@webskill/sdk 0.8.0 → 0.10.0

package/dist/{dist-59XlqDuv.js → dist-Bev6i6Ip.js}

@@ -76,6 +76,14 @@ function verifyManifest(manifest, actualHashes, actualFiles = [...actualHashes.k
 	};
 }
 /**
+* 原子写的临时文件名后缀模式；列举/打包侧据此排除中断残留（0.9.0 分册 11）。
+* 单一来源：不要在别处手写正则（AC-G10），复制正则必然漂移。
+* @stable
+*/
+const ATOMIC_TMP_SUFFIX_PATTERN = /\.tmp-\d+-[a-z0-9]+$/;
+/** 该路径是否是 atomicWriteText 留下的临时文件 */
+const isAtomicTempPath = (path) => ATOMIC_TMP_SUFFIX_PATTERN.test(path);
+/**
 * 原子写文本：先写临时文件再 rename（进程崩溃不留下半写文件；lockfile 等账本场景）。
 * 原子性强弱取决于 provider 的 rename 实现：NodeFS/MemoryFS 为真 rename；
 * OPFS 无原生 move，rename 是 copy+delete（非原子，崩溃可能残留双份），
@@ -656,7 +664,7 @@ async function listFilesRecursive(fs, root, prefix = "") {
 	for (const entry of await fs.list(root)) {
 		const rel = prefix === "" ? baseName$1(entry.path) : `${prefix}/${baseName$1(entry.path)}`;
 		if (entry.type === "directory") out.push(...await listFilesRecursive(fs, entry.path, rel));
-		else out.push(rel);
+		else if (!isAtomicTempPath(baseName$1(entry.path))) out.push(rel);
 	}
 	return out;
 }
@@ -1122,4 +1130,4 @@ const xmlRenderer = {
 };
 
 //#endregion
-export { messageOf as A, signSkill as B, detectSkillArchiveShape as C, isValidSkillName as D, exportSkills as E, readSkillSignature as F, verifyManifest as G, stripArchiveRoot as H, renderAvailableSkillsXml as I, verifySkillSignature as K, renderCatalogJson as L, parseSkillMarkdown as M, parseSkillPackManifest as N, jsonRenderer as O, readResponseWithLimit as P, resolveArchiveLimits as R, computeDigest as S, escapeXml as T, unzipWithLimits as U, signaturePayloadBytes as V, validateSkills as W, atomicWriteText as _, SIGNATURE_SCHEMA_VERSION as a, checkDependencyCycles as b, SKILL_NAME_MAX_LENGTH as c, SKILL_SIGNATURE_FILE as d, SkillDiscovery as f, assertSafePathSegment as g, assertRemoteUrlAllowed as h, MemoryFS as i, normalizePath as j, keyIdOf as k, SKILL_NAME_PATTERN as l, WebSkillError as m, FsTrustedKeyStore as n, SKILLS_LOCKFILE as o, SkillReader as p, xmlRenderer as q, MANIFEST_EXCLUDED_FILES as r, SKILL_MANIFEST_FILE as s, DEFAULT_ARCHIVE_LIMITS as t, SKILL_PACK_FILE as u, buildCatalog as v, detectSkillArchiveShapeFromFs as w, checkSkillRules as x, buildManifest as y, resolveInsideRoot as z };
+export { jsonRenderer as A, resolveArchiveLimits as B, computeDigest as C, exportSkills as D, escapeXml as E, parseSkillPackManifest as F, unzipWithLimits as G, signSkill as H, readResponseWithLimit as I, verifySkillSignature as J, validateSkills as K, readSkillSignature as L, messageOf as M, normalizePath as N, isAtomicTempPath as O, parseSkillMarkdown as P, renderAvailableSkillsXml as R, checkSkillRules as S, detectSkillArchiveShapeFromFs as T, signaturePayloadBytes as U, resolveInsideRoot as V, stripArchiveRoot as W, xmlRenderer as Y, assertSafePathSegment as _, MemoryFS as a, buildManifest as b, SKILL_MANIFEST_FILE as c, SKILL_PACK_FILE as d, SKILL_SIGNATURE_FILE as f, assertRemoteUrlAllowed as g, WebSkillError as h, MANIFEST_EXCLUDED_FILES as i, keyIdOf as j, isValidSkillName as k, SKILL_NAME_MAX_LENGTH as l, SkillReader as m, DEFAULT_ARCHIVE_LIMITS as n, SIGNATURE_SCHEMA_VERSION as o, SkillDiscovery as p, verifyManifest as q, FsTrustedKeyStore as r, SKILLS_LOCKFILE as s, ATOMIC_TMP_SUFFIX_PATTERN as t, SKILL_NAME_PATTERN as u, atomicWriteText as v, detectSkillArchiveShape as w, checkDependencyCycles as x, buildCatalog as y, renderCatalogJson as z };

package/dist/{eventTypes-g1BXL6x5-CibcOftR.js → eventTypes-s2uwAcLG-Go3l_dUe.js}

@@ -1,4 +1,4 @@
-//#region ../governance/dist/eventTypes-g1BXL6x5.js
+//#region ../governance/dist/eventTypes-s2uwAcLG.js
 /**
 * 审计事件类型常量（FR-13.4）。
 *
@@ -15,8 +15,12 @@ const AUDIT_EVENT_TYPES = {
 	skillRepairApplied: "skill.repair_applied",
 	skillQuarantined: "skill.quarantined",
 	skillPolicyDenied: "skill.policy_denied",
+	skillUserCaused: "skill.user_caused",
 	skillUninstalled: "skill.uninstalled",
 	skillInstalled: "skill.installed",
+	skillExported: "skill.exported",
+	skillRenamed: "skill.renamed",
+	skillVersioned: "skill.versioned",
 	trustKeyAdded: "trust.key_added",
 	trustKeyRemoved: "trust.key_removed",
 	policyNetworkChanged: "policy.network_changed",
@@ -27,8 +31,15 @@ const AUDIT_EVENT_TYPES = {
 	profileChanged: "profile.changed",
 	mcpEndpointChanged: "mcp.endpoint_changed",
 	mcpPolicyRelaxed: "mcp.policy_relaxed",
+	webmcpEnabled: "webmcp.enabled",
 	providerChanged: "provider.changed",
-	candidateGenerated: "candidate.generated"
+	candidateCreated: "candidate.created",
+	candidateGenerated: "candidate.generated",
+	candidateSubmitted: "candidate.submitted",
+	candidateApproved: "candidate.approved",
+	candidateRejected: "candidate.rejected",
+	pagePerceived: "page.perceived",
+	pageAction: "page.action"
 };
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */
 const AUDIT_EVENT_TYPE_LIST = Object.values(AUDIT_EVENT_TYPES);

package/dist/governance.d.ts

@@ -1,6 +1,6 @@
-import { H as PageQuery, I as FileSystemProvider, V as Page, ct as SkillManagerPort, f as LlmMessage, it as SkillDocument, l as LlmClient, nt as SkillCatalogEntry, x as UiBridge } from "./types-B3n0cMZu-BdcqQ35O.js";
-import { H as IntegrityVerdict, It as SkillIntegrityGuard, Lt as SkillOutcomeReporter, Vt as SkillStateGuard, bt as RuntimeRun, pn as WebSkillRuntime } from "./index-K-eewlGL.js";
-import { _ as SkillVersion, a as AuditLog, c as CandidateFile, d as CandidateSource, f as CandidateStatus, g as SkillState, h as SKILL_VERSION_PAGE_SIZE, i as AuditEvent, l as CandidateRisk, m as CompositeApprovalPolicy, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStore, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateSkill, v as SkillVersionStore, y as candidateToCatalogEntry } from "./skillVersionStore-Bl-ElD45-gRfSaAby.js";
+import { R as FileSystemProvider, S as UiBridge, U as Page, W as PageQuery, f as LlmMessage, it as SkillCatalogEntry, l as LlmClient, ot as SkillDocument, ut as SkillManagerPort } from "./types-CrRcT-LM-DZAp8sWv.js";
+import { H as IntegrityVerdict, Ht as SkillStateGuard, Lt as SkillIntegrityGuard, Rt as SkillOutcomeReporter, mn as WebSkillRuntime, xt as RuntimeRun } from "./index-DtFdMKBX.js";
+import { _ as SkillState, a as AuditLog, b as SkillVersionStore, c as CandidateFile, d as CandidateSkill, f as CandidateSource, g as SKILL_VERSION_PAGE_SIZE, h as CompositeApprovalPolicy, i as AuditEvent, l as CandidatePage, m as CandidateStore, n as ApprovalDecision, o as AuditQueryFilter, p as CandidateStatus, r as ApprovalPolicy, s as CANDIDATE_PAGE_SIZE, t as AlwaysHumanApprovalPolicy, u as CandidateRisk, v as SkillVersion, x as candidateToCatalogEntry, y as SkillVersionPage } from "./skillVersionStore-D-qHk9ZE-DBsYYCWn.js";
 //#region ../governance/dist/index.d.ts
 //#region src/candidate/candidateNormalizer.d.ts
 /** 剥 markdown fence 与 <think> 块、截取首尾 {}；非对象 → CANDIDATE_INVALID */
@@ -108,6 +108,8 @@ interface AuditChainVerification {
 }
 /** 带断链报告的分页结果（`tolerateBrokenChain` 打开时才可能带上后两个字段） */
 interface AuditPage extends Page<AuditEvent> {
+  /** 筛选后的匹配总数（不分页截断）：页码分页需要它算总页数 */
+  total: number;
   chainBrokenAt?: number;
   chainReason?: string;
   /**
@@ -150,6 +152,13 @@ declare class FsAuditLog implements AuditLog {
    * 本页范围内的 hash 链必须自洽：逐条重算 hash 并核对与前一行的 `prevHash` 链接，
    * 任一处对不上以 `GOVERNANCE_FAILED` 报错。范围之外的断链不在本方法职责内——
    * 那是 `verifyChain()` 的事（全量 O(N) 校验不该压在每次翻页上）。
+   *
+   * 边界语义（0.10.0 复核后固化）：
+   * - `cursor` 是「匹配序列的结束下标」而非稳定指针：翻页间隔内有新事件追加时，
+   *   页间可能漂移一条，属追加型数据的固有边界，调用方不要按「稳定快照」实现导出；
+   * - `tolerateBrokenChain` 打开且本页检测到断链时，`total` 收缩到断点前
+   *   （断点及其之后的记录不再可翻出，页码不会指向空页）；断点在更后面的页时
+   *   本页的 `total` 仍按全量匹配数返回。
    */
   query(filter?: AuditQueryFilter & PageQuery): Promise<AuditPage>;
   /** hash 链完整性校验：逐行重算 hash 并核对 prevHash 链接。**只读**，绝不改写历史 */
@@ -173,8 +182,12 @@ declare const AUDIT_EVENT_TYPES: {
   readonly skillRepairApplied: "skill.repair_applied";
   readonly skillQuarantined: "skill.quarantined";
   readonly skillPolicyDenied: "skill.policy_denied";
+  readonly skillUserCaused: "skill.user_caused";
   readonly skillUninstalled: "skill.uninstalled";
   readonly skillInstalled: "skill.installed";
+  readonly skillExported: "skill.exported";
+  readonly skillRenamed: "skill.renamed";
+  readonly skillVersioned: "skill.versioned";
   readonly trustKeyAdded: "trust.key_added";
   readonly trustKeyRemoved: "trust.key_removed";
   readonly policyNetworkChanged: "policy.network_changed";
@@ -185,8 +198,15 @@ declare const AUDIT_EVENT_TYPES: {
   readonly profileChanged: "profile.changed";
   readonly mcpEndpointChanged: "mcp.endpoint_changed";
   readonly mcpPolicyRelaxed: "mcp.policy_relaxed";
+  readonly webmcpEnabled: "webmcp.enabled";
   readonly providerChanged: "provider.changed";
+  readonly candidateCreated: "candidate.created";
   readonly candidateGenerated: "candidate.generated";
+  readonly candidateSubmitted: "candidate.submitted";
+  readonly candidateApproved: "candidate.approved";
+  readonly candidateRejected: "candidate.rejected";
+  readonly pagePerceived: "page.perceived";
+  readonly pageAction: "page.action";
 };
 type AuditEventType = (typeof AUDIT_EVENT_TYPES)[keyof typeof AUDIT_EVENT_TYPES];
 /** 稳定展示序：筛选下拉与文档表格都从这里取，不各自维护一份顺序 */
@@ -237,9 +257,19 @@ declare class RepairPlanner {
 /**
  * 用户策略主动拒绝的错误码（FR-12.4）：这是配置生效的证据，不是技能有问题，不计入隔离阈值。
  *
- * 集中在这一份常量里而不散在条件判断里，是为了让「哪些码不计数」只有一个事实源。
+ * 集中在这一份常量里而不散在条件判断里，是为了让「哪些策略拒绝码不计数」只有一个事实源。
+ * （用户自身原因的豁免码见 `USER_CAUSED_CODES`，两类语义不同，不并在一起。）
  */
 declare const POLICY_DENIAL_CODES: ReadonlySet<string>;
+/**
+ * 用户自身原因的错误码（0.10.0 UI-UX5 #49-2）：交互等待超时（用户没处理）与
+ * 用户自行取消（ask_user / 交互卡取消）都不是技能的错，不计入隔离阈值。
+ *
+ * loop 里这两类结局走 RunTerminated 旁路、本来到不了上报口；这里再挡一道，
+ * 是因为宿主执行器也可能把「等用户时被取消/超时」包成 ok:false 的失败结果交回来——
+ * 「算不算技能的错」的判定口径必须在上报侧只有这一处。
+ */
+declare const USER_CAUSED_CODES: ReadonlySet<string>;
 /** 自动隔离的原因判别式（FR-12.6）；人工隔离仍写自由文本 */
 declare const QUARANTINE_REASONS: {
   readonly integrity: "integrity";
@@ -266,7 +296,7 @@ declare class SkillStatePolicy {
     detail?: string;
   }): Promise<void>;
   /**
-   * 失败计数；达阈值（默认 3）→ quarantined + 审计。
+   * 失败计数；达阈值（默认 5）→ quarantined + 审计。
    *
    * 计数是**连续**而非累计（0.7.0 FR-12.5）：一次成功执行经 `clearFailures` 归零，
    * `setState(name, 'active')` 同样清零。
@@ -312,6 +342,7 @@ declare class SkillStatePolicy {
   toSkillOutcomeReporter(input?: {
     actor?: string;
     policyDenialCodes?: ReadonlySet<string>;
+    userCausedCodes?: ReadonlySet<string>;
   }): SkillOutcomeReporter;
   /** disabled → SKILL_DISABLED；quarantined → SKILL_QUARANTINED */
   assertExecutable(skillName: string): Promise<void>;
@@ -485,4 +516,4 @@ declare function createMissHook(deps: {
  */
 declare function completeText(llm: LlmClient, messages: LlmMessage[]): Promise<string>;
 //#endregion
-export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, SkillVersionStore, type SourceDocument, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, type ApprovalDecision, type ApprovalPolicy, type AuditChainVerification, type AuditEvent, type AuditEventType, type AuditLog, type AuditPage, type AuditQueryFilter, CANDIDATE_PAGE_SIZE, type CandidateFile, type CandidatePage, type CandidateRisk, type CandidateSink, type CandidateSinkOptions, type CandidateSkill, type CandidateSource, type CandidateStatus, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, type EvaluationReport, type EvaluationResult, EvaluationRunner, type EvaluationTask, FailureAnalyzer, type FailureDiagnosis, FsAuditLog, type GeneratedSkillSubmission, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, type RepairOption, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, type ScoreInput, SimilarityDetector, SkillScorer, type SkillState, SkillStatePolicy, type SkillVersion, type SkillVersionPage, SkillVersionStore, type SourceDocument, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/governance.js

@@ -1,6 +1,6 @@
-import { A as messageOf, D as isValidSkillName, g as assertSafePathSegment, m as WebSkillError } from "./dist-59XlqDuv.js";
-import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-upv5OWYf.js";
-import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-g1BXL6x5-CibcOftR.js";
+import { M as messageOf, _ as assertSafePathSegment, h as WebSkillError, k as isValidSkillName, v as atomicWriteText } from "./dist-Bev6i6Ip.js";
+import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
+import { n as AUDIT_EVENT_TYPE_LIST, t as AUDIT_EVENT_TYPES } from "./eventTypes-s2uwAcLG-Go3l_dUe.js";
 
 //#region ../governance/dist/index.js
 const invalid = (message, details) => {
@@ -105,6 +105,9 @@ function validateCandidate(candidate) {
 * 治理侧各列表共用的游标切片，形状与会话消息（C1）完全一致：
 * 无游标给**最新**一页，`nextCursor` 指向更早的历史，页内按时间升序。
 *
+* 返回值附带筛选后匹配总数 `total`（0.10.0 UI-UX5 #40.12）：页码分页的总页数依据，
+* 与 `AuditPage.total` 同一语义（`all` 是已过滤集合，length 即匹配总数）。
+*
 * 缺省页长由各 store 传入——缺省属于实现，不属于调用方。
 */
 function takeTailPage(all, options, defaultLimit, what) {
@@ -118,6 +121,7 @@ function takeTailPage(all, options, defaultLimit, what) {
 	const start = Math.max(0, end - limit);
 	return {
 		items: all.slice(start, end),
+		total: all.length,
 		...start > 0 ? { nextCursor: String(start) } : {}
 	};
 }
@@ -135,7 +139,7 @@ var CandidateStore = class {
 	async save(candidate) {
 		validateCandidate(candidate);
 		assertSafePathSegment(candidate.id, "candidate id");
-		await this.#fs.writeText(`${dirOf$1(this.#root)}/${candidate.id}.json`, JSON.stringify(candidate, null, 2));
+		await atomicWriteText(this.#fs, `${dirOf$1(this.#root)}/${candidate.id}.json`, JSON.stringify(candidate, null, 2));
 	}
 	async get(id) {
 		assertSafePathSegment(id, "candidate id");
@@ -150,7 +154,10 @@ var CandidateStore = class {
 	*/
 	async list(options = {}) {
 		const dir = dirOf$1(this.#root);
-		if (!await this.#fs.exists(dir)) return { items: [] };
+		if (!await this.#fs.exists(dir)) return {
+			items: [],
+			total: 0
+		};
 		const out = [];
 		for (const entry of await this.#fs.list(dir)) {
 			if (entry.type !== "file" || !entry.path.endsWith(".json")) continue;
@@ -211,7 +218,7 @@ function createCandidateSink(options) {
 		};
 		await options.store.save(candidate);
 		await options.audit?.append({
-			type: "candidate.created",
+			type: AUDIT_EVENT_TYPES.candidateCreated,
 			target: candidate.id,
 			data: {
 				name: candidate.name,
@@ -275,7 +282,7 @@ var LlmCandidateGenerator = class {
 			...this.#createId ? { createId: this.#createId } : {}
 		});
 		await this.#audit?.append({
-			type: "candidate.created",
+			type: AUDIT_EVENT_TYPES.candidateCreated,
 			target: candidate.id,
 			data: {
 				name: candidate.name,
@@ -435,10 +442,20 @@ var FsAuditLog = class {
 	* 本页范围内的 hash 链必须自洽：逐条重算 hash 并核对与前一行的 `prevHash` 链接，
 	* 任一处对不上以 `GOVERNANCE_FAILED` 报错。范围之外的断链不在本方法职责内——
 	* 那是 `verifyChain()` 的事（全量 O(N) 校验不该压在每次翻页上）。
+	*
+	* 边界语义（0.10.0 复核后固化）：
+	* - `cursor` 是「匹配序列的结束下标」而非稳定指针：翻页间隔内有新事件追加时，
+	*   页间可能漂移一条，属追加型数据的固有边界，调用方不要按「稳定快照」实现导出；
+	* - `tolerateBrokenChain` 打开且本页检测到断链时，`total` 收缩到断点前
+	*   （断点及其之后的记录不再可翻出，页码不会指向空页）；断点在更后面的页时
+	*   本页的 `total` 仍按全量匹配数返回。
 	*/
 	async query(filter = {}) {
 		const path = fileOf$1(this.#root);
-		if (!await this.#fs.exists(path)) return { items: [] };
+		if (!await this.#fs.exists(path)) return {
+			items: [],
+			total: 0
+		};
 		const raw = await this.#fs.readText(path);
 		/** 按文件行序保留（含解析失败的洞）：链校验必须在文件行序上做，不能在筛选结果上做 */
 		const records = [];
@@ -495,6 +512,7 @@ var FsAuditLog = class {
 		}
 		return {
 			items,
+			total: broken !== void 0 ? start + items.length : matched.length,
 			...start > 0 ? { nextCursor: String(start) } : {},
 			...broken !== void 0 ? {
 				chainBrokenAt: broken.at,
@@ -592,7 +610,7 @@ var SkillVersionStore = class {
 			await this.#fs.writeBinary(archivePath, input.archive);
 			version.archivePath = archivePath;
 		}
-		await this.#fs.writeText(`${dirOf(this.#root, skillName)}/${version.versionId}.json`, JSON.stringify(version, null, 2));
+		await atomicWriteText(this.#fs, `${dirOf(this.#root, skillName)}/${version.versionId}.json`, JSON.stringify(version, null, 2));
 		await this.#prune(skillName);
 		return version;
 	}
@@ -734,13 +752,23 @@ const fileOf = (root) => `${root}/.webskill/states.json`;
 /**
 * 用户策略主动拒绝的错误码（FR-12.4）：这是配置生效的证据，不是技能有问题，不计入隔离阈值。
 *
-* 集中在这一份常量里而不散在条件判断里，是为了让「哪些码不计数」只有一个事实源。
+* 集中在这一份常量里而不散在条件判断里，是为了让「哪些策略拒绝码不计数」只有一个事实源。
+* （用户自身原因的豁免码见 `USER_CAUSED_CODES`，两类语义不同，不并在一起。）
 */
 const POLICY_DENIAL_CODES = /* @__PURE__ */ new Set([
 	"NETWORK_BLOCKED",
 	"TOOL_NOT_ALLOWED",
 	"FS_PERMISSION_DENIED"
 ]);
+/**
+* 用户自身原因的错误码（0.10.0 UI-UX5 #49-2）：交互等待超时（用户没处理）与
+* 用户自行取消（ask_user / 交互卡取消）都不是技能的错，不计入隔离阈值。
+*
+* loop 里这两类结局走 RunTerminated 旁路、本来到不了上报口；这里再挡一道，
+* 是因为宿主执行器也可能把「等用户时被取消/超时」包成 ok:false 的失败结果交回来——
+* 「算不算技能的错」的判定口径必须在上报侧只有这一处。
+*/
+const USER_CAUSED_CODES = /* @__PURE__ */ new Set(["RUN_INTERACTION_TIMEOUT", "RUN_CANCELLED"]);
 /** 自动隔离的原因判别式（FR-12.6）；人工隔离仍写自由文本 */
 const QUARANTINE_REASONS = {
 	integrity: "integrity",
@@ -763,7 +791,7 @@ var SkillStatePolicy = class {
 		this.#root = deps.root.replace(/\/+$/, "");
 		this.#fs = deps.fs;
 		this.#audit = deps.audit;
-		this.#failureThreshold = deps.failureThreshold ?? 3;
+		this.#failureThreshold = deps.failureThreshold ?? 5;
 	}
 	async #load() {
 		const path = fileOf(this.#root);
@@ -787,7 +815,7 @@ var SkillStatePolicy = class {
 	async #persist() {
 		const data = await this.#load();
 		const path = fileOf(this.#root);
-		await this.#fs.writeText(path, JSON.stringify(data, null, 2));
+		await atomicWriteText(this.#fs, path, JSON.stringify(data, null, 2));
 		try {
 			this.#loadedMtimeMs = (await this.#fs.stat(path)).mtimeMs;
 		} catch {
@@ -819,7 +847,7 @@ var SkillStatePolicy = class {
 		});
 	}
 	/**
-	* 失败计数；达阈值（默认 3）→ quarantined + 审计。
+	* 失败计数；达阈值（默认 5）→ quarantined + 审计。
 	*
 	* 计数是**连续**而非累计（0.7.0 FR-12.5）：一次成功执行经 `clearFailures` 归零，
 	* `setState(name, 'active')` 同样清零。
@@ -921,9 +949,19 @@ var SkillStatePolicy = class {
 	*/
 	toSkillOutcomeReporter(input = {}) {
 		const denied = input.policyDenialCodes ?? POLICY_DENIAL_CODES;
+		const userCaused = input.userCausedCodes ?? USER_CAUSED_CODES;
 		const actor = input.actor !== void 0 ? { actor: input.actor } : {};
 		return {
 			onSkillFailed: async (report) => {
+				if (userCaused.has(report.code)) {
+					await this.#audit?.append({
+						type: AUDIT_EVENT_TYPES.skillUserCaused,
+						target: report.skillName,
+						...actor,
+						data: { code: report.code }
+					});
+					return;
+				}
 				if (denied.has(report.code)) {
 					await this.#audit?.append({
 						type: AUDIT_EVENT_TYPES.skillPolicyDenied,
@@ -1178,7 +1216,7 @@ var DocumentSkillExtractor = class {
 			documentHash: input.document.hash
 		};
 		await this.#audit?.append({
-			type: "candidate.created",
+			type: AUDIT_EVENT_TYPES.candidateCreated,
 			target: candidate.id,
 			data: {
 				name: candidate.name,
@@ -1231,4 +1269,4 @@ function createMissHook(deps) {
 }
 
 //#endregion
-export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, CANDIDATE_PAGE_SIZE, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };
+export { AUDIT_EVENT_TYPES, AUDIT_EVENT_TYPE_LIST, AUDIT_PAGE_SIZE, AlwaysHumanApprovalPolicy, CANDIDATE_PAGE_SIZE, CandidateStore, CompositeApprovalPolicy, DependencyGraph, DocumentSkillExtractor, EvaluationRunner, FailureAnalyzer, FsAuditLog, LlmCandidateGenerator, POLICY_DENIAL_CODES, QUARANTINE_REASONS, RepairPlanner, SCORING_WEIGHTS, SKILL_VERSION_PAGE_SIZE, SimilarityDetector, SkillScorer, SkillStatePolicy, SkillVersionStore, USER_CAUSED_CODES, candidateToCatalogEntry, completeText, createCandidateSink, createMissHook, jaccardSimilarity, normalizeCandidate, normalizeCandidateFiles, normalizeRisk, parseJsonObject, readDocument, sanitizeCandidateName, suggestFromFailedRun, validateCandidate };

package/dist/{index-P9J2LTfU.d.ts → index-B0QPLWPZ.d.ts}

@@ -1,5 +1,5 @@
-import { E as UiSpecSnapshot, R as JsonSchema, S as UiSpecActionCapability, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, v as RenderBlock, vt as UiSpecNode, x as UiBridge, y as RenderResultRequest } from "./types-B3n0cMZu-BdcqQ35O.js";
-import { k as ExternalToolSource } from "./index-K-eewlGL.js";
+import { B as JsonSchema, C as UiSpecActionCapability, D as UiSpecSnapshot, S as UiBridge, b as RenderResultRequest, bt as UiSpecNode, c as InteractionResponse, r as ChartSpec, s as InteractionRequest, y as RenderBlock } from "./types-CrRcT-LM-DZAp8sWv.js";
+import { k as ExternalToolSource } from "./index-DtFdMKBX.js";
 import { z } from "zod";
 import { ComponentType, ReactNode } from "react";
 //#region ../ui/dist/index.d.ts
@@ -76,6 +76,10 @@ interface SurfaceFormTexts {
   arrayFirstItemOnly: string;
   /** 历史快照（宿主未接 action）的一次性只读说明 */
   readOnlySnapshot: string;
+  /** 建议值的前缀（0.10.0 #48.14：画像建议标签此前只有英文硬编码） */
+  suggested: string;
+  /** 采纳建议值的按钮 */
+  useSuggestion: string;
 }
 /** 可复用的部分取自 DEFAULT_INTERACTION_TEXTS，不另抄一份（AC-G10） */
 declare const DEFAULT_SURFACE_FORM_TEXTS: SurfaceFormTexts;

package/dist/{index-fLskQfAS.d.ts → index-BF4E1a9j.d.ts}

@@ -1,5 +1,5 @@
-import { a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest, x as UiBridge } from "./types-B3n0cMZu-BdcqQ35O.js";
-import { k as ExternalToolSource } from "./index-K-eewlGL.js";
+import { S as UiBridge, a as InteractionOrigin, c as InteractionResponse, s as InteractionRequest } from "./types-CrRcT-LM-DZAp8sWv.js";
+import { k as ExternalToolSource } from "./index-DtFdMKBX.js";
 //#region ../agent/dist/index.d.ts
 //#region src/todo/types.d.ts
 /** 待办条目状态：未开始 / 进行中 / 已完成（FR-3.1） */
@@ -134,6 +134,13 @@ interface SkillGeneratorOptions {
   /** 生成所属会话，写入审计与候选 metadata */
   sessionId?: () => string | undefined;
   now?: () => Date;
+  /** 界面文案注入口：生成器与语言无关，字典在宿主手里（UI-UX5 #9） */
+  messages?: SkillGenerationMessages;
+}
+/** 生成器面向用户的文案；缺省全部为英文模板 */
+interface SkillGenerationMessages {
+  /** 授权确认卡的正文（含技能名与描述插值由实现方完成） */
+  confirmSkill?(draft: GeneratedSkillDraft): string;
 }
 /**
  * 技能自动生成策略。生成动作是策略而不是内核：它不进入 `AgentLoop`，
@@ -622,4 +629,4 @@ declare function createPageActionToolSource(options: PageActionToolSourceOptions
  */
 declare const PAGE_ACTION_SYSTEM_PROMPT: string;
 //#endregion
-export { TodoListener as $, PagePerceptionReader as A, SKILL_GENERATION_SYSTEM_PROMPT as B, PageActionRequest as C, PageAuditSink as D, PageActionUi as E, PerceptionAuditSink as F, SkillGenerator as G, SkillGenerationOutcome as H, PerceptionCaptureOptions as I, SubAgentRunner as J, SkillGeneratorOptions as K, PerceptionRecord as L, ParentBudget as M, PerceivedImage as N, PagePerceptionPolicy as O, PerceivedNode as P, TodoList as Q, PerceptionResult as R, PageActionRecord as S, PageActionToolSourceOptions as T, SkillGenerationPolicy as U, SkillCandidateSink as V, SkillGenerationToolSourceOptions as W, TodoEvent as X, TODO_SYSTEM_PROMPT as Y, TodoItem as Z, PageActionExecutor as _, DelegationOrchestratorOptions as a, createPagePerceptionToolSource as at, PageActionPolicy as b, DelegationToolSourceOptions as c, withDelegationOrigin as ct, ImageCaptureBudget as d, TodoStatus as et, MANAGE_TODO_TOOL as f, PERCEPTION_SYSTEM_PROMPT as g, PERCEIVE_PAGE_TOOL as h, DelegationOrchestrator as i, createPageActionToolSource as it, PagePerceptionToolSourceOptions as j, PagePerceptionPolicyOptions as k, GENERATE_SKILL_TOOL as l, PAGE_ACTION_TOOL as m, DELEGATION_SYSTEM_PROMPT as n, TodoToolSourceOptions as nt, DelegationRequest as o, createSkillGenerationToolSource as ot, PAGE_ACTION_SYSTEM_PROMPT as p, SubAgentRunInput as q, DelegationBudget as r, createDelegationToolSource as rt, DelegationResult as s, createTodoToolSource as st, DELEGATE_TASK_TOOL as t, TodoStore as tt, GeneratedSkillDraft as u, PageActionKind as v, PageActionScope as w, PageActionPolicyOptions as x, PageActionOutcome as y, PerceptionScope as z };
+export { TodoList as $, PagePerceptionReader as A, SKILL_GENERATION_SYSTEM_PROMPT as B, PageActionRequest as C, PageAuditSink as D, PageActionUi as E, PerceptionAuditSink as F, SkillGenerationToolSourceOptions as G, SkillGenerationMessages as H, PerceptionCaptureOptions as I, SubAgentRunInput as J, SkillGenerator as K, PerceptionRecord as L, ParentBudget as M, PerceivedImage as N, PagePerceptionPolicy as O, PerceivedNode as P, TodoItem as Q, PerceptionResult as R, PageActionRecord as S, PageActionToolSourceOptions as T, SkillGenerationOutcome as U, SkillCandidateSink as V, SkillGenerationPolicy as W, TODO_SYSTEM_PROMPT as X, SubAgentRunner as Y, TodoEvent as Z, PageActionExecutor as _, DelegationOrchestratorOptions as a, createPageActionToolSource as at, PageActionPolicy as b, DelegationToolSourceOptions as c, createTodoToolSource as ct, ImageCaptureBudget as d, TodoListener as et, MANAGE_TODO_TOOL as f, PERCEPTION_SYSTEM_PROMPT as g, PERCEIVE_PAGE_TOOL as h, DelegationOrchestrator as i, createDelegationToolSource as it, PagePerceptionToolSourceOptions as j, PagePerceptionPolicyOptions as k, GENERATE_SKILL_TOOL as l, withDelegationOrigin as lt, PAGE_ACTION_TOOL as m, DELEGATION_SYSTEM_PROMPT as n, TodoStore as nt, DelegationRequest as o, createPagePerceptionToolSource as ot, PAGE_ACTION_SYSTEM_PROMPT as p, SkillGeneratorOptions as q, DelegationBudget as r, TodoToolSourceOptions as rt, DelegationResult as s, createSkillGenerationToolSource as st, DELEGATE_TASK_TOOL as t, TodoStatus as tt, GeneratedSkillDraft as u, PageActionKind as v, PageActionScope as w, PageActionPolicyOptions as x, PageActionOutcome as y, PerceptionScope as z };

package/dist/{index-K-eewlGL.d.ts → index-DtFdMKBX.d.ts}

@@ -1,4 +1,4 @@
-import { C as UiSpecDrafts, Ct as WebSkillErrorCode, D as UiSurfaceActionRequest, H as PageQuery, I as FileSystemProvider, P as DiscoveryResult, R as JsonSchema, V as Page, _ as MemoryStore, at as SkillInstallSource, bt as ValidationReport, d as LlmContentPart, f as LlmMessage, g as LlmToolSpec, h as LlmToolCall, i as FormField, it as SkillDocument, l as LlmClient, lt as SkillManifest, m as LlmStreamEvent, n as ArtifactStore, nt as SkillCatalogEntry, o as InteractionPolicy, p as LlmResponse, r as ChartSpec, rt as SkillDiscovery, s as InteractionRequest, t as Artifact, tt as SkillCatalog, u as LlmCompleteInput, v as RenderBlock, vt as UiSpecNode, w as UiSpecEvent, x as UiBridge, y as RenderResultRequest } from "./types-B3n0cMZu-BdcqQ35O.js";
+import { B as JsonSchema, I as DiscoveryResult, O as UiSurfaceActionRequest, R as FileSystemProvider, S as UiBridge, St as ValidationReport, T as UiSpecEvent, Tt as WebSkillErrorCode, U as Page, W as PageQuery, _ as LlmToolSpec, at as SkillDiscovery, b as RenderResultRequest, bt as UiSpecNode, d as LlmContentPart, dt as SkillManifest, f as LlmMessage, g as LlmToolCall, h as LlmTokenUsage, i as FormField, it as SkillCatalogEntry, l as LlmClient, m as LlmStreamEvent, n as ArtifactStore, o as InteractionPolicy, ot as SkillDocument, p as LlmResponse, r as ChartSpec, rt as SkillCatalog, s as InteractionRequest, st as SkillInstallSource, t as Artifact, u as LlmCompleteInput, v as MemoryStore, w as UiSpecDrafts, y as RenderBlock } from "./types-CrRcT-LM-DZAp8sWv.js";
 //#region ../runtime/dist/index.d.ts
 //#region src/llm/parts.d.ts
 /** 纯文本消息内容的构造快捷方式（引擎内部绝大多数消息仍是纯文本） */
@@ -148,6 +148,19 @@ interface AnthropicClientConfig {
   requestTimeoutMs?: number;
   /** max_tokens（Messages API 必填），默认 4096 */
   maxTokens?: number;
+  /**
+   * Extended thinking 开关（预算 token 数）。语义（0.10.0 复核后固化的分层口径）：
+   * - 不设置 ⇒ 完全不请求思考能力（**直连客户端的缺省**）；
+   * - `> 0` 的正整数 ⇒ 启用并透传 `budget_tokens`；
+   * - `<= 0` / 非整数 / 非有限数 ⇒ 一律视为关闭（不发出 thinking 参数，避免供应商 400）。
+   * 经 `createLlmClient` 装配时由工厂层按 `?? 10_000` 默认开启（0.10.0 #40.4），
+   * 与直连客户端的「默认关闭」是同一字段的两层缺省，不互相冲突。
+   * 开启后响应里的 thinking block 解析进 `LlmResponse.thinking`，
+   * 流式路径的 thinking_delta 映射为 `thinking-delta` 事件。
+   * 注意：Anthropic 要求 thinking 开启时不传 temperature（只允许默认值 1），
+   * 本客户端在开启时自动省略 temperature。
+   */
+  thinkingBudgetTokens?: number;
   /**
    * 浏览器直调 opt-in：true 时发送 anthropic-dangerous-direct-browser-access 头
    * （默认 false 不发——仅在明确运行于浏览器且无服务端代理时开启）
@@ -161,7 +174,12 @@ declare class AnthropicClient implements LlmClient {
   complete(input: LlmCompleteInput): Promise<LlmResponse>;
   /** SSE 流式：text_delta → text-delta；input_json_delta 按 block index 聚合 → tool-calls */
   stream(input: LlmCompleteInput): AsyncIterable<LlmStreamEvent>;
-  /** 轻量探测（GET /v1/models），集成测试据此决定 skip */
+  /**
+   * 真实调用路径探测（FR-27.1）：`POST /v1/messages` 最小请求（max_tokens=1），200 即可达。
+   * Anthropic 兼容端点（如 LM Studio 的 /anthropic 层）不实现 `GET /v1/models`，
+   * 用 /models 探测会把「能对话」误判为「不可达」——checkAvailability 的语义从
+   * 「/models 可达」改为「能完成一次真实调用」。
+   */
   checkAvailability(): Promise<boolean>;
 }
 //#endregion
@@ -370,6 +388,11 @@ type ExecuteLifecycleData = {
 } | {
   kind: 'llm-delta';
   delta: string;
+} |
+/** 思考增量（0.10.0 UI-UX5 #32）：流式思考逐段透出；非流式路径一次性补发整段 */
+{
+  kind: 'thinking-delta';
+  delta: string;
 } | {
   kind: 'interaction-resumed';
   interactionId: string;
@@ -439,7 +462,11 @@ type LifecycleHook = (ctx: LifecycleHookContext) => Promise<void | {
 }>;
 //#endregion
 //#region src/trace/types.d.ts
-type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'ui.degraded' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
+type TraceEventType = 'skill.routed' | 'skill.activated' | 'skill.integrity-failed' | 'llm.request' | 'llm.response' |
+/** 一轮模型调用产出的一段思考正文（data.text；每轮至多一条，UI-UX5 #32） */
+'llm.thinking' |
+/** 一轮模型调用的 token 用量（data.inputTokens/outputTokens；上游不回报则无此事件，UI-UX5 #47） */
+'llm.usage' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.denied' | 'artifact.created' | 'ui.requested' | 'ui.resumed' | 'ui.surface-action.requested' | 'ui.surface-action.resolved' | 'ui.rendered' | 'ui.degraded' | 'todo.created' | 'todo.updated' | 'todo.cleared' | 'run.warning' | 'run.completed' | 'run.cancelled' | 'run.failed' | 'run.resumed';
 interface TraceEvent {
   id: string;
   runId: string;
@@ -460,7 +487,7 @@ interface AgentLoopConfig {
   temperature?: number;
   /** 设为 'off' 时完成 run 不调用 uiBridge.renderResult */
   renderResult?: 'off';
-  /** 工具结果回喂上限（字节，默认 100_000；超长头尾保留 + 完整内容落 artifact） */
+  /** 工具结果回喂上限（字节，默认 256_000；超长头尾保留 + 完整内容落 artifact） */
   toolResultMaxBytes?: number;
   /** session paramHistory 保留条数上限（默认 50，超出裁最旧） */
   paramHistoryLimit?: number;
@@ -1331,8 +1358,8 @@ declare class AgentLoop {
  */
 declare const DEFAULT_LOOP_LIMITS: {
   readonly maxTurns: 10;
-  readonly totalTimeoutMs: 120000;
-  readonly toolTimeoutMs: 30000;
+  readonly totalTimeoutMs: 3600000;
+  readonly toolTimeoutMs: 600000;
 };
 /**
  * 触顶类失败（`RUN_TIMEOUT` / `RUN_MAX_TURNS_EXCEEDED`）记进 `run.failed`
@@ -1488,6 +1515,12 @@ interface RunTraceSummary {
   turnCount: number;
   /** endedAt - startedAt，无 endedAt 或时间戳不可解析时缺省 */
   durationMs?: number;
+  /**
+   * 本 run 各轮 `llm.usage` 事件的 token 聚合（0.10.0 UI-UX5 #47）。
+   * 全 run 无 usage 上报（旧 trace、不支持统计的上游）时缺省——
+   * 消费方据「有没有」决定要不要展示，不显示假数据。
+   */
+  usage?: LlmTokenUsage;
 }
 /** @stable */
 interface RunTraceFilter {
@@ -1561,6 +1594,11 @@ interface RunToolCall {
   args?: string;
   /** 执行耗时 ms */
   durationMs?: number;
+  /**
+   * 开始时刻（trace `tool.started` 的 ts，ISO）。思考卡片与工具卡片按时间
+   * 穿插（UI-UX5 #32）需要一个共同时钟；旧 trace 没有 started 事件时缺省。
+   */
+  startedAt?: string;
   /**
    * failed 时的结构化错误码（如 `TOOL_NOT_ALLOWED`）。
    * 消费方据此区分「被策略拒绝」与「执行出错」，不必解析 message 文案。
@@ -1580,6 +1618,30 @@ interface RunToolCall {
  */
 declare function summarizeToolCalls(run: RuntimeRun): RunToolCall[];
 //#endregion
+//#region src/engine/usage.d.ts
+/**
+ * 一次 run 的大模型用量聚合（0.10.0 UI-UX5 #47）。
+ * 从 trace 事件推导，不落第二份数据：llm.request 计请求次数，llm.usage 计 token。
+ * @stable
+ */
+interface RunUsageSummary {
+  /** llm.request 事件数：本 run 向大模型发送请求的次数（与 RunTraceSummary.turnCount 同源） */
+  llmCalls: number;
+  /**
+   * 各轮 llm.usage 的输入 token 合计。全 run 没有任何 usage 上报时缺省——
+   * 「上游不支持统计」与「恰好为零」必须可区分，消费方缺省时不显示假数据。
+   */
+  inputTokens?: number;
+  /** 各轮 llm.usage 的输出 token 合计；缺省语义同 inputTokens */
+  outputTokens?: number;
+}
+/**
+ * 从 run 的 trace 聚合大模型用量（请求次数 + 输入/输出 token）。
+ * 与 `summarizeToolCalls` 同型：消费方不再各自遍历 trace。
+ * @stable
+ */
+declare function summarizeRunUsage(trace: readonly TraceEvent[]): RunUsageSummary;
+//#endregion
 //#region src/engine/session.d.ts
 declare const SESSION_SCHEMA_VERSION = 1;
 /** `FsSessionStore` 的缺省页长。缺省值属于实现，不属于调用方——否则「下推」只推了一半 */
@@ -1692,4 +1754,4 @@ declare class FsSessionStore<TMessage = unknown> implements SessionStore<TMessag
   delete(id: string): Promise<void>;
 }
 //#endregion
-export { READ_SKILL_FILE_INPUT_SCHEMA as $, scriptToolName as $n, TraceRecorder as $t, FS_SESSION_PAGE_SIZE as A, interruptedToolResult as An, SerializingMemoryStore as At, HookRunnerOptions as B, normalizeToolError as Bn, SkillScriptSchemaSource as Bt, DEFAULT_LOOP_LIMITS as C, extractChartSpec as Cn, SESSION_SCHEMA_VERSION as Ct, ExecuteLifecycleData as D, formatSkillScriptManifest as Dn, SealOptions as Dt, EventBus as E, findUnpairedToolCalls as En, ScriptExecutor as Et, FsSessionStore as F, mergeProfileEntries as Fn, SkillFailureReport as Ft, LifecycleEventInit as G, readProfileEntries as Gn, TodoTraceEvent as Gt, IntegrityVerdict as H, parseUserProfileExport as Hn, SkillSuccessReport as Ht, FullDisclosureRouter as I, networkPolicyLibSource as In, SkillIntegrityGuard as It, LifecycleListener as J, renderUserProfileContext as Jn, ToolResolution as Jt, LifecycleHook as K, readUserProfile as Kn, ToolContent as Kt, GoogleGenAiClient as L, networkUrlHost as Ln, SkillOutcomeReporter as Lt, FsMemoryStore as M, isUnsupportedRunSnapshot as Mn, SessionMeta as Mt, FsRunSnapshotStore as N, listSkillScripts as Nn, SessionRecord as Nt, ExternalSkillProvider as O, fromVercelResult as On, SealRecord as Ot, FsRunTraceStore as P, mergeCatalogEntries as Pn, SessionStore as Pt, ProgressiveRouter as Q, schemaToForm as Qn, TraceEventType as Qt, GoogleGenAiClientConfig as R, normalizeErrorCode as Rn, SkillRouter as Rt, CapabilityMode as S, exportUserProfile as Sn, RuntimeSessionHandle as St, EMPTY_USER_PROFILE as T, extractUiSpecEvents as Tn, ScriptExecutionContext as Tt, InteractLifecycleData as U, partsToText as Un, TerminalLifecycleData as Ut, InstalledSkillManifest as V, parseBridgeRequest as Vn, SkillStateGuard as Vt, LifecycleEvent as W, readBehaviorRecords as Wn, TextualToolContent as Wt, OpenAiCompatibleClient as X, sampleBehaviorRecords as Xn, TraceClock as Xt, NetworkPolicy as Y, resolveToolName as Yn, ToolResult as Yt, OpenAiCompatibleClientConfig as Z, schemaSourceLabel as Zn, TraceEvent as Zt, BridgeCapabilities as _, bridgeError as _n, RunTraceStore as _t, ActivateLifecycleData as a, UnsupportedRunSnapshot as an, toVercelToolSpecs as ar, RouteLifecycleData as at, BridgeResponse as b, createWebSkillApi as bn, RuntimeRun as bt, AgentLoopDeps as c, UserProfileExport as cn, RunResult as ct, ApprovalDecision as d, VercelToolSpec as dn, RunSnapshotStore as dt, USER_PROFILE_EXPORT_VERSION as en, sealToolCallPairs as er, READ_SKILL_FILE_TOOL as et, ApprovalScope as f, WebSkillApi as fn, RunTerminationReason as ft, BehaviorScene as g, applyUserProfileImport as gn, RunTraceMetrics as gt, BehaviorRecordKind as h, appendBehaviorRecords as hn, RunTraceFilter as ht, ASK_USER_TOOL_NAME as i, USER_PROFILE_REFINE_PROMPT as in, toRecordDigests as ir, RefineUserProfileInput as it, FsArtifactStore as j, isNetworkAllowed as jn, SessionListPage as jt, ExternalToolSource as k, fromVercelStreamPart as kn, SealResult as kt, AnthropicClient as l, UserProfileImportDiff as ln, RunSnapshot as lt, BehaviorRecord as m, WebSkillRuntimeDeps as mn, RunTraceFile as mt, ASK_USER_INPUT_SCHEMA as n, USER_PROFILE_NO_INVENTION_RULE as nn, textParts as nr, RUN_SNAPSHOT_SCHEMA_VERSION as nt, AgentLoop as o, UserProfile as on, validateUiSpecEvent as or, RouteResult as ot, BEHAVIOR_RECORDS_KEY as p, WebSkillRuntime as pn, RunToolCall as pt, LifecycleHookContext as q, refineUserProfile as qn, ToolDefinition as qt, ASK_USER_TOOL as r, USER_PROFILE_PROMPT_HEADER as rn, toLlmToolSpec as rr, RUN_TRACE_SCHEMA_VERSION as rt, AgentLoopConfig as s, UserProfileEntry as sn, validateUiSpecNode as sr, RunLimitErrorDetails as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, USER_PROFILE_KEY as tn, summarizeToolCalls as tr, READ_SKILL_FILE_TOOL_NAME as tt, AnthropicClientConfig as u, UserProfileLimits as un, RunSnapshotListEntry as ut, BridgeCapability as v, buildRenderResult as vn, RunTraceSummary as vt, DEFAULT_USER_PROFILE_LIMITS as w, extractTodoTraceEvents as wn, SchemaInferer as wt, CapabilityApproval as x, diffUserProfile as xn, RuntimeSession as xt, BridgeRequest as y, createScriptContext as yn, RuntimePhase as yt, HookRunner as z, normalizeToolContent as zn, SkillScriptDescriptor as zt };
+export { READ_SKILL_FILE_INPUT_SCHEMA as $, schemaToForm as $n, TraceEventType as $t, FS_SESSION_PAGE_SIZE as A, fromVercelStreamPart as An, SealResult as At, HookRunnerOptions as B, normalizeToolContent as Bn, SkillScriptDescriptor as Bt, DEFAULT_LOOP_LIMITS as C, exportUserProfile as Cn, RuntimeSessionHandle as Ct, ExecuteLifecycleData as D, findUnpairedToolCalls as Dn, ScriptExecutor as Dt, EventBus as E, extractUiSpecEvents as En, ScriptExecutionContext as Et, FsSessionStore as F, mergeCatalogEntries as Fn, SessionStore as Ft, LifecycleEventInit as G, readBehaviorRecords as Gn, TextualToolContent as Gt, IntegrityVerdict as H, parseBridgeRequest as Hn, SkillStateGuard as Ht, FullDisclosureRouter as I, mergeProfileEntries as In, SkillFailureReport as It, LifecycleListener as J, refineUserProfile as Jn, ToolDefinition as Jt, LifecycleHook as K, readProfileEntries as Kn, TodoTraceEvent as Kt, GoogleGenAiClient as L, networkPolicyLibSource as Ln, SkillIntegrityGuard as Lt, FsMemoryStore as M, isNetworkAllowed as Mn, SessionListPage as Mt, FsRunSnapshotStore as N, isUnsupportedRunSnapshot as Nn, SessionMeta as Nt, ExternalSkillProvider as O, formatSkillScriptManifest as On, SealOptions as Ot, FsRunTraceStore as P, listSkillScripts as Pn, SessionRecord as Pt, ProgressiveRouter as Q, schemaSourceLabel as Qn, TraceEvent as Qt, GoogleGenAiClientConfig as R, networkUrlHost as Rn, SkillOutcomeReporter as Rt, CapabilityMode as S, diffUserProfile as Sn, RuntimeSession as St, EMPTY_USER_PROFILE as T, extractTodoTraceEvents as Tn, SchemaInferer as Tt, InteractLifecycleData as U, parseUserProfileExport as Un, SkillSuccessReport as Ut, InstalledSkillManifest as V, normalizeToolError as Vn, SkillScriptSchemaSource as Vt, LifecycleEvent as W, partsToText as Wn, TerminalLifecycleData as Wt, OpenAiCompatibleClient as X, resolveToolName as Xn, ToolResult as Xt, NetworkPolicy as Y, renderUserProfileContext as Yn, ToolResolution as Yt, OpenAiCompatibleClientConfig as Z, sampleBehaviorRecords as Zn, TraceClock as Zt, BridgeCapabilities as _, applyUserProfileImport as _n, RunTraceStore as _t, ActivateLifecycleData as a, USER_PROFILE_REFINE_PROMPT as an, toLlmToolSpec as ar, RouteLifecycleData as at, BridgeResponse as b, createScriptContext as bn, RuntimePhase as bt, AgentLoopDeps as c, UserProfileEntry as cn, validateUiSpecEvent as cr, RunResult as ct, ApprovalDecision as d, UserProfileLimits as dn, RunSnapshotStore as dt, TraceRecorder as en, scriptToolName as er, READ_SKILL_FILE_TOOL as et, ApprovalScope as f, VercelToolSpec as fn, RunTerminationReason as ft, BehaviorScene as g, appendBehaviorRecords as gn, RunTraceMetrics as gt, BehaviorRecordKind as h, WebSkillRuntimeDeps as hn, RunTraceFilter as ht, ASK_USER_TOOL_NAME as i, USER_PROFILE_PROMPT_HEADER as in, textParts as ir, RefineUserProfileInput as it, FsArtifactStore as j, interruptedToolResult as jn, SerializingMemoryStore as jt, ExternalToolSource as k, fromVercelResult as kn, SealRecord as kt, AnthropicClient as l, UserProfileExport as ln, validateUiSpecNode as lr, RunSnapshot as lt, BehaviorRecord as m, WebSkillRuntime as mn, RunTraceFile as mt, ASK_USER_INPUT_SCHEMA as n, USER_PROFILE_KEY as nn, summarizeRunUsage as nr, RUN_SNAPSHOT_SCHEMA_VERSION as nt, AgentLoop as o, UnsupportedRunSnapshot as on, toRecordDigests as or, RouteResult as ot, BEHAVIOR_RECORDS_KEY as p, WebSkillApi as pn, RunToolCall as pt, LifecycleHookContext as q, readUserProfile as qn, ToolContent as qt, ASK_USER_TOOL as r, USER_PROFILE_NO_INVENTION_RULE as rn, summarizeToolCalls as rr, RUN_TRACE_SCHEMA_VERSION as rt, AgentLoopConfig as s, UserProfile as sn, toVercelToolSpecs as sr, RunLimitErrorDetails as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, USER_PROFILE_EXPORT_VERSION as tn, sealToolCallPairs as tr, READ_SKILL_FILE_TOOL_NAME as tt, AnthropicClientConfig as u, UserProfileImportDiff as un, RunSnapshotListEntry as ut, BridgeCapability as v, bridgeError as vn, RunTraceSummary as vt, DEFAULT_USER_PROFILE_LIMITS as w, extractChartSpec as wn, SESSION_SCHEMA_VERSION as wt, CapabilityApproval as x, createWebSkillApi as xn, RuntimeRun as xt, BridgeRequest as y, buildRenderResult as yn, RunUsageSummary as yt, HookRunner as z, normalizeErrorCode as zn, SkillRouter as zt };