page-agent-sdk 2.20.0 → 2.20.1

package/dist/page-agent-sdk.js

@@ -14897,11 +14897,13 @@ function w_(e) {
 	if (!e.length) return;
 	let t = e.some((e) => e.parentId || e.deps && e.deps.length), n = [];
 	if (t) {
-		let t = (t) => e.filter((e) => e.parentId === t), r = (t) => e.find((e) => e.id === t)?.status === "completed" ? "✓" : "⏳", i = (e, a) => {
-			let o = "  ".repeat(a), s = e.deps?.length ? ` (依赖:${e.deps.map((e) => r(e)).join("")})` : "", c = e.evidence ? ` [证据:${e.evidence}]` : "", l = e.criteria ? ` [标准:${e.criteria}]` : "";
-			n.push(`${o}- #${e.id} [${e.status}] ${e.content}${l}${s}${c}`), t(e.id).forEach((e) => i(e, a + 1));
+		let t = (t) => e.filter((e) => e.parentId === t), r = (t) => e.find((e) => e.id === t)?.status === "completed" ? "✓" : "⏳", i = (e, a, o) => {
+			if (o.has(e.id)) return;
+			o.add(e.id);
+			let s = "  ".repeat(a), c = e.deps?.length ? ` (依赖:${e.deps.map((e) => r(e)).join("")})` : "", l = e.evidence ? ` [证据:${e.evidence}]` : "", u = e.criteria ? ` [标准:${e.criteria}]` : "";
+			n.push(`${s}- #${e.id} [${e.status}] ${e.content}${u}${c}${l}`), t(e.id).forEach((e) => i(e, a + 1, o));
 		};
-		e.filter((e) => !e.parentId).forEach((e) => i(e, 0));
+		e.filter((e) => !e.parentId).forEach((e) => i(e, 0, /* @__PURE__ */ new Set()));
 	} else e.forEach((e, t) => {
 		let r = e.evidence ? ` [证据:${e.evidence}]` : "";
 		n.push(`${t + 1}. #${e.id} [${e.status}] ${e.content}${r}`);
@@ -15456,7 +15458,7 @@ function iv(e) {
 		importStack(e) {
 			t.length = 0;
 			let n = Array.isArray(e) ? e : [];
-			for (let e of n) e && typeof e == "object" && "id" in e && "messages" in e && t.push(e);
+			for (let e of n) e && typeof e == "object" && "id" in e && "messages" in e && typeof e.id == "number" && Number.isFinite(e.id) && t.push(e);
 			r = t.reduce((e, t) => Math.max(e, t.id), 0) + 1;
 		}
 	};
@@ -17848,8 +17850,38 @@ var $b = [
 	"try { self.EventSource = undefined } catch {}",
 	"try { self.BroadcastChannel = undefined } catch {}",
 	"if (self.navigator && self.navigator.sendBeacon) self.navigator.sendBeacon = () => { throw new Error('sendBeacon 已被沙箱禁用') }"
-].join("\n");
-function ex(e, t, n = 3e3) {
+].join("\n"), ex = [
+	{
+		re: /\bimport\s*\(/,
+		msg: "动态 import() 拉外网模块"
+	},
+	{
+		re: /\bimport\s+[\w'"]/,
+		msg: "import 语句"
+	},
+	{
+		re: /\beval\s*\(/,
+		msg: "eval() 动态执行"
+	},
+	{
+		re: /\bFunction\s*\(/,
+		msg: "Function() 构造"
+	},
+	{
+		re: /new\s+Function\b/,
+		msg: "new Function() 构造"
+	},
+	{
+		re: /\brequire\s*\(/,
+		msg: "require() 拉模块"
+	}
+];
+function tx(e, t, n = 3e3) {
+	for (let { re: e, msg: n } of ex) if (e.test(t)) return Promise.resolve({
+		ok: !1,
+		error: `沙箱拒绝执行:脚本含禁用模式(${n})`,
+		elapsedMs: 0
+	});
 	return new Promise((r) => {
 		let i = Date.now(), a = !1, o = (e) => {
 			if (!a) {
@@ -17862,7 +17894,7 @@ function ex(e, t, n = 3e3) {
 					elapsedMs: Date.now() - i
 				});
 			}
-		}, s = $b + "\nself.onmessage = async (e) => {\n  try {\n    const fn = new Function(\"data\", e.data.script);\n    let result = fn(e.data.data);\n    if (result && typeof result.then === \"function\") result = await result;\n    self.postMessage({ ok: true, result });\n  } catch (err) {\n    self.postMessage({ ok: false, error: String((err && err.message) || err) });\n  }\n};", c = "", l;
+		}, s = $b + "\nself.onmessage = async (e) => {\n  try {\n    const fn = new Function(\"data\", e.data.script);\n    try { self.eval = undefined; self.Function = undefined; } catch {}\n    let result = fn(e.data.data);\n    if (result && typeof result.then === \"function\") result = await result;\n    self.postMessage({ ok: true, result });\n  } catch (err) {\n    self.postMessage({ ok: false, error: String((err && err.message) || err) });\n  }\n};", c = "", l;
 		try {
 			let e = new Blob([s], { type: "application/javascript" });
 			c = URL.createObjectURL(e), l = new Worker(c);
@@ -17897,7 +17929,7 @@ function ex(e, t, n = 3e3) {
 }
 //#endregion
 //#region src/core/tools/dataOps.ts
-var tx = /* @__PURE__ */ new Set([
+var nx = /* @__PURE__ */ new Set([
 	"describe_data",
 	"get_data",
 	"set_data",
@@ -17909,11 +17941,11 @@ var tx = /* @__PURE__ */ new Set([
 	"diff_data",
 	"draft_write",
 	"draft_commit"
-]), nx = /* @__PURE__ */ new Set(["read", "write"]);
-function rx(e, t = "simple") {
-	return t === "advanced" ? e : t === "minimal" ? e.filter((e) => nx.has(e.name)) : e.filter((e) => !tx.has(e.name));
+]), rx = /* @__PURE__ */ new Set(["read", "write"]);
+function ix(e, t = "simple") {
+	return t === "advanced" ? e : t === "minimal" ? e.filter((e) => rx.has(e.name)) : e.filter((e) => !nx.has(e.name));
 }
-function ix(e) {
+function ax(e) {
 	let { bindRef: t, value: n, schema: r, allowKeys: i, snapshots: a, maxSnapshots: o, audit: s, dryRun: c, op: l = "set" } = e, u = r.safeParse(n);
 	if (!u.success) return {
 		ok: !1,
@@ -17949,7 +17981,7 @@ function ix(e) {
 		data: u.data
 	};
 }
-function ax(e, n = {}) {
+function ox(e, n = {}) {
 	let i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s = ey(i), c = [], l = n.maxSnapshots ?? 20, u, d = n.autoLock !== !1, f = {
 		get: () => ({
 			schema: i,
@@ -18030,7 +18062,7 @@ function ax(e, n = {}) {
 		if (n !== null) return n;
 		let r = gb(e);
 		if (r.parseError) return Ug("", e, r.parseError);
-		let o = ix({
+		let o = ax({
 			bindRef: a,
 			value: r.parsed,
 			schema: i,
@@ -18312,7 +18344,7 @@ function ax(e, n = {}) {
 				e && (o = iy(o, e));
 			}
 		} else o = s ? ay(a, s) : a;
-		let c = hb(o), l = await ex(c, e, r && JSON.stringify(c).length > 1e5 ? 8e3 : 3e3);
+		let c = hb(o), l = await tx(c, e, r && JSON.stringify(c).length > 1e5 ? 8e3 : 3e3);
 		if (!l.ok) {
 			let t = /超时/.test(l.error || "");
 			return $({
@@ -18630,7 +18662,7 @@ function ax(e, n = {}) {
 		if (b.parseError) return Ug("", _, b.parseError);
 		let x = await h("set", y);
 		if (x !== null) return x;
-		let S = ix({
+		let S = ax({
 			bindRef: a,
 			value: b.parsed,
 			schema: i,
@@ -18753,7 +18785,7 @@ function ax(e, n = {}) {
 					}
 				});
 			}
-			let f = ix({
+			let f = ax({
 				bindRef: a,
 				value: d,
 				schema: i,
@@ -18799,8 +18831,8 @@ function ax(e, n = {}) {
 }
 //#endregion
 //#region src/core/tools/fetchDoc.ts
-var ox = 3e4, sx = [r(async ({ url: e, as: t }) => {
-	let n = new AbortController(), r = setTimeout(() => n.abort(), ox);
+var sx = 3e4, cx = [r(async ({ url: e, as: t }) => {
+	let n = new AbortController(), r = setTimeout(() => n.abort(), sx);
 	try {
 		let r = await fetch(e, {
 			method: "GET",
@@ -18817,7 +18849,7 @@ var ox = 3e4, sx = [r(async ({ url: e, as: t }) => {
 		].join("\n");
 	} catch (t) {
 		let r = t?.message || String(t);
-		return n.signal.aborted ? `获取失败:请求超时(${ox}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
+		return n.signal.aborted ? `获取失败:请求超时(${sx}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
 	} finally {
 		clearTimeout(r);
 	}
@@ -18828,7 +18860,7 @@ var ox = 3e4, sx = [r(async ({ url: e, as: t }) => {
 		url: t.string().describe("要抓取的 URL(同源或已配 CORS)"),
 		as: t.enum(["text", "markdown"]).optional().describe("返回格式标签,默认 text")
 	})
-})], cx = [
+})], lx = [
 	"id",
 	"class",
 	"href",
@@ -18840,12 +18872,12 @@ var ox = 3e4, sx = [r(async ({ url: e, as: t }) => {
 	"aria-label",
 	"name",
 	"type"
-];
-function lx(e, t) {
+], ux = /^(value|srcdoc|formaction|on\w+)$/i, dx = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session/i;
+function fx(e, t) {
 	if (!e) return null;
-	let { depth: n, attrs: r, includeText: i = !0 } = t, a = r !== void 0, o = r ?? cx, s = (e) => {
+	let { depth: n, attrs: r, includeText: i = !0 } = t, a = r !== void 0, o = r ?? lx, s = (e) => {
 		let t = {};
-		for (let n of Array.from(e.attributes)) (a ? o.includes(n.name) : o.includes(n.name) || n.name.startsWith("data-")) && (t[n.name] = n.value);
+		for (let n of Array.from(e.attributes)) (a ? o.includes(n.name) : o.includes(n.name) || n.name.startsWith("data-")) && (ux.test(n.name) || dx.test(n.name) || (t[n.name] = n.value));
 		return t;
 	}, c = (e, t) => {
 		let n = {
@@ -18861,10 +18893,10 @@ function lx(e, t) {
 	};
 	return c(e, n);
 }
-var ux = r(({ selector: e, depth: t, attrs: n, includeText: r }) => {
+var px = r(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 	let i = e ? document.querySelector(e) : document.body;
 	if (!i) return `未找到匹配元素:selector="${e}"`;
-	let a = lx(i, {
+	let a = fx(i, {
 		depth: t ?? 3,
 		attrs: n,
 		includeText: r ?? !0
@@ -18879,14 +18911,14 @@ var ux = r(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 		attrs: t.array(t.string()).optional().describe("属性白名单(传了 = 严格白名单;不传 = 默认常用 + data-*)"),
 		includeText: t.boolean().optional().describe("是否包含直接文本(默认 true)")
 	})
-}), dx = [ux];
+}), mx = [px];
 //#endregion
 //#region src/core/tools/envTool.ts
-function fx(e) {
+function hx(e) {
 	let t = e;
 	return typeof t.tagName == "string" || typeof t.nodeType == "number" && typeof t.nodeName == "string";
 }
-function px(e, t = 3, n = 2e3, r) {
+function gx(e, t = 3, n = 2e3, r) {
 	if (e == null) return e;
 	if (typeof e == "string") return e.length > n ? e.slice(0, n) + "…(已截断)" : e;
 	if (typeof e == "number" || typeof e == "boolean") return e;
@@ -18895,14 +18927,14 @@ function px(e, t = 3, n = 2e3, r) {
 	if (typeof e == "bigint") return `${e.toString()}n`;
 	if (typeof e != "object") return String(e);
 	let i = e;
-	if (fx(i)) {
+	if (hx(i)) {
 		let e = i;
 		return e.tagName ? `[Element: <${e.tagName.toLowerCase()}>]` : `[Node: ${e.nodeName}]`;
 	}
 	if (r?.has(i)) return "[Circular]";
 	let a = r ?? /* @__PURE__ */ new WeakSet();
 	if (a.add(i), Array.isArray(e)) {
-		let r = e.slice(0, 100).map((e) => px(e, t - 1, n, a));
+		let r = e.slice(0, 100).map((e) => gx(e, t - 1, n, a));
 		return e.length > 100 && r.push(`…(共 ${e.length} 项,已截断)`), r;
 	}
 	if (t < 0) return "(对象,已截断)";
@@ -18914,14 +18946,14 @@ function px(e, t = 3, n = 2e3, r) {
 			break;
 		}
 		try {
-			o[r] = px(i[r], t - 1, n, a);
+			o[r] = gx(i[r], t - 1, n, a);
 		} catch {
 			o[r] = "(getter 抛错)";
 		}
 	}
 	return o;
 }
-function mx(e) {
+function _x(e) {
 	let t = e ?? (typeof window < "u" ? window : {}), n = t.navigator, r = t.location, i = t.document;
 	return {
 		location: {
@@ -18954,25 +18986,30 @@ function mx(e) {
 		} : "(无 document)"
 	};
 }
-var hx = r(({ key: e }) => {
+var vx = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|opener|parent|top|self|window|globalThis|closed|history|navigation|trustedTypes|origin|crossOriginIsolated)$/, yx = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session|ticket/i, bx = r(({ key: e }) => {
 	if (e) {
+		if (vx.test(e) || yx.test(e)) return JSON.stringify({
+			key: e,
+			denied: !0,
+			reason: "安全:该 key 在 denylist(localStorage/sessionStorage/cookie/document 或敏感命名 token/secret/key/auth),不读取防泄漏"
+		}, null, 2);
 		let t = (typeof window < "u" ? window : {})[e];
 		return JSON.stringify({
 			key: e,
 			exists: t !== void 0,
 			type: typeof t,
-			value: px(t)
+			value: gx(t)
 		}, null, 2);
 	}
-	return JSON.stringify(mx(), null, 2);
+	return JSON.stringify(_x(), null, 2);
 }, {
 	name: "inspect_env",
 	description: "读取宿主页面环境信息(排查调试用,默认开启)。不传参 = 返回环境摘要(location 的 URL/origin/path、navigator 的浏览器/语言、viewport 视口尺寸、document 的 title/readyState);传 key = 读取指定 window 属性值(如 inspect_env({key:\"appConfig\"}) 读集成方挂的调试变量 window.appConfig)。用于排查「当前页面在哪/什么浏览器/视口多大/调试变量值是什么」。轻量只读,大结果自动外存 vfs。",
 	schema: t.object({ key: t.string().optional().describe("要读取的 window 属性名(如 \"appConfig\"/\"__DEBUG__\");不传 = 返回环境摘要") })
-}), gx = [hx];
+}), xx = [bx];
 //#endregion
 //#region src/core/harness/budget.ts
-function _x(e, t, n) {
+function Sx(e, t, n) {
 	let r = 0;
 	return {
 		name: "budget",
@@ -18997,12 +19034,12 @@ function _x(e, t, n) {
 }
 //#endregion
 //#region src/core/sdk/actions.ts
-var vx = /^[a-zA-Z][a-zA-Z0-9_]*$/;
-function yx(e) {
+var Cx = /^[a-zA-Z][a-zA-Z0-9_]*$/;
+function wx(e) {
 	let n = [];
 	for (let [i, a] of Object.entries(e)) {
-		if (!vx.test(i)) {
-			console.warn(`[page-agent-sdk][actions] 动作名 "${i}" 非法(须匹配 ${vx}),已跳过`);
+		if (!Cx.test(i)) {
+			console.warn(`[page-agent-sdk][actions] 动作名 "${i}" 非法(须匹配 ${Cx}),已跳过`);
 			continue;
 		}
 		let e = a.description || `宿主动作 ${i}`;
@@ -19022,9 +19059,9 @@ function yx(e) {
 	}
 	return n;
 }
-function bx(e) {
+function Tx(e) {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) vx.test(n) && (t[n] = {
+	for (let [n, r] of Object.entries(e)) Cx.test(n) && (t[n] = {
 		description: r.description,
 		hasParams: !!r.params
 	});
@@ -19032,11 +19069,11 @@ function bx(e) {
 }
 //#endregion
 //#region src/core/toolsets.ts
-var xx = sx, Sx = dx;
-function Cx(e, t) {
-	return ax(e, t);
+var Ex = cx, Dx = mx;
+function Ox(e, t) {
+	return ox(e, t);
 }
-function wx(e, t, n, r, i) {
+function kx(e, t, n, r, i) {
 	let a = e?.dataOps !== !1, o = e?.fetch !== !1, s = e?.domInspect === !0, c = e?.inspectEnv !== !1;
 	return [
 		...a ? t : [],
@@ -19047,15 +19084,15 @@ function wx(e, t, n, r, i) {
 }
 //#endregion
 //#region src/core/harness/usageHints.ts
-var Tx = .7;
-function Ex(e, t, n = "simple") {
+var Ax = .7;
+function jx(e, t, n = "simple") {
 	let r = n !== "advanced";
 	return {
 		name: "usageHints",
 		augmentPrompt: () => {
 			let n = [];
 			if (e?.planning !== !1 && (n.push("【自适应规划】按任务复杂度决定是否先规划,不要对简单任务过度编排:"), n.push("  · 简单/明确任务(改单字段、调样式、查值)→ 直接 read/write 执行,不必 write_todos。"), n.push("  · 复杂任务(多步、大改、有歧义、不可逆)→ 先 write_todos 拆解,首个任务标 in_progress,逐项推进。"), n.push("  · 执行中发现步骤要改/补/细分 → 用 update_todo({id, content?, status?}) 按 id 增量改单项,不必重传整个清单。"), n.push("  · 规划出多步方案若需用户拍板 → 先 request_human_confirmation 给方案选项,确认后再执行。"), n.push("  · 规划阶段有轮次预算(maxPlanRevisions,默认 5):勿反复调研/改计划而不执行,规划充分后即开始 write 落地。")), t && (r ? (n.push("读写主数据用 read/write(高层入口,自动乐观锁 + 自动快照)。read({jsonPath}) 读子路径当前值(返回含 hash,write 时自动比对,无需手动传);read() 不传读整个主数据 + 说明。write 改值两姿势:① 改单个字段/子路径用 write({patch:{op:\"set\", jsonPath:\"路径.字段\", value:新值}})——patch.value 就是该字段的新值(类型匹配:string 直传字符串、number 传数字、对象传对象),不要包成 {字段:值} 对象(字段名已在 jsonPath);也兼容 write({value:新值, patch:{op,jsonPath}}) 顶层 value(向后兼容,但优先 patch.value,避免与整体 set 的 value 混淆);② 替换整个对象用 write({value:{整个新对象}})。op:set 设值 / remove 删 / merge 合并对象 / append 追加数组;批量多改动 write({patches:[{op,jsonPath,value},...]});删子路径 write({patch:{jsonPath:\"路径\"}, del:true})。写入自动经 schema 校验(失败不写,按错误提示改值类型/形状后重试)+ 自动存快照(出错可用 restore_data 回退)。"), n.push("修改大对象/数组优先用 write 的 patch 增量(只发改动部分),避免整体重传被 max_tokens 截断致 JSON 不完整。"), n.push("读大数组(read 返回 hasMore=true)用 read({jsonPath,offset,limit}) 分页(offset+=limit 续读,默认 limit=50);一次读多个不相关子路径用 read({jsonPaths:[...]}) 省轮次;复杂 patches 改动先 write({patches,dryRun:true}) 预检(走完整校验不落盘)。"), n.push("查历史快照值(看上一版长啥样 / 冲突诊断 / 用户问\"刚才改了啥\")用 history_data({id?,jsonPath?})(只读不改当前);对比当前与历史快照的差异需切 advanced 用 diff_data(返回结构化 path→from/to)。"), n.push("在大数组里按条件筛选用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素 path/index;定位后用 write patch 改。找名字记不清的元素用 search_data(substring/regex/fuzzy)。批量过滤/映射/聚合/重写大数组用 eval_script(沙箱脚本,mode=query 只读/transform 落地)。")) : (n.push("改主数据前先 get_data({jsonPath}) 读其当前真实值与 hash(返回末尾 hash=xxx),基于真实值改,不要凭记忆。写入(set/edit/delete)时回传 expectedHash=该 hash 启用乐观锁——若主数据在你 get 之后被外部代码/其他 agent/用户手动改过,会触发冲突:集成方若开启人工介入,工具会挂起等用户决定(保留外部/强制覆盖/回退),你应等待工具返回后按结果继续(保留外部→重新 get 再改;强制覆盖→已写入,继续;回退→已回退到历史快照,基于回退值重写);未开启人工介入时返回 VERSION_CONFLICT 不写入,重新 get 拿最新值与 hash 再改。"), n.push("不确定主数据字段结构时用 describe_data 查看说明。"), n.push("修改大对象/数组优先用 edit_data 增量 patch(只发改动部分),避免 set_data 整体重传被 max_tokens 截断导致 JSON 不完整、校验失败。"), n.push("修改主数据出错时可用 restore_data 回退最近一次。"), n.push("在大数组里按条件筛选元素用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素的 path/index;定位后再 edit_data 改。"), n.push("找名字记不清的元素用 search_data(支持 substring/regex/fuzzy 模糊搜索)。"), n.push("需要过滤/映射/聚合/批量重写大数组时用 eval_script(沙箱脚本,入参 data);只读探查用 mode=query,批量重写用 mode=transform(返回值经校验后落地)。"), n.push("读大数组用 read({jsonPath,offset,limit}) 分页(返回 hasMore=true 时 offset+=limit 续读);一次读多个不相关子路径用 read({jsonPaths});复杂改动先 write({...,dryRun:true}) 预检不落盘。"), n.push("对比当前与历史快照(或一段 JSON against)的差异用 diff_data({snapshotId?,against?})(返回结构化 path→from/to,verify 自纠/操作审计/\"刚才改了啥\");只读查历史快照值用 history_data({id?,jsonPath?})。"))), e?.subagent !== !1 && n.push("独立子任务可 spawn_agent 委派(只读工具,过程不占主上下文)。"), e?.inspectEnv !== !1 && n.push("排查页面环境(当前 URL/浏览器/视口/集成方调试变量)用 inspect_env——不传参返回环境摘要(location/navigator/viewport/document),传 key 读特定 window 属性(如 inspect_env({key:\"appConfig\"}) 读 window.appConfig)。改完数据看渲染、定位\"为何没生效\"时用它(只读,不改数据)。"), e?.draftWrite && n.push("生成超大 JSON(如 50+ 组件页面,单次 write 受 max_tokens 限制装不下)用 draft_write 分块构建 → draft_commit 原子提交:draft_write({draftId, chunk, mode}) mode:\"start\" 新建/\"append\" 追加(拼 JSON 片段到 drafts 池);累积完 draft_commit({draftId}) 合并 + schema 校验 + 写主数据(失败草稿保留可修后重试,成功自动清草稿)。小改仍用 write patch,只在大 JSON 从零生成时用 draft。"), e?.todoDeps && n.push("复杂任务可用 todos 层级依赖:write_todos 时给 todo 传 parentId(父任务 id,表达层级)+ deps(依赖的 todo id 数组,必须先完成)。有依赖的任务,deps 全 completed 后再标 in_progress;完成时 update_todo({id, status:\"completed\", evidence:\"完成证据\"}) 记证据。无依赖关系的任务不传 parentId/deps(扁平)。"), e?.subagents?.length) {
-				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Tx || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), i = e.subagents.filter((e) => (e.temperature ?? 0) < Tx && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
+				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Ax || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), i = e.subagents.filter((e) => (e.temperature ?? 0) < Ax && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
 				n.push("【规划-反思-执行·路由】按任务性质选模式,不要对简单任务过度编排:"), t.length && (n.push(`  · 创作/设计/开放性需求(如"设计主题风格""换个感觉")→ 先调 ${t.map((e) => "use_" + e.id).join("/")} 出 2-3 套方案(高温创意),`), n.push("    不要自己拍板;拿到方案后,若需用户拍板用 request_human_confirmation 弹选项。")), i.length && n.push(`  · 严谨/易错/校验类 → 可先调 ${i.map((e) => "use_" + e.id).join("/")} 反思挑刺(低温审查),据反馈修订。`), n.push(r ? "  · 方案定稿后,由你(主 agent)用 write 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。" : "  · 方案定稿后,由你(主 agent)用 edit_data 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。"), n.push("  · 简单/明确任务(如\"标题改红色\")直接执行,不必走规划-反思。");
 			}
 			return e?.humanConfirm && (n.push("【人工确认·必读】以下情形必须先调 request_human_confirmation 征询用户、拿到答复后再继续,不要自行拍板:"), n.push("  1) 用户让你「给方案/列选项/我来选/挑一个」时:把每个方案作为一个 option,调 request_human_confirmation(question=简述, options=[方案A,方案B,...], recommendation=你推荐的)。不要只回文字罗列方案让用户自己回复——要用工具把选项做成可点选按钮。"), n.push("  2) 需求有歧义/不确定时:调工具问清楚(options 不传则用户答同意或拒绝)。"), n.push("  3) 即将执行高风险不可逆操作(删除/覆盖/批量改动)前:调工具确认。"), n.push("  4) 规划出多步方案需用户确认时:把整个方案(或关键分步)作为 option 调 request_human_confirmation,确认后再执行。"), n.push("用户在选项里选了哪个,就按那个方案继续;选「拒绝」则停止并询问如何调整。")), n.length && n.unshift("调用工具务必用标准 function calling(工具调用)格式发起,不要在回复正文里输出伪 XML/标签(如 deepseek 的 tool_calls 标签、invoke、function_call、tool_call 等)或 JSON 文本——那不会被识别为工具调用,会被当普通文字,工具不执行。"), n.length ? "## 能力使用提示\n" + n.join("\n") : void 0;
@@ -19064,15 +19101,15 @@ function Ex(e, t, n = "simple") {
 }
 //#endregion
 //#region src/core/backends/skillStore.ts
-var Dx = "v:1::skill-store", Ox = "chat-sdk";
-function kx(e, t, n) {
-	return `${Dx}::${e}::${t}::${n}`;
+var Mx = "v:1::skill-store", Nx = "chat-sdk";
+function Px(e, t, n) {
+	return `${Mx}::${e}::${t}::${n}`;
 }
-function Ax(e, t) {
-	return `${Dx}::${e}::${t}::`;
+function Fx(e, t) {
+	return `${Mx}::${e}::${t}::`;
 }
-function jx(e = {}) {
-	let t = e.dbName ?? Ox, n = e.backend ?? "indexed", r = e.id ?? "", i, a, o = new Promise((e) => {
+function Ix(e = {}) {
+	let t = e.dbName ?? Nx, n = e.backend ?? "indexed", r = e.id ?? "", i, a, o = new Promise((e) => {
 		a = e;
 	});
 	return (async () => {
@@ -19094,42 +19131,42 @@ function jx(e = {}) {
 		ready: o,
 		async list() {
 			let e = [];
-			return await i.scan(Ax(t, r), (t, n) => {
+			return await i.scan(Fx(t, r), (t, n) => {
 				e.push(n);
 			}), e;
 		},
 		async get(e) {
-			return await i.get(kx(t, r, e));
+			return await i.get(Px(t, r, e));
 		},
 		async put(e) {
 			try {
-				await i.set(kx(t, r, e.name), e);
+				await i.set(Px(t, r, e.name), e);
 			} catch (e) {
 				Hy(e) && (i = Xy());
 			}
 		},
 		async remove(e) {
-			let n = kx(t, r, e);
+			let n = Px(t, r, e);
 			return await i.get(n) != null && (await i.del(n), !0);
 		},
 		async clear() {
-			await i.clearPrefix(Ax(t, r));
+			await i.clearPrefix(Fx(t, r));
 		},
 		dispose() {}
 	};
 }
 //#endregion
 //#region src/core/sdk/createChatSdk.ts
-var Mx = 50, Nx = /* @__PURE__ */ new Map();
-function Px(e, t) {
+var Lx = 50, Rx = /* @__PURE__ */ new Map();
+function zx(e, t) {
 	return e === "set_data" ? "set" : e === "edit_data" ? "edit" : e === "delete_data" ? "delete" : e === "restore_data" ? "restore" : e === "write" ? t?.del ? "delete" : t?.patch ? "edit" : "set" : null;
 }
-function Fx(e, t, n, r) {
+function Bx(e, t, n, r) {
 	let i = 0;
 	return {
 		name: "sdk-events",
 		wrapToolCall: async (t, r) => {
-			let i = await r(t), a = Px(t.name, t.args);
+			let i = await r(t), a = zx(t.name, t.args);
 			return a && e({
 				type: "data_change",
 				operation: a,
@@ -19164,7 +19201,7 @@ function Fx(e, t, n, r) {
 		}
 	};
 }
-function Ix(e, i) {
+function Vx(e, i) {
 	let a = {
 		prompt_tokens: 0,
 		completion_tokens: 0,
@@ -19194,18 +19231,18 @@ function Ix(e, i) {
 		getTodos: () => y.current?.getState?.()?.todos ?? [],
 		messages: p,
 		maxCheckpoints: x && typeof x == "object" ? x.maxCheckpoints : void 0
-	}) : null, w = !x || typeof x != "object" || x.auto !== !1, T = e.capabilities, E = T?.dataOps !== !1, D = T?.draftWrite === !0, O = T?.tracing === !0, k = T?.automation === !0, A = wy(e), j = E && b ? ax(b, {
+	}) : null, w = !x || typeof x != "object" || x.auto !== !1, T = e.capabilities, E = T?.dataOps !== !1, D = T?.draftWrite === !0, O = T?.tracing === !0, k = T?.automation === !0, A = wy(e), j = E && b ? ox(b, {
 		onAudit: e.onAudit ?? (e.debug ? (e) => console.log("[page-agent-sdk][data audit]", e) : void 0),
 		maxSnapshots: e.maxSnapshots,
 		onConflict: o.set,
 		autoLock: e.autoLock,
 		interceptors: e.interceptors,
 		vfsStore: D ? m : void 0
-	}) : [], M = E ? rx(j, e.toolMode) : [], ee = E && b ? j.controller ?? null : null, N = () => ee?.get() ?? b, P = /* @__PURE__ */ new Map(), F = wx(T, M, sx, dx, gx);
+	}) : [], M = E ? ix(j, e.toolMode) : [], ee = E && b ? j.controller ?? null : null, N = () => ee?.get() ?? b, P = /* @__PURE__ */ new Map(), F = kx(T, M, cx, mx, xx);
 	F.forEach((e) => P.set(e.name, "builtin"));
 	let I = [...e.tools || []];
 	I.forEach((e) => P.set(e.name, "user"));
-	let te = yx(e.actions ?? {});
+	let te = wx(e.actions ?? {});
 	te.forEach((e) => P.set(e.name, "action"));
 	let L = [], R = e.humanConfirm !== !1 && (!e.approval || e.approval.humanConfirmTool !== !1), ne = R ? X_() : null;
 	ne && P.set(J_, "builtin");
@@ -19276,7 +19313,7 @@ function Ix(e, i) {
 			llm: e.llm,
 			tools: xe
 		} : void 0
-	}) : void 0, Ce = Ex({
+	}) : void 0, Ce = jx({
 		...T,
 		humanConfirm: R,
 		subagents: e.subagents?.map((e) => ({
@@ -19308,7 +19345,7 @@ function Ix(e, i) {
 		name: e.name,
 		description: e.description,
 		getContent: () => e.content
-	}), Ne = e.skillStorage === !1 ? null : jx({
+	}), Ne = e.skillStorage === !1 ? null : Ix({
 		...typeof e.skillStorage == "object" ? e.skillStorage : {},
 		id: e.skillStorage && typeof e.skillStorage == "object" && e.skillStorage.id ? e.skillStorage.id : `agent::${i}`
 	}), Pe = () => {
@@ -19355,12 +19392,12 @@ function Ix(e, i) {
 		...ve ? [ve] : [],
 		...Te ? [Te] : [],
 		...e.middleware || [],
-		...k ? [_x(a, {
+		...k ? [Sx(a, {
 			tokenBudget: e.tokenBudget,
 			timeBudgetMs: e.timeBudgetMs
 		}, Oe)] : [],
-		Fx(Oe, p, N, a)
-	]), Le = e.maxMemoryRounds ?? Mx, B = {
+		Bx(Oe, p, N, a)
+	]), Le = e.maxMemoryRounds ?? Lx, B = {
 		agentId: i,
 		store: c,
 		messages: p,
@@ -19408,7 +19445,7 @@ function Ix(e, i) {
 			Be(), Ve();
 		},
 		async send(e, t) {
-			await B.initDone, t?.mission && oe && g.setMission(t.mission);
+			await B.initDone, t ??= {}, t?.mission && oe && g.setMission(t.mission);
 			let n = e;
 			if (t.interceptors?.input) try {
 				let r = t.interceptors.input(e);
@@ -19536,7 +19573,7 @@ function Ix(e, i) {
 			if (B.refCount--, B.refCount <= 0) {
 				c && (m.flush?.(), c.flush(), c.dispose()), Ne && Ne.dispose();
 				let e = B.mcpClosers.splice(0);
-				e.length && Promise.allSettled(e.map((e) => e())), Nx.delete(i);
+				e.length && Promise.allSettled(e.map((e) => e())), Rx.delete(i);
 			}
 		},
 		resolveConflict: o.resolve,
@@ -19629,7 +19666,7 @@ function Ix(e, i) {
 					spans: B.agent.spans.value,
 					metrics: r_(B.agent.spans.value)
 				} : void 0,
-				actions: bx(e.actions ?? {}),
+				actions: Tx(e.actions ?? {}),
 				subagent: {
 					enabled: !!_e,
 					maxDepth: e.subagent?.maxDepth ?? 1,
@@ -19758,11 +19795,11 @@ function Ix(e, i) {
 		});
 	})(), B;
 }
-function Lx(e) {
+function Hx(e) {
 	let t = e.id ?? Ay();
 	e.id || console.warn(`[page-agent-sdk] 未传 options.id,已生成随机 id "${t}"。刷新后持久化数据无法恢复,请传稳定 id。`);
-	let n = e.streaming ?? !0, r = e.ui ?? "default", i, a = e.shareContext ? Nx.get(t) : void 0;
-	a ? i = a : (i = Ix(e, t), e.shareContext && Nx.set(t, i)), i.refCount++;
+	let n = e.streaming ?? !0, r = e.ui ?? "default", i, a = e.shareContext ? Rx.get(t) : void 0;
+	a ? i = a : (i = Vx(e, t), e.shareContext && Rx.set(t, i)), i.refCount++;
 	let o = null, s = null, c = nb(e), l = null, u = null;
 	async function d(t) {
 		if (await i.initDone, o) {
@@ -19943,7 +19980,7 @@ function Lx(e) {
 }
 //#endregion
 //#region src/core/sdk/defineTool.ts
-function Rx(e) {
+function Ux(e) {
 	return r(async (t) => {
 		let n = await e.handler(t);
 		return typeof n == "string" ? n : JSON.stringify(n);
@@ -19954,4 +19991,4 @@ function Rx(e) {
 	});
 }
 //#endregion
-export { ib as CONTEXT_PRESETS, Bg as ChatDialog, nf as CodePreview, Sy as DEFAULT_SYSTEM_PROMPT, J_ as HUMAN_CONFIRM_TOOL_NAME, af as MessageContent, Gv as STOP_WORDS, xh as SkillPanel, lb as UNSAFE_KEYS, bx as actionsToInspectInfo, yx as actionsToTools, Kg as agentError, Sb as applyPatchToClone, Cb as applyPatchToLive, Gg as asAgentError, Cy as buildDataPrompt, wy as buildSystemPrompt, ix as commitSetToBind, Lv as connectMcp, wl as copyText, x_ as createAgent, q_ as createApprovalMiddleware, Lx as createChatSdk, iv as createCheckpointManager, av as createCheckpointMiddleware, ky as createConflictManager, ax as createDataOps, Z_ as createHumanConfirmMiddleware, X_ as createHumanConfirmTool, Xy as createMemoryBackend, B_ as createMemoryMiddleware, v as createProxyLlm, rb as createSdkEvents, eb as createSessionStore, jx as createSkillStore, _v as createSubagentMiddleware, bv as createSubagentsMiddleware, Ex as createUsageHintsMiddleware, xv as createVerifyMiddleware, Ab as createVfs, Qy as createWebStorageBackend, Dv as createWriteBackCheck, hb as deepClone, Cx as defineDataToolset, N_ as defineSkill, Rx as defineTool, mb as deleteByPath, dy as describeSchemaNode, p_ as detectGarbledToolCall, Eb as diffObjects, lx as domToStructure, dx as domTools, Sx as domToolsStatic, qv as estimateMessageTokens, Jv as estimateRoundTokens, e_ as estimateTokens, xy as extractSchemaHint, Pv as extractText, sx as fetchDocTools, xx as fetchTools, rx as filterByToolMode, fy as formatConstraints, Vg as formatZodIssues, fb as getByPath, ux as getDomTool, mx as getEnvSummary, ry as getSchemaAtPath, ey as getSchemaTopKeys, r_ as getTraceMetrics, xb as hashValue, Yv as indexSummarize, hx as inspectEnvTool, gx as inspectTools, Ty as isChatModel, ty as isPathAllowed, Hy as isQuotaError, ub as isUnsafePath, Yb as jpEval, Ug as jsonParseError, vb as limitDepth, gb as maybeParseValue, n_ as offloadPassThroughChars, t_ as offloadThresholdChars, _y as presets, ay as projectBySchema, iy as projectBySchemaDeep, _b as projectFields, Xv as recallRounds, py as renderSchemaHint, my as renderSchemaOverview, gy as renderSchemaShallow, ob as resolveContextOptions, nb as resolveDialogConfig, Oy as resolveLlm, $g as resolveModelCaps, tb as resolveStorage, Tb as restoreInPlace, wb as restoreLive, Wg as routeError, ex as runSandboxedScript, db as safeMerge, px as safeSerialize, yb as safeStringify, Zb as searchJson, wx as selectBuiltinTools, pb as setByPath, vy as systemPromptHelpers, Kv as tokenize, $ as toolError, ny as unwrapSchema, Cl as useChat, e as z, Hg as zodError };
+export { ib as CONTEXT_PRESETS, Bg as ChatDialog, nf as CodePreview, Sy as DEFAULT_SYSTEM_PROMPT, J_ as HUMAN_CONFIRM_TOOL_NAME, af as MessageContent, Gv as STOP_WORDS, xh as SkillPanel, lb as UNSAFE_KEYS, Tx as actionsToInspectInfo, wx as actionsToTools, Kg as agentError, Sb as applyPatchToClone, Cb as applyPatchToLive, Gg as asAgentError, Cy as buildDataPrompt, wy as buildSystemPrompt, ax as commitSetToBind, Lv as connectMcp, wl as copyText, x_ as createAgent, q_ as createApprovalMiddleware, Hx as createChatSdk, iv as createCheckpointManager, av as createCheckpointMiddleware, ky as createConflictManager, ox as createDataOps, Z_ as createHumanConfirmMiddleware, X_ as createHumanConfirmTool, Xy as createMemoryBackend, B_ as createMemoryMiddleware, v as createProxyLlm, rb as createSdkEvents, eb as createSessionStore, Ix as createSkillStore, _v as createSubagentMiddleware, bv as createSubagentsMiddleware, jx as createUsageHintsMiddleware, xv as createVerifyMiddleware, Ab as createVfs, Qy as createWebStorageBackend, Dv as createWriteBackCheck, hb as deepClone, Ox as defineDataToolset, N_ as defineSkill, Ux as defineTool, mb as deleteByPath, dy as describeSchemaNode, p_ as detectGarbledToolCall, Eb as diffObjects, fx as domToStructure, mx as domTools, Dx as domToolsStatic, qv as estimateMessageTokens, Jv as estimateRoundTokens, e_ as estimateTokens, xy as extractSchemaHint, Pv as extractText, cx as fetchDocTools, Ex as fetchTools, ix as filterByToolMode, fy as formatConstraints, Vg as formatZodIssues, fb as getByPath, px as getDomTool, _x as getEnvSummary, ry as getSchemaAtPath, ey as getSchemaTopKeys, r_ as getTraceMetrics, xb as hashValue, Yv as indexSummarize, bx as inspectEnvTool, xx as inspectTools, Ty as isChatModel, ty as isPathAllowed, Hy as isQuotaError, ub as isUnsafePath, Yb as jpEval, Ug as jsonParseError, vb as limitDepth, gb as maybeParseValue, n_ as offloadPassThroughChars, t_ as offloadThresholdChars, _y as presets, ay as projectBySchema, iy as projectBySchemaDeep, _b as projectFields, Xv as recallRounds, py as renderSchemaHint, my as renderSchemaOverview, gy as renderSchemaShallow, ob as resolveContextOptions, nb as resolveDialogConfig, Oy as resolveLlm, $g as resolveModelCaps, tb as resolveStorage, Tb as restoreInPlace, wb as restoreLive, Wg as routeError, tx as runSandboxedScript, db as safeMerge, gx as safeSerialize, yb as safeStringify, Zb as searchJson, kx as selectBuiltinTools, pb as setByPath, vy as systemPromptHelpers, Kv as tokenize, $ as toolError, ny as unwrapSchema, Cl as useChat, e as z, Hg as zodError };