@webskill/sdk 0.5.0 → 0.7.0

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { O as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { U as mergeCatalogEntries, q as normalizeToolContent } from "./dist-6C03DShK.js";
+import { nt as mergeCatalogEntries, st as normalizeToolContent } from "./dist-D0qW6e40.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -182,6 +182,8 @@ const failure$1 = (code, message) => ({
 		message
 	}
 });
+/** 需要重新授权不是「端点不可用」：压平成后者，模型和界面都会去查网络（0.7.0 FR-22.3） */
+const endpointFailure = (e, message) => failure$1(e instanceof WebSkillError && e.code.startsWith("MCP_OAUTH_") ? e.code : "MCP_ENDPOINT_UNAVAILABLE", message);
 /**
 * endpoint:toolName 调用 + 工具清单缓存（TTL 默认 1s + registry 版本号双失效）。
 */
@@ -204,7 +206,7 @@ var McpToolResolver = class {
 		try {
 			names = await this.#toolNames(endpoint, client);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Failed to list tools: ${messageOf(e)}`);
+			return endpointFailure(e, `Failed to list tools: ${messageOf(e)}`);
 		}
 		if (!names.has(toolName)) {
 			this.#cache.delete(endpoint);
@@ -222,7 +224,7 @@ var McpToolResolver = class {
 			});
 			return this.#normalizeCallResult(raw);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Tool "${toolName}" on endpoint "${endpoint}" failed: ${messageOf(e)}`);
+			return endpointFailure(e, `Tool "${toolName}" on endpoint "${endpoint}" failed: ${messageOf(e)}`);
 		}
 	}
 	async #toolNames(endpoint, client) {
@@ -392,15 +394,39 @@ const failure = (code, message) => ({
 		message
 	}
 });
-/** 从 listTools 返回值提取工具描述（容忍数组或 {tools:[]} 两种形状） */
+/** getTools() 返回的工具 → 描述符：inputSchema 为 JSON 字符串时解析为对象，并保留原始对象 */
+function toDescriptor(raw) {
+	if (typeof raw !== "object" || raw === null) return void 0;
+	const t = raw;
+	const name = String(t["name"] ?? "");
+	if (name === "") return void 0;
+	const descriptor = {
+		name,
+		raw
+	};
+	if (typeof t["description"] === "string") descriptor.description = t["description"];
+	if (typeof t["origin"] === "string") descriptor.origin = t["origin"];
+	if (typeof t["annotations"] === "object" && t["annotations"] !== null) {
+		const annotations = t["annotations"];
+		descriptor.annotations = {
+			...typeof annotations["readOnlyHint"] === "boolean" ? { readOnlyHint: annotations["readOnlyHint"] } : {},
+			...typeof annotations["untrustedContentHint"] === "boolean" ? { untrustedContentHint: annotations["untrustedContentHint"] } : {}
+		};
+	}
+	const schema = t["inputSchema"];
+	if (typeof schema === "string" && schema.trim() !== "") try {
+		descriptor.inputSchema = JSON.parse(schema);
+	} catch {
+		descriptor.inputSchema = schema;
+	}
+	else if (typeof schema === "object" && schema !== null) descriptor.inputSchema = schema;
+	return descriptor;
+}
+/** 从 getTools 返回值提取工具描述（容忍数组或 {tools:[]} 两种形状） */
 function extractToolDescriptors(raw) {
 	const list = Array.isArray(raw) ? raw : typeof raw === "object" && raw !== null && Array.isArray(raw.tools) ? raw.tools : void 0;
 	if (!list) return void 0;
-	return list.filter((t) => typeof t === "object" && t !== null).map((t) => ({
-		name: String(t["name"] ?? ""),
-		...typeof t["description"] === "string" ? { description: t["description"] } : {},
-		...typeof t["inputSchema"] === "object" && t["inputSchema"] !== null ? { inputSchema: t["inputSchema"] } : {}
-	})).filter((t) => t.name !== "");
+	return list.map(toDescriptor).filter((d) => d !== void 0);
 }
 /**
 * Experimental WebMCP Adapter（mcp# 分支）：默认关闭显式启用；
@@ -416,35 +442,45 @@ var ExperimentalWebMcpAdapter = class {
 		this.#enabled = options?.enabled ?? false;
 	}
 	isAvailable() {
-		return this.#enabled && typeof this.#resolveApi()?.executeTool === "function";
+		const api = this.#resolveApi();
+		return this.#enabled && typeof api?.executeTool === "function";
 	}
-	/** 工具清单（listTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
+	/** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
 	async listTools() {
 		const api = this.#resolveApi();
-		if (typeof api?.listTools !== "function") return void 0;
+		if (typeof api?.getTools !== "function") return void 0;
 		try {
-			return extractToolDescriptors(await api.listTools());
+			return extractToolDescriptors(await api.getTools());
 		} catch (e) {
-			console.warn(`[webskill] navigator.modelContext.listTools() failed: ${e instanceof Error ? e.message : String(e)}`);
+			console.warn(`[webskill] document.modelContext.getTools() failed: ${e instanceof Error ? e.message : String(e)}`);
 			return;
 		}
 	}
-	/** 工具名清单（listTools 缺失/失败时返回 undefined） */
+	/** 工具名清单（getTools 缺失/失败时返回 undefined） */
 	async listToolNames() {
 		return (await this.listTools())?.map((t) => t.name);
 	}
 	async call(toolName, args) {
 		if (!this.#enabled) return failure("TOOL_UNSUPPORTED", "WebMCP adapter is disabled (enable it explicitly to use mcp# tools)");
 		const api = this.#resolveApi();
-		if (typeof api?.executeTool !== "function") return failure("TOOL_UNSUPPORTED", "navigator.modelContext is not available");
-		if (typeof api.listTools === "function") try {
-			const names = extractToolDescriptors(await api.listTools())?.map((t) => t.name);
-			if (names && !names.includes(toolName)) return failure("MCP_TOOL_NOT_FOUND", `WebMCP tool "${toolName}" not found`);
-		} catch {}
+		if (typeof api?.executeTool !== "function") return failure("TOOL_UNSUPPORTED", "document.modelContext is not available");
+		const argsJson = JSON.stringify(args);
+		if (typeof api.getTools === "function") try {
+			const descriptors = extractToolDescriptors(await api.getTools());
+			const match = descriptors?.find((t) => t.name === toolName);
+			if (descriptors !== void 0 && match === void 0) return failure("MCP_TOOL_NOT_FOUND", `WebMCP tool "${toolName}" not found`);
+			const tool = match?.raw ?? { name: toolName };
+			return {
+				ok: true,
+				content: normalizeToolContent(await api.executeTool(tool, argsJson))
+			};
+		} catch (e) {
+			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);
+		}
 		try {
 			return {
 				ok: true,
-				content: normalizeToolContent(await api.executeTool(toolName, JSON.stringify(args)))
+				content: normalizeToolContent(await api.executeTool(toolName, argsJson))
 			};
 		} catch (e) {
 			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);
@@ -531,22 +567,182 @@ var McpRuntimePlugin = class {
 		};
 	}
 };
+/**
+* 构造授权相关错误。`message` 只含端点名与阶段，`details` 只有 `{ endpoint, stage }`——
+* 不带 `cause`：SDK 的错误 message 可能回显授权 URL 或 token 端点的响应体（AC-22.6）。
+*/
+function oauthError(code, endpoint, stage, reason) {
+	return new WebSkillError(code, `Remote MCP endpoint "${endpoint}" ${reason} (stage: ${stage})`, {
+		endpoint,
+		stage
+	});
+}
+/** 显式的内存存储，供 examples 与测试使用。**不是缺省行为**——是宿主主动选的（AC-22.7）。 @experimental */
+function createMemoryOAuthStores() {
+	const tokens = /* @__PURE__ */ new Map();
+	const handshakes = /* @__PURE__ */ new Map();
+	return {
+		tokens: {
+			load: (endpoint) => Promise.resolve(tokens.get(endpoint)),
+			save: (endpoint, value) => {
+				tokens.set(endpoint, value);
+				return Promise.resolve();
+			},
+			clear: (endpoint) => {
+				tokens.delete(endpoint);
+				return Promise.resolve();
+			}
+		},
+		handshake: {
+			load: (endpoint) => Promise.resolve(handshakes.get(endpoint)),
+			save: (endpoint, value) => {
+				handshakes.set(endpoint, value);
+				return Promise.resolve();
+			},
+			clear: (endpoint) => {
+				handshakes.delete(endpoint);
+				return Promise.resolve();
+			}
+		}
+	};
+}
+const randomState = () => {
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	crypto.getRandomValues(bytes);
+	return [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+};
+/**
+* `McpOAuthConfig` → SDK `OAuthClientProvider` 适配器。
+*
+* `state()` 与 `saveCodeVerifier()` 由 SDK 分两次调用（顺序上前者在先），
+* 两者合成一条握手记录：谁先到都把当前已知部分写进去，回程时两项都在。
+* @experimental
+*/
+function createOAuthProvider(endpoint, config) {
+	const { client, tokens: tokenStore, handshake } = config;
+	let pending = {};
+	const persist = async (patch) => {
+		pending = {
+			...pending,
+			...patch
+		};
+		await handshake.save(endpoint, {
+			codeVerifier: pending.codeVerifier ?? "",
+			state: pending.state ?? ""
+		});
+	};
+	return {
+		get redirectUrl() {
+			return client.redirectUri;
+		},
+		get clientMetadata() {
+			return {
+				client_name: "WebSkill SDK",
+				redirect_uris: [client.redirectUri],
+				grant_types: ["authorization_code", "refresh_token"],
+				response_types: ["code"],
+				token_endpoint_auth_method: client.clientSecret === void 0 ? "none" : "client_secret_post",
+				...client.scopes && client.scopes.length > 0 ? { scope: client.scopes.join(" ") } : {}
+			};
+		},
+		async state() {
+			const value = randomState();
+			await persist({ state: value });
+			return value;
+		},
+		clientInformation() {
+			return Promise.resolve({
+				client_id: client.clientId,
+				...client.clientSecret !== void 0 ? { client_secret: client.clientSecret } : {}
+			});
+		},
+		async tokens() {
+			const saved = await tokenStore.load(endpoint);
+			if (!saved) return void 0;
+			return {
+				access_token: saved.accessToken,
+				token_type: saved.tokenType ?? "Bearer",
+				...saved.expiresAt !== void 0 ? { expires_in: Math.max(0, Math.round((saved.expiresAt - Date.now()) / 1e3)) } : {},
+				...saved.refreshToken !== void 0 ? { refresh_token: saved.refreshToken } : {},
+				...saved.scope !== void 0 ? { scope: saved.scope } : {}
+			};
+		},
+		async saveTokens(next) {
+			await tokenStore.save(endpoint, {
+				accessToken: next.access_token,
+				...next.expires_in !== void 0 ? { expiresAt: Date.now() + next.expires_in * 1e3 } : {},
+				...next.refresh_token !== void 0 ? { refreshToken: next.refresh_token } : {},
+				...next.token_type !== void 0 ? { tokenType: next.token_type } : {},
+				...next.scope !== void 0 ? { scope: next.scope } : {}
+			});
+		},
+		async redirectToAuthorization(url) {
+			await config.openAuthorization(url);
+		},
+		async saveCodeVerifier(codeVerifier) {
+			await persist({ codeVerifier });
+		},
+		async codeVerifier() {
+			const saved = await handshake.load(endpoint);
+			if (!saved?.codeVerifier) throw oauthError("MCP_OAUTH_FAILED", endpoint, "exchange", "has no stored PKCE verifier for this handshake");
+			return saved.codeVerifier;
+		},
+		async invalidateCredentials(scope) {
+			if (scope === "all" || scope === "tokens") await tokenStore.clear(endpoint);
+			if (scope === "all" || scope === "verifier") await handshake.clear(endpoint);
+		}
+	};
+}
 async function loadMcpSdk() {
 	try {
-		const [client, sse, streamable] = await Promise.all([
+		const [client, sse, streamable, auth, errors] = await Promise.all([
 			import("@modelcontextprotocol/sdk/client/index.js"),
 			import("@modelcontextprotocol/sdk/client/sse.js"),
-			import("@modelcontextprotocol/sdk/client/streamableHttp.js")
+			import("@modelcontextprotocol/sdk/client/streamableHttp.js"),
+			import("@modelcontextprotocol/sdk/client/auth.js"),
+			import("@modelcontextprotocol/sdk/server/auth/errors.js")
 		]);
 		return {
 			Client: client.Client,
 			SSEClientTransport: sse.SSEClientTransport,
-			StreamableHTTPClientTransport: streamable.StreamableHTTPClientTransport
+			StreamableHTTPClientTransport: streamable.StreamableHTTPClientTransport,
+			UnauthorizedError: auth.UnauthorizedError,
+			OAuthError: errors.OAuthError
 		};
 	} catch (e) {
 		throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", "The \"@modelcontextprotocol/sdk\" package is required for remote MCP endpoints; install it first (npm i @modelcontextprotocol/sdk)", e);
 	}
 }
+/** 运行期的未授权（含刷新失败）必须在 endpoint 层转成 `WebSkillError`，否则 401 会以工具结果的形式进模型上下文 */
+function wrapOAuthClient(client, endpoint, oauth, isUnauthorized) {
+	const guard = async (work) => {
+		try {
+			return await work();
+		} catch (e) {
+			if (!isUnauthorized(e)) throw e;
+			await oauth.tokens.clear(endpoint);
+			throw oauthError("MCP_OAUTH_REQUIRED", endpoint, "refresh", "needs authorization again");
+		}
+	};
+	return {
+		listTools: () => guard(() => client.listTools()),
+		callTool: (input) => guard(() => client.callTool(input)),
+		listPrompts: () => guard(() => client.listPrompts()),
+		getPrompt: (input) => guard(() => client.getPrompt(input)),
+		listResources: () => guard(() => client.listResources()),
+		readResource: (input) => guard(() => client.readResource(input))
+	};
+}
+/** 授权注入的完整性校验：缺一项就是宿主的配置错误，不是运行期授权问题（AC-22.7） */
+function assertOAuthConfigured(endpoint, oauth) {
+	const missing = [];
+	if (!oauth.client?.clientId) missing.push("client.clientId");
+	if (!oauth.client?.redirectUri) missing.push("client.redirectUri");
+	if (!oauth.tokens) missing.push("tokens");
+	if (!oauth.handshake) missing.push("handshake");
+	if (typeof oauth.openAuthorization !== "function") missing.push("openAuthorization");
+	if (missing.length > 0) throw oauthError("MCP_OAUTH_NOT_CONFIGURED", endpoint, "discover", `is missing OAuth wiring: ${missing.join(", ")}`);
+}
 /**
 * 远程 MCP endpoint 装配：SDK 官方 StreamableHTTPClientTransport（默认）/
 * SSEClientTransport（遗留）连接远端 server，注册进 EndpointRegistry——
@@ -554,7 +750,7 @@ async function loadMcpSdk() {
 * 返回 close 句柄：断开后 unregister（临时技能随既有生命周期自然消失）。
 */
 async function connectRemoteEndpoint(registry, config) {
-	const { Client, SSEClientTransport, StreamableHTTPClientTransport } = await loadMcpSdk();
+	const { Client, SSEClientTransport, StreamableHTTPClientTransport, UnauthorizedError, OAuthError } = await loadMcpSdk();
 	let url;
 	try {
 		url = new URL(config.url);
@@ -565,46 +761,81 @@ async function connectRemoteEndpoint(registry, config) {
 		allowHttp: config.allowHttp ?? false,
 		allowPrivateHosts: config.allowPrivateHosts ?? false
 	});
+	const oauth = config.oauth;
+	if (oauth) assertOAuthConfigured(config.endpoint, oauth);
+	const authProvider = oauth ? createOAuthProvider(config.endpoint, oauth) : void 0;
 	const requestInit = config.headers ? { headers: config.headers } : void 0;
-	const transport = config.transport === "sse" ? new SSEClientTransport(url, { ...requestInit ? { requestInit } : {} }) : new StreamableHTTPClientTransport(url, { ...requestInit ? { requestInit } : {} });
+	const transportOptions = {
+		...requestInit ? { requestInit } : {},
+		...authProvider ? { authProvider } : {}
+	};
+	const makeTransport = () => config.transport === "sse" ? new SSEClientTransport(url, transportOptions) : new StreamableHTTPClientTransport(url, transportOptions);
 	const client = new Client({
 		name: "webskill-remote-client",
 		version: "0.1.0"
 	});
+	const isUnauthorized = (e) => e instanceof UnauthorizedError || e instanceof OAuthError;
 	const unavailable = (e) => new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to connect remote MCP endpoint "${config.endpoint}" at ${config.url}: ${messageOf(e)}`, e);
-	try {
+	let closed = false;
+	const close = async () => {
+		if (closed) return;
+		closed = true;
+		registry.unregister(config.endpoint);
+		try {
+			await client.close();
+		} catch (e) {
+			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to close remote MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
+		}
+	};
+	const register = () => {
+		try {
+			const entry = client;
+			registry.register(config.endpoint, oauth ? wrapOAuthClient(entry, config.endpoint, oauth, isUnauthorized) : entry);
+		} catch (e) {
+			client.close().catch(() => void 0);
+			throw unavailable(e);
+		}
+	};
+	const openConnection = async (transport) => {
 		let connect = client.connect(transport);
 		if (config.timeoutMs && config.timeoutMs > 0) {
 			const timeoutMs = config.timeoutMs;
 			connect = Promise.race([connect, new Promise((_resolve, reject) => setTimeout(() => reject(/* @__PURE__ */ new Error(`Connection timed out after ${timeoutMs}ms`)), timeoutMs))]);
 		}
 		await connect;
-	} catch (e) {
+	};
+	const finishAuthorization = async (code, state) => {
+		const saved = await oauth.handshake.load(config.endpoint);
+		if (!saved || saved.state === "" || saved.state !== state) throw oauthError("MCP_OAUTH_FAILED", config.endpoint, "authorize", "received a mismatched authorization state");
+		const transport = makeTransport();
 		try {
-			await client.close();
-		} catch {}
-		throw unavailable(e);
-	}
+			await transport.finishAuth(code);
+		} catch (e) {
+			throw oauthError(isUnauthorized(e) ? "MCP_OAUTH_REQUIRED" : "MCP_OAUTH_FAILED", config.endpoint, "exchange", "could not exchange the authorization code");
+		}
+		await oauth.handshake.clear(config.endpoint);
+		await openConnection(transport);
+		register();
+	};
 	try {
-		registry.register(config.endpoint, client);
+		await openConnection(makeTransport());
 	} catch (e) {
+		if (oauth && isUnauthorized(e)) return {
+			close,
+			finishAuthorization,
+			authorizationRequired: true
+		};
 		try {
 			await client.close();
 		} catch {}
 		throw unavailable(e);
 	}
-	let closed = false;
-	return { close: async () => {
-		if (closed) return;
-		closed = true;
-		registry.unregister(config.endpoint);
-		try {
-			await client.close();
-		} catch (e) {
-			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to close remote MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
-		}
-	} };
+	register();
+	return {
+		close,
+		...oauth ? { finishAuthorization } : {}
+	};
 }
 
 //#endregion
-export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/{memoryArtifactStore-BtOeB_hm-tj3fC5ip.js → memoryArtifactStore-52Zn9npI-BMPYwvoy.js}

@@ -1,6 +1,6 @@
 import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
 
-//#region ../runtime/dist/memoryArtifactStore-BtOeB_hm.js
+//#region ../runtime/dist/memoryArtifactStore-52Zn9npI.js
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
 const textParts = (text) => [{
 	type: "text",
@@ -8,6 +8,14 @@ const textParts = (text) => [{
 }];
 /** 取出 parts 中的文本（非文本分片在纯文本语境下无法表达，此处按丢弃处理——调用方须先校验） */
 const partsToText = (parts) => (parts ?? []).reduce((acc, part) => part.type === "text" ? acc + part.text : acc, "");
+/**
+* run 的提示词文本投影：`RuntimeRun.userPrompt` 与快照都是字符串字段，
+* 而多模态提示词里的图片/文件分片没有文本形态，用占位符标注，避免记录成空串。
+*/
+const promptText = (prompt) => {
+	if (typeof prompt === "string") return prompt;
+	return prompt.map((part) => part.type === "text" ? part.text : `[${part.type}: ${part.mimeType}]`).join("\n");
+};
 const isContentPart = (value) => {
 	if (typeof value !== "object" || value === null) return false;
 	const part = value;
@@ -75,4 +83,4 @@ var MemoryArtifactStore = class {
 };
 
 //#endregion
-export { validateLlmMessages as a, textParts as i, partsToText as n, rejectUnsupportedPart as r, MemoryArtifactStore as t };
+export { textParts as a, rejectUnsupportedPart as i, partsToText as n, validateLlmMessages as o, promptText as r, MemoryArtifactStore as t };

package/dist/node.d.ts

@@ -1,7 +1,7 @@
-import { I as JsonSchema, N as FileStat, O as ArchiveLimits, P as FileSystemProvider, U as SKILLS_LOCKFILE, W as SKILL_MANIFEST_FILE, Y as SignatureAuditSink, _t as VerifyResult, at as SkillManifest, b as UiBridge, c as InteractionResponse, dt as SkillsLockfile, ht as UnsignedPolicy, it as SkillManagerPort, pt as TrustedKeyStore, s as InteractionRequest, tt as SkillInstallSource, y as RenderResultRequest } from "./types-D_hoCri8-BnNPiZCi.js";
-import { D as FsMemoryStore, E as FsArtifactStore, Ht as WebSkillRuntimeDeps, Nt as ToolResult, Vt as WebSkillRuntime, W as NetworkPolicy, _t as SchemaInferer, d as ApprovalScope, f as BridgeCapabilities, jt as ToolDefinition, qt as createScriptContext, vt as ScriptExecutionContext, yt as ScriptExecutor } from "./index-vBz_FC9w.js";
-import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-BzLbzFOL-CxwIewHJ.js";
-import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-BPUBZCwJ-4jat_SVG.js";
+import { A as ArchiveLimits, F as FileStat, G as SKILLS_LOCKFILE, I as FileSystemProvider, K as SKILL_MANIFEST_FILE, R as JsonSchema, Z as SignatureAuditSink, _t as UnsignedPolicy, c as InteractionResponse, ht as TrustedKeyStore, ot as SkillManagerPort, pt as SkillsLockfile, rt as SkillInstallSource, s as InteractionRequest, st as SkillManifest, x as UiBridge, y as RenderResultRequest, yt as VerifyResult } from "./types-CcxRLdJG-DCXyw1US.js";
+import { Et as ScriptExecutor, Kt as ToolResult, M as FsMemoryStore, Tt as ScriptExecutionContext, Wt as ToolDefinition, Y as NetworkPolicy, _ as BridgeCapabilities, f as ApprovalScope, hn as createScriptContext, j as FsArtifactStore, ln as WebSkillRuntime, un as WebSkillRuntimeDeps, wt as SchemaInferer } from "./index-DkbABR43.js";
+import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-Bl-ElD45-CWPvGvoq.js";
+import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts
 //#region src/fs/nodeFs.d.ts

package/dist/node.js

@@ -1,6 +1,7 @@
 import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
-import { J as normalizeToolError, N as createScriptContext, O as WebSkillRuntime, W as networkPolicyLibSource, Y as parseBridgeRequest, d as FsMemoryStore, k as bridgeError, o as CapabilityApproval, q as normalizeToolContent, u as FsArtifactStore } from "./dist-6C03DShK.js";
-import { i as probeLlmCapabilities } from "./env--jJB-TSX-04klhTYi.js";
+import { B as bridgeError, H as createScriptContext, L as WebSkillRuntime, c as CapabilityApproval, ct as normalizeToolError, h as FsMemoryStore, it as networkPolicyLibSource, lt as parseBridgeRequest, m as FsArtifactStore, st as normalizeToolContent } from "./dist-D0qW6e40.js";
+import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
+import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DjIQpt8Y-Bj3vghj4.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";
@@ -1148,6 +1149,13 @@ var CliUiBridge = class {
 					value: answer === "y" || answer === "yes"
 				};
 			}
+			case "file-pick": {
+				const answer = (await this.#question(`${input.message}\nLocal file path (empty to decline): `)).trim();
+				return answer === "" ? { id: input.id } : {
+					id: input.id,
+					value: { path: answer }
+				};
+			}
 		}
 	}
 	async progress(input) {
@@ -2252,7 +2260,7 @@ var ApprovalWorkflow = class {
 			});
 			await this.#store.updateStatus(candidateId, "published");
 			await this.#audit.append({
-				type: "skill.published",
+				type: AUDIT_EVENT_TYPES.skillPublished,
 				target: candidate.name,
 				actor: input.actor,
 				data: {

package/dist/{openUiLibrary-W3Ce896k-ClFTRZFs.js → openUiLibrary-Bdrji9qK-D2LxmM-a.js}

@@ -1,5 +1,5 @@
-import { nt as uiCatalog } from "./dist-bewtXYlO.js";
-import { t as CatalogNode } from "./catalogComponents-DV7cPpUm-C77AEEx9.js";
+import { nt as uiCatalog } from "./dist-DnYG2-eY.js";
+import { t as CatalogNode } from "./catalogComponents-Dr5dFMAb-DKH_7VPI.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3761,7 +3761,7 @@ function Renderer({ response, library, isStreaming = false, onAction, onStateUpd
 const FormValidationContext = createContext(null);
 
 //#endregion
-//#region ../ui-react/dist/openUiLibrary-W3Ce896k.js
+//#region ../ui-react/dist/openUiLibrary-Bdrji9qK.js
 const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
 /**
 * catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，

package/dist/{skillVersionStore-BzLbzFOL-CxwIewHJ.d.ts → skillVersionStore-Bl-ElD45-CWPvGvoq.d.ts}

@@ -1,5 +1,5 @@
-import { B as PageQuery, P as FileSystemProvider, Q as SkillCatalogEntry, at as SkillManifest, z as Page } from "./types-D_hoCri8-BnNPiZCi.js";
-//#region ../governance/dist/skillVersionStore-BzLbzFOL.d.ts
+import { H as PageQuery, I as FileSystemProvider, V as Page, et as SkillCatalogEntry, st as SkillManifest } from "./types-CcxRLdJG-DCXyw1US.js";
+//#region ../governance/dist/skillVersionStore-Bl-ElD45.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 /** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
@@ -49,6 +49,12 @@ interface AuditQueryFilter {
   since?: string;
   /** 含端点（`ts <= until`） */
   until?: string;
+  /**
+   * true 时链校验失败不抛错，改为在结果里报告断点（`chainBrokenAt` / `chainReason`）。
+   * **仅用于人工查看的降级展示**：程序化消费方（合规导出等）拿到部分结果而不知情
+   * 比直接失败更危险。默认 false，保持既有行为。
+   */
+  tolerateBrokenChain?: boolean;
 }
 interface AuditLog {
   append(event: Omit<AuditEvent, 'id' | 'ts'> & {

package/dist/{testing-DDCJWvgA.js → testing-CYTFqkDm.js}

@@ -1,5 +1,5 @@
 import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { i as textParts, n as partsToText } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
 
 //#region ../runtime/dist/testing.js
 /**

package/dist/testing.d.ts

@@ -1,5 +1,5 @@
-import { _ as MemoryStore, b as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput } from "./types-D_hoCri8-BnNPiZCi.js";
-import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-BPUBZCwJ-4jat_SVG.js";
+import { _ as MemoryStore, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, x as UiBridge } from "./types-CcxRLdJG-DCXyw1US.js";
+import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts
 type MockLlmHandler = (input: LlmCompleteInput) => LlmResponse | Promise<LlmResponse>;

package/dist/testing.js

@@ -1,5 +1,5 @@
-import { t as MemoryArtifactStore } from "./memoryArtifactStore-BtOeB_hm-tj3fC5ip.js";
-import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env--jJB-TSX-04klhTYi.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-DDCJWvgA.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env-8cY40DXB-CGnEVZby.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-CYTFqkDm.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };