@webskill/sdk 0.9.0 → 0.11.0

package/dist/{dist-CFmkV45C.js → dist-B-cOu08W.js}

@@ -1,4 +1,4 @@
-import { K as validateSkills, M as messageOf, P as parseSkillMarkdown, R as renderAvailableSkillsXml, V as resolveInsideRoot, _ as assertSafePathSegment, h as WebSkillError, m as SkillReader, p as SkillDiscovery, v as atomicWriteText, y as buildCatalog } from "./dist-Bev6i6Ip.js";
+import { K as validateSkills, M as messageOf, P as parseSkillMarkdown, R as renderAvailableSkillsXml, V as resolveInsideRoot, _ as assertSafePathSegment, g as assertRemoteUrlAllowed, h as WebSkillError, m as SkillReader, p as SkillDiscovery, v as atomicWriteText, y as buildCatalog } from "./dist-Bev6i6Ip.js";
 import { a as textParts, i as rejectUnsupportedPart, n as partsToText, o as validateLlmMessages, r as promptText, t as MemoryArtifactStore } from "./memoryArtifactStore-52Zn9npI-LbCQaqyx.js";
 
 //#region ../runtime/dist/index.js
@@ -103,11 +103,11 @@ const SCHEMA_KEYS = /* @__PURE__ */ new Set([
 	"then",
 	"else"
 ]);
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isSelfRef(value) {
-	return isRecord$6(value) && value["$ref"] === SELF_REF;
+	return isRecord$7(value) && value["$ref"] === SELF_REF;
 }
 /**
 * 按 JSON Schema 关键字下降到子 schema。
@@ -117,7 +117,7 @@ function isSelfRef(value) {
 function forEachSubSchema(node, visit) {
 	for (const [key, value] of Object.entries(node)) {
 		if (SCHEMA_MAP_KEYS.has(key)) {
-			if (isRecord$6(value)) for (const name of Object.keys(value)) visit(value[name], [key, name]);
+			if (isRecord$7(value)) for (const name of Object.keys(value)) visit(value[name], [key, name]);
 			continue;
 		}
 		if (SCHEMA_LIST_KEYS.has(key)) {
@@ -136,7 +136,7 @@ function pathKey(path) {
 * `#` 解析到最近的带 `$id` 的祖先；没有则是文档根。
 */
 function collectSelfRefRoots(node, path, resourceRoot, out) {
-	if (!isRecord$6(node)) return;
+	if (!isRecord$7(node)) return;
 	if (isSelfRef(node)) {
 		out.set(pathKey(resourceRoot), resourceRoot);
 		return;
@@ -149,7 +149,7 @@ function collectSelfRefRoots(node, path, resourceRoot, out) {
 function getAt(schema, path) {
 	let current = schema;
 	for (const segment of path) if (Array.isArray(current) && typeof segment === "number") current = current[segment];
-	else if (isRecord$6(current) && typeof segment === "string") current = current[segment];
+	else if (isRecord$7(current) && typeof segment === "string") current = current[segment];
 	else return void 0;
 	return current;
 }
@@ -175,7 +175,7 @@ function setAt(schema, path, replacement) {
 * 正是严格解析器无法解析 `#` 的直接原因。
 */
 function rewriteSelfRefs(node, target, depth) {
-	if (!isRecord$6(node)) return node;
+	if (!isRecord$7(node)) return node;
 	if (depth > 8) throw new WebSkillError("TOOL_SCHEMA_UNAVAILABLE", `Tool schema nesting exceeds 8 levels; cannot produce a portable form`);
 	if (isSelfRef(node)) {
 		const rest = {};
@@ -188,7 +188,7 @@ function rewriteSelfRefs(node, target, depth) {
 	const result = {};
 	for (const [key, value] of Object.entries(node)) {
 		if (key === "$id" || key === "$schema") continue;
-		if (SCHEMA_MAP_KEYS.has(key) && isRecord$6(value)) {
+		if (SCHEMA_MAP_KEYS.has(key) && isRecord$7(value)) {
 			const mapped = {};
 			for (const [name, child] of Object.entries(value)) mapped[name] = rewriteSelfRefs(child, target, depth + 1);
 			result[key] = mapped;
@@ -226,8 +226,8 @@ function toPortableToolSchema(schema) {
 	if (roots.size > 1) throw new WebSkillError("TOOL_SCHEMA_UNAVAILABLE", "Tool schema contains self references in more than one schema resource; cannot produce a portable form");
 	const rootPath = [...roots.values()][0] ?? [];
 	const resource = getAt(schema, rootPath);
-	if (!isRecord$6(resource)) return schema;
-	const existingDefs = isRecord$6(schema[DEFS_KEY]) ? schema[DEFS_KEY] : void 0;
+	if (!isRecord$7(resource)) return schema;
+	const existingDefs = isRecord$7(schema[DEFS_KEY]) ? schema[DEFS_KEY] : void 0;
 	const taken = new Set(Object.keys(existingDefs ?? {}));
 	const nodeName = uniqueName(NODE_NAME, taken);
 	taken.add(nodeName);
@@ -258,6 +258,63 @@ function toPortableToolSchema(schema) {
 		}
 	};
 }
+function isRecord$6(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+* 与 `interaction/schemaToForm` 的 file 判定保持一致：JSON Schema 里二进制内容的
+* 两种标准写法（`format: binary` / `contentEncoding: base64`）。
+*/
+function isModelUnfillable(node) {
+	return isRecord$6(node) && node["type"] === "string" && (node["format"] === "binary" || node["contentEncoding"] === "base64");
+}
+function stripNode(node) {
+	if (Array.isArray(node)) return node.map(stripNode);
+	if (!isRecord$6(node)) return node;
+	const out = {};
+	for (const [key, value] of Object.entries(node)) {
+		if (SCHEMA_MAP_KEYS.has(key) && isRecord$6(value)) {
+			const mapped = {};
+			for (const [name, child] of Object.entries(value)) {
+				if (key === "properties" && isModelUnfillable(child)) continue;
+				mapped[name] = stripNode(child);
+			}
+			out[key] = mapped;
+			continue;
+		}
+		if (SCHEMA_LIST_KEYS.has(key) && Array.isArray(value)) {
+			out[key] = value.map(stripNode);
+			continue;
+		}
+		if (SCHEMA_KEYS.has(key)) {
+			out[key] = stripNode(value);
+			continue;
+		}
+		out[key] = value;
+	}
+	const required = out["required"];
+	const properties = out["properties"];
+	if (Array.isArray(required) && isRecord$6(properties)) out["required"] = required.filter((name) => typeof name !== "string" || name in properties);
+	return out;
+}
+/**
+* 把模型不可能自己产出的字段（本地文件二进制）从**出站**工具 schema 里剥离。
+*
+* 模型拿不到用户磁盘上的文件，留着这个字段只有两种下场：模型拒绝调用工具
+* （实测 DeepSeek 直接回文本「请上传文件」，file-pick 永远触发不了），或编造一个
+* 占位字符串把技能跑挂。剥掉后模型以缺参形式调用，引擎的 missing-params 链路
+* 会弹 file-pick 让用户用系统文件选择器补这个字段。
+*
+* 这是**传输层适配**，只应在出站请求体上调用；不要下沉到 AgentLoop——
+* 引擎侧的 missing 校验看的必须是技能作者写的完整 inputSchema。
+*
+* 已知边界（0.10.0 复核注记）：只剥 `properties` 里的 inline 二进制字段；
+* 通过 `$ref` 指向 `$defs` 中二进制定义的字段仍会下发（剥掉会留悬空 $ref），
+* 这类技能依旧可能拿不到 file-pick——需要完整修复时再补「剥 $def + 剥指向它的 $ref」。
+*/
+function stripModelUnfillableParams(schema) {
+	return stripNode(schema);
+}
 /** 各家都认的基础关键字。Google `FunctionDeclaration.parameters` 是其中最窄的一家。 */
 const BASE_KEYWORDS = /* @__PURE__ */ new Set([
 	"type",
@@ -499,7 +556,7 @@ const toOpenAiTools = (tools) => tools.map((tool) => ({
 	function: {
 		name: tool.name,
 		...tool.description ? { description: tool.description } : {},
-		parameters: sanitizeForVendor(toPortableToolSchema(tool.inputSchema), OPENAI_SCHEMA_PROFILE, tool.name)
+		parameters: sanitizeForVendor(toPortableToolSchema(stripModelUnfillableParams(tool.inputSchema)), OPENAI_SCHEMA_PROFILE, tool.name)
 	}
 }));
 const errorMessage$2 = (e) => e instanceof Error ? e.message : String(e);
@@ -539,6 +596,7 @@ var OpenAiCompatibleClient = class {
 		const reader = res.body.getReader();
 		const frames = createSseFrameReader();
 		let done = false;
+		let usage;
 		const handleFrame = function* (data) {
 			if (data === "[DONE]") {
 				done = true;
@@ -550,8 +608,17 @@ var OpenAiCompatibleClient = class {
 			} catch (e) {
 				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage$2(e)}`, data);
 			}
+			const usageRaw = chunk.usage;
+			if (usageRaw && (typeof usageRaw["prompt_tokens"] === "number" || typeof usageRaw["completion_tokens"] === "number")) usage = {
+				inputTokens: typeof usageRaw["prompt_tokens"] === "number" ? usageRaw["prompt_tokens"] : 0,
+				outputTokens: typeof usageRaw["completion_tokens"] === "number" ? usageRaw["completion_tokens"] : 0
+			};
 			const delta = chunk.choices?.[0]?.delta;
 			if (!delta) return;
+			if (typeof delta["reasoning_content"] === "string" && delta["reasoning_content"] !== "") yield {
+				type: "thinking-delta",
+				delta: delta["reasoning_content"]
+			};
 			if (typeof delta["content"] === "string" && delta["content"] !== "") yield {
 				type: "text-delta",
 				delta: delta["content"]
@@ -601,7 +668,10 @@ var OpenAiCompatibleClient = class {
 				};
 			})
 		};
-		yield { type: "done" };
+		yield {
+			type: "done",
+			...usage ? { usage } : {}
+		};
 	}
 	async #postChat(input, stream) {
 		const { baseUrl, apiKey, model } = this.#requireConfig();
@@ -615,7 +685,10 @@ var OpenAiCompatibleClient = class {
 			body["tool_choice"] = "auto";
 		}
 		if (input.temperature !== void 0) body["temperature"] = input.temperature;
-		if (stream) body["stream"] = true;
+		if (stream) {
+			body["stream"] = true;
+			body["stream_options"] = { include_usage: true };
+		}
 		let res;
 		try {
 			res = await this.#fetch(`${baseUrl}/chat/completions`, {
@@ -665,9 +738,17 @@ var OpenAiCompatibleClient = class {
 				};
 			});
 			const content = choice["content"];
+			const thinking = choice["reasoning_content"];
+			const usageRaw = data.usage;
+			const usage = usageRaw && (typeof usageRaw["prompt_tokens"] === "number" || typeof usageRaw["completion_tokens"] === "number") ? {
+				inputTokens: typeof usageRaw["prompt_tokens"] === "number" ? usageRaw["prompt_tokens"] : 0,
+				outputTokens: typeof usageRaw["completion_tokens"] === "number" ? usageRaw["completion_tokens"] : 0
+			} : void 0;
 			return {
 				content: typeof content === "string" && content !== "" ? textParts(content) : void 0,
 				toolCalls: toolCalls?.length ? toolCalls : void 0,
+				...typeof thinking === "string" && thinking !== "" ? { thinking } : {},
+				...usage ? { usage } : {},
 				raw: data
 			};
 		} catch (e) {
@@ -756,7 +837,7 @@ function toAnthropicMessages(messages) {
 const toAnthropicTools = (tools) => tools.map((tool) => ({
 	name: tool.name,
 	...tool.description ? { description: tool.description } : {},
-	input_schema: sanitizeForVendor(toPortableToolSchema(tool.inputSchema), ANTHROPIC_SCHEMA_PROFILE, tool.name)
+	input_schema: sanitizeForVendor(toPortableToolSchema(stripModelUnfillableParams(tool.inputSchema)), ANTHROPIC_SCHEMA_PROFILE, tool.name)
 }));
 /** Anthropic Messages API 客户端（零依赖 fetch；Node/浏览器通用） */
 var AnthropicClient = class {
@@ -795,6 +876,8 @@ var AnthropicClient = class {
 		const decoder = new TextDecoder();
 		const reader = res.body.getReader();
 		const frames = createSseFrameReader();
+		let inputTokens;
+		let outputTokens;
 		const handleFrame = function* (data) {
 			let chunk;
 			try {
@@ -804,6 +887,17 @@ var AnthropicClient = class {
 			}
 			const type = chunk["type"];
 			if (type === "error") throw new WebSkillError("LLM_REQUEST_FAILED", `LLM stream error: ${chunk["error"]?.message ?? data}`);
+			if (type === "message_start") {
+				const usage = chunk["message"]?.["usage"];
+				if (typeof usage?.["input_tokens"] === "number") inputTokens = usage["input_tokens"];
+				if (typeof usage?.["output_tokens"] === "number") outputTokens = usage["output_tokens"];
+				return;
+			}
+			if (type === "message_delta") {
+				const usage = chunk["usage"];
+				if (typeof usage?.["output_tokens"] === "number") outputTokens = usage["output_tokens"];
+				return;
+			}
 			if (type === "content_block_start") {
 				const block = chunk["content_block"];
 				if (block?.["type"] === "tool_use") {
@@ -826,6 +920,13 @@ var AnthropicClient = class {
 					};
 					return;
 				}
+				if (delta?.["type"] === "thinking_delta" && typeof delta["thinking"] === "string" && delta["thinking"] !== "") {
+					yield {
+						type: "thinking-delta",
+						delta: delta["thinking"]
+					};
+					return;
+				}
 				if (delta?.["type"] === "input_json_delta" && typeof delta["partial_json"] === "string") {
 					const acc = toolCallsByIndex.get(index) ?? {
 						id: "",
@@ -866,7 +967,14 @@ var AnthropicClient = class {
 				};
 			})
 		};
-		yield { type: "done" };
+		const usage = inputTokens !== void 0 || outputTokens !== void 0 ? {
+			inputTokens: inputTokens ?? 0,
+			outputTokens: outputTokens ?? 0
+		} : void 0;
+		yield {
+			type: "done",
+			...usage ? { usage } : {}
+		};
 	}
 	async #post(input, stream) {
 		validateLlmMessages(input.messages);
@@ -878,7 +986,12 @@ var AnthropicClient = class {
 		};
 		if (system !== void 0) body["system"] = system;
 		if (input.tools?.length) body["tools"] = toAnthropicTools(input.tools);
-		if (input.temperature !== void 0) body["temperature"] = input.temperature;
+		const thinkingBudget = this.#config.thinkingBudgetTokens;
+		if (thinkingBudget !== void 0 && Number.isInteger(thinkingBudget) && thinkingBudget > 0) body["thinking"] = {
+			type: "enabled",
+			budget_tokens: thinkingBudget
+		};
+		else if (input.temperature !== void 0) body["temperature"] = input.temperature;
 		if (stream) body["stream"] = true;
 		let res;
 		try {
@@ -926,14 +1039,22 @@ var AnthropicClient = class {
 			const blocks = data.content;
 			if (!Array.isArray(blocks)) throw new Error("response has no content blocks");
 			const text = blocks.filter((b) => b["type"] === "text").map((b) => String(b["text"] ?? "")).join("");
+			const thinking = blocks.filter((b) => b["type"] === "thinking").map((b) => String(b["thinking"] ?? "")).join("");
 			const toolCalls = blocks.filter((b) => b["type"] === "tool_use").map((b) => ({
 				id: typeof b["id"] === "string" ? b["id"] : "",
 				name: typeof b["name"] === "string" ? b["name"] : "",
 				arguments: typeof b["input"] === "object" && b["input"] !== null ? b["input"] : {}
 			}));
+			const usageRaw = data.usage;
+			const usage = typeof usageRaw?.["input_tokens"] === "number" || typeof usageRaw?.["output_tokens"] === "number" ? {
+				inputTokens: typeof usageRaw["input_tokens"] === "number" ? usageRaw["input_tokens"] : 0,
+				outputTokens: typeof usageRaw["output_tokens"] === "number" ? usageRaw["output_tokens"] : 0
+			} : void 0;
 			return {
 				content: text === "" ? void 0 : textParts(text),
 				toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+				...thinking === "" ? {} : { thinking },
+				...usage ? { usage } : {},
 				raw: data
 			};
 		} catch (e) {
@@ -942,6 +1063,18 @@ var AnthropicClient = class {
 	}
 };
 const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+/** usageMetadata → LlmTokenUsage（promptTokenCount / candidatesTokenCount；无字段返回 undefined） */
+function parseGenAiUsage(data) {
+	const usage = data?.usageMetadata;
+	if (!usage) return void 0;
+	const input = usage["promptTokenCount"];
+	const output = usage["candidatesTokenCount"];
+	if (typeof input !== "number" && typeof output !== "number") return void 0;
+	return {
+		inputTokens: typeof input === "number" ? input : 0,
+		outputTokens: typeof output === "number" ? output : 0
+	};
+}
 /** parts → GenAI parts（二进制统一走 inlineData） */
 const toGenAiParts = (parts, where) => parts.map((part) => {
 	switch (part.type) {
@@ -992,10 +1125,16 @@ function toGenAiContents(messages) {
 		}
 		if (msg.role === "assistant") {
 			const parts = toGenAiParts(msg.content, "assistant");
-			for (const call of msg.toolCalls ?? []) parts.push({ functionCall: {
-				name: call.name,
-				args: call.arguments
-			} });
+			for (const call of msg.toolCalls ?? []) {
+				const signature = call.vendor?.["thoughtSignature"];
+				parts.push({
+					functionCall: {
+						name: call.name,
+						args: call.arguments
+					},
+					...typeof signature === "string" ? { thoughtSignature: signature } : {}
+				});
+			}
 			out.push({
 				role: "model",
 				parts: parts.length > 0 ? parts : [{ text: "" }]
@@ -1015,7 +1154,7 @@ function toGenAiContents(messages) {
 const toGenAiTools = (tools) => [{ functionDeclarations: tools.map((tool) => ({
 	name: tool.name,
 	...tool.description ? { description: tool.description } : {},
-	parameters: sanitizeForVendor(toPortableToolSchema(tool.inputSchema), GOOGLE_SCHEMA_PROFILE, tool.name)
+	parameters: sanitizeForVendor(toPortableToolSchema(stripModelUnfillableParams(tool.inputSchema)), GOOGLE_SCHEMA_PROFILE, tool.name)
 })) }];
 /** Google GenAI（generateContent / streamGenerateContent）客户端（零依赖 fetch） */
 var GoogleGenAiClient = class {
@@ -1039,9 +1178,11 @@ var GoogleGenAiClient = class {
 		const parts = this.#responseParts(data);
 		const text = parts.filter((p) => typeof p["text"] === "string").map((p) => String(p["text"])).join("");
 		const toolCalls = this.#functionCalls(parts);
+		const usage = parseGenAiUsage(data);
 		return {
 			content: text === "" ? void 0 : textParts(text),
 			toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+			...usage ? { usage } : {},
 			raw: data
 		};
 	}
@@ -1053,6 +1194,7 @@ var GoogleGenAiClient = class {
 		const decoder = new TextDecoder();
 		const reader = res.body.getReader();
 		const frames = createSseFrameReader();
+		let usage;
 		const handleFrame = function* (data) {
 			let chunk;
 			try {
@@ -1060,6 +1202,7 @@ var GoogleGenAiClient = class {
 			} catch (e) {
 				throw new WebSkillError("LLM_REQUEST_FAILED", `Failed to parse LLM stream frame: ${errorMessage(e)}`, data);
 			}
+			usage = parseGenAiUsage(chunk) ?? usage;
 			const parts = chunk.candidates?.[0]?.content?.parts;
 			for (const part of parts ?? []) {
 				if (typeof part["text"] === "string" && part["text"] !== "") {
@@ -1070,11 +1213,15 @@ var GoogleGenAiClient = class {
 					continue;
 				}
 				const call = part["functionCall"];
-				if (call) toolCalls.push({
-					id: `call-${toolCalls.length}`,
-					name: call.name ?? "",
-					arguments: call.args ?? {}
-				});
+				if (call) {
+					const signature = part["thoughtSignature"];
+					toolCalls.push({
+						id: `call-${toolCalls.length}`,
+						name: call.name ?? "",
+						arguments: call.args ?? {},
+						...typeof signature === "string" ? { vendor: { thoughtSignature: signature } } : {}
+					});
+				}
 			}
 		};
 		try {
@@ -1091,7 +1238,10 @@ var GoogleGenAiClient = class {
 			type: "tool-calls",
 			toolCalls
 		};
-		yield { type: "done" };
+		yield {
+			type: "done",
+			...usage ? { usage } : {}
+		};
 	}
 	async #post(input, stream) {
 		const model = input.model ?? this.#config.model;
@@ -1143,15 +1293,30 @@ var GoogleGenAiClient = class {
 		const out = [];
 		for (const part of parts) {
 			const call = part["functionCall"];
-			if (call) out.push({
-				id: `call-${out.length}`,
-				name: call.name ?? "",
-				arguments: call.args ?? {}
-			});
+			if (call) {
+				const signature = part["thoughtSignature"];
+				out.push({
+					id: `call-${out.length}`,
+					name: call.name ?? "",
+					arguments: call.args ?? {},
+					...typeof signature === "string" ? { vendor: { thoughtSignature: signature } } : {}
+				});
+			}
 		}
 		return out;
 	}
 };
+/** v5 { inputTokens, outputTokens } 与 v4 { promptTokens, completionTokens } 两种形状都接 */
+function fromVercelUsage(raw) {
+	const u = raw ?? {};
+	const input = u["inputTokens"] ?? u["promptTokens"];
+	const output = u["outputTokens"] ?? u["completionTokens"];
+	if (typeof input !== "number" && typeof output !== "number") return void 0;
+	return {
+		inputTokens: typeof input === "number" ? input : 0,
+		outputTokens: typeof output === "number" ? output : 0
+	};
+}
 function toVercelToolSpecs(tools) {
 	const out = {};
 	for (const tool of tools) out[tool.name] = {
@@ -1160,6 +1325,16 @@ function toVercelToolSpecs(tools) {
 	};
 	return out;
 }
+/**
+* 归一化供应商思考内容：v5 的 `reasoningText`（字符串）与 v4 的 `reasoning`
+* （Array<{ text; type }>）都能落到同一条 `LlmResponse.thinking`。
+*/
+function normalizeThinking(value) {
+	if (typeof value === "string") return value !== "" ? value : void 0;
+	if (!Array.isArray(value)) return void 0;
+	const text = value.map((part) => typeof part?.text === "string" ? part.text : "").join("");
+	return text !== "" ? text : void 0;
+}
 /** 接受 generateText 的返回值形状：{ text?, toolCalls?: [{ toolCallId, toolName, input|args }] } */
 function fromVercelResult(result) {
 	const r = result;
@@ -1171,9 +1346,13 @@ function fromVercelResult(result) {
 			arguments: typeof args === "object" && args !== null ? args : {}
 		};
 	});
+	const thinking = normalizeThinking(r.reasoningText ?? r.reasoning);
+	const usage = fromVercelUsage(r.usage);
 	return {
 		content: typeof r.text === "string" && r.text !== "" ? textParts(r.text) : void 0,
 		toolCalls: toolCalls.length ? toolCalls : void 0,
+		...thinking !== void 0 ? { thinking } : {},
+		...usage ? { usage } : {},
 		raw: result
 	};
 }
@@ -1191,6 +1370,13 @@ function fromVercelStreamPart(part) {
 				delta
 			} : void 0;
 		}
+		case "reasoning-delta": {
+			const delta = p["text"] ?? p["delta"];
+			return typeof delta === "string" && delta !== "" ? {
+				type: "thinking-delta",
+				delta
+			} : void 0;
+		}
 		case "tool-call": return {
 			type: "tool-calls",
 			toolCalls: [{
@@ -1199,7 +1385,13 @@ function fromVercelStreamPart(part) {
 				arguments: typeof p["input"] === "object" && p["input"] !== null ? p["input"] : {}
 			}]
 		};
-		case "finish": return { type: "done" };
+		case "finish": {
+			const usage = fromVercelUsage(p["totalUsage"] ?? p["usage"]);
+			return {
+				type: "done",
+				...usage ? { usage } : {}
+			};
+		}
 		default: return;
 	}
 }
@@ -1248,6 +1440,45 @@ var FullDisclosureRouter = class {
 	}
 };
 /**
+* 参与 `toolResultMaxBytes` 截断的分片类型（FR-23.3）。**判据的单一来源。**
+*
+* 白名单而不是黑名单：黑名单式下新加的分片默认「参与截断」，
+* 漏改一处就会把一份 PDF 截成坏文件、把 docx 文本腰斩，而且没有任何报错。
+* 白名单式下新分片默认**不参与**，要受文本预算约束必须显式加进来。
+* @experimental
+*/
+const TEXT_BUDGETED_CONTENT_TYPES = /* @__PURE__ */ new Set(["text", "json"]);
+/**
+* `file` 分片的上限（FR-23.4），量的是**实际上线的 base64 长度**而不是解码后的字节——
+* provider 的限额算的是请求载荷。
+*
+* 2026-08-14 查证的三家上限：
+* | provider  | 上限                                    | 出处                    |
+* | --------- | --------------------------------------- | ----------------------- |
+* | Anthropic | **32 MB**（**整个请求载荷**）、600 页   | PDF support / 请求大小  |
+* | OpenAI    | 单文件 50 MB，全部文件合计 50 MB        | File inputs / 使用须知  |
+* | Gemini    | 50 MB 或 1000 页（内联与 Files API 同） | 文档理解 / 技术详情     |
+*
+* 取最小值 Anthropic 的 32 MB。它是**整个请求**的额度，不是文档单独的额度，
+* 所以再留出余量给系统提示词、catalog（约 34 KB）、历史消息与其余分片。
+* 25 000 KB base64 ≈ 18.75 MB 原始 PDF。取 1024 的整数倍：设置界面按 KB 展示，
+* 十进制的 24 000 000 会显示成 23437.5 这种读不出来的数。
+*/
+const DEFAULT_MAX_DOCUMENT_BYTES = 256e5;
+/**
+* `document-text` 分片的上限（FR-23.4）。
+*
+* 约束来自**上下文窗口**而不是请求大小：抽出来的文本要整段进上下文。
+* 按英文约 4 字节/token 折算，500 KB ≈ 128K token，占 200K 窗口的多半，
+* 给历史消息与模型的回答留下其余。
+*/
+const DEFAULT_MAX_DOCUMENT_TEXT_BYTES = 512e3;
+/**
+* 单次 fetchData 结果的字节上限（分册 16，FR-16.6）：1000 KB。
+* 结构化数据不是文档，量级差一个数量级；超出**只拒不截**——截断的 JSON 解不出来。
+*/
+const DEFAULT_MAX_DATA_SOURCE_BYTES = 1024e3;
+/**
 * 工具名解析规则（单一实现，Agent 循环使用）：
 * 1. `<skillName>__<scriptName>` 且前缀是已激活技能 → 本地脚本
 * 2. `endpoint:` 前缀 → TOOL_UNSUPPORTED（MCP 阶段实现）
@@ -1406,17 +1637,75 @@ const READ_SKILL_FILE_TOOL = {
 	source: "builtin"
 };
 const ASK_USER_TOOL_NAME = "ask_user";
+/** 一次 `ask_user` 能收的字段数上限（FR-11.3 裁决值），可由 `AgentLoopConfig` 覆盖 */
+const ASK_USER_MAX_FIELDS = 20;
+/** `fields[].type`：`FormField['type']` 的八种。`multi-select` 不在其中——它的值是数组（FR-11.1b） */
+const ASK_USER_FIELD_TYPES = [
+	"text",
+	"number",
+	"boolean",
+	"select",
+	"textarea",
+	"file",
+	"password",
+	"date"
+];
 const ASK_USER_INPUT_SCHEMA = {
 	type: "object",
 	properties: {
 		question: {
 			type: "string",
-			description: "The question to ask the user"
+			description: "A single question. Use it only when one answer is genuinely all you need."
+		},
+		fields: {
+			type: "array",
+			maxItems: 20,
+			description: "Collect several answers in one form. Use this whenever you need more than one piece of information, so the user fills everything in once instead of answering a chain of questions.",
+			items: {
+				type: "object",
+				properties: {
+					name: {
+						type: "string",
+						description: "Key this answer is returned under."
+					},
+					label: {
+						type: "string",
+						description: "Short label shown next to the input."
+					},
+					type: {
+						type: "string",
+						enum: [...ASK_USER_FIELD_TYPES],
+						description: "Input kind. Use \"date\" for dates; the value comes back as a YYYY-MM-DD string."
+					},
+					required: { type: "boolean" },
+					description: {
+						type: "string",
+						description: "Help text shown under the input."
+					},
+					options: {
+						type: "array",
+						items: {
+							type: "object",
+							properties: {
+								label: { type: "string" },
+								value: {}
+							},
+							required: ["label", "value"]
+						},
+						description: "Choices for a \"select\" field. Required when type is \"select\"."
+					}
+				},
+				required: [
+					"name",
+					"label",
+					"type"
+				]
+			}
 		},
 		choices: {
 			type: "array",
 			items: { type: "string" },
-			description: "Closed set of acceptable answers. Provide it whenever the answer must be one of a known finite set, for example when asking which installed skill to use. The user then picks from a list instead of typing free text."
+			description: "Closed set of acceptable answers for the single-question form. Provide it whenever the answer must be one of a known finite set, for example when asking which installed skill to use. The user then picks from a list instead of typing free text."
 		},
 		suggestion: {
 			type: "string",
@@ -1426,20 +1715,19 @@ const ASK_USER_INPUT_SCHEMA = {
 			type: "string",
 			description: "Short reason for the suggestion, shown next to it so the user can judge whether to accept it."
 		}
-	},
-	required: ["question"]
+	}
 };
 /** 内建工具：LLM 信息不足时主动向用户提问；仅当配置了 UiBridge 时注册 */
 const ASK_USER_TOOL = {
 	name: ASK_USER_TOOL_NAME,
-	description: "Ask the user a question when information is missing and continue with their answer. When the answer belongs to a known finite set, you must pass \"choices\".",
+	description: "Ask the user for information you are missing. Pass \"fields\" to collect everything you need in a single form; do not ask one question per turn when several answers are needed. Pass \"question\" only when a single answer is all you need. When an answer belongs to a known finite set, you must pass \"choices\" (single question) or \"options\" (field).",
 	inputSchema: ASK_USER_INPUT_SCHEMA,
 	source: "builtin"
 };
 /**
-* 越权 / 绝对路径 / 父级遍历的引用读取：策略拒绝（FS_PERMISSION_DENIED，
+* 越权 / 绝对路径 / 父级遍历的技能目录读取：策略拒绝（FS_PERMISSION_DENIED，
 * 计入 POLICY_DENIAL_CODES → 不计入隔离失败计数），
-* 与「references/ 内路径确实不存在 → FS_NOT_FOUND」区分（0.9.0 分册 14，UX-04）。
+* 与「目录内路径确实不存在 → FS_NOT_FOUND」区分（0.9.0 分册 14，UX-04）。
 */
 function assertReferencePath(relativePath) {
 	const trimmed = relativePath.trim();
@@ -1447,18 +1735,31 @@ function assertReferencePath(relativePath) {
 	if (trimmed.replace(/\\/g, "/").split("/").includes("..")) throw new WebSkillError("FS_PERMISSION_DENIED", `Reference access denied: parent traversal (path: ${JSON.stringify(relativePath)})`);
 }
 /**
-* 脚本执行上下文：只暴露 readReference / writeArtifact 两个显式能力，
-* 不暴露 fs 本体（沙箱语义，对齐 deferred-items D1）。
+* 越权判定必须在拼接前缀**之前**做：`/managed/...` 这类绝对路径
+* 若直接拼接会退化成目录内的相对路径 → 误报 FS_NOT_FOUND（UX-04）。
+*/
+function resolveSkillDir(skillRoot, dir, relativePath) {
+	assertReferencePath(relativePath);
+	return resolveInsideRoot(skillRoot, `${dir}/${relativePath}`);
+}
+/**
+* 脚本执行上下文：只暴露 readReference / readAsset / readAssetBinary / writeArtifact
+* 四个显式能力，不暴露 fs 本体（沙箱语义，对齐 deferred-items D1）。
 */
 function createScriptContext(deps) {
-	const { fs, artifactStore, skillName, skillRoot, runId, confirm, onWarning, onArtifactCreated } = deps;
+	const { fs, artifactStore, skillName, skillRoot, runId, confirm, fetchData, onWarning, onArtifactCreated } = deps;
 	const readFs = fs.withRoot?.(skillRoot) ?? fs;
 	return {
 		skillName,
 		runId,
 		async readReference(relativePath) {
-			assertReferencePath(relativePath);
-			return readFs.readText(resolveInsideRoot(skillRoot, `references/${relativePath}`));
+			return readFs.readText(resolveSkillDir(skillRoot, "references", relativePath));
+		},
+		async readAsset(relativePath) {
+			return readFs.readText(resolveSkillDir(skillRoot, "assets", relativePath));
+		},
+		async readAssetBinary(relativePath) {
+			return readFs.readBinary(resolveSkillDir(skillRoot, "assets", relativePath));
 		},
 		async writeArtifact(path, content, options) {
 			const artifact = typeof content === "string" ? await artifactStore.createTextArtifact({
@@ -1476,6 +1777,7 @@ function createScriptContext(deps) {
 			return artifact;
 		},
 		...confirm ? { confirm } : {},
+		...fetchData ? { fetchData } : {},
 		...onWarning ? { onWarning } : {}
 	};
 }
@@ -1803,7 +2105,7 @@ const DEFAULT_USER_PROFILE_LIMITS = {
 	recordLimit: 500,
 	valueMaxChars: 2e3,
 	sampleLimit: 80,
-	injectMaxBytes: 2e3,
+	injectMaxBytes: 4e3,
 	entryLimit: 40
 };
 /** @experimental */
@@ -1968,6 +2270,43 @@ function sampleBehaviorRecords(records, limits = DEFAULT_USER_PROFILE_LIMITS) {
 * 最后一句是重点：不明说「没有工具」，模型会凭训练记忆自己编造 tool_call 标记。
 */
 const PLAIN_CHAT_SYSTEM_PROMPT = "You are a helpful assistant. Answer the user's question directly and concisely. You have no tools available; do not describe or simulate tool calls.";
+const READ_LINKED_DOCUMENT_TOOL_NAME = "read_linked_document";
+/**
+* 能直接给模型用的 MIME。其余一律拒绝并列出这份清单——
+* 「尽力而为地猜格式」会让模型收到乱码却以为读成功了。
+*/
+const SUPPORTED_DOCUMENT_MIME = {
+	pdf: "application/pdf",
+	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+};
+/** 引擎侧固定流程（§2.3）用到的错误文案，集中一处便于判据引用 */
+const UNSUPPORTED_DOCUMENT_MESSAGE = `Only PDF (${SUPPORTED_DOCUMENT_MIME.pdf}), Word (${SUPPORTED_DOCUMENT_MIME.docx}) and plain text documents can be read.`;
+/**
+* 内建工具：读页面链接指向的文档。
+*
+* **始终注册**（只要宿主装配了 reader）：docx 与纯文本这条路对所有模型成立。
+* PDF 目标在模型不支持文档时**取数后拒绝**，而不是入口就拦 ——
+* 入口拦会误伤 docx，它抽成文本后根本不需要文档能力。
+*/
+const READ_LINKED_DOCUMENT_TOOL = {
+	name: READ_LINKED_DOCUMENT_TOOL_NAME,
+	description: "Read a document linked from the current page. Pass the exact \"href\" from a perceive_page result. Cross-origin documents need the user to confirm each time.",
+	inputSchema: {
+		type: "object",
+		properties: { url: {
+			type: "string",
+			description: "The href of a link that appeared in a perceive_page result."
+		} },
+		required: ["url"]
+	},
+	source: "builtin"
+};
+/** 二进制转 base64；`btoa` 只吃 latin1，必须逐字节喂而不是先 decode 成字符串 */
+function toBase64(bytes) {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary);
+}
 /** 结构化 trace 记录器；时钟与 id 工厂可注入（golden trace 用固定值保证确定性） */
 var TraceRecorder = class {
 	#runId;
@@ -2053,8 +2392,8 @@ function extractSkillCandidate(data) {
 */
 const DEFAULT_LOOP_LIMITS = {
 	maxTurns: 10,
-	totalTimeoutMs: 12e4,
-	toolTimeoutMs: 3e4
+	totalTimeoutMs: 36e5,
+	toolTimeoutMs: 6e5
 };
 const RUN_SNAPSHOT_SCHEMA_VERSION = 3;
 /** @experimental */
@@ -2199,6 +2538,16 @@ function evaluateToolAccess(state, llmToolName) {
 	};
 }
 const MAX_SURFACE_PATCHES_PER_SECOND = 240;
+/**
+* 一轮 LLM 调用可能抛出、且**值得原样上报**的结构化码。
+* 不在表里的（含未知异常）统一归 `LLM_REQUEST_FAILED`——那是「这次请求没成」的兜底，
+* 但把 schema 不兼容这类可定位的原因也压进去，排障就只剩看文案（UI-UX8 D4）。
+*/
+const LLM_TURN_CODES = /* @__PURE__ */ new Set([
+	"LLM_UNAVAILABLE",
+	"LLM_REQUEST_FAILED",
+	"TOOL_SCHEMA_UNAVAILABLE"
+]);
 /** 交互终态（取消/超时）：从工具执行深处直接终止 run */
 var RunTerminated = class extends Error {
 	outcome;
@@ -2294,12 +2643,16 @@ var AgentLoop = class {
 			maxTurns: config.maxTurns ?? DEFAULT_LOOP_LIMITS.maxTurns,
 			totalTimeoutMs: config.totalTimeoutMs ?? DEFAULT_LOOP_LIMITS.totalTimeoutMs,
 			toolTimeoutMs: config.toolTimeoutMs ?? DEFAULT_LOOP_LIMITS.toolTimeoutMs,
-			toolResultMaxBytes: config.toolResultMaxBytes ?? 1e5,
+			toolResultMaxBytes: config.toolResultMaxBytes ?? 256e3,
 			paramHistoryLimit: config.paramHistoryLimit ?? 50,
 			toolCallingDisabled: config.toolCallingDisabled ?? false,
 			maxUnknownToolRetries: config.maxUnknownToolRetries ?? 2,
+			askUserMaxFields: config.askUserMaxFields ?? 20,
+			maxDocumentBytes: config.maxDocumentBytes ?? 256e5,
+			maxDocumentTextBytes: config.maxDocumentTextBytes ?? 512e3,
 			temperature: config.temperature,
-			renderResult: config.renderResult
+			renderResult: config.renderResult,
+			remoteUrl: config.remoteUrl
 		};
 		this.#policy = {
 			missingParams: deps.interaction?.missingParams ?? "user",
@@ -2349,6 +2702,7 @@ var AgentLoop = class {
 			now,
 			interactionSeq: 0,
 			surfaceActionSeq: 0,
+			documentSeq: 0,
 			messages: [],
 			turn: 0,
 			renderBlocks: [],
@@ -2357,6 +2711,7 @@ var AgentLoop = class {
 			surfacePatchCount: 0,
 			processedSurfaceActionNonces: /* @__PURE__ */ new Set(),
 			emittedToolEvents: /* @__PURE__ */ new Set(),
+			artifactPaths: /* @__PURE__ */ new Set(),
 			unknownToolCalls: 0,
 			startMs,
 			pausedMs: 0,
@@ -2477,6 +2832,7 @@ var AgentLoop = class {
 				const toolSpecs = this.#config.toolCallingDisabled ? [] : [
 					toLlmToolSpec(READ_SKILL_FILE_TOOL),
 					...this.#deps.uiBridge ? [toLlmToolSpec(ASK_USER_TOOL)] : [],
+					...this.#deps.linkedDocuments ? [toLlmToolSpec(READ_LINKED_DOCUMENT_TOOL)] : [],
 					...skillToolSpecs
 				];
 				trace.record("llm.request", { data: {
@@ -2504,8 +2860,26 @@ var AgentLoop = class {
 						if (this.#cancelled.has(state.runId)) return finish("cancelled", "user-cancelled", "Run cancelled by user", "RUN_CANCELLED");
 						return finish("failed", "timeout", `Agent loop exceeded the total timeout of ${state.totalTimeoutMs}ms`, "RUN_TIMEOUT");
 					}
-					const code = e instanceof WebSkillError && (e.code === "LLM_UNAVAILABLE" || e.code === "LLM_REQUEST_FAILED") ? e.code : "LLM_REQUEST_FAILED";
-					return finish("failed", "llm-error", messageOf(e), code);
+					const code = e instanceof WebSkillError && LLM_TURN_CODES.has(e.code) ? e.code : "LLM_REQUEST_FAILED";
+					const hint = messages.some((message) => Array.isArray(message.content) && message.content.some((part) => part.type === "file")) ? " This turn attached a document; the selected model may not accept document input. Try another model, or link a Word or text file instead." : "";
+					return finish("failed", "llm-error", `${messageOf(e)}${hint}`, code);
+				}
+				if (response.thinking !== void 0 && response.thinking !== "") {
+					state.trace.record("llm.thinking", { data: {
+						turn,
+						text: response.thinking
+					} });
+					const bus = this.#deps.eventBus;
+					if (!llm.stream && bus && bus.listenerCount() > 0) bus.emit({
+						phase: "execute",
+						runId: state.runId,
+						sessionId: state.run.sessionId,
+						ts: state.now(),
+						data: {
+							kind: "thinking-delta",
+							delta: response.thinking
+						}
+					});
 				}
 				const responseText = partsToText(response.content);
 				if (!llm.stream && responseText !== "") await this.#deps.uiBridge?.onTextDelta?.(state.runId, responseText);
@@ -2514,6 +2888,11 @@ var AgentLoop = class {
 					hasToolCalls: Boolean(response.toolCalls?.length),
 					contentLength: responseText.length
 				} });
+				if (response.usage) trace.record("llm.usage", { data: {
+					turn,
+					inputTokens: response.usage.inputTokens,
+					outputTokens: response.usage.outputTokens
+				} });
 				if (!response.toolCalls?.length) {
 					messages.push({
 						role: "assistant",
@@ -2533,6 +2912,7 @@ var AgentLoop = class {
 					content: response.content ?? [],
 					toolCalls: response.toolCalls
 				});
+				const carried = [];
 				for (const call of response.toolCalls) {
 					let result;
 					try {
@@ -2541,11 +2921,7 @@ var AgentLoop = class {
 						if (e instanceof RunTerminated) return finish(e.outcome.status, e.outcome.reason, e.outcome.message, e.outcome.code);
 						throw e;
 					}
-					messages.push({
-						role: "tool",
-						toolCallId: call.id,
-						content: await this.#toolResultParts(call, result, state)
-					});
+					carried.push(...await this.#pushToolResult(state, call, result));
 					try {
 						await this.#drainSurfaceAction(state);
 					} catch (e) {
@@ -2553,6 +2929,10 @@ var AgentLoop = class {
 						throw e;
 					}
 				}
+				if (carried.length > 0) messages.push({
+					role: "user",
+					content: carried
+				});
 			}
 		} finally {
 			this.#disarmDeadline(state);
@@ -2598,7 +2978,10 @@ var AgentLoop = class {
 		try {
 			await this.#lifecycle({
 				phase: status === "completed" ? "complete" : "fail",
-				data: { reason }
+				data: {
+					reason,
+					...status === "failed" ? { detail: output } : {}
+				}
 			}, state);
 		} catch (e) {
 			trace.record("run.warning", { message: `Terminal lifecycle hook failed: ${messageOf(e)}` });
@@ -2629,7 +3012,7 @@ var AgentLoop = class {
 			state.messages.push({
 				role: "tool",
 				toolCallId: call.id,
-				content: await this.#toolResultParts(call, result, state)
+				content: (await this.#toolResultParts(call, result, state)).tool
 			});
 			state.trace.record("run.warning", {
 				message: `Sealed unanswered tool call "${call.name}": the run ended before it produced a result.`,
@@ -2706,6 +3089,7 @@ var AgentLoop = class {
 			},
 			trace,
 			reader: new SkillReader(this.#deps.fs, this.#deps.skillIndex),
+			documentSeq: 0,
 			activated: new Set(snapshot.activeSkillNames),
 			activatedTools: new Map(snapshot.activatedTools.map((d) => [d.name, d])),
 			skillAllowedTools: new Map(Object.entries(snapshot.skillAllowedTools ?? {})),
@@ -2723,6 +3107,7 @@ var AgentLoop = class {
 			surfacePatchCount: 0,
 			processedSurfaceActionNonces: new Set(snapshot.processedSurfaceActionNonces ?? []),
 			emittedToolEvents: /* @__PURE__ */ new Set(),
+			artifactPaths: /* @__PURE__ */ new Set(),
 			unknownToolCalls: 0,
 			startMs,
 			pausedMs: snapshot.pausedMs ?? 0,
@@ -2741,6 +3126,7 @@ var AgentLoop = class {
 		} });
 		const pending = pendingInteraction;
 		const pendingCall = this.#findPendingToolCall(state.messages);
+		const carried = [];
 		try {
 			await this.#replaySurfaceEvents(state);
 			if (pendingSurfaceAction) await this.#resumeSurfaceAction(state, pendingSurfaceAction);
@@ -2757,11 +3143,7 @@ var AgentLoop = class {
 					...pendingCall,
 					arguments: args
 				}, state);
-				state.messages.push({
-					role: "tool",
-					toolCallId: pendingCall.id,
-					content: await this.#toolResultParts(pendingCall, result, state)
-				});
+				carried.push(...await this.#pushToolResult(state, pendingCall, result));
 				await this.#drainSurfaceAction(state);
 			} else if (pending?.type === "ask" && pendingCall) {
 				const value = await this.#interact(state, pending, {
@@ -2779,32 +3161,24 @@ var AgentLoop = class {
 					name: pendingCall.name,
 					callId: pendingCall.id
 				} });
-				state.messages.push({
-					role: "tool",
-					toolCallId: pendingCall.id,
-					content: await this.#toolResultParts(pendingCall, result, state)
-				});
+				carried.push(...await this.#pushToolResult(state, pendingCall, result));
 				await this.#drainSurfaceAction(state);
 			} else if (pendingCall) {
 				const result = await this.#executeCall(pendingCall, state);
-				state.messages.push({
-					role: "tool",
-					toolCallId: pendingCall.id,
-					content: await this.#toolResultParts(pendingCall, result, state)
-				});
+				carried.push(...await this.#pushToolResult(state, pendingCall, result));
 				await this.#drainSurfaceAction(state);
 			}
 			for (;;) {
 				const next = this.#findPendingToolCall(state.messages);
 				if (!next) break;
 				const result = await this.#executeCall(next, state);
-				state.messages.push({
-					role: "tool",
-					toolCallId: next.id,
-					content: await this.#toolResultParts(next, result, state)
-				});
+				carried.push(...await this.#pushToolResult(state, next, result));
 				await this.#drainSurfaceAction(state);
 			}
+			if (carried.length > 0) state.messages.push({
+				role: "user",
+				content: carried
+			});
 		} catch (e) {
 			if (e instanceof RunTerminated) return this.#finish(state, e.outcome.status, e.outcome.reason, e.outcome.message, e.outcome.code);
 			throw e;
@@ -2829,7 +3203,7 @@ var AgentLoop = class {
 	* 拿 `activated[0]` 顶替会把内置工具的失败栽给一个无关技能，比不归因更糟（设计 26 §2.3）。
 	*/
 	#skillOf(call, state) {
-		if (call.name === "read_skill_file" || call.name === "ask_user") return void 0;
+		if (call.name === "read_skill_file" || call.name === "ask_user" || call.name === "read_linked_document") return;
 		const resolution = resolveToolName(call.name, state.activated, state.activatedTools.keys());
 		return resolution.kind === "script" ? resolution.skillName : void 0;
 	}
@@ -2843,6 +3217,7 @@ var AgentLoop = class {
 	/**
 	* 流式 LLM 调用：text-delta 仅在 EventBus 有订阅者时发射 llm.delta 事件，
 	* 并同步转发 uiBridge.onTextDelta；tool-calls/done 组装为 LlmResponse 走原有分支。
+	* thinking-delta 同理累积成 `response.thinking`（每轮一段，UI-UX5 #32）。
 	*/
 	async #completeStreaming(llm, state, input) {
 		const emitDelta = (delta) => {
@@ -2859,18 +3234,41 @@ var AgentLoop = class {
 			});
 			this.#deps.uiBridge?.onTextDelta?.(state.runId, delta);
 		};
+		const emitThinkingDelta = (delta) => {
+			const bus = this.#deps.eventBus;
+			if (bus && bus.listenerCount() > 0) bus.emit({
+				phase: "execute",
+				runId: state.runId,
+				sessionId: state.run.sessionId,
+				ts: state.now(),
+				data: {
+					kind: "thinking-delta",
+					delta
+				}
+			});
+		};
 		let content = "";
+		let thinking = "";
 		let doneContent;
+		let usage;
 		const toolCalls = [];
 		for await (const event of llm.stream(input)) if (event.type === "text-delta") {
 			content += event.delta;
 			emitDelta(event.delta);
+		} else if (event.type === "thinking-delta") {
+			thinking += event.delta;
+			emitThinkingDelta(event.delta);
 		} else if (event.type === "tool-calls") toolCalls.push(...event.toolCalls);
-		else if (event.type === "done") doneContent = event.content;
+		else if (event.type === "done") {
+			doneContent = event.content;
+			usage = event.usage ?? usage;
+		}
 		const text = doneContent ?? content;
 		return {
 			content: text === "" ? void 0 : textParts(text),
-			toolCalls: toolCalls.length > 0 ? toolCalls : void 0
+			toolCalls: toolCalls.length > 0 ? toolCalls : void 0,
+			...thinking === "" ? {} : { thinking },
+			...usage ? { usage } : {}
 		};
 	}
 	/** 生命周期接线：更新 phase、发事件、跑钩子 */
@@ -3037,6 +3435,7 @@ var AgentLoop = class {
 		if (call.argumentsParseError) result = toolError("VALIDATION_FAILED", `Tool arguments were not valid JSON: ${call.argumentsParseError}`);
 		else if (call.name === "read_skill_file") result = await this.#handleReadSkillFile(call, state);
 		else if (call.name === "ask_user") result = await this.#handleAskUser(call, state);
+		else if (call.name === "read_linked_document" && this.#deps.linkedDocuments !== void 0) result = await this.#handleReadLinkedDocument(call, state);
 		else if (!this.#checkToolAccess(state, call.name)) result = this.#deniedToolError(state, call.name);
 		else {
 			const resolution = resolveToolName(call.name, state.activated, state.activatedTools.keys());
@@ -3097,10 +3496,13 @@ var AgentLoop = class {
 			});
 			this.#emitTool(state, "failed", call, result.error?.code);
 		}
-		for (const artifact of result.artifacts ?? []) state.trace.record("artifact.created", { data: {
-			artifactId: artifact.id,
-			path: artifact.path
-		} });
+		for (const artifact of result.artifacts ?? []) {
+			state.artifactPaths.add(artifact.path);
+			state.trace.record("artifact.created", { data: {
+				artifactId: artifact.id,
+				path: artifact.path
+			} });
+		}
 		if (state.unknownToolCalls > this.#config.maxUnknownToolRetries) throw new RunTerminated({
 			status: "failed",
 			reason: "tool-resolution-exhausted",
@@ -3116,7 +3518,12 @@ var AgentLoop = class {
 			state.trace.record("run.warning", { message: "UiBridge does not support renderSurface; UI surface was not rendered" });
 			return;
 		}
-		const attributed = this.#attributeSurfaceEvent(state, event);
+		let attributed = this.#attributeSurfaceEvent(state, event);
+		if (attributed.type === "open") {
+			const kept = await this.#stripDuplicateFileLinks(state, attributed);
+			if (kept === void 0) return;
+			attributed = kept;
+		}
 		if (attributed.type === "patch") this.#consumeSurfacePatchBudget(state);
 		await bridge.renderSurface(attributed);
 		state.surfaceEvents.push(structuredClone(attributed));
@@ -3159,6 +3566,44 @@ var AgentLoop = class {
 			}))
 		};
 	}
+	/**
+	* 剥掉指向「本 run 已写出 artifact」的 FileLink 节点（UI-UX5 #5）：
+	* 宿主在 run 完成时会把每个 artifact 自动渲染成下载卡（`buildRenderResult`），
+	* 模型/技能再建一张就是重复。整棵树剥空返回 undefined（放弃这次 open）；
+	* 有剥离就记一条 run.warning，让「少了一张卡」在轨迹里可查。
+	*/
+	async #stripDuplicateFileLinks(state, event) {
+		if (state.artifactPaths.size === 0) {
+			const listed = await this.#deps.artifactStore.listArtifacts(state.runId).catch(() => []);
+			for (const artifact of listed) state.artifactPaths.add(artifact.path);
+		}
+		if (state.artifactPaths.size === 0) return event;
+		const paths = state.artifactPaths;
+		let stripped = 0;
+		const walk = (node) => {
+			if (node.component === "FileLink") {
+				const path = node.props?.["path"];
+				if (typeof path === "string" && paths.has(path)) {
+					stripped += 1;
+					return;
+				}
+			}
+			if (!node.children || node.children.length === 0) return node;
+			const children = node.children.map(walk).filter((child) => child !== void 0);
+			if (children.length === node.children.length) return node;
+			return {
+				...node,
+				children
+			};
+		};
+		const node = walk(event.node);
+		if (stripped === 0) return event;
+		state.trace.record("run.warning", { message: `Dropped ${stripped} FileLink node(s) duplicating auto-rendered artifact download card(s)` });
+		return node === void 0 ? void 0 : {
+			...event,
+			node
+		};
+	}
 	/** Awaits the single action emitted with the most recently persisted tool result. */
 	async #drainSurfaceAction(state) {
 		const request = state.pendingSurfaceAction;
@@ -3303,9 +3748,149 @@ var AgentLoop = class {
 			}
 		});
 	}
+	/**
+	* 读取页面链接指向的文档（分册 22 §2.3 的六步）。
+	*
+	* 顺序不能调换：准入 → 同源判定 → 跨源确认 → 取数 → 格式分派 → 留痕。
+	* 把确认放到取数之后，就等于「先下载了再问用户要不要下载」。
+	*/
+	async #handleReadLinkedDocument(call, state) {
+		const reader = this.#deps.linkedDocuments;
+		const url = call.arguments.url;
+		if (typeof url !== "string" || url.trim() === "") return toolError("VALIDATION_FAILED", "read_linked_document needs a \"url\" string.");
+		const audit = async (data) => {
+			state.trace.record("run.warning", { message: `read_linked_document: ${JSON.stringify(data)}` });
+			await this.#deps.documentAudit?.append({
+				type: "document.read",
+				target: url,
+				data
+			});
+		};
+		let target;
+		try {
+			target = assertRemoteUrlAllowed(url, this.#config.remoteUrl ?? {});
+		} catch (e) {
+			const message = messageOf(e);
+			await audit({
+				ok: false,
+				reason: message
+			});
+			return toolError("NETWORK_BLOCKED", message);
+		}
+		const sameOrigin = reader.origin !== void 0 && reader.origin === target.origin;
+		if (!sameOrigin) {
+			if (!await this.#confirm(`Read the linked document at ${target.href}?`, state)) {
+				await audit({
+					ok: false,
+					crossOrigin: true,
+					approved: false,
+					reason: "declined"
+				});
+				return toolError("TOOL_DENIED", `Reading ${target.href} was declined by the user.`);
+			}
+		}
+		let fetched;
+		try {
+			fetched = await reader.read(target.href);
+		} catch (e) {
+			const message = messageOf(e);
+			await audit({
+				ok: false,
+				crossOrigin: !sameOrigin,
+				approved: !sameOrigin,
+				reason: message
+			});
+			return toolError("TOOL_EXECUTION_FAILED", message);
+		}
+		const mime = fetched.mimeType.split(";")[0]?.trim().toLowerCase() ?? "";
+		const name = target.pathname.split("/").pop() || "document";
+		const id = `doc-${state.runId}-${++state.documentSeq}`;
+		const record = {
+			ok: true,
+			crossOrigin: !sameOrigin,
+			approved: !sameOrigin,
+			bytes: fetched.bytes.length,
+			mimeType: mime
+		};
+		if (mime === SUPPORTED_DOCUMENT_MIME.pdf) {
+			const part = {
+				type: "file",
+				mimeType: mime,
+				data: toBase64(fetched.bytes),
+				name,
+				id
+			};
+			const tooLarge = this.#documentTooLarge(part);
+			if (tooLarge !== void 0) {
+				await audit({
+					...record,
+					ok: false,
+					reason: tooLarge
+				});
+				return toolError("TOOL_RESULT_TOO_LARGE", tooLarge);
+			}
+			await audit(record);
+			return {
+				ok: true,
+				content: [part]
+			};
+		}
+		let text;
+		if (mime === SUPPORTED_DOCUMENT_MIME.docx) {
+			if (this.#deps.docxExtractor === void 0) {
+				await audit({
+					...record,
+					ok: false,
+					reason: "no docx extractor"
+				});
+				return toolError("TOOL_UNSUPPORTED", "Word documents cannot be read in this environment: no docx text extractor is configured.");
+			}
+			try {
+				text = await this.#deps.docxExtractor(fetched.bytes);
+			} catch (e) {
+				const message = messageOf(e);
+				await audit({
+					...record,
+					ok: false,
+					reason: message
+				});
+				return toolError("TOOL_EXECUTION_FAILED", message);
+			}
+		} else if (mime.startsWith("text/")) text = new TextDecoder().decode(fetched.bytes);
+		else {
+			await audit({
+				...record,
+				ok: false,
+				reason: `unsupported mime ${mime}`
+			});
+			return toolError("TOOL_UNSUPPORTED", `${UNSUPPORTED_DOCUMENT_MESSAGE} This link served "${mime}".`);
+		}
+		const part = {
+			type: "document-text",
+			text,
+			name,
+			id
+		};
+		const tooLarge = this.#documentTooLarge(part);
+		if (tooLarge !== void 0) {
+			await audit({
+				...record,
+				ok: false,
+				reason: tooLarge
+			});
+			return toolError("TOOL_RESULT_TOO_LARGE", tooLarge);
+		}
+		await audit(record);
+		return {
+			ok: true,
+			content: [part]
+		};
+	}
 	async #handleAskUser(call, state) {
+		const rawFields = call.arguments["fields"];
+		if (Array.isArray(rawFields) && rawFields.length > 0) return this.#handleAskUserFields(call, state, rawFields);
 		const question = call.arguments["question"];
-		if (typeof question !== "string" || question === "") return toolError("TOOL_EXECUTION_FAILED", "ask_user requires a non-empty \"question\" string argument");
+		if (typeof question !== "string" || question === "") return toolError("TOOL_EXECUTION_FAILED", "ask_user requires either a non-empty \"question\" string or a non-empty \"fields\" array");
 		const rawChoices = call.arguments["choices"];
 		const choices = Array.isArray(rawChoices) ? rawChoices.filter((choice) => typeof choice === "string" && choice !== "") : [];
 		const id = this.#nextInteractionId(state);
@@ -3344,6 +3929,60 @@ var AgentLoop = class {
 			throw e;
 		}
 	}
+	/**
+	* 多字段 `ask_user`（FR-11.1）。构造的是与「技能缺参」同一个 `{ type: 'form' }`
+	* 交互，因此渲染、回传、快照都走既有那一条路径——不允许出现第二套表单实现。
+	*/
+	async #handleAskUserFields(call, state, rawFields) {
+		const limit = this.#config.askUserMaxFields;
+		if (rawFields.length > limit) return toolError("TOOL_EXECUTION_FAILED", `ask_user accepts at most ${limit} fields, received ${rawFields.length}. Split the collection into several steps, or group related fields and ask for the rest afterwards.`);
+		const fields = [];
+		for (const [index, raw] of rawFields.entries()) {
+			const field = raw;
+			const at = `fields[${index}]`;
+			if (typeof field !== "object" || field === null) return toolError("VALIDATION_FAILED", `ask_user ${at} must be an object`);
+			const name = field["name"];
+			const label = field["label"];
+			const type = field["type"];
+			if (typeof name !== "string" || name === "") return toolError("VALIDATION_FAILED", `ask_user ${at} requires a non-empty "name"`);
+			if (typeof label !== "string" || label === "") return toolError("VALIDATION_FAILED", `ask_user ${at} requires a non-empty "label"`);
+			if (type === "multi-select") return toolError("VALIDATION_FAILED", `ask_user ${at} does not support "multi-select". Use render_ui with a MultiSelect field instead.`);
+			if (typeof type !== "string" || !ASK_USER_FIELD_TYPES.includes(type)) return toolError("VALIDATION_FAILED", `ask_user ${at} has unsupported type "${String(type)}". Supported types: ${ASK_USER_FIELD_TYPES.join(", ")}.`);
+			const options = field["options"];
+			if (type === "select" && !Array.isArray(options)) return toolError("VALIDATION_FAILED", `ask_user ${at} is a select and requires "options"`);
+			fields.push({
+				name,
+				label,
+				type,
+				...field["required"] === true ? { required: true } : {},
+				...typeof field["description"] === "string" ? { description: field["description"] } : {},
+				...Array.isArray(options) ? { options: options.filter((o) => typeof o === "object" && o !== null).map((o) => ({
+					label: String(o["label"] ?? o["value"]),
+					value: o["value"]
+				})) } : {}
+			});
+		}
+		const question = call.arguments["question"];
+		if (typeof question === "string" && question !== "") state.trace.record("run.warning", { message: "ask_user received both \"question\" and \"fields\"; the form was used and the single question was ignored." });
+		try {
+			const value = await this.#interact(state, {
+				type: "form",
+				id: this.#nextInteractionId(state),
+				...typeof question === "string" && question !== "" ? { title: question } : {},
+				fields
+			}, { tool: call.name });
+			return {
+				ok: true,
+				content: [{
+					type: "text",
+					text: typeof value === "string" ? value : JSON.stringify(value ?? {})
+				}]
+			};
+		} catch (e) {
+			if (e instanceof BridgeRequestError) return toolError("UI_UNAVAILABLE", `ask_user failed: ${e.message}`);
+			throw e;
+		}
+	}
 	async #handleReadSkillFile(call, state) {
 		const skillName = call.arguments["skillName"];
 		if (typeof skillName !== "string" || skillName === "") return toolError("TOOL_EXECUTION_FAILED", "read_skill_file requires a non-empty \"skillName\" string argument");
@@ -3417,27 +4056,89 @@ var AgentLoop = class {
 		return toolError("SKILL_NOT_FOUND", `Skill not found via external providers: ${skillKey}${detail}`);
 	}
 	/**
-	* 工具结果 → tool 消息内容。image 分片单独提出，不进 JSON 也不参与截断计算（0.6.0 §1.1）：
-	* 100 KB 的文本预算遇到一张 200 KB 的图会把整个结果截成垃圾。
+	* 超预算的文档分片换成一条说明（FR-23.4）。**不截断**：
+	* 半份 PDF 是坏文件，半份抽取文本会让模型以为自己读全了。
+	*/
+	#documentTooLarge(part) {
+		if (part.type !== "file" && part.type !== "document-text") return void 0;
+		const isFile = part.type === "file";
+		const size = isFile ? part.data.length : new TextEncoder().encode(part.text).length;
+		const max = isFile ? this.#config.maxDocumentBytes : this.#config.maxDocumentTextBytes;
+		if (size <= max) return void 0;
+		return `The ${isFile ? "document" : "extracted document text"}${part.name ? ` "${part.name}"` : ""} was not attached: it is ${size} bytes, over the ${max} byte limit. It was not truncated, because a partial document would be unusable. Ask for a smaller file, a specific page range, or a summary produced elsewhere.`;
+	}
+	/** 推一条 tool 消息，返回需要另投 user 消息的二进制分片 */
+	async #pushToolResult(state, call, result) {
+		const split = await this.#toolResultParts(call, result, state);
+		state.messages.push({
+			role: "tool",
+			toolCallId: call.id,
+			content: split.tool
+		});
+		return split.carried;
+	}
+	/**
+	* 工具结果 → tool 消息内容 + 另投的二进制分片。只有白名单内的分片进 JSON 并参与截断计算（FR-23.3）：
+	* 100 KB 的文本预算遇到一张 200 KB 的图会把整个结果截成垃圾，
+	* 一份被截断的 PDF 则直接是坏文件。
+	*
+	* `carried` 单独返回而不是并进 tool 消息：OpenAI 协议的 tool 消息只有 `content: string`，
+	* Google 的 `functionResponse`、Anthropic 的 `tool_result` 同样只收文本——
+	* 三家客户端都会当场抛 `VALIDATION_FAILED`。二进制只能走 user 消息。
 	*/
 	async #toolResultParts(call, result, state) {
-		const images = result.content.filter((part) => part.type === "image");
-		if (images.length === 0) return textParts(await this.#serializeToolResult(call, result, state));
+		const budgeted = result.content.filter((part) => TEXT_BUDGETED_CONTENT_TYPES.has(part.type));
+		const passthrough = result.content.filter((part) => !TEXT_BUDGETED_CONTENT_TYPES.has(part.type));
+		if (passthrough.length === 0) return {
+			tool: textParts(await this.#serializeToolResult(call, result, state)),
+			carried: []
+		};
 		const textual = {
 			...result,
-			content: result.content.filter((part) => part.type !== "image")
+			content: budgeted
+		};
+		const notes = [];
+		const carried = [];
+		for (const part of passthrough) {
+			const tooLarge = this.#documentTooLarge(part);
+			if (tooLarge) {
+				state.trace.record("run.warning", { message: tooLarge });
+				notes.push(tooLarge);
+				continue;
+			}
+			if (part.type === "image") carried.push({
+				type: "image",
+				mimeType: part.mimeType,
+				data: part.data
+			});
+			else if (part.type === "file") carried.push({
+				type: "file",
+				mimeType: part.mimeType,
+				data: part.data,
+				...part.name ? { name: part.name } : {}
+			});
+			else if (part.type === "document-text") notes.push(part.text);
+		}
+		return {
+			tool: [
+				{
+					type: "text",
+					text: await this.#serializeToolResult(call, textual, state)
+				},
+				...notes.map((text) => ({
+					type: "text",
+					text
+				})),
+				...carried.length > 0 ? [{
+					type: "text",
+					text: `The ${carried.length === 1 ? "attachment" : `${carried.length} attachments`} from "${call.name}" ${carried.length === 1 ? "is" : "are"} in the next message.`
+				}] : []
+			],
+			carried
 		};
-		return [{
-			type: "text",
-			text: await this.#serializeToolResult(call, textual, state)
-		}, ...images.map((image) => ({
-			type: "image",
-			mimeType: image.mimeType,
-			data: image.data
-		}))];
 	}
 	/**
-	* 工具结果回喂序列化：超过 toolResultMaxBytes（默认 100KB）时头尾保留截断，
+	* 工具结果回喂序列化：超过 toolResultMaxBytes（默认 256KB）时头尾保留截断，
 	* 完整内容经 artifactStore 落 artifact，回喂摘要含 artifact id。
 	*/
 	async #serializeToolResult(call, result, state) {
@@ -3675,6 +4376,7 @@ var AgentLoop = class {
 			skillRoot: root,
 			runId: state.runId,
 			confirm: (message) => this.#confirm(message, state),
+			...this.#deps.fetchData ? { fetchData: this.#deps.fetchData } : {},
 			onWarning: (message) => state.trace.record("run.warning", { message }),
 			onArtifactCreated: (artifact) => createdIds.add(artifact.id)
 		});
@@ -4091,7 +4793,11 @@ var WebSkillRuntime = class {
 			snapshotStore: this.#deps.snapshotStore,
 			skillStateGuard: this.#deps.skillStateGuard,
 			skillIntegrityGuard: this.#deps.skillIntegrityGuard,
-			skillOutcomeReporter: this.#deps.skillOutcomeReporter
+			skillOutcomeReporter: this.#deps.skillOutcomeReporter,
+			fetchData: this.#deps.fetchData,
+			linkedDocuments: this.#deps.linkedDocuments,
+			docxExtractor: this.#deps.docxExtractor,
+			documentAudit: this.#deps.documentAudit
 		}, this.#deps.config);
 		const runId = `run-${Math.random().toString(36).slice(2, 10)}`;
 		this.#loops.set(runId, loop);
@@ -4212,7 +4918,11 @@ var WebSkillRuntime = class {
 			snapshotStore: store,
 			skillStateGuard: this.#deps.skillStateGuard,
 			skillIntegrityGuard: this.#deps.skillIntegrityGuard,
-			skillOutcomeReporter: this.#deps.skillOutcomeReporter
+			skillOutcomeReporter: this.#deps.skillOutcomeReporter,
+			fetchData: this.#deps.fetchData,
+			linkedDocuments: this.#deps.linkedDocuments,
+			docxExtractor: this.#deps.docxExtractor,
+			documentAudit: this.#deps.documentAudit
 		}, this.#deps.config);
 		this.#loops.set(runId, loop);
 		try {
@@ -4723,7 +5433,9 @@ function parseBridgeRequest(data) {
 	const { kind, id } = data;
 	if (!isNonEmptyString(id)) return void 0;
 	switch (kind) {
-		case "readReference": return isNonEmptyString(data["path"]) ? {
+		case "readReference":
+		case "readAsset":
+		case "readAssetBinary": return isNonEmptyString(data["path"]) ? {
 			kind,
 			id,
 			path: data["path"]
@@ -4745,6 +5457,16 @@ function parseBridgeRequest(data) {
 			id,
 			message: data["message"]
 		} : void 0;
+		case "fetchData": {
+			if (!isNonEmptyString(data["sourceId"])) return void 0;
+			const params = data["params"];
+			return {
+				kind,
+				id,
+				sourceId: data["sourceId"],
+				...isRecord(params) ? { params } : {}
+			};
+		}
 		default: return;
 	}
 }
@@ -4930,6 +5652,38 @@ var CapabilityApproval = class CapabilityApproval {
 		return "allowed";
 	}
 };
+/**
+* 从 run 的 trace 聚合大模型用量（请求次数 + 输入/输出 token）。
+* 与 `summarizeToolCalls` 同型：消费方不再各自遍历 trace。
+* @stable
+*/
+function summarizeRunUsage(trace) {
+	let llmCalls = 0;
+	let inputTokens = 0;
+	let outputTokens = 0;
+	let hasUsage = false;
+	for (const event of trace) {
+		if (event.type === "llm.request") {
+			llmCalls += 1;
+			continue;
+		}
+		if (event.type !== "llm.usage") continue;
+		const input = event.data?.["inputTokens"];
+		const output = event.data?.["outputTokens"];
+		const hasInput = typeof input === "number" && Number.isFinite(input);
+		const hasOutput = typeof output === "number" && Number.isFinite(output);
+		if (hasInput) inputTokens += input;
+		if (hasOutput) outputTokens += output;
+		if (hasInput || hasOutput) hasUsage = true;
+	}
+	return {
+		llmCalls,
+		...hasUsage ? {
+			inputTokens,
+			outputTokens
+		} : {}
+	};
+}
 const RUN_TRACE_SCHEMA_VERSION = 1;
 /** 终止原因：取最后一条 run.completed/cancelled/failed 事件的 data.reason */
 function extractEndReason(events) {
@@ -4944,6 +5698,7 @@ function extractEndReason(events) {
 function summarize(trace) {
 	const endReason = extractEndReason(trace.events);
 	const durationMs = trace.endedAt === void 0 ? void 0 : Date.parse(trace.endedAt) - Date.parse(trace.startedAt);
+	const runUsage = summarizeRunUsage(trace.events);
 	return {
 		runId: trace.runId,
 		startedAt: trace.startedAt,
@@ -4954,7 +5709,11 @@ function summarize(trace) {
 		...trace.sessionId !== void 0 ? { sessionId: trace.sessionId } : {},
 		...trace.endedAt !== void 0 ? { endedAt: trace.endedAt } : {},
 		...endReason !== void 0 ? { endReason } : {},
-		...durationMs !== void 0 && Number.isFinite(durationMs) && durationMs >= 0 ? { durationMs } : {}
+		...durationMs !== void 0 && Number.isFinite(durationMs) && durationMs >= 0 ? { durationMs } : {},
+		...runUsage.inputTokens !== void 0 ? { usage: {
+			inputTokens: runUsage.inputTokens,
+			outputTokens: runUsage.outputTokens ?? 0
+		} } : {}
 	};
 }
 function parseTraceFile(raw, path) {
@@ -5147,6 +5906,12 @@ function applyFilter(summaries, filter) {
 * @stable
 */
 function summarizeToolCalls(run) {
+	const startedAtByCallId = /* @__PURE__ */ new Map();
+	for (const event of run.trace) {
+		if (event.type !== "tool.started") continue;
+		const callId = event.data?.["callId"];
+		if (typeof callId === "string" && !startedAtByCallId.has(callId)) startedAtByCallId.set(callId, event.ts);
+	}
 	const calls = [];
 	for (const event of run.trace) {
 		if (event.type !== "tool.completed" && event.type !== "tool.failed") continue;
@@ -5156,6 +5921,7 @@ function summarizeToolCalls(run) {
 		const args = event.data?.["args"];
 		const durationMs = event.data?.["durationMs"];
 		const errorCode = event.data?.["code"];
+		const startedAt = startedAtByCallId.get(callId);
 		calls.push({
 			callId,
 			name,
@@ -5163,6 +5929,7 @@ function summarizeToolCalls(run) {
 			...typeof args === "string" ? { args } : {},
 			...typeof durationMs === "number" ? { durationMs } : {},
 			...typeof errorCode === "string" ? { errorCode } : {},
+			...startedAt !== void 0 ? { startedAt } : {},
 			...event.type === "tool.failed" && typeof event.message === "string" ? { errorMessage: event.message } : {}
 		});
 	}
@@ -5386,4 +6153,4 @@ var FsSessionStore = class {
 };
 
 //#endregion
-export { fromVercelStreamPart as $, SerializingMemoryStore as A, bridgeError as B, ProgressiveRouter as C, sealToolCallPairs as Ct, RUN_SNAPSHOT_SCHEMA_VERSION as D, toVercelToolSpecs as Dt, READ_SKILL_FILE_TOOL_NAME as E, toRecordDigests as Et, USER_PROFILE_PROMPT_HEADER as F, exportUserProfile as G, createScriptContext as H, USER_PROFILE_REFINE_PROMPT as I, extractTodoTraceEvents as J, extractChartSpec as K, WebSkillRuntime as L, USER_PROFILE_EXPORT_VERSION as M, USER_PROFILE_KEY as N, RUN_TRACE_SCHEMA_VERSION as O, validateUiSpecEvent as Ot, USER_PROFILE_NO_INVENTION_RULE as P, fromVercelResult as Q, appendBehaviorRecords as R, OpenAiCompatibleClient as S, scriptToolName as St, READ_SKILL_FILE_TOOL as T, toLlmToolSpec as Tt, createWebSkillApi as U, buildRenderResult as V, diffUserProfile as W, findUnpairedToolCalls as X, extractUiSpecEvents as Y, formatSkillScriptManifest as Z, FsRunTraceStore as _, renderUserProfileContext as _t, AgentLoop as a, mergeProfileEntries as at, GoogleGenAiClient as b, schemaSourceLabel as bt, CapabilityApproval as c, normalizeErrorCode as ct, EMPTY_USER_PROFILE as d, parseBridgeRequest as dt, interruptedToolResult as et, EventBus as f, parseUserProfileExport as ft, FsRunSnapshotStore as g, refineUserProfile as gt, FsMemoryStore as h, readUserProfile as ht, ASK_USER_TOOL_NAME as i, mergeCatalogEntries as it, TraceRecorder as j, SESSION_SCHEMA_VERSION as k, validateUiSpecNode as kt, DEFAULT_LOOP_LIMITS as l, normalizeToolContent as lt, FsArtifactStore as m, readProfileEntries as mt, ASK_USER_INPUT_SCHEMA as n, isUnsupportedRunSnapshot as nt, AnthropicClient as o, networkPolicyLibSource as ot, FS_SESSION_PAGE_SIZE as p, readBehaviorRecords as pt, extractSkillCandidate as q, ASK_USER_TOOL as r, listSkillScripts as rt, BEHAVIOR_RECORDS_KEY as s, networkUrlHost as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, isNetworkAllowed as tt, DEFAULT_USER_PROFILE_LIMITS as u, normalizeToolError as ut, FsSessionStore as v, resolveToolName as vt, READ_SKILL_FILE_INPUT_SCHEMA as w, summarizeToolCalls as wt, HookRunner as x, schemaToForm as xt, FullDisclosureRouter as y, sampleBehaviorRecords as yt, applyUserProfileImport as z };
+export { createWebSkillApi as $, READ_LINKED_DOCUMENT_TOOL_NAME as A, schemaSourceLabel as At, TraceRecorder as B, validateUiSpecNode as Bt, FsSessionStore as C, readBehaviorRecords as Ct, OpenAiCompatibleClient as D, renderUserProfileContext as Dt, HookRunner as E, refineUserProfile as Et, RUN_TRACE_SCHEMA_VERSION as F, summarizeToolCalls as Ft, USER_PROFILE_PROMPT_HEADER as G, USER_PROFILE_EXPORT_VERSION as H, SESSION_SCHEMA_VERSION as I, toLlmToolSpec as It, appendBehaviorRecords as J, USER_PROFILE_REFINE_PROMPT as K, SUPPORTED_DOCUMENT_MIME as L, toRecordDigests as Lt, READ_SKILL_FILE_TOOL as M, scriptToolName as Mt, READ_SKILL_FILE_TOOL_NAME as N, sealToolCallPairs as Nt, ProgressiveRouter as O, resolveToolName as Ot, RUN_SNAPSHOT_SCHEMA_VERSION as P, summarizeRunUsage as Pt, createScriptContext as Q, SerializingMemoryStore as R, toVercelToolSpecs as Rt, FsRunTraceStore as S, parseUserProfileExport as St, GoogleGenAiClient as T, readUserProfile as Tt, USER_PROFILE_KEY as U, UNSUPPORTED_DOCUMENT_MESSAGE as V, USER_PROFILE_NO_INVENTION_RULE as W, bridgeError as X, applyUserProfileImport as Y, buildRenderResult as Z, EventBus as _, networkUrlHost as _t, ASK_USER_TOOL as a, extractUiSpecEvents as at, FsMemoryStore as b, normalizeToolError as bt, AnthropicClient as c, fromVercelResult as ct, DEFAULT_LOOP_LIMITS as d, isNetworkAllowed as dt, diffUserProfile as et, DEFAULT_MAX_DATA_SOURCE_BYTES as f, isUnsupportedRunSnapshot as ft, EMPTY_USER_PROFILE as g, networkPolicyLibSource as gt, DEFAULT_USER_PROFILE_LIMITS as h, mergeProfileEntries as ht, ASK_USER_MAX_FIELDS as i, extractTodoTraceEvents as it, READ_SKILL_FILE_INPUT_SCHEMA as j, schemaToForm as jt, READ_LINKED_DOCUMENT_TOOL as k, sampleBehaviorRecords as kt, BEHAVIOR_RECORDS_KEY as l, fromVercelStreamPart as lt, DEFAULT_MAX_DOCUMENT_TEXT_BYTES as m, mergeCatalogEntries as mt, ASK_USER_FIELD_TYPES as n, extractChartSpec as nt, ASK_USER_TOOL_NAME as o, findUnpairedToolCalls as ot, DEFAULT_MAX_DOCUMENT_BYTES as p, listSkillScripts as pt, WebSkillRuntime as q, ASK_USER_INPUT_SCHEMA as r, extractSkillCandidate as rt, AgentLoop as s, formatSkillScriptManifest as st, ALLOWED_TOOLS_EXCLUSION_REASON as t, exportUserProfile as tt, CapabilityApproval as u, interruptedToolResult as ut, FS_SESSION_PAGE_SIZE as v, normalizeErrorCode as vt, FullDisclosureRouter as w, readProfileEntries as wt, FsRunSnapshotStore as x, parseBridgeRequest as xt, FsArtifactStore as y, normalizeToolContent as yt, TEXT_BUDGETED_CONTENT_TYPES as z, validateUiSpecEvent as zt };