@webskill/sdk 0.7.0 → 0.8.0

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { R as JsonSchema, et as SkillCatalogEntry, g as LlmToolSpec, nt as SkillDocument } from "./types-CcxRLdJG-DCXyw1US.js";
-import { Kt as ToolResult, O as ExternalSkillProvider, On as mergeCatalogEntries, k as ExternalToolSource } from "./index-DkbABR43.js";
+import { R as JsonSchema, g as LlmToolSpec, it as SkillDocument, nt as SkillCatalogEntry } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { O as ExternalSkillProvider, Pn as mergeCatalogEntries, Yt as ToolResult, k as ExternalToolSource } from "./index-K-eewlGL.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -245,6 +245,12 @@ declare class ExperimentalWebMcpAdapter {
     enabled?: boolean;
   });
   isAvailable(): boolean;
+  isEnabled(): boolean;
+  /**
+   * 宿主把开关交给用户时必须走这里：适配器是工具是否对 LLM 可见的**唯一闸门**。
+   * 宿主自己另存一份开关态而不同步到这里，会出现「界面上关了、模型照样能调」。
+   */
+  setEnabled(on: boolean): void;
   /** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
   listTools(): Promise<WebMcpToolDescriptor[] | undefined>;
   /** 工具名清单（getTools 缺失/失败时返回 undefined） */

package/dist/mcp.js

@@ -1,5 +1,5 @@
-import { O as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { nt as mergeCatalogEntries, st as normalizeToolContent } from "./dist-D0qW6e40.js";
+import { A as messageOf, h as assertRemoteUrlAllowed, m as WebSkillError } from "./dist-59XlqDuv.js";
+import { it as mergeCatalogEntries, lt as normalizeToolContent } from "./dist-DmI5SBBF.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -445,6 +445,16 @@ var ExperimentalWebMcpAdapter = class {
 		const api = this.#resolveApi();
 		return this.#enabled && typeof api?.executeTool === "function";
 	}
+	isEnabled() {
+		return this.#enabled;
+	}
+	/**
+	* 宿主把开关交给用户时必须走这里：适配器是工具是否对 LLM 可见的**唯一闸门**。
+	* 宿主自己另存一份开关态而不同步到这里，会出现「界面上关了、模型照样能调」。
+	*/
+	setEnabled(on) {
+		this.#enabled = on;
+	}
 	/** 工具清单（getTools 缺失时返回 undefined；调用失败时告警后返回 undefined） */
 	async listTools() {
 		const api = this.#resolveApi();

package/dist/{memoryArtifactStore-52Zn9npI-BMPYwvoy.js → memoryArtifactStore-52Zn9npI-upv5OWYf.js}

@@ -1,4 +1,4 @@
-import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
+import { m as WebSkillError } from "./dist-59XlqDuv.js";
 
 //#region ../runtime/dist/memoryArtifactStore-52Zn9npI.js
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { A as ArchiveLimits, F as FileStat, G as SKILLS_LOCKFILE, I as FileSystemProvider, K as SKILL_MANIFEST_FILE, R as JsonSchema, Z as SignatureAuditSink, _t as UnsignedPolicy, c as InteractionResponse, ht as TrustedKeyStore, ot as SkillManagerPort, pt as SkillsLockfile, rt as SkillInstallSource, s as InteractionRequest, st as SkillManifest, x as UiBridge, y as RenderResultRequest, yt as VerifyResult } from "./types-CcxRLdJG-DCXyw1US.js";
-import { Et as ScriptExecutor, Kt as ToolResult, M as FsMemoryStore, Tt as ScriptExecutionContext, Wt as ToolDefinition, Y as NetworkPolicy, _ as BridgeCapabilities, f as ApprovalScope, hn as createScriptContext, j as FsArtifactStore, ln as WebSkillRuntime, un as WebSkillRuntimeDeps, wt as SchemaInferer } from "./index-DkbABR43.js";
-import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-Bl-ElD45-CWPvGvoq.js";
+import { A as ArchiveLimits, F as FileStat, G as SKILLS_LOCKFILE, I as FileSystemProvider, K as SKILL_MANIFEST_FILE, R as JsonSchema, Z as SignatureAuditSink, _t as TrustedKeyStore, at as SkillInstallSource, c as InteractionResponse, ct as SkillManagerPort, ht as SkillsLockfile, lt as SkillManifest, s as InteractionRequest, x as UiBridge, xt as VerifyResult, y as RenderResultRequest, yt as UnsignedPolicy } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { Et as ScriptExecutor, M as FsMemoryStore, Tt as ScriptExecutionContext, Y as NetworkPolicy, Yt as ToolResult, _ as BridgeCapabilities, f as ApprovalScope, j as FsArtifactStore, mn as WebSkillRuntimeDeps, pn as WebSkillRuntime, qt as ToolDefinition, wt as SchemaInferer, yn as createScriptContext } from "./index-K-eewlGL.js";
+import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-Bl-ElD45-gRfSaAby.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -1,7 +1,7 @@
-import { A as parseSkillMarkdown, B as unzipWithLimits, H as verifyManifest, I as resolveArchiveLimits, L as resolveInsideRoot, M as readResponseWithLimit, N as readSkillSignature, O as messageOf, T as isValidSkillName, U as verifySkillSignature, V as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, j as parseSkillPackManifest, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, w as exportSkills, y as buildManifest } from "./dist-8oQRa8Xz.js";
-import { B as bridgeError, H as createScriptContext, L as WebSkillRuntime, c as CapabilityApproval, ct as normalizeToolError, h as FsMemoryStore, it as networkPolicyLibSource, lt as parseBridgeRequest, m as FsArtifactStore, st as normalizeToolContent } from "./dist-D0qW6e40.js";
+import { A as messageOf, D as isValidSkillName, E as exportSkills, F as readSkillSignature, G as verifyManifest, K as verifySkillSignature, M as parseSkillMarkdown, N as parseSkillPackManifest, P as readResponseWithLimit, R as resolveArchiveLimits, U as unzipWithLimits, W as validateSkills, _ as atomicWriteText, g as assertSafePathSegment, h as assertRemoteUrlAllowed, m as WebSkillError, o as SKILLS_LOCKFILE, r as MANIFEST_EXCLUDED_FILES, s as SKILL_MANIFEST_FILE, u as SKILL_PACK_FILE, y as buildManifest, z as resolveInsideRoot } from "./dist-59XlqDuv.js";
+import { B as bridgeError, H as createScriptContext, L as WebSkillRuntime, c as CapabilityApproval, dt as parseBridgeRequest, h as FsMemoryStore, lt as normalizeToolContent, m as FsArtifactStore, ot as networkPolicyLibSource, ut as normalizeToolError } from "./dist-DmI5SBBF.js";
 import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
-import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DjIQpt8Y-Bj3vghj4.js";
+import { t as AUDIT_EVENT_TYPES } from "./eventTypes-g1BXL6x5-CibcOftR.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";

package/dist/{openUiLibrary-Bdrji9qK-D2LxmM-a.js → openUiLibrary-DURlAxjk-CU6AzfSW.js}

@@ -1,5 +1,5 @@
-import { nt as uiCatalog } from "./dist-DnYG2-eY.js";
-import { t as CatalogNode } from "./catalogComponents-Dr5dFMAb-DKH_7VPI.js";
+import { ft as uiCatalog } from "./dist-CJqQsIm9.js";
+import { t as CatalogNode } from "./catalogComponents-DfxxfUvn-D55Gbb2l.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3761,7 +3761,7 @@ function Renderer({ response, library, isStreaming = false, onAction, onStateUpd
 const FormValidationContext = createContext(null);
 
 //#endregion
-//#region ../ui-react/dist/openUiLibrary-Bdrji9qK.js
+//#region ../ui-react/dist/openUiLibrary-DURlAxjk.js
 const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
 /**
 * catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，

package/dist/{skillVersionStore-Bl-ElD45-CWPvGvoq.d.ts → skillVersionStore-Bl-ElD45-gRfSaAby.d.ts}

@@ -1,4 +1,4 @@
-import { H as PageQuery, I as FileSystemProvider, V as Page, et as SkillCatalogEntry, st as SkillManifest } from "./types-CcxRLdJG-DCXyw1US.js";
+import { H as PageQuery, I as FileSystemProvider, V as Page, lt as SkillManifest, nt as SkillCatalogEntry } from "./types-B3n0cMZu-BdcqQ35O.js";
 //#region ../governance/dist/skillVersionStore-Bl-ElD45.d.ts
 //#region src/types.d.ts
 type CandidateStatus = 'draft' | 'pending-review' | 'approved' | 'published' | 'rejected';

package/dist/{testing-CYTFqkDm.js → testing-BCUO5gZR.js}

@@ -1,5 +1,5 @@
-import { m as WebSkillError } from "./dist-8oQRa8Xz.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { m as WebSkillError } from "./dist-59XlqDuv.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
 
 //#region ../runtime/dist/testing.js
 /**

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { _ as MemoryStore, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, x as UiBridge } from "./types-CcxRLdJG-DCXyw1US.js";
+import { _ as MemoryStore, c as InteractionResponse, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, p as LlmResponse, s as InteractionRequest, t as Artifact, u as LlmCompleteInput, x as UiBridge } from "./types-B3n0cMZu-BdcqQ35O.js";
 import { a as loadGoogleConfigFromEnv, i as loadAnthropicConfigFromEnv, n as LlmEnvConfig, o as loadLlmConfigFromEnv, r as ProviderEnvConfig } from "./env-AK3cSMEA-Dli6QU5E.js";
 //#region ../runtime/dist/testing.d.ts
 //#region src/llm/mockLlmClient.d.ts

package/dist/testing.js

@@ -1,5 +1,5 @@
-import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-BMPYwvoy.js";
+import { t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
 import { n as loadGoogleConfigFromEnv, r as loadLlmConfigFromEnv, t as loadAnthropicConfigFromEnv } from "./env-8cY40DXB-CGnEVZby.js";
-import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-CYTFqkDm.js";
+import { n as MockLlmClient, r as MockUiBridge, t as InMemoryStore } from "./testing-BCUO5gZR.js";
 
 export { InMemoryStore, MemoryArtifactStore, MockLlmClient, MockUiBridge, loadAnthropicConfigFromEnv, loadGoogleConfigFromEnv, loadLlmConfigFromEnv };

package/dist/{types-CcxRLdJG-DCXyw1US.d.ts → types-B3n0cMZu-BdcqQ35O.d.ts}

@@ -1,6 +1,8 @@
 //#region ../core/dist/index.d.ts
 //#region src/errors.d.ts
-type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'TOOL_RESOLUTION_EXHAUSTED' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT' | 'MCP_OAUTH_REQUIRED' | 'MCP_OAUTH_FAILED' | 'MCP_OAUTH_NOT_CONFIGURED' | 'PAGE_ACTION_OUT_OF_SCOPE' | 'PAGE_ACTION_STALE_REF' | 'PAGE_ACTION_DECLINED' | 'TS_RESOURCE_URL_REJECTED' | 'TS_TRANSPILER_UNAVAILABLE' | 'TS_TRANSPILE_FAILED' | 'TODO_LIST_INVALID' | 'TODO_ITEM_NOT_FOUND' | 'SKILL_GENERATION_DISABLED' | 'SKILL_GENERATION_LIMIT_EXCEEDED' | 'SKILL_GENERATION_VALIDATION_FAILED' | 'DELEGATION_UNAVAILABLE' | 'DELEGATION_IN_PROGRESS' | 'DELEGATION_BUDGET_EXCEEDED' | 'PROFILE_IMPORT_INVALID' | 'PROFILE_IMPORT_VERSION_UNSUPPORTED' | 'PROFILE_IMPORT_CREDENTIAL_REJECTED' | 'PROFILE_KEY_UNAVAILABLE' | 'DICTATION_UNAVAILABLE' | 'DICTATION_PERMISSION_DENIED' | 'DICTATION_FAILED' | 'PERCEPTION_NOT_ENABLED' | 'PERCEPTION_FAILED' | 'MODEL_IMAGE_UNSUPPORTED' | 'MODEL_TOOLS_UNSUPPORTED' | 'ATTACHMENT_TOO_LARGE' | 'ATTACHMENT_TYPE_REJECTED';
+type WebSkillErrorCode = 'FS_NOT_FOUND' | 'FS_PATH_OUTSIDE_ROOT' | 'SKILL_NOT_FOUND' | 'SKILL_INVALID_METADATA' | 'SKILL_INVALID_NAME' | 'SKILL_DUPLICATE_NAME' | 'SKILL_UNSUPPORTED_SCRIPT' | 'SKILL_MANIFEST_PROTECTED' | 'VALIDATION_FAILED' | 'TOOL_NOT_FOUND' | 'TOOL_EXECUTION_FAILED' | 'NETWORK_BLOCKED' | 'TOOL_UNSUPPORTED' | 'TOOL_NOT_ALLOWED' | 'TOOL_SCHEMA_UNAVAILABLE' | 'TOOL_RESOLUTION_EXHAUSTED' | 'RUN_TIMEOUT' | 'RUN_MAX_TURNS_EXCEEDED' | 'RUN_FAILED' | 'RUN_CANCELLED' | 'RUN_INTERACTION_TIMEOUT' |
+/** 历史里有未应答的工具调用，但当初为何中断已无从得知（分册 11 读取侧补齐） */
+'RUN_INTERRUPTED' | 'UI_UNAVAILABLE' | 'LLM_UNAVAILABLE' | 'LLM_REQUEST_FAILED' | 'INSTALL_FAILED' | 'UNINSTALL_FAILED' | 'EXPORT_FAILED' | 'INTEGRITY_FAILED' | 'FS_PERMISSION_DENIED' | 'MCP_ENDPOINT_UNAVAILABLE' | 'MCP_TOOL_NOT_FOUND' | 'CANDIDATE_INVALID' | 'APPROVAL_REQUIRED' | 'SKILL_QUARANTINED' | 'SKILL_DISABLED' | 'SKILL_UNKNOWN_ALLOWED_TOOL' | 'SKILL_UNKNOWN_DEPENDENCY' | 'SKILL_CIRCULAR_DEPENDENCY' | 'GOVERNANCE_FAILED' | 'RUN_SNAPSHOT_NOT_FOUND' | 'RUN_SNAPSHOT_EXPIRED' | 'RUN_SNAPSHOT_INCOMPATIBLE' | 'RUN_SNAPSHOT_SCHEMA_UNSUPPORTED' | 'RUN_TRACE_INCOMPATIBLE' | 'SESSION_INCOMPATIBLE' | 'SIGNATURE_MISSING' | 'SIGNATURE_MALFORMED' | 'SIGNATURE_UNTRUSTED_KEY' | 'SIGNATURE_MISMATCH' | 'SIGNATURE_UNSUPPORTED' | 'MCP_STDIO_SPAWN_FAILED' | 'MCP_STDIO_EXITED' | 'MCP_STDIO_TIMEOUT' | 'MCP_OAUTH_REQUIRED' | 'MCP_OAUTH_FAILED' | 'MCP_OAUTH_NOT_CONFIGURED' | 'PAGE_ACTION_OUT_OF_SCOPE' | 'PAGE_ACTION_STALE_REF' | 'PAGE_ACTION_DECLINED' | 'TS_RESOURCE_URL_REJECTED' | 'TS_TRANSPILER_UNAVAILABLE' | 'TS_TRANSPILE_FAILED' | 'TODO_LIST_INVALID' | 'TODO_ITEM_NOT_FOUND' | 'SKILL_GENERATION_DISABLED' | 'SKILL_GENERATION_LIMIT_EXCEEDED' | 'SKILL_GENERATION_VALIDATION_FAILED' | 'DELEGATION_UNAVAILABLE' | 'DELEGATION_IN_PROGRESS' | 'DELEGATION_BUDGET_EXCEEDED' | 'PROFILE_IMPORT_INVALID' | 'PROFILE_IMPORT_VERSION_UNSUPPORTED' | 'PROFILE_IMPORT_CREDENTIAL_REJECTED' | 'PROFILE_KEY_UNAVAILABLE' | 'DICTATION_UNAVAILABLE' | 'DICTATION_PERMISSION_DENIED' | 'DICTATION_FAILED' | 'PERCEPTION_NOT_ENABLED' | 'PERCEPTION_FAILED' | 'MODEL_IMAGE_UNSUPPORTED' | 'MODEL_TOOLS_UNSUPPORTED' | 'ATTACHMENT_TOO_LARGE' | 'ATTACHMENT_TYPE_REJECTED';
 /**
  * 所有公开 API 抛出的结构化错误，code 供上层可编程处理
  * @stable
@@ -471,6 +473,36 @@ declare function checkDependencyCycles(adjacency: Map<string, string[]>): {
   involved: Set<string>;
 };
 //#endregion
+//#region src/skill/archiveShape.d.ts
+/**
+ * 归档的三种合法形态。本轮 bug 的成因是「安装认三种、预览只认扁平」，
+ * 抽出后不允许再分叉（设计 19 §2.1）。
+ */
+type SkillArchiveShape = 'pack-set' | 'flat' | 'nested-single' | 'invalid';
+interface SkillArchiveDetection {
+  shape: SkillArchiveShape;
+  /** nested-single 时的顶层目录名（不含尾部斜杠），其余形态为 undefined */
+  rootDir?: string;
+  /** 无法判定时的原因，面向调用方，英文 */
+  reason?: string;
+}
+/**
+ * 按归档条目表判定包结构。
+ *
+ * 入参是条目表而不是文件系统：预览侧只有解压后的 entries，没有落盘的目录。
+ * 只看路径，不读内容——内容合法性由 checkSkillRules 负责，两者不重叠。
+ */
+declare function detectSkillArchiveShape(entries: Iterable<string>): SkillArchiveDetection;
+/** nested-single 时剥掉顶层目录，其余形态原样返回 */
+declare function stripArchiveRoot<T>(entries: Record<string, T>, detection: SkillArchiveDetection): Record<string, T>;
+/**
+ * 文件系统入口：安装管线拿到的是解压后的目录，不是条目表。
+ *
+ * 只探测判定所需的少量路径（不递归全量列举），再交给上面的纯函数——
+ * 判定规则仍然只有一份，这正是 S7 的目的。
+ */
+declare function detectSkillArchiveShapeFromFs(fs: FileSystemProvider, contentDir: string): Promise<SkillArchiveDetection>;
+//#endregion
 //#region src/skill/skillPack.d.ts
 /**
  * 技能包集（skill pack）格式与打包逻辑（node/browser 共用单一来源）：
@@ -529,7 +561,9 @@ interface DiscoveryResult {
 }
 declare class SkillDiscovery {
   #private;
-  constructor(fs: FileSystemProvider, roots: string[]);
+  constructor(fs: FileSystemProvider, roots: string[], options?: {
+    extraKnownSkillNames?: readonly string[];
+  });
   discover(): Promise<DiscoveryResult>;
   catalog(): Promise<{
     catalog: SkillCatalog;
@@ -548,8 +582,13 @@ interface ValidationReport {
 /**
  * 合规校验。内部直接复用 SkillDiscovery 的扫描逻辑，
  * 规则判定同样落在 checkSkillRules 单一来源上。
+ *
+ * `extraKnownSkillNames`：扫描范围之外已存在的技能名。安装时只扫刚解出来的那一个目录，
+ * 不告诉它库里还有谁，任何指向包外的 dependencies 都会被判成不存在。
  */
-declare function validateSkills(fs: FileSystemProvider, roots: string[]): Promise<ValidationReport>;
+declare function validateSkills(fs: FileSystemProvider, roots: string[], options?: {
+  extraKnownSkillNames?: readonly string[];
+}): Promise<ValidationReport>;
 //#endregion
 //#region src/skill/reader.d.ts
 /** 按技能名读取技能根目录内的文件，全部读取强制经过路径安全检查 */
@@ -582,7 +621,7 @@ declare function escapeXml(text: string): string;
 declare function renderAvailableSkillsXml(catalog: SkillCatalog): string;
 declare const xmlRenderer: CatalogRenderer;
 //#endregion
-//#region ../runtime/dist/types-CcxRLdJG.d.ts
+//#region ../runtime/dist/types-B3n0cMZu.d.ts
 //#region src/llm/streamTypes.d.ts
 /** 流式 LLM 事件（OpenAI SSE / Vercel fullStream 统一映射） */
 type LlmStreamEvent = {
@@ -927,7 +966,8 @@ interface UiBridge {
 interface FormField {
   name: string;
   label: string;
-  type: 'text' | 'number' | 'boolean' | 'select' | 'textarea' | 'file';
+  /** `password` 的值不进 paramHistory、不进行为记录、不落会话（FR-23.7） */
+  type: 'text' | 'number' | 'boolean' | 'select' | 'textarea' | 'file' | 'password';
   required?: boolean;
   description?: string;
   defaultValue?: unknown;
@@ -969,4 +1009,4 @@ interface MemoryStore {
   transaction?<T>(scope: string, fn: (inner: MemoryStore) => Promise<T>): Promise<T>;
 }
 //#endregion
-export { SkillCatalog as $, ArchiveLimits as A, escapeXml as At, MemoryFS as B, readSkillSignature as Bt, UiSpecDrafts as C, assertSafePathSegment as Ct, UiSurfaceActionRequest as D, checkDependencyCycles as Dt, UiSpecSnapshot as E, buildManifest as Et, FileStat as F, messageOf as Ft, SKILLS_LOCKFILE as G, signSkill as Gt, PageQuery as H, renderCatalogJson as Ht, FileSystemProvider as I, normalizePath as It, SKILL_NAME_PATTERN as J, validateSkills as Jt, SKILL_MANIFEST_FILE as K, signaturePayloadBytes as Kt, FsTrustedKeyStore as L, parseSkillMarkdown as Lt, CryptoKeyLike as M, isValidSkillName as Mt, DEFAULT_ARCHIVE_LIMITS as N, jsonRenderer as Nt, UiSurfaceActionResponse as O, checkSkillRules as Ot, DiscoveryResult as P, keyIdOf as Pt, SignatureVerdict as Q, JsonSchema as R, parseSkillPackManifest as Rt, UiSpecActionCapability as S, assertRemoteUrlAllowed as St, UiSpecPatch as T, buildCatalog as Tt, RemoteUrlPolicy as U, resolveArchiveLimits as Ut, Page as V, renderAvailableSkillsXml as Vt, SIGNATURE_SCHEMA_VERSION as W, resolveInsideRoot as Wt, SKILL_SIGNATURE_FILE as X, verifySkillSignature as Xt, SKILL_PACK_FILE as Y, verifyManifest as Yt, SignatureAuditSink as Z, xmlRenderer as Zt, MemoryStore as _, UnsignedPolicy as _t, InteractionOrigin as a, SkillLocation as at, SkillCandidateMarker as b, WebSkillError as bt, InteractionResponse as c, SkillMetadata as ct, LlmContentPart as d, SkillSignature as dt, SkillCatalogEntry as et, LlmMessage as f, SkillSource as ft, LlmToolSpec as g, UiSpecNode as gt, LlmToolCall as h, TrustedKeyStore as ht, FormField as i, SkillIssue as it, CatalogRenderer as j, exportSkills as jt, extractSkillCandidate as k, computeDigest as kt, LlmClient as l, SkillPackManifest as lt, LlmStreamEvent as m, TrustedKey as mt, ArtifactStore as n, SkillDocument as nt, InteractionPolicy as o, SkillManagerPort as ot, LlmResponse as p, SkillsLockfile as pt, SKILL_NAME_MAX_LENGTH as q, unzipWithLimits as qt, ChartSpec as r, SkillInstallSource as rt, InteractionRequest as s, SkillManifest as st, Artifact as t, SkillDiscovery as tt, LlmCompleteInput as u, SkillReader as ut, RenderBlock as v, ValidationReport as vt, UiSpecEvent as w, atomicWriteText as wt, UiBridge as x, WebSkillErrorCode as xt, RenderResultRequest as y, VerifyResult as yt, MANIFEST_EXCLUDED_FILES as z, readResponseWithLimit as zt };
+export { SkillArchiveDetection as $, validateSkills as $t, ArchiveLimits as A, checkSkillRules as At, MemoryFS as B, normalizePath as Bt, UiSpecDrafts as C, WebSkillErrorCode as Ct, UiSurfaceActionRequest as D, buildCatalog as Dt, UiSpecSnapshot as E, atomicWriteText as Et, FileStat as F, exportSkills as Ft, SKILLS_LOCKFILE as G, renderAvailableSkillsXml as Gt, PageQuery as H, parseSkillPackManifest as Ht, FileSystemProvider as I, isValidSkillName as It, SKILL_NAME_PATTERN as J, resolveInsideRoot as Jt, SKILL_MANIFEST_FILE as K, renderCatalogJson as Kt, FsTrustedKeyStore as L, jsonRenderer as Lt, CryptoKeyLike as M, detectSkillArchiveShape as Mt, DEFAULT_ARCHIVE_LIMITS as N, detectSkillArchiveShapeFromFs as Nt, UiSurfaceActionResponse as O, buildManifest as Ot, DiscoveryResult as P, escapeXml as Pt, SignatureVerdict as Q, unzipWithLimits as Qt, JsonSchema as R, keyIdOf as Rt, UiSpecActionCapability as S, WebSkillError as St, UiSpecPatch as T, assertSafePathSegment as Tt, RemoteUrlPolicy as U, readResponseWithLimit as Ut, Page as V, parseSkillMarkdown as Vt, SIGNATURE_SCHEMA_VERSION as W, readSkillSignature as Wt, SKILL_SIGNATURE_FILE as X, signaturePayloadBytes as Xt, SKILL_PACK_FILE as Y, signSkill as Yt, SignatureAuditSink as Z, stripArchiveRoot as Zt, MemoryStore as _, TrustedKeyStore as _t, InteractionOrigin as a, SkillInstallSource as at, SkillCandidateMarker as b, ValidationReport as bt, InteractionResponse as c, SkillManagerPort as ct, LlmContentPart as d, SkillPackManifest as dt, verifyManifest as en, SkillArchiveShape as et, LlmMessage as f, SkillReader as ft, LlmToolSpec as g, TrustedKey as gt, LlmToolCall as h, SkillsLockfile as ht, FormField as i, SkillDocument as it, CatalogRenderer as j, computeDigest as jt, extractSkillCandidate as k, checkDependencyCycles as kt, LlmClient as l, SkillManifest as lt, LlmStreamEvent as m, SkillSource as mt, ArtifactStore as n, xmlRenderer as nn, SkillCatalogEntry as nt, InteractionPolicy as o, SkillIssue as ot, LlmResponse as p, SkillSignature as pt, SKILL_NAME_MAX_LENGTH as q, resolveArchiveLimits as qt, ChartSpec as r, SkillDiscovery as rt, InteractionRequest as s, SkillLocation as st, Artifact as t, verifySkillSignature as tn, SkillCatalog as tt, LlmCompleteInput as u, SkillMetadata as ut, RenderBlock as v, UiSpecNode as vt, UiSpecEvent as w, assertRemoteUrlAllowed as wt, UiBridge as x, VerifyResult as xt, RenderResultRequest as y, UnsignedPolicy as yt, MANIFEST_EXCLUDED_FILES as z, messageOf as zt };

package/dist/ui-react.d.ts

@@ -1,7 +1,7 @@
-import { C as UiSpecDrafts, D as UiSurfaceActionRequest, E as UiSpecSnapshot, O as UiSurfaceActionResponse, S as UiSpecActionCapability, c as InteractionResponse, gt as UiSpecNode, s as InteractionRequest, w as UiSpecEvent, x as UiBridge, y as RenderResultRequest } from "./types-CcxRLdJG-DCXyw1US.js";
-import { b as InteractionSpecLabels } from "./index-BwsK9lGk.js";
+import { C as UiSpecDrafts, D as UiSurfaceActionRequest, E as UiSpecSnapshot, O as UiSurfaceActionResponse, S as UiSpecActionCapability, c as InteractionResponse, s as InteractionRequest, vt as UiSpecNode, w as UiSpecEvent, x as UiBridge, y as RenderResultRequest } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { E as InteractionSpecLabels, R as SurfaceFormTexts } from "./index-P9J2LTfU.js";
 import { z } from "zod";
-import { ComponentType, ReactNode } from "react";
+import React$1, { ComponentType, ReactNode } from "react";
 import "react/jsx-runtime";
 //#region ../../node_modules/.pnpm/@json-render+core@0.19.0_zod@4.4.3/node_modules/@json-render/core/dist/store-utils-D98Czbil.d.ts
 /**
@@ -433,7 +433,7 @@ interface JsonRenderSpecSurfaceProps {
  * `vercel` 档：同一份 catalog 声明树交给 json-render 的 Registry 渲染。
  * `@json-render/*` 是 optional peer，未安装时给出英文说明而不是空白。
  */
-declare function JsonRenderSpecSurface({ spec, surfaceId, actions, onAction }: JsonRenderSpecSurfaceProps): import("react").JSX.Element | null;
+declare function JsonRenderSpecSurface({ spec, surfaceId, actions, onAction }: JsonRenderSpecSurfaceProps): import("react").JSX.Element;
 //#endregion
 //#region src/catalog/jsonRenderRegistry.d.ts
 /** catalog 的 action 名与 `UiSpecActionCapability['intent']` 一一对应 */
@@ -497,7 +497,7 @@ interface OpenUiSpecSurfaceProps {
  * `openui` 档：同一份 catalog 声明树经 openui-lang 交给 OpenUI 的 Renderer。
  * `@openuidev/react-lang` 是 optional peer，未安装时给出英文说明而不是空白。
  */
-declare function OpenUiSpecSurface({ spec, surfaceId, actions, onAction }: OpenUiSpecSurfaceProps): import("react").JSX.Element | null;
+declare function OpenUiSpecSurface({ spec, surfaceId, actions, onAction }: OpenUiSpecSurfaceProps): import("react").JSX.Element;
 //#endregion
 //#region src/catalog/catalogComponents.d.ts
 type CatalogNodeProps = {
@@ -511,4 +511,11 @@ type CatalogNodeProps = {
  */
 declare const catalogComponentImpls: Record<string, (input: CatalogNodeProps) => ReactNode>;
 //#endregion
-export { type CatalogNodeProps, type CustomSurfaceActionEvent, type DroppedSurfaceActionWarning, InteractionForm, type JsonRenderActionDispatch, JsonRenderSpecSurface, type JsonRenderSpecSurfaceProps, NATIVE_SPEC_COMPONENTS, NativeSpecSurface, type NativeSpecSurfaceProps, OpenUiSpecSurface, type OpenUiSpecSurfaceProps, ReactBridgeState, type ReactBridgeStateOptions, type RegisteredSurfaceProps, ResultBlocks, SpecInteractionChannel, type SpecInteractionSession, StreamingText, type SurfaceRegistration, SurfaceRegistry, type UiSurfaceActionEvent, UiSurfaceList, type UiSurfaceListProps, UiSurfaceSnapshotList, type UiSurfaceSnapshotListProps, UiSurfaceStore, catalogComponentImpls, createJsonRenderRegistry, probeJsonRenderAvailability };
+//#region src/catalog/surfaceFormTexts.d.ts
+declare function useSurfaceFormTexts(): SurfaceFormTexts;
+declare function SurfaceFormTextsProvider({ texts, children }: {
+  texts?: Partial<SurfaceFormTexts> | undefined;
+  children: ReactNode;
+}): import("react").JSX.Element;
+//#endregion
+export { type CatalogNodeProps, type CustomSurfaceActionEvent, type DroppedSurfaceActionWarning, InteractionForm, type JsonRenderActionDispatch, JsonRenderSpecSurface, type JsonRenderSpecSurfaceProps, NATIVE_SPEC_COMPONENTS, NativeSpecSurface, type NativeSpecSurfaceProps, OpenUiSpecSurface, type OpenUiSpecSurfaceProps, ReactBridgeState, type ReactBridgeStateOptions, type RegisteredSurfaceProps, ResultBlocks, SpecInteractionChannel, type SpecInteractionSession, StreamingText, SurfaceFormTextsProvider, type SurfaceRegistration, SurfaceRegistry, type UiSurfaceActionEvent, UiSurfaceList, type UiSurfaceListProps, UiSurfaceSnapshotList, type UiSurfaceSnapshotListProps, UiSurfaceStore, catalogComponentImpls, createJsonRenderRegistry, probeJsonRenderAvailability, useSurfaceFormTexts };