@webskill/sdk 0.6.0 → 0.8.0

package/dist/mcp.js

@@ -1,5 +1,5 @@
-import { O as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { at as normalizeToolContent, et as mergeCatalogEntries } from "./dist-DusANsrn.js";
+import { A as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-59XlqDuv.js";
+import { it as mergeCatalogEntries, lt as normalizeToolContent } from "./dist-DmI5SBBF.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -182,6 +182,8 @@ const failure$1 = (code, message) => ({
 		message
 	}
 });
+/** 需要重新授权不是「端点不可用」：压平成后者，模型和界面都会去查网络（0.7.0 FR-22.3） */
+const endpointFailure = (e, message) => failure$1(e instanceof WebSkillError && e.code.startsWith("MCP_OAUTH_") ? e.code : "MCP_ENDPOINT_UNAVAILABLE", message);
 /**
 * endpoint:toolName 调用 + 工具清单缓存（TTL 默认 1s + registry 版本号双失效）。
 */
@@ -204,7 +206,7 @@ var McpToolResolver = class {
 		try {
 			names = await this.#toolNames(endpoint, client);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Failed to list tools: ${messageOf(e)}`);
+			return endpointFailure(e, `Failed to list tools: ${messageOf(e)}`);
 		}
 		if (!names.has(toolName)) {
 			this.#cache.delete(endpoint);
@@ -222,7 +224,7 @@ var McpToolResolver = class {
 			});
 			return this.#normalizeCallResult(raw);
 		} catch (e) {
-			return failure$1("MCP_ENDPOINT_UNAVAILABLE", `Tool "${toolName}" on endpoint "${endpoint}" failed: ${messageOf(e)}`);
+			return endpointFailure(e, `Tool "${toolName}" on endpoint "${endpoint}" failed: ${messageOf(e)}`);
 		}
 	}
 	async #toolNames(endpoint, client) {
@@ -443,6 +445,16 @@ var ExperimentalWebMcpAdapter = class {
 		const api = this.#resolveApi();
 		return this.#enabled && typeof api?.executeTool === "function";
 	}
+	isEnabled() {
+		return this.#enabled;
+	}
+	/**
+	* 宿主把开关交给用户时必须走这里：适配器是工具是否对 LLM 可见的**唯一闸门**。
+	* 宿主自己另存一份开关态而不同步到这里，会出现「界面上关了、模型照样能调」。
+	*/
+	setEnabled(on) {
+		this.#enabled = on;
+	}
 	/** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
 	async listTools() {
 		const api = this.#resolveApi();
@@ -565,22 +577,182 @@ var McpRuntimePlugin = class {
 		};
 	}
 };
+/**
+* 构造授权相关错误。`message` 只含端点名与阶段，`details` 只有 `{ endpoint, stage }`——
+* 不带 `cause`：SDK 的错误 message 可能回显授权 URL 或 token 端点的响应体（AC-22.6）。
+*/
+function oauthError(code, endpoint, stage, reason) {
+	return new WebSkillError(code, `Remote MCP endpoint "${endpoint}" ${reason} (stage: ${stage})`, {
+		endpoint,
+		stage
+	});
+}
+/** 显式的内存存储，供 examples 与测试使用。**不是缺省行为**——是宿主主动选的（AC-22.7）。 @experimental */
+function createMemoryOAuthStores() {
+	const tokens = /* @__PURE__ */ new Map();
+	const handshakes = /* @__PURE__ */ new Map();
+	return {
+		tokens: {
+			load: (endpoint) => Promise.resolve(tokens.get(endpoint)),
+			save: (endpoint, value) => {
+				tokens.set(endpoint, value);
+				return Promise.resolve();
+			},
+			clear: (endpoint) => {
+				tokens.delete(endpoint);
+				return Promise.resolve();
+			}
+		},
+		handshake: {
+			load: (endpoint) => Promise.resolve(handshakes.get(endpoint)),
+			save: (endpoint, value) => {
+				handshakes.set(endpoint, value);
+				return Promise.resolve();
+			},
+			clear: (endpoint) => {
+				handshakes.delete(endpoint);
+				return Promise.resolve();
+			}
+		}
+	};
+}
+const randomState = () => {
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	crypto.getRandomValues(bytes);
+	return [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+};
+/**
+* `McpOAuthConfig` → SDK `OAuthClientProvider` 适配器。
+*
+* `state()` 与 `saveCodeVerifier()` 由 SDK 分两次调用（顺序上前者在先），
+* 两者合成一条握手记录：谁先到都把当前已知部分写进去，回程时两项都在。
+* @experimental
+*/
+function createOAuthProvider(endpoint, config) {
+	const { client, tokens: tokenStore, handshake } = config;
+	let pending = {};
+	const persist = async (patch) => {
+		pending = {
+			...pending,
+			...patch
+		};
+		await handshake.save(endpoint, {
+			codeVerifier: pending.codeVerifier ?? "",
+			state: pending.state ?? ""
+		});
+	};
+	return {
+		get redirectUrl() {
+			return client.redirectUri;
+		},
+		get clientMetadata() {
+			return {
+				client_name: "WebSkill SDK",
+				redirect_uris: [client.redirectUri],
+				grant_types: ["authorization_code", "refresh_token"],
+				response_types: ["code"],
+				token_endpoint_auth_method: client.clientSecret === void 0 ? "none" : "client_secret_post",
+				...client.scopes && client.scopes.length > 0 ? { scope: client.scopes.join(" ") } : {}
+			};
+		},
+		async state() {
+			const value = randomState();
+			await persist({ state: value });
+			return value;
+		},
+		clientInformation() {
+			return Promise.resolve({
+				client_id: client.clientId,
+				...client.clientSecret !== void 0 ? { client_secret: client.clientSecret } : {}
+			});
+		},
+		async tokens() {
+			const saved = await tokenStore.load(endpoint);
+			if (!saved) return void 0;
+			return {
+				access_token: saved.accessToken,
+				token_type: saved.tokenType ?? "Bearer",
+				...saved.expiresAt !== void 0 ? { expires_in: Math.max(0, Math.round((saved.expiresAt - Date.now()) / 1e3)) } : {},
+				...saved.refreshToken !== void 0 ? { refresh_token: saved.refreshToken } : {},
+				...saved.scope !== void 0 ? { scope: saved.scope } : {}
+			};
+		},
+		async saveTokens(next) {
+			await tokenStore.save(endpoint, {
+				accessToken: next.access_token,
+				...next.expires_in !== void 0 ? { expiresAt: Date.now() + next.expires_in * 1e3 } : {},
+				...next.refresh_token !== void 0 ? { refreshToken: next.refresh_token } : {},
+				...next.token_type !== void 0 ? { tokenType: next.token_type } : {},
+				...next.scope !== void 0 ? { scope: next.scope } : {}
+			});
+		},
+		async redirectToAuthorization(url) {
+			await config.openAuthorization(url);
+		},
+		async saveCodeVerifier(codeVerifier) {
+			await persist({ codeVerifier });
+		},
+		async codeVerifier() {
+			const saved = await handshake.load(endpoint);
+			if (!saved?.codeVerifier) throw oauthError("MCP_OAUTH_FAILED", endpoint, "exchange", "has no stored PKCE verifier for this handshake");
+			return saved.codeVerifier;
+		},
+		async invalidateCredentials(scope) {
+			if (scope === "all" || scope === "tokens") await tokenStore.clear(endpoint);
+			if (scope === "all" || scope === "verifier") await handshake.clear(endpoint);
+		}
+	};
+}
 async function loadMcpSdk() {
 	try {
-		const [client, sse, streamable] = await Promise.all([
+		const [client, sse, streamable, auth, errors] = await Promise.all([
 			import("@modelcontextprotocol/sdk/client/index.js"),
 			import("@modelcontextprotocol/sdk/client/sse.js"),
-			import("@modelcontextprotocol/sdk/client/streamableHttp.js")
+			import("@modelcontextprotocol/sdk/client/streamableHttp.js"),
+			import("@modelcontextprotocol/sdk/client/auth.js"),
+			import("@modelcontextprotocol/sdk/server/auth/errors.js")
 		]);
 		return {
 			Client: client.Client,
 			SSEClientTransport: sse.SSEClientTransport,
-			StreamableHTTPClientTransport: streamable.StreamableHTTPClientTransport
+			StreamableHTTPClientTransport: streamable.StreamableHTTPClientTransport,
+			UnauthorizedError: auth.UnauthorizedError,
+			OAuthError: errors.OAuthError
 		};
 	} catch (e) {
 		throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", "The \"@modelcontextprotocol/sdk\" package is required for remote MCP endpoints; install it first (npm i @modelcontextprotocol/sdk)", e);
 	}
 }
+/** 运行期的未授权（含刷新失败）必须在 endpoint 层转成 `WebSkillError`，否则 401 会以工具结果的形式进模型上下文 */
+function wrapOAuthClient(client, endpoint, oauth, isUnauthorized) {
+	const guard = async (work) => {
+		try {
+			return await work();
+		} catch (e) {
+			if (!isUnauthorized(e)) throw e;
+			await oauth.tokens.clear(endpoint);
+			throw oauthError("MCP_OAUTH_REQUIRED", endpoint, "refresh", "needs authorization again");
+		}
+	};
+	return {
+		listTools: () => guard(() => client.listTools()),
+		callTool: (input) => guard(() => client.callTool(input)),
+		listPrompts: () => guard(() => client.listPrompts()),
+		getPrompt: (input) => guard(() => client.getPrompt(input)),
+		listResources: () => guard(() => client.listResources()),
+		readResource: (input) => guard(() => client.readResource(input))
+	};
+}
+/** 授权注入的完整性校验：缺一项就是宿主的配置错误，不是运行期授权问题（AC-22.7） */
+function assertOAuthConfigured(endpoint, oauth) {
+	const missing = [];
+	if (!oauth.client?.clientId) missing.push("client.clientId");
+	if (!oauth.client?.redirectUri) missing.push("client.redirectUri");
+	if (!oauth.tokens) missing.push("tokens");
+	if (!oauth.handshake) missing.push("handshake");
+	if (typeof oauth.openAuthorization !== "function") missing.push("openAuthorization");
+	if (missing.length > 0) throw oauthError("MCP_OAUTH_NOT_CONFIGURED", endpoint, "discover", `is missing OAuth wiring: ${missing.join(", ")}`);
+}
 /**
 * 远程 MCP endpoint 装配：SDK 官方 StreamableHTTPClientTransport（默认）/
 * SSEClientTransport（遗留）连接远端 server，注册进 EndpointRegistry——
@@ -588,7 +760,7 @@ async function loadMcpSdk() {
 * 返回 close 句柄：断开后 unregister（临时技能随既有生命周期自然消失）。
 */
 async function connectRemoteEndpoint(registry, config) {
-	const { Client, SSEClientTransport, StreamableHTTPClientTransport } = await loadMcpSdk();
+	const { Client, SSEClientTransport, StreamableHTTPClientTransport, UnauthorizedError, OAuthError } = await loadMcpSdk();
 	let url;
 	try {
 		url = new URL(config.url);
@@ -599,46 +771,81 @@ async function connectRemoteEndpoint(registry, config) {
 		allowHttp: config.allowHttp ?? false,
 		allowPrivateHosts: config.allowPrivateHosts ?? false
 	});
+	const oauth = config.oauth;
+	if (oauth) assertOAuthConfigured(config.endpoint, oauth);
+	const authProvider = oauth ? createOAuthProvider(config.endpoint, oauth) : void 0;
 	const requestInit = config.headers ? { headers: config.headers } : void 0;
-	const transport = config.transport === "sse" ? new SSEClientTransport(url, { ...requestInit ? { requestInit } : {} }) : new StreamableHTTPClientTransport(url, { ...requestInit ? { requestInit } : {} });
+	const transportOptions = {
+		...requestInit ? { requestInit } : {},
+		...authProvider ? { authProvider } : {}
+	};
+	const makeTransport = () => config.transport === "sse" ? new SSEClientTransport(url, transportOptions) : new StreamableHTTPClientTransport(url, transportOptions);
 	const client = new Client({
 		name: "webskill-remote-client",
 		version: "0.1.0"
 	});
+	const isUnauthorized = (e) => e instanceof UnauthorizedError || e instanceof OAuthError;
 	const unavailable = (e) => new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to connect remote MCP endpoint "${config.endpoint}" at ${config.url}: ${messageOf(e)}`, e);
-	try {
+	let closed = false;
+	const close = async () => {
+		if (closed) return;
+		closed = true;
+		registry.unregister(config.endpoint);
+		try {
+			await client.close();
+		} catch (e) {
+			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to close remote MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
+		}
+	};
+	const register = () => {
+		try {
+			const entry = client;
+			registry.register(config.endpoint, oauth ? wrapOAuthClient(entry, config.endpoint, oauth, isUnauthorized) : entry);
+		} catch (e) {
+			client.close().catch(() => void 0);
+			throw unavailable(e);
+		}
+	};
+	const openConnection = async (transport) => {
 		let connect = client.connect(transport);
 		if (config.timeoutMs && config.timeoutMs > 0) {
 			const timeoutMs = config.timeoutMs;
 			connect = Promise.race([connect, new Promise((_resolve, reject) => setTimeout(() => reject(/* @__PURE__ */ new Error(`Connection timed out after ${timeoutMs}ms`)), timeoutMs))]);
 		}
 		await connect;
-	} catch (e) {
+	};
+	const finishAuthorization = async (code, state) => {
+		const saved = await oauth.handshake.load(config.endpoint);
+		if (!saved || saved.state === "" || saved.state !== state) throw oauthError("MCP_OAUTH_FAILED", config.endpoint, "authorize", "received a mismatched authorization state");
+		const transport = makeTransport();
 		try {
-			await client.close();
-		} catch {}
-		throw unavailable(e);
-	}
+			await transport.finishAuth(code);
+		} catch (e) {
+			throw oauthError(isUnauthorized(e) ? "MCP_OAUTH_REQUIRED" : "MCP_OAUTH_FAILED", config.endpoint, "exchange", "could not exchange the authorization code");
+		}
+		await oauth.handshake.clear(config.endpoint);
+		await openConnection(transport);
+		register();
+	};
 	try {
-		registry.register(config.endpoint, client);
+		await openConnection(makeTransport());
 	} catch (e) {
+		if (oauth && isUnauthorized(e)) return {
+			close,
+			finishAuthorization,
+			authorizationRequired: true
+		};
 		try {
 			await client.close();
 		} catch {}
 		throw unavailable(e);
 	}
-	let closed = false;
-	return { close: async () => {
-		if (closed) return;
-		closed = true;
-		registry.unregister(config.endpoint);
-		try {
-			await client.close();
-		} catch (e) {
-			throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", `Failed to close remote MCP endpoint "${config.endpoint}": ${messageOf(e)}`, e);
-		}
-	} };
+	register();
+	return {
+		close,
+		...oauth ? { finishAuthorization } : {}
+	};
 }
 
 //#endregion
-export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/{memoryArtifactStore-52Zn9npI-BMPYwvoy.js → memoryArtifactStore-52Zn9npI-upv5OWYf.js}

@@ -1,4 +1,4 @@
-import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
+import { m as WebSkillError } from "./dist-59XlqDuv.js";
 
 //#region ../runtime/dist/memoryArtifactStore-52Zn9npI.js
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { I as JsonSchema, N as FileStat, O as ArchiveLimits, P as FileSystemProvider, U as SKILLS_LOCKFILE, W as SKILL_MANIFEST_FILE, Y as SignatureAuditSink, _t as VerifyResult, at as SkillManifest, b as UiBridge, c as InteractionResponse, dt as SkillsLockfile, ht as UnsignedPolicy, it as SkillManagerPort, pt as TrustedKeyStore, s as InteractionRequest, tt as SkillInstallSource, y as RenderResultRequest } from "./types-4pg-qp_I-Gq63X8Oa.js";
-import { A as FsArtifactStore, Ct as ScriptExecutionContext, J as NetworkPolicy, St as SchemaInferer, Ut as ToolResult, Vt as ToolDefinition, _ as BridgeCapabilities, f as ApprovalScope, fn as createScriptContext, j as FsMemoryStore, on as WebSkillRuntime, sn as WebSkillRuntimeDeps, wt as ScriptExecutor } from "./index-C-KFAZoF.js";
-import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-BzLbzFOL-CxdAFWO2.js";
+import { A as ArchiveLimits, F as FileStat, G as SKILLS_LOCKFILE, I as FileSystemProvider, K as SKILL_MANIFEST_FILE, R as JsonSchema, Z as SignatureAuditSink, _t as TrustedKeyStore, at as SkillInstallSource, c as InteractionResponse, ct as SkillManagerPort, ht as SkillsLockfile, lt as SkillManifest, s as InteractionRequest, x as UiBridge, xt as VerifyResult, y as RenderResultRequest, yt as UnsignedPolicy } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { Et as ScriptExecutor, M as FsMemoryStore, Tt as ScriptExecutionContext, Y as NetworkPolicy, Yt as ToolResult, _ as BridgeCapabilities, f as ApprovalScope, j as FsArtifactStore, mn as WebSkillRuntimeDeps, pn as WebSkillRuntime, qt as ToolDefinition, wt as SchemaInferer, yn as createScriptContext } from "./index-K-eewlGL.js";
+import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-Bl-ElD45-gRfSaAby.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -1,6 +1,7 @@
-import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
-import { I as WebSkillRuntime, V as createScriptContext, at as normalizeToolContent, c as CapabilityApproval, m as FsMemoryStore, nt as networkPolicyLibSource, ot as normalizeToolError, p as FsArtifactStore, st as parseBridgeRequest, z as bridgeError } from "./dist-DusANsrn.js";
+import { A as messageOf, D as isValidSkillName, E as exportSkills, F as readSkillSignature, G as verifyManifest, K as verifySkillSignature, M as parseSkillMarkdown, N as parseSkillPackManifest, P as readResponseWithLimit, R as resolveArchiveLimits, U as unzipWithLimits, W as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, y as buildManifest, z as resolveInsideRoot } from "./dist-59XlqDuv.js";
+import { B as bridgeError, H as createScriptContext, L as WebSkillRuntime, c as CapabilityApproval, dt as parseBridgeRequest, h as FsMemoryStore, lt as normalizeToolContent, m as FsArtifactStore, ot as networkPolicyLibSource, ut as normalizeToolError } from "./dist-DmI5SBBF.js";
 import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
+import { t as AUDIT_EVENT_TYPES } from "./eventTypes-g1BXL6x5-CibcOftR.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";
@@ -2259,7 +2260,7 @@ var ApprovalWorkflow = class {
 			});
 			await this.#store.updateStatus(candidateId, "published");
 			await this.#audit.append({
-				type: "skill.published",
+				type: AUDIT_EVENT_TYPES.skillPublished,
 				target: candidate.name,
 				actor: input.actor,
 				data: {

package/dist/{openUiLibrary-Bdrji9qK-DzAxRlTY.js → openUiLibrary-DURlAxjk-CU6AzfSW.js}

@@ -1,5 +1,5 @@
-import { nt as uiCatalog } from "./dist-DnYG2-eY.js";
-import { t as CatalogNode } from "./catalogComponents-Dr5dFMAb-Dacibl1e.js";
+import { ft as uiCatalog } from "./dist-CJqQsIm9.js";
+import { t as CatalogNode } from "./catalogComponents-DfxxfUvn-D55Gbb2l.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3761,7 +3761,7 @@ function Renderer({ response, library, isStreaming = false, onAction, onStateUpd
 const FormValidationContext = createContext(null);
 
 //#endregion
-//#region ../ui-react/dist/openUiLibrary-Bdrji9qK.js
+//#region ../ui-react/dist/openUiLibrary-DURlAxjk.js
 const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
 /**
 * catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，

package/dist/{skillVersionStore-BzLbzFOL-CxdAFWO2.d.ts → skillVersionStore-Bl-ElD45-gRfSaAby.d.ts}

@@ -1,5 +1,5 @@
-import { B as PageQuery, P as FileSystemProvider, Q as SkillCatalogEntry, at as SkillManifest, z as Page } from "./types-4pg-qp_I-Gq63X8Oa.js";
-//#region ../governance/dist/skillVersionStore-BzLbzFOL.d.ts
+import { H as PageQuery, I as FileSystemProvider, V as Page, lt as SkillManifest, nt as SkillCatalogEntry } from "./types-B3n0cMZu-BdcqQ35O.js";
+//#region ../governance/dist/skillVersionStore-Bl-ElD45.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';
 /** `generated` 是 0.5.0 的技能自动生成来源（需求 12 号 AC-9.1） */
@@ -49,6 +49,12 @@ interface AuditQueryFilter {
   since?: string;
   /** 含端点（`ts <= until`） */
   until?: string;
+  /**
+   * true 时链校验失败不抛错，改为在结果里报告断点（`chainBrokenAt` / `chainReason`）。
+   * **仅用于人工查看的降级展示**：程序化消费方（合规导出等）拿到部分结果而不知情
+   * 比直接失败更危险。默认 false，保持既有行为。
+   */
+  tolerateBrokenChain?: boolean;
 }
 interface AuditLog {
   append(event: Omit<AuditEvent, 'id' | 'ts'> & {

package/dist/{testing-CYTFqkDm.js → testing-BCUO5gZR.js}

@@ -1,5 +1,5 @@
-import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { m as WebSkillError } from "./dist-59XlqDuv.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
 
 //#region ../runtime/dist/testing.js
 /**

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { _ as MemoryStore, b as UiBridge, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput } from "./types-4pg-qp_I-Gq63X8Oa.js";
+import { _ as MemoryStore, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, x as UiBridge } from "./types-B3n0cMZu-BdcqQ35O.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/testing.js

@@ -1,5 +1,5 @@
-import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
 import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env-8cY40DXB-CGnEVZby.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-CYTFqkDm.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-BCUO5gZR.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };

package/dist/{types-4pg-qp_I-Gq63X8Oa.d.ts → types-B3n0cMZu-BdcqQ35O.d.ts}

@@ -1,6 +1,8 @@
 //#region ../core/dist/index.d.ts
 //#region src/errors.d.ts
-type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'TOOL_RESOLUTION_EXHAUSTED' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT' | 'TS_RESOURCE_URL_REJECTED' | 'TS_TRANSPILER_UNAVAILABLE' | 'TS_TRANSPILE_FAILED' | 'TODO_LIST_INVALID' | 'TODO_ITEM_NOT_FOUND' | 'SKILL_GENERATION_DISABLED' | 'SKILL_GENERATION_LIMIT_EXCEEDED' | 'SKILL_GENERATION_VALIDATION_FAILED' | 'DELEGATION_UNAVAILABLE' | 'DELEGATION_IN_PROGRESS' | 'DELEGATION_BUDGET_EXCEEDED' | 'PROFILE_IMPORT_INVALID' | 'PROFILE_IMPORT_VERSION_UNSUPPORTED' | 'PROFILE_IMPORT_CREDENTIAL_REJECTED' | 'PROFILE_KEY_UNAVAILABLE' | 'DICTATION_UNAVAILABLE' | 'DICTATION_PERMISSION_DENIED' | 'DICTATION_FAILED' | 'PERCEPTION_NOT_ENABLED' | 'PERCEPTION_FAILED' | 'MODEL_IMAGE_UNSUPPORTED' | 'MODEL_TOOLS_UNSUPPORTED' | 'ATTACHMENT_TOO_LARGE' | 'ATTACHMENT_TYPE_REJECTED';
+type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'SKILL_MANIFEST_PROTECTED' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'TOOL_RESOLUTION_EXHAUSTED' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' |
+/** 历史里有未应答的工具调用，但当初为何中断已无从得知（分册 11 读取侧补齐） */
+'RUN_INTERRUPTED' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT' | 'MCP_OAUTH_REQUIRED' | 'MCP_OAUTH_FAILED' | 'MCP_OAUTH_NOT_CONFIGURED' | 'PAGE_ACTION_OUT_OF_SCOPE' | 'PAGE_ACTION_STALE_REF' | 'PAGE_ACTION_DECLINED' | 'TS_RESOURCE_URL_REJECTED' | 'TS_TRANSPILER_UNAVAILABLE' | 'TS_TRANSPILE_FAILED' | 'TODO_LIST_INVALID' | 'TODO_ITEM_NOT_FOUND' | 'SKILL_GENERATION_DISABLED' | 'SKILL_GENERATION_LIMIT_EXCEEDED' | 'SKILL_GENERATION_VALIDATION_FAILED' | 'DELEGATION_UNAVAILABLE' | 'DELEGATION_IN_PROGRESS' | 'DELEGATION_BUDGET_EXCEEDED' | 'PROFILE_IMPORT_INVALID' | 'PROFILE_IMPORT_VERSION_UNSUPPORTED' | 'PROFILE_IMPORT_CREDENTIAL_REJECTED' | 'PROFILE_KEY_UNAVAILABLE' | 'DICTATION_UNAVAILABLE' | 'DICTATION_PERMISSION_DENIED' | 'DICTATION_FAILED' | 'PERCEPTION_NOT_ENABLED' | 'PERCEPTION_FAILED' | 'MODEL_IMAGE_UNSUPPORTED' | 'MODEL_TOOLS_UNSUPPORTED' | 'ATTACHMENT_TOO_LARGE' | 'ATTACHMENT_TYPE_REJECTED';
 /**
  * 所有公开 API 抛出的结构化错误，code 供上层可编程处理
  * @stable
@@ -471,6 +473,36 @@ declare function checkDependencyCycles(adjacency: Map<string, string[]>): {
   involved: Set<string>;
 };
 //#endregion
+//#region src/skill/archiveShape.d.ts
+/**
+ * 归档的三种合法形态。本轮 bug 的成因是「安装认三种、预览只认扁平」，
+ * 抽出后不允许再分叉（设计 19 §2.1）。
+ */
+type SkillArchiveShape = 'pack-set' | 'flat' | 'nested-single' | 'invalid';
+interface SkillArchiveDetection {
+  shape: SkillArchiveShape;
+  /** nested-single 时的顶层目录名（不含尾部斜杠），其余形态为 undefined */
+  rootDir?: string;
+  /** 无法判定时的原因，面向调用方，英文 */
+  reason?: string;
+}
+/**
+ * 按归档条目表判定包结构。
+ *
+ * 入参是条目表而不是文件系统：预览侧只有解压后的 entries，没有落盘的目录。
+ * 只看路径，不读内容——内容合法性由 checkSkillRules 负责，两者不重叠。
+ */
+declare function detectSkillArchiveShape(entries: Iterable<string>): SkillArchiveDetection;
+/** nested-single 时剥掉顶层目录，其余形态原样返回 */
+declare function stripArchiveRoot<T>(entries: Record<string, T>, detection: SkillArchiveDetection): Record<string, T>;
+/**
+ * 文件系统入口：安装管线拿到的是解压后的目录，不是条目表。
+ *
+ * 只探测判定所需的少量路径（不递归全量列举），再交给上面的纯函数——
+ * 判定规则仍然只有一份，这正是 S7 的目的。
+ */
+declare function detectSkillArchiveShapeFromFs(fs: FileSystemProvider, contentDir: string): Promise<SkillArchiveDetection>;
+//#endregion
 //#region src/skill/skillPack.d.ts
 /**
  * 技能包集（skill pack）格式与打包逻辑（node/browser 共用单一来源）：
@@ -529,7 +561,9 @@ interface DiscoveryResult {
 }
 declare class SkillDiscovery {
   #private;
-  constructor(fs: FileSystemProvider, roots: string[]);
+  constructor(fs: FileSystemProvider, roots: string[], options?: {
+    extraKnownSkillNames?: readonly string[];
+  });
   discover(): Promise<DiscoveryResult>;
   catalog(): Promise<{
     catalog: SkillCatalog;
@@ -548,8 +582,13 @@ interface ValidationReport {
 /**
  * 合规校验。内部直接复用 SkillDiscovery 的扫描逻辑，
  * 规则判定同样落在 checkSkillRules 单一来源上。
+ *
+ * `extraKnownSkillNames`：扫描范围之外已存在的技能名。安装时只扫刚解出来的那一个目录，
+ * 不告诉它库里还有谁，任何指向包外的 dependencies 都会被判成不存在。
  */
-declare function validateSkills(fs: FileSystemProvider, roots: string[]): Promise<ValidationReport>;
+declare function validateSkills(fs: FileSystemProvider, roots: string[], options?: {
+  extraKnownSkillNames?: readonly string[];
+}): Promise<ValidationReport>;
 //#endregion
 //#region src/skill/reader.d.ts
 /** 按技能名读取技能根目录内的文件，全部读取强制经过路径安全检查 */
@@ -582,7 +621,7 @@ declare function escapeXml(text: string): string;
 declare function renderAvailableSkillsXml(catalog: SkillCatalog): string;
 declare const xmlRenderer: CatalogRenderer;
 //#endregion
-//#region ../runtime/dist/types-4pg-qp_I.d.ts
+//#region ../runtime/dist/types-B3n0cMZu.d.ts
 //#region src/llm/streamTypes.d.ts
 /** 流式 LLM 事件（OpenAI SSE / Vercel fullStream 统一映射） */
 type LlmStreamEvent = {
@@ -681,6 +720,25 @@ interface ArtifactStore {
   listArtifacts(runId: string): Promise<Artifact[]>;
 }
 //#endregion
+//#region src/skillGeneration/candidateMarker.d.ts
+/**
+ * 一个已提交待审批的技能候选。字段固定为 `{ id, name }`——
+ * 这条通道只用来把候选交接给界面，扩字段要走 AC-G12 登记。
+ * @experimental
+ */
+interface SkillCandidateMarker {
+  id: string;
+  name: string;
+}
+/**
+ * `$skillCandidate` 约定的形状校验：JSON content 的 data 含合法 `$skillCandidate` 键 → 候选载荷。
+ *
+ * 与 `$chart` / `$todo` / `$surface` 同一条既有通道，是第四个。
+ * 候选的生成与存储全部在 `@webskill/agent`，runtime 只认这个形状，畸形忽略不炸。
+ * @experimental
+ */
+declare function extractSkillCandidate(data: unknown): SkillCandidateMarker | undefined;
+//#endregion
 //#region src/interaction/types.d.ts
 /**
  * 交互的发起方标识（FR-11.6）。串行委派下父 agent 与子 agent 都能发起交互，
@@ -743,7 +801,7 @@ type InteractionRequest = {
    */
   type: 'authorize';
   id: string;
-  capability: 'readReference' | 'writeArtifact' | 'confirm';
+  capability: 'readReference' | 'writeArtifact' | 'confirm' | 'pageAction';
   message: string;
   details?: unknown;
 });
@@ -801,6 +859,12 @@ interface RenderResultRequest {
   summary?: string;
   blocks: RenderBlock[];
   artifacts?: Artifact[];
+  /**
+   * 引擎注入的「最终输出」markdown block 在 `blocks` 中的下标；未注入时缺省。
+   * 消费方据此剔除与消息正文重复的那一块，**不得改用正文字符串比较**。
+   * 技能作者自己产出的 block 不在此字段的范围内。
+   */
+  outputBlockIndex?: number;
 }
 /** A user action exposed by a generative UI surface. @experimental */
 interface UiSpecActionCapability {
@@ -894,13 +958,16 @@ interface UiBridge {
   requestSurfaceAction?(input: UiSurfaceActionRequest): Promise<UiSurfaceActionResponse>;
   /** Best-effort cleanup when a surface action wait times out or is cancelled. @experimental */
   cancelSurfaceAction?(nonce: string): void | Promise<void>;
+  /** 已提交待审批的技能候选（`$skillCandidate` 载荷）；未实现时候选只存在于工具返回值里。 @experimental */
+  onSkillCandidate?(runId: string, candidate: SkillCandidateMarker): void | Promise<void>;
   /** 流式文本增量（流式 LLM 路径下由 AgentLoop 转发） */
   onTextDelta?(runId: string, delta: string): Promise<void> | void;
 }
 interface FormField {
   name: string;
   label: string;
-  type: 'text' | 'number' | 'boolean' | 'select' | 'textarea' | 'file';
+  /** `password` 的值不进 paramHistory、不进行为记录、不落会话（FR-23.7） */
+  type: 'text' | 'number' | 'boolean' | 'select' | 'textarea' | 'file' | 'password';
   required?: boolean;
   description?: string;
   defaultValue?: unknown;
@@ -942,4 +1009,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { SkillDiscovery as $, CryptoKeyLike as A, isValidSkillName as At, PageQuery as B, renderCatalogJson as Bt, UiSpecEvent as C, buildCatalog as Ct, UiSurfaceActionResponse as D, computeDigest as Dt, UiSurfaceActionRequest as E, checkSkillRules as Et, FsTrustedKeyStore as F, parseSkillMarkdown as Ft, SKILL_NAME_MAX_LENGTH as G, unzipWithLimits as Gt, SIGNATURE_SCHEMA_VERSION as H, resolveInsideRoot as Ht, JsonSchema as I, parseSkillPackManifest as It, SKILL_SIGNATURE_FILE as J, verifySkillSignature as Jt, SKILL_NAME_PATTERN as K, validateSkills as Kt, MANIFEST_EXCLUDED_FILES as L, readResponseWithLimit as Lt, DiscoveryResult as M, keyIdOf as Mt, FileStat as N, messageOf as Nt, ArchiveLimits as O, escapeXml as Ot, FileSystemProvider as P, normalizePath as Pt, SkillCatalogEntry as Q, MemoryFS as R, readSkillSignature as Rt, UiSpecDrafts as S, atomicWriteText as St, UiSpecSnapshot as T, checkDependencyCycles as Tt, SKILLS_LOCKFILE as U, signSkill as Ut, RemoteUrlPolicy as V, resolveArchiveLimits as Vt, SKILL_MANIFEST_FILE as W, signaturePayloadBytes as Wt, SignatureVerdict as X, SignatureAuditSink as Y, xmlRenderer as Yt, SkillCatalog as Z, MemoryStore as _, VerifyResult as _t, InteractionOrigin as a, SkillManifest as at, UiBridge as b, assertRemoteUrlAllowed as bt, InteractionResponse as c, SkillReader as ct, LlmContentPart as d, SkillsLockfile as dt, SkillDocument as et, LlmMessage as f, TrustedKey as ft, LlmToolSpec as g, ValidationReport as gt, LlmToolCall as h, UnsignedPolicy as ht, FormField as i, SkillManagerPort as it, DEFAULT_ARCHIVE_LIMITS as j, jsonRenderer as jt, CatalogRenderer as k, exportSkills as kt, LlmClient as l, SkillSignature as lt, LlmStreamEvent as m, UiSpecNode as mt, ArtifactStore as n, SkillIssue as nt, InteractionPolicy as o, SkillMetadata as ot, LlmResponse as p, TrustedKeyStore as pt, SKILL_PACK_FILE as q, verifyManifest as qt, ChartSpec as r, SkillLocation as rt, InteractionRequest as s, SkillPackManifest as st, Artifact as t, SkillInstallSource as tt, LlmCompleteInput as u, SkillSource as ut, RenderBlock as v, WebSkillError as vt, UiSpecPatch as w, buildManifest as wt, UiSpecActionCapability as x, assertSafePathSegment as xt, RenderResultRequest as y, WebSkillErrorCode as yt, Page as z, renderAvailableSkillsXml as zt };
+export { SkillArchiveDetection as $, validateSkills as $t, ArchiveLimits as A, checkSkillRules as At, MemoryFS as B, normalizePath as Bt, UiSpecDrafts as C, WebSkillErrorCode as Ct, UiSurfaceActionRequest as D, buildCatalog as Dt, UiSpecSnapshot as E, atomicWriteText as Et, FileStat as F, exportSkills as Ft, SKILLS_LOCKFILE as G, renderAvailableSkillsXml as Gt, PageQuery as H, parseSkillPackManifest as Ht, FileSystemProvider as I, isValidSkillName as It, SKILL_NAME_PATTERN as J, resolveInsideRoot as Jt, SKILL_MANIFEST_FILE as K, renderCatalogJson as Kt, FsTrustedKeyStore as L, jsonRenderer as Lt, CryptoKeyLike as M, detectSkillArchiveShape as Mt, DEFAULT_ARCHIVE_LIMITS as N, detectSkillArchiveShapeFromFs as Nt, UiSurfaceActionResponse as O, buildManifest as Ot, DiscoveryResult as P, escapeXml as Pt, SignatureVerdict as Q, unzipWithLimits as Qt, JsonSchema as R, keyIdOf as Rt, UiSpecActionCapability as S, WebSkillError as St, UiSpecPatch as T, assertSafePathSegment as Tt, RemoteUrlPolicy as U, readResponseWithLimit as Ut, Page as V, parseSkillMarkdown as Vt, SIGNATURE_SCHEMA_VERSION as W, readSkillSignature as Wt, SKILL_SIGNATURE_FILE as X, signaturePayloadBytes as Xt, SKILL_PACK_FILE as Y, signSkill as Yt, SignatureAuditSink as Z, stripArchiveRoot as Zt, MemoryStore as _, TrustedKeyStore as _t, InteractionOrigin as a, SkillInstallSource as at, SkillCandidateMarker as b, ValidationReport as bt, InteractionResponse as c, SkillManagerPort as ct, LlmContentPart as d, SkillPackManifest as dt, verifyManifest as en, SkillArchiveShape as et, LlmMessage as f, SkillReader as ft, LlmToolSpec as g, TrustedKey as gt, LlmToolCall as h, SkillsLockfile as ht, FormField as i, SkillDocument as it, CatalogRenderer as j, computeDigest as jt, extractSkillCandidate as k, checkDependencyCycles as kt, LlmClient as l, SkillManifest as lt, LlmStreamEvent as m, SkillSource as mt, ArtifactStore as n, xmlRenderer as nn, SkillCatalogEntry as nt, InteractionPolicy as o, SkillIssue as ot, LlmResponse as p, SkillSignature as pt, SKILL_NAME_MAX_LENGTH as q, resolveArchiveLimits as qt, ChartSpec as r, SkillDiscovery as rt, InteractionRequest as s, SkillLocation as st, Artifact as t, verifySkillSignature as tn, SkillCatalog as tt, LlmCompleteInput as u, SkillMetadata as ut, RenderBlock as v, UiSpecNode as vt, UiSpecEvent as w, assertRemoteUrlAllowed as wt, UiBridge as x, VerifyResult as xt, RenderResultRequest as y, UnsignedPolicy as yt, MANIFEST_EXCLUDED_FILES as z, messageOf as zt };