@webskill/sdk 0.6.0 → 0.8.0

package/dist/{index-BuTpBMzr.d.ts → index-fLskQfAS.d.ts}

@@ -1,5 +1,5 @@
-import { a as InteractionOrigin, b as UiBridge } from "./types-4pg-qp_I-Gq63X8Oa.js";
-import { O as ExternalToolSource } from "./index-C-KFAZoF.js";
+import { a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest, x as UiBridge } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { k as ExternalToolSource } from "./index-K-eewlGL.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -319,6 +319,12 @@ interface PerceivedNode {
   imageId?: string;
   /** 取像失败的降级说明（英文）；不得静默丢弃（FR-12.1） */
   imageNote?: string;
+  /**
+   * 不透明元素句柄（S10）。**仅当该节点可被操作时出现**：
+   * 它落在宿主声明的操作范围内、且是可交互角色。
+   * 由 reader 生成，只在产生它的那次感知内有效；模型不得构造或推断。
+   */
+  ref?: string;
   children?: readonly PerceivedNode[];
 }
 /** 随感知一起下发的一张图像（FR-12.1） @experimental */
@@ -384,17 +390,23 @@ interface PerceptionRecord {
   imageFailures?: number;
 }
 /**
- * 审计落盘端口。刻意只声明 `append` 的结构化子集，`FsAuditLog` 直接满足——
+ * 页面侧留痕的统一出口（感知与操作共用）。
+ * 刻意只声明 `append` 的结构化子集，`FsAuditLog` 直接满足——
  * agent 包不能依赖 governance，但审计不能因此变成「记在内存里」。
  * @experimental
  */
-interface PerceptionAuditSink {
+interface PageAuditSink {
   append(event: {
     type: string;
     target: string;
     data?: Record<string, unknown>;
   }): Promise<unknown>;
 }
+/**
+ * @deprecated 改用 `PageAuditSink`。保留以兼容 0.5.0 的注入代码。
+ * @experimental
+ */
+type PerceptionAuditSink = PageAuditSink;
 //#endregion
 //#region src/perception/policy.d.ts
 interface PagePerceptionPolicyOptions {
@@ -471,4 +483,143 @@ declare function createPagePerceptionToolSource(options: PagePerceptionToolSourc
  */
 declare const PERCEPTION_SYSTEM_PROMPT: string;
 //#endregion
-export { SkillGenerationPolicy as A, TodoListener as B, PerceptionCaptureOptions as C, SKILL_GENERATION_SYSTEM_PROMPT as D, PerceptionScope as E, SubAgentRunner as F, createPagePerceptionToolSource as G, TodoStore as H, TODO_SYSTEM_PROMPT as I, withDelegationOrigin as J, createSkillGenerationToolSource as K, TodoEvent as L, SkillGenerator as M, SkillGeneratorOptions as N, SkillCandidateSink as O, SubAgentRunInput as P, TodoItem as R, PerceptionAuditSink as S, PerceptionResult as T, TodoToolSourceOptions as U, TodoStatus as V, createDelegationToolSource as W, PagePerceptionReader as _, DelegationOrchestratorOptions as a, PerceivedImage as b, DelegationToolSourceOptions as c, ImageCaptureBudget as d, MANAGE_TODO_TOOL as f, PagePerceptionPolicyOptions as g, PagePerceptionPolicy as h, DelegationOrchestrator as i, SkillGenerationToolSourceOptions as j, SkillGenerationOutcome as k, GENERATE_SKILL_TOOL as l, PERCEPTION_SYSTEM_PROMPT as m, DELEGATION_SYSTEM_PROMPT as n, DelegationRequest as o, PERCEIVE_PAGE_TOOL as p, createTodoToolSource as q, DelegationBudget as r, DelegationResult as s, DELEGATE_TASK_TOOL as t, GeneratedSkillDraft as u, PagePerceptionToolSourceOptions as v, PerceptionRecord as w, PerceivedNode as x, ParentBudget as y, TodoList as z };
+//#region src/pageAction/types.d.ts
+/**
+ * 页面操作的策略层类型（需求 23）。
+ *
+ * 与感知层同一条规矩：这一层不含任何 DOM 概念——执行落在 `@webskill/browser`，
+ * 本包只定义「什么允许被操作」以及一次操作长什么样。
+ */
+/**
+ * 可操作范围白名单（FR-23.1，硬约束）。
+ *
+ * **没有默认值，空 `include` 就是任何操作都不可执行。**
+ * 与 `PerceptionScope` 同构但**独立声明**：写成类型别名会让「感知与操作共用一份配置」
+ * 在类型层面合法，而 FR-23.1 写死了那是不可接受的——可读不等于可操作。
+ * @experimental
+ */
+interface PageActionScope {
+  /** 可操作的根节点选择器；未声明即不可操作 */
+  include: readonly string[];
+  /** 从 include 子树中剪除的危险控件（支付、删除、权限变更等） */
+  exclude?: readonly string[];
+}
+/** 本版的最小操作集（FR-23.4）。导航、拖拽、滚动均不在内。 @experimental */
+type PageActionKind = 'click' | 'fill' | 'submit';
+/** @experimental */
+interface PageActionRequest {
+  /** 感知产出的不透明句柄；不接受选择器（FR-23.4） */
+  ref: string;
+  action: PageActionKind;
+  /** `action === 'fill'` 时必填 */
+  value?: string;
+}
+/** @experimental */
+interface PageActionOutcome {
+  ok: boolean;
+  /**
+   * 实际操作到的元素的角色与可访问名称。
+   * 由**执行器**回填而不是调用方从感知结果里查：执行的那一刻元素可能已经变了，
+   * 留痕必须记实际操作到的东西（FR-23.3）。
+   */
+  target: {
+    role: string;
+    name?: string;
+  };
+  /** 目标是密码类控件：确认卡与留痕据此隐去值（FR-23.3） */
+  secret?: boolean;
+  /** 失败原因（英文） */
+  reason?: string;
+}
+/**
+ * 页面操作执行器。与 `PagePerceptionReader` 对称，同样不含 DOM 概念。
+ * 实现方负责校验句柄有效性、元素可交互性，以及目标是否仍在操作范围内。
+ * @experimental
+ */
+interface PageActionExecutor {
+  execute(request: PageActionRequest): Promise<PageActionOutcome> | PageActionOutcome;
+  /** 目标的角色与可访问名称，供确认卡在**执行前**说清将要做什么（FR-23.2） */
+  describe(ref: string): {
+    role: string;
+    name?: string;
+    secret?: boolean;
+  } | undefined;
+}
+/** 一次页面操作的留痕（FR-23.3 的五项字段） @experimental */
+interface PageActionRecord {
+  /** ISO 8601 */
+  at: string;
+  action: PageActionKind;
+  role: string;
+  name?: string;
+  /** 是否经用户确认；宿主预授权的操作记 `'preauthorized'` */
+  approved: boolean | 'preauthorized';
+  ok: boolean;
+  /** 非密码类控件填入的值；密码类控件**整个字段不存在** */
+  value?: string;
+  reason?: string;
+}
+//#endregion
+//#region src/pageAction/policy.d.ts
+/** 授权卡的最小出口；`UiBridge` 直接满足（与技能生成用的是同一个端口） */
+interface PageActionUi {
+  request(input: InteractionRequest): Promise<InteractionResponse>;
+}
+interface PageActionPolicyOptions {
+  /** 宿主声明的可操作范围；`include` 为空即整个能力不可用 */
+  scope: PageActionScope;
+  executor: PageActionExecutor;
+  ui: PageActionUi;
+  /** FR-23.3：每次操作写审计。不注入即不留痕，装配方要自己承担这个选择 */
+  audit?: PageAuditSink;
+  /** 审计事件的 target（缺省 `page`） */
+  auditTarget?: string;
+  /**
+   * 免确认的操作类型。**缺省即每一次操作都要确认**（AC-23.4）。
+   * 只有宿主显式配置才生效，SDK 不提供任何缺省放行项。
+   */
+  preauthorized?: readonly PageActionKind[];
+  now?(): string;
+}
+/**
+ * 页面操作策略（需求 23）。
+ *
+ * 三道闸门依次是：宿主有没有声明范围、用户认不认、执行器认不认。
+ * 模型能表达的只有「在哪个句柄上做哪个动作」——它没有任何影响范围的入口（AC-23.2）。
+ * @experimental
+ */
+declare class PageActionPolicy {
+  #private;
+  constructor(options: PageActionPolicyOptions);
+  /** 白名单为空即不可用（FR-23.1）：宿主没声明范围就没有这个能力 */
+  get enabled(): boolean;
+  get scope(): PageActionScope;
+  /** 最近的操作记录（只读展示用），新的在前 */
+  get records(): readonly PageActionRecord[];
+  act(request: PageActionRequest): Promise<PageActionOutcome>;
+}
+//#endregion
+//#region src/pageAction/toolSource.d.ts
+declare const PAGE_ACTION_TOOL = "act_on_page";
+interface PageActionToolSourceOptions {
+  policy: PageActionPolicy;
+}
+/**
+ * 把页面操作接到既有工具协议上。
+ *
+ * 策略未注入或宿主没声明可操作区域时 `listToolSpecs()` 返回空数组——
+ * 模型连这个工具的存在都看不到，而不是看得到再被拒（FR-23.5 / AC-23.8）。
+ * @experimental
+ */
+declare function createPageActionToolSource(options: PageActionToolSourceOptions): ExternalToolSource;
+//#endregion
+//#region src/prompts/pageAction.d.ts
+/**
+ * 页面操作的系统提示词（需求 23）。
+ *
+ * 措辞刻意保守：提示词里的鼓励性表述会直接抬高模型尝试操作的频率，
+ * 而每一次尝试都要打断用户去点确认。
+ */
+declare const PAGE_ACTION_SYSTEM_PROMPT: string;
+//#endregion
+export { TodoListener as $, PagePerceptionReader as A, SKILL_GENERATION_SYSTEM_PROMPT as B, PageActionRequest as C, PageAuditSink as D, PageActionUi as E, PerceptionAuditSink as F, SkillGenerator as G, SkillGenerationOutcome as H, PerceptionCaptureOptions as I, SubAgentRunner as J, SkillGeneratorOptions as K, PerceptionRecord as L, ParentBudget as M, PerceivedImage as N, PagePerceptionPolicy as O, PerceivedNode as P, TodoList as Q, PerceptionResult as R, PageActionRecord as S, PageActionToolSourceOptions as T, SkillGenerationPolicy as U, SkillCandidateSink as V, SkillGenerationToolSourceOptions as W, TodoEvent as X, TODO_SYSTEM_PROMPT as Y, TodoItem as Z, PageActionExecutor as _, DelegationOrchestratorOptions as a, createPagePerceptionToolSource as at, PageActionPolicy as b, DelegationToolSourceOptions as c, withDelegationOrigin as ct, ImageCaptureBudget as d, TodoStatus as et, MANAGE_TODO_TOOL as f, PERCEPTION_SYSTEM_PROMPT as g, PERCEIVE_PAGE_TOOL as h, DelegationOrchestrator as i, createPageActionToolSource as it, PagePerceptionToolSourceOptions as j, PagePerceptionPolicyOptions as k, GENERATE_SKILL_TOOL as l, PAGE_ACTION_TOOL as m, DELEGATION_SYSTEM_PROMPT as n, TodoToolSourceOptions as nt, DelegationRequest as o, createSkillGenerationToolSource as ot, PAGE_ACTION_SYSTEM_PROMPT as p, SubAgentRunInput as q, DelegationBudget as r, createDelegationToolSource as rt, DelegationResult as s, createTodoToolSource as st, DELEGATE_TASK_TOOL as t, TodoStore as tt, GeneratedSkillDraft as u, PageActionKind as v, PageActionScope as w, PageActionPolicyOptions as x, PageActionOutcome as y, PerceptionScope as z };

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as SkillDiscovery, A as CryptoKeyLike, At as isValidSkillName, B as PageQuery, Bt as renderCatalogJson, C as UiSpecEvent, Ct as buildCatalog, D as UiSurfaceActionResponse, Dt as computeDigest, E as UiSurfaceActionRequest, Et as checkSkillRules, F as FsTrustedKeyStore, Ft as parseSkillMarkdown, G as SKILL_NAME_MAX_LENGTH, Gt as unzipWithLimits, H as SIGNATURE_SCHEMA_VERSION, Ht as resolveInsideRoot, I as JsonSchema, It as parseSkillPackManifest, J as SKILL_SIGNATURE_FILE, Jt as verifySkillSignature, K as SKILL_NAME_PATTERN, Kt as validateSkills, L as MANIFEST_EXCLUDED_FILES, Lt as readResponseWithLimit, M as DiscoveryResult, Mt as keyIdOf, N as FileStat, Nt as messageOf, O as ArchiveLimits, Ot as escapeXml, P as FileSystemProvider, Pt as normalizePath, Q as SkillCatalogEntry, R as MemoryFS, Rt as readSkillSignature, S as UiSpecDrafts, St as atomicWriteText, T as UiSpecSnapshot, Tt as checkDependencyCycles, U as SKILLS_LOCKFILE, Ut as signSkill, V as RemoteUrlPolicy, Vt as resolveArchiveLimits, W as SKILL_MANIFEST_FILE, Wt as signaturePayloadBytes, X as SignatureVerdict, Y as SignatureAuditSink, Yt as xmlRenderer, Z as SkillCatalog, _ as MemoryStore, _t as VerifyResult, a as InteractionOrigin, at as SkillManifest, b as UiBridge, bt as assertRemoteUrlAllowed, c as InteractionResponse, ct as SkillReader, d as LlmContentPart, dt as SkillsLockfile, et as SkillDocument, f as LlmMessage, ft as TrustedKey, g as LlmToolSpec, gt as ValidationReport, h as LlmToolCall, ht as UnsignedPolicy, i as FormField, it as SkillManagerPort, j as DEFAULT_ARCHIVE_LIMITS, jt as jsonRenderer, k as CatalogRenderer, kt as exportSkills, l as LlmClient, lt as SkillSignature, m as LlmStreamEvent, mt as UiSpecNode, n as ArtifactStore, nt as SkillIssue, o as InteractionPolicy, ot as SkillMetadata, p as LlmResponse, pt as TrustedKeyStore, q as SKILL_PACK_FILE, qt as verifyManifest, r as ChartSpec, rt as SkillLocation, s as InteractionRequest, st as SkillPackManifest, t as Artifact, tt as SkillInstallSource, u as LlmCompleteInput, ut as SkillSource, v as RenderBlock, vt as WebSkillError, w as UiSpecPatch, wt as buildManifest, x as UiSpecActionCapability, xt as assertSafePathSegment, y as RenderResultRequest, yt as WebSkillErrorCode, z as Page, zt as renderAvailableSkillsXml } from "./types-4pg-qp_I-Gq63X8Oa.js";
-import { $ as READ_SKILL_FILE_TOOL, $t as UnsupportedRunSnapshot, A as FsArtifactStore, An as normalizeToolContent, At as SkillFailureReport, B as InstalledSkillManifest, Bn as resolveToolName, Bt as ToolContent, C as DEFAULT_USER_PROFILE_LIMITS, Cn as isUnsupportedRunSnapshot, Ct as ScriptExecutionContext, D as ExternalSkillProvider, Dn as networkPolicyLibSource, Dt as SessionMeta, E as ExecuteLifecycleData, En as mergeProfileEntries, Et as SessionListPage, F as FullDisclosureRouter, Fn as readBehaviorRecords, Ft as SkillScriptSchemaSource, G as LifecycleHook, Gn as summarizeToolCalls, Gt as TraceEvent, H as InteractLifecycleData, Hn as schemaSourceLabel, Ht as ToolResolution, I as GoogleGenAiClient, In as readProfileEntries, It as SkillStateGuard, J as NetworkPolicy, Jn as toRecordDigests, Jt as USER_PROFILE_EXPORT_VERSION, K as LifecycleHookContext, Kn as textParts, Kt as TraceEventType, L as GoogleGenAiClientConfig, Ln as readUserProfile, Lt as TerminalLifecycleData, M as FsRunSnapshotStore, Mn as parseBridgeRequest, Mt as SkillOutcomeReporter, N as FsRunTraceStore, Nn as parseUserProfileExport, Nt as SkillRouter, O as ExternalToolSource, On as networkUrlHost, Ot as SessionRecord, P as FsSessionStore, Pn as partsToText, Pt as SkillScriptDescriptor, Q as READ_SKILL_FILE_INPUT_SCHEMA, Qt as USER_PROFILE_REFINE_PROMPT, R as HookRunner, Rn as refineUserProfile, Rt as TextualToolContent, S as CapabilityMode, Sn as isNetworkAllowed, St as SchemaInferer, T as EventBus, Tn as mergeCatalogEntries, Tt as SerializingMemoryStore, U as LifecycleEvent, Un as schemaToForm, Ut as ToolResult, V as IntegrityVerdict, Vn as sampleBehaviorRecords, Vt as ToolDefinition, W as LifecycleEventInit, Wn as scriptToolName, Wt as TraceClock, X as OpenAiCompatibleClientConfig, Xn as validateUiSpecEvent, Xt as USER_PROFILE_NO_INVENTION_RULE, Y as OpenAiCompatibleClient, Yn as toVercelToolSpecs, Yt as USER_PROFILE_KEY, Z as ProgressiveRouter, Zn as validateUiSpecNode, Zt as USER_PROFILE_PROMPT_HEADER, _ as BridgeCapabilities, _n as extractTodoTraceEvents, _t as RuntimePhase, a as ActivateLifecycleData, an as WebSkillApi, at as RouteResult, b as BridgeResponse, bn as fromVercelResult, bt as RuntimeSessionHandle, c as AgentLoopDeps, cn as appendBehaviorRecords, ct as RunSnapshotListEntry, d as ApprovalDecision, dn as buildRenderResult, dt as RunToolCall, en as UserProfile, et as READ_SKILL_FILE_TOOL_NAME, f as ApprovalScope, fn as createScriptContext, ft as RunTraceFile, g as BehaviorScene, gn as extractChartSpec, gt as RunTraceSummary, h as BehaviorRecordKind, hn as exportUserProfile, ht as RunTraceStore, i as ASK_USER_TOOL_NAME, in as VercelToolSpec, it as RouteLifecycleData, j as FsMemoryStore, jn as normalizeToolError, jt as SkillIntegrityGuard, k as FS_SESSION_PAGE_SIZE, kn as normalizeErrorCode, kt as SessionStore, l as AnthropicClient, ln as applyUserProfileImport, lt as RunSnapshotStore, m as BehaviorRecord, mn as diffUserProfile, mt as RunTraceMetrics, n as ASK_USER_INPUT_SCHEMA, nn as UserProfileExport, nt as RUN_TRACE_SCHEMA_VERSION, o as AgentLoop, on as WebSkillRuntime, ot as RunResult, p as BEHAVIOR_RECORDS_KEY, pn as createWebSkillApi, pt as RunTraceFilter, q as LifecycleListener, qn as toLlmToolSpec, qt as TraceRecorder, r as ASK_USER_TOOL, rn as UserProfileLimits, rt as RefineUserProfileInput, s as AgentLoopConfig, sn as WebSkillRuntimeDeps, st as RunSnapshot, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as UserProfileEntry, tt as RUN_SNAPSHOT_SCHEMA_VERSION, u as AnthropicClientConfig, un as bridgeError, ut as RunTerminationReason, v as BridgeCapability, vn as extractUiSpecEvents, vt as RuntimeRun, w as EMPTY_USER_PROFILE, wn as listSkillScripts, wt as ScriptExecutor, x as CapabilityApproval, xn as fromVercelStreamPart, xt as SESSION_SCHEMA_VERSION, y as BridgeRequest, yn as formatSkillScriptManifest, yt as RuntimeSession, z as HookRunnerOptions, zn as renderUserProfileContext, zt as TodoTraceEvent } from "./index-C-KFAZoF.js";
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillsLockfile, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+import { $ as SkillArchiveDetection, $t as validateSkills, A as ArchiveLimits, At as checkSkillRules, B as MemoryFS, Bt as normalizePath, C as UiSpecDrafts, Ct as WebSkillErrorCode, D as UiSurfaceActionRequest, Dt as buildCatalog, E as UiSpecSnapshot, Et as atomicWriteText, F as FileStat, Ft as exportSkills, G as SKILLS_LOCKFILE, Gt as renderAvailableSkillsXml, H as PageQuery, Ht as parseSkillPackManifest, I as FileSystemProvider, It as isValidSkillName, J as SKILL_NAME_PATTERN, Jt as resolveInsideRoot, K as SKILL_MANIFEST_FILE, Kt as renderCatalogJson, L as FsTrustedKeyStore, Lt as jsonRenderer, M as CryptoKeyLike, Mt as detectSkillArchiveShape, N as DEFAULT_ARCHIVE_LIMITS, Nt as detectSkillArchiveShapeFromFs, O as UiSurfaceActionResponse, Ot as buildManifest, P as DiscoveryResult, Pt as escapeXml, Q as SignatureVerdict, Qt as unzipWithLimits, R as JsonSchema, Rt as keyIdOf, S as UiSpecActionCapability, St as WebSkillError, T as UiSpecPatch, Tt as assertSafePathSegment, U as RemoteUrlPolicy, Ut as readResponseWithLimit, V as Page, Vt as parseSkillMarkdown, W as SIGNATURE_SCHEMA_VERSION, Wt as readSkillSignature, X as SKILL_SIGNATURE_FILE, Xt as signaturePayloadBytes, Y as SKILL_PACK_FILE, Yt as signSkill, Z as SignatureAuditSink, Zt as stripArchiveRoot, _ as MemoryStore, _t as TrustedKeyStore, a as InteractionOrigin, at as SkillInstallSource, b as SkillCandidateMarker, bt as ValidationReport, c as InteractionResponse, ct as SkillManagerPort, d as LlmContentPart, dt as SkillPackManifest, en as verifyManifest, et as SkillArchiveShape, f as LlmMessage, ft as SkillReader, g as LlmToolSpec, gt as TrustedKey, h as LlmToolCall, ht as SkillsLockfile, i as FormField, it as SkillDocument, j as CatalogRenderer, jt as computeDigest, k as extractSkillCandidate, kt as checkDependencyCycles, l as LlmClient, lt as SkillManifest, m as LlmStreamEvent, mt as SkillSource, n as ArtifactStore, nn as xmlRenderer, nt as SkillCatalogEntry, o as InteractionPolicy, ot as SkillIssue, p as LlmResponse, pt as SkillSignature, q as SKILL_NAME_MAX_LENGTH, qt as resolveArchiveLimits, r as ChartSpec, rt as SkillDiscovery, s as InteractionRequest, st as SkillLocation, t as Artifact, tn as verifySkillSignature, tt as SkillCatalog, u as LlmCompleteInput, ut as SkillMetadata, v as RenderBlock, vt as UiSpecNode, w as UiSpecEvent, wt as assertRemoteUrlAllowed, x as UiBridge, xt as VerifyResult, y as RenderResultRequest, yt as UnsignedPolicy, z as MANIFEST_EXCLUDED_FILES, zt as messageOf } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { $ as READ_SKILL_FILE_INPUT_SCHEMA, $n as scriptToolName, $t as TraceRecorder, A as FS_SESSION_PAGE_SIZE, An as interruptedToolResult, At as SerializingMemoryStore, B as HookRunnerOptions, Bn as normalizeToolError, Bt as SkillScriptSchemaSource, C as DEFAULT_LOOP_LIMITS, Cn as extractChartSpec, Ct as SESSION_SCHEMA_VERSION, D as ExecuteLifecycleData, Dn as formatSkillScriptManifest, Dt as SealOptions, E as EventBus, En as findUnpairedToolCalls, Et as ScriptExecutor, F as FsSessionStore, Fn as mergeProfileEntries, Ft as SkillFailureReport, G as LifecycleEventInit, Gn as readProfileEntries, Gt as TodoTraceEvent, H as IntegrityVerdict, Hn as parseUserProfileExport, Ht as SkillSuccessReport, I as FullDisclosureRouter, In as networkPolicyLibSource, It as SkillIntegrityGuard, J as LifecycleListener, Jn as renderUserProfileContext, Jt as ToolResolution, K as LifecycleHook, Kn as readUserProfile, Kt as ToolContent, L as GoogleGenAiClient, Ln as networkUrlHost, Lt as SkillOutcomeReporter, M as FsMemoryStore, Mn as isUnsupportedRunSnapshot, Mt as SessionMeta, N as FsRunSnapshotStore, Nn as listSkillScripts, Nt as SessionRecord, O as ExternalSkillProvider, On as fromVercelResult, Ot as SealRecord, P as FsRunTraceStore, Pn as mergeCatalogEntries, Pt as SessionStore, Q as ProgressiveRouter, Qn as schemaToForm, Qt as TraceEventType, R as GoogleGenAiClientConfig, Rn as normalizeErrorCode, Rt as SkillRouter, S as CapabilityMode, Sn as exportUserProfile, St as RuntimeSessionHandle, T as EMPTY_USER_PROFILE, Tn as extractUiSpecEvents, Tt as ScriptExecutionContext, U as InteractLifecycleData, Un as partsToText, Ut as TerminalLifecycleData, V as InstalledSkillManifest, Vn as parseBridgeRequest, Vt as SkillStateGuard, W as LifecycleEvent, Wn as readBehaviorRecords, Wt as TextualToolContent, X as OpenAiCompatibleClient, Xn as sampleBehaviorRecords, Xt as TraceClock, Y as NetworkPolicy, Yn as resolveToolName, Yt as ToolResult, Z as OpenAiCompatibleClientConfig, Zn as schemaSourceLabel, Zt as TraceEvent, _ as BridgeCapabilities, _n as bridgeError, _t as RunTraceStore, a as ActivateLifecycleData, an as UnsupportedRunSnapshot, ar as toVercelToolSpecs, at as RouteLifecycleData, b as BridgeResponse, bn as createWebSkillApi, bt as RuntimeRun, c as AgentLoopDeps, cn as UserProfileExport, ct as RunResult, d as ApprovalDecision, dn as VercelToolSpec, dt as RunSnapshotStore, en as USER_PROFILE_EXPORT_VERSION, er as sealToolCallPairs, et as READ_SKILL_FILE_TOOL, f as ApprovalScope, fn as WebSkillApi, ft as RunTerminationReason, g as BehaviorScene, gn as applyUserProfileImport, gt as RunTraceMetrics, h as BehaviorRecordKind, hn as appendBehaviorRecords, ht as RunTraceFilter, i as ASK_USER_TOOL_NAME, in as USER_PROFILE_REFINE_PROMPT, ir as toRecordDigests, it as RefineUserProfileInput, j as FsArtifactStore, jn as isNetworkAllowed, jt as SessionListPage, k as ExternalToolSource, kn as fromVercelStreamPart, kt as SealResult, l as AnthropicClient, ln as UserProfileImportDiff, lt as RunSnapshot, m as BehaviorRecord, mn as WebSkillRuntimeDeps, mt as RunTraceFile, n as ASK_USER_INPUT_SCHEMA, nn as USER_PROFILE_NO_INVENTION_RULE, nr as textParts, nt as RUN_SNAPSHOT_SCHEMA_VERSION, o as AgentLoop, on as UserProfile, or as validateUiSpecEvent, ot as RouteResult, p as BEHAVIOR_RECORDS_KEY, pn as WebSkillRuntime, pt as RunToolCall, q as LifecycleHookContext, qn as refineUserProfile, qt as ToolDefinition, r as ASK_USER_TOOL, rn as USER_PROFILE_PROMPT_HEADER, rr as toLlmToolSpec, rt as RUN_TRACE_SCHEMA_VERSION, s as AgentLoopConfig, sn as UserProfileEntry, sr as validateUiSpecNode, st as RunLimitErrorDetails, t as ALLOWED_TOOLS_EXCLUSION_REASON, tn as USER_PROFILE_KEY, tr as summarizeToolCalls, tt as READ_SKILL_FILE_TOOL_NAME, u as AnthropicClientConfig, un as UserProfileLimits, ut as RunSnapshotListEntry, v as BridgeCapability, vn as buildRenderResult, vt as RunTraceSummary, w as DEFAULT_USER_PROFILE_LIMITS, wn as extractTodoTraceEvents, wt as SchemaInferer, x as CapabilityApproval, xn as diffUserProfile, xt as RuntimeSession, y as BridgeRequest, yn as createScriptContext, yt as RuntimePhase, z as HookRunner, zn as normalizeToolContent, zt as SkillScriptDescriptor } from "./index-K-eewlGL.js";
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, type ActivateLifecycleData, AgentLoop, type AgentLoopConfig, type AgentLoopDeps, AnthropicClient, type AnthropicClientConfig, type ApprovalDecision, type ApprovalScope, type ArchiveLimits, type Artifact, type ArtifactStore, BEHAVIOR_RECORDS_KEY, type BehaviorRecord, type BehaviorRecordKind, type BehaviorScene, type BridgeCapabilities, type BridgeCapability, type BridgeRequest, type BridgeResponse, CapabilityApproval, type CapabilityMode, type CatalogRenderer, type ChartSpec, type CryptoKeyLike, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, type DiscoveryResult, EMPTY_USER_PROFILE, EventBus, type ExecuteLifecycleData, type ExternalSkillProvider, type ExternalToolSource, FS_SESSION_PAGE_SIZE, type FileStat, type FileSystemProvider, type FormField, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, type GoogleGenAiClientConfig, HookRunner, type HookRunnerOptions, type InstalledSkillManifest, type IntegrityVerdict, type InteractLifecycleData, type InteractionOrigin, type InteractionPolicy, type InteractionRequest, type InteractionResponse, type JsonSchema, type LifecycleEvent, type LifecycleEventInit, type LifecycleHook, type LifecycleHookContext, type LifecycleListener, type LlmClient, type LlmCompleteInput, type LlmContentPart, type LlmMessage, type LlmResponse, type LlmStreamEvent, type LlmToolCall, type LlmToolSpec, MANIFEST_EXCLUDED_FILES, MemoryFS, type MemoryStore, type NetworkPolicy, OpenAiCompatibleClient, type OpenAiCompatibleClientConfig, type Page, type PageQuery, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, type RefineUserProfileInput, type RemoteUrlPolicy, type RenderBlock, type RenderResultRequest, type RouteLifecycleData, type RouteResult, type RunLimitErrorDetails, type RunResult, type RunSnapshot, type RunSnapshotListEntry, type RunSnapshotStore, type RunTerminationReason, type RunToolCall, type RunTraceFile, type RunTraceFilter, type RunTraceMetrics, type RunTraceStore, type RunTraceSummary, type RuntimePhase, type RuntimeRun, type RuntimeSession, type RuntimeSessionHandle, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, type SchemaInferer, type ScriptExecutionContext, type ScriptExecutor, type SealOptions, type SealRecord, type SealResult, SerializingMemoryStore, type SessionListPage, type SessionMeta, type SessionRecord, type SessionStore, type SignatureAuditSink, type SignatureVerdict, type SkillArchiveDetection, type SkillArchiveShape, type SkillCandidateMarker, type SkillCatalog, type SkillCatalogEntry, SkillDiscovery, type SkillDocument, type SkillFailureReport, type SkillInstallSource, type SkillIntegrityGuard, type SkillIssue, type SkillLocation, type SkillManagerPort, type SkillManifest, type SkillMetadata, type SkillOutcomeReporter, type SkillPackManifest, SkillReader, type SkillRouter, type SkillScriptDescriptor, type SkillScriptSchemaSource, type SkillSignature, type SkillSource, type SkillStateGuard, type SkillSuccessReport, type SkillsLockfile, type TerminalLifecycleData, type TextualToolContent, type TodoTraceEvent, type ToolContent, type ToolDefinition, type ToolResolution, type ToolResult, type TraceClock, type TraceEvent, type TraceEventType, TraceRecorder, type TrustedKey, type TrustedKeyStore, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, type UiBridge, type UiSpecActionCapability, type UiSpecDrafts, type UiSpecEvent, type UiSpecNode, type UiSpecPatch, type UiSpecSnapshot, type UiSurfaceActionRequest, type UiSurfaceActionResponse, type UnsignedPolicy, type UnsupportedRunSnapshot, type UserProfile, type UserProfileEntry, type UserProfileExport, type UserProfileImportDiff, type UserProfileLimits, type ValidationReport, type VercelToolSpec, type VerifyResult, type WebSkillApi, WebSkillError, type WebSkillErrorCode, WebSkillRuntime, type WebSkillRuntimeDeps, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { A as parseSkillMarkdown, B as unzipWithLimits, C as escapeXml, D as keyIdOf, E as jsonRenderer, F as renderCatalogJson, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, P as renderAvailableSkillsXml, R as signSkill, S as computeDigest, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, W as xmlRenderer, _ as atomicWriteText, a as SIGNATURE_SCHEMA_VERSION, b as checkDependencyCycles, c as SKILL_NAME_MAX_LENGTH, d as SKILL_SIGNATURE_FILE, f as SkillDiscovery, g as assertSafePathSegment, h as assertRemoteUrlAllowed, i as MemoryFS, j as parseSkillPackManifest, k as normalizePath, l as SKILL_NAME_PATTERN, m as WebSkillError, n as FsTrustedKeyStore, o as SKILLS_LOCKFILE, p as SkillReader, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as SKILL_PACK_FILE, v as buildCatalog, w as exportSkills, x as checkSkillRules, y as buildManifest, z as signaturePayloadBytes } from "./dist-8oQRa8Xz.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
-import { $ as listSkillScripts, A as TraceRecorder, B as buildRenderResult, C as READ_SKILL_FILE_INPUT_SCHEMA, Ct as validateUiSpecEvent, D as RUN_TRACE_SCHEMA_VERSION, E as RUN_SNAPSHOT_SCHEMA_VERSION, F as USER_PROFILE_REFINE_PROMPT, G as extractChartSpec, H as createWebSkillApi, I as WebSkillRuntime, J as formatSkillScriptManifest, K as extractTodoTraceEvents, L as appendBehaviorRecords, M as USER_PROFILE_KEY, N as USER_PROFILE_NO_INVENTION_RULE, O as SESSION_SCHEMA_VERSION, P as USER_PROFILE_PROMPT_HEADER, Q as isUnsupportedRunSnapshot, R as applyUserProfileImport, S as ProgressiveRouter, St as toVercelToolSpecs, T as READ_SKILL_FILE_TOOL_NAME, U as diffUserProfile, V as createScriptContext, W as exportUserProfile, X as fromVercelStreamPart, Y as fromVercelResult, Z as isNetworkAllowed, _ as FsSessionStore, _t as schemaToForm, a as AgentLoop, at as normalizeToolContent, b as HookRunner, bt as toLlmToolSpec, c as CapabilityApproval, ct as parseUserProfileExport, d as EventBus, dt as readUserProfile, et as mergeCatalogEntries, f as FS_SESSION_PAGE_SIZE, ft as refineUserProfile, g as FsRunTraceStore, gt as schemaSourceLabel, h as FsRunSnapshotStore, ht as sampleBehaviorRecords, i as ASK_USER_TOOL_NAME, it as normalizeErrorCode, j as USER_PROFILE_EXPORT_VERSION, k as SerializingMemoryStore, l as DEFAULT_USER_PROFILE_LIMITS, lt as readBehaviorRecords, m as FsMemoryStore, mt as resolveToolName, n as ASK_USER_INPUT_SCHEMA, nt as networkPolicyLibSource, o as AnthropicClient, ot as normalizeToolError, p as FsArtifactStore, pt as renderUserProfileContext, q as extractUiSpecEvents, r as ASK_USER_TOOL, rt as networkUrlHost, s as BEHAVIOR_RECORDS_KEY, st as parseBridgeRequest, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as mergeProfileEntries, u as EMPTY_USER_PROFILE, ut as readProfileEntries, v as FullDisclosureRouter, vt as scriptToolName, w as READ_SKILL_FILE_TOOL, wt as validateUiSpecNode, x as OpenAiCompatibleClient, xt as toRecordDigests, y as GoogleGenAiClient, yt as summarizeToolCalls, z as bridgeError } from "./dist-DusANsrn.js";
+import { A as messageOf, B as signSkill, C as detectSkillArchiveShape, D as isValidSkillName, E as exportSkills, F as readSkillSignature, G as verifyManifest, H as stripArchiveRoot, I as renderAvailableSkillsXml, K as verifySkillSignature, L as renderCatalogJson, M as parseSkillMarkdown, N as parseSkillPackManifest, O as jsonRenderer, P as readResponseWithLimit, R as resolveArchiveLimits, S as computeDigest, T as escapeXml, U as unzipWithLimits, V as signaturePayloadBytes, W as validateSkills, _ as atomicWriteText, a as SIGNATURE_SCHEMA_VERSION, b as checkDependencyCycles, c as SKILL_NAME_MAX_LENGTH, d as SKILL_SIGNATURE_FILE, f as SkillDiscovery, g as assertSafePathSegment, h as assertRemoteUrlAllowed, i as MemoryFS, j as normalizePath, k as keyIdOf, l as SKILL_NAME_PATTERN, m as WebSkillError, n as FsTrustedKeyStore, o as SKILLS_LOCKFILE, p as SkillReader, q as xmlRenderer, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, t as DEFAULT_ARCHIVE_LIMITS, u as SKILL_PACK_FILE, v as buildCatalog, w as detectSkillArchiveShapeFromFs, x as checkSkillRules, y as buildManifest, z as resolveInsideRoot } from "./dist-59XlqDuv.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
+import { $ as fromVercelStreamPart, A as SerializingMemoryStore, B as bridgeError, C as ProgressiveRouter, Ct as sealToolCallPairs, D as RUN_SNAPSHOT_SCHEMA_VERSION, Dt as toVercelToolSpecs, E as READ_SKILL_FILE_TOOL_NAME, Et as toRecordDigests, F as USER_PROFILE_PROMPT_HEADER, G as exportUserProfile, H as createScriptContext, I as USER_PROFILE_REFINE_PROMPT, J as extractTodoTraceEvents, K as extractChartSpec, L as WebSkillRuntime, M as USER_PROFILE_EXPORT_VERSION, N as USER_PROFILE_KEY, O as RUN_TRACE_SCHEMA_VERSION, Ot as validateUiSpecEvent, P as USER_PROFILE_NO_INVENTION_RULE, Q as fromVercelResult, R as appendBehaviorRecords, S as OpenAiCompatibleClient, St as scriptToolName, T as READ_SKILL_FILE_TOOL, Tt as toLlmToolSpec, U as createWebSkillApi, V as buildRenderResult, W as diffUserProfile, X as findUnpairedToolCalls, Y as extractUiSpecEvents, Z as formatSkillScriptManifest, _ as FsRunTraceStore, _t as renderUserProfileContext, a as AgentLoop, at as mergeProfileEntries, b as GoogleGenAiClient, bt as schemaSourceLabel, c as CapabilityApproval, ct as normalizeErrorCode, d as EMPTY_USER_PROFILE, dt as parseBridgeRequest, et as interruptedToolResult, f as EventBus, ft as parseUserProfileExport, g as FsRunSnapshotStore, gt as refineUserProfile, h as FsMemoryStore, ht as readUserProfile, i as ASK_USER_TOOL_NAME, it as mergeCatalogEntries, j as TraceRecorder, k as SESSION_SCHEMA_VERSION, kt as validateUiSpecNode, l as DEFAULT_LOOP_LIMITS, lt as normalizeToolContent, m as FsArtifactStore, mt as readProfileEntries, n as ASK_USER_INPUT_SCHEMA, nt as isUnsupportedRunSnapshot, o as AnthropicClient, ot as networkPolicyLibSource, p as FS_SESSION_PAGE_SIZE, pt as readBehaviorRecords, q as extractSkillCandidate, r as ASK_USER_TOOL, rt as listSkillScripts, s as BEHAVIOR_RECORDS_KEY, st as networkUrlHost, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as isNetworkAllowed, u as DEFAULT_USER_PROFILE_LIMITS, ut as normalizeToolError, v as FsSessionStore, vt as resolveToolName, w as READ_SKILL_FILE_INPUT_SCHEMA, wt as summarizeToolCalls, x as HookRunner, xt as schemaToForm, y as FullDisclosureRouter, yt as sampleBehaviorRecords, z as applyUserProfileImport } from "./dist-DmI5SBBF.js";
 
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractTodoTraceEvents, extractUiSpecEvents, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, signSkill, signaturePayloadBytes, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { I as JsonSchema, Q as SkillCatalogEntry, et as SkillDocument, g as LlmToolSpec } from "./types-4pg-qp_I-Gq63X8Oa.js";
-import { D as ExternalSkillProvider, O as ExternalToolSource, Tn as mergeCatalogEntries, Ut as ToolResult } from "./index-C-KFAZoF.js";
+import { R as JsonSchema, g as LlmToolSpec, it as SkillDocument, nt as SkillCatalogEntry } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { O as ExternalSkillProvider, Pn as mergeCatalogEntries, Yt as ToolResult, k as ExternalToolSource } from "./index-K-eewlGL.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -245,6 +245,12 @@ declare class ExperimentalWebMcpAdapter {
     enabled?: boolean;
   });
   isAvailable(): boolean;
+  isEnabled(): boolean;
+  /**
+   * 宿主把开关交给用户时必须走这里：适配器是工具是否对 LLM 可见的**唯一闸门**。
+   * 宿主自己另存一份开关态而不同步到这里，会出现「界面上关了、模型照样能调」。
+   */
+  setEnabled(on: boolean): void;
   /** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
   listTools(): Promise<WebMcpToolDescriptor[] | undefined>;
   /** 工具名清单（getTools 缺失/失败时返回 undefined） */
@@ -274,6 +280,108 @@ declare class McpRuntimePlugin implements ExternalToolSource {
   call(llmToolName: string, args: Record<string, unknown>): Promise<ToolResult>;
 }
 //#endregion
+//#region src/remote/oauth.d.ts
+/**
+ * S9 · MCP 授权注入协议（0.7.0 FR-22.1 ~ FR-22.3）。
+ *
+ * 本文件**不实现 OAuth**：发现、PKCE、`code` 交换、刷新全部由 `@modelcontextprotocol/sdk` 承担。
+ * 这里只提供 SDK 替我们决定不了的三样：宿主的 client 信息、令牌存储、把用户送到授权页。
+ */
+/** 宿主预注册的 OAuth 客户端信息。不做动态注册（RFC 7591），因此此项必填。 @experimental */
+interface McpOAuthClient {
+  clientId: string;
+  /** 机密客户端才有；浏览器端应留空 */
+  clientSecret?: string;
+  /** 授权服务器回跳地址，必须与预注册值一致 */
+  redirectUri: string;
+  scopes?: string[];
+}
+/** 令牌集合。access 与 refresh 分开传递，宿主可对二者采用不同存储策略。 @experimental */
+interface McpOAuthTokens {
+  accessToken: string;
+  /** epoch ms；缺省表示不过期 */
+  expiresAt?: number;
+  refreshToken?: string;
+  tokenType?: string;
+  scope?: string;
+}
+/**
+ * 令牌存储。SDK 不提供默认实现（AC-22.7）——写不写盘、写到哪里由宿主决定。
+ * key 为端点名（`RemoteEndpointConfig.endpoint`），宿主据此隔离多端点。
+ * @experimental
+ */
+interface McpOAuthTokenStore {
+  load(endpoint: string): Promise<McpOAuthTokens | undefined>;
+  save(endpoint: string, tokens: McpOAuthTokens): Promise<void>;
+  clear(endpoint: string): Promise<void>;
+}
+/** 一次授权握手的暂存内容：PKCE verifier 与 state 需要跨页面重定向存活。 @experimental */
+interface McpOAuthHandshake {
+  codeVerifier: string;
+  state: string;
+}
+/** 握手暂存端口。与长期令牌的存储策略不同，因此独立成一个端口。 @experimental */
+interface McpOAuthHandshakeStore {
+  save(endpoint: string, handshake: McpOAuthHandshake): Promise<void>;
+  load(endpoint: string): Promise<McpOAuthHandshake | undefined>;
+  clear(endpoint: string): Promise<void>;
+}
+/** 授权流程所处的阶段；进错误 `details`，不含任何凭据。 @experimental */
+type McpOAuthStage = 'discover' | 'authorize' | 'exchange' | 'refresh';
+/** @experimental */
+interface McpOAuthConfig {
+  client: McpOAuthClient;
+  tokens: McpOAuthTokenStore;
+  handshake: McpOAuthHandshakeStore;
+  /**
+   * 把用户送到授权页。宿主决定形态（新窗口 / 系统浏览器）。
+   * 返回后流程挂起，等待宿主拿到 `code` 再调 `finishAuthorization`。
+   */
+  openAuthorization(url: URL): Promise<void> | void;
+}
+/** 显式的内存存储，供 examples 与测试使用。**不是缺省行为**——是宿主主动选的（AC-22.7）。 @experimental */
+declare function createMemoryOAuthStores(): {
+  tokens: McpOAuthTokenStore;
+  handshake: McpOAuthHandshakeStore;
+};
+/** SDK 的 `OAuthTokens` 形状（结构化引用，避免在模块顶层 import 可选 peer 的类型） */
+interface SdkTokens {
+  access_token: string;
+  token_type: string;
+  expires_in?: number;
+  refresh_token?: string;
+  scope?: string;
+}
+/**
+ * SDK `OAuthClientProvider` 的结构化对应物。
+ * 刻意不 implements SDK 接口：适配层只提供我们认可的成员，
+ * 尤其**不提供** `saveClientInformation`——那是动态客户端注册的入口（需求 §5）。
+ * @experimental
+ */
+interface McpOAuthProvider {
+  readonly redirectUrl: string;
+  readonly clientMetadata: Record<string, unknown>;
+  state(): Promise<string>;
+  clientInformation(): Promise<{
+    client_id: string;
+    client_secret?: string;
+  }>;
+  tokens(): Promise<SdkTokens | undefined>;
+  saveTokens(tokens: SdkTokens): Promise<void>;
+  redirectToAuthorization(url: URL): Promise<void>;
+  saveCodeVerifier(codeVerifier: string): Promise<void>;
+  codeVerifier(): Promise<string>;
+  invalidateCredentials(scope: 'all' | 'client' | 'tokens' | 'verifier' | 'discovery'): Promise<void>;
+}
+/**
+ * `McpOAuthConfig` → SDK `OAuthClientProvider` 适配器。
+ *
+ * `state()` 与 `saveCodeVerifier()` 由 SDK 分两次调用（顺序上前者在先），
+ * 两者合成一条握手记录：谁先到都把当前已知部分写进去，回程时两项都在。
+ * @experimental
+ */
+declare function createOAuthProvider(endpoint: string, config: McpOAuthConfig): McpOAuthProvider;
+//#endregion
 //#region src/remote/connectRemoteEndpoint.d.ts
 interface RemoteEndpointConfig {
   /** registry 中的名字（endpoint:tool 引用） */
@@ -289,6 +397,23 @@ interface RemoteEndpointConfig {
   allowHttp?: boolean;
   /** 显式允许私有/环回/链路本地地址（SSRF 防护默认拒绝） */
   allowPrivateHosts?: boolean;
+  /**
+   * 使用 OAuth 2.1 授权码 + PKCE（0.7.0 FR-22.1）。
+   * 与 `headers` 可共存，但**不要**在 `headers` 里再手填 `Authorization`，会被覆盖。
+   * @experimental
+   */
+  oauth?: McpOAuthConfig;
+}
+/** 远程 endpoint 句柄 @experimental */
+interface RemoteEndpointHandle {
+  close(): Promise<void>;
+  /**
+   * OAuth 回程：宿主拿到 authorization code 后调用，成功后 endpoint 才被注册。
+   * 未配置 `oauth` 时不挂载。
+   */
+  finishAuthorization?(code: string, state: string): Promise<void>;
+  /** 建连因需要用户授权而未完成：endpoint 未注册，等 `finishAuthorization` */
+  authorizationRequired?: true;
 }
 /**
  * 远程 MCP endpoint 装配：SDK 官方 StreamableHTTPClientTransport（默认）/
@@ -296,8 +421,6 @@ interface RemoteEndpointConfig {
  * endpoint:tool 解析、TTL+版本缓存、临时技能消费自动生效。
  * 返回 close 句柄：断开后 unregister（临时技能随既有生命周期自然消失）。
  */
-declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<{
-  close(): Promise<void>;
-}>;
+declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<RemoteEndpointHandle>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };