@webskill/sdk 0.9.0 → 0.11.0

package/dist/index.js

@@ -1,6 +1,6 @@
 import { A as jsonRenderer, B as resolveArchiveLimits, C as computeDigest, D as exportSkills, E as escapeXml, F as parseSkillPackManifest, G as unzipWithLimits, H as signSkill, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, N as normalizePath, O as isAtomicTempPath, P as parseSkillMarkdown, R as renderAvailableSkillsXml, S as checkSkillRules, T as detectSkillArchiveShapeFromFs, U as signaturePayloadBytes, V as resolveInsideRoot, W as stripArchiveRoot, Y as xmlRenderer, _ as assertSafePathSegment, a as MemoryFS, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, f as SKILL_SIGNATURE_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, j as keyIdOf, k as isValidSkillName, l as SKILL_NAME_MAX_LENGTH, m as SkillReader, n as DEFAULT_ARCHIVE_LIMITS, o as SIGNATURE_SCHEMA_VERSION, p as SkillDiscovery, q as verifyManifest, r as FsTrustedKeyStore, s as SKILLS_LOCKFILE, t as ATOMIC_TMP_SUFFIX_PATTERN, u as SKILL_NAME_PATTERN, v as atomicWriteText, w as detectSkillArchiveShape, x as checkDependencyCycles, y as buildCatalog, z as renderCatalogJson } from "./dist-Bev6i6Ip.js";
 import { a as textParts, n as partsToText } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
-import { $ as fromVercelStreamPart, A as SerializingMemoryStore, B as bridgeError, C as ProgressiveRouter, Ct as sealToolCallPairs, D as RUN_SNAPSHOT_SCHEMA_VERSION, Dt as toVercelToolSpecs, E as READ_SKILL_FILE_TOOL_NAME, Et as toRecordDigests, F as USER_PROFILE_PROMPT_HEADER, G as exportUserProfile, H as createScriptContext, I as USER_PROFILE_REFINE_PROMPT, J as extractTodoTraceEvents, K as extractChartSpec, L as WebSkillRuntime, M as USER_PROFILE_EXPORT_VERSION, N as USER_PROFILE_KEY, O as RUN_TRACE_SCHEMA_VERSION, Ot as validateUiSpecEvent, P as USER_PROFILE_NO_INVENTION_RULE, Q as fromVercelResult, R as appendBehaviorRecords, S as OpenAiCompatibleClient, St as scriptToolName, T as READ_SKILL_FILE_TOOL, Tt as toLlmToolSpec, U as createWebSkillApi, V as buildRenderResult, W as diffUserProfile, X as findUnpairedToolCalls, Y as extractUiSpecEvents, Z as formatSkillScriptManifest, _ as FsRunTraceStore, _t as renderUserProfileContext, a as AgentLoop, at as mergeProfileEntries, b as GoogleGenAiClient, bt as schemaSourceLabel, c as CapabilityApproval, ct as normalizeErrorCode, d as EMPTY_USER_PROFILE, dt as parseBridgeRequest, et as interruptedToolResult, f as EventBus, ft as parseUserProfileExport, g as FsRunSnapshotStore, gt as refineUserProfile, h as FsMemoryStore, ht as readUserProfile, i as ASK_USER_TOOL_NAME, it as mergeCatalogEntries, j as TraceRecorder, k as SESSION_SCHEMA_VERSION, kt as validateUiSpecNode, l as DEFAULT_LOOP_LIMITS, lt as normalizeToolContent, m as FsArtifactStore, mt as readProfileEntries, n as ASK_USER_INPUT_SCHEMA, nt as isUnsupportedRunSnapshot, o as AnthropicClient, ot as networkPolicyLibSource, p as FS_SESSION_PAGE_SIZE, pt as readBehaviorRecords, q as extractSkillCandidate, r as ASK_USER_TOOL, rt as listSkillScripts, s as BEHAVIOR_RECORDS_KEY, st as networkUrlHost, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as isNetworkAllowed, u as DEFAULT_USER_PROFILE_LIMITS, ut as normalizeToolError, v as FsSessionStore, vt as resolveToolName, w as READ_SKILL_FILE_INPUT_SCHEMA, wt as summarizeToolCalls, x as HookRunner, xt as schemaToForm, y as FullDisclosureRouter, yt as sampleBehaviorRecords, z as applyUserProfileImport } from "./dist-CFmkV45C.js";
+import { $ as createWebSkillApi, A as READ_LINKED_DOCUMENT_TOOL_NAME, At as schemaSourceLabel, B as TraceRecorder, Bt as validateUiSpecNode, C as FsSessionStore, Ct as readBehaviorRecords, D as OpenAiCompatibleClient, Dt as renderUserProfileContext, E as HookRunner, Et as refineUserProfile, F as RUN_TRACE_SCHEMA_VERSION, Ft as summarizeToolCalls, G as USER_PROFILE_PROMPT_HEADER, H as USER_PROFILE_EXPORT_VERSION, I as SESSION_SCHEMA_VERSION, It as toLlmToolSpec, J as appendBehaviorRecords, K as USER_PROFILE_REFINE_PROMPT, L as SUPPORTED_DOCUMENT_MIME, Lt as toRecordDigests, M as READ_SKILL_FILE_TOOL, Mt as scriptToolName, N as READ_SKILL_FILE_TOOL_NAME, Nt as sealToolCallPairs, O as ProgressiveRouter, Ot as resolveToolName, P as RUN_SNAPSHOT_SCHEMA_VERSION, Pt as summarizeRunUsage, Q as createScriptContext, R as SerializingMemoryStore, Rt as toVercelToolSpecs, S as FsRunTraceStore, St as parseUserProfileExport, T as GoogleGenAiClient, Tt as readUserProfile, U as USER_PROFILE_KEY, V as UNSUPPORTED_DOCUMENT_MESSAGE, W as USER_PROFILE_NO_INVENTION_RULE, X as bridgeError, Y as applyUserProfileImport, Z as buildRenderResult, _ as EventBus, _t as networkUrlHost, a as ASK_USER_TOOL, at as extractUiSpecEvents, b as FsMemoryStore, bt as normalizeToolError, c as AnthropicClient, ct as fromVercelResult, d as DEFAULT_LOOP_LIMITS, dt as isNetworkAllowed, et as diffUserProfile, f as DEFAULT_MAX_DATA_SOURCE_BYTES, ft as isUnsupportedRunSnapshot, g as EMPTY_USER_PROFILE, gt as networkPolicyLibSource, h as DEFAULT_USER_PROFILE_LIMITS, ht as mergeProfileEntries, i as ASK_USER_MAX_FIELDS, it as extractTodoTraceEvents, j as READ_SKILL_FILE_INPUT_SCHEMA, jt as schemaToForm, k as READ_LINKED_DOCUMENT_TOOL, kt as sampleBehaviorRecords, l as BEHAVIOR_RECORDS_KEY, lt as fromVercelStreamPart, m as DEFAULT_MAX_DOCUMENT_TEXT_BYTES, mt as mergeCatalogEntries, n as ASK_USER_FIELD_TYPES, nt as extractChartSpec, o as ASK_USER_TOOL_NAME, ot as findUnpairedToolCalls, p as DEFAULT_MAX_DOCUMENT_BYTES, pt as listSkillScripts, q as WebSkillRuntime, r as ASK_USER_INPUT_SCHEMA, rt as extractSkillCandidate, s as AgentLoop, st as formatSkillScriptManifest, t as ALLOWED_TOOLS_EXCLUSION_REASON, tt as exportUserProfile, u as CapabilityApproval, ut as interruptedToolResult, v as FS_SESSION_PAGE_SIZE, vt as normalizeErrorCode, w as FullDisclosureRouter, wt as readProfileEntries, x as FsRunSnapshotStore, xt as parseBridgeRequest, y as FsArtifactStore, yt as normalizeToolContent, z as TEXT_BUDGETED_CONTENT_TYPES, zt as validateUiSpecEvent } from "./dist-B-cOu08W.js";
 
 //#region src/version.ts
 /** Generated by scripts/syncVersionConstant.mjs from packages/sdk/package.json. Do not edit by hand. */
@@ -8,7 +8,7 @@ import { $ as fromVercelStreamPart, A as SerializingMemoryStore, B as bridgeErro
 * Version of the published `@webskill/sdk` package, injected at build time.
 * @stable
 */
-const SDK_VERSION = "0.9.0";
+const SDK_VERSION = "0.11.0";
 
 //#endregion
-export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_INPUT_SCHEMA, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SerializingMemoryStore, SkillDiscovery, SkillReader, TraceRecorder, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };
+export { ALLOWED_TOOLS_EXCLUSION_REASON, ASK_USER_FIELD_TYPES, ASK_USER_INPUT_SCHEMA, ASK_USER_MAX_FIELDS, ASK_USER_TOOL, ASK_USER_TOOL_NAME, ATOMIC_TMP_SUFFIX_PATTERN, AgentLoop, AnthropicClient, BEHAVIOR_RECORDS_KEY, CapabilityApproval, DEFAULT_ARCHIVE_LIMITS, DEFAULT_LOOP_LIMITS, DEFAULT_MAX_DATA_SOURCE_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, DEFAULT_MAX_DOCUMENT_TEXT_BYTES, DEFAULT_USER_PROFILE_LIMITS, EMPTY_USER_PROFILE, EventBus, FS_SESSION_PAGE_SIZE, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsTrustedKeyStore, FullDisclosureRouter, GoogleGenAiClient, HookRunner, MANIFEST_EXCLUDED_FILES, MemoryFS, OpenAiCompatibleClient, ProgressiveRouter, READ_LINKED_DOCUMENT_TOOL, READ_LINKED_DOCUMENT_TOOL_NAME, READ_SKILL_FILE_INPUT_SCHEMA, READ_SKILL_FILE_TOOL, READ_SKILL_FILE_TOOL_NAME, RUN_SNAPSHOT_SCHEMA_VERSION, RUN_TRACE_SCHEMA_VERSION, SDK_VERSION, SESSION_SCHEMA_VERSION, SIGNATURE_SCHEMA_VERSION, SKILLS_LOCKFILE, SKILL_MANIFEST_FILE, SKILL_NAME_MAX_LENGTH, SKILL_NAME_PATTERN, SKILL_PACK_FILE, SKILL_SIGNATURE_FILE, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, SkillReader, TEXT_BUDGETED_CONTENT_TYPES, TraceRecorder, UNSUPPORTED_DOCUMENT_MESSAGE, USER_PROFILE_EXPORT_VERSION, USER_PROFILE_KEY, USER_PROFILE_NO_INVENTION_RULE, USER_PROFILE_PROMPT_HEADER, USER_PROFILE_REFINE_PROMPT, WebSkillError, WebSkillRuntime, appendBehaviorRecords, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, bridgeError, buildCatalog, buildManifest, buildRenderResult, checkDependencyCycles, checkSkillRules, computeDigest, createScriptContext, createWebSkillApi, detectSkillArchiveShape, detectSkillArchiveShapeFromFs, diffUserProfile, escapeXml, exportSkills, exportUserProfile, extractChartSpec, extractSkillCandidate, extractTodoTraceEvents, extractUiSpecEvents, findUnpairedToolCalls, formatSkillScriptManifest, fromVercelResult, fromVercelStreamPart, interruptedToolResult, isAtomicTempPath, isNetworkAllowed, isUnsupportedRunSnapshot, isValidSkillName, jsonRenderer, keyIdOf, listSkillScripts, mergeCatalogEntries, mergeProfileEntries, messageOf, networkPolicyLibSource, networkUrlHost, normalizeErrorCode, normalizePath, normalizeToolContent, normalizeToolError, parseBridgeRequest, parseSkillMarkdown, parseSkillPackManifest, parseUserProfileExport, partsToText, readBehaviorRecords, readProfileEntries, readResponseWithLimit, readSkillSignature, readUserProfile, refineUserProfile, renderAvailableSkillsXml, renderCatalogJson, renderUserProfileContext, resolveArchiveLimits, resolveInsideRoot, resolveToolName, sampleBehaviorRecords, schemaSourceLabel, schemaToForm, scriptToolName, sealToolCallPairs, signSkill, signaturePayloadBytes, stripArchiveRoot, summarizeRunUsage, summarizeToolCalls, textParts, toLlmToolSpec, toRecordDigests, toVercelToolSpecs, unzipWithLimits, validateSkills, validateUiSpecEvent, validateUiSpecNode, verifyManifest, verifySkillSignature, xmlRenderer };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
-import { at as SkillDocument, g as LlmToolSpec, rt as SkillCatalogEntry, z as JsonSchema } from "./types-B3n0cMZu-BDhheIhX.js";
-import { O as ExternalSkillProvider, Pn as mergeCatalogEntries, Yt as ToolResult, k as ExternalToolSource } from "./index-znZjobkr.js";
+import { B as JsonSchema, _ as LlmToolSpec, it as SkillCatalogEntry, ot as SkillDocument } from "./types-C26b05fW-CdrRCRDb.js";
+import { F as ExternalToolSource, P as ExternalSkillProvider, qn as mergeCatalogEntries, sn as ToolResult } from "./index-D3mONFHD.js";
 import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -141,8 +141,26 @@ declare class McpToolResolver {
  */
 declare function endpointToolLlmName(endpoint: string, toolName: string): string;
 declare function parseEndpointToolLlmName(endpoint: string, llmName: string): string | undefined;
-declare function webMcpToolLlmName(toolName: string): string;
-declare function parseWebMcpToolLlmName(llmName: string): string | undefined;
+/**
+ * 来源标识的长度上限（分册 26 §2.2）。
+ *
+ * 前缀计入工具名，而工具名进**每一次**请求 —— 长 sourceId 是持续成本。
+ * 装配期校验并给出可读错误，比运行时被 provider 拒掉好查。
+ */
+declare const WEB_MCP_SOURCE_ID_MAX = 24;
+/**
+ * WebMCP 工具的 LLM 可见名。
+ *
+ * 多来源时带来源前缀（FR-26.2）：三个文档都注册 `get_current_date` 是常态，
+ * 「首个来源优先」是**静默歧义** —— 模型选中的到底是哪个，谁也说不清。
+ * 不传 sourceId 时保持 0.10.0 的旧名，单来源宿主无感。
+ */
+declare function webMcpToolLlmName(toolName: string, sourceId?: string): string;
+/** 解析回 `{ sourceId?, toolName }`；旧名（无来源段）解析出 `sourceId: undefined` */
+declare function parseWebMcpToolLlmName(llmName: string, sourceIds?: readonly string[]): {
+  sourceId?: string;
+  toolName: string;
+} | undefined;
 //#endregion
 //#region src/skills/temporarySkillProvider.d.ts
 /**
@@ -241,8 +259,14 @@ interface WebMcpToolDescriptor {
  */
 declare class ExperimentalWebMcpAdapter {
   #private;
+  /**
+   * 多来源时的消歧标识（分册 26 FR-26.2）。不设即沿用 0.10.0 的旧工具名，
+   * 单来源宿主无感；**两个以上来源必须各自设**，否则同名工具会撞车。
+   */
+  readonly sourceId?: string;
   constructor(api?: BrowserModelContextLike | (() => BrowserModelContextLike | undefined), options?: {
     enabled?: boolean;
+    sourceId?: string;
   });
   /**
    * 宿主能力检测（FR-19.2/19.4）：**只**看 `document.modelContext.executeTool` 是否存在，
@@ -264,6 +288,23 @@ declare class ExperimentalWebMcpAdapter {
 }
 //#endregion
 //#region src/plugin/mcpRuntimePlugin.d.ts
+/**
+ * 工具可见性策略（0.10.0 UI-UX5 #50.3）：端点禁用 ∨ 工具禁用 ⇒ 不进 LLM tool spec，
+ * 调用侧同样拦截（模型找不到这些工具）。各判定缺省视为启用。
+ * 回调每次 listToolSpecs/call 实时求值，宿主改状态不需要重建插件。
+ */
+interface McpToolVisibility {
+  /** 端点级开关；返回 false 时该端点所有工具对大模型不可见 */
+  isEndpointEnabled?(endpoint: string): boolean;
+  /** 端点工具级开关；返回 false 时该工具对大模型不可见 */
+  isEndpointToolEnabled?(endpoint: string, tool: string): boolean;
+  /** WebMCP 工具级开关；返回 false 时该工具对大模型不可见 */
+  /**
+   * 两级启停（FR-26.3，与端点/工具同款）：`sourceId` 为空即整个来源那一组。
+   * 宿主按来源关 → 该组全灭；按工具关 → 只灭一个。
+   */
+  isWebMcpToolEnabled?(tool: string, sourceId?: string): boolean;
+}
 /**
  * runtime 扩展点实现：endpoint 注册表 + WebMCP adapter 一处装配。
  * LLM 可见名：endpoint__tool / mcp__tool；call 时反向映射。
@@ -273,8 +314,10 @@ declare class McpRuntimePlugin implements ExternalToolSource {
   readonly kind = "mcp";
   constructor(deps: {
     registry: EndpointRegistry<McpClientLike>;
-    webMcp?: ExperimentalWebMcpAdapter;
+    webMcp?: readonly ExperimentalWebMcpAdapter[];
     resolver?: McpToolResolver;
+    /** 工具可见性策略（端点/工具级启停）；缺省全部可见 */
+    visibility?: McpToolVisibility;
     /** 已知的 endpoint 名（注销后仍按 MCP_ENDPOINT_UNAVAILABLE 响应，而非 TOOL_NOT_FOUND） */
     endpoints?: string[];
     /** endpoint 不可用时的告警出口（默认 console.warn） */
@@ -428,4 +471,4 @@ interface RemoteEndpointHandle {
  */
 declare function connectRemoteEndpoint(registry: EndpointRegistry<McpClientLike>, config: RemoteEndpointConfig): Promise<RemoteEndpointHandle>;
 //#endregion
-export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { type BrowserModelContextLike, EndpointRegistry, ExperimentalWebMcpAdapter, type McpClientLike, type McpOAuthClient, type McpOAuthConfig, type McpOAuthHandshake, type McpOAuthHandshakeStore, type McpOAuthProvider, type McpOAuthStage, type McpOAuthTokenStore, type McpOAuthTokens, McpRuntimePlugin, McpToolResolver, type McpToolVisibility, MessageChannelTransport, type MessageChannelTransportOptions, type MessagePortLike, type RemoteEndpointConfig, type RemoteEndpointHandle, type ServedSkill, TemporarySkillProvider, type TransportState, WEB_MCP_SOURCE_ID_MAX, type WebMcpToolDescriptor, type WebMcpToolLike, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { M as messageOf, g as assertRemoteUrlAllowed, h as WebSkillError } from "./dist-Bev6i6Ip.js";
-import { it as mergeCatalogEntries, lt as normalizeToolContent } from "./dist-CFmkV45C.js";
+import { mt as mergeCatalogEntries, yt as normalizeToolContent } from "./dist-B-cOu08W.js";
 
 //#region ../mcp/dist/index.js
 /**
@@ -249,6 +249,11 @@ var McpToolResolver = class {
 			return failure$1("TOOL_EXECUTION_FAILED", text || "MCP tool returned an error");
 		}
 		for (const item of content) if (item.text !== void 0 && item.text.length > MAX_MCP_RESULT_TEXT_BYTES) item.text = `${item.text.slice(0, MAX_MCP_RESULT_TEXT_BYTES)}…[truncated ${item.text.length - MAX_MCP_RESULT_TEXT_BYTES} chars]`;
+		const structured = result?.structuredContent;
+		if (typeof structured === "object" && structured !== null) content.push({
+			type: "json",
+			data: structured
+		});
 		return {
 			ok: true,
 			content
@@ -267,11 +272,35 @@ function parseEndpointToolLlmName(endpoint, llmName) {
 	const prefix = `${endpoint}__`;
 	return llmName.startsWith(prefix) && llmName.length > prefix.length ? llmName.slice(prefix.length) : void 0;
 }
-function webMcpToolLlmName(toolName) {
-	return `mcp__${toolName}`;
+/**
+* 来源标识的长度上限（分册 26 §2.2）。
+*
+* 前缀计入工具名，而工具名进**每一次**请求 —— 长 sourceId 是持续成本。
+* 装配期校验并给出可读错误，比运行时被 provider 拒掉好查。
+*/
+const WEB_MCP_SOURCE_ID_MAX = 24;
+/**
+* WebMCP 工具的 LLM 可见名。
+*
+* 多来源时带来源前缀（FR-26.2）：三个文档都注册 `get_current_date` 是常态，
+* 「首个来源优先」是**静默歧义** —— 模型选中的到底是哪个，谁也说不清。
+* 不传 sourceId 时保持 0.10.0 的旧名，单来源宿主无感。
+*/
+function webMcpToolLlmName(toolName, sourceId) {
+	return sourceId === void 0 ? `mcp__${toolName}` : `mcp__${sourceId}__${toolName}`;
 }
-function parseWebMcpToolLlmName(llmName) {
-	return llmName.startsWith("mcp__") && llmName.length > 5 ? llmName.slice(5) : void 0;
+/** 解析回 `{ sourceId?, toolName }`；旧名（无来源段）解析出 `sourceId: undefined` */
+function parseWebMcpToolLlmName(llmName, sourceIds = []) {
+	if (!llmName.startsWith("mcp__") || llmName.length <= 5) return void 0;
+	const rest = llmName.slice(5);
+	for (const sourceId of sourceIds) {
+		const sourcePrefix = `${sourceId}__`;
+		if (rest.startsWith(sourcePrefix) && rest.length > sourcePrefix.length) return {
+			sourceId,
+			toolName: rest.slice(sourcePrefix.length)
+		};
+	}
+	return { toolName: rest };
 }
 const textOfContent = (content) => {
 	if (typeof content === "string") return content;
@@ -354,6 +383,10 @@ async function loadFromJSONSchema() {
 		throw new WebSkillError("MCP_ENDPOINT_UNAVAILABLE", "The \"zod\" package is required to serve skills as MCP tools; install it first (npm i zod)", e);
 	}
 }
+/** MCP 的 structuredContent 必须是对象（规范用 `z.record`）：数组与标量不适用 */
+function isPlainObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 /** 注册端：在页面 MCP server 上一行声明动态技能（prompt + resources + tools） */
 async function serveSkillAsMcp(server, skill) {
 	server.registerPrompt(skill.name, { description: skill.description }, async () => ({ messages: [{
@@ -372,13 +405,18 @@ async function serveSkillAsMcp(server, skill) {
 		description: tool.description ?? "",
 		...tool.inputSchema ? { inputSchema: (await loadFromJSONSchema())(tool.inputSchema) } : {}
 	}, async (args) => {
-		return { content: normalizeToolContent(await tool.handler(args ?? {})).map((item) => item.type === "text" ? {
+		const value = await tool.handler(args ?? {});
+		const content = normalizeToolContent(value).map((item) => item.type === "text" ? {
 			type: "text",
 			text: item.text ?? ""
 		} : {
 			type: "text",
 			text: JSON.stringify(item.data ?? null)
-		}) };
+		});
+		return isPlainObject(value) ? {
+			content,
+			structuredContent: value
+		} : { content };
 	});
 }
 /**
@@ -394,6 +432,14 @@ const failure = (code, message) => ({
 		message
 	}
 });
+/**
+* `executeTool` 按 MCP 规范返回 `{ content: [...] }`，但也有页面直接返回分片数组或裸值。
+* 先解包 `content` 再归一——不解包的话规范形状会被整体序列化成一段 JSON 文本，
+* 模型读到的不是工具答案而是一层信封。与 McpToolResolver 同一口径。
+*/
+function unwrapToolContent(raw) {
+	return normalizeToolContent((typeof raw === "object" && raw !== null ? raw.content : void 0) ?? raw);
+}
 /** getTools() 返回的工具 → 描述符：inputSchema 为 JSON 字符串时解析为对象，并保留原始对象 */
 function toDescriptor(raw) {
 	if (typeof raw !== "object" || raw === null) return void 0;
@@ -437,9 +483,19 @@ function extractToolDescriptors(raw) {
 var ExperimentalWebMcpAdapter = class {
 	#resolveApi;
 	#enabled;
+	/**
+	* 多来源时的消歧标识（分册 26 FR-26.2）。不设即沿用 0.10.0 的旧工具名，
+	* 单来源宿主无感；**两个以上来源必须各自设**，否则同名工具会撞车。
+	*/
+	sourceId;
 	constructor(api, options) {
 		this.#resolveApi = typeof api === "function" ? api : () => api;
 		this.#enabled = options?.enabled ?? false;
+		if (options?.sourceId !== void 0) {
+			if (!/^[a-zA-Z0-9-]+$/.test(options.sourceId)) throw new WebSkillError("VALIDATION_FAILED", `WebMCP sourceId "${options.sourceId}" may only contain letters, digits and hyphens.`);
+			if (options.sourceId.length > 24) throw new WebSkillError("VALIDATION_FAILED", `WebMCP sourceId "${options.sourceId}" is longer than 24 characters; it is prefixed onto every tool name and therefore costs tokens on every request.`);
+			this.sourceId = options.sourceId;
+		}
 	}
 	/**
 	* 宿主能力检测（FR-19.2/19.4）：**只**看 `document.modelContext.executeTool` 是否存在，
@@ -486,7 +542,7 @@ var ExperimentalWebMcpAdapter = class {
 			const tool = match?.raw ?? { name: toolName };
 			return {
 				ok: true,
-				content: normalizeToolContent(await api.executeTool(tool, argsJson))
+				content: unwrapToolContent(await api.executeTool(tool, argsJson))
 			};
 		} catch (e) {
 			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);
@@ -494,13 +550,21 @@ var ExperimentalWebMcpAdapter = class {
 		try {
 			return {
 				ok: true,
-				content: normalizeToolContent(await api.executeTool(toolName, argsJson))
+				content: unwrapToolContent(await api.executeTool(toolName, argsJson))
 			};
 		} catch (e) {
 			return failure("TOOL_EXECUTION_FAILED", `WebMCP tool "${toolName}" failed: ${messageOf(e)}`);
 		}
 	}
 };
+const disabledResult = (llmToolName) => ({
+	ok: false,
+	content: [],
+	error: {
+		code: "MCP_TOOL_DISABLED",
+		message: `Tool "${llmToolName}" is disabled`
+	}
+});
 /**
 * runtime 扩展点实现：endpoint 注册表 + WebMCP adapter 一处装配。
 * LLM 可见名：endpoint__tool / mcp__tool；call 时反向映射。
@@ -509,55 +573,94 @@ var McpRuntimePlugin = class {
 	kind = "mcp";
 	#registry;
 	#resolver;
+	/**
+	* 多来源（分册 26 FR-26.1）：**不做聚合适配器**。
+	* 聚合会让「部分来源可用」无法回答，把 0.9.0 刚理清的
+	* 「不支持 / 未启用」二分重新搅浑。这里逐个问，不合并成一个布尔。
+	*/
 	#webMcp;
+	#visibility;
 	#configuredEndpoints;
 	#onWarning;
 	constructor(deps) {
 		this.#registry = deps.registry;
 		this.#resolver = deps.resolver ?? new McpToolResolver(deps.registry);
-		this.#webMcp = deps.webMcp;
+		this.#webMcp = deps.webMcp ?? [];
+		this.#visibility = deps.visibility;
 		this.#configuredEndpoints = deps.endpoints ?? [];
 		this.#onWarning = deps.onWarning ?? ((message) => console.warn(message));
 	}
 	#endpoints() {
 		return [.../* @__PURE__ */ new Set([...this.#configuredEndpoints, ...this.#registry.endpoints()])];
 	}
+	/** 端点级可见性：未接策略或判定非 false 即启用 */
+	#endpointEnabled(endpoint) {
+		return this.#visible(() => this.#visibility?.isEndpointEnabled?.(endpoint));
+	}
+	/**
+	* 可见性回调统一求值：宿主注入的回调抛异常时按「放行 + 告警」处理。
+	* 可见性不是安全闸门（安全由审批链兜底），异常关闭会让整轮工具集消失、
+	* 模型转而幻觉；放行代价更小，但必须走 onWarning，否则宿主回调 bug 被静默吞掉。
+	*/
+	#visible(probe) {
+		try {
+			return probe() !== false;
+		} catch (e) {
+			this.#onWarning(`[webskill] MCP visibility callback failed; treating as enabled: ${e instanceof Error ? e.message : String(e)}`);
+			return true;
+		}
+	}
 	async listToolSpecs() {
 		const specs = [];
-		for (const endpoint of this.#endpoints()) try {
-			const { tools } = await this.#registry.get(endpoint).listTools();
-			for (const tool of tools) specs.push({
-				name: endpointToolLlmName(endpoint, tool.name),
-				...tool.description ? { description: `[${endpoint}] ${tool.description}` } : {},
-				inputSchema: typeof tool.inputSchema === "object" && tool.inputSchema !== null ? tool.inputSchema : {
-					type: "object",
-					properties: {}
+		for (const endpoint of this.#endpoints()) {
+			if (!this.#endpointEnabled(endpoint)) continue;
+			try {
+				const { tools } = await this.#registry.get(endpoint).listTools();
+				for (const tool of tools) {
+					if (!this.#visible(() => this.#visibility?.isEndpointToolEnabled?.(endpoint, tool.name))) continue;
+					specs.push({
+						name: endpointToolLlmName(endpoint, tool.name),
+						...tool.description ? { description: `[${endpoint}] ${tool.description}` } : {},
+						inputSchema: typeof tool.inputSchema === "object" && tool.inputSchema !== null ? tool.inputSchema : {
+							type: "object",
+							properties: {}
+						}
+					});
 				}
-			});
-		} catch (e) {
-			this.#onWarning(`[webskill] MCP endpoint "${endpoint}" is unavailable; its tools are omitted from this turn: ${e instanceof Error ? e.message : String(e)}`);
+			} catch (e) {
+				this.#onWarning(`[webskill] MCP endpoint "${endpoint}" is unavailable; its tools are omitted from this turn: ${e instanceof Error ? e.message : String(e)}`);
+			}
 		}
-		if (this.#webMcp?.isEnabled()) {
-			const tools = await this.#webMcp.listTools();
-			for (const tool of tools ?? []) specs.push({
-				name: webMcpToolLlmName(tool.name),
-				description: tool.description ?? `[webmcp] ${tool.name}`,
-				inputSchema: typeof tool.inputSchema === "object" && tool.inputSchema !== null ? tool.inputSchema : {
-					type: "object",
-					properties: {}
-				}
-			});
+		for (const source of this.#webMcp) {
+			if (!source.isEnabled()) continue;
+			const tools = await source.listTools();
+			for (const tool of tools ?? []) {
+				if (!this.#visible(() => this.#visibility?.isWebMcpToolEnabled?.(tool.name, source.sourceId))) continue;
+				specs.push({
+					name: webMcpToolLlmName(tool.name, source.sourceId),
+					description: tool.description ?? `[webmcp] ${tool.name}`,
+					inputSchema: typeof tool.inputSchema === "object" && tool.inputSchema !== null ? tool.inputSchema : {
+						type: "object",
+						properties: {}
+					}
+				});
+			}
 		}
 		return specs;
 	}
+	/** 已知来源标识；解析工具名时用它切分，避免把工具名里的 `__` 当成来源分隔 */
+	#sourceIds() {
+		return this.#webMcp.map((source) => source.sourceId).filter((id) => id !== void 0);
+	}
 	canHandle(llmToolName) {
-		if (parseWebMcpToolLlmName(llmToolName) !== void 0) return true;
+		if (parseWebMcpToolLlmName(llmToolName, this.#sourceIds()) !== void 0) return true;
 		return this.#endpoints().some((endpoint) => parseEndpointToolLlmName(endpoint, llmToolName) !== void 0);
 	}
 	async call(llmToolName, args) {
-		const webMcpTool = parseWebMcpToolLlmName(llmToolName);
-		if (webMcpTool !== void 0) {
-			if (!this.#webMcp) return {
+		const parsed = parseWebMcpToolLlmName(llmToolName, this.#sourceIds());
+		if (parsed !== void 0) {
+			const source = parsed.sourceId === void 0 ? this.#webMcp.find((candidate) => candidate.sourceId === void 0) : this.#webMcp.find((candidate) => candidate.sourceId === parsed.sourceId);
+			if (source === void 0) return {
 				ok: false,
 				content: [],
 				error: {
@@ -565,11 +668,16 @@ var McpRuntimePlugin = class {
 					message: "WebMCP adapter is not configured"
 				}
 			};
-			return this.#webMcp.call(webMcpTool, args);
+			if (!this.#visible(() => this.#visibility?.isWebMcpToolEnabled?.(parsed.toolName, source.sourceId))) return disabledResult(llmToolName);
+			return source.call(parsed.toolName, args);
 		}
 		for (const endpoint of this.#endpoints()) {
 			const toolName = parseEndpointToolLlmName(endpoint, llmToolName);
-			if (toolName !== void 0) return this.#resolver.call(endpoint, toolName, args);
+			if (toolName !== void 0) {
+				if (!this.#endpointEnabled(endpoint)) return disabledResult(llmToolName);
+				if (!this.#visible(() => this.#visibility?.isEndpointToolEnabled?.(endpoint, toolName))) return disabledResult(llmToolName);
+				return this.#resolver.call(endpoint, toolName, args);
+			}
 		}
 		return {
 			ok: false,
@@ -852,4 +960,4 @@ async function connectRemoteEndpoint(registry, config) {
 }
 
 //#endregion
-export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };
+export { EndpointRegistry, ExperimentalWebMcpAdapter, McpRuntimePlugin, McpToolResolver, MessageChannelTransport, TemporarySkillProvider, WEB_MCP_SOURCE_ID_MAX, catalogMerge, connectRemoteEndpoint, createMemoryOAuthStores, createOAuthProvider, endpointToolLlmName, parseEndpointToolLlmName, parseWebMcpToolLlmName, serveSkillAsMcp, validateJsonRpcMessage, webMcpToolLlmName };

package/dist/node.d.ts

@@ -1,6 +1,6 @@
-import { I as FileStat, K as SKILLS_LOCKFILE, L as FileSystemProvider, Q as SignatureAuditSink, St as VerifyResult, bt as UnsignedPolicy, c as InteractionResponse, gt as SkillsLockfile, j as ArchiveLimits, lt as SkillManagerPort, ot as SkillInstallSource, q as SKILL_MANIFEST_FILE, s as InteractionRequest, ut as SkillManifest, vt as TrustedKeyStore, x as UiBridge, y as RenderResultRequest, z as JsonSchema } from "./types-B3n0cMZu-BDhheIhX.js";
-import { Et as ScriptExecutor, M as FsMemoryStore, Tt as ScriptExecutionContext, Y as NetworkPolicy, Yt as ToolResult, _ as BridgeCapabilities, f as ApprovalScope, j as FsArtifactStore, mn as WebSkillRuntimeDeps, pn as WebSkillRuntime, qt as ToolDefinition, wt as SchemaInferer, yn as createScriptContext } from "./index-znZjobkr.js";
-import { a as AuditLog, p as CandidateStore, r as ApprovalPolicy, u as CandidateSkill, v as SkillVersionStore } from "./skillVersionStore-Bl-ElD45-dMJ8Ybhb.js";
+import { $ as SignatureAuditSink, B as JsonSchema, Ct as VerifyResult, J as SKILL_MANIFEST_FILE, L as FileStat, M as ArchiveLimits, R as FileSystemProvider, S as UiBridge, _t as SkillsLockfile, b as RenderResultRequest, c as InteractionResponse, dt as SkillManifest, q as SKILLS_LOCKFILE, s as InteractionRequest, st as SkillInstallSource, ut as SkillManagerPort, xt as UnsignedPolicy, yt as TrustedKeyStore } from "./types-C26b05fW-CdrRCRDb.js";
+import { Dn as WebSkillRuntimeDeps, En as WebSkillRuntime, Ft as SchemaInferer, It as ScriptExecutionContext, L as FsArtifactStore, Lt as ScriptExecutor, Mn as createScriptContext, R as FsMemoryStore, an as ToolDefinition, m as ApprovalScope, nt as NetworkPolicy, sn as ToolResult, y as BridgeCapabilities } from "./index-D3mONFHD.js";
+import { a as AuditLog, b as SkillVersionStore, d as CandidateSkill, m as CandidateStore, r as ApprovalPolicy } from "./skillVersionStore-D-qHk9ZE-BcmFLykd.js";
 import { n as LlmEnvConfig, s as probeLlmCapabilities, t as LlmCapabilities } from "./env-AK3cSMEA-Dli6QU5E.js";
 import { Readable, Writable } from "node:stream";
 //#region ../node/dist/index.d.ts

package/dist/node.js

@@ -1,7 +1,7 @@
 import { B as resolveArchiveLimits, D as exportSkills, F as parseSkillPackManifest, G as unzipWithLimits, I as readResponseWithLimit, J as verifySkillSignature, K as validateSkills, L as readSkillSignature, M as messageOf, O as isAtomicTempPath, P as parseSkillMarkdown, V as resolveInsideRoot, _ as assertSafePathSegment, b as buildManifest, c as SKILL_MANIFEST_FILE, d as SKILL_PACK_FILE, g as assertRemoteUrlAllowed, h as WebSkillError, i as MANIFEST_EXCLUDED_FILES, k as isValidSkillName, q as verifyManifest, s as SKILLS_LOCKFILE, v as atomicWriteText } from "./dist-Bev6i6Ip.js";
-import { B as bridgeError, H as createScriptContext, L as WebSkillRuntime, c as CapabilityApproval, dt as parseBridgeRequest, h as FsMemoryStore, lt as normalizeToolContent, m as FsArtifactStore, ot as networkPolicyLibSource, ut as normalizeToolError } from "./dist-CFmkV45C.js";
+import { Q as createScriptContext, X as bridgeError, b as FsMemoryStore, bt as normalizeToolError, gt as networkPolicyLibSource, q as WebSkillRuntime, u as CapabilityApproval, xt as parseBridgeRequest, y as FsArtifactStore, yt as normalizeToolContent } from "./dist-B-cOu08W.js";
 import { i as probeLlmCapabilities } from "./env-8cY40DXB-CGnEVZby.js";
-import { t as AUDIT_EVENT_TYPES } from "./eventTypes-DbOpAECr-BjcjZVms.js";
+import { t as AUDIT_EVENT_TYPES } from "./eventTypes-FllCrX-Z-DNDeHWoG.js";
 import { createRequire } from "node:module";
 import { unzipSync, zipSync } from "fflate";
 import { existsSync, promises, realpathSync } from "node:fs";
@@ -336,6 +336,8 @@ var SandboxedScriptExecutor = class {
 		this.#options = options;
 		this.#capabilities = {
 			readReference: options.capabilities?.readReference ?? true,
+			readAsset: options.capabilities?.readAsset ?? true,
+			fetchData: options.capabilities?.fetchData ?? false,
 			writeArtifact: options.capabilities?.writeArtifact ?? true,
 			confirm: options.capabilities?.confirm ?? true
 		};
@@ -509,6 +511,29 @@ var SandboxedScriptExecutor = class {
 						value: await context.readReference(request.path)
 					};
 				}
+				case "readAsset":
+				case "readAssetBinary": {
+					const read = request.kind === "readAsset" ? context.readAsset : context.readAssetBinary;
+					if (!read) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"readAsset\" is disabled");
+					const denied = await gate("readAsset", `Script "${context.skillName}" wants to read asset "${request.path}"`, { path: request.path });
+					if (denied) return denied;
+					const value = await read(request.path);
+					return {
+						id: request.id,
+						ok: true,
+						value: typeof value === "string" ? value : Array.from(value)
+					};
+				}
+				case "fetchData": {
+					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is disabled");
+					const denied = await gate("fetchData", `Script "${context.skillName}" wants to fetch data source "${request.sourceId}"`, { sourceId: request.sourceId });
+					if (denied) return denied;
+					return {
+						id: request.id,
+						ok: true,
+						value: await context.fetchData(request.sourceId, request.params)
+					};
+				}
 				case "writeArtifact": {
 					const denied = await gate("writeArtifact", `Script "${context.skillName}" wants to write artifact "${request.path}"`, {
 						path: request.path,
@@ -578,6 +603,8 @@ var ProcessSandboxExecutor = class {
 		this.#options = options;
 		this.#capabilities = {
 			readReference: options.capabilities?.readReference ?? true,
+			readAsset: options.capabilities?.readAsset ?? true,
+			fetchData: options.capabilities?.fetchData ?? false,
 			writeArtifact: options.capabilities?.writeArtifact ?? true,
 			confirm: options.capabilities?.confirm ?? true
 		};
@@ -858,6 +885,29 @@ var ProcessSandboxExecutor = class {
 						value: await context.readReference(request.path)
 					};
 				}
+				case "readAsset":
+				case "readAssetBinary": {
+					const read = request.kind === "readAsset" ? context.readAsset : context.readAssetBinary;
+					if (!read) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"readAsset\" is disabled");
+					const denied = await gate("readAsset", `Script "${context.skillName}" wants to read asset "${request.path}"`, { path: request.path });
+					if (denied) return denied;
+					const value = await read(request.path);
+					return {
+						id: request.id,
+						ok: true,
+						value: typeof value === "string" ? value : Array.from(value)
+					};
+				}
+				case "fetchData": {
+					if (!context.fetchData) return bridgeError(request.id, "TOOL_UNSUPPORTED", "Capability \"fetchData\" is disabled");
+					const denied = await gate("fetchData", `Script "${context.skillName}" wants to fetch data source "${request.sourceId}"`, { sourceId: request.sourceId });
+					if (denied) return denied;
+					return {
+						id: request.id,
+						ok: true,
+						value: await context.fetchData(request.sourceId, request.params)
+					};
+				}
 				case "writeArtifact": {
 					const denied = await gate("writeArtifact", `Script "${context.skillName}" wants to write artifact "${request.path}"`, {
 						path: request.path,

package/dist/{openUiLibrary-DURlAxjk-Do_yqg3u.js → openUiLibrary-D5u8oIvx-BLOAQCho.js}

@@ -1,5 +1,5 @@
-import { ft as uiCatalog } from "./dist-BQe1uglQ.js";
-import { t as CatalogNode } from "./catalogComponents-DfxxfUvn-T7Ic8QFV.js";
+import { St as uiCatalog } from "./dist-DTHZS2k1.js";
+import { t as CatalogNode } from "./catalogComponents-BFoqpT1v-CjUBZ3bc.js";
 import { z } from "zod";
 import { Component, Fragment, createContext, useCallback, useContext, useEffect, useInsertionEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3761,7 +3761,7 @@ function Renderer({ response, library, isStreaming = false, onAction, onStateUpd
 const FormValidationContext = createContext(null);
 
 //#endregion
-//#region ../ui-react/dist/openUiLibrary-DURlAxjk.js
+//#region ../ui-react/dist/openUiLibrary-D5u8oIvx.js
 const propsFor = (props, container) => container ? props.extend({ children: z.array(z.any()).optional() }) : props;
 /**
 * catalog 的 OpenUI 投影：`defineComponent` 复用同一份 zod schema 与描述，

package/dist/processSandboxEntry.js

@@ -165,6 +165,12 @@ async function main(task) {
 			skillName: task.skillName ?? "",
 			runId: task.runId ?? "",
 			readReference: (path) => callCapability("readReference", { path }),
+			readAsset: (path) => callCapability("readAsset", { path }),
+			fetchData: (sourceId, params) => callCapability("fetchData", {
+				sourceId,
+				params
+			}),
+			readAssetBinary: async (path) => new Uint8Array(await callCapability("readAssetBinary", { path })),
 			writeArtifact: (path, content, options) => callCapability("writeArtifact", {
 				path,
 				content: typeof content === "string" ? content : Array.from(content ?? []),

package/dist/sandboxWorkerEntry.js

@@ -226,6 +226,12 @@ async function main() {
 			skillName: task.skillName ?? "",
 			runId: task.runId ?? "",
 			readReference: (path) => callCapability("readReference", { path }),
+			readAsset: (path) => callCapability("readAsset", { path }),
+			fetchData: (sourceId, params) => callCapability("fetchData", {
+				sourceId,
+				params
+			}),
+			readAssetBinary: async (path) => new Uint8Array(await callCapability("readAssetBinary", { path })),
 			writeArtifact: (path, content, options) => callCapability("writeArtifact", {
 				path,
 				content: typeof content === "string" ? content : Array.from(content ?? []),