论列表而不是散文：条目化是「可见、可编辑、可删除」的前提（FR-19.3）。
+ * `id` 由模型给出稳定 slug，才能在下一次提炼时更新同一条而不是无限追加。
+ */
+declare const USER_PROFILE_REFINE_PROMPT = "You summarize what a single user is like, based on records of what they did in a chat application.\n\nReturn ONLY a JSON object with this shape, and nothing else:\n\n{\n  \"entries\": [\n    { \"id\": \"slug-case-stable-id\", \"text\": \"One sentence about the user.\", \"confidence\": \"high\" | \"low\" }\n  ]\n}\n\nRules:\n- Each entry is one durable, reusable fact or preference about the user — how they like answers, what they work on, values they keep entering, languages they use.\n- Reuse the same \"id\" across runs for the same conclusion so it can be updated instead of duplicated. Use lowercase words joined by hyphens.\n- Use \"high\" only when several records agree. A single record is \"low\".\n- Do not restate individual records. Do not include secrets, credentials, or full personal identifiers.\n- Do not invent anything the records do not support. If the records say nothing useful, return {\"entries\": []}.";
+/** @experimental */
+interface RefineUserProfileInput {
+  llm: LlmClient;
+  records: readonly BehaviorRecord[];
+  /** 当前画像；提炼结果与它合并（同 id 更新） */
+  profile?: UserProfile;
+  model?: string;
+  limits?: UserProfileLimits;
+  /** epoch ms 时钟，默认 `Date.now` */
+  now?: () => number;
+  signal?: AbortSignal;
+}
+/** 送模型的记录形态：只保留提炼用得上的字段，会话 id 之类的内部标识不外发 */
+interface RecordDigest {
+  kind: string;
+  at: string;
+  value: string;
+  skill?: string;
+  field?: string;
+  meaning?: string;
+  options?: readonly string[];
+  confirmed?: boolean;
+}
+/** 采样后的记录 → 送模型的摘要。导出供测试与宿主复核实际请求内容（AC-19.6） @experimental */
+declare function toRecordDigests(records: readonly BehaviorRecord[]): RecordDigest[];
+/**
+ * 一次提炼（FR-19.3）。调用方负责持久化返回值；本函数不碰存储，
+ * 也不吞异常——「失败不影响会话结束」由调用点的 fire-and-forget 保证，
+ * 在这里吞掉会让手动提炼入口无法报错。
+ * @experimental
+ */
+declare function refineUserProfile(input: RefineUserProfileInput): Promise<UserProfile>;
+//#endregion
+//#region src/profile/inject.d.ts
+/** 注入段的标题。宿主/测试要判断「有没有注入画像」时对它取子串，不要自己再拼一份 @experimental */
+declare const USER_PROFILE_PROMPT_HEADER = "## About this user (inferred from past behavior; may be outdated)";
+/**
+ * 无画像时也要下发的约束（AC-19.11）：没有依据就把字段留空，
+ * 不写这一句时模型会把「建议值」当成必填项去编。
+ * @experimental
+ */
+declare const USER_PROFILE_NO_INVENTION_RULE = "Only offer a suggested value for a question when the profile above actually supports it. With no relevant profile entry, omit the suggestion and leave the field empty; never invent one.";
+/**
+ * 画像 → 系统提示片段，按 confidence + updatedAt 优先级排序后逐条累加，
+ * 超出字节上限的部分丢弃并标注（FR-19.4 / AC-19.9）。
+ * 空画像返回空串：只有标题的空段落白占 token，还会诱导模型编造。
+ * @experimental
+ */
+declare function renderUserProfileContext(profile?: UserProfile, maxBytes?: number): string;
+//#endregion
+//#region src/profile/transfer.d.ts
+/** 导出文件的版本；导入时逐字校验，不做向前兼容猜测 @experimental */
+declare const USER_PROFILE_EXPORT_VERSION = 1;
+/**
+ * 导出物（FR-19.7）。**结构上只有 entries**：原始行为记录与凭据没有容身之处，
+ * 这是「导出不泄露」的类型层保证，运行时另有一道断言兜底。
+ * @experimental
+ */
+interface UserProfileExport {
+  readonly kind: 'webskill.user-profile';
+  readonly version: typeof USER_PROFILE_EXPORT_VERSION;
+  /** 来源标识（站点 origin），用于导入时说明这份画像来自哪里 */
+  readonly origin: string;
+  /** epoch ms */
+  readonly exportedAt: number;
+  readonly entries: readonly UserProfileEntry[];
+}
+/**
+ * 导出画像（FR-19.7）。`excludeIds` 来自导出前的审阅界面：用户勾掉的条目不进文件。
+ * @experimental
+ */
+declare function exportUserProfile(profile: UserProfile, options: {
+  origin: string;
+  excludeIds?: readonly string[];
+  now?: () => number;
+}): UserProfileExport;
+/** 解析并校验导入内容（FR-19.7）。含凭据是**拒绝**而不是忽略 @experimental */
+declare function parseUserProfileExport(raw: unknown): UserProfileExport;
+/** 导入前给用户看的差异（FR-19.7）：新增哪些、覆盖哪些 @experimental */
+declare function diffUserProfile(current: UserProfile, incoming: UserProfileExport): {
+  added: readonly UserProfileEntry[];
+  updated: readonly UserProfileEntry[];
+};
+/** 确认后落库：同 id 覆盖，其余保留；不触碰模型配置与凭据 @experimental */
+declare function applyUserProfileImport(current: UserProfile, incoming: UserProfileExport, options?: {
+  now?: () => number;
+}): UserProfile;
+//#endregion
 //#region src/artifacts/fsArtifactStore.d.ts
 /**
  * 基于 FileSystemProvider 的 ArtifactStore：产物落盘 <root>/<runId>/<path>，
@@ -768,6 +1039,20 @@ declare class TraceRecorder {
   list(): TraceEvent[];
 }
 //#endregion
+//#region src/trace/todoMarker.d.ts
+interface TodoTraceEvent {
+  type: TraceEventType;
+  data: Record<string, unknown>;
+}
+/**
+ * `$todo` 约定的形状校验：JSON content 的 data 含 `$todo` 键（单条或数组）→ trace 事件。
+ *
+ * 与 `$chart` / `$surface` 同一条既有通道——待办清单的状态机全部在 `@webskill/agent`，
+ * runtime 只认这三个事件类型名，不含任何计划态逻辑。畸形条目忽略不炸。
+ * @experimental
+ */
+declare function extractTodoTraceEvents(data: unknown): TodoTraceEvent[];
+//#endregion
 //#region src/engine/external.d.ts
 /**
  * 外部工具来源（runtime 扩展点，mcp 包实现并插入）。
@@ -919,6 +1204,15 @@ interface AgentLoopDeps {
     enabled: true;
     userId: string;
   };
+  /**
+   * 用户画像（FR-19.2/19.4）；**不注入即关闭**，关闭时既不记录也不注入。
+   * 与 `longTerm` 分开：后者存的是技能使用统计，本项存的是用户行为与对其的推断，
+   * 两者的隐私含义不同（FR-19.6）。
+   */
+  userProfile?: {
+    userId: string;
+    limits?: UserProfileLimits;
+  };
   /** 外部工具来源（mcp 插件等）；specs 在 run 开始时并入每轮 tools */
   externalTools?: ExternalToolSource[];
   /** 外部技能提供者（页面动态技能等） */
@@ -945,12 +1239,12 @@ declare class AgentLoop {
   /**
    * 取消进行中的 run：触发该 run 的 AbortController（与 totalTimeout 硬期限同一通道），
    * run 以 cancelled（RUN_CANCELLED）终止；未找到（已终态或不属于本实例）返回 false。
-   * 取消在下一个中断点生效（LLM complete/stream 调用；交互等待不强制中断）。
+   * 取消在下一个中断点生效；LLM 调用与交互等待都监听同一个 signal，因此等表单时也能立即停。
    */
   cancel(runId: string): boolean;
   run(input: {
     sessionId: string;
-    userPrompt: string;
+    userPrompt: string | readonly LlmContentPart[];
     route: RouteResult;
     runId?: string;
     /** 多会话历史延续：插入 system 与本轮 user 之间（不含 system 消息） */
@@ -988,6 +1282,11 @@ interface WebSkillRuntimeDeps {
     enabled: true;
     userId: string;
   };
+  /** 用户画像（FR-19.2/19.4）；不注入即关闭，关闭时既不记录也不注入 */
+  userProfile?: {
+    userId: string;
+    limits?: UserProfileLimits;
+  };
   /** 外部工具来源（mcp 插件等） */
   externalTools?: ExternalToolSource[];
   /** 外部技能提供者（页面动态技能等）；Catalog 合并同名本地优先 */
@@ -1036,9 +1335,10 @@ declare class WebSkillRuntime {
     maxHistoryMessages?: number;
   }): RuntimeSessionHandle;
   discover(): Promise<DiscoveryResult>;
-  run(userPrompt: string, options?: {
+  run(userPrompt: string | readonly LlmContentPart[], options?: {
     sessionId?: string;
     history?: LlmMessage[];
+    skillName?: string;
   }): Promise<RunResult>;
   /** D3：列出 interrupted run（供 UI 展示"未完成任务"）；版本不受支持的项带 unsupported 标记 */
   listInterruptedRuns(): Promise<RunSnapshotListEntry[]>;
@@ -1147,8 +1447,10 @@ declare class FsRunTraceStore implements RunTraceStore {
   constructor(deps: {
     root: string;
     fs: FileSystemProvider;
-    /** 落盘失败的降级处理；默认 console.warn，保持「写失败不阻断对话」的产品语义 */
+    /** 正文落盘失败的降级处理；默认 console.warn，保持「写失败不阻断对话」的产品语义 */
     onError?: (error: unknown, run: RuntimeRun) => void;
+    /** 索引追加失败的降级处理；与 onError 分开是因为它可自愈（FR-21.7） */
+    onIndexError?: (error: unknown, run: RuntimeRun) => void;
   });
   put(run: RuntimeRun): Promise<void>;
   get(runId: string): Promise<RunTraceFile>;
@@ -1169,6 +1471,13 @@ interface RunToolCall {
   args?: string;
   /** 执行耗时 ms */
   durationMs?: number;
+  /**
+   * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
+   * 消费方据此区分「被策略拒绝」与「执行出错」，不必解析 message 文案。
+   */
+  errorCode?: string;
+  /** failed 时的错误说明（trace 事件的 message） */
+  errorMessage?: string;
 }
 /**
  * 从 run 的 trace 推导终态工具调用列表。
@@ -1204,6 +1513,16 @@ interface SessionRecord<TMessage = unknown> extends SessionMeta {
   schemaVersion: number;
   messages: TMessage[];
 }
+/**
+ * `list()` 的返回页。空列表有两种成因，UI 必须能分辨：
+ * 真的没有会话，和根目录压根不存在（多半是 chatRoot 配错）。
+ */
+interface SessionListPage extends Page<SessionMeta> {
+  /** `'ok'` = 正常列举；`'missing-root'` = 根目录不存在 */
+  readonly source: 'ok' | 'missing-root';
+  /** 解析失败被跳过的文件名，供 UI 提示与定位 */
+  readonly skipped: readonly string[];
+}
 /**
  * 会话持久化端口。消息载荷对 runtime 不透明——`ChatMessage` 是 chatbot 的 UI 类型，
  * runtime 不能认识它，所以泛型默认 `unknown`（只读消费方直接用默认参数即可）。
@@ -1215,7 +1534,7 @@ interface SessionStore<TMessage = unknown> {
    */
   list(options?: {
     includeArchived?: boolean;
-  } & PageQuery): Promise<Page<SessionMeta>>;
+  } & PageQuery): Promise<SessionListPage>;
   get(id: string): Promise<SessionRecord<TMessage> | undefined>;
   /**
    * 消息分页读。与 `list()` 同方向：无游标时给**最后**一页（最新的 `limit` 条），
@@ -1252,7 +1571,7 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   });
   list(options?: {
     includeArchived?: boolean;
-  } & PageQuery): Promise<Page<SessionMeta>>;
+  } & PageQuery): Promise<SessionListPage>;
   /**
    * 整文件读后切片。磁盘 I/O 复杂度没有改善（备案 D25），
    * 但**跨出端口的记录数**已是常量——这正是分页对上层的意义。
@@ -1272,4 +1591,4 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   delete(id: string): Promise<void>;
 }
 //#endregion
-export { RunSnapshot as $, normalizeToolContent as $t, GoogleGenAiClientConfig as A, TraceClock as At, LifecycleListener as B, buildRenderResult as Bt, FsArtifactStore as C, SkillOutcomeReporter as Ct, FsSessionStore as D, ToolDefinition as Dt, FsRunTraceStore as E, TerminalLifecycleData as Et, InteractLifecycleData as F, VercelToolSpec as Ft, READ_SKILL_FILE_INPUT_SCHEMA as G, fromVercelResult as Gt, OpenAiCompatibleClient as H, createWebSkillApi as Ht, LifecycleEvent as I, WebSkillApi as It, RUN_SNAPSHOT_SCHEMA_VERSION as J, isUnsupportedRunSnapshot as Jt, READ_SKILL_FILE_TOOL as K, fromVercelStreamPart as Kt, LifecycleEventInit as L, WebSkillRuntime as Lt, HookRunnerOptions as M, TraceEventType as Mt, InstalledSkillManifest as N, TraceRecorder as Nt, FullDisclosureRouter as O, ToolResolution as Ot, IntegrityVerdict as P, UnsupportedRunSnapshot as Pt, RunResult as Q, normalizeErrorCode as Qt, LifecycleHook as R, WebSkillRuntimeDeps as Rt, FS_SESSION_PAGE_SIZE as S, SkillIntegrityGuard as St, FsRunSnapshotStore as T, SkillStateGuard as Tt, OpenAiCompatibleClientConfig as U, extractChartSpec as Ut, NetworkPolicy as V, createScriptContext as Vt, ProgressiveRouter as W, extractUiSpecEvents as Wt, RouteLifecycleData as X, networkPolicyLibSource as Xt, RUN_TRACE_SCHEMA_VERSION as Y, mergeCatalogEntries as Yt, RouteResult as Z, networkUrlHost as Zt, CapabilityMode as _, SerializingMemoryStore as _t, AgentLoop as a, summarizeToolCalls as an, RunTraceFilter as at, ExternalSkillProvider as b, SessionStore as bt, AnthropicClient as c, toVercelToolSpecs as cn, RunTraceSummary as ct, ApprovalScope as d, RuntimeSession as dt, normalizeToolError as en, RunSnapshotListEntry as et, BridgeCapabilities as f, RuntimeSessionHandle as ft, CapabilityApproval as g, ScriptExecutor as gt, BridgeResponse as h, ScriptExecutionContext as ht, ActivateLifecycleData as i, schemaToForm as in, RunTraceFile as it, HookRunner as j, TraceEvent as jt, GoogleGenAiClient as k, ToolResult as kt, AnthropicClientConfig as l, validateUiSpecEvent as ln, RuntimePhase as lt, BridgeRequest as m, SchemaInferer as mt, ASK_USER_TOOL as n, partsToText as nn, RunTerminationReason as nt, AgentLoopConfig as o, textParts as on, RunTraceMetrics as ot, BridgeCapability as p, SESSION_SCHEMA_VERSION as pt, READ_SKILL_FILE_TOOL_NAME as q, isNetworkAllowed as qt, ASK_USER_TOOL_NAME as r, resolveToolName as rn, RunToolCall as rt, AgentLoopDeps as s, toLlmToolSpec as sn, RunTraceStore as st, ASK_USER_INPUT_SCHEMA as t, parseBridgeRequest as tn, RunSnapshotStore as tt, ApprovalDecision as u, validateUiSpecNode as un, RuntimeRun as ut, EventBus as v, SessionMeta as vt, FsMemoryStore as w, SkillRouter as wt, ExternalToolSource as x, SkillFailureReport as xt, ExecuteLifecycleData as y, SessionRecord as yt, LifecycleHookContext as z, bridgeError as zt };
+export { READ_SKILL_FILE_TOOL as $, UnsupportedRunSnapshot as $t, FsArtifactStore as A, normalizeToolContent as An, SkillFailureReport as At, InstalledSkillManifest as B, resolveToolName as Bn, ToolContent as Bt, DEFAULT_USER_PROFILE_LIMITS as C, isUnsupportedRunSnapshot as Cn, ScriptExecutionContext as Ct, ExternalSkillProvider as D, networkPolicyLibSource as Dn, SessionMeta as Dt, ExecuteLifecycleData as E, mergeProfileEntries as En, SessionListPage as Et, FullDisclosureRouter as F, readBehaviorRecords as Fn, SkillScriptSchemaSource as Ft, LifecycleHook as G, summarizeToolCalls as Gn, TraceEvent as Gt, InteractLifecycleData as H, schemaSourceLabel as Hn, ToolResolution as Ht, GoogleGenAiClient as I, readProfileEntries as In, SkillStateGuard as It, NetworkPolicy as J, toRecordDigests as Jn, USER_PROFILE_EXPORT_VERSION as Jt, LifecycleHookContext as K, textParts as Kn, TraceEventType as Kt, GoogleGenAiClientConfig as L, readUserProfile as Ln, TerminalLifecycleData as Lt, FsRunSnapshotStore as M, parseBridgeRequest as Mn, SkillOutcomeReporter as Mt, FsRunTraceStore as N, parseUserProfileExport as Nn, SkillRouter as Nt, ExternalToolSource as O, networkUrlHost as On, SessionRecord as Ot, FsSessionStore as P, partsToText as Pn, SkillScriptDescriptor as Pt, READ_SKILL_FILE_INPUT_SCHEMA as Q, USER_PROFILE_REFINE_PROMPT as Qt, HookRunner as R, refineUserProfile as Rn, TextualToolContent as Rt, CapabilityMode as S, isNetworkAllowed as Sn, SchemaInferer as St, EventBus as T, mergeCatalogEntries as Tn, SerializingMemoryStore as Tt, LifecycleEvent as U, schemaToForm as Un, ToolResult as Ut, IntegrityVerdict as V, sampleBehaviorRecords as Vn, ToolDefinition as Vt, LifecycleEventInit as W, scriptToolName as Wn, TraceClock as Wt, OpenAiCompatibleClientConfig as X, validateUiSpecEvent as Xn, USER_PROFILE_NO_INVENTION_RULE as Xt, OpenAiCompatibleClient as Y, toVercelToolSpecs as Yn, USER_PROFILE_KEY as Yt, ProgressiveRouter as Z, validateUiSpecNode as Zn, USER_PROFILE_PROMPT_HEADER as Zt, BridgeCapabilities as _, extractTodoTraceEvents as _n, RuntimePhase as _t, ActivateLifecycleData as a, WebSkillApi as an, RouteResult as at, BridgeResponse as b, fromVercelResult as bn, RuntimeSessionHandle as bt, AgentLoopDeps as c, appendBehaviorRecords as cn, RunSnapshotListEntry as ct, ApprovalDecision as d, buildRenderResult as dn, RunToolCall as dt, UserProfile as en, READ_SKILL_FILE_TOOL_NAME as et, ApprovalScope as f, createScriptContext as fn, RunTraceFile as ft, BehaviorScene as g, extractChartSpec as gn, RunTraceSummary as gt, BehaviorRecordKind as h, exportUserProfile as hn, RunTraceStore as ht, ASK_USER_TOOL_NAME as i, VercelToolSpec as in, RouteLifecycleData as it, FsMemoryStore as j, normalizeToolError as jn, SkillIntegrityGuard as jt, FS_SESSION_PAGE_SIZE as k, normalizeErrorCode as kn, SessionStore as kt, AnthropicClient as l, applyUserProfileImport as ln, RunSnapshotStore as lt, BehaviorRecord as m, diffUserProfile as mn, RunTraceMetrics as mt, ASK_USER_INPUT_SCHEMA as n, UserProfileExport as nn, RUN_TRACE_SCHEMA_VERSION as nt, AgentLoop as o, WebSkillRuntime as on, RunResult as ot, BEHAVIOR_RECORDS_KEY as p, createWebSkillApi as pn, RunTraceFilter as pt, LifecycleListener as q, toLlmToolSpec as qn, TraceRecorder as qt, ASK_USER_TOOL as r, UserProfileLimits as rn, RefineUserProfileInput as rt, AgentLoopConfig as s, WebSkillRuntimeDeps as sn, RunSnapshot as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, UserProfileEntry as tn, RUN_SNAPSHOT_SCHEMA_VERSION as tt, AnthropicClientConfig as u, bridgeError as un, RunTerminationReason as ut, BridgeCapability as v, extractUiSpecEvents as vn, RuntimeRun as vt, EMPTY_USER_PROFILE as w, listSkillScripts as wn, ScriptExecutor as wt, CapabilityApproval as x, fromVercelStreamPart as xn, SESSION_SCHEMA_VERSION as xt, BridgeRequest as y, formatSkillScriptManifest as yn, RuntimeSession as yt, HookRunnerOptions as z, renderUserProfileContext as zn, TodoTraceEvent as zt };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillDocument, A as DEFAULT_ARCHIVE_LIMITS, At as jsonRenderer, B as RemoteUrlPolicy, Bt as resolveArchiveLimits, C as UiSpecPatch, Ct as buildManifest, D as ArchiveLimits, Dt as escapeXml, E as UiSurfaceActionResponse, Et as computeDigest, F as JsonSchema, Ft as parseSkillPackManifest, G as SKILL_NAME_PATTERN, Gt as validateSkills, H as SKILLS_LOCKFILE, Ht as signSkill, I as MANIFEST_EXCLUDED_FILES, It as readResponseWithLimit, J as SignatureAuditSink, Jt as xmlRenderer, K as SKILL_PACK_FILE, Kt as verifyManifest, L as MemoryFS, Lt as readSkillSignature, M as FileStat, Mt as messageOf, N as FileSystemProvider, Nt as normalizePath, O as CatalogRenderer, Ot as exportSkills, P as FsTrustedKeyStore, Pt as parseSkillMarkdown, Q as SkillDiscovery, R as Page, Rt as renderAvailableSkillsXml, S as UiSpecEvent, St as buildCatalog, T as UiSurfaceActionRequest, Tt as checkSkillRules, U as SKILL_MANIFEST_FILE, Ut as signaturePayloadBytes, V as SIGNATURE_SCHEMA_VERSION, Vt as resolveInsideRoot, W as SKILL_NAME_MAX_LENGTH, Wt as unzipWithLimits, X as SkillCatalog, Y as SignatureVerdict, Z as SkillCatalogEntry, _ as RenderBlock, _t as WebSkillError, a as InteractionPolicy, at as SkillMetadata, b as UiSpecActionCapability, bt as assertSafePathSegment, c as LlmClient, ct as SkillSignature, d as LlmMessage, dt as TrustedKey, et as SkillInstallSource, f as LlmResponse, ft as TrustedKeyStore, g as MemoryStore, gt as VerifyResult, h as LlmToolSpec, ht as ValidationReport, i as FormField, it as SkillManifest, j as DiscoveryResult, jt as keyIdOf, k as CryptoKeyLike, kt as isValidSkillName, l as LlmCompleteInput, lt as SkillSource, m as LlmToolCall, mt as UnsignedPolicy, n as ArtifactStore, nt as SkillLocation, o as InteractionRequest, ot as SkillPackManifest, p as LlmStreamEvent, pt as UiSpecNode, q as SKILL_SIGNATURE_FILE, qt as verifySkillSignature, r as ChartSpec, rt as SkillManagerPort, s as InteractionResponse, st as SkillReader, t as Artifact, tt as SkillIssue, u as LlmContentPart, ut as SkillsLockfile, v as RenderResultRequest, vt as WebSkillErrorCode, w as UiSpecSnapshot, wt as checkDependencyCycles, x as UiSpecDrafts, xt as atomicWriteText, y as UiBridge, yt as assertRemoteUrlAllowed, z as PageQuery, zt as renderCatalogJson } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-import { $ as RunSnapshot, $t as normalizeToolContent, A as GoogleGenAiClientConfig, At as TraceClock, B as LifecycleListener, Bt as buildRenderResult, C as FsArtifactStore, Ct as SkillOutcomeReporter, D as FsSessionStore, Dt as ToolDefinition, E as FsRunTraceStore, Et as TerminalLifecycleData, F as InteractLifecycleData, Ft as VercelToolSpec, G as READ_SKILL_FILE_INPUT_SCHEMA, Gt as fromVercelResult, H as OpenAiCompatibleClient, Ht as createWebSkillApi, I as LifecycleEvent, It as WebSkillApi, J as RUN_SNAPSHOT_SCHEMA_VERSION, Jt as isUnsupportedRunSnapshot, K as READ_SKILL_FILE_TOOL, Kt as fromVercelStreamPart, L as LifecycleEventInit, Lt as WebSkillRuntime, M as HookRunnerOptions, Mt as TraceEventType, N as InstalledSkillManifest, Nt as TraceRecorder, O as FullDisclosureRouter, Ot as ToolResolution, P as IntegrityVerdict, Pt as UnsupportedRunSnapshot, Q as RunResult, Qt as normalizeErrorCode, R as LifecycleHook, Rt as WebSkillRuntimeDeps, S as FS_SESSION_PAGE_SIZE, St as SkillIntegrityGuard, T as FsRunSnapshotStore, Tt as SkillStateGuard, U as OpenAiCompatibleClientConfig, Ut as extractChartSpec, V as NetworkPolicy, Vt as createScriptContext, W as ProgressiveRouter, Wt as extractUiSpecEvents, X as RouteLifecycleData, Xt as networkPolicyLibSource, Y as RUN_TRACE_SCHEMA_VERSION, Yt as mergeCatalogEntries, Z as RouteResult, Zt as networkUrlHost, _ as CapabilityMode, _t as SerializingMemoryStore, a as AgentLoop, an as summarizeToolCalls, at as RunTraceFilter, b as ExternalSkillProvider, bt as SessionStore, c as AnthropicClient, cn as toVercelToolSpecs, ct as RunTraceSummary, d as ApprovalScope, dt as RuntimeSession, en as normalizeToolError, et as RunSnapshotListEntry, f as BridgeCapabilities, ft as RuntimeSessionHandle, g as CapabilityApproval, gt as ScriptExecutor, h as BridgeResponse, ht as ScriptExecutionContext, i as ActivateLifecycleData, in as schemaToForm, it as RunTraceFile, j as HookRunner, jt as TraceEvent, k as GoogleGenAiClient, kt as ToolResult, l as AnthropicClientConfig, ln as validateUiSpecEvent, lt as RuntimePhase, m as BridgeRequest, mt as SchemaInferer, n as ASK_USER_TOOL, nn as partsToText, nt as RunTerminationReason, o as AgentLoopConfig, on as textParts, ot as RunTraceMetrics, p as BridgeCapability, pt as SESSION_SCHEMA_VERSION, q as READ_SKILL_FILE_TOOL_NAME, qt as isNetworkAllowed, r as ASK_USER_TOOL_NAME, rn as resolveToolName, rt as RunToolCall, s as AgentLoopDeps, sn as toLlmToolSpec, st as RunTraceStore, t as ASK_USER_INPUT_SCHEMA, tn as parseBridgeRequest, tt as RunSnapshotStore, u as ApprovalDecision, un as validateUiSpecNode, ut as RuntimeRun, v as EventBus, vt as SessionMeta, w as FsMemoryStore, wt as SkillRouter, x as ExternalToolSource, xt as SkillFailureReport, y as ExecuteLifecycleData, yt as SessionRecord, z as LifecycleHookContext, zt as bridgeError } from "./index-DLfR2Y6I.js";
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, type DiscoveryResult, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+import { $ as SkillDiscovery, A as CryptoKeyLike, At as isValidSkillName, B as PageQuery, Bt as renderCatalogJson, C as UiSpecEvent, Ct as buildCatalog, D as UiSurfaceActionResponse, Dt as computeDigest, E as UiSurfaceActionRequest, Et as checkSkillRules, F as FsTrustedKeyStore, Ft as parseSkillMarkdown, G as SKILL_NAME_MAX_LENGTH, Gt as unzipWithLimits, H as SIGNATURE_SCHEMA_VERSION, Ht as resolveInsideRoot, I as JsonSchema, It as parseSkillPackManifest, J as SKILL_SIGNATURE_FILE, Jt as verifySkillSignature, K as SKILL_NAME_PATTERN, Kt as validateSkills, L as MANIFEST_EXCLUDED_FILES, Lt as readResponseWithLimit, M as DiscoveryResult, Mt as keyIdOf, N as FileStat, Nt as messageOf, O as ArchiveLimits, Ot as escapeXml, P as FileSystemProvider, Pt as normalizePath, Q as SkillCatalogEntry, R as MemoryFS, Rt as readSkillSignature, S as UiSpecDrafts, St as atomicWriteText, T as UiSpecSnapshot, Tt as checkDependencyCycles, U as SKILLS_LOCKFILE, Ut as signSkill, V as RemoteUrlPolicy, Vt as resolveArchiveLimits, W as SKILL_MANIFEST_FILE, Wt as signaturePayloadBytes, X as SignatureVerdict, Y as SignatureAuditSink, Yt as xmlRenderer, Z as SkillCatalog, _ as MemoryStore, _t as VerifyResult, a as InteractionOrigin, at as SkillManifest, b as UiBridge, bt as assertRemoteUrlAllowed, c as InteractionResponse, ct as SkillReader, d as LlmContentPart, dt as SkillsLockfile, et as SkillDocument, f as LlmMessage, ft as TrustedKey, g as LlmToolSpec, gt as ValidationReport, h as LlmToolCall, ht as UnsignedPolicy, i as FormField, it as SkillManagerPort, j as DEFAULT_ARCHIVE_LIMITS, jt as jsonRenderer, k as CatalogRenderer, kt as exportSkills, l as LlmClient, lt as SkillSignature, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, nt as SkillIssue, o as InteractionPolicy, ot as SkillMetadata, p as LlmResponse, pt as TrustedKeyStore, q as SKILL_PACK_FILE, qt as verifyManifest, r as ChartSpec, rt as SkillLocation, s as InteractionRequest, st as SkillPackManifest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, ut as SkillSource, v as RenderBlock, vt as WebSkillError, w as UiSpecPatch, wt as buildManifest, x as UiSpecActionCapability, xt as assertSafePathSegment, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page, zt as renderAvailableSkillsXml } from "./types-4pg-qp_I-Gq63X8Oa.js";
+import { $ as READ_SKILL_FILE_TOOL, $t as UnsupportedRunSnapshot, A as FsArtifactStore, An as normalizeToolContent, At as SkillFailureReport, B as InstalledSkillManifest, Bn as resolveToolName, Bt as ToolContent, C as DEFAULT_USER_PROFILE_LIMITS, Cn as isUnsupportedRunSnapshot, Ct as ScriptExecutionContext, D as ExternalSkillProvider, Dn as networkPolicyLibSource, Dt as SessionMeta, E as ExecuteLifecycleData, En as mergeProfileEntries, Et as SessionListPage, F as FullDisclosureRouter, Fn as readBehaviorRecords, Ft as SkillScriptSchemaSource, G as LifecycleHook, Gn as summarizeToolCalls, Gt as TraceEvent, H as InteractLifecycleData, Hn as schemaSourceLabel, Ht as ToolResolution, I as GoogleGenAiClient, In as readProfileEntries, It as SkillStateGuard, J as NetworkPolicy, Jn as toRecordDigests, Jt as USER_PROFILE_EXPORT_VERSION, K as LifecycleHookContext, Kn as textParts, Kt as TraceEventType, L as GoogleGenAiClientConfig, Ln as readUserProfile, Lt as TerminalLifecycleData, M as FsRunSnapshotStore, Mn as parseBridgeRequest, Mt as SkillOutcomeReporter, N as FsRunTraceStore, Nn as parseUserProfileExport, Nt as SkillRouter, O as ExternalToolSource, On as networkUrlHost, Ot as SessionRecord, P as FsSessionStore, Pn as partsToText, Pt as SkillScriptDescriptor, Q as READ_SKILL_FILE_INPUT_SCHEMA, Qt as USER_PROFILE_REFINE_PROMPT, R as HookRunner, Rn as refineUserProfile, Rt as TextualToolContent, S as CapabilityMode, Sn as isNetworkAllowed, St as SchemaInferer, T as EventBus, Tn as mergeCatalogEntries, Tt as SerializingMemoryStore, U as LifecycleEvent, Un as schemaToForm, Ut as ToolResult, V as IntegrityVerdict, Vn as sampleBehaviorRecords, Vt as ToolDefinition, W as LifecycleEventInit, Wn as scriptToolName, Wt as TraceClock, X as OpenAiCompatibleClientConfig, Xn as validateUiSpecEvent, Xt as USER_PROFILE_NO_INVENTION_RULE, Y as OpenAiCompatibleClient, Yn as toVercelToolSpecs, Yt as USER_PROFILE_KEY, Z as ProgressiveRouter, Zn as validateUiSpecNode, Zt as USER_PROFILE_PROMPT_HEADER, _ as BridgeCapabilities, _n as extractTodoTraceEvents, _t as RuntimePhase, a as ActivateLifecycleData, an as WebSkillApi, at as RouteResult, b as BridgeResponse, bn as fromVercelResult, bt as RuntimeSessionHandle, c as AgentLoopDeps, cn as appendBehaviorRecords, ct as RunSnapshotListEntry, d as ApprovalDecision, dn as buildRenderResult, dt as RunToolCall, en as UserProfile, et as READ_SKILL_FILE_TOOL_NAME, f as ApprovalScope, fn as createScriptContext, ft as RunTraceFile, g as BehaviorScene, gn as extractChartSpec, gt as RunTraceSummary, h as BehaviorRecordKind, hn as exportUserProfile, ht as RunTraceStore, i as ASK_USER_TOOL_NAME, in as VercelToolSpec, it as RouteLifecycleData, j as FsMemoryStore, jn as normalizeToolError, jt as SkillIntegrityGuard, k as FS_SESSION_PAGE_SIZE, kn as normalizeErrorCode, kt as SessionStore, l as AnthropicClient, ln as applyUserProfileImport, lt as RunSnapshotStore, m as BehaviorRecord, mn as diffUserProfile, mt as RunTraceMetrics, n as ASK_USER_INPUT_SCHEMA, nn as UserProfileExport, nt as RUN_TRACE_SCHEMA_VERSION, o as AgentLoop, on as WebSkillRuntime, ot as RunResult, p as BEHAVIOR_RECORDS_KEY, pn as createWebSkillApi, pt as RunTraceFilter, q as LifecycleListener, qn as toLlmToolSpec, qt as TraceRecorder, r as ASK_USER_TOOL, rn as UserProfileLimits, rt as RefineUserProfileInput, s as AgentLoopConfig, sn as WebSkillRuntimeDeps, st as RunSnapshot, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as UserProfileEntry, tt as RUN_SNAPSHOT_SCHEMA_VERSION, u as AnthropicClientConfig, un as bridgeError, ut as RunTerminationReason, v as BridgeCapability, vn as extractUiSpecEvents, vt as RuntimeRun, w as EMPTY_USER_PROFILE, wn as listSkillScripts, wt as ScriptExecutor, x as CapabilityApproval, xn as fromVercelStreamPart, xt as SESSION_SCHEMA_VERSION, y as BridgeRequest, yn as formatSkillScriptManifest, yt as RuntimeSession, z as HookRunnerOptions, zn as renderUserProfileContext, zt as TodoTraceEvent } from "./index-C-KFAZoF.js";
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,5 +1,5 @@
 import { A as parseSkillMarkdown, B as unzipWithLimits, C as escapeXml, D as keyIdOf, E as jsonRenderer, F as renderCatalogJson, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, P as renderAvailableSkillsXml, R as signSkill, S as computeDigest, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, W as xmlRenderer, _ as atomicWriteText, a as SIGNATURE_SCHEMA_VERSION, b as checkDependencyCycles, c as SKILL_NAME_MAX_LENGTH, d as SKILL_SIGNATURE_FILE, f as SkillDiscovery, g as assertSafePathSegment, h as assertRemoteUrlAllowed, i as MemoryFS, j as parseSkillPackManifest, k as normalizePath, l as SKILL_NAME_PATTERN, m as WebSkillError, n as FsTrustedKeyStore, o as SKILLS_LOCKFILE, p as SkillReader, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as SKILL_PACK_FILE, v as buildCatalog, w as exportSkills, x as checkSkillRules, y as buildManifest, z as signaturePayloadBytes } from "./dist-8oQRa8Xz.js";
-import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
-import { A as createScriptContext, B as networkUrlHost, C as RUN_TRACE_SCHEMA_VERSION, D as WebSkillRuntime, E as TraceRecorder, F as fromVercelStreamPart, G as resolveToolName, H as normalizeToolContent, I as isNetworkAllowed, J as toLlmToolSpec, K as schemaToForm, L as isUnsupportedRunSnapshot, M as extractChartSpec, N as extractUiSpecEvents, O as bridgeError, P as fromVercelResult, R as mergeCatalogEntries, S as RUN_SNAPSHOT_SCHEMA_VERSION, T as SerializingMemoryStore, U as normalizeToolError, V as normalizeErrorCode, W as parseBridgeRequest, X as validateUiSpecEvent, Y as toVercelToolSpecs, Z as validateUiSpecNode, _ as OpenAiCompatibleClient, a as AnthropicClient, b as READ_SKILL_FILE_TOOL, c as FS_SESSION_PAGE_SIZE, d as FsRunSnapshotStore, f as FsRunTraceStore, g as HookRunner, h as GoogleGenAiClient, i as AgentLoop, j as createWebSkillApi, k as buildRenderResult, l as FsArtifactStore, m as FullDisclosureRouter, n as ASK_USER_TOOL, o as CapabilityApproval, p as FsSessionStore, q as summarizeToolCalls, r as ASK_USER_TOOL_NAME, s as EventBus, t as ASK_USER_INPUT_SCHEMA, u as FsMemoryStore, v as ProgressiveRouter, w as SESSION_SCHEMA_VERSION, x as READ_SKILL_FILE_TOOL_NAME, y as READ_SKILL_FILE_INPUT_SCHEMA, z as networkPolicyLibSource } from "./dist-C-Sh0MDU.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { $ as listSkillScripts, A as TraceRecorder, B as buildRenderResult, C as READ_SKILL_FILE_INPUT_SCHEMA, Ct as validateUiSpecEvent, D as RUN_TRACE_SCHEMA_VERSION, E as RUN_SNAPSHOT_SCHEMA_VERSION, F as USER_PROFILE_REFINE_PROMPT, G as extractChartSpec, H as createWebSkillApi, I as WebSkillRuntime, J as formatSkillScriptManifest, K as extractTodoTraceEvents, L as appendBehaviorRecords, M as USER_PROFILE_KEY, N as USER_PROFILE_NO_INVENTION_RULE, O as SESSION_SCHEMA_VERSION, P as USER_PROFILE_PROMPT_HEADER, Q as isUnsupportedRunSnapshot, R as applyUserProfileImport, S as ProgressiveRouter, St as toVercelToolSpecs, T as READ_SKILL_FILE_TOOL_NAME, U as diffUserProfile, V as createScriptContext, W as exportUserProfile, X as fromVercelStreamPart, Y as fromVercelResult, Z as isNetworkAllowed, _ as FsSessionStore, _t as schemaToForm, a as AgentLoop, at as normalizeToolContent, b as HookRunner, bt as toLlmToolSpec, c as CapabilityApproval, ct as parseUserProfileExport, d as EventBus, dt as readUserProfile, et as mergeCatalogEntries, f as FS_SESSION_PAGE_SIZE, ft as refineUserProfile, g as FsRunTraceStore, gt as schemaSourceLabel, h as FsRunSnapshotStore, ht as sampleBehaviorRecords, i as ASK_USER_TOOL_NAME, it as normalizeErrorCode, j as USER_PROFILE_EXPORT_VERSION, k as SerializingMemoryStore, l as DEFAULT_USER_PROFILE_LIMITS, lt as readBehaviorRecords, m as FsMemoryStore, mt as resolveToolName, n as ASK_USER_INPUT_SCHEMA, nt as networkPolicyLibSource, o as AnthropicClient, ot as normalizeToolError, p as FsArtifactStore, pt as renderUserProfileContext, q as extractUiSpecEvents, r as ASK_USER_TOOL, rt as networkUrlHost, s as BEHAVIOR_RECORDS_KEY, st as parseBridgeRequest, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as mergeProfileEntries, u as EMPTY_USER_PROFILE, ut as readProfileEntries, v as FullDisclosureRouter, vt as scriptToolName, w as READ_SKILL_FILE_TOOL, wt as validateUiSpecNode, x as OpenAiCompatibleClient, xt as toRecordDigests, y as GoogleGenAiClient, yt as summarizeToolCalls, z as bridgeError } from "./dist-DusANsrn.js";
 
-export { ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, WebSkillError, WebSkillRuntime, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, escapeXml, exportSkills, extractChartSpec, extractUiSpecEvents, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, mergeCatalogEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, partsToText, readResponseWithLimit, readSkillSignature, renderAvailableSkillsXml, renderCatalogJson, resolveArchiveLimits, resolveInsideRoot, resolveToolName, schemaToForm, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };