@webskill/sdk 0.4.0 → 0.6.0

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { $ as SkillDocument, F as JsonSchema, Z as SkillCatalogEntry, h as LlmToolSpec } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-import { Yt as mergeCatalogEntries, b as ExternalSkillProvider, kt as ToolResult, x as ExternalToolSource } from "./index-DLfR2Y6I.js";
+import { I as JsonSchema, Q as SkillCatalogEntry, et as SkillDocument, g as LlmToolSpec } from "./types-4pg-qp_I-Gq63X8Oa.js";
+import { D as ExternalSkillProvider, O as ExternalToolSource, Tn as mergeCatalogEntries, Ut as ToolResult } from "./index-C-KFAZoF.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -192,15 +192,46 @@ declare function serveSkillAsMcp(server: McpServer, skill: ServedSkill): Promise
 declare const catalogMerge: typeof mergeCatalogEntries;
 //#endregion
 //#region src/webmcp/experimentalWebMcpAdapter.d.ts
-/** navigator.modelContext 鸭子类型（对齐浏览器 WebMCP API 草案） */
+/**
+ * WebMCP 命令式 API 的工具形状（Chrome 150+）。
+ * `getTools()` 返回的工具含 `inputSchema`（JSON 字符串）、`origin`、`window`、`annotations`。
+ * 参考 https://developer.chrome.com/docs/ai/webmcp/imperative-api
+ */
+interface WebMcpToolLike {
+  name: string;
+  description?: string;
+  /** getTools() 返回的 inputSchema 是 JSON 字符串（非对象） */
+  inputSchema?: string;
+  origin?: string;
+  window?: unknown;
+  annotations?: {
+    readOnlyHint?: boolean;
+    untrustedContentHint?: boolean;
+  };
+}
+/**
+ * document.modelContext 鸭子类型（对齐 Chrome 150+ 的 WebMCP 命令式 API）。
+ * - 旧版（Chrome <150）：navigator.modelContext.listTools() / executeTool(name, argsJson)
+ * - 新版（Chrome 150+）：document.modelContext.getTools() / executeTool(tool, argsJson, { signal? })
+ * executeTool 的第一参在两种版本都能接受：新版传 tool 对象，旧版传 name 字符串。
+ */
 interface BrowserModelContextLike {
-  listTools?: () => Promise<unknown>;
-  executeTool?: (name: string, argsJson: string) => Promise<unknown>;
+  getTools?: () => Promise<unknown>;
+  executeTool?: (tool: WebMcpToolLike | string, argsJson: string, options?: {
+    signal?: AbortSignal;
+  }) => Promise<unknown>;
 }
 interface WebMcpToolDescriptor {
   name: string;
   description?: string;
   inputSchema?: unknown;
+  origin?: string;
+  annotations?: {
+    readOnlyHint?: boolean;
+    untrustedContentHint?: boolean;
+  };
+  /** getTools() 返回的原始 tool 对象：executeTool 第一参须透传原对象（含 inputSchema JSON 字符串、window 等） */
+  raw?: unknown;
 }
 /**
  * Experimental WebMCP Adapter（mcp# 分支）：默认关闭显式启用；
@@ -214,9 +245,9 @@ declare class ExperimentalWebMcpAdapter {
     enabled?: boolean;
   });
   isAvailable(): boolean;
-  /** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
+  /** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
   listTools(): Promise<WebMcpToolDescriptor[] | undefined>;
-  /** 工具名清单（listTools 缺失/失败时返回 undefined） */
+  /** 工具名清单（getTools 缺失/失败时返回 undefined） */
   listToolNames(): Promise<string[] | undefined>;
   call(toolName: string, args: Record<string, unknown>): Promise<ToolResult>;
 }
@@ -269,4 +300,4 @@ declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>
   close(): Promise<void>;
 }>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { O as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { H as normalizeToolContent, R as mergeCatalogEntries } from "./dist-C-Sh0MDU.js";
+import { at as normalizeToolContent, et as mergeCatalogEntries } from "./dist-DusANsrn.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -392,15 +392,39 @@ const failure = (code, message) => ({
 		message
 	}
 });
-/** 从 listTools 返回值提取工具描述（容忍数组或 {tools:[]} 两种形状） */
+/** getTools() 返回的工具 → 描述符：inputSchema 为 JSON 字符串时解析为对象，并保留原始对象 */
+function toDescriptor(raw) {
+	if (typeof raw !== "object" || raw === null) return void 0;
+	const t = raw;
+	const name = String(t["name"] ?? "");
+	if (name === "") return void 0;
+	const descriptor = {
+		name,
+		raw
+	};
+	if (typeof t["description"] === "string") descriptor.description = t["description"];
+	if (typeof t["origin"] === "string") descriptor.origin = t["origin"];
+	if (typeof t["annotations"] === "object" && t["annotations"] !== null) {
+		const annotations = t["annotations"];
+		descriptor.annotations = {
+			...typeof annotations["readOnlyHint"] === "boolean" ? { readOnlyHint: annotations["readOnlyHint"] } : {},
+			...typeof annotations["untrustedContentHint"] === "boolean" ? { untrustedContentHint: annotations["untrustedContentHint"] } : {}
+		};
+	}
+	const schema = t["inputSchema"];
+	if (typeof schema === "string" && schema.trim() !== "") try {
+		descriptor.inputSchema = JSON.parse(schema);
+	} catch {
+		descriptor.inputSchema = schema;
+	}
+	else if (typeof schema === "object" && schema !== null) descriptor.inputSchema = schema;
+	return descriptor;
+}
+/** 从 getTools 返回值提取工具描述（容忍数组或 {tools:[]} 两种形状） */
 function extractToolDescriptors(raw) {
 	const list = Array.isArray(raw) ? raw : typeof raw === "object" && raw !== null && Array.isArray(raw.tools) ? raw.tools : void 0;
 	if (!list) return void 0;
-	return list.filter((t) => typeof t === "object" && t !== null).map((t) => ({
-		name: String(t["name"] ?? ""),
-		...typeof t["description"] === "string" ? { description: t["description"] } : {},
-		...typeof t["inputSchema"] === "object" && t["inputSchema"] !== null ? { inputSchema: t["inputSchema"] } : {}
-	})).filter((t) => t.name !== "");
+	return list.map(toDescriptor).filter((d) => d !== void 0);
 }
 /**
 * Experimental WebMCP Adapter（mcp# 分支）：默认关闭显式启用；
@@ -416,35 +440,45 @@ var ExperimentalWebMcpAdapter = class {
 		this.#enabled = options?.enabled ?? false;
 	}
 	isAvailable() {
-		return this.#enabled && typeof this.#resolveApi()?.executeTool === "function";
+		const api = this.#resolveApi();
+		return this.#enabled && typeof api?.executeTool === "function";
 	}
-	/** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
+	/** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
 	async listTools() {
 		const api = this.#resolveApi();
-		if (typeof api?.listTools !== "function") return void 0;
+		if (typeof api?.getTools !== "function") return void 0;
 		try {
-			return extractToolDescriptors(await api.listTools());
+			return extractToolDescriptors(await api.getTools());
 		} catch (e) {
-			console.warn(`[webskill] navigator.modelContext.listTools() failed: ${e instanceof Error ? e.message : String(e)}`);
+			console.warn(`[webskill] document.modelContext.getTools() failed: ${e instanceof Error ? e.message : String(e)}`);
 			return;
 		}
 	}
-	/** 工具名清单（listTools 缺失/失败时返回 undefined） */
+	/** 工具名清单（getTools 缺失/失败时返回 undefined） */
 	async listToolNames() {
 		return (await this.listTools())?.map((t) => t.name);
 	}
 	async call(toolName, args) {
 		if (!this.#enabled) return failure("TOOL_UNSUPPORTED", "WebMCP adapter is disabled (enable it explicitly to use mcp# tools)");
 		const api = this.#resolveApi();
-		if (typeof api?.executeTool !== "function") return failure("TOOL_UNSUPPORTED", "navigator.modelContext is not available");
-		if (typeof api.listTools === "function") try {
-			const names = extractToolDescriptors(await api.listTools())?.map((t) => t.name);
-			if (names && !names.includes(toolName)) return failure("MCP_TOOL_NOT_FOUND", `WebMCP tool "${toolName}" not found`);
-		} catch {}
+		if (typeof api?.executeTool !== "function") return failure("TOOL_UNSUPPORTED", "document.modelContext is not available");
+		const argsJson = JSON.stringify(args);
+		if (typeof api.getTools === "function") try {
+			const descriptors = extractToolDescriptors(await api.getTools());
+			const match = descriptors?.find((t) => t.name === toolName);
+			if (descriptors !== void 0 && match === void 0) return failure("MCP_TOOL_NOT_FOUND", `WebMCP tool "${toolName}" not found`);
+			const tool = match?.raw ?? { name: toolName };
+			return {
+				ok: true,
+				content: normalizeToolContent(await api.executeTool(tool, argsJson))
+			};
+		} catch (e) {
+			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);
+		}
 		try {
 			return {
 				ok: true,
-				content: normalizeToolContent(await api.executeTool(toolName, JSON.stringify(args)))
+				content: normalizeToolContent(await api.executeTool(toolName, argsJson))
 			};
 		} catch (e) {
 			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);

package/dist/{memoryArtifactStore-BtOeB_hm-tj3fC5ip.js → memoryArtifactStore-52Zn9npI-BMPYwvoy.js}

@@ -1,6 +1,6 @@
 import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
 
-//#region ../runtime/dist/memoryArtifactStore-BtOeB_hm.js
+//#region ../runtime/dist/memoryArtifactStore-52Zn9npI.js
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
 const textParts = (text) => [{
 	type: "text",
@@ -8,6 +8,14 @@ const textParts = (text) => [{
 }];
 /** 取出 parts 中的文本（非文本分片在纯文本语境下无法表达，此处按丢弃处理——调用方须先校验） */
 const partsToText = (parts) => (parts ?? []).reduce((acc, part) => part.type === "text" ? acc + part.text : acc, "");
+/**
+* run 的提示词文本投影：`RuntimeRun.userPrompt` 与快照都是字符串字段，
+* 而多模态提示词里的图片/文件分片没有文本形态，用占位符标注，避免记录成空串。
+*/
+const promptText = (prompt) => {
+	if (typeof prompt === "string") return prompt;
+	return prompt.map((part) => part.type === "text" ? part.text : `[${part.type}: ${part.mimeType}]`).join("\n");
+};
 const isContentPart = (value) => {
 	if (typeof value !== "object" || value === null) return false;
 	const part = value;
@@ -75,4 +83,4 @@ var MemoryArtifactStore = class {
 };
 
 //#endregion
-export { validateLlmMessages as a, textParts as i, partsToText as n, rejectUnsupportedPart as r, MemoryArtifactStore as t };
+export { textParts as a, rejectUnsupportedPart as i, partsToText as n, validateLlmMessages as o, promptText as r, MemoryArtifactStore as t };

package/dist/node.d.ts

@@ -1,7 +1,7 @@
-import { D as ArchiveLimits, F as JsonSchema, H as SKILLS_LOCKFILE, J as SignatureAuditSink, M as FileStat, N as FileSystemProvider, U as SKILL_MANIFEST_FILE, et as SkillInstallSource, ft as TrustedKeyStore, gt as VerifyResult, it as SkillManifest, mt as UnsignedPolicy, o as InteractionRequest, rt as SkillManagerPort, s as InteractionResponse, ut as SkillsLockfile, v as RenderResultRequest, y as UiBridge } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-import { C as FsArtifactStore, Dt as ToolDefinition, Lt as WebSkillRuntime, Rt as WebSkillRuntimeDeps, V as NetworkPolicy, Vt as createScriptContext, d as ApprovalScope, f as BridgeCapabilities, gt as ScriptExecutor, ht as ScriptExecutionContext, kt as ToolResult, mt as SchemaInferer, w as FsMemoryStore } from "./index-DLfR2Y6I.js";
-import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-uyefLPR1-DXOzbksv.js";
-import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-BPUBZCwJ-4jat_SVG.js";
+import { I as JsonSchema, N as FileStat, O as ArchiveLimits, P as FileSystemProvider, U as SKILLS_LOCKFILE, W as SKILL_MANIFEST_FILE, Y as SignatureAuditSink, _t as VerifyResult, at as SkillManifest, b as UiBridge, c as InteractionResponse, dt as SkillsLockfile, ht as UnsignedPolicy, it as SkillManagerPort, pt as TrustedKeyStore, s as InteractionRequest, tt as SkillInstallSource, y as RenderResultRequest } from "./types-4pg-qp_I-Gq63X8Oa.js";
+import { A as FsArtifactStore, Ct as ScriptExecutionContext, J as NetworkPolicy, St as SchemaInferer, Ut as ToolResult, Vt as ToolDefinition, _ as BridgeCapabilities, f as ApprovalScope, fn as createScriptContext, j as FsMemoryStore, on as WebSkillRuntime, sn as WebSkillRuntimeDeps, wt as ScriptExecutor } from "./index-C-KFAZoF.js";
+import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-BzLbzFOL-CxdAFWO2.js";
+import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
 //#region src/fs/nodeFs.d.ts

package/dist/node.js

@@ -1,6 +1,6 @@
 import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
-import { A as createScriptContext, D as WebSkillRuntime, H as normalizeToolContent, O as bridgeError, U as normalizeToolError, W as parseBridgeRequest, l as FsArtifactStore, o as CapabilityApproval, u as FsMemoryStore, z as networkPolicyLibSource } from "./dist-C-Sh0MDU.js";
-import { i as probeLlmCapabilities } from "./env--jJB-TSX-04klhTYi.js";
+import { I as WebSkillRuntime, V as createScriptContext, at as normalizeToolContent, c as CapabilityApproval, m as FsMemoryStore, nt as networkPolicyLibSource, ot as normalizeToolError, p as FsArtifactStore, st as parseBridgeRequest, z as bridgeError } from "./dist-DusANsrn.js";
+import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";
@@ -1148,6 +1148,13 @@ var CliUiBridge = class {
 					value: answer === "y" || answer === "yes"
 				};
 			}
+			case "file-pick": {
+				const answer = (await this.#question(`${input.message}\nLocal file path (empty to decline): `)).trim();
+				return answer === "" ? { id: input.id } : {
+					id: input.id,
+					value: { path: answer }
+				};
+			}
 		}
 	}
 	async progress(input) {

package/dist/{openUiLibrary-YLS-cxyT-C96jWDQq.js → openUiLibrary-Bdrji9qK-DzAxRlTY.js}

@@ -1,5 +1,5 @@
-import { q as uiCatalog } from "./dist-D9Lcn5Pp.js";
-import { t as CatalogNode } from "./catalogComponents-KsujmL4b-Clx1kCnU.js";
+import { nt as uiCatalog } from "./dist-DnYG2-eY.js";
+import { t as CatalogNode } from "./catalogComponents-Dr5dFMAb-Dacibl1e.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3761,7 +3761,7 @@ function Renderer({ response, library, isStreaming = false, onAction, onStateUpd
 const FormValidationContext = createContext(null);
 
 //#endregion
-//#region ../ui-react/dist/openUiLibrary-YLS-cxyT.js
+//#region ../ui-react/dist/openUiLibrary-Bdrji9qK.js
 const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
 /**
 * catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，

package/dist/{skillVersionStore-uyefLPR1-DXOzbksv.d.ts → skillVersionStore-BzLbzFOL-CxdAFWO2.d.ts}

@@ -1,8 +1,9 @@
-import { N as FileSystemProvider, R as Page, Z as SkillCatalogEntry, it as SkillManifest, z as PageQuery } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-//#region ../governance/dist/skillVersionStore-uyefLPR1.d.ts
+import { B as PageQuery, P as FileSystemProvider, Q as SkillCatalogEntry, at as SkillManifest, z as Page } from "./types-4pg-qp_I-Gq63X8Oa.js";
+//#region ../governance/dist/skillVersionStore-BzLbzFOL.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
-type CandidateSource = 'runtime-miss' | 'document' | 'manual';
+/** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
+type CandidateSource = 'runtime-miss' | 'document' | 'manual' | 'generated';
 type CandidateRisk = 'low' | 'medium' | 'high';
 interface CandidateFile {
   path: string;

package/dist/{testing-DDCJWvgA.js → testing-CYTFqkDm.js}

@@ -1,5 +1,5 @@
 import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
 
 //#region ../runtime/dist/testing.js
 /**

package/dist/testing.d.ts

@@ -1,5 +1,5 @@
-import { c as LlmClient, f as LlmResponse, g as MemoryStore, l as LlmCompleteInput, n as ArtifactStore, o as InteractionRequest, p as LlmStreamEvent, s as InteractionResponse, t as Artifact, y as UiBridge } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-BPUBZCwJ-4jat_SVG.js";
+import { _ as MemoryStore, b as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput } from "./types-4pg-qp_I-Gq63X8Oa.js";
+import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts
 type MockLlmHandler = (input: LlmCompleteInput) => LlmResponse | Promise<LlmResponse>;

package/dist/testing.js

@@ -1,5 +1,5 @@
-import { t as MemoryArtifactStore } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
-import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env--jJB-TSX-04klhTYi.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-DDCJWvgA.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env-8cY40DXB-CGnEVZby.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-CYTFqkDm.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };

package/dist/{types-7Wcg--Vh-1YlQ4jF9.d.ts → types-4pg-qp_I-Gq63X8Oa.d.ts}

@@ -1,6 +1,6 @@
 //#region ../core/dist/index.d.ts
 //#region src/errors.d.ts
-type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT';
+type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'TOOL_RESOLUTION_EXHAUSTED' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT' | 'TS_RESOURCE_URL_REJECTED' | 'TS_TRANSPILER_UNAVAILABLE' | 'TS_TRANSPILE_FAILED' | 'TODO_LIST_INVALID' | 'TODO_ITEM_NOT_FOUND' | 'SKILL_GENERATION_DISABLED' | 'SKILL_GENERATION_LIMIT_EXCEEDED' | 'SKILL_GENERATION_VALIDATION_FAILED' | 'DELEGATION_UNAVAILABLE' | 'DELEGATION_IN_PROGRESS' | 'DELEGATION_BUDGET_EXCEEDED' | 'PROFILE_IMPORT_INVALID' | 'PROFILE_IMPORT_VERSION_UNSUPPORTED' | 'PROFILE_IMPORT_CREDENTIAL_REJECTED' | 'PROFILE_KEY_UNAVAILABLE' | 'DICTATION_UNAVAILABLE' | 'DICTATION_PERMISSION_DENIED' | 'DICTATION_FAILED' | 'PERCEPTION_NOT_ENABLED' | 'PERCEPTION_FAILED' | 'MODEL_IMAGE_UNSUPPORTED' | 'MODEL_TOOLS_UNSUPPORTED' | 'ATTACHMENT_TOO_LARGE' | 'ATTACHMENT_TYPE_REJECTED';
 /**
  * 所有公开 API 抛出的结构化错误，code 供上层可编程处理
  * @stable
@@ -582,7 +582,7 @@ declare function escapeXml(text: string): string;
 declare function renderAvailableSkillsXml(catalog: SkillCatalog): string;
 declare const xmlRenderer: CatalogRenderer;
 //#endregion
-//#region ../runtime/dist/types-7Wcg--Vh.d.ts
+//#region ../runtime/dist/types-4pg-qp_I.d.ts
 //#region src/llm/streamTypes.d.ts
 /** 流式 LLM 事件（OpenAI SSE / Vercel fullStream 统一映射） */
 type LlmStreamEvent = {
@@ -682,11 +682,26 @@ interface ArtifactStore {
 }
 //#endregion
 //#region src/interaction/types.d.ts
+/**
+ * 交互的发起方标识（FR-11.6）。串行委派下父 agent 与子 agent 都能发起交互，
+ * 缺了这个标识用户无法判断弹出来的表单属于哪个子任务。
+ * 缺省即父 agent 自己发起。
+ * @experimental
+ */
+interface InteractionOrigin {
+  /** 展示用标签，通常是子任务标题 */
+  label: string;
+  /** 关联的待办条目 */
+  todoId?: string;
+}
 type InteractionRequest = {
+  origin?: InteractionOrigin;
+} & ({
   type: 'ask';
   id: string;
   message: string;
   schema?: JsonSchema;
+  suggestion?: InteractionSuggestion;
 } | {
   type: 'confirm';
   id: string;
@@ -705,6 +720,22 @@ type InteractionRequest = {
     label: string;
     value: unknown;
   }>;
+  suggestion?: InteractionSuggestion;
+} | {
+  /**
+   * 打开本地文件选择（FR-11.1）。与 `confirm` 分开：浏览器要求
+   * `input[type=file].click()` 处于用户手势的调用栈内，渲染层必须能识别
+   * 出“这个确认按钮点下去要同步打开选择器”，光看文案分辨不出。
+   * @experimental
+   */
+  type: 'file-pick';
+  id: string;
+  message: string;
+  /** 传给 `input.accept` 的 MIME / 扩展名列表 */
+  accept?: readonly string[];
+  multiple?: boolean;
+  /** 该文件要填的表单字段名 */
+  field?: string;
 } | {
   /**
    * 能力强制授权（require-approval）：与脚本自发 confirm 区分，UI 渲染为授权样式
@@ -715,12 +746,22 @@ type InteractionRequest = {
   capability: 'readReference' | 'writeArtifact' | 'confirm';
   message: string;
   details?: unknown;
-};
+});
 interface InteractionResponse {
   id: string;
   value?: unknown;
   cancelled?: boolean;
 }
+/**
+ * 依据用户画像给出的建议值（FR-19.4）。**不会预填进控件**：
+ * 渲染器只能展示它并提供「采纳」入口，用户确认后才算填写。
+ * @experimental
+ */
+interface InteractionSuggestion {
+  value: unknown;
+  /** 建议依据，展示给用户判断是否采纳 */
+  reason?: string;
+}
 /** 图表规格（$chart 约定的校验后形态；渲染单一来源在 ui/chart/miniChart） */
 interface ChartSpec {
   kind: 'bar' | 'line' | 'pie';
@@ -859,7 +900,7 @@ interface UiBridge {
 interface FormField {
   name: string;
   label: string;
-  type: 'text' | 'number' | 'boolean' | 'select' | 'textarea';
+  type: 'text' | 'number' | 'boolean' | 'select' | 'textarea' | 'file';
   required?: boolean;
   description?: string;
   defaultValue?: unknown;
@@ -867,6 +908,15 @@ interface FormField {
     label: string;
     value: unknown;
   }>;
+  /**
+   * 建议值（FR-19.4）。**刻意不叫 defaultValue**：渲染器会把 defaultValue 直接填进控件，
+   * 而建议值来自对用户过往行为的推断，可能过时或不适用，必须由用户看到后主动采纳。
+   * @experimental
+   */
+  suggestion?: {
+    value: unknown;
+    reason?: string;
+  };
 }
 interface InteractionPolicy {
   /** 缺必填参数策略：默认 'user'（表单问用户），'llm' 回喂自愈 */
@@ -892,4 +942,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { SkillDocument as $, DEFAULT_ARCHIVE_LIMITS as A, jsonRenderer as At, RemoteUrlPolicy as B, resolveArchiveLimits as Bt, UiSpecPatch as C, buildManifest as Ct, ArchiveLimits as D, escapeXml as Dt, UiSurfaceActionResponse as E, computeDigest as Et, JsonSchema as F, parseSkillPackManifest as Ft, SKILL_NAME_PATTERN as G, validateSkills as Gt, SKILLS_LOCKFILE as H, signSkill as Ht, MANIFEST_EXCLUDED_FILES as I, readResponseWithLimit as It, SignatureAuditSink as J, xmlRenderer as Jt, SKILL_PACK_FILE as K, verifyManifest as Kt, MemoryFS as L, readSkillSignature as Lt, FileStat as M, messageOf as Mt, FileSystemProvider as N, normalizePath as Nt, CatalogRenderer as O, exportSkills as Ot, FsTrustedKeyStore as P, parseSkillMarkdown as Pt, SkillDiscovery as Q, Page as R, renderAvailableSkillsXml as Rt, UiSpecEvent as S, buildCatalog as St, UiSurfaceActionRequest as T, checkSkillRules as Tt, SKILL_MANIFEST_FILE as U, signaturePayloadBytes as Ut, SIGNATURE_SCHEMA_VERSION as V, resolveInsideRoot as Vt, SKILL_NAME_MAX_LENGTH as W, unzipWithLimits as Wt, SkillCatalog as X, SignatureVerdict as Y, SkillCatalogEntry as Z, RenderBlock as _, WebSkillError as _t, InteractionPolicy as a, SkillMetadata as at, UiSpecActionCapability as b, assertSafePathSegment as bt, LlmClient as c, SkillSignature as ct, LlmMessage as d, TrustedKey as dt, SkillInstallSource as et, LlmResponse as f, TrustedKeyStore as ft, MemoryStore as g, VerifyResult as gt, LlmToolSpec as h, ValidationReport as ht, FormField as i, SkillManifest as it, DiscoveryResult as j, keyIdOf as jt, CryptoKeyLike as k, isValidSkillName as kt, LlmCompleteInput as l, SkillSource as lt, LlmToolCall as m, UnsignedPolicy as mt, ArtifactStore as n, SkillLocation as nt, InteractionRequest as o, SkillPackManifest as ot, LlmStreamEvent as p, UiSpecNode as pt, SKILL_SIGNATURE_FILE as q, verifySkillSignature as qt, ChartSpec as r, SkillManagerPort as rt, InteractionResponse as s, SkillReader as st, Artifact as t, SkillIssue as tt, LlmContentPart as u, SkillsLockfile as ut, RenderResultRequest as v, WebSkillErrorCode as vt, UiSpecSnapshot as w, checkDependencyCycles as wt, UiSpecDrafts as x, atomicWriteText as xt, UiBridge as y, assertRemoteUrlAllowed as yt, PageQuery as z, renderCatalogJson as zt };
+export { SkillDiscovery as $, CryptoKeyLike as A, isValidSkillName as At, PageQuery as B, renderCatalogJson as Bt, UiSpecEvent as C, buildCatalog as Ct, UiSurfaceActionResponse as D, computeDigest as Dt, UiSurfaceActionRequest as E, checkSkillRules as Et, FsTrustedKeyStore as F, parseSkillMarkdown as Ft, SKILL_NAME_MAX_LENGTH as G, unzipWithLimits as Gt, SIGNATURE_SCHEMA_VERSION as H, resolveInsideRoot as Ht, JsonSchema as I, parseSkillPackManifest as It, SKILL_SIGNATURE_FILE as J, verifySkillSignature as Jt, SKILL_NAME_PATTERN as K, validateSkills as Kt, MANIFEST_EXCLUDED_FILES as L, readResponseWithLimit as Lt, DiscoveryResult as M, keyIdOf as Mt, FileStat as N, messageOf as Nt, ArchiveLimits as O, escapeXml as Ot, FileSystemProvider as P, normalizePath as Pt, SkillCatalogEntry as Q, MemoryFS as R, readSkillSignature as Rt, UiSpecDrafts as S, atomicWriteText as St, UiSpecSnapshot as T, checkDependencyCycles as Tt, SKILLS_LOCKFILE as U, signSkill as Ut, RemoteUrlPolicy as V, resolveArchiveLimits as Vt, SKILL_MANIFEST_FILE as W, signaturePayloadBytes as Wt, SignatureVerdict as X, SignatureAuditSink as Y, xmlRenderer as Yt, SkillCatalog as Z, MemoryStore as _, VerifyResult as _t, InteractionOrigin as a, SkillManifest as at, UiBridge as b, assertRemoteUrlAllowed as bt, InteractionResponse as c, SkillReader as ct, LlmContentPart as d, SkillsLockfile as dt, SkillDocument as et, LlmMessage as f, TrustedKey as ft, LlmToolSpec as g, ValidationReport as gt, LlmToolCall as h, UnsignedPolicy as ht, FormField as i, SkillManagerPort as it, DEFAULT_ARCHIVE_LIMITS as j, jsonRenderer as jt, CatalogRenderer as k, exportSkills as kt, LlmClient as l, SkillSignature as lt, LlmStreamEvent as m, UiSpecNode as mt, ArtifactStore as n, SkillIssue as nt, InteractionPolicy as o, SkillMetadata as ot, LlmResponse as p, TrustedKeyStore as pt, SKILL_PACK_FILE as q, verifyManifest as qt, ChartSpec as r, SkillLocation as rt, InteractionRequest as s, SkillPackManifest as st, Artifact as t, SkillInstallSource as tt, LlmCompleteInput as u, SkillSource as ut, RenderBlock as v, WebSkillError as vt, UiSpecPatch as w, buildManifest as wt, UiSpecActionCapability as x, assertSafePathSegment as xt, RenderResultRequest as y, WebSkillErrorCode as yt, Page as z, renderAvailableSkillsXml as zt };

package/dist/ui-react.d.ts

@@ -1,5 +1,5 @@
-import { E as UiSurfaceActionResponse, S as UiSpecEvent, T as UiSurfaceActionRequest, b as UiSpecActionCapability, o as InteractionRequest, pt as UiSpecNode, s as InteractionResponse, v as RenderResultRequest, w as UiSpecSnapshot, x as UiSpecDrafts, y as UiBridge } from "./types-7Wcg--Vh-1YlQ4jF9.js";
-import { y as InteractionSpecLabels } from "./index-CHXxDccV.js";
+import { C as UiSpecEvent, D as UiSurfaceActionResponse, E as UiSurfaceActionRequest, S as UiSpecDrafts, T as UiSpecSnapshot, b as UiBridge, c as InteractionResponse, mt as UiSpecNode, s as InteractionRequest, x as UiSpecActionCapability, y as RenderResultRequest } from "./types-4pg-qp_I-Gq63X8Oa.js";
+import { b as InteractionSpecLabels } from "./index-BMocOEi0.js";
 import { z } from "zod";
 import { ComponentType, ReactNode } from "react";
 import "react/jsx-runtime";
@@ -256,8 +256,24 @@ declare class UiSurfaceStore {
 }
 //#endregion
 //#region src/bridgeState.d.ts
+/**
+ * 一次被丢弃的 surface action（FR-11.7）。
+ *
+ * 丢弃本身是对的（重放/串扰防护），但静默丢弃会让「点了没反应」变成无从排查的现象。
+ * @experimental
+ */
+interface DroppedSurfaceActionWarning {
+  /** duplicate：nonce 已被消费；no-pending：当前没有等待中的动作；mismatch：与待决动作不是同一个 */
+  reason: 'duplicate' | 'no-pending' | 'mismatch';
+  nonce: string;
+  message: string;
+  /** 丢弃发生时的待决状态，用于定位串扰 */
+  pending: UiSurfaceActionRequest | null;
+}
 interface ReactBridgeStateOptions {
   onSurfaceDraftChange?(runId: string, surfaceId: string, value: Record<string, unknown>): Promise<void> | void;
+  /** 覆盖默认的 console.warn 上报（测试与宿主遥测用）。@experimental */
+  onDroppedSurfaceAction?(warning: DroppedSurfaceActionWarning): void;
 }
 /**
  * React 桥接状态：UiBridge 实现 + useSyncExternalStore 兼容订阅。
@@ -287,7 +303,10 @@ declare class ReactBridgeState implements UiBridge {
   renderResult(input: RenderResultRequest): Promise<void>;
   renderSurface(event: UiSpecEvent): Promise<void>;
   requestSurfaceAction(input: UiSurfaceActionRequest): Promise<UiSurfaceActionResponse>;
-  /** Resolves exactly one pending action capability; stale or duplicate nonces are ignored. */
+  /**
+   * Resolves exactly one pending action capability; stale or duplicate nonces are ignored.
+   * Every ignored response is reported through `onDroppedSurfaceAction` (FR-11.7).
+   */
   resolveSurfaceAction(response: UiSurfaceActionResponse): boolean;
   cancelSurfaceAction(nonce: string): void;
   onTextDelta(runId: string, delta: string): Promise<void>;
@@ -317,6 +336,8 @@ interface CustomSurfaceActionEvent {
   actionId: string;
   intent: UiSpecActionCapability['intent'];
   nonce?: string;
+  /** 提交动作所属的表单容器；一张 surface 只有一个表单时省略 */
+  scopeId?: string;
   value?: Record<string, unknown>;
 }
 interface RegisteredSurfaceProps<Props> {
@@ -482,10 +503,10 @@ type CatalogNodeProps = {
   children?: ReactNode;
 };
 /**
- * catalog 16 个组件的展示实现：json-render 与 OpenUI 两档共用同一份，
+ * catalog 展示类组件的实现：json-render 与 OpenUI 两档共用同一份，
  * 避免"一个 catalog、多套 registry"退化成多套各自演进的视觉。
  * 交互（表单值收集 / action 回传）由各档的宿主组件负责。
  */
 declare const catalogComponentImpls: Record<string, (input: CatalogNodeProps) => ReactNode>;
 //#endregion
-export { type CatalogNodeProps, type CustomSurfaceActionEvent, InteractionForm, type JsonRenderActionDispatch, JsonRenderSpecSurface, type JsonRenderSpecSurfaceProps, NATIVE_SPEC_COMPONENTS, NativeSpecSurface, type NativeSpecSurfaceProps, OpenUiSpecSurface, type OpenUiSpecSurfaceProps, ReactBridgeState, type RegisteredSurfaceProps, ResultBlocks, SpecInteractionChannel, type SpecInteractionSession, StreamingText, type SurfaceRegistration, SurfaceRegistry, type UiSurfaceActionEvent, UiSurfaceList, type UiSurfaceListProps, UiSurfaceSnapshotList, type UiSurfaceSnapshotListProps, UiSurfaceStore, catalogComponentImpls, createJsonRenderRegistry, probeJsonRenderAvailability };
+export { type CatalogNodeProps, type CustomSurfaceActionEvent, type DroppedSurfaceActionWarning, InteractionForm, type JsonRenderActionDispatch, JsonRenderSpecSurface, type JsonRenderSpecSurfaceProps, NATIVE_SPEC_COMPONENTS, NativeSpecSurface, type NativeSpecSurfaceProps, OpenUiSpecSurface, type OpenUiSpecSurfaceProps, ReactBridgeState, type ReactBridgeStateOptions, type RegisteredSurfaceProps, ResultBlocks, SpecInteractionChannel, type SpecInteractionSession, StreamingText, type SurfaceRegistration, SurfaceRegistry, type UiSurfaceActionEvent, UiSurfaceList, type UiSurfaceListProps, UiSurfaceSnapshotList, type UiSurfaceSnapshotListProps, UiSurfaceStore, catalogComponentImpls, createJsonRenderRegistry, probeJsonRenderAvailability };