page-agent-sdk 2.38.1 → 2.38.2

package/dist/page-agent-sdk.headless.js

@@ -357,7 +357,7 @@ function V(e, t, n) {
 		});
 	}
 }
-function ze(e, t, n, r, i, a) {
+function H(e, t, n, r, i, a) {
 	let o = Fe.get(e);
 	if (!o) {
 		je++;
@@ -395,68 +395,68 @@ function ze(e, t, n, r, i, a) {
 	}
 	B();
 }
-function Be(e) {
+function ze(e) {
 	let t = /* @__PURE__ */ G(e);
 	return t === e ? t : (V(t, "iterate", Re), /* @__PURE__ */ Ct(e) ? t : t.map(Et));
 }
-function Ve(e) {
+function Be(e) {
 	return V(e = /* @__PURE__ */ G(e), "iterate", Re), e;
 }
-function He(e, t) {
+function Ve(e, t) {
 	return /* @__PURE__ */ St(e) ? Dt(/* @__PURE__ */ xt(e) ? Et(t) : t) : Et(t);
 }
-var Ue = {
+var He = {
 	__proto__: null,
 	[Symbol.iterator]() {
-		return We(this, Symbol.iterator, (e) => He(this, e));
+		return Ue(this, Symbol.iterator, (e) => Ve(this, e));
 	},
 	concat(...e) {
-		return Be(this).concat(...e.map((e) => T(e) ? Be(e) : e));
+		return ze(this).concat(...e.map((e) => T(e) ? ze(e) : e));
 	},
 	entries() {
-		return We(this, "entries", (e) => (e[1] = He(this, e[1]), e));
+		return Ue(this, "entries", (e) => (e[1] = Ve(this, e[1]), e));
 	},
 	every(e, t) {
-		return H(this, "every", e, t, void 0, arguments);
+		return Ge(this, "every", e, t, void 0, arguments);
 	},
 	filter(e, t) {
-		return H(this, "filter", e, t, (e) => e.map((e) => He(this, e)), arguments);
+		return Ge(this, "filter", e, t, (e) => e.map((e) => Ve(this, e)), arguments);
 	},
 	find(e, t) {
-		return H(this, "find", e, t, (e) => He(this, e), arguments);
+		return Ge(this, "find", e, t, (e) => Ve(this, e), arguments);
 	},
 	findIndex(e, t) {
-		return H(this, "findIndex", e, t, void 0, arguments);
+		return Ge(this, "findIndex", e, t, void 0, arguments);
 	},
 	findLast(e, t) {
-		return H(this, "findLast", e, t, (e) => He(this, e), arguments);
+		return Ge(this, "findLast", e, t, (e) => Ve(this, e), arguments);
 	},
 	findLastIndex(e, t) {
-		return H(this, "findLastIndex", e, t, void 0, arguments);
+		return Ge(this, "findLastIndex", e, t, void 0, arguments);
 	},
 	forEach(e, t) {
-		return H(this, "forEach", e, t, void 0, arguments);
+		return Ge(this, "forEach", e, t, void 0, arguments);
 	},
 	includes(...e) {
-		return U(this, "includes", e);
+		return qe(this, "includes", e);
 	},
 	indexOf(...e) {
-		return U(this, "indexOf", e);
+		return qe(this, "indexOf", e);
 	},
 	join(e) {
-		return Be(this).join(e);
+		return ze(this).join(e);
 	},
 	lastIndexOf(...e) {
-		return U(this, "lastIndexOf", e);
+		return qe(this, "lastIndexOf", e);
 	},
 	map(e, t) {
-		return H(this, "map", e, t, void 0, arguments);
+		return Ge(this, "map", e, t, void 0, arguments);
 	},
 	pop() {
-		return qe(this, "pop");
+		return U(this, "pop");
 	},
 	push(...e) {
-		return qe(this, "push", e);
+		return U(this, "push", e);
 	},
 	reduce(e, ...t) {
 		return Ke(this, "reduce", e, t);
@@ -465,47 +465,47 @@ var Ue = {
 		return Ke(this, "reduceRight", e, t);
 	},
 	shift() {
-		return qe(this, "shift");
+		return U(this, "shift");
 	},
 	some(e, t) {
-		return H(this, "some", e, t, void 0, arguments);
+		return Ge(this, "some", e, t, void 0, arguments);
 	},
 	splice(...e) {
-		return qe(this, "splice", e);
+		return U(this, "splice", e);
 	},
 	toReversed() {
-		return Be(this).toReversed();
+		return ze(this).toReversed();
 	},
 	toSorted(e) {
-		return Be(this).toSorted(e);
+		return ze(this).toSorted(e);
 	},
 	toSpliced(...e) {
-		return Be(this).toSpliced(...e);
+		return ze(this).toSpliced(...e);
 	},
 	unshift(...e) {
-		return qe(this, "unshift", e);
+		return U(this, "unshift", e);
 	},
 	values() {
-		return We(this, "values", (e) => He(this, e));
+		return Ue(this, "values", (e) => Ve(this, e));
 	}
 };
-function We(e, t, n) {
-	let r = Ve(e), i = r[t]();
+function Ue(e, t, n) {
+	let r = Be(e), i = r[t]();
 	return r !== e && !/* @__PURE__ */ Ct(e) && (i._next = i.next, i.next = () => {
 		let e = i._next();
 		return e.done || (e.value = n(e.value)), e;
 	}), i;
 }
-var Ge = Array.prototype;
-function H(e, t, n, r, i, a) {
-	let o = Ve(e), s = o !== e && !/* @__PURE__ */ Ct(e), c = o[t];
-	if (c !== Ge[t]) {
+var We = Array.prototype;
+function Ge(e, t, n, r, i, a) {
+	let o = Be(e), s = o !== e && !/* @__PURE__ */ Ct(e), c = o[t];
+	if (c !== We[t]) {
 		let t = c.apply(e, a);
 		return s ? Et(t) : t;
 	}
 	let l = n;
 	o !== e && (s ? l = function(t, r) {
-		return n.call(this, He(e, t), r, e);
+		return n.call(this, Ve(e, t), r, e);
 	} : n.length > 2 && (l = function(t, r) {
 		return n.call(this, t, r, e);
 	}));
@@ -513,22 +513,22 @@ function H(e, t, n, r, i, a) {
 	return s && i ? i(u) : u;
 }
 function Ke(e, t, n, r) {
-	let i = Ve(e), a = i !== e && !/* @__PURE__ */ Ct(e), o = n, s = !1;
+	let i = Be(e), a = i !== e && !/* @__PURE__ */ Ct(e), o = n, s = !1;
 	i !== e && (a ? (s = r.length === 0, o = function(t, r, i) {
-		return s && (s = !1, t = He(e, t)), n.call(this, t, He(e, r), i, e);
+		return s && (s = !1, t = Ve(e, t)), n.call(this, t, Ve(e, r), i, e);
 	}) : n.length > 3 && (o = function(t, r, i) {
 		return n.call(this, t, r, i, e);
 	}));
 	let c = i[t](o, ...r);
-	return s ? He(e, c) : c;
+	return s ? Ve(e, c) : c;
 }
-function U(e, t, n) {
+function qe(e, t, n) {
 	let r = /* @__PURE__ */ G(e);
 	V(r, "iterate", Re);
 	let i = r[t](...n);
 	return (i === -1 || i === !1) && /* @__PURE__ */ wt(n[0]) ? (n[0] = /* @__PURE__ */ G(n[0]), r[t](...n)) : i;
 }
-function qe(e, t, n = []) {
+function U(e, t, n = []) {
 	Oe(), ye();
 	let r = (/* @__PURE__ */ G(e))[t].apply(e, n);
 	return B(), ke(), r;
@@ -553,7 +553,7 @@ var Ze = class {
 		let a = T(e);
 		if (!r) {
 			let e;
-			if (a && (e = Ue[t])) return e;
+			if (a && (e = He[t])) return e;
 			if (t === "hasOwnProperty") return Xe;
 		}
 		let o = Reflect.get(e, t, /* @__PURE__ */ K(e) ? e : n);
@@ -575,11 +575,11 @@ var Ze = class {
 			if (!/* @__PURE__ */ Ct(n) && !/* @__PURE__ */ St(n) && (i = /* @__PURE__ */ G(i), n = /* @__PURE__ */ G(n)), !a && /* @__PURE__ */ K(i) && !/* @__PURE__ */ K(n)) return r ? (process.env.NODE_ENV !== "production" && de(`Set operation on key "${String(t)}" failed: target is readonly.`, e[t]), !0) : (i.value = n, !0);
 		}
 		let o = a ? Number(t) < e.length : w(e, t), s = Reflect.set(e, t, n, /* @__PURE__ */ K(e) ? e : r);
-		return e === /* @__PURE__ */ G(r) && s && (o ? ie(n, i) && ze(e, "set", t, n, i) : ze(e, "add", t, n)), s;
+		return e === /* @__PURE__ */ G(r) && s && (o ? ie(n, i) && H(e, "set", t, n, i) : H(e, "add", t, n)), s;
 	}
 	deleteProperty(e, t) {
 		let n = w(e, t), r = e[t], i = Reflect.deleteProperty(e, t);
-		return i && n && ze(e, "delete", t, void 0, r), i;
+		return i && n && H(e, "delete", t, void 0, r), i;
 	}
 	has(e, t) {
 		let n = Reflect.has(e, t);
@@ -598,10 +598,10 @@ var Ze = class {
 	deleteProperty(e, t) {
 		return process.env.NODE_ENV !== "production" && de(`Delete operation on key "${String(t)}" failed: target is readonly.`, e), !0;
 	}
-}, et = /* @__PURE__ */ new Qe(), tt = /* @__PURE__ */ new $e(), nt = /* @__PURE__ */ new $e(!0), W = (e) => e, rt = (e) => Reflect.getPrototypeOf(e);
-function it(e, t, n) {
+}, et = /* @__PURE__ */ new Qe(), tt = /* @__PURE__ */ new $e(), nt = /* @__PURE__ */ new $e(!0), rt = (e) => e, it = (e) => Reflect.getPrototypeOf(e);
+function at(e, t, n) {
 	return function(...r) {
-		let i = this.__v_raw, a = /* @__PURE__ */ G(i), o = E(a), s = e === "entries" || e === Symbol.iterator && o, c = e === "keys" && o, l = i[e](...r), u = n ? W : t ? Dt : Et;
+		let i = this.__v_raw, a = /* @__PURE__ */ G(i), o = E(a), s = e === "entries" || e === Symbol.iterator && o, c = e === "keys" && o, l = i[e](...r), u = n ? rt : t ? Dt : Et;
 		return !t && V(a, "iterate", c ? Le : Ie), x(Object.create(l), { next() {
 			let { value: e, done: t } = l.next();
 			return t ? {
@@ -614,7 +614,7 @@ function it(e, t, n) {
 		} });
 	};
 }
-function at(e) {
+function W(e) {
 	return function(...t) {
 		if (process.env.NODE_ENV !== "production") {
 			let n = t[0] ? `on key "${t[0]}" ` : "";
@@ -628,7 +628,7 @@ function ot(e, t) {
 		get(n) {
 			let r = this.__v_raw, i = /* @__PURE__ */ G(r), a = /* @__PURE__ */ G(n);
 			e || (ie(n, a) && V(i, "get", n), V(i, "get", a));
-			let { has: o } = rt(i), s = t ? W : e ? Dt : Et;
+			let { has: o } = it(i), s = t ? rt : e ? Dt : Et;
 			if (o.call(i, n)) return s(r.get(n));
 			if (o.call(i, a)) return s(r.get(a));
 			r !== i && r.get(n);
@@ -642,36 +642,36 @@ function ot(e, t) {
 			return e || (ie(t, i) && V(r, "has", t), V(r, "has", i)), t === i ? n.has(t) : n.has(t) || n.has(i);
 		},
 		forEach(n, r) {
-			let i = this, a = i.__v_raw, o = /* @__PURE__ */ G(a), s = t ? W : e ? Dt : Et;
+			let i = this, a = i.__v_raw, o = /* @__PURE__ */ G(a), s = t ? rt : e ? Dt : Et;
 			return !e && V(o, "iterate", Ie), a.forEach((e, t) => n.call(r, s(e), s(t), i));
 		}
 	};
 	return x(n, e ? {
-		add: at("add"),
-		set: at("set"),
-		delete: at("delete"),
-		clear: at("clear")
+		add: W("add"),
+		set: W("set"),
+		delete: W("delete"),
+		clear: W("clear")
 	} : {
 		add(e) {
-			let n = /* @__PURE__ */ G(this), r = rt(n), i = /* @__PURE__ */ G(e), a = !t && !/* @__PURE__ */ Ct(e) && !/* @__PURE__ */ St(e) ? i : e;
-			return r.has.call(n, a) || ie(e, a) && r.has.call(n, e) || ie(i, a) && r.has.call(n, i) || (n.add(a), ze(n, "add", a, a)), this;
+			let n = /* @__PURE__ */ G(this), r = it(n), i = /* @__PURE__ */ G(e), a = !t && !/* @__PURE__ */ Ct(e) && !/* @__PURE__ */ St(e) ? i : e;
+			return r.has.call(n, a) || ie(e, a) && r.has.call(n, e) || ie(i, a) && r.has.call(n, i) || (n.add(a), H(n, "add", a, a)), this;
 		},
 		set(e, n) {
 			!t && !/* @__PURE__ */ Ct(n) && !/* @__PURE__ */ St(n) && (n = /* @__PURE__ */ G(n));
-			let r = /* @__PURE__ */ G(this), { has: i, get: a } = rt(r), o = i.call(r, e);
+			let r = /* @__PURE__ */ G(this), { has: i, get: a } = it(r), o = i.call(r, e);
 			o ? process.env.NODE_ENV !== "production" && dt(r, i, e) : (e = /* @__PURE__ */ G(e), o = i.call(r, e));
 			let s = a.call(r, e);
-			return r.set(e, n), o ? ie(n, s) && ze(r, "set", e, n, s) : ze(r, "add", e, n), this;
+			return r.set(e, n), o ? ie(n, s) && H(r, "set", e, n, s) : H(r, "add", e, n), this;
 		},
 		delete(e) {
-			let t = /* @__PURE__ */ G(this), { has: n, get: r } = rt(t), i = n.call(t, e);
+			let t = /* @__PURE__ */ G(this), { has: n, get: r } = it(t), i = n.call(t, e);
 			i ? process.env.NODE_ENV !== "production" && dt(t, n, e) : (e = /* @__PURE__ */ G(e), i = n.call(t, e));
 			let a = r ? r.call(t, e) : void 0, o = t.delete(e);
-			return i && ze(t, "delete", e, void 0, a), o;
+			return i && H(t, "delete", e, void 0, a), o;
 		},
 		clear() {
 			let e = /* @__PURE__ */ G(this), t = e.size !== 0, n = process.env.NODE_ENV === "production" ? void 0 : E(e) ? new Map(e) : new Set(e), r = e.clear();
-			return t && ze(e, "clear", void 0, void 0, n), r;
+			return t && H(e, "clear", void 0, void 0, n), r;
 		}
 	}), [
 		"keys",
@@ -679,7 +679,7 @@ function ot(e, t) {
 		"entries",
 		Symbol.iterator
 	].forEach((r) => {
-		n[r] = it(r, e, t);
+		n[r] = at(r, e, t);
 	}), n;
 }
 function st(e, t) {
@@ -3185,8 +3185,7 @@ var ua = /* @__PURE__ */ new Set([
 	"edit_data",
 	"delete_data",
 	"write",
-	"vfs_write",
-	"vfs_edit"
+	"draft_commit"
 ]);
 function da(e) {
 	let t = e ?? {}, n = /* @__PURE__ */ new Set();
@@ -3221,12 +3220,23 @@ function pa(e) {
 			return n.join("\n");
 		},
 		wrapToolCall: async (e, n) => {
-			if (t.length && ua.has(e.name)) {
-				let n = da(e.args);
-				for (let e of n) if (!t.some((t) => fa(e, t.path))) return {
-					content: `PATH_DENIED · 聚焦越界:当前聚焦 [${t.map((e) => e.label ? `${e.path}(${e.label})` : e.path).join(", ")}],不可操作「${e}」。请先 remove_focus / clear_focus 或换焦点后重试。`,
+			if (t.length) {
+				let r = t.map((e) => e.label ? `${e.path}(${e.label})` : e.path).join(", "), i = (e) => ({
+					content: `PATH_DENIED · 聚焦越界:当前聚焦 [${r}],不可操作「${e}」。请先 remove_focus / clear_focus 或换焦点后重试。`,
 					status: "error"
-				};
+				});
+				if (e.name === "eval_script") {
+					if (e.args?.mode !== "transform") return n(e);
+					let r = da(e.args);
+					if (!r.length) return i("(整体数据)");
+					for (let e of r) if (!t.some((t) => fa(e, t.path))) return i(e);
+					return n(e);
+				}
+				if (ua.has(e.name)) {
+					let n = da(e.args);
+					if (!n.length) return i("(整体数据)");
+					for (let e of n) if (!t.some((t) => fa(e, t.path))) return i(e);
+				}
 			}
 			return n(e);
 		},
@@ -3682,7 +3692,9 @@ var Fa = /* @__PURE__ */ new Set([
 	"delete_data",
 	"write",
 	"vfs_write",
-	"vfs_edit"
+	"vfs_edit",
+	"draft_commit",
+	"eval_script"
 ]), Ia = /* @__PURE__ */ new Set([
 	"get_data",
 	"describe_data",
@@ -3715,8 +3727,10 @@ function Ba(e) {
 	return {
 		name: "permissions",
 		wrapToolCall: async (t, n) => {
-			let r = Fa.has(t.name) ? "write" : Ia.has(t.name) ? "read" : null, i = za(t.args);
-			if (r && i.length) {
+			let r = Fa.has(t.name) ? "write" : Ia.has(t.name) ? "read" : null;
+			t.name === "eval_script" && t.args?.mode !== "transform" && (r = null);
+			let i = za(t.args);
+			if (r === "write" && !i.length && (i = [""]), r && i.length) {
 				for (let t of i) if (Ra(e, r, t) === "deny") return {
 					content: `权限拒绝:${r} 操作 "${t}" 被 permissions 规则禁止。`,
 					status: "error"
@@ -4225,56 +4239,77 @@ var So = [
 	"search_data",
 	"fetch_document"
 ], Co = 1, wo = 4, To = 6, Eo = ["spawn_agent", "spawn_agents"], Do = [
+	"load_skill",
+	"write_todos",
+	"update_todo",
+	"restore_last_checkpoint",
+	"request_human_confirmation",
+	"set_focus",
+	"add_focus",
+	"remove_focus",
+	"clear_focus"
+];
+function Oo(e) {
+	return Eo.includes(e) || Do.includes(e) || e.startsWith("use_");
+}
+function ko(e, t, n = []) {
+	return [...e.filter((e) => t.has(e.name) && !Oo(e.name)), ...n];
+}
+var Ao = [
 	"write",
 	"set_data",
 	"edit_data",
 	"delete_data",
 	"draft_commit"
 ];
-function Oo(e) {
+function jo(e) {
 	let t = [];
 	if (typeof e.jsonPath == "string" && e.jsonPath && t.push(e.jsonPath), typeof e.path == "string" && e.path && t.push(e.path), e.patch && typeof e.patch.jsonPath == "string" && t.push(e.patch.jsonPath), Array.isArray(e.patches)) for (let n of e.patches) n && typeof n.jsonPath == "string" && t.push(n.jsonPath);
 	return t;
 }
-function ko(e, t) {
+function Mo(e, t) {
 	return t.some((t) => e === t || e.startsWith(t + ".") || e.startsWith(t + "["));
 }
-function Ao(e, t) {
+function No(e, t) {
 	let n = e.invoke.bind(e), r = async (e) => {
-		let r = Oo(e);
+		if (Array.isArray(e?.patches) && e.patches.some((e) => !e || typeof e.jsonPath != "string" || !e.jsonPath)) return `PATH_OUT_OF_SCOPE:patches 含无 jsonPath 项(作用于根),子 agent 仅可写 ${t.join(", ")} 范围内子路径。请为每个 patch 指定 jsonPath。`;
+		let r = jo(e);
 		if (!r.length) return `PATH_OUT_OF_SCOPE:子 agent 仅可增量 patch(writablePaths: ${t.join(", ")}),不能整体替换(无 jsonPath)。用 write({patch:{jsonPath,...}}) 增量改。`;
-		for (let e of r) if (!ko(e, t)) return `PATH_OUT_OF_SCOPE:子 agent 写 "${e}" 越界(仅可写 ${t.join(", ")})。`;
+		for (let e of r) if (!Mo(e, t)) return `PATH_OUT_OF_SCOPE:子 agent 写 "${e}" 越界(仅可写 ${t.join(", ")})。`;
 		return n(e);
 	};
 	return new Proxy(e, { get(e, t, n) {
 		return t === "invoke" ? r : Reflect.get(e, t, n);
 	} });
 }
-async function jo(e, t, n, r, i) {
-	let a = t.depth ?? 0, o = t.maxDepth ?? Co, s = /* @__PURE__ */ new Set([...So, ...t.allowedTools ?? []]), c = () => typeof t.allTools == "function" ? t.allTools() : t.allTools, l = [...c().filter((e) => s.has(e.name) && !Eo.includes(e.name)), ...t.extraTools ?? []];
+async function Po(e, t, n, r, i, a) {
+	let o = t.depth ?? 0, s = t.maxDepth ?? Co, c = /* @__PURE__ */ new Set([...So, ...t.allowedTools ?? []]), l = () => typeof t.allTools == "function" ? t.allTools() : t.allTools, u = ko(l(), c, t.extraTools ?? []);
 	if (t.writablePaths?.length) {
-		l = l.filter((e) => !Do.includes(e.name));
-		let e = c().filter((e) => Do.includes(e.name) && !Eo.includes(e.name)).map((e) => Ao(e, t.writablePaths));
-		l = [...l, ...e];
+		u = u.filter((e) => !Ao.includes(e.name));
+		let e = l().filter((e) => Ao.includes(e.name) && !Oo(e.name)).map((e) => No(e, t.writablePaths));
+		u = [...u, ...e];
 	}
-	let u = a + 1 < o ? [Mo({
+	let d = o + 1 < s ? [Fo({
 		...t,
-		depth: a + 1
-	})] : [], d = t.getFocuses?.() ?? [], f = d.length ? pa({
+		depth: o + 1
+	})] : [], f = t.getFocuses?.() ?? [], p = f.length ? pa({
 		getSchema: t.getSchema ?? (() => null),
-		initialFocuses: d
-	}) : void 0, p = ni({
+		initialFocuses: f
+	}) : void 0, m = t.getVfsFiles ? {
+		name: "vfs-bridge",
+		beforeAgent: () => ({ files: t.getVfsFiles() })
+	} : void 0, h = ni({
 		model: xo(t.llm) ? t.llm.model ?? t.llm.modelName : e.model ?? t.llm.model,
 		contextWindow: t.llm.contextWindow,
 		maxOutputTokens: t.llm.maxOutputTokens
 	});
-	if (p.contextWindow < 2e5) throw Error(`[page-agent-sdk][subagent] 子 agent 模型上下文窗口 ${p.contextWindow} 小于最小支持 ${ti}(需 ≥200K 窗口模型)`);
-	let m = t.summarization === void 0 ? void 0 : yo(typeof t.summarization == "object" ? {
-		contextWindow: p.contextWindow,
+	if (h.contextWindow < 2e5) throw Error(`[page-agent-sdk][subagent] 子 agent 模型上下文窗口 ${h.contextWindow} 小于最小支持 ${ti}(需 ≥200K 窗口模型)`);
+	let g = t.summarization === void 0 ? void 0 : yo(typeof t.summarization == "object" ? {
+		contextWindow: h.contextWindow,
 		...t.summarization
-	} : { contextWindow: p.contextWindow }), h = ji({
-		contextWindow: p.contextWindow,
-		maxOutputTokens: p.maxOutputTokens,
+	} : { contextWindow: h.contextWindow }), _ = ji({
+		contextWindow: h.contextWindow,
+		maxOutputTokens: h.maxOutputTokens,
 		...xo(t.llm) ? { llm: t.llm } : {
 			apiKey: t.llm.apiKey,
 			baseUrl: t.llm.baseUrl,
@@ -4283,27 +4318,33 @@ async function jo(e, t, n, r, i) {
 			maxTokens: t.maxTokens ?? t.llm.maxTokens
 		},
 		systemPrompt: e.role?.trim() || t.systemPrompt || "你是一个专注的子任务执行者。你只有只读工具(读主数据 / 抓文档),用它们完成给定任务,给出简洁结论,不要展开多余解释。",
-		tools: l,
+		tools: u,
 		middleware: [
 			...t.skills?.length ? [Na(t.skills)] : [],
+			...g ? [g] : [],
 			...m ? [m] : [],
-			...u,
-			...f ? [f] : [],
+			...d,
+			...p ? [p] : [],
+			...t.guardMiddleware ?? [],
 			...t.middleware ?? []
 		],
 		maxToolRounds: t.maxToolRounds ?? To,
 		onLog: i,
 		debug: t.debug
 	});
-	return t.debug && console.log(`[subagent] 启动子 agent(depth=${a},工具 ${l.length} 个)`), h.stream([{
+	return t.debug && console.log(`[subagent] 启动子 agent(depth=${o},工具 ${u.length} 个)`), _.stream([{
 		role: "user",
 		content: e.prompt,
 		timestamp: Date.now()
 	}], (e) => {
+		if (e.type === "approval_request") {
+			a?.(e);
+			return;
+		}
 		r && (e.type === "tool_call" || e.type === "tool_result") && r(e);
 	}, n);
 }
-function Mo(e) {
+function Fo(e) {
 	let n = e.maxParallel ?? wo, i, a, o, s = (t, n) => (r) => {
 		e.tracker?.pushStep(t, {
 			kind: r.type,
@@ -4322,25 +4363,25 @@ function Mo(e) {
 	};
 	return {
 		name: "subagent",
-		tools: [r(async ({ prompt: t, role: n, tools: r, writablePaths: a, model: c }) => {
-			let l = r?.length || a?.length ? {
+		tools: [r(async ({ prompt: t, role: n, tools: r, writablePaths: c, model: l }) => {
+			let u = (r ?? []).filter((e) => !Ao.includes(e)), d = u.length || c?.length ? {
 				...e,
-				...r?.length ? { allowedTools: r } : {},
-				...a?.length ? { writablePaths: a } : {}
-			} : e, u = `sub-${Math.random().toString(36).slice(2, 8)}`, d = n?.trim() || "子任务", f = (e) => o?.({
+				...u.length ? { allowedTools: u } : {},
+				...c?.length ? { writablePaths: c } : {}
+			} : e, f = `sub-${Math.random().toString(36).slice(2, 8)}`, p = n?.trim() || "子任务", m = (e) => o?.({
 				...e,
-				source: `子:${d}`
-			}), p = Date.now();
-			e.tracker?.start(u, t, d, p);
+				source: `子:${p}`
+			}), h = Date.now();
+			e.tracker?.start(f, t, p, h);
 			try {
-				let r = await jo({
+				let r = await Po({
 					prompt: t,
 					role: n,
-					model: c
-				}, l, i, s(u, d), f);
-				return e.tracker?.finish(u, "done", r), r;
+					model: l
+				}, d, i, s(f, p), m, a);
+				return e.tracker?.finish(f, "done", r), r;
 			} catch (t) {
-				throw e.tracker?.finish(u, "error", String(t?.message ?? t)), t;
+				throw e.tracker?.finish(f, "error", String(t?.message ?? t)), t;
 			}
 		}, {
 			name: "spawn_agent",
@@ -4348,18 +4389,18 @@ function Mo(e) {
 			schema: t.object({
 				prompt: t.string().describe("子任务描述(子 agent 的唯一输入)"),
 				role: t.string().optional().describe("子 agent 身份(如\"你是代码审查专家\")"),
-				tools: t.array(t.string()).optional().describe("子 agent 可用工具名白名单(默认只读主数据 + fetch)"),
+				tools: t.array(t.string()).optional().describe("子 agent 可用工具名白名单(默认只读主数据 + fetch)。写工具不可自授——写权限用 writablePaths;委派/框架类工具系统保留不可授"),
 				writablePaths: t.array(t.string()).optional().describe("子 agent 可写路径前缀(给写权限;越界 PATH_OUT_OF_SCOPE;如 [\"components\"] 允许写 components.* )"),
 				model: t.string().optional().describe("覆盖模型(默认同主)")
 			})
 		}), r(async ({ tasks: t }) => (await Qr(t, n, async (t, n) => {
-			let r = `sub-${n}-${Math.random().toString(36).slice(2, 6)}`, a = t.role?.trim() || `子任务${n + 1}`, c = (e) => o?.({
+			let r = `sub-${n}-${Math.random().toString(36).slice(2, 6)}`, c = t.role?.trim() || `子任务${n + 1}`, l = (e) => o?.({
 				...e,
-				source: `子:${a}`
-			}), l = Date.now();
-			e.tracker?.start(r, t.prompt, a, l);
+				source: `子:${c}`
+			}), u = Date.now();
+			e.tracker?.start(r, t.prompt, c, u);
 			try {
-				let n = await jo(t, e, i, s(r, a), c);
+				let n = await Po(t, e, i, s(r, c), l, a);
 				return e.tracker?.finish(r, "done", n ?? "(未完成)"), n;
 			} catch (t) {
 				throw e.tracker?.finish(r, "error", String(t?.message ?? t)), t;
@@ -4375,8 +4416,8 @@ function Mo(e) {
 		wrapToolCall: async (e, t) => (e.signal && (i = e.signal), e.emit && (a = e.emit), e.logSink && (o = e.logSink), t(e))
 	};
 }
-var No = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-function Po(e, t) {
+var Io = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+function Lo(e, t) {
 	let n = e.tools ?? [];
 	return {
 		llm: e.llm ?? t.llm,
@@ -4394,10 +4435,12 @@ function Po(e, t) {
 		...e.summarization === void 0 ? {} : { summarization: e.summarization },
 		...t.getFocuses ? { getFocuses: t.getFocuses } : {},
 		...t.getSchema ? { getSchema: t.getSchema } : {},
-		...t.tracker ? { tracker: t.tracker } : {}
+		...t.tracker ? { tracker: t.tracker } : {},
+		...t.guardMiddleware?.length ? { guardMiddleware: t.guardMiddleware } : {},
+		...t.getVfsFiles ? { getVfsFiles: t.getVfsFiles } : {}
 	};
 }
-function Fo(e, n) {
+function Ro(e, n) {
 	let i, a, o, s = (e, t) => (n) => {
 		a && a({
 			type: "subagent",
@@ -4411,44 +4454,44 @@ function Fo(e, n) {
 		});
 	}, c = [], l = [], u;
 	function d(e) {
-		let a = /* @__PURE__ */ new Set(), c = [], l = [];
-		for (let u of e) {
-			if (!No.test(u.id)) {
-				console.warn(`[subagents] id "${u.id}" 非合法工具名(须 [a-zA-Z_][a-zA-Z0-9_]*),已跳过`);
+		let c = /* @__PURE__ */ new Set(), l = [], u = [];
+		for (let d of e) {
+			if (!Io.test(d.id)) {
+				console.warn(`[subagents] id "${d.id}" 非合法工具名(须 [a-zA-Z_][a-zA-Z0-9_]*),已跳过`);
 				continue;
 			}
-			let e = `use_${u.id}`;
-			if (a.has(e)) {
-				console.warn(`[subagents] id "${u.id}" 重复,已跳过`);
+			let e = `use_${d.id}`;
+			if (c.has(e)) {
+				console.warn(`[subagents] id "${d.id}" 重复,已跳过`);
 				continue;
 			}
-			a.add(e), c.push(u), l.push(r(async ({ task: e }) => {
-				let t = Po(u, n), r = (e) => o?.({
+			c.add(e), l.push(d), u.push(r(async ({ task: e }) => {
+				let t = Lo(d, n), r = (e) => o?.({
 					...e,
-					source: `子:${u.id}`
-				}), a = n.tracker, c = a ? `use_${u.id}-${Math.random().toString(36).slice(2, 6)}` : `use_${u.id}`, l = s(`use_${u.id}`, u.id), d = a ? (e) => {
-					a.pushStep(c, {
+					source: `子:${d.id}`
+				}), c = n.tracker, l = c ? `use_${d.id}-${Math.random().toString(36).slice(2, 6)}` : `use_${d.id}`, u = s(`use_${d.id}`, d.id), f = c ? (e) => {
+					c.pushStep(l, {
 						kind: e.type,
 						name: e.name,
 						ts: Date.now()
-					}), l(e);
-				} : l, f = Date.now();
-				a?.start(c, e, u.id, f);
+					}), u(e);
+				} : u, p = Date.now();
+				c?.start(l, e, d.id, p);
 				try {
-					let n = await jo({ prompt: e }, t, i, d, r);
-					return a?.finish(c, "done", n), n;
+					let n = await Po({ prompt: e }, t, i, f, r, a);
+					return c?.finish(l, "done", n), n;
 				} catch (e) {
-					throw a?.finish(c, "error", String(e?.message ?? e)), e;
+					throw c?.finish(l, "error", String(e?.message ?? e)), e;
 				}
 			}, {
-				name: `use_${u.id}`,
-				description: `委派给「${u.description}」子 agent 执行任务,返回其结论(过程隔离,不占主上下文)。`,
+				name: `use_${d.id}`,
+				description: `委派给「${d.description}」子 agent 执行任务,返回其结论(过程隔离,不占主上下文)。`,
 				schema: t.object({ task: t.string().describe("委派给该子 agent 的任务描述") })
 			}));
 		}
 		return {
-			valid: c,
-			tools: l
+			valid: l,
+			tools: u
 		};
 	}
 	let f = d(e);
@@ -4496,7 +4539,7 @@ function Fo(e, n) {
 }
 //#endregion
 //#region src/core/harness/verify.ts
-function Io(e) {
+function zo(e) {
 	return {
 		name: "verify",
 		async beforeReturn({ messages: t, state: n, log: r }) {
@@ -4508,10 +4551,10 @@ function Io(e) {
 			if (e.adversarial) {
 				r?.("middleware", {
 					stage: "adversarial_start",
-					model: Wo(e.adversarial.llm),
+					model: qo(e.adversarial.llm),
 					tools: (e.adversarial.tools ?? []).length
 				});
-				let n = await Jo(t, e.adversarial.llm, r, e.adversarial.tools);
+				let n = await Zo(t, e.adversarial.llm, r, e.adversarial.tools);
 				if (r?.("middleware", {
 					stage: "adversarial_done",
 					clean: n === null,
@@ -4522,18 +4565,18 @@ function Io(e) {
 		}
 	};
 }
-var Lo = /* @__PURE__ */ new Set([
+var Bo = /* @__PURE__ */ new Set([
 	"set_data",
 	"edit_data",
 	"delete_data",
 	"write"
-]), Ro = /校验失败|SCHEMA_INVALID|未注册|不存在|仅支持|必须是|NOT_OBJECT|PATH_UNSAFE|VERSION_CONFLICT|WRITE_INTERCEPT/;
-function zo(e) {
+]), Vo = /校验失败|SCHEMA_INVALID|未注册|不存在|仅支持|必须是|NOT_OBJECT|PATH_UNSAFE|VERSION_CONFLICT|WRITE_INTERCEPT/;
+function Ho(e) {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = n?.tool_calls;
 		if (Array.isArray(e)) for (let n of e) {
-			if (!Lo.has(n.name)) continue;
+			if (!Bo.has(n.name)) continue;
 			let e = n.id, r = n?.args ?? {};
 			if (n.name === "write") if (r.del && r.patch?.jsonPath) t.set(r.patch.jsonPath, {
 				path: r.patch.jsonPath,
@@ -4572,7 +4615,7 @@ function zo(e) {
 	}
 	return [...t.values()];
 }
-function Bo(e) {
+function Uo(e) {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = n?.tool_call_id, r = n?.content;
@@ -4580,7 +4623,7 @@ function Bo(e) {
 	}
 	return t;
 }
-function Vo(e, t) {
+function Wo(e, t) {
 	if (t === "") return e;
 	if (e == null) return;
 	let n = e;
@@ -4590,16 +4633,16 @@ function Vo(e, t) {
 	}
 	return n;
 }
-function Ho(e = {}) {
+function Go(e = {}) {
 	let t = typeof e.root == "function" ? e.root : e.root === void 0 ? () => e.window ?? globalThis.window : () => e.root, n = typeof e.schemas == "function" ? e.schemas : () => e.schemas ?? {};
 	return async ({ messages: e }) => {
-		let r = zo(e);
+		let r = Ho(e);
 		if (!r.length) return { ok: !0 };
-		let i = Bo(e), a = n()[""], o = t(), s = [];
+		let i = Uo(e), a = n()[""], o = t(), s = [];
 		for (let { path: e, op: t, callId: n } of r) {
 			let r = n ? i.get(n) : void 0;
-			if (r && Ro.test(r)) continue;
-			let c = Vo(o, e);
+			if (r && Vo.test(r)) continue;
+			let c = Wo(o, e);
 			if (t === "delete_data") c !== void 0 && s.push(`${e} 删除后读回仍有值,疑似未生效`);
 			else if (c == null) s.push(`写入 ${e} 后读回为空,疑似未生效`);
 			else if (a) {
@@ -4613,17 +4656,17 @@ function Ho(e = {}) {
 		} : { ok: !0 };
 	};
 }
-function Uo(e) {
+function Ko(e) {
 	return !!e && typeof e == "object" && typeof e.invoke == "function" && typeof e.stream == "function";
 }
-function Wo(e) {
-	return Uo(e) ? e.model ?? e.modelName ?? "<实例>" : e.model ?? "<配置>";
+function qo(e) {
+	return Ko(e) ? e.model ?? e.modelName ?? "<实例>" : e.model ?? "<配置>";
 }
-var Go = /无问题|没有问题|未发现问题|没有发现|没问题|未发现/;
-function Ko(e) {
-	return Go.test(e);
+var Jo = /无问题|没有问题|未发现问题|没有发现|没问题|未发现/;
+function Yo(e) {
+	return Jo.test(e);
 }
-function qo(e) {
+function Xo(e) {
 	let t = "", n = "";
 	for (let r of e) r instanceof a ? t = typeof r.content == "string" ? r.content : "" : r instanceof i && !(r.tool_calls?.length > 0) && (n = typeof r.content == "string" ? r.content : "");
 	return {
@@ -4631,8 +4674,8 @@ function qo(e) {
 		lastReply: n
 	};
 }
-async function Jo(e, t, n, r) {
-	let { lastUser: i, lastReply: a } = qo(e);
+async function Zo(e, t, n, r) {
+	let { lastUser: i, lastReply: a } = Xo(e);
 	if (!a) return null;
 	let o = Array.isArray(r) && r.length > 0, s = [
 		"你是严格的对抗式审查者,目标是找出以下 AI 助手回复的错误并证明它有问题(事实错误 / 遗漏 / 逻辑矛盾 / 与需求不符)。",
@@ -4643,7 +4686,7 @@ async function Jo(e, t, n, r) {
 	].join("\n"), c = "你是严格的对抗式审查者,只找问题不赞美。目标是反驳,不是改进。", l = n ? (e) => n(e.type, {
 		...e.data,
 		source: "adversarial"
-	}) : void 0, u = await ji(Uo(t) ? {
+	}) : void 0, u = await ji(Ko(t) ? {
 		llm: t,
 		tools: r,
 		maxToolRounds: o ? 4 : 1,
@@ -4668,11 +4711,11 @@ async function Jo(e, t, n, r) {
 		stage: "adversarial_verdict",
 		verdict: u,
 		source: "adversarial"
-	}), Ko(u) ? null : u.trim();
+	}), Yo(u) ? null : u.trim();
 }
 //#endregion
 //#region src/core/utils/contextAnalysis.ts
-var Yo = [
+var Qo = [
 	{
 		prefix: "## 可操作数据",
 		key: "dataHint"
@@ -4701,7 +4744,7 @@ var Yo = [
 		prefix: "【与当前问题可能相关的早期对话】",
 		key: "recall"
 	}
-], Xo = [
+], $o = [
 	{
 		key: "systemPrompt",
 		label: "系统提示词(身份/规则)"
@@ -4755,9 +4798,9 @@ var Yo = [
 		label: "其他"
 	}
 ];
-function Zo() {
+function es() {
 	let e = {};
-	for (let t of Xo) e[t.key] = {
+	for (let t of $o) e[t.key] = {
 		key: t.key,
 		label: t.label,
 		tokens: 0,
@@ -4766,16 +4809,16 @@ function Zo() {
 	};
 	return e;
 }
-function Qo(e, t) {
+function ts(e, t) {
 	e.tokens += t, e.msgCount += 1;
 }
-function $o(e) {
+function ns(e) {
 	let t = e.content;
 	return typeof t == "string" ? t : JSON.stringify(t ?? "");
 }
-function es(e, t) {
+function rs(e, t) {
 	let n = [];
-	for (let t of Yo) {
+	for (let t of Qo) {
 		let r = 0;
 		for (;;) {
 			let i = e.indexOf(t.prefix, r);
@@ -4788,35 +4831,35 @@ function es(e, t) {
 	}
 	if (n.sort((e, t) => e.idx - t.idx), !n.length) {
 		let n = e.trim();
-		n && Qo(t.systemPrompt, X(n));
+		n && ts(t.systemPrompt, X(n));
 		return;
 	}
 	if (n[0].idx > 0) {
 		let r = e.slice(0, n[0].idx).trim();
-		r && Qo(t.systemPrompt, X(r));
+		r && ts(t.systemPrompt, X(r));
 	}
 	for (let r = 0; r < n.length; r++) {
 		let i = n[r].idx, a = r + 1 < n.length ? n[r + 1].idx : e.length, o = e.slice(i, a).trim();
-		o && Qo(t[n[r].key], X(o));
+		o && ts(t[n[r].key], X(o));
 	}
 }
-function ts(e, t = {}) {
-	let n = Zo(), r = -1;
+function is(e, t = {}) {
+	let n = es(), r = -1;
 	for (let t = e.length - 1; t >= 0; t--) if (e[t] instanceof a) {
 		r = t;
 		break;
 	}
 	for (let t = 0; t < e.length; t++) {
 		let c = e[t];
-		if (c instanceof o) es($o(c), n);
-		else if (c instanceof a) Qo(n[t === r ? "current" : "history"], X($o(c)));
+		if (c instanceof o) rs(ns(c), n);
+		else if (c instanceof a) ts(n[t === r ? "current" : "history"], X(ns(c)));
 		else if (c instanceof i) {
 			let e = c.tool_calls ?? [];
 			if (e.length) {
 				let t = e.map((e) => JSON.stringify(e.args ?? {})).join(" ");
-				Qo(n.toolResults, X(t));
-			} else Qo(n.assistant, X($o(c)));
-		} else c instanceof s ? Qo(n.toolResults, X($o(c))) : Qo(n.other, X($o(c)));
+				ts(n.toolResults, X(t));
+			} else ts(n.assistant, X(ns(c)));
+		} else c instanceof s ? ts(n.toolResults, X(ns(c))) : ts(n.other, X(ns(c)));
 	}
 	let c = Object.values(n).filter((e) => e.tokens > 0);
 	c.sort((e, t) => t.tokens - e.tokens);
@@ -4833,12 +4876,12 @@ function ts(e, t = {}) {
 }
 //#endregion
 //#region src/core/harness/contextInspector.ts
-function ns(e = {}) {
+function as(e = {}) {
 	let t, n = e.contextWindow;
 	return {
 		name: "context-inspector",
 		async wrapModelCall(r, i) {
-			return t = ts(r.messages, {
+			return t = is(r.messages, {
 				contextWindow: n,
 				thresholdRatio: e.thresholdRatio
 			}), i(r);
@@ -4851,13 +4894,13 @@ function ns(e = {}) {
 }
 //#endregion
 //#region src/core/mcp/client.ts
-function rs(e) {
+function os(e) {
 	let t = e?.content;
 	if (!Array.isArray(t) || !t.length) return "";
 	let n = t.map((e) => e.type === "text" && e.text ? e.text : e.type === "image" && e.data ? `[image:${String(e.data).slice(0, 32)}…]` : e.type === "audio" && e.data ? "[audio]" : e.type === "resource" && e.resource ? e.resource.text ?? e.resource.blob ?? "" : "").filter(Boolean).join("\n");
 	return e?.isError ? `工具错误:${n}` : n;
 }
-async function is(e) {
+async function ss(e) {
 	let t = new URL(e.url), n = e.requestInit;
 	if (e.transport === "http") {
 		let { StreamableHTTPClientTransport: e } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
@@ -4870,8 +4913,8 @@ async function is(e) {
 	let { WebSocketClientTransport: r } = await import("@modelcontextprotocol/sdk/client/websocket.js");
 	return new r(t);
 }
-function as(e, t) {
-	return r(async (n) => rs(await t.callTool({
+function cs(e, t) {
+	return r(async (n) => os(await t.callTool({
 		name: e.name,
 		arguments: n
 	})), {
@@ -4880,39 +4923,39 @@ function as(e, t) {
 		schema: e.inputSchema
 	});
 }
-async function os(e) {
-	let { Client: t } = await import("@modelcontextprotocol/sdk/client"), n = await is(e), r = new t({
+async function ls(e) {
+	let { Client: t } = await import("@modelcontextprotocol/sdk/client"), n = await ss(e), r = new t({
 		name: "page-agent-sdk",
 		version: "1.0"
 	}, { capabilities: {} });
 	await r.connect(n);
 	let { tools: i } = await r.listTools();
 	return {
-		tools: i.map((e) => as(e, r)),
+		tools: i.map((e) => cs(e, r)),
 		close: () => r.close()
 	};
 }
 //#endregion
 //#region src/core/sdk/promptBuilder.ts
-var ss = [
+var us = [
 	"你是一个 JSON 操作助手。集成方声明了一个主数据对象(含 zod schema 校验),你通过专用工具安全地读写它来完成任务。",
 	"所有写操作都经范围控制(仅 schema 声明字段内)与 schema 校验(不合法会返回结构化错误而非写入),并自动留快照可回退。",
 	"大对象/数组优先用增量 patch(只发改动)而非整体重传,避免输出被截断。",
 	"---",
 	ia.reliableWriteRules
 ].join("\n\n");
-function cs(e, t) {
+function ds(e, t) {
 	if (!e) return "";
 	let n = ca(e.schema, t);
 	return `\n\n## 可操作数据(字段以 read 工具返回的实际值为准)\n${e.description ? e.description + "\n" : ""}${n}`;
 }
-function ls(e) {
+function fs(e) {
 	let t = e.appendReliableWriteRules !== !1;
-	return e.systemPrompt ? t ? e.systemPrompt + "\n\n---\n\n" + ia.reliableWriteRules : e.systemPrompt : ss;
+	return e.systemPrompt ? t ? e.systemPrompt + "\n\n---\n\n" + ia.reliableWriteRules : e.systemPrompt : us;
 }
 //#endregion
 //#region src/core/sdk/defineTool.ts
-function us(e) {
+function ps(e) {
 	return r(async (t) => {
 		let n = await e.handler(t);
 		return typeof n == "string" ? n : JSON.stringify(n);
@@ -4924,7 +4967,7 @@ function us(e) {
 }
 //#endregion
 //#region src/core/sdk/inspectContextTool.ts
-var ds = t.object({
+var ms = t.object({
 	path: t.string().optional().describe("分类 key 过滤(如 toolResults/history/systemPrompt/dataHint);不传=全部分类"),
 	role: t.enum([
 		"user",
@@ -4934,11 +4977,11 @@ var ds = t.object({
 	]).optional().describe("聚焦每轮首句的角色(assistant→回复摘要,user→问题摘要);不影响工具列表"),
 	limit: t.number().int().min(1).max(50).optional().describe("返回最近 N 轮(默认全部;超 50 自动截最近 50 防返回过大)")
 });
-function fs(e) {
-	return us({
+function hs(e) {
+	return ps({
 		name: "inspect_context",
 		description: "查看当前对话上下文的构成(供压缩决策)。返回:totalTokens(历史轮次 token 总和,与触发判断同口径)、occupancy(窗口占用比)、contextWindow、categories(分类占用)、rounds(每轮 token/工具/首句)。先调用本工具查看构成,再决定压缩策略。",
-		schema: ds,
+		schema: ms,
 		handler: (t) => {
 			let n = eo(e.getMessages()), r = n.length > 50 ? n.slice(n.length - 50) : n, i = (t.limit && r.length > t.limit ? r.slice(r.length - t.limit) : r).map((e) => {
 				let n = po(e), r = no(e), i = t.role === "assistant" ? e.assistantMsgs[0] ?? e.userMsg : e.userMsg, a = to(typeof i.content == "string" ? i.content : "", 60);
@@ -4961,7 +5004,7 @@ function fs(e) {
 }
 //#endregion
 //#region src/core/sdk/compressDecision.ts
-var ps = t.object({
+var gs = t.object({
 	keepRounds: t.number().int().min(0).max(50).optional(),
 	windowRatio: t.number().min(0).max(1).optional(),
 	summarize: t.object({ mode: t.enum(["index", "llm"]) }),
@@ -4971,23 +5014,23 @@ var ps = t.object({
 }).refine((e) => e.keepRounds !== void 0 || e.windowRatio !== void 0, { message: "keepRounds 与 windowRatio 至少填一个(按当前触发模式)" });
 //#endregion
 //#region src/core/sdk/llmResolver.ts
-function ms(e) {
+function _s(e) {
 	let t = e.find((e) => e.role === "user");
 	if (!t) return;
 	let n = t.content, r = (typeof n == "string" ? n : Array.isArray(n) ? n.map((e) => typeof e == "string" ? e : e?.text ?? "").join("") : String(n ?? "")).trim().replace(/[\n\r]+/g, " ");
 	if (r) return r.length > 30 ? r.slice(0, 30) + "…" : r;
 }
-function hs(e) {
+function vs(e) {
 	return !!e && typeof e == "object" && typeof e.invoke == "function" && typeof e.stream == "function";
 }
-function gs(e) {
+function ys(e) {
 	let t = e.content;
 	return typeof t == "string" ? t : Array.isArray(t) ? t.map((e) => typeof e == "string" ? e : e?.text ?? "").join("") : String(t ?? "");
 }
-function _s(e) {
+function bs(e) {
 	let t = e.summaryLlm ?? e.llm;
 	if (!t) return;
-	let n = e.summaryTemperature ?? .3, r = e.summaryMaxTokens ?? 1024, i = e.summaryTimeoutMs ?? 15e3, s = hs(t) ? t : null, c = hs(t) ? null : t;
+	let n = e.summaryTemperature ?? .3, r = e.summaryMaxTokens ?? 1024, i = e.summaryTimeoutMs ?? 15e3, s = vs(t) ? t : null, c = vs(t) ? null : t;
 	if (c && !c.apiKey) {
 		e.summaryLlm && console.warn("[page-agent-sdk][summarization] summaryLlm 已配置但缺 apiKey,摘要回退主 agent 模型或零成本索引摘要");
 		return;
@@ -4999,16 +5042,16 @@ function _s(e) {
 			return !l && c && (l = await f(c, {
 				temperature: n,
 				maxTokens: r
-			})), gs(await l.invoke([new o("你是对话历史压缩助手。把下面按轮次索引的对话要点,改写成一段连贯、紧凑的中文摘要,保留关键事实、用户意图与已用工具,不要编造。直接输出摘要正文。"), new a(e)], { signal: t.signal })).trim();
+			})), ys(await l.invoke([new o("你是对话历史压缩助手。把下面按轮次索引的对话要点,改写成一段连贯、紧凑的中文摘要,保留关键事实、用户意图与已用工具,不要编造。直接输出摘要正文。"), new a(e)], { signal: t.signal })).trim();
 		} finally {
 			clearTimeout(s);
 		}
 	};
 }
-function vs(e) {
+function xs(e) {
 	let t = e.titleLlm ?? e.summaryLlm ?? e.llm;
 	if (!t) return;
-	let n = hs(t) ? t : null, r = hs(t) ? null : t;
+	let n = vs(t) ? t : null, r = vs(t) ? null : t;
 	if (r && !r.apiKey) return;
 	let i = n;
 	return async (e) => {
@@ -5017,7 +5060,7 @@ function vs(e) {
 			return !i && r && (i = await f(r, {
 				temperature: 0,
 				maxTokens: 30
-			})), gs(await i.invoke([new o("根据以下对话的主旨,生成一个简短的中文标题(不超过15个字,不要标点和引号,直接输出标题文字)。"), new a(t)], { signal: n.signal })).trim().replace(/^["'""「『]|["'""」』]$/g, "").split("\n")[0].slice(0, 20);
+			})), ys(await i.invoke([new o("根据以下对话的主旨,生成一个简短的中文标题(不超过15个字,不要标点和引号,直接输出标题文字)。"), new a(t)], { signal: n.signal })).trim().replace(/^["'""「『]|["'""」』]$/g, "").split("\n")[0].slice(0, 20);
 		} catch {
 			return "";
 		} finally {
@@ -5025,10 +5068,10 @@ function vs(e) {
 		}
 	};
 }
-function ys() {
+function Ss() {
 	return `call_dec_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
 }
-function bs(e) {
+function Cs(e) {
 	let t = e.match(/```(?:json)?\s*([\s\S]*?)```/), n = t ? t[1] : e, r = n.indexOf("{"), i = n.lastIndexOf("}");
 	if (r < 0 || i < 0 || i <= r) return null;
 	try {
@@ -5037,21 +5080,21 @@ function bs(e) {
 		return null;
 	}
 }
-function xs(e) {
+function ws(e) {
 	if (!e) return null;
-	let t = bs(e);
+	let t = Cs(e);
 	if (t == null) return null;
-	let n = ps.safeParse(t);
+	let n = gs.safeParse(t);
 	return n.success ? n.data : null;
 }
-async function Ss(e, t, n, r) {
+async function Ts(e, t, n, r) {
 	let i = [...n];
 	for (let n = 0; n < 3; n++) {
 		let n = await e.invoke(i, { signal: r }), a = n?.tool_calls ?? [];
-		if (!a.length) return gs(n).trim();
+		if (!a.length) return ys(n).trim();
 		i = [...i, n];
 		for (let e of a) {
-			let n = e.id ?? ys();
+			let n = e.id ?? Ss();
 			try {
 				let r = await t.invoke(e.args ?? {}), a = typeof r == "string" ? r : r?.content ?? JSON.stringify(r);
 				i = [...i, new s({
@@ -5068,10 +5111,10 @@ async function Ss(e, t, n, r) {
 	}
 	return "";
 }
-function Cs(e) {
+function Es(e) {
 	let t = e.summaryLlm ?? e.llm;
 	if (!t) return;
-	let n = hs(t) ? t : null, r = hs(t) ? null : t;
+	let n = vs(t) ? t : null, r = vs(t) ? null : t;
 	if (r && !r.apiKey) return;
 	let i = e.decisionTimeoutMs ?? 6e3, s = e.decisionMaxTokens ?? 2048, c = n;
 	return async (e) => {
@@ -5083,12 +5126,12 @@ function Cs(e) {
 			}));
 			let n = c;
 			if (typeof n.bindTools != "function") return null;
-			let i = fs({
+			let i = hs({
 				getMessages: e.getMessages,
 				getSnapshot: e.getSnapshot,
 				contextWindow: e.contextWindow
 			}), l = n.bindTools([i]), u = e.triggerMode === "token" ? "token 模式:必填 windowRatio(0~1 保留窗口预算比例,如 0.4);keepRounds 可选" : "轮数模式:必填 keepRounds(保留最近几轮,如 6);windowRatio 可选", d = [new o(`你是对话历史压缩决策助手。当前触发模式 = ${e.triggerMode}(${e.triggerReason})。先调用 inspect_context 查看上下文构成,再输出压缩决策 JSON。${u}。仅输出 JSON,不要多余文字/markdown。schema:{keepRounds?(int 0-50), windowRatio?(0-1), summarize:{mode:"index"|"llm"}, recallTopK?(int 0-10), preserveTools?(string[]≤10), reason?(≤200字)}。keepRounds/windowRatio 至少填一个。`), new a(`触发原因:${e.triggerReason}\n上下文窗口:${e.contextWindow ?? "未知"} tokens\n阈值比例:${e.thresholdRatio ?? "未知"}\n\n请决策压缩策略(先 inspect_context 查看,再输出 JSON)。`)];
-			return xs(await Ss(l, i, d, t.signal)) || xs(await Ss(l, i, [...d, new a("上一次输出无效(JSON 解析失败或 schema 校验不通过)。请只输出符合 schema 的压缩决策 JSON,不要多余文字/markdown 代码块。")], t.signal));
+			return ws(await Ts(l, i, d, t.signal)) || ws(await Ts(l, i, [...d, new a("上一次输出无效(JSON 解析失败或 schema 校验不通过)。请只输出符合 schema 的压缩决策 JSON,不要多余文字/markdown 代码块。")], t.signal));
 		} catch {
 			return null;
 		} finally {
@@ -5096,22 +5139,22 @@ function Cs(e) {
 		}
 	};
 }
-function ws(e) {
-	let t = e.llm, n = hs(e.llm) ? void 0 : e.llm;
+function Ds(e) {
+	let t = e.llm, n = vs(e.llm) ? void 0 : e.llm;
 	return {
 		modelCaps: ni({
 			model: n?.model ?? t?.model ?? t?.modelName,
 			contextWindow: e.contextWindow ?? n?.contextWindow ?? t?.contextWindow,
 			maxOutputTokens: e.maxOutputTokens ?? n?.maxOutputTokens ?? t?.maxOutputTokens
 		}),
-		summaryLlmInvoke: _s(e),
-		titleLlmInvoke: vs(e),
-		compressDecisionInvoke: Cs(e)
+		summaryLlmInvoke: bs(e),
+		titleLlmInvoke: xs(e),
+		compressDecisionInvoke: Es(e)
 	};
 }
 //#endregion
 //#region src/core/sdk/conflictManager.ts
-function Ts(e) {
+function Os(e) {
 	let t = /* @__PURE__ */ Ot(null), n = 0;
 	function r(r) {
 		return new Promise((i) => {
@@ -5142,7 +5185,7 @@ function Ts(e) {
 }
 //#endregion
 //#region src/core/utils/id.ts
-function Es() {
+function ks() {
 	try {
 		if (typeof crypto < "u" && typeof crypto.randomUUID == "function") return crypto.randomUUID();
 	} catch {}
@@ -5150,7 +5193,7 @@ function Es() {
 }
 //#endregion
 //#region src/core/backends/storage.ts
-var Ds = "chat-sdk", Os = 50 * 1024 * 1024, ks = 4 * 1024 * 1024, As = 10 * 1024 * 1024, js = .9, Ms = 500, Ns = 300, Ps = "__meta__", Fs = "v:1", Is = [
+var As = "chat-sdk", js = 50 * 1024 * 1024, Ms = 4 * 1024 * 1024, Ns = 10 * 1024 * 1024, Ps = .9, Fs = 500, Is = 300, Ls = "__meta__", Rs = "v:1", zs = [
 	"messages",
 	"vfs",
 	"todos",
@@ -5161,51 +5204,51 @@ var Ds = "chat-sdk", Os = 50 * 1024 * 1024, ks = 4 * 1024 * 1024, As = 10 * 1024
 	"workingMemory",
 	"focus"
 ];
-function Ls(e) {
-	return e === "local" || e === "session" ? ks : Os;
+function Bs(e) {
+	return e === "local" || e === "session" ? Ms : js;
 }
-function Rs(e) {
+function Vs(e) {
 	if (typeof e != "object" || !e) return !1;
 	let t = e;
 	return t.name === "QuotaExceededError" || t.name === "NS_ERROR_DOM_QUOTA_REACHED" || t.code === 22 || t.code === 1014;
 }
-function zs(e, t, n, r) {
+function Hs(e, t, n, r) {
 	return [
-		Fs,
+		Rs,
 		e,
 		t,
 		n,
 		r
 	].join("::");
 }
-function Bs(e, t, n) {
+function Us(e, t, n) {
 	return [
-		Fs,
+		Rs,
 		e,
 		t,
 		n
 	].join("::") + "::";
 }
-function Vs(e, t) {
+function Ws(e, t) {
 	return [
-		Fs,
+		Rs,
 		e,
 		t
 	].join("::") + "::";
 }
-function Hs(e) {
-	return [Fs, e].join("::") + "::";
+function Gs(e) {
+	return [Rs, e].join("::") + "::";
 }
-var Us = null;
-function Ws(e) {
-	Us ||= new TextEncoder();
+var Ks = null;
+function qs(e) {
+	Ks ||= new TextEncoder();
 	try {
-		return Us.encode(JSON.stringify(e)).length;
+		return Ks.encode(JSON.stringify(e)).length;
 	} catch {
 		return 0;
 	}
 }
-function Gs(e, t, n) {
+function Js(e, t, n) {
 	let r = e.reduce((e, t) => e + t.bytes, 0);
 	if (r <= t) return [];
 	let i = t * n, a = [...e].sort((e, t) => e.lastAccessed - t.lastAccessed), o = [];
@@ -5215,7 +5258,7 @@ function Gs(e, t, n) {
 	}
 	return o;
 }
-function Ks() {
+function Ys() {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		async get(t) {
@@ -5235,7 +5278,7 @@ function Ks() {
 		}
 	};
 }
-function qs(e) {
+function Xs(e) {
 	return new Promise((t, n) => {
 		if (typeof indexedDB > "u") {
 			n(/* @__PURE__ */ Error("indexedDB 不可用"));
@@ -5296,7 +5339,7 @@ function qs(e) {
 		}, r.onerror = () => n(r.error);
 	});
 }
-function Js(e) {
+function Zs(e) {
 	return {
 		async get(t) {
 			let n = e.getItem(t);
@@ -5341,12 +5384,12 @@ function Js(e) {
 		}
 	};
 }
-function Ys(e, t, n) {
+function Qs(e, t, n) {
 	let r = (e.get(t) ?? Promise.resolve()).then(n, n);
 	return e.set(t, r.then(() => void 0, () => void 0)), r;
 }
-function Xs(e = {}) {
-	let t = e.dbName ?? Ds, n = e.backend ?? "indexed", r = e.maxBytes ?? Ls(n), i = e.maxBytesPerSession ?? As, a = e.evictionWatermark ?? js, o = e.debounceMs ?? Ms, s = /* @__PURE__ */ new Set();
+function $s(e = {}) {
+	let t = e.dbName ?? As, n = e.backend ?? "indexed", r = e.maxBytes ?? Bs(n), i = e.maxBytesPerSession ?? Ns, a = e.evictionWatermark ?? Ps, o = e.debounceMs ?? Fs, s = /* @__PURE__ */ new Set();
 	function c(e) {
 		for (let t of s) try {
 			t(e);
@@ -5359,16 +5402,16 @@ function Xs(e = {}) {
 		try {
 			if (n === "indexed") {
 				if (typeof indexedDB > "u") throw Error("indexedDB 不可用");
-				l = await qs(t), d(!0);
+				l = await Xs(t), d(!0);
 			} else if (n === "session") {
 				if (typeof sessionStorage > "u") throw Error("sessionStorage 不可用");
-				l = Js(sessionStorage), d(!0);
+				l = Zs(sessionStorage), d(!0);
 			} else if (n === "local") {
 				if (typeof localStorage > "u") throw Error("localStorage 不可用");
-				l = Js(localStorage), d(!0);
-			} else l = Ks(), d(!1);
+				l = Zs(localStorage), d(!0);
+			} else l = Ys(), d(!1);
 		} catch (e) {
-			l = Ks();
+			l = Ys();
 			let t = e instanceof Error ? e.message : String(e);
 			d(!1), Promise.resolve().then(() => c({
 				type: "degraded",
@@ -5378,10 +5421,10 @@ function Xs(e = {}) {
 	})();
 	let p = /* @__PURE__ */ new Map(), m = /* @__PURE__ */ new Map(), h = /* @__PURE__ */ new Map();
 	function g(e, n, r, a) {
-		let o = zs(t, r, a, Ps);
-		return Ys(h, o, async () => {
+		let o = Hs(t, r, a, Ls);
+		return Qs(h, o, async () => {
 			let t = async () => {
-				let t = await l.get(o), s = await l.get(e), u = s == null ? 0 : Ws(s), d = Ws(n), f = (t?.bytes ?? 0) + (d - u);
+				let t = await l.get(o), s = await l.get(e), u = s == null ? 0 : qs(s), d = qs(n), f = (t?.bytes ?? 0) + (d - u);
 				if (f > i) {
 					c({
 						type: "quota",
@@ -5403,12 +5446,12 @@ function Xs(e = {}) {
 			try {
 				await t();
 			} catch (e) {
-				if (Rs(e) && !u) {
+				if (Vs(e) && !u) {
 					u = !0;
 					try {
 						await b();
 					} catch {}
-					l = Ks(), Promise.resolve().then(() => c({
+					l = Ys(), Promise.resolve().then(() => c({
 						type: "degraded",
 						reason: "存储配额超限(QuotaExceededError),已淘汰最旧会话并降级内存"
 					}));
@@ -5420,7 +5463,7 @@ function Xs(e = {}) {
 		});
 	}
 	function _(e, n, r, i) {
-		let a = zs(t, e, n, r), s = p.get(a);
+		let a = Hs(t, e, n, r), s = p.get(a);
 		s && s.resolve();
 		let c = m.get(a);
 		return c && clearTimeout(c), new Promise((t) => {
@@ -5447,15 +5490,15 @@ function Xs(e = {}) {
 	function y() {
 		v ||= setTimeout(() => {
 			v = null, b();
-		}, Ns);
+		}, Is);
 	}
 	async function b() {
 		let e = [];
-		await l.scan(Hs(t), (t, n) => {
+		await l.scan(Gs(t), (t, n) => {
 			t.endsWith("::__meta__") && e.push(n);
 		});
-		let n = Gs(e, r, a);
-		for (let e of n) await l.clearPrefix(Bs(t, e.agentId, e.sessionId)), c({
+		let n = Js(e, r, a);
+		for (let e of n) await l.clearPrefix(Us(t, e.agentId, e.sessionId)), c({
 			type: "evicted",
 			agentId: e.agentId,
 			sessionId: e.sessionId,
@@ -5466,13 +5509,13 @@ function Xs(e = {}) {
 		ready: f,
 		async listSessions(e) {
 			let n = [];
-			return await l.scan(Vs(t, e), (e, t) => {
+			return await l.scan(Ws(t, e), (e, t) => {
 				e.endsWith("::__meta__") && n.push(t);
 			}), n.sort((e, t) => t.lastAccessed - e.lastAccessed);
 		},
 		async load(e, n) {
-			let r = zs(t, e, n, Ps);
-			return await Ys(h, r, async () => {
+			let r = Hs(t, e, n, Ls);
+			return await Qs(h, r, async () => {
 				let i = await l.get(r);
 				if (!i) return;
 				let a = {
@@ -5481,8 +5524,8 @@ function Xs(e = {}) {
 					todos: [],
 					memory: ""
 				};
-				for (let r of Is) {
-					let i = await l.get(zs(t, e, n, r));
+				for (let r of zs) {
+					let i = await l.get(Hs(t, e, n, r));
 					i != null && (a[r] = i);
 				}
 				return i.lastAccessed = Date.now(), await l.set(r, i), a;
@@ -5490,12 +5533,12 @@ function Xs(e = {}) {
 		},
 		async save(e, t, n) {
 			let r = [];
-			for (let i of Is) n[i] !== void 0 && r.push(_(e, t, i, n[i]));
+			for (let i of zs) n[i] !== void 0 && r.push(_(e, t, i, n[i]));
 			await Promise.all(r);
 		},
 		async updateTitle(e, n, r) {
-			let i = zs(t, e, n, Ps);
-			return Ys(h, i, async () => {
+			let i = Hs(t, e, n, Ls);
+			return Qs(h, i, async () => {
 				let e = await l.get(i);
 				e && (e.title = r, e.lastAccessed = Date.now(), await l.set(i, e));
 			});
@@ -5511,10 +5554,10 @@ function Xs(e = {}) {
 			})), c({ type: "flush" }), await b();
 		},
 		async deleteSession(e, n) {
-			await l.clearPrefix(Bs(t, e, n));
+			await l.clearPrefix(Us(t, e, n));
 		},
 		async createSession(e, n, r) {
-			let i = r ?? Es(), a = Date.now(), o = {
+			let i = r ?? ks(), a = Date.now(), o = {
 				agentId: e,
 				sessionId: i,
 				createdAt: a,
@@ -5522,7 +5565,7 @@ function Xs(e = {}) {
 				bytes: 0,
 				title: n
 			};
-			return await l.set(zs(t, e, i, Ps), o), i;
+			return await l.set(Hs(t, e, i, Ls), o), i;
 		},
 		onEvent(e) {
 			s.add(e);
@@ -5537,15 +5580,15 @@ function Xs(e = {}) {
 }
 //#endregion
 //#region src/core/sdk/optionsResolver.ts
-function Zs(e) {
-	return e === void 0 || e === !1 ? null : typeof e == "string" ? Xs({ backend: e }) : e.enabled === !1 ? null : Xs(e);
+function ec(e) {
+	return e === void 0 || e === !1 ? null : typeof e == "string" ? $s({ backend: e }) : e.enabled === !1 ? null : $s(e);
 }
-function Qs(e) {
+function tc(e) {
 	return e.dialog ?? {};
 }
 //#endregion
 //#region src/core/capabilities.ts
-var $s = [
+var nc = [
 	{
 		name: "dataOps",
 		defaultOn: !0
@@ -5634,13 +5677,13 @@ var $s = [
 		requires: ["summarization"]
 	}
 ];
-function ec(e) {
+function rc(e) {
 	let t = {};
-	for (let n of $s) {
+	for (let n of nc) {
 		let r = e?.[n.name];
 		t[n.name] = n.defaultOn ? r !== !1 : r === !0;
 	}
-	for (let e of $s) if (e.requires && t[e.name]) {
+	for (let e of nc) if (e.requires && t[e.name]) {
 		for (let n of e.requires) if (!t[n]) {
 			t[e.name] = !1;
 			break;
@@ -5650,7 +5693,7 @@ function ec(e) {
 }
 //#endregion
 //#region src/core/sdk/events.ts
-function tc(e) {
+function ic(e) {
 	let t = /* @__PURE__ */ new Set(), n = (n) => {
 		if (n.type !== "approval_request") {
 			if (e) try {
@@ -5676,7 +5719,7 @@ function tc(e) {
 }
 //#endregion
 //#region src/core/sdk/contextPreset.ts
-var nc = {
+var ac = {
 	auto: {
 		summaryThresholdRatio: .5,
 		windowRatio: .4,
@@ -5704,7 +5747,7 @@ var nc = {
 		enableRecall: !0,
 		enableLLMSummary: !0
 	}
-}, rc = {
+}, oc = {
 	auto: ["describe_data", "read"],
 	conservative: ["describe_data"],
 	aggressive: ["describe_data", "read"],
@@ -5715,8 +5758,8 @@ var nc = {
 		"search_data"
 	]
 };
-function ic(e, t) {
-	let n = nc[e.contextPreset ?? "auto"] ?? {}, r = e.contextOptions === !1 ? {} : e.contextOptions ?? {};
+function sc(e, t) {
+	let n = ac[e.contextPreset ?? "auto"] ?? {}, r = e.contextOptions === !1 ? {} : e.contextOptions ?? {};
 	return {
 		...n,
 		...r,
@@ -5726,7 +5769,7 @@ function ic(e, t) {
 }
 //#endregion
 //#region src/core/sdk/middlewareStack.ts
-var ac = {
+var cc = {
 	dataHint: 10,
 	usageHints: 20,
 	todos: 30,
@@ -5743,29 +5786,29 @@ var ac = {
 	subagents: 140,
 	augmentSystem: 150
 };
-function oc(e) {
+function lc(e) {
 	return e.map((e, t) => ({
 		m: e,
 		i: t,
-		p: ac[e.name] ?? Infinity
+		p: cc[e.name] ?? Infinity
 	})).sort((e, t) => e.p - t.p || e.i - t.i).map((e) => e.m);
 }
 //#endregion
 //#region src/core/tools/jsonUtils.ts
-var sc = /* @__PURE__ */ new Set([
+var uc = /* @__PURE__ */ new Set([
 	"__proto__",
 	"constructor",
 	"prototype"
 ]);
-function cc(e) {
-	return e.split(".").some((e) => sc.has(e));
+function dc(e) {
+	return e.split(".").some((e) => uc.has(e));
 }
-function lc(e, t) {
-	if (!(!t || typeof t != "object" || Array.isArray(t))) for (let n of Object.keys(t)) sc.has(n) || (e[n] = t[n]);
+function fc(e, t) {
+	if (!(!t || typeof t != "object" || Array.isArray(t))) for (let n of Object.keys(t)) uc.has(n) || (e[n] = t[n]);
 }
 function Z(e, t) {
 	if (!t) return e;
-	if (cc(t)) return;
+	if (dc(t)) return;
 	let n = t.split("."), r = e;
 	for (let e of n) {
 		if (r == null) return;
@@ -5773,8 +5816,8 @@ function Z(e, t) {
 	}
 	return r;
 }
-function uc(e, t, n) {
-	if (!t || cc(t)) return;
+function pc(e, t, n) {
+	if (!t || dc(t)) return;
 	let r = t.split("."), i = e;
 	for (let e = 0; e < r.length - 1; e++) {
 		let t = r[e];
@@ -5782,8 +5825,8 @@ function uc(e, t, n) {
 	}
 	i[r[r.length - 1]] = n;
 }
-function dc(e, t) {
-	if (!t || cc(t)) return !1;
+function mc(e, t) {
+	if (!t || dc(t)) return !1;
 	let n = t.split("."), r = e;
 	for (let e = 0; e < n.length - 1; e++) {
 		if (r == null) return !1;
@@ -5792,10 +5835,10 @@ function dc(e, t) {
 	let i = n[n.length - 1];
 	return r == null || !(i in r) ? !1 : (Array.isArray(r) && /^\d+$/.test(i) ? r.splice(Number(i), 1) : delete r[i], !0);
 }
-function fc(e) {
+function hc(e) {
 	return e === void 0 ? void 0 : JSON.parse(JSON.stringify(e));
 }
-function pc(e) {
+function gc(e) {
 	if (typeof e != "string") return { parsed: e };
 	let t = e.trim();
 	if (!t) return { parsed: e };
@@ -5806,20 +5849,20 @@ function pc(e) {
 		return n ? { parseError: t } : { parsed: e };
 	}
 }
-function mc(e, t) {
+function _c(e, t) {
 	if (typeof e != "object" || !e) return e;
 	let n = new Set(t);
-	if (Array.isArray(e)) return e.map((e) => mc(e, t));
+	if (Array.isArray(e)) return e.map((e) => _c(e, t));
 	let r = {};
 	for (let t of Object.keys(e)) n.has(t) && (r[t] = e[t]);
 	return r;
 }
-function hc(e, t) {
+function vc(e, t) {
 	if (typeof e != "object" || !e) return e;
 	if (t <= 0) return Array.isArray(e) ? `[...${e.length}]` : "{...}";
-	if (Array.isArray(e)) return e.map((e) => hc(e, t - 1));
+	if (Array.isArray(e)) return e.map((e) => vc(e, t - 1));
 	let n = {};
-	for (let r of Object.keys(e)) n[r] = hc(e[r], t - 1);
+	for (let r of Object.keys(e)) n[r] = vc(e[r], t - 1);
 	return n;
 }
 function Q(e, t = Infinity) {
@@ -5841,7 +5884,7 @@ function Q(e, t = Infinity) {
 	}
 	return r.length > t && (r = r.slice(0, t) + `\n…[已截断,原长度 ${r.length}]`), r;
 }
-function gc(e, t = 0) {
+function yc(e, t = 0) {
 	let n = 3735928559 ^ t, r = 1103547991 ^ t;
 	for (let t = 0; t < e.length; t++) {
 		let i = e.charCodeAt(t);
@@ -5850,31 +5893,31 @@ function gc(e, t = 0) {
 	return n = Math.imul(n ^ n >>> 16, 2246822507) ^ Math.imul(r ^ r >>> 13, 3266489909), r = Math.imul(r ^ r >>> 16, 2246822507) ^ Math.imul(n ^ n >>> 13, 3266489909), 4294967296 * (2097151 & r) + (n >>> 0);
 }
 function $(e) {
-	return gc(Q(e)).toString(36);
+	return yc(Q(e)).toString(36);
 }
-function _c(e, t, n, r) {
-	if (t === "set") return n ? (uc(e, n, r), null) : "set 操作需要 jsonPath(整体替换请用 set_data)";
-	if (t === "remove") return n ? (dc(e, n), null) : "remove 操作需要 jsonPath";
+function bc(e, t, n, r) {
+	if (t === "set") return n ? (pc(e, n, r), null) : "set 操作需要 jsonPath(整体替换请用 set_data)";
+	if (t === "remove") return n ? (mc(e, n), null) : "remove 操作需要 jsonPath";
 	if (t === "merge") {
 		let t = n ? Z(e, n) : e;
-		return typeof t != "object" || !t || Array.isArray(t) ? `merge 目标${n ? `(${n})` : "(根)"}不是对象` : (lc(t, r), null);
+		return typeof t != "object" || !t || Array.isArray(t) ? `merge 目标${n ? `(${n})` : "(根)"}不是对象` : (fc(t, r), null);
 	}
 	let i = n ? Z(e, n) : e;
 	return Array.isArray(i) ? (Array.isArray(r) ? i.push(...r) : i.push(r), null) : `append 目标${n ? `(${n})` : "(根)"}不是数组`;
 }
-function vc(e, t, n, r) {
-	if (t === "set") uc(e, n, r);
-	else if (t === "remove") dc(e, n);
-	else if (t === "merge") lc(n ? Z(e, n) : e, r);
+function xc(e, t, n, r) {
+	if (t === "set") pc(e, n, r);
+	else if (t === "remove") mc(e, n);
+	else if (t === "merge") fc(n ? Z(e, n) : e, r);
 	else {
 		let t = n ? Z(e, n) : e;
 		Array.isArray(r) ? t.push(...r) : t.push(r);
 	}
 }
-function yc(e, t) {
-	typeof e == "object" && e && bc(e, t);
+function Sc(e, t) {
+	typeof e == "object" && e && Cc(e, t);
 }
-function bc(e, t) {
+function Cc(e, t) {
 	if (Array.isArray(e)) {
 		e.length = 0, Array.isArray(t) && e.push(...t);
 		return;
@@ -5883,7 +5926,7 @@ function bc(e, t) {
 	for (let t of Object.keys(e)) t in n || delete e[t];
 	for (let t of Object.keys(n)) e[t] = n[t];
 }
-function xc(e, t, n = "") {
+function wc(e, t, n = "") {
 	let r = [];
 	if (!(typeof e == "object" && e) || !(typeof t == "object" && t) || Array.isArray(e) !== Array.isArray(t)) return e !== t && r.push({
 		path: n || "(root)",
@@ -5902,14 +5945,14 @@ function xc(e, t, n = "") {
 				path: i,
 				from: e[a],
 				to: void 0
-			}) : r.push(...xc(e[a], t[a], i));
+			}) : r.push(...wc(e[a], t[a], i));
 		}
 		return r;
 	}
 	let i = e, a = t, o = /* @__PURE__ */ new Set([...Object.keys(i), ...Object.keys(a)]);
 	for (let e of o) {
 		let t = n ? `${n}.${e}` : e;
-		e in i ? e in a ? r.push(...xc(i[e], a[e], t)) : r.push({
+		e in i ? e in a ? r.push(...wc(i[e], a[e], t)) : r.push({
 			path: t,
 			from: i[e],
 			to: void 0
@@ -5921,48 +5964,48 @@ function xc(e, t, n = "") {
 	}
 	return r;
 }
-var Sc = {
+var Tc = {
 	largeResults: 4 * 1024 * 1024,
 	drafts: 2 * 1024 * 1024,
 	userFiles: 2 * 1024 * 1024,
 	resources: 4 * 1024 * 1024
-}, Cc = [
+}, Ec = [
 	"largeResults",
 	"drafts",
 	"userFiles",
 	"resources"
-], wc = .9;
-function Tc(e, t = {}) {
+], Dc = .9;
+function Oc(e, t = {}) {
 	let n = Object.create(null);
-	if (e) for (let [t, r] of Object.entries(e)) n[kc(t)] = {
+	if (e) for (let [t, r] of Object.entries(e)) n[Mc(t)] = {
 		content: r,
-		updatedAt: jc()
+		updatedAt: Pc()
 	};
 	let { persist: r } = t, i = t.maxBytes ?? 8388608, a = {
-		...Sc,
+		...Tc,
 		...t.poolBytes ?? {}
 	};
 	function o(e) {
-		let t = kc(e);
+		let t = Mc(e);
 		return t.startsWith("large_results/") ? "largeResults" : t.startsWith("drafts/") ? "drafts" : t.startsWith("resources/") ? "resources" : "userFiles";
 	}
 	function s(e) {
 		let t = 0;
-		for (let [r, i] of Object.entries(n)) o(r) === e && (t += Dc(i.content));
+		for (let [r, i] of Object.entries(n)) o(r) === e && (t += Ac(i.content));
 		return t;
 	}
 	function c() {
-		for (let e of Cc) {
+		for (let e of Ec) {
 			let t = a[e];
 			if (s(e) <= t) continue;
-			let r = t * wc, i = e === "largeResults", c = i && s(e) > t * 1.5;
+			let r = t * Dc, i = e === "largeResults", c = i && s(e) > t * 1.5;
 			c && console.warn(`[page-agent-sdk] vfs large_results 池 ${s(e)} > ${Math.round(t * 1.5)}(被引用撑爆)→ 无视 protectedRefs 强制删`);
 			let l = Object.entries(n).filter(([t]) => o(t) === e).sort((e, t) => e[1].updatedAt - t[1].updatedAt);
 			for (let [t] of l) if (!(i && !c && u.has(t)) && (delete n[t], s(e) <= r)) break;
 		}
-		if (Oc(n) > i) {
-			let e = i * wc, t = Oc(n) > i * 1.5, r = Object.entries(n).sort((e, t) => e[1].updatedAt - t[1].updatedAt);
-			for (let [i] of r) if (!(o(i) === "largeResults" && !t && u.has(i)) && (delete n[i], Oc(n) <= e)) break;
+		if (jc(n) > i) {
+			let e = i * Dc, t = jc(n) > i * 1.5, r = Object.entries(n).sort((e, t) => e[1].updatedAt - t[1].updatedAt);
+			for (let [i] of r) if (!(o(i) === "largeResults" && !t && u.has(i)) && (delete n[i], jc(n) <= e)) break;
 		}
 	}
 	let l = !0, u = /* @__PURE__ */ new Set(), d = null;
@@ -5998,7 +6041,7 @@ function Tc(e, t = {}) {
 		}
 	};
 	return r && (m.hydrate = (e) => {
-		for (let [t, r] of Object.entries(e)) n[kc(t)] = r;
+		for (let [t, r] of Object.entries(e)) n[Mc(t)] = r;
 		c(), l = !0;
 	}, m.flush = () => {
 		d &&= (clearTimeout(d), null), f();
@@ -6007,19 +6050,19 @@ function Tc(e, t = {}) {
 		p(), l = !0;
 	}), m;
 }
-var Ec = null;
-function Dc(e) {
-	return Ec ||= new TextEncoder(), Ec.encode(e).length;
+var kc = null;
+function Ac(e) {
+	return kc ||= new TextEncoder(), kc.encode(e).length;
 }
-function Oc(e) {
+function jc(e) {
 	let t = 0;
-	for (let n of Object.values(e)) t += Dc(n.content);
+	for (let n of Object.values(e)) t += Ac(n.content);
 	return t;
 }
-function kc(e) {
+function Mc(e) {
 	return e.replace(/^\/+/, "").replace(/\/+/g, "/");
 }
-function Ac(e) {
+function Nc(e) {
 	let t = "";
 	for (let n = 0; n < e.length; n++) {
 		let r = e[n];
@@ -6027,10 +6070,10 @@ function Ac(e) {
 	}
 	return RegExp("^" + t + "$");
 }
-function jc() {
+function Pc() {
 	return Date.now();
 }
-var Mc = [
+var Fc = [
 	"vfs_read",
 	"vfs_write",
 	"vfs_edit",
@@ -6041,10 +6084,10 @@ var Mc = [
 	"vfs_json_patch",
 	"vfs_rm"
 ];
-function Nc(e) {
+function Ic(e) {
 	return [
 		r(async ({ path: t, offset: n, limit: r }) => {
-			let i = e.files[kc(t)];
+			let i = e.files[Mc(t)];
 			if (!i) return Y({
 				code: "NOT_FOUND",
 				path: t,
@@ -6073,9 +6116,9 @@ function Nc(e) {
 					hint: "jsonString=true 要求 content 是合法 JSON;检查引号/逗号/括号配对;或省略 jsonString 写纯文本"
 				});
 			}
-			return e.files[kc(t)] = {
+			return e.files[Mc(t)] = {
 				content: n,
-				updatedAt: jc()
+				updatedAt: Pc()
 			}, `已写入 ${t}(${n.length} 字符)${r ? "(JSON 校验通过)" : ""}`;
 		}, {
 			name: "vfs_write",
@@ -6087,7 +6130,7 @@ function Nc(e) {
 			})
 		}),
 		r(async ({ path: t, oldString: n, newString: r }) => {
-			let i = kc(t), a = e.files[i];
+			let i = Mc(t), a = e.files[i];
 			if (!a) return Y({
 				code: "NOT_FOUND",
 				path: t,
@@ -6117,7 +6160,7 @@ function Nc(e) {
 			}
 			return e.files[i] = {
 				content: a.content.replace(n, r),
-				updatedAt: jc()
+				updatedAt: Pc()
 			}, `已替换 ${t} 中 1 处。`;
 		}, {
 			name: "vfs_edit",
@@ -6139,7 +6182,7 @@ function Nc(e) {
 		r(async ({ pattern: t }) => {
 			let n;
 			try {
-				n = Ac(t);
+				n = Nc(t);
 			} catch (e) {
 				return Y({
 					code: "GLOB_INVALID",
@@ -6168,7 +6211,7 @@ function Nc(e) {
 					details: { pattern: t }
 				});
 			}
-			let i = n ? [kc(n)] : Object.keys(e.files), a = [];
+			let i = n ? [Mc(n)] : Object.keys(e.files), a = [];
 			for (let t of i) {
 				let n = e.files[t];
 				n && n.content.split("\n").forEach((e, n) => {
@@ -6185,7 +6228,7 @@ function Nc(e) {
 			})
 		}),
 		r(async ({ path: t, jsonPath: n }) => {
-			let r = kc(t), i = e.files[r];
+			let r = Mc(t), i = e.files[r];
 			if (!i) return Y({
 				code: "NOT_FOUND",
 				path: t,
@@ -6222,7 +6265,7 @@ function Nc(e) {
 			})
 		}),
 		r(async ({ path: t, patches: n }) => {
-			let r = kc(t), i = e.files[r];
+			let r = Mc(t), i = e.files[r];
 			if (!i) return Y({
 				code: "NOT_FOUND",
 				path: t,
@@ -6240,9 +6283,9 @@ function Nc(e) {
 					hint: "vfs_json_patch 要求文件内容是合法 JSON"
 				});
 			}
-			let o = fc(a), s = [];
+			let o = hc(a), s = [];
 			for (let e of n) {
-				let n = _c(o, e.op, e.jsonPath, e.value);
+				let n = bc(o, e.op, e.jsonPath, e.value);
 				if (n) return Y({
 					code: "PATCH_FAILED",
 					path: t,
@@ -6255,7 +6298,7 @@ function Nc(e) {
 			let c = JSON.stringify(o);
 			return e.files[r] = {
 				content: c,
-				updatedAt: jc()
+				updatedAt: Pc()
 			}, `已对 ${t} 应用 ${n.length} 个 patch(影响 ${s.length} 处:${s.join(", ")}),文件现 ${c.length} 字符`;
 		}, {
 			name: "vfs_json_patch",
@@ -6275,7 +6318,7 @@ function Nc(e) {
 			})
 		}),
 		r(async ({ path: t }) => {
-			let n = kc(t);
+			let n = Mc(t);
 			return e.files[n] ? (delete e.files[n], `已删除 ${t}`) : Y({
 				code: "NOT_FOUND",
 				path: t,
@@ -6289,17 +6332,17 @@ function Nc(e) {
 		})
 	];
 }
-function Pc(e) {
+function Lc(e) {
 	return {
 		name: "vfs",
-		tools: Nc(e),
+		tools: Ic(e),
 		beforeAgent: () => ({ files: e.files })
 	};
 }
 //#endregion
 //#region src/core/tools/dataSlotQuery.ts
-var Fc = /[\w$-]/;
-function Ic(e) {
+var Rc = /[\w$-]/;
+function zc(e) {
 	let t = [], n = e.trim(), r = +(n[0] === "$");
 	for (; r < n.length;) {
 		let e = n[r];
@@ -6310,7 +6353,7 @@ function Ic(e) {
 					continue;
 				}
 				let e = "";
-				for (; r < n.length && Fc.test(n[r]);) e += n[r++];
+				for (; r < n.length && Rc.test(n[r]);) e += n[r++];
 				if (!e) throw Error("JSONPath: .. 后缺属性名");
 				t.push({
 					type: "descendKey",
@@ -6323,7 +6366,7 @@ function Ic(e) {
 				continue;
 			}
 			let e = "";
-			for (; r < n.length && Fc.test(n[r]);) e += n[r++];
+			for (; r < n.length && Rc.test(n[r]);) e += n[r++];
 			if (!e) throw Error("JSONPath: . 后缺属性名");
 			t.push({
 				type: "key",
@@ -6379,7 +6422,7 @@ function Ic(e) {
 	}
 	return t;
 }
-function Lc(e) {
+function Bc(e) {
 	let t = [], n = 0, r = e.trim();
 	for (; n < r.length;) {
 		let e = r[n];
@@ -6424,7 +6467,7 @@ function Lc(e) {
 	}
 	return t;
 }
-var Rc = class {
+var Vc = class {
 	toks;
 	item;
 	pos = 0;
@@ -6460,12 +6503,12 @@ var Rc = class {
 			return this.next(), e;
 		}
 		let e = this.operand(), t = this.peek();
-		return t === "==" || t === "!=" || t === "<" || t === "<=" || t === ">" || t === ">=" ? (this.next(), Vc(t, e, this.operand())) : zc(e);
+		return t === "==" || t === "!=" || t === "<" || t === "<=" || t === ">" || t === ">=" ? (this.next(), Wc(t, e, this.operand())) : Hc(e);
 	}
 	operand() {
 		let e = this.next();
 		if (e === void 0) throw Error("过滤表达式:缺操作数");
-		if (e.startsWith("@")) return Bc(e, this.item);
+		if (e.startsWith("@")) return Uc(e, this.item);
 		if (e[0] === "'" || e[0] === "\"") return e.slice(1, -1);
 		if (e === "true") return !0;
 		if (e === "false") return !1;
@@ -6475,10 +6518,10 @@ var Rc = class {
 		throw Error(`过滤表达式:未知操作数 '${e}'`);
 	}
 };
-function zc(e) {
+function Hc(e) {
 	return !!e && e !== 0 && e !== "" && e !== null;
 }
-function Bc(e, t) {
+function Uc(e, t) {
 	let n = e.split(".").filter((e) => e && e !== "@"), r = t;
 	for (let e of n) {
 		if (typeof r != "object" || !r) return;
@@ -6486,7 +6529,7 @@ function Bc(e, t) {
 	}
 	return r;
 }
-function Vc(e, t, n) {
+function Wc(e, t, n) {
 	switch (e) {
 		case "==": return t === n;
 		case "!=": return t !== n;
@@ -6497,47 +6540,47 @@ function Vc(e, t, n) {
 		default: return !1;
 	}
 }
-function Hc(e, t) {
-	return new Rc(Lc(e), t).parse();
+function Gc(e, t) {
+	return new Vc(Bc(e), t).parse();
 }
-function Uc(e, t) {
+function Kc(e, t) {
 	return e ? `${e}.${t}` : String(t);
 }
-function Wc(e, t) {
+function qc(e, t) {
 	let n = [{
 		path: "",
 		value: e
 	}];
-	for (let e of Ic(t)) {
+	for (let e of zc(t)) {
 		let t = [];
 		if (e.type === "key") for (let r of n) r.value != null && typeof r.value == "object" && e.key in r.value && t.push({
-			path: Uc(r.path, e.key),
+			path: Kc(r.path, e.key),
 			value: r.value[e.key]
 		});
 		else if (e.type === "index") {
 			for (let r of n) if (Array.isArray(r.value)) {
 				let n = r.value[e.index];
 				e.index >= 0 && e.index < r.value.length && t.push({
-					path: Uc(r.path, e.index),
+					path: Kc(r.path, e.index),
 					value: n,
 					index: e.index
 				});
 			}
 		} else if (e.type === "wildcard") {
 			for (let e of n) if (Array.isArray(e.value)) e.value.forEach((n, r) => t.push({
-				path: Uc(e.path, r),
+				path: Kc(e.path, r),
 				value: n,
 				index: r
 			}));
 			else if (e.value != null && typeof e.value == "object") for (let n of Object.keys(e.value)) t.push({
-				path: Uc(e.path, n),
+				path: Kc(e.path, n),
 				value: e.value[n]
 			});
 		} else if (e.type === "descendKey") {
 			let r = e.key, i = (e) => {
 				if (!(e.value == null || typeof e.value != "object")) for (let n of Object.keys(e.value)) {
 					let a = {
-						path: Uc(e.path, n),
+						path: Kc(e.path, n),
 						value: e.value[n]
 					};
 					n === r && t.push(a), i(a);
@@ -6548,7 +6591,7 @@ function Wc(e, t) {
 			let e = (n) => {
 				if (!(n.value == null || typeof n.value != "object")) for (let r of Object.keys(n.value)) {
 					let i = {
-						path: Uc(n.path, r),
+						path: Kc(n.path, r),
 						value: n.value[r]
 					};
 					t.push(i), e(i);
@@ -6557,16 +6600,16 @@ function Wc(e, t) {
 			for (let t of n) e(t);
 		} else if (e.type === "filter") {
 			for (let r of n) if (Array.isArray(r.value)) r.value.forEach((n, i) => {
-				Hc(e.filter, n) && t.push({
-					path: Uc(r.path, i),
+				Gc(e.filter, n) && t.push({
+					path: Kc(r.path, i),
 					value: n,
 					index: i
 				});
 			});
 			else if (r.value != null && typeof r.value == "object") for (let n of Object.keys(r.value)) {
 				let i = r.value[n];
-				Hc(e.filter, i) && t.push({
-					path: Uc(r.path, n),
+				Gc(e.filter, i) && t.push({
+					path: Kc(r.path, n),
 					value: i
 				});
 			}
@@ -6575,7 +6618,7 @@ function Wc(e, t) {
 	}
 	return n;
 }
-function Gc(e, t) {
+function Jc(e, t) {
 	let n = e.length, r = t.length;
 	if (!n) return r;
 	if (!r) return n;
@@ -6591,7 +6634,7 @@ function Gc(e, t) {
 	}
 	return i[r];
 }
-function Kc(e, t, n = {}) {
+function Yc(e, t, n = {}) {
 	let r = n.mode || "substring", i = n.limit ?? 50, a = n.matchKey !== !1, o = [], s = null;
 	if (r === "regex") try {
 		s = new RegExp(t, "i");
@@ -6601,11 +6644,11 @@ function Kc(e, t, n = {}) {
 	let c = (e, l, u) => {
 		if (o.length >= i || e == null) return;
 		if (typeof e == "object") {
-			if (Array.isArray(e)) e.forEach((e, t) => c(e, Uc(l, t), String(t)));
-			else for (let t of Object.keys(e)) c(e[t], Uc(l, t), t);
+			if (Array.isArray(e)) e.forEach((e, t) => c(e, Kc(l, t), String(t)));
+			else for (let t of Object.keys(e)) c(e[t], Kc(l, t), t);
 			return;
 		}
-		let d = String(e), f = qc(d, t, r, n.fuzzyThreshold ?? 2, s);
+		let d = String(e), f = Xc(d, t, r, n.fuzzyThreshold ?? 2, s);
 		if (f) {
 			o.push({
 				path: l,
@@ -6616,7 +6659,7 @@ function Kc(e, t, n = {}) {
 			return;
 		}
 		if (a && u) {
-			let e = qc(u, t, r, n.fuzzyThreshold ?? 2, s);
+			let e = Xc(u, t, r, n.fuzzyThreshold ?? 2, s);
 			e && o.push({
 				path: l,
 				key: u,
@@ -6627,51 +6670,51 @@ function Kc(e, t, n = {}) {
 	};
 	return c(e, ""), o;
 }
-function qc(e, t, n, r, i) {
+function Xc(e, t, n, r, i) {
 	let a = e.toLowerCase(), o = t.toLowerCase();
 	if (n === "substring") return a.includes(o) ? 1 : null;
 	if (n === "regex") return i && i.test(e) ? 1 : null;
 	if (n === "fuzzy") {
 		if (a.includes(o)) return 2;
-		let e = Gc(a, o);
+		let e = Jc(a, o);
 		return e <= r ? r - e + 1 : null;
 	}
 	return null;
 }
-function Jc(e, t, n = 3e3) {
+function Zc(e, t, n = 3e3) {
 	return ba(t, n)(e);
 }
 //#endregion
 //#region src/core/tools/resources.ts
-var Yc = "⟦frozen:", Xc = "⟦res:", Zc = "⟧";
-function Qc(e) {
-	return `${Yc}${e}${Zc}`;
+var Qc = "⟦frozen:", $c = "⟦res:", el = "⟧";
+function tl(e) {
+	return `${Qc}${e}${el}`;
 }
-function $c(e) {
-	return `${Xc}${e}${Zc}`;
+function nl(e) {
+	return `${$c}${e}${el}`;
 }
-function el(e) {
-	return typeof e == "string" ? e.startsWith(Yc) && e.endsWith(Zc) ? {
+function rl(e) {
+	return typeof e == "string" ? e.startsWith(Qc) && e.endsWith(el) ? {
 		type: "frozen",
 		path: e.slice(8, e.length - 1)
-	} : e.startsWith(Xc) && e.endsWith(Zc) ? {
+	} : e.startsWith($c) && e.endsWith(el) ? {
 		type: "res",
 		handle: e.slice(5, e.length - 1)
 	} : null : null;
 }
-function tl(e) {
+function il(e) {
 	return String(e ?? "").trim().replace(/^\.+/, "");
 }
-function nl(e) {
+function al(e) {
 	let t = 5381;
 	for (let n = 0; n < e.length; n++) t = (t * 33 ^ e.charCodeAt(n)) >>> 0;
 	return (t >>> 0).toString(16).padStart(8, "0").slice(0, 8);
 }
-function rl(e, t) {
+function ol(e, t) {
 	return e === t ? !0 : e && t && typeof e == "object" && typeof t == "object" ? JSON.stringify(e) === JSON.stringify(t) : !1;
 }
-function il(e, t) {
-	let n = tl(e);
+function sl(e, t) {
+	let n = il(e);
 	if (!n) return;
 	let r = t.get(n);
 	if (r) return {
@@ -6691,7 +6734,7 @@ function il(e, t) {
 	}));
 	return i;
 }
-var al = class {
+var cl = class {
 	vfs;
 	constructor(e) {
 		this.vfs = e;
@@ -6700,7 +6743,7 @@ var al = class {
 		return `resources/${e}.json`;
 	}
 	ensure(e, t, n) {
-		let r = nl(e), i = {
+		let r = al(e), i = {
 			path: e,
 			mode: n,
 			value: t,
@@ -6712,7 +6755,7 @@ var al = class {
 		}, r;
 	}
 	get(e) {
-		return this.readEntry(this.key(e)) || this.readEntry(this.key(nl(e)));
+		return this.readEntry(this.key(e)) || this.readEntry(this.key(al(e)));
 	}
 	readEntry(e) {
 		let t = this.vfs.files[e];
@@ -6728,7 +6771,7 @@ var al = class {
 		this.ensure(e, t, n?.mode ?? "verbatim");
 	}
 	delete(e) {
-		let t = this.get(e)?.handle ?? nl(e), n = this.key(t), r = !!this.vfs.files[n];
+		let t = this.get(e)?.handle ?? al(e), n = this.key(t), r = !!this.vfs.files[n];
 		return r && delete this.vfs.files[n], r;
 	}
 	list() {
@@ -6748,7 +6791,7 @@ var al = class {
 		for (let e of Object.keys(this.vfs.files)) e.startsWith("resources/") && delete this.vfs.files[e];
 	}
 };
-function ol(e) {
+function ll(e) {
 	let { jp: t, resolved: n, resourcesByPath: r, resourceStore: i } = e;
 	if (!r.size) return n;
 	let a = !1;
@@ -6757,19 +6800,19 @@ function ol(e) {
 		break;
 	}
 	if (!a) return n;
-	let o = fc(n);
+	let o = hc(n);
 	for (let [e, n] of r) {
 		if (t !== "" && e !== t && !e.startsWith(t + ".")) continue;
 		if (e === t) {
 			if (o === void 0) continue;
-			return n.mode === "freeze" ? Qc(e) : i ? $c(i.ensure(e, o, "verbatim")) : o;
+			return n.mode === "freeze" ? tl(e) : i ? nl(i.ensure(e, o, "verbatim")) : o;
 		}
 		let r = t === "" ? e : e.slice(t.length + 1), a = Z(o, r);
-		a !== void 0 && (n.mode === "freeze" ? uc(o, r, Qc(e)) : i && uc(o, r, $c(i.ensure(e, a, "verbatim"))));
+		a !== void 0 && (n.mode === "freeze" ? pc(o, r, tl(e)) : i && pc(o, r, nl(i.ensure(e, a, "verbatim"))));
 	}
 	return o;
 }
-function sl(e, t, n, r) {
+function ul(e, t, n, r) {
 	if (!r) return {
 		code: "RESOURCE_NOT_FOUND",
 		message: `句柄 "${e}" 无法展开(资源池未启用)`,
@@ -6780,7 +6823,7 @@ function sl(e, t, n, r) {
 		code: "RESOURCE_NOT_FOUND",
 		message: `字段 "${t}" 在 bind 中已不存在,无法展开句柄 "${e}"`,
 		hint: "该字段可能已被删除或 restore 到不含此字段的快照;重新 read 确认当前结构"
-	} : rl(i.value, n) ? { value: i.value } : (r.update(t, n), { value: n }) : n === void 0 ? {
+	} : ol(i.value, n) ? { value: i.value } : (r.update(t, n), { value: n }) : n === void 0 ? {
 		code: "RESOURCE_NOT_FOUND",
 		message: `句柄 "${e}" 不存在(字段 "${t}" 可能未注册或已被删除)`,
 		hint: "重新 read 该字段触发懒注册"
@@ -6790,20 +6833,20 @@ function sl(e, t, n, r) {
 		hint: "重新 read 该字段触发懒注册重建句柄,再写回新句柄 ⟦res:<handle>⟧"
 	};
 }
-function cl(e, t) {
+function dl(e, t) {
 	let n = t.getBind();
 	for (let [r, i] of t.resourcesByPath) {
 		let a = Z(n, r), o = Z(e, r);
 		if (o === void 0) {
-			a !== void 0 && uc(e, r, a);
+			a !== void 0 && pc(e, r, a);
 			continue;
 		}
 		if (i.mode === "freeze") {
-			if (o === Qc(r)) {
-				uc(e, r, a);
+			if (o === tl(r)) {
+				pc(e, r, a);
 				continue;
 			}
-			if (!rl(o, a)) return {
+			if (!ol(o, a)) return {
 				ok: !1,
 				code: "FROZEN_FIELD",
 				path: r,
@@ -6811,11 +6854,11 @@ function cl(e, t) {
 				hint: "该字段由系统/集成方维护,LLM 不得改动。如需展示其值用 resource_get({path}) 取真值"
 			};
 		} else {
-			let n = el(o);
+			let n = rl(o);
 			if (n && n.type === "res") {
-				let i = sl(n.handle, r, a, t.resourceStore);
+				let i = ul(n.handle, r, a, t.resourceStore);
 				if ("value" in i) {
-					uc(e, r, i.value);
+					pc(e, r, i.value);
 					continue;
 				}
 				return {
@@ -6826,7 +6869,7 @@ function cl(e, t) {
 					hint: i.hint
 				};
 			}
-			if (!rl(o, a)) return {
+			if (!ol(o, a)) return {
 				ok: !1,
 				code: "VERBATIM_MISMATCH",
 				path: r,
@@ -6837,7 +6880,7 @@ function cl(e, t) {
 	}
 	return { ok: !0 };
 }
-function ll(e, t, n) {
+function fl(e, t, n) {
 	let r = t === void 0 ? e.message : `patches[${t}]${n ? ` @ "${n}"` : ""}: ${e.message}`;
 	return Y({
 		code: e.code,
@@ -6850,28 +6893,28 @@ function ll(e, t, n) {
 		} }
 	});
 }
-function ul(e) {
+function pl(e) {
 	let { value: t, ctx: n } = e;
 	if (!n || !n.resourcesByPath.size) return {
 		ok: !0,
 		value: t
 	};
-	let r = fc(t), i = cl(r, n);
+	let r = hc(t), i = dl(r, n);
 	return i.ok ? {
 		ok: !0,
 		value: r
 	} : {
 		ok: !1,
-		error: ll(i)
+		error: fl(i)
 	};
 }
-function dl(e) {
+function ml(e) {
 	let { patches: t, clone: n, ctx: r } = e;
 	if (!r || !r.resourcesByPath.size) return { ok: !0 };
 	for (let e = 0; e < t.length; e++) {
 		let n = t[e];
 		if (n.op === "remove") {
-			let t = il(n.jsonPath || "", r.resourcesByPath);
+			let t = sl(n.jsonPath || "", r.resourcesByPath);
 			if (t) {
 				let r = t.spec.mode === "freeze" ? "FROZEN_FIELD" : "VERBATIM_PROTECTED", i = t.spec.mode === "freeze" ? "冻结字段不可删。如需移除请联系集成方调整 data.resources 配置" : "verbatim 字段不可直接删;先 resource_delete({path}) 释放资源保护后再删";
 				return {
@@ -6890,27 +6933,27 @@ function dl(e) {
 			}
 		}
 	}
-	let i = cl(n, r);
+	let i = dl(n, r);
 	if (!i.ok) {
-		let e = fl(i.path, t);
+		let e = hl(i.path, t);
 		return {
 			ok: !1,
-			error: ll(i, e >= 0 ? e : void 0, e >= 0 ? t[e].jsonPath : void 0)
+			error: fl(i, e >= 0 ? e : void 0, e >= 0 ? t[e].jsonPath : void 0)
 		};
 	}
 	return { ok: !0 };
 }
-function fl(e, t) {
-	let n = tl(e);
+function hl(e, t) {
+	let n = il(e);
 	for (let e = 0; e < t.length; e++) {
-		let r = tl(t[e].jsonPath || "");
+		let r = il(t[e].jsonPath || "");
 		if (r && (r === n || n.startsWith(r + ".") || r.startsWith(n + "."))) return e;
 	}
 	return -1;
 }
 //#endregion
 //#region src/core/tools/dataOps.ts
-var pl = /* @__PURE__ */ new Set([
+var gl = /* @__PURE__ */ new Set([
 	"describe_data",
 	"get_data",
 	"set_data",
@@ -6924,14 +6967,14 @@ var pl = /* @__PURE__ */ new Set([
 	"resource_update",
 	"resource_list",
 	"resource_delete"
-]), ml = /* @__PURE__ */ new Set(["read", "write"]);
-function hl(e, t = "simple") {
-	return t === "advanced" ? e : t === "minimal" ? e.filter((e) => ml.has(e.name)) : e.filter((e) => !pl.has(e.name));
+]), _l = /* @__PURE__ */ new Set(["read", "write"]);
+function vl(e, t = "simple") {
+	return t === "advanced" ? e : t === "minimal" ? e.filter((e) => _l.has(e.name)) : e.filter((e) => !gl.has(e.name));
 }
-function gl(e) {
+function yl(e) {
 	let { bindRef: t, schema: n, allowKeys: r, snapshots: i, maxSnapshots: a, audit: o, dryRun: s, op: c = "set", protectedCtx: l } = e, u = e.value;
 	if (l) {
-		let e = ul({
+		let e = pl({
 			value: u,
 			ctx: l
 		});
@@ -6959,14 +7002,14 @@ function gl(e) {
 			hint: "主数据 bind 必须为对象/数组;叶子值请用对象包裹(如 {value:\"x\"})或集成方通过 sdk.setData 替换 bind"
 		})
 	};
-	let f = fc(t), p = i.length ? i[i.length - 1].id + 1 : 1;
+	let f = hc(t), p = i.length ? i[i.length - 1].id + 1 : 1;
 	for (i.push({
 		id: p,
 		ts: Date.now(),
 		op: c,
 		value: f
 	}); i.length > a;) i.shift();
-	return d.data !== null && typeof d.data == "object" && (r ? lc(t, d.data) : bc(t, d.data)), o({
+	return d.data !== null && typeof d.data == "object" && (r ? fc(t, d.data) : Cc(t, d.data)), o({
 		op: c,
 		value: d.data,
 		timestamp: Date.now()
@@ -6976,11 +7019,11 @@ function gl(e) {
 		data: d.data
 	};
 }
-function _l(e) {
-	let { bindRef: t, patches: n, schema: r, allowKeys: i, snapshots: a, maxSnapshots: o, markDataDirty: s, schemaErrorMode: c = "zod", snapshotLabel: l, dryRun: u, protectedCtx: d } = e, f = fc(t), p = [];
+function bl(e) {
+	let { bindRef: t, patches: n, schema: r, allowKeys: i, snapshots: a, maxSnapshots: o, markDataDirty: s, schemaErrorMode: c = "zod", snapshotLabel: l, dryRun: u, protectedCtx: d } = e, f = hc(t), p = [];
 	for (let e = 0; e < n.length; e++) {
 		let t = n[e], a = t.jsonPath || "";
-		if (cc(a)) return {
+		if (dc(a)) return {
 			ok: !1,
 			error: Y({
 				code: "PATH_UNSAFE",
@@ -7006,14 +7049,14 @@ function _l(e) {
 					hint: `op 为 ${o} 时 value 必填;删除请用 op:'remove'`
 				})
 			};
-			let n = pc(t.value);
+			let n = gc(t.value);
 			if (n.parseError) return {
 				ok: !1,
 				error: Gr(`patches[${e}]`, t.value, n.parseError)
 			};
 			s = n.parsed;
 		}
-		let c = _c(f, o, a, s);
+		let c = bc(f, o, a, s);
 		if (c) return {
 			ok: !1,
 			error: Y({
@@ -7029,7 +7072,7 @@ function _l(e) {
 		});
 	}
 	if (d) {
-		let e = dl({
+		let e = ml({
 			patches: n,
 			clone: f,
 			ctx: d
@@ -7059,21 +7102,21 @@ function _l(e) {
 		id: h,
 		ts: Date.now(),
 		op: "edit",
-		value: fc(t),
+		value: hc(t),
 		...l ? { label: l } : {}
 	}); a.length > o;) a.shift();
-	for (let e of p) e.op === "remove" && dc(t, e.jp);
-	return m.data !== null && typeof m.data == "object" && (i ? lc(t, m.data) : bc(t, m.data)), s?.(), {
+	for (let e of p) e.op === "remove" && mc(t, e.jp);
+	return m.data !== null && typeof m.data == "object" && (i ? fc(t, m.data) : Cc(t, m.data)), s?.(), {
 		ok: !0,
 		applied: p,
 		clone: f
 	};
 }
-function vl(e, n = {}) {
-	let i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s = Mi(i), c = /* @__PURE__ */ new Map(), l = n.vfsStore ? new al(n.vfsStore) : void 0;
+function xl(e, n = {}) {
+	let i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s = Mi(i), c = /* @__PURE__ */ new Map(), l = n.vfsStore ? new cl(n.vfsStore) : void 0;
 	function u(e) {
 		if (c.clear(), e) for (let t of e) {
-			let e = tl(t.path);
+			let e = il(t.path);
 			c.set(e, {
 				path: e,
 				mode: t.mode
@@ -7125,7 +7168,7 @@ function vl(e, n = {}) {
 			return e;
 		},
 		createResource: l ? (e, t) => {
-			let n = tl(e), r = c.get(n), i = t === void 0 ? Z(a, n) : t;
+			let n = il(e), r = c.get(n), i = t === void 0 ? Z(a, n) : t;
 			return l.ensure(n, i, r?.mode ?? "verbatim");
 		} : void 0,
 		getResource: l ? (e) => {
@@ -7138,8 +7181,8 @@ function vl(e, n = {}) {
 			} : void 0;
 		} : void 0,
 		updateResource: l ? (e, t) => {
-			let n = tl(e);
-			l.update(n, t), uc(a, n, t), _();
+			let n = il(e);
+			l.update(n, t), pc(a, n, t), _();
 		} : void 0,
 		deleteResource: l ? (e) => l.delete(e) : void 0,
 		listResources: l ? () => l.list() : void 0
@@ -7147,7 +7190,7 @@ function vl(e, n = {}) {
 		n.onAudit?.(e);
 	};
 	function b(e, t) {
-		let n = fc(a), r = f.length ? f[f.length - 1].id + 1 : 1;
+		let n = hc(a), r = f.length ? f[f.length - 1].id + 1 : 1;
 		for (f.push({
 			id: r,
 			ts: Date.now(),
@@ -7178,7 +7221,7 @@ function vl(e, n = {}) {
 		if (o.action === "restore") {
 			if (!f.length) return `无历史快照可回退(本次为首次操作)。当前值:${Q(a, 400)} (hash=${i})。请重新 read 再改或选「强制覆盖」。`;
 			let e = f[f.length - 1];
-			return yc(a, fc(e.value)), _(), `已回退主数据到历史快照 #${e.id}[${e.op}]。当前值:${Q(a, 400)} (hash=${$(a)})。请基于回退后的值重写或停止。`;
+			return Sc(a, hc(e.value)), _(), `已回退主数据到历史快照 #${e.id}[${e.op}]。当前值:${Q(a, 400)} (hash=${$(a)})。请基于回退后的值重写或停止。`;
 		}
 		return null;
 	}
@@ -7188,7 +7231,7 @@ function vl(e, n = {}) {
 		schema: t.object({})
 	}), C = r(async ({ jsonPath: e }) => {
 		let t = e || "";
-		if (cc(t)) return Y({
+		if (dc(t)) return Y({
 			code: "PATH_UNSAFE",
 			message: `jsonPath "${t}" 含非法段(__proto__/constructor/prototype)`,
 			hint: "使用正常属性路径,如 components.0.text(数组索引用数字)"
@@ -7199,7 +7242,7 @@ function vl(e, n = {}) {
 			hint: "主数据仅暴露 schema 声明的字段;若需操作该字段,集成方需在 schema 中声明它"
 		});
 		let n = t ? Z(a, t) : a;
-		t || (n = Li(n, s)), d && (n = ol({
+		t || (n = Li(n, s)), d && (n = ll({
 			jp: t,
 			resolved: n,
 			resourcesByPath: d.resourcesByPath,
@@ -7214,9 +7257,9 @@ function vl(e, n = {}) {
 	}), w = r(async ({ value: e, expectedHash: t }) => {
 		let n = await x("set", t || (h ? m : void 0));
 		if (n !== null) return n;
-		let r = pc(e);
+		let r = gc(e);
 		if (r.parseError) return Gr("", e, r.parseError);
-		let o = gl({
+		let o = yl({
 			bindRef: a,
 			value: r.parsed,
 			schema: i,
@@ -7243,7 +7286,7 @@ function vl(e, n = {}) {
 			hint: "顶层 op 或 patch.op 至少传一个"
 		});
 		let c = n || "";
-		if (cc(c)) return Y({
+		if (dc(c)) return Y({
 			code: "PATH_UNSAFE",
 			message: `jsonPath "${c}" 含非法段(__proto__/constructor/prototype)`,
 			hint: "使用正常的属性路径,如 components.0.text(数组索引用数字)"
@@ -7260,7 +7303,7 @@ function vl(e, n = {}) {
 			message: `edit 仅适用于对象/数组主数据,当前是 ${a === void 0 ? "undefined" : typeof a}`,
 			hint: "叶子(原始类型)请用 set_data 整体设置"
 		});
-		let u = _l({
+		let u = bl({
 			bindRef: a,
 			patches: [{
 				op: t,
@@ -7313,7 +7356,7 @@ function vl(e, n = {}) {
 			message: "delete_data 需要 jsonPath 指定要删的子路径(主数据整体不可删,用 set_data 整体替换)",
 			hint: "如 jsonPath:\"components.0\" 删数组首项"
 		});
-		if (cc(e)) return Y({
+		if (dc(e)) return Y({
 			code: "PATH_UNSAFE",
 			message: `jsonPath "${e}" 含非法段`,
 			hint: "使用正常属性路径"
@@ -7324,7 +7367,7 @@ function vl(e, n = {}) {
 			hint: "仅 schema 声明的 key 可删"
 		});
 		if (d) {
-			let t = il(e, d.resourcesByPath);
+			let t = sl(e, d.resourcesByPath);
 			if (t) return Y({
 				code: t.spec.mode === "freeze" ? "FROZEN_FIELD" : "VERBATIM_PROTECTED",
 				message: `delete_data @ "${e}" 命中受保护字段 "${t.protectedPath}"(${t.spec.mode}),不可删除`,
@@ -7334,7 +7377,7 @@ function vl(e, n = {}) {
 		let n = await x("delete", t || (h ? m : void 0));
 		if (n !== null) return n;
 		b("delete");
-		let r = dc(a, e);
+		let r = mc(a, e);
 		return _(), y({
 			op: "delete",
 			detail: e,
@@ -7360,7 +7403,7 @@ function vl(e, n = {}) {
 			hint: "用 history_data({list:true}) 查看可用快照序号"
 		});
 		let n = i.safeParse(t.value);
-		return n.success ? (yc(a, fc(t.value)), _(), y({
+		return n.success ? (Sc(a, hc(t.value)), _(), y({
 			op: "restore",
 			detail: `#${t.id}`,
 			timestamp: Date.now()
@@ -7394,9 +7437,9 @@ function vl(e, n = {}) {
 			message: `未找到快照 #${e}`,
 			hint: "不传 id 查看最近一次;或 history_data({list:true}) 查看可用序号"
 		});
-		let a = fc(r.value), o = t || "";
+		let a = hc(r.value), o = t || "";
 		if (o) {
-			if (cc(o)) return Y({
+			if (dc(o)) return Y({
 				code: "PATH_UNSAFE",
 				message: `jsonPath "${o}" 含非法段`,
 				hint: "使用正常属性路径"
@@ -7427,7 +7470,7 @@ function vl(e, n = {}) {
 		});
 		let n = s ? Li(a, s) : a, r;
 		try {
-			r = Wc(n, e);
+			r = qc(n, e);
 		} catch (t) {
 			return Y({
 				code: "JSONPATH_SYNTAX",
@@ -7451,7 +7494,7 @@ function vl(e, n = {}) {
 			message: "主数据为空,无可搜索内容"
 		});
 		try {
-			let o = Kc(s ? Li(a, s) : a, e, {
+			let o = Yc(s ? Li(a, s) : a, e, {
 				mode: t,
 				fuzzyThreshold: n,
 				matchKey: r,
@@ -7501,7 +7544,7 @@ function vl(e, n = {}) {
 				e && (o = Ii(o, e));
 			}
 		} else o = s ? Li(a, s) : a;
-		let c = fc(o), l = await Jc(c, e, r && JSON.stringify(c).length > 1e5 ? 8e3 : 3e3);
+		let c = hc(o), l = await Zc(c, e, r && JSON.stringify(c).length > 1e5 ? 8e3 : 3e3);
 		if (!l.ok) {
 			let t = /超时/.test(l.error || "");
 			return Y({
@@ -7517,7 +7560,7 @@ function vl(e, n = {}) {
 		if (t === "transform") {
 			let e = l.result;
 			if (r) {
-				let t = _l({
+				let t = bl({
 					bindRef: a,
 					patches: [{
 						op: "set",
@@ -7545,7 +7588,7 @@ function vl(e, n = {}) {
 					message: `主数据 bind 为原始类型(${a === null ? "null" : typeof a}),eval transform(patches) 无法就地替换`,
 					hint: "主数据 bind 必须为对象/数组;叶子值请用对象包裹或集成方通过 sdk.setData 替换 bind"
 				});
-				let t = _l({
+				let t = bl({
 					bindRef: a,
 					patches: e.patches,
 					schema: i,
@@ -7565,7 +7608,7 @@ function vl(e, n = {}) {
 			}
 			let t = e;
 			if (d) {
-				let e = ul({
+				let e = pl({
 					value: t,
 					ctx: d
 				});
@@ -7577,7 +7620,7 @@ function vl(e, n = {}) {
 				code: "LEAF_BIND",
 				message: `主数据 bind 为原始类型(${a === null ? "null" : typeof a}),eval transform 无法就地替换外部持有的值引用`,
 				hint: "主数据 bind 必须为对象/数组;叶子值请用对象包裹或集成方通过 sdk.setData 替换 bind"
-			}) : (b("edit", "eval_transform"), n.data !== null && typeof n.data == "object" && (s ? lc(a, n.data) : bc(a, n.data)), _(), y({
+			}) : (b("edit", "eval_transform"), n.data !== null && typeof n.data == "object" && (s ? fc(a, n.data) : Cc(a, n.data)), _(), y({
 				op: "edit",
 				detail: "eval_transform",
 				timestamp: Date.now()
@@ -7614,7 +7657,7 @@ function vl(e, n = {}) {
 					e && (o = Ii(o, e));
 				}
 				let l = o;
-				if (d && (l = ol({
+				if (d && (l = ll({
 					jp: t,
 					resolved: l,
 					resourcesByPath: d.resourcesByPath,
@@ -7624,12 +7667,12 @@ function vl(e, n = {}) {
 				} catch (e) {
 					return `- ${t}: [READ_INTERCEPT: ${e.message}]`;
 				}
-				return r && r.length && (l = mc(l, r)), c != null && (l = hc(l, c)), l === void 0 ? `- ${t} = (undefined)` : `- ${t} = ${Q(l)}`;
+				return r && r.length && (l = _c(l, r)), c != null && (l = vc(l, c)), l === void 0 ? `- ${t} = (undefined)` : `- ${t} = ${Q(l)}`;
 			});
 			return `多路径读取(共 ${t.length} 项,hash=${f}):\n${e.join("\n")}`;
 		}
 		let p = e || "";
-		if (cc(p)) return Y({
+		if (dc(p)) return Y({
 			code: "PATH_UNSAFE",
 			message: `jsonPath "${p}" 含非法段(__proto__/constructor/prototype)`,
 			hint: "使用正常属性路径,如 components.0.text(数组索引数字)"
@@ -7646,7 +7689,7 @@ function vl(e, n = {}) {
 			e && (h = Ii(h, e));
 		}
 		let g = h;
-		if (d && (g = ol({
+		if (d && (g = ll({
 			jp: p,
 			resolved: g,
 			resourcesByPath: d.resourcesByPath,
@@ -7659,7 +7702,7 @@ function vl(e, n = {}) {
 				message: `read 拦截器抛错: ${e.message}`
 			});
 		}
-		r && r.length && (g = mc(g, r)), c != null && (g = hc(g, c));
+		r && r.length && (g = _c(g, r)), c != null && (g = vc(g, c));
 		let _ = e ? "" : `主数据说明: ${o}\n格式: 写入值需为 JSON,且通过声明的 schema 校验(校验失败时 write 会返回结构化错误)。字段约束(类型/min/max/enum/必填/默认)见 systemPrompt「可操作数据」段,或用 schema_data({ jsonPath }) 按需查。\n\n`, v = r && r.length ? `(字段裁剪:${r.join(",")})` : "", y = c == null ? "" : `(深度≤${c})`, b = v || y ? ` ${v}${y}` : "";
 		if ((l !== void 0 || u !== void 0) && Array.isArray(g)) {
 			let e = g.length, t = Math.max(0, l ?? 0), n = Math.min(200, Math.max(1, u ?? 50)), r = g.slice(t, t + n), i = t + n < e;
@@ -7721,7 +7764,7 @@ function vl(e, n = {}) {
 				message: "delete 需要 patch.jsonPath 指定要删的子路径(主数据整体不可删,用 write(value) 整体替换)",
 				hint: "如 patch:{jsonPath:\"components.0\"}, del:true"
 			});
-			if (cc(t.jsonPath)) return Y({
+			if (dc(t.jsonPath)) return Y({
 				code: "PATH_UNSAFE",
 				message: `jsonPath "${t.jsonPath}" 含非法段`,
 				hint: "使用正常属性路径"
@@ -7732,7 +7775,7 @@ function vl(e, n = {}) {
 				hint: "仅 schema 声明的 key 可删"
 			});
 			if (d) {
-				let e = il(t.jsonPath, d.resourcesByPath);
+				let e = sl(t.jsonPath, d.resourcesByPath);
 				if (e) return Y({
 					code: e.spec.mode === "freeze" ? "FROZEN_FIELD" : "VERBATIM_PROTECTED",
 					message: `write delete @ "${t.jsonPath}" 命中受保护字段 "${e.protectedPath}"(${e.spec.mode}),不可删除`,
@@ -7742,11 +7785,11 @@ function vl(e, n = {}) {
 			let e = await x("delete", v);
 			if (e !== null) return e;
 			if (c) {
-				let e = fc(a);
-				return dc(e, t.jsonPath) ? `dryRun(delete): 将删除 @ ${t.jsonPath}。预览剩余:${Q(e, 600)}。未实际写入、未入快照。` : `dryRun(delete): @ ${t.jsonPath} 不存在(无需删除)。未实际写入。`;
+				let e = hc(a);
+				return mc(e, t.jsonPath) ? `dryRun(delete): 将删除 @ ${t.jsonPath}。预览剩余:${Q(e, 600)}。未实际写入、未入快照。` : `dryRun(delete): @ ${t.jsonPath} 不存在(无需删除)。未实际写入。`;
 			}
 			b("delete");
-			let n = dc(a, t.jsonPath);
+			let n = mc(a, t.jsonPath);
 			return _(), y({
 				op: "delete",
 				detail: t.jsonPath,
@@ -7765,7 +7808,7 @@ function vl(e, n = {}) {
 				op: t.op ?? "set",
 				jsonPath: t.jsonPath || "",
 				value: u
-			}]), o = _l({
+			}]), o = bl({
 				bindRef: a,
 				patches: n,
 				schema: i,
@@ -7784,11 +7827,11 @@ function vl(e, n = {}) {
 				timestamp: Date.now()
 			}), m = $(a), `已 write(edit) 主数据(${o.applied.length} 个 patch)。当前值:${Q(a, 600)} (新 hash=${$(a)})`) : o.error;
 		}
-		let S = pc(u);
+		let S = gc(u);
 		if (S.parseError) return Gr("", u, S.parseError);
 		let C = await x("set", v);
 		if (C !== null) return C;
-		let w = gl({
+		let w = yl({
 			bindRef: a,
 			value: S.parsed,
 			schema: i,
@@ -7845,7 +7888,7 @@ function vl(e, n = {}) {
 		if (n) {
 			let e = t;
 			if (typeof e == "string") {
-				let t = pc(e);
+				let t = gc(e);
 				t.parseError || (e = t.parsed);
 			}
 			r = e, i = "against";
@@ -7863,7 +7906,7 @@ function vl(e, n = {}) {
 			});
 			r = t.value, i = `快照 #${t.id}`;
 		}
-		let o = s ? Li(a, s) : a, c = xc(r, fc(o));
+		let o = s ? Li(a, s) : a, c = wc(r, hc(o));
 		return c.length ? `差异(当前 vs ${i},共 ${c.length} 处):\n${c.map((e) => `  ${e.path}: ${Q(e.from)} → ${Q(e.to)}`).join("\n")}` : `无差异:当前主数据与 ${i} 完全相同。`;
 	}, {
 		name: "diff_data",
@@ -7915,7 +7958,7 @@ function vl(e, n = {}) {
 			}
 			let u = await x("set", n || (h ? m : void 0));
 			if (u !== null) return u;
-			let g = gl({
+			let g = yl({
 				bindRef: a,
 				value: l,
 				schema: i,
@@ -7947,7 +7990,7 @@ function vl(e, n = {}) {
 				message: "未提供 path 或有效 handle",
 				hint: "传 path(受保护字段)或 handle(占位符 ⟦res:handle⟧ 里的句柄)"
 			});
-			let r = tl(n);
+			let r = il(n);
 			if (!c.has(r)) return Y({
 				code: "RESOURCE_NOT_FOUND",
 				message: `"${n}" 不是受保护字段`,
@@ -7986,7 +8029,7 @@ function vl(e, n = {}) {
 				message: "resource_update 需要 path",
 				hint: "传要更新的 verbatim 受保护字段路径"
 			});
-			let n = tl(e), r = c.get(n);
+			let n = il(e), r = c.get(n);
 			if (!r) return Y({
 				code: "RESOURCE_NOT_FOUND",
 				message: `"${e}" 不是受保护字段`,
@@ -8007,7 +8050,7 @@ function vl(e, n = {}) {
 					details: Ur(n.error.issues)
 				});
 			}
-			l.update(n, t), uc(a, n, t), m = $(a), _();
+			l.update(n, t), pc(a, n, t), m = $(a), _();
 			let s = l.get(n)?.handle;
 			return `已更新 verbatim 资源 "${e}" = ${Q(t, 200)}(handle ${s ?? "(未知)"} 不变)。后续 write 该字段写回句柄 ⟦res:${s}⟧ 或新值`;
 		}, {
@@ -8068,8 +8111,8 @@ function vl(e, n = {}) {
 }
 //#endregion
 //#region src/core/tools/fetchDoc.ts
-var yl = 3e4, bl = [r(async ({ url: e, as: t }) => {
-	let n = new AbortController(), r = setTimeout(() => n.abort(), yl);
+var Sl = 3e4, Cl = [r(async ({ url: e, as: t }) => {
+	let n = new AbortController(), r = setTimeout(() => n.abort(), Sl);
 	try {
 		let r = await fetch(e, {
 			method: "GET",
@@ -8086,7 +8129,7 @@ var yl = 3e4, bl = [r(async ({ url: e, as: t }) => {
 		].join("\n");
 	} catch (t) {
 		let r = t?.message || String(t);
-		return n.signal.aborted ? `获取失败:请求超时(${yl}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
+		return n.signal.aborted ? `获取失败:请求超时(${Sl}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
 	} finally {
 		clearTimeout(r);
 	}
@@ -8097,7 +8140,7 @@ var yl = 3e4, bl = [r(async ({ url: e, as: t }) => {
 		url: t.string().describe("要抓取的 URL(同源或已配 CORS)"),
 		as: t.enum(["text", "markdown"]).optional().describe("返回格式标签,默认 text")
 	})
-})], xl = [
+})], wl = [
 	"id",
 	"class",
 	"href",
@@ -8109,12 +8152,12 @@ var yl = 3e4, bl = [r(async ({ url: e, as: t }) => {
 	"aria-label",
 	"name",
 	"type"
-], Sl = /^(value|srcdoc|formaction|on\w+)$/i, Cl = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session/i;
-function wl(e, t) {
+], Tl = /^(value|srcdoc|formaction|on\w+)$/i, El = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session/i;
+function Dl(e, t) {
 	if (!e) return null;
-	let { depth: n, attrs: r, includeText: i = !0 } = t, a = r !== void 0, o = r ?? xl, s = (e) => {
+	let { depth: n, attrs: r, includeText: i = !0 } = t, a = r !== void 0, o = r ?? wl, s = (e) => {
 		let t = {};
-		for (let n of Array.from(e.attributes)) (a ? o.includes(n.name) : o.includes(n.name) || n.name.startsWith("data-")) && (Sl.test(n.name) || Cl.test(n.name) || (t[n.name] = n.value));
+		for (let n of Array.from(e.attributes)) (a ? o.includes(n.name) : o.includes(n.name) || n.name.startsWith("data-")) && (Tl.test(n.name) || El.test(n.name) || (t[n.name] = n.value));
 		return t;
 	}, c = (e, t) => {
 		let n = {
@@ -8130,10 +8173,10 @@ function wl(e, t) {
 	};
 	return c(e, n);
 }
-var Tl = r(({ selector: e, depth: t, attrs: n, includeText: r }) => {
+var Ol = r(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 	let i = e ? document.querySelector(e) : document.body;
 	if (!i) return `未找到匹配元素:selector="${e}"`;
-	let a = wl(i, {
+	let a = Dl(i, {
 		depth: t ?? 3,
 		attrs: n,
 		includeText: r ?? !0
@@ -8148,14 +8191,14 @@ var Tl = r(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 		attrs: t.array(t.string()).optional().describe("属性白名单(传了 = 严格白名单;不传 = 默认常用 + data-*)"),
 		includeText: t.boolean().optional().describe("是否包含直接文本(默认 true)")
 	})
-}), El = [Tl];
+}), kl = [Ol];
 //#endregion
 //#region src/core/tools/envTool.ts
-function Dl(e) {
+function Al(e) {
 	let t = e;
 	return typeof t.tagName == "string" || typeof t.nodeType == "number" && typeof t.nodeName == "string";
 }
-function Ol(e, t = 3, n = 2e3, r) {
+function jl(e, t = 3, n = 2e3, r) {
 	if (e == null) return e;
 	if (typeof e == "string") return e.length > n ? e.slice(0, n) + "…(已截断)" : e;
 	if (typeof e == "number" || typeof e == "boolean") return e;
@@ -8164,14 +8207,14 @@ function Ol(e, t = 3, n = 2e3, r) {
 	if (typeof e == "bigint") return `${e.toString()}n`;
 	if (typeof e != "object") return String(e);
 	let i = e;
-	if (Dl(i)) {
+	if (Al(i)) {
 		let e = i;
 		return e.tagName ? `[Element: <${e.tagName.toLowerCase()}>]` : `[Node: ${e.nodeName}]`;
 	}
 	if (r?.has(i)) return "[Circular]";
 	let a = r ?? /* @__PURE__ */ new WeakSet();
 	if (a.add(i), Array.isArray(e)) {
-		let r = e.slice(0, 100).map((e) => Ol(e, t - 1, n, a));
+		let r = e.slice(0, 100).map((e) => jl(e, t - 1, n, a));
 		return e.length > 100 && r.push(`…(共 ${e.length} 项,已截断)`), r;
 	}
 	if (t < 0) return "(对象,已截断)";
@@ -8183,14 +8226,14 @@ function Ol(e, t = 3, n = 2e3, r) {
 			break;
 		}
 		try {
-			o[r] = Ol(i[r], t - 1, n, a);
+			o[r] = jl(i[r], t - 1, n, a);
 		} catch {
 			o[r] = "(getter 抛错)";
 		}
 	}
 	return o;
 }
-function kl(e) {
+function Ml(e) {
 	let t = e ?? (typeof window < "u" ? window : {}), n = t.navigator, r = t.location, i = t.document;
 	return {
 		location: {
@@ -8223,9 +8266,9 @@ function kl(e) {
 		} : "(无 document)"
 	};
 }
-var Al = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|opener|parent|top|self|window|globalThis|closed|history|navigation|trustedTypes|origin|crossOriginIsolated)$/, jl = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session|ticket/i, Ml = r(({ key: e }) => {
+var Nl = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|opener|parent|top|self|window|globalThis|closed|history|navigation|trustedTypes|origin|crossOriginIsolated)$/, Pl = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session|ticket/i, Fl = r(({ key: e }) => {
 	if (e) {
-		if (Al.test(e) || jl.test(e)) return JSON.stringify({
+		if (Nl.test(e) || Pl.test(e)) return JSON.stringify({
 			key: e,
 			denied: !0,
 			reason: "安全:该 key 在 denylist(localStorage/sessionStorage/cookie/document 或敏感命名 token/secret/key/auth),不读取防泄漏"
@@ -8235,18 +8278,18 @@ var Al = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|open
 			key: e,
 			exists: t !== void 0,
 			type: typeof t,
-			value: Ol(t)
+			value: jl(t)
 		}, null, 2);
 	}
-	return JSON.stringify(kl(), null, 2);
+	return JSON.stringify(Ml(), null, 2);
 }, {
 	name: "inspect_env",
 	description: "读取宿主页面环境信息(排查调试用,默认开启)。不传参 = 返回环境摘要(location 的 URL/origin/path、navigator 的浏览器/语言、viewport 视口尺寸、document 的 title/readyState);传 key = 读取指定 window 属性值(如 inspect_env({key:\"appConfig\"}) 读集成方挂的调试变量 window.appConfig)。用于排查「当前页面在哪/什么浏览器/视口多大/调试变量值是什么」。轻量只读,大结果自动外存 vfs。",
 	schema: t.object({ key: t.string().optional().describe("要读取的 window 属性名(如 \"appConfig\"/\"__DEBUG__\");不传 = 返回环境摘要") })
-}), Nl = [Ml];
+}), Il = [Fl];
 //#endregion
 //#region src/core/harness/budget.ts
-function Pl(e, t, n) {
+function Ll(e, t, n) {
 	let r = 0;
 	return {
 		name: "budget",
@@ -8271,12 +8314,12 @@ function Pl(e, t, n) {
 }
 //#endregion
 //#region src/core/sdk/actions.ts
-var Fl = /^[a-zA-Z][a-zA-Z0-9_]*$/;
-function Il(e) {
+var Rl = /^[a-zA-Z][a-zA-Z0-9_]*$/;
+function zl(e) {
 	let n = [];
 	for (let [i, a] of Object.entries(e)) {
-		if (!Fl.test(i)) {
-			console.warn(`[page-agent-sdk][actions] 动作名 "${i}" 非法(须匹配 ${Fl}),已跳过`);
+		if (!Rl.test(i)) {
+			console.warn(`[page-agent-sdk][actions] 动作名 "${i}" 非法(须匹配 ${Rl}),已跳过`);
 			continue;
 		}
 		let e = a.description || `宿主动作 ${i}`;
@@ -8296,9 +8339,9 @@ function Il(e) {
 	}
 	return n;
 }
-function Ll(e) {
+function Bl(e) {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) Fl.test(n) && (t[n] = {
+	for (let [n, r] of Object.entries(e)) Rl.test(n) && (t[n] = {
 		description: r.description,
 		hasParams: !!r.params
 	});
@@ -8306,12 +8349,12 @@ function Ll(e) {
 }
 //#endregion
 //#region src/core/toolsets.ts
-var Rl = bl, zl = El;
-function Bl(e, t) {
-	return vl(e, t);
+var Vl = Cl, Hl = kl;
+function Ul(e, t) {
+	return xl(e, t);
 }
-function Vl(e, t, n, r, i) {
-	let a = ec(e);
+function Wl(e, t, n, r, i) {
+	let a = rc(e);
 	return [
 		...a.dataOps ? t : [],
 		...a.fetch ? n : [],
@@ -8321,7 +8364,7 @@ function Vl(e, t, n, r, i) {
 }
 //#endregion
 //#region src/core/sdk/toolRegistry.ts
-function Hl(e) {
+function Gl(e) {
 	let t = /* @__PURE__ */ new Map(), n = [];
 	for (let r of e) for (let e of r.tools) {
 		let i = t.get(e.name);
@@ -8341,15 +8384,15 @@ function Hl(e) {
 }
 //#endregion
 //#region src/core/harness/usageHints.ts
-var Ul = .7;
-function Wl(e, t, n = "simple", r = !1) {
-	let i = ec(e), a = n !== "advanced";
+var Kl = .7;
+function ql(e, t, n = "simple", r = !1) {
+	let i = rc(e), a = n !== "advanced";
 	return {
 		name: "usageHints",
 		augmentPrompt: () => {
 			let n = [];
 			if (i.planning && (n.push("【自适应规划】按任务复杂度决定是否先规划,不要对简单任务过度编排:"), n.push("  · 简单/明确任务(改单字段、调样式、查值)→ 直接 read/write 执行,不必 write_todos。"), n.push("  · 复杂任务(多步、大改、有歧义、不可逆)→ 先 write_todos 拆解,首个任务标 in_progress,逐项推进。"), n.push("  · 执行中发现步骤要改/补/细分 → 用 update_todo({id, content?, status?}) 按 id 增量改单项,不必重传整个清单。"), n.push("  · 规划出多步方案若需用户拍板 → 先 request_human_confirmation 给方案选项,确认后再执行。"), n.push("  · 规划阶段有轮次预算(maxPlanRevisions,默认 5):勿反复调研/改计划而不执行,规划充分后即开始 write 落地。")), t && (a ? (n.push("读写主数据用 read/write(高层入口,自动乐观锁 + 自动快照)。read({jsonPath}) 读子路径当前值(返回含 hash,write 时自动比对,无需手动传);read() 不传读整个主数据 + 说明。write 改值两姿势:① 改单个字段/子路径用 write({patch:{op:\"set\", jsonPath:\"路径.字段\", value:新值}})——patch.value 就是该字段的新值(类型匹配:string 直传字符串、number 传数字、对象传对象),不要包成 {字段:值} 对象(字段名已在 jsonPath);也兼容 write({value:新值, patch:{op,jsonPath}}) 顶层 value(向后兼容,但优先 patch.value,避免与整体 set 的 value 混淆);② 替换整个对象用 write({value:{整个新对象}})。op:set 设值 / remove 删 / merge 合并对象 / append 追加数组;批量多改动 write({patches:[{op,jsonPath,value},...]});删子路径 write({patch:{jsonPath:\"路径\"}, del:true})。写入自动经 schema 校验(失败不写,按错误提示改值类型/形状后重试)+ 自动存快照(出错可用 restore_data 回退)。"), n.push("修改大对象/数组优先用 write 的 patch 增量(只发改动部分),避免整体重传被 max_tokens 截断致 JSON 不完整。"), n.push("读大数组(read 返回 hasMore=true)用 read({jsonPath,offset,limit}) 分页(offset+=limit 续读,默认 limit=50);一次读多个不相关子路径用 read({jsonPaths:[...]}) 省轮次;复杂 patches 改动先 write({patches,dryRun:true}) 预检(走完整校验不落盘)。"), n.push("read/describe 返回按 schema 投影:仅 schema 声明的字段可见(未声明字段自动隐藏,防误操作);要操作某字段需集成方在 schema 声明,查任意路径完整约束用 schema_data({jsonPath})。"), n.push("查历史快照值(看上一版长啥样 / 冲突诊断 / 用户问\"刚才改了啥\")用 history_data({id?,jsonPath?})(只读不改当前);对比当前与历史快照的差异需切 advanced 用 diff_data(返回结构化 path→from/to)。"), n.push("在大数组里按条件筛选用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素 path/index;定位后用 write patch 改。找名字记不清的元素用 search_data(substring/regex/fuzzy)。批量过滤/映射/聚合/重写大数组用 eval_script(沙箱脚本,mode=query 只读/transform 落地)。")) : (n.push("改主数据前先 get_data({jsonPath}) 读其当前真实值与 hash(返回末尾 hash=xxx),基于真实值改,不要凭记忆。写入(set/edit/delete)时回传 expectedHash=该 hash 启用乐观锁——若主数据在你 get 之后被外部代码/其他 agent/用户手动改过,会触发冲突:集成方若开启人工介入,工具会挂起等用户决定(保留外部/强制覆盖/回退),你应等待工具返回后按结果继续(保留外部→重新 get 再改;强制覆盖→已写入,继续;回退→已回退到历史快照,基于回退值重写);未开启人工介入时返回 VERSION_CONFLICT 不写入,重新 get 拿最新值与 hash 再改。"), n.push("不确定主数据字段结构时用 describe_data 查看说明。"), n.push("修改大对象/数组优先用 edit_data 增量 patch(只发改动部分),避免 set_data 整体重传被 max_tokens 截断导致 JSON 不完整、校验失败。"), n.push("修改主数据出错时可用 restore_data 回退最近一次。"), n.push("在大数组里按条件筛选元素用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素的 path/index;定位后再 edit_data 改。"), n.push("找名字记不清的元素用 search_data(支持 substring/regex/fuzzy 模糊搜索)。"), n.push("需要过滤/映射/聚合/批量重写大数组时用 eval_script(沙箱脚本,入参 data);只读探查用 mode=query,批量重写用 mode=transform(返回值经校验后落地)。"), n.push("读大数组用 read({jsonPath,offset,limit}) 分页(返回 hasMore=true 时 offset+=limit 续读);一次读多个不相关子路径用 read({jsonPaths});复杂改动先 write({...,dryRun:true}) 预检不落盘。"), n.push("对比当前与历史快照(或一段 JSON against)的差异用 diff_data({snapshotId?,against?})(返回结构化 path→from/to,verify 自纠/操作审计/\"刚才改了啥\");只读查历史快照值用 history_data({id?,jsonPath?})。"))), i.subagent && n.push("独立子任务可 spawn_agent 委派(只读工具,过程不占主上下文)。"), i.inspectEnv && n.push("排查页面环境(当前 URL/浏览器/视口/集成方调试变量)用 inspect_env——不传参返回环境摘要(location/navigator/viewport/document),传 key 读特定 window 属性(如 inspect_env({key:\"appConfig\"}) 读 window.appConfig)。改完数据看渲染、定位\"为何没生效\"时用它(只读,不改数据)。"), i.domInspect && n.push("改完数据想确认渲染是否生效(或定位元素/辅助 UI 设计问答)用 get_dom({selector?,depth?}) 读渲染后 DOM(结构化返回 tag/attrs/text/children,depth 控制深度防爆炸,只读)。配合宿主 actions(save_draft/publish 等)形成\"改数据→get_dom 看渲染→触发动作\"闭环。"), i.draftWrite && n.push("生成超大 JSON(如 50+ 组件页面,单次 write 受 max_tokens 限制装不下)用 draft_write 分块构建 → draft_commit 原子提交:draft_write({draftId, chunk, mode}) mode:\"start\" 新建/\"append\" 追加(拼 JSON 片段到 drafts 池);累积完 draft_commit({draftId}) 合并 + schema 校验 + 写主数据(失败草稿保留可修后重试,成功自动清草稿)。小改仍用 write patch,只在大 JSON 从零生成时用 draft。"), i.draftWrite && n.push("⚠️ 大 JSON 分块构建是典型多轮工具调用(draft_write×N + draft_commit + read 确认 + 调研 read/query),默认 maxToolRounds=10 可能触顶被 while 截断导致草稿写不完;目标组件数大时集成方应在 createChatSdk 配 maxToolRounds ≥ 20(或按 N+5 估算)。draft_commit 提交同样走乐观锁(改前 read 拿 hash,bind 被改过会触发冲突介入,不静默覆盖)。"), i.todoDeps && n.push("复杂任务可用 todos 层级依赖:write_todos 时给 todo 传 parentId(父任务 id,表达层级)+ deps(依赖的 todo id 数组,必须先完成)。有依赖的任务,deps 全 completed 后再标 in_progress;完成时 update_todo({id, status:\"completed\", evidence:\"完成证据\"}) 记证据。无依赖关系的任务不传 parentId/deps(扁平)。"), i.focus && !a && (n.push("【上下文聚焦】判断任务范围,用 set_focus/add_focus/remove_focus/clear_focus 自动收敛工作范围:"), n.push("  · 局部任务(只改某一组件/区域,如「调导航栏」「改 components.3 样式」)→ 先 read 定位 jsonPath,再 set_focus({path:\"该子树路径\"}) 聚焦;聚焦后每轮只看该子树结构,写其他位置会被 PATH_DENIED 拒绝。"), n.push("  · 多个相关组件(如「同时改导航栏和页脚」)→ set_focus 聚焦首个后用 add_focus({path}) 追加其余;聚焦后可写任一焦点子树,越界仍被拒;移除单个用 remove_focus({path})。"), n.push("  · 全局任务(多处/整体结构,如「重排所有组件」「换主题」)→ 不要聚焦,保持全量视野直接写。"), n.push("  · 完成局部精修、要转向其他区域或做整体改动 → 调 clear_focus 退出聚焦(清空全部焦点),恢复全部读写权限。"), n.push("  · set_focus/add_focus 的 path 必须在 schema 内(类型校验);不确定路径先 read/describe_data 查。")), r && (n.push("【受保护资源·精确值保护】部分字段被 freeze/verbatim 保护(集成方在 data.resources 声明):"), n.push("  · read 受保护路径返回占位符 ⟦frozen:path⟧(freeze,精确值不入消息流)或 ⟦res:handle⟧(verbatim,原值在资源池),非真值。"), n.push("  · 确需真值用 resource_get({path})(仅受保护路径);freeze 字段完全不可改,撞 FROZEN_FIELD 即放弃该字段改动。"), n.push("  · verbatim 字段改新值:先 resource_update({path,value}) 更新资源池(同步 bind),再 write 写回句柄 ⟦res:handle⟧;直接写新值 → VERBATIM_MISMATCH。"), n.push("  · 撞 RESOURCE_EVICTED(资源被池淘汰)→ 重新 read 该字段懒注册重建句柄;撞 RESOURCE_NOT_FOUND → 重新 read。")), e?.subagents?.length) {
-				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Ul || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), r = e.subagents.filter((e) => (e.temperature ?? 0) < Ul && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
+				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Kl || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), r = e.subagents.filter((e) => (e.temperature ?? 0) < Kl && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
 				n.push("【规划-反思-执行·路由】按任务性质选模式,不要对简单任务过度编排:"), t.length && (n.push(`  · 创作/设计/开放性需求(如"设计主题风格""换个感觉")→ 先调 ${t.map((e) => "use_" + e.id).join("/")} 出 2-3 套方案(高温创意),`), n.push("    不要自己拍板;拿到方案后,若需用户拍板用 request_human_confirmation 弹选项。")), r.length && n.push(`  · 严谨/易错/校验类 → 可先调 ${r.map((e) => "use_" + e.id).join("/")} 反思挑刺(低温审查),据反馈修订。`), n.push(a ? "  · 方案定稿后,由你(主 agent)用 write 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。" : "  · 方案定稿后,由你(主 agent)用 edit_data 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。"), n.push("  · 简单/明确任务(如\"标题改红色\")直接执行,不必走规划-反思。");
 			}
 			return e?.humanConfirm && (n.push("【人工确认·必读】以下情形必须先调 request_human_confirmation 征询用户、拿到答复后再继续,不要自行拍板:"), n.push("  1) 用户让你「给方案/列选项/我来选/挑一个」时:把每个方案作为一个 option,调 request_human_confirmation(question=简述, options=[方案A,方案B,...], recommendation=你推荐的)。不要只回文字罗列方案让用户自己回复——要用工具把选项做成可点选按钮。"), n.push("  2) 需求有歧义/不确定时:调工具问清楚(options 不传则用户答同意或拒绝)。"), n.push("  3) 即将执行高风险不可逆操作(删除/覆盖/批量改动)前:调工具确认。"), n.push("  4) 规划出多步方案需用户确认时:把整个方案(或关键分步)作为 option 调 request_human_confirmation,确认后再执行。"), n.push("用户在选项里选了哪个,就按那个方案继续;选「拒绝」则停止并询问如何调整。")), n.length && n.unshift("调用工具务必用标准 function calling(工具调用)格式发起,不要在回复正文里输出伪 XML/标签(如 deepseek 的 tool_calls 标签、invoke、function_call、tool_call 等)或 JSON 文本——那不会被识别为工具调用,会被当普通文字,工具不执行。"), n.length ? "## 能力使用提示\n" + n.join("\n") : void 0;
@@ -8358,7 +8401,7 @@ function Wl(e, t, n = "simple", r = !1) {
 }
 //#endregion
 //#region src/core/harness/resourcesPin.ts
-function Gl(e) {
+function Jl(e) {
 	return {
 		name: "resourcesPin",
 		augmentPrompt: () => {
@@ -8372,78 +8415,78 @@ function Gl(e) {
 }
 //#endregion
 //#region src/core/backends/skillStore.ts
-var Kl = "v:1::skill-store", ql = "chat-sdk";
-function Jl(e, t, n) {
-	return `${Kl}::${e}::${t}::${n}`;
+var Yl = "v:1::skill-store", Xl = "chat-sdk";
+function Zl(e, t, n) {
+	return `${Yl}::${e}::${t}::${n}`;
 }
-function Yl(e, t) {
-	return `${Kl}::${e}::${t}::`;
+function Ql(e, t) {
+	return `${Yl}::${e}::${t}::`;
 }
-function Xl(e = {}) {
-	let t = e.dbName ?? ql, n = e.backend ?? "indexed", r = e.id ?? "", i, a, o = new Promise((e) => {
+function $l(e = {}) {
+	let t = e.dbName ?? Xl, n = e.backend ?? "indexed", r = e.id ?? "", i, a, o = new Promise((e) => {
 		a = e;
 	});
 	return (async () => {
 		try {
 			if (n === "indexed") {
 				if (typeof indexedDB > "u") throw Error("indexedDB 不可用");
-				i = await qs(t), a(!0);
+				i = await Xs(t), a(!0);
 			} else if (n === "session") {
 				if (typeof sessionStorage > "u") throw Error("sessionStorage 不可用");
-				i = Js(sessionStorage), a(!0);
+				i = Zs(sessionStorage), a(!0);
 			} else if (n === "local") {
 				if (typeof localStorage > "u") throw Error("localStorage 不可用");
-				i = Js(localStorage), a(!0);
-			} else i = Ks(), a(!1);
+				i = Zs(localStorage), a(!0);
+			} else i = Ys(), a(!1);
 		} catch {
-			i = Ks(), a(!1);
+			i = Ys(), a(!1);
 		}
 	})(), {
 		ready: o,
 		async list() {
 			let e = [];
-			return await i.scan(Yl(t, r), (t, n) => {
+			return await i.scan(Ql(t, r), (t, n) => {
 				e.push(n);
 			}), e;
 		},
 		async get(e) {
-			return await i.get(Jl(t, r, e));
+			return await i.get(Zl(t, r, e));
 		},
 		async put(e) {
 			try {
-				await i.set(Jl(t, r, e.name), e);
+				await i.set(Zl(t, r, e.name), e);
 			} catch (e) {
-				Rs(e) && (i = Ks());
+				Vs(e) && (i = Ys());
 			}
 		},
 		async remove(e) {
-			let n = Jl(t, r, e);
+			let n = Zl(t, r, e);
 			return await i.get(n) == null ? !1 : (await i.del(n), !0);
 		},
 		async clear() {
-			await i.clearPrefix(Yl(t, r));
+			await i.clearPrefix(Ql(t, r));
 		},
 		dispose() {}
 	};
 }
-var Zl = /large_results\/[^\s"'`),]+\.txt/g;
-function Ql(e) {
+var eu = /large_results\/[^\s"'`),]+\.txt/g;
+function tu(e) {
 	let t = /* @__PURE__ */ new Set(), n = (e) => {
 		if (typeof e != "string" || !e) return;
 		let n;
-		for (Zl.lastIndex = 0; (n = Zl.exec(e)) !== null;) t.add(n[0]);
+		for (eu.lastIndex = 0; (n = eu.exec(e)) !== null;) t.add(n[0]);
 	};
 	for (let t of e) if (n(t.content), t.steps) for (let e of t.steps) n(e.result);
 	return t;
 }
-function $l(e, t) {
+function nu(e, t) {
 	let n = [];
 	for (let r of Object.keys(e)) r.startsWith("large_results/") && !t.has(r) && n.push(r);
 	return n;
 }
 //#endregion
 //#region src/core/utils/serialRunner.ts
-function eu() {
+function ru() {
 	let e = Promise.resolve();
 	return function(t) {
 		let n = e.then(t, t);
@@ -8452,16 +8495,16 @@ function eu() {
 }
 //#endregion
 //#region src/core/sdk/createChatSdk.ts
-var tu = 30, nu = /* @__PURE__ */ new Map();
-function ru(e, t) {
+var iu = 30, au = /* @__PURE__ */ new Map();
+function ou(e, t) {
 	return e === "set_data" ? "set" : e === "edit_data" ? "edit" : e === "delete_data" ? "delete" : e === "restore_data" ? "restore" : e === "write" ? t?.del ? "delete" : t?.patch ? "edit" : "set" : null;
 }
-function iu(e, t, n, r) {
+function su(e, t, n, r) {
 	let i = 0;
 	return {
 		name: "sdk-events",
 		wrapToolCall: async (t, r) => {
-			let i = await r(t), a = ru(t.name, t.args);
+			let i = await r(t), a = ou(t.name, t.args);
 			return a && e({
 				type: "data_change",
 				operation: a,
@@ -8496,7 +8539,7 @@ function iu(e, t, n, r) {
 		}
 	};
 }
-function au(e, t, n, r, i) {
+function cu(e, t, n, r, i) {
 	if (!n) return i && console.warn(`[page-agent-sdk][focus] capabilities.focus 关闭,${t} 忽略`), {
 		ok: !1,
 		error: "capabilities.focus 关闭"
@@ -8514,18 +8557,18 @@ function au(e, t, n, r, i) {
 		error: "当前无主数据 schema,无法聚焦"
 	});
 }
-function ou(e, n) {
+function lu(e, n) {
 	let i = {
 		prompt_tokens: 0,
 		completion_tokens: 0,
 		total_tokens: 0
-	}, a = Ts(() => H), o = /* @__PURE__ */ Ot(0), s = Zs(e.storage);
+	}, a = Os(() => U), o = /* @__PURE__ */ Ot(0), s = ec(e.storage);
 	e.debug && s && s.onEvent((e) => console.log("[page-agent-sdk][storage]", e));
-	let { modelCaps: c, summaryLlmInvoke: l, titleLlmInvoke: u, compressDecisionInvoke: p } = ws(e), m = c;
+	let { modelCaps: c, summaryLlmInvoke: l, titleLlmInvoke: u, compressDecisionInvoke: p } = Ds(e), m = c;
 	if (e.debug && console.log("[page-agent-sdk][modelCaps]", m), m.contextWindow < 2e5) throw Error(`[page-agent-sdk] 模型上下文窗口 ${m.contextWindow} 小于最小支持 ${ti}(需 ≥200K 窗口模型,如 GLM-5.2/Claude/Kimi/Qwen-1M/DeepSeek-v4)`);
-	let h = ic(e, m.contextWindow), g = h.enableLLMSummary !== !1, _ = (e.contextOptions && e.contextOptions.preserveLastToolResults) ?? rc[e.contextPreset ?? "auto"], v = new Set(_), y = e.llm;
+	let h = sc(e, m.contextWindow), g = h.enableLLMSummary !== !1, _ = (e.contextOptions && e.contextOptions.preserveLastToolResults) ?? oc[e.contextPreset ?? "auto"], v = new Set(_), y = e.llm;
 	e.debug && !l && console.warn("[page-agent-sdk][summarization] 未构造 llmInvoke(apiKey 缺失?),摘要回退零成本索引摘要");
-	let b = /* @__PURE__ */ _t([]), x = Tc(e.vfs?.initialFiles, {
+	let b = /* @__PURE__ */ _t([]), x = Oc(e.vfs?.initialFiles, {
 		persist: s ? { save: (e) => {
 			W.sessionId && s && s.save(n, W.sessionId, { vfs: e });
 		} } : void 0,
@@ -8545,18 +8588,18 @@ function ou(e, n) {
 		getTodos: () => ee.current?.getState?.()?.todos ?? [],
 		messages: b,
 		maxCheckpoints: O && typeof O == "object" ? O.maxCheckpoints : void 0
-	}) : null, te = !O || typeof O != "object" || O.auto !== !1, j = ec(e.capabilities), ne = j.dataOps, M = j.draftWrite, N = j.tracing, re = j.automation, P = ls(e), ie = ne && D ? vl(D, {
+	}) : null, te = !O || typeof O != "object" || O.auto !== !1, j = rc(e.capabilities), ne = j.dataOps, M = j.draftWrite, N = j.tracing, re = j.automation, P = fs(e), ie = ne && D ? xl(D, {
 		onAudit: e.onAudit ?? (e.debug ? (e) => console.log("[page-agent-sdk][data audit]", e) : void 0),
 		maxSnapshots: e.maxSnapshots,
 		onConflict: a.set,
 		autoLock: e.autoLock,
 		interceptors: e.interceptors,
 		vfsStore: M || D?.resources?.length ? x : void 0
-	}) : [], ae = ne ? hl(ie, e.toolMode) : [], oe = ne && D ? ie.controller ?? null : null, se = ne && D?.resources?.length && oe?.getResourcesSnapshot ? Gl({ getResourcesSnapshot: () => oe?.getResourcesSnapshot?.() ?? [] }) : void 0, F = () => oe?.get() ?? D, I = /* @__PURE__ */ new Map(), ce = Vl(j, ae, bl, El, Nl);
+	}) : [], ae = ne ? vl(ie, e.toolMode) : [], oe = ne && D ? ie.controller ?? null : null, se = ne && D?.resources?.length && oe?.getResourcesSnapshot ? Jl({ getResourcesSnapshot: () => oe?.getResourcesSnapshot?.() ?? [] }) : void 0, F = () => oe?.get() ?? D, I = /* @__PURE__ */ new Map(), ce = Wl(j, ae, Cl, kl, Il);
 	ce.forEach((e) => I.set(e.name, "builtin"));
 	let le = [...e.tools || []];
 	le.forEach((e) => I.set(e.name, "user"));
-	let L = Il(e.actions ?? {});
+	let L = zl(e.actions ?? {});
 	L.forEach((e) => I.set(e.name, "action"));
 	let ue = [], de = e.humanConfirm !== !1 && (!e.approval || e.approval.humanConfirmTool !== !1), fe = de ? Wa() : null;
 	fe && I.set(Ha, "builtin");
@@ -8628,7 +8671,7 @@ function ou(e, n) {
 	ve.forEach((e) => I.set(e.name, "builtin"));
 	let z = [], ye = /* @__PURE__ */ new Map(), B = be();
 	function be() {
-		let { tools: e, collisions: t } = Hl([
+		let { tools: e, collisions: t } = Gl([
 			{
 				label: "builtin",
 				tools: ce
@@ -8665,15 +8708,15 @@ function ou(e, n) {
 		return t.length && console.warn("[page-agent-sdk] 工具重名,后注册覆盖先注册:", t.map((e) => `${e.name}(${e.loser}→${e.winner})`).join(", ")), e;
 	}
 	let xe = j.planning, Se = j.missionAnchor, Ce = j.workingMemory, we = j.skills, Te = j.vfs;
-	if (Te) for (let e of Mc) I.set(e, "builtin");
+	if (Te) for (let e of Fc) I.set(e, "builtin");
 	if (xe) for (let e of S.tools ?? []) I.set(e.name, "builtin");
 	let Ee = j.summarization, De = j.agentCompression && !!p;
 	e.debug && j.agentCompression && !p && console.warn("[page-agent-sdk][agentCompression] agentCompression 开启但 summaryLlm 不可用(或缺 apiKey / 模型不支持工具),压缩决策不启用,回退静态压缩");
 	let Oe = j.memory, ke = j.subagent, Ae = ke ? bo() : void 0, je = e.verify?.maxAttempts ?? 2, Me = j.verify && e.verify?.enabled !== !1 && je > 0, Ne = j.contextInspector;
 	e.verify?.check && !j.verify && console.warn("[page-agent-sdk][verify] 检测到 verify.check 但 capabilities.verify 未开启,verify 未装载");
-	let Pe = e.subagent, Fe = Pe?.allowedTools ?? [], Ie = !ke || Pe?.enabled === !1 ? void 0 : Mo({
+	let Pe = e.subagent, Fe = Pe?.allowedTools ?? [], Ie = e.permissions?.length ? Ba(e.permissions) : void 0, Le = e.approval && (e.approval.tools !== void 0 || e.approval.confirm) ? Va(e.approval) : void 0, Re = [...Ie ? [Ie] : [], ...Le ? [Le] : []], V = !ke || Pe?.enabled === !1 ? void 0 : Fo({
 		llm: Pe?.llm ?? e.llm,
-		allTools: () => B,
+		allTools: () => W.agent?.allTools ?? B,
 		allowedTools: Fe.length ? Fe : void 0,
 		systemPrompt: Pe?.systemPrompt,
 		temperature: Pe?.temperature,
@@ -8684,32 +8727,36 @@ function ou(e, n) {
 		debug: e.debug,
 		getFocuses: () => w.getFocuses(),
 		getSchema: () => F()?.schema ?? null,
-		tracker: Ae
-	}), Le = ke && e.subagents !== void 0 ? Fo(e.subagents, {
+		tracker: Ae,
+		guardMiddleware: Re.length ? Re : void 0,
+		getVfsFiles: Te ? () => x.files : void 0
+	}), H = ke && e.subagents !== void 0 ? Ro(e.subagents, {
 		llm: e.llm,
-		allTools: () => B,
+		allTools: () => W.agent?.allTools ?? B,
 		debug: e.debug,
 		getFocuses: () => w.getFocuses(),
 		getSchema: () => F()?.schema ?? null,
-		tracker: Ae
-	}) : void 0, Re = Le ? Le.controller : null, V = [
+		tracker: Ae,
+		guardMiddleware: Re.length ? Re : void 0,
+		getVfsFiles: Te ? () => x.files : void 0
+	}) : void 0, ze = H ? H.controller : null, Be = [
 		"get_data",
 		"describe_data",
 		"read",
 		"fetch_document"
-	], ze = B.filter((e) => V.includes(e.name)), Be = Me ? Io({
-		check: e.verify.check ?? Ho({
+	], Ve = B.filter((e) => Be.includes(e.name)), He = Me ? zo({
+		check: e.verify.check ?? Go({
 			schemas: () => F() ? { "": F().schema } : {},
 			root: () => F()?.bind
 		}),
 		adversarial: e.verify?.adversarial ? {
 			llm: e.llm,
-			tools: ze
+			tools: Ve
 		} : void 0
-	}) : void 0, Ve = Ne ? ns({
+	}) : void 0, Ue = Ne ? as({
 		contextWindow: m.contextWindow,
-		thresholdRatio: ic(e, m.contextWindow).summaryThresholdRatio
-	}) : void 0, He = Wl({
+		thresholdRatio: sc(e, m.contextWindow).summaryThresholdRatio
+	}) : void 0, We = ql({
 		...j,
 		humanConfirm: de,
 		subagents: e.subagents?.map((e) => ({
@@ -8717,10 +8764,10 @@ function ou(e, n) {
 			description: e.description,
 			temperature: e.temperature
 		}))
-	}, ne && !!D, e.toolMode, !!D?.resources?.length), Ue = D ? {
+	}, ne && !!D, e.toolMode, !!D?.resources?.length), Ge = D ? {
 		name: "dataHint",
-		augmentPrompt: () => cs(F(), e.schemaHint) || void 0
-	} : null, We = e.augmentSystem ? {
+		augmentPrompt: () => ds(F(), e.schemaHint) || void 0
+	} : null, Ke = e.augmentSystem ? {
 		name: "augmentSystem",
 		augmentPrompt: (t) => {
 			try {
@@ -8733,52 +8780,52 @@ function ou(e, n) {
 				return;
 			}
 		}
-	} : null, Ge = tc(e.onEvent), H = Ge.emit, Ke, U = [], qe = (e) => ({
+	} : null, qe = ic(e.onEvent), U = qe.emit, Je, Ye = [], Xe = (e) => ({
 		name: e.name,
 		description: e.description,
 		content: typeof e.getContent == "function" ? e.getContent() : ""
-	}), Je = (e) => ({
+	}), Ze = (e) => ({
 		name: e.name,
 		description: e.description,
 		getContent: () => e.content
-	}), Ye = e.skillStorage === !1 ? null : Xl({
+	}), Qe = e.skillStorage === !1 ? null : $l({
 		...typeof e.skillStorage == "object" ? e.skillStorage : {},
 		id: e.skillStorage && typeof e.skillStorage == "object" && e.skillStorage.id ? e.skillStorage.id : `agent::${n}`
-	}), Xe = () => {
-		let t = Ke ? Ke.controller : null;
+	}), $e = () => {
+		let t = Je ? Je.controller : null;
 		if (t) {
-			let n = (e.skills || []).filter((e) => !U.some((t) => t.name === e.name));
-			t.set([...n, ...U]);
+			let n = (e.skills || []).filter((e) => !Ye.some((t) => t.name === e.name));
+			t.set([...n, ...Ye]);
 		}
 		W.infoTick.value++;
-	}, Ze = async () => {
-		if (Ye) try {
-			let t = await Ye.list();
+	}, et = async () => {
+		if (Qe) try {
+			let t = await Qe.list();
 			if (t.length) {
-				U = t.map(Je);
-				let n = Ke ? Ke.controller : null;
+				Ye = t.map(Ze);
+				let n = Je ? Je.controller : null;
 				if (n) {
-					let t = (e.skills || []).filter((e) => !U.some((t) => t.name === e.name));
-					n.set([...t, ...U]);
+					let t = (e.skills || []).filter((e) => !Ye.some((t) => t.name === e.name));
+					n.set([...t, ...Ye]);
 				}
 				W.infoTick.value++;
 			}
 		} catch {}
-	}, Qe = Ee ? yo({
+	}, tt = Ee ? yo({
 		...h,
 		llmInvoke: l,
 		getRegisteredData: () => F() ? [{ description: F().description ?? "主数据对象" }] : [],
 		preserveLastToolResults: _,
 		...De ? {
 			decideInvoke: p,
-			getSnapshot: () => Ve?.getSnapshot()
+			getSnapshot: () => Ue?.getSnapshot()
 		} : {}
-	}) : void 0, $e = oc([
-		...Ue ? [Ue] : [],
-		He,
+	}) : void 0, nt = lc([
+		...Ge ? [Ge] : [],
+		We,
 		...Se ? [C] : [],
 		...xe ? [S] : [],
-		...we ? [Ke = Na(e.skills || [], {
+		...we ? [Je = Na(e.skills || [], {
 			readVfs: Te ? (e) => x.files[e]?.content : void 0,
 			hostScriptEnabled: j.skillHostScript,
 			onToolsReady: (e, t) => {
@@ -8789,37 +8836,37 @@ function ou(e, n) {
 				B = be(), W.agent && W.agent.setTools(B), W.infoTick.value++;
 			}
 		})] : [],
-		...Te ? [Pc(x)] : [],
-		...Qe ? [Qe] : [],
+		...Te ? [Lc(x)] : [],
+		...tt ? [tt] : [],
 		...Ce ? [T] : [],
 		...R ? [w] : [],
 		...se ? [se] : [],
 		...Oe ? [E] : [],
-		...e.permissions?.length ? [Ba(e.permissions)] : [],
+		...Ie ? [Ie] : [],
 		...k && te && A ? [$a(A)] : [],
 		...de ? [Ga()] : [],
-		...e.approval && (e.approval.tools !== void 0 || e.approval.confirm) ? [Va(e.approval)] : [],
-		...Be ? [Be] : [],
-		...Ie ? [Ie] : [],
 		...Le ? [Le] : [],
-		...We ? [We] : [],
-		...Ve ? [Ve] : [],
+		...He ? [He] : [],
+		...V ? [V] : [],
+		...H ? [H] : [],
+		...Ke ? [Ke] : [],
+		...Ue ? [Ue] : [],
 		...e.middleware || [],
-		...re ? [Pl(i, {
+		...re ? [Ll(i, {
 			tokenBudget: e.tokenBudget,
 			timeBudgetMs: e.timeBudgetMs
-		}, H)] : [],
-		iu(H, b, F, i)
-	]), et = e.maxMemoryRounds ?? tu, tt = /* @__PURE__ */ Ot([]);
-	async function nt() {
-		s && (tt.value = (await s.listSessions(n)).sort((e, t) => t.lastAccessed - e.lastAccessed));
+		}, U)] : [],
+		su(U, b, F, i)
+	]), rt = e.maxMemoryRounds ?? iu, it = /* @__PURE__ */ Ot([]);
+	async function at() {
+		s && (it.value = (await s.listSessions(n)).sort((e, t) => t.lastAccessed - e.lastAccessed));
 	}
 	let W = {
 		agentId: n,
 		store: s,
 		messages: b,
 		vfsStore: x,
-		listeners: Ge.listeners,
+		listeners: qe.listeners,
 		todosMw: S,
 		memoryMw: E,
 		missionMw: C,
@@ -8833,14 +8880,14 @@ function ou(e, n) {
 		mcpServers: [],
 		checkpoint: A,
 		dataOpsController: oe,
-		skillsController: Ke ? Ke.controller : null,
+		skillsController: Je ? Je.controller : null,
 		infoTick: o,
 		pendingConflict: a.pendingConflict,
-		sessions: tt,
-		refreshSessions: nt,
+		sessions: it,
+		refreshSessions: at,
 		liveData: F,
 		usage: i,
-		emit: H,
+		emit: U,
 		unloadSkillTools(e) {
 			if (e) {
 				let t = z.length;
@@ -8863,21 +8910,21 @@ function ou(e, n) {
 					}
 				}
 			}
-			ot();
+			lt();
 		},
 		addSkill(e) {
-			let t = U.findIndex((t) => t.name === e.name);
-			t >= 0 ? U[t] = e : U.push(e), Xe(), Ye && Ye.put(qe(e));
+			let t = Ye.findIndex((t) => t.name === e.name);
+			t >= 0 ? Ye[t] = e : Ye.push(e), $e(), Qe && Qe.put(Xe(e));
 		},
 		removeSkill(e) {
-			let t = U.findIndex((t) => t.name === e);
-			return t < 0 ? !1 : (U.splice(t, 1), Xe(), Ye && Ye.remove(e), !0);
+			let t = Ye.findIndex((t) => t.name === e);
+			return t < 0 ? !1 : (Ye.splice(t, 1), $e(), Qe && Qe.remove(e), !0);
 		},
 		listUserSkills() {
-			return U.map((e) => e.name);
+			return Ye.map((e) => e.name);
 		},
 		getUserSkill(e) {
-			let t = U.find((t) => t.name === e);
+			let t = Ye.find((t) => t.name === e);
 			if (t) return {
 				name: t.name,
 				description: t.description,
@@ -8885,7 +8932,7 @@ function ou(e, n) {
 			};
 		},
 		afterRound() {
-			st(), ut();
+			ut(), pt();
 		},
 		async send(e, t) {
 			await W.initDone, t ??= {}, t?.mission && Se && C.setMission(t.mission);
@@ -8915,7 +8962,7 @@ function ou(e, n) {
 				} catch (e) {
 					let t = qr(e, "fatal");
 					if (i < r && A?.canRestore()) {
-						i += 1, A.restore(), a = !0, H({
+						i += 1, A.restore(), a = !0, U({
 							type: "error",
 							message: `致命错误自动恢复(${i}/${r}):${t.message},已回退 checkpoint 重试`,
 							severity: "observable",
@@ -8927,7 +8974,7 @@ function ou(e, n) {
 						});
 						continue;
 					}
-					throw H({
+					throw U({
 						type: "error",
 						message: t.message,
 						severity: t.severity,
@@ -8969,7 +9016,7 @@ function ou(e, n) {
 				} catch (o) {
 					b.length > a && b.splice(a);
 					let s = qr(o, "fatal");
-					H({
+					U({
 						type: "error",
 						message: `批量任务 ${r + 1}/${e.length} 失败:${s.message}`,
 						severity: "observable",
@@ -9011,24 +9058,24 @@ function ou(e, n) {
 			}
 			x.flush?.(), await s.flush();
 			let r = t ?? "", i;
-			return r ? (i = await s.load(n, r), i || await s.createSession(n, e.session?.title, r)) : r = await s.createSession(n, e.session?.title), W.sessionId = r, b.splice(0, b.length), x.clear?.(), S.reset([]), e.memory || E.reset(""), C.reset(), T.reset(), w.reset(), A && A.importStack([]), W.agent.debugLogs.value = [], i ||= await s.load(n, r), i && (W.applySnapshot(i), H({
+			return r ? (i = await s.load(n, r), i || await s.createSession(n, e.session?.title, r)) : r = await s.createSession(n, e.session?.title), W.sessionId = r, b.splice(0, b.length), x.clear?.(), S.reset([]), e.memory || E.reset(""), C.reset(), T.reset(), w.reset(), A && A.importStack([]), W.agent.debugLogs.value = [], i ||= await s.load(n, r), i && (W.applySnapshot(i), U({
 				type: "session_restored",
 				sessionId: r,
 				rounds: i.messages?.length ?? 0
-			})), e.memory && s.save(n, W.sessionId, { memory: E.get() || (typeof e.memory == "string" ? e.memory : "") }), nt(), ct = void 0, lt = !1, r;
+			})), e.memory && s.save(n, W.sessionId, { memory: E.get() || (typeof e.memory == "string" ? e.memory : "") }), at(), dt = void 0, ft = !1, r;
 		},
 		resetSession: () => {
-			s && (W.sessionId = Es(), x.clear?.(), S.reset([]), e.memory || E.reset(""), C.reset(), T.reset(), w.reset(), A && A.importStack([]), W.agent && (W.agent.debugLogs.value = []), s.createSession(W.agentId, e.session?.title, W.sessionId), H({
+			s && (W.sessionId = ks(), x.clear?.(), S.reset([]), e.memory || E.reset(""), C.reset(), T.reset(), w.reset(), A && A.importStack([]), W.agent && (W.agent.debugLogs.value = []), s.createSession(W.agentId, e.session?.title, W.sessionId), U({
 				type: "session_restored",
 				sessionId: W.sessionId,
 				rounds: 0
-			}), nt(), ct = void 0, lt = !1);
+			}), at(), dt = void 0, ft = !1);
 		},
 		stream: (e, t, n) => {
 			if (!W.agent) throw Error("page-agent-sdk: agent 尚未初始化完成,请先 await mount()");
-			x?.setProtectedRefs?.(Ql(e));
+			x?.setProtectedRefs?.(tu(e));
 			let r = (e) => {
-				t?.(e), H(e);
+				t?.(e), U(e);
 			};
 			if (n) {
 				let e = () => a.resolve("keep_external");
@@ -9038,9 +9085,9 @@ function ou(e, n) {
 		},
 		release() {
 			if (W.refCount--, W.refCount <= 0) {
-				s && (x.flush?.(), s.flush(), s.dispose()), Ye && Ye.dispose();
+				s && (x.flush?.(), s.flush(), s.dispose()), Qe && Qe.dispose();
 				let e = W.mcpClosers.splice(0);
-				e.length && Promise.allSettled(e.map((e) => e())), nu.delete(n);
+				e.length && Promise.allSettled(e.map((e) => e())), au.delete(n);
 			}
 		},
 		resolveConflict: a.resolve,
@@ -9060,20 +9107,20 @@ function ou(e, n) {
 		},
 		setLlm(t) {
 			let n;
-			if (hs(t)) n = t;
+			if (vs(t)) n = t;
 			else {
 				let e = t;
 				if ((e.provider ?? "openai") === "anthropic") throw Error("[page-agent-sdk][setLlm] 切换到 Anthropic 需传 BaseChatModel 实例(动态 import 无法同步);请先 const { ChatAnthropic } = await import(\"@langchain/anthropic\") 构造实例后传入");
 				n = d(e);
 			}
 			typeof n.bindTools != "function" && e.debug && console.warn("[page-agent-sdk][setLlm] 新模型不支持 bindTools(tool calling 会失效)"), y = t;
-			let r = hs(t) ? void 0 : t;
+			let r = vs(t) ? void 0 : t;
 			if (m = ni({
 				model: r?.model ?? t.model ?? t.modelName,
 				contextWindow: e.contextWindow ?? r?.contextWindow,
 				maxOutputTokens: e.maxOutputTokens ?? r?.maxOutputTokens
 			}), m.contextWindow < 2e5) throw Error(`[page-agent-sdk][setLlm] 新模型上下文窗口 ${m.contextWindow} 小于最小支持 ${ti}(需 ≥200K 窗口模型)`);
-			W.agent && (W.agent.setLlm(n), W.agent.setModelCaps?.(m)), Qe?.setContextWindow?.(m.contextWindow), Ve?.setContextWindow?.(m.contextWindow), W.infoTick.value++, e.debug && console.log("[page-agent-sdk][setLlm] 重解析 modelCaps + 回灌:", m);
+			W.agent && (W.agent.setLlm(n), W.agent.setModelCaps?.(m)), tt?.setContextWindow?.(m.contextWindow), Ue?.setContextWindow?.(m.contextWindow), W.infoTick.value++, e.debug && console.log("[page-agent-sdk][setLlm] 重解析 modelCaps + 回灌:", m);
 		},
 		setMemory(e) {
 			E.reset(e), typeof e == "function" && E.refresh(), W.infoTick.value++;
@@ -9082,22 +9129,22 @@ function ou(e, n) {
 			return E.refresh();
 		},
 		setSubagents(t) {
-			if (!Re) {
+			if (!ze) {
 				e.debug && console.warn("[page-agent-sdk][setSubagents] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略");
 				return;
 			}
-			Re.set(t), W.infoTick.value++;
+			ze.set(t), W.infoTick.value++;
 		},
 		addSubagent(t) {
-			if (!Re) {
+			if (!ze) {
 				e.debug && console.warn("[page-agent-sdk][addSubagent] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略");
 				return;
 			}
-			Re.add(t), W.infoTick.value++;
+			ze.add(t), W.infoTick.value++;
 		},
 		removeSubagent(t) {
-			if (!Re) return e.debug && console.warn("[page-agent-sdk][removeSubagent] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略"), !1;
-			let n = Re.remove(t);
+			if (!ze) return e.debug && console.warn("[page-agent-sdk][removeSubagent] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略"), !1;
+			let n = ze.remove(t);
 			return n && W.infoTick.value++, n;
 		},
 		getActiveSubagents() {
@@ -9110,15 +9157,15 @@ function ou(e, n) {
 			return {
 				id: n,
 				sessionId: W.sessionId,
-				model: hs(y) ? y.model ?? y.modelName : y.model,
-				systemPrompt: W.agent?.getEffectiveSystemPrompt?.() ?? P + cs(F(), e.schemaHint),
+				model: vs(y) ? y.model ?? y.modelName : y.model,
+				systemPrompt: W.agent?.getEffectiveSystemPrompt?.() ?? P + ds(F(), e.schemaHint),
 				tools: (W.agent?.allTools ?? B).map((e) => ({
 					name: e.name,
 					description: e.description,
 					schema: e.schema,
 					source: I.get(e.name) || "user"
 				})),
-				skills: (Ke ? Ke.controller.get() : e.skills ?? []).map((e) => ({
+				skills: (Je ? Je.controller.get() : e.skills ?? []).map((e) => ({
 					name: e.name,
 					description: e.description
 				})),
@@ -9128,7 +9175,7 @@ function ou(e, n) {
 				} : void 0,
 				contextPreset: e.contextPreset ?? "auto",
 				memory: E.get(),
-				middleware: $e.map((e) => e.name),
+				middleware: nt.map((e) => e.name),
 				todos: (W.agent?.getState?.()?.todos ?? []).map((e) => ({
 					id: e.id,
 					content: e.content,
@@ -9147,23 +9194,23 @@ function ou(e, n) {
 					spans: W.agent.spans.value,
 					metrics: ai(W.agent.spans.value)
 				} : void 0,
-				actions: Ll(e.actions ?? {}),
+				actions: Bl(e.actions ?? {}),
 				subagent: {
-					enabled: !!Ie,
+					enabled: !!V,
 					maxDepth: e.subagent?.maxDepth ?? 1,
 					maxParallel: e.subagent?.maxParallel ?? 4,
 					allowedTools: e.subagent?.allowedTools ?? [],
-					subagents: Re?.get() ?? [],
+					subagents: ze?.get() ?? [],
 					active: Ae?.getActive() ?? [],
 					history: Ae?.getHistory() ?? []
 				},
 				verify: {
-					enabled: !!Be,
+					enabled: !!He,
 					maxAttempts: Me ? je : 0,
 					adversarial: Me && !!e.verify?.adversarial
 				},
 				context: (() => {
-					let e = Ve?.getSnapshot();
+					let e = Ue?.getSnapshot();
 					if (e) {
 						let t = W.agent?.getState?.()?.lastCompression;
 						t && (e.compression = t);
@@ -9196,11 +9243,11 @@ function ou(e, n) {
 			return R ? w.getFocuses() : [];
 		},
 		setFocus(t) {
-			let n = au(t, "setFocus", R, () => F()?.schema, e.debug);
+			let n = cu(t, "setFocus", R, () => F()?.schema, e.debug);
 			return n.ok ? (w.setFocus(t), W.infoTick.value++, { ok: !0 }) : n;
 		},
 		addFocus(t) {
-			let n = au(t, "addFocus", R, () => F()?.schema, e.debug);
+			let n = cu(t, "addFocus", R, () => F()?.schema, e.debug);
 			return n.ok ? w.getFocuses().length >= 8 ? (e.debug && console.warn("[page-agent-sdk][focus] addFocus 拒绝:焦点数已达上限 8(augmentPrompt 注入每焦点子树 schema,过多致 system prompt 超预算)"), {
 				ok: !1,
 				error: "焦点数上限 8(避免 system prompt 撑爆)"
@@ -9213,14 +9260,14 @@ function ou(e, n) {
 			R && (w.clearFocus(), W.infoTick.value++);
 		}
 	};
-	async function rt() {
+	async function ot() {
 		if (!s) return;
 		await s.ready;
 		let t = e.session || {};
 		if (t.id) {
 			W.sessionId = t.id;
 			let e = await s.load(n, W.sessionId);
-			e ? (W.applySnapshot(e), H({
+			e ? (W.applySnapshot(e), U({
 				type: "session_restored",
 				sessionId: W.sessionId,
 				rounds: e.messages?.length ?? 0
@@ -9230,35 +9277,35 @@ function ou(e, n) {
 			if (e.debug && console.log("[page-agent-sdk][restore] listSessions", n, r.length, r.map((e) => e.sessionId)), r.length) {
 				W.sessionId = r[0].sessionId;
 				let t = await s.load(n, W.sessionId);
-				t ? (W.applySnapshot(t), H({
+				t ? (W.applySnapshot(t), U({
 					type: "session_restored",
 					sessionId: W.sessionId,
 					rounds: t.messages?.length ?? 0
 				}), e.debug && console.log("[page-agent-sdk][restore] 恢复会话", W.sessionId, `${t.messages?.length ?? 0} msgs`)) : e.debug && console.log("[page-agent-sdk][restore] 会话 meta 存在但快照为空", W.sessionId);
 			} else W.sessionId = await s.createSession(n, t.title), e.debug && console.log("[page-agent-sdk][restore] 新建会话(无历史)", W.sessionId);
 		} else W.sessionId = await s.createSession(n, t.title);
-		e.memory && s.save(n, W.sessionId, { memory: E.get() || (typeof e.memory == "string" ? e.memory : "") }), nt();
+		e.memory && s.save(n, W.sessionId, { memory: E.get() || (typeof e.memory == "string" ? e.memory : "") }), at();
 	}
-	async function it() {
-		await Ze();
+	async function st() {
+		await et();
 	}
-	function at(e) {
+	function ct(e) {
 		let t = {};
-		for (let n of Ql(e)) {
+		for (let n of tu(e)) {
 			let e = x.files[n];
 			e && (t[n] = e.content);
 		}
 		return t;
 	}
-	function ot() {
-		let e = $l(x.files, Ql(b));
+	function lt() {
+		let e = nu(x.files, tu(b));
 		for (let t of e) delete x.files[t];
 	}
-	function st() {
-		let e = co(b, et);
+	function ut() {
+		let e = co(b, rt);
 		if (!e.trimmed) return;
 		let { older: t, summary: n } = e;
-		if (H({
+		if (U({
 			type: "context_trimmed",
 			dropped: t.map((e) => ({
 				round: e.round,
@@ -9266,22 +9313,22 @@ function ou(e, n) {
 				assistant: e.assistantMsgs.map((e) => e.content),
 				steps: e.assistantMsgs.flatMap((e) => e.steps ?? [])
 			})),
-			vfsResults: at(t.flatMap((e) => [e.userMsg, ...e.assistantMsgs])),
+			vfsResults: ct(t.flatMap((e) => [e.userMsg, ...e.assistantMsgs])),
 			summary: n.content,
 			reason: "max_memory_rounds"
-		}), b.splice(e.deleteFrom, e.deleteCount, n), ot(), g && l) {
+		}), b.splice(e.deleteFrom, e.deleteCount, n), lt(), g && l) {
 			let n = e.summary, { prevSeg: r } = e;
 			(async () => {
 				try {
 					let e = await l(mo(t, v)), i = b.indexOf(n);
 					if (i < 0) return;
-					b[i].content = so(t, r, e), ut();
+					b[i].content = so(t, r, e), pt();
 				} catch {}
 			})();
 		}
 	}
-	let ct, lt = !1;
-	function ut() {
+	let dt, ft = !1;
+	function pt() {
 		if (!W.sessionId || !s) return;
 		let t = JSON.parse(JSON.stringify(b));
 		s.save(n, W.sessionId, { messages: t });
@@ -9299,15 +9346,15 @@ function ou(e, n) {
 			s.save(n, W.sessionId, { focus: e.length ? e : null });
 		}
 		re && A && (s.save(n, W.sessionId, { checkpoints: A.exportStack() }), s.save(n, W.sessionId, { usage: i }));
-		let a = ms(b);
-		a && a !== ct && (ct = a, s.updateTitle(n, W.sessionId, a)), e.autoTitle !== !1 && u && !lt && b.some((e) => e.role === "user") && b.some((e) => e.role === "assistant") && (lt = !0, (async () => {
+		let a = _s(b);
+		a && a !== dt && (dt = a, s.updateTitle(n, W.sessionId, a)), e.autoTitle !== !1 && u && !ft && b.some((e) => e.role === "user") && b.some((e) => e.role === "assistant") && (ft = !0, (async () => {
 			let e = await u(b);
-			e && (await s.updateTitle(n, W.sessionId, e), await nt());
+			e && (await s.updateTitle(n, W.sessionId, e), await at());
 		})()), e.debug && console.log("[page-agent-sdk][persist] save", W.sessionId, `${b.length} msgs`);
 	}
 	return W.initDone = (async () => {
-		if (await rt(), await it(), e.mcp?.length) {
-			let t = await Promise.allSettled(e.mcp.map((e) => os(e)));
+		if (await ot(), await st(), e.mcp?.length) {
+			let t = await Promise.allSettled(e.mcp.map((e) => ls(e)));
 			W.mcpClosers = t.flatMap((e) => e.status === "fulfilled" ? [e.value.close] : []), W.mcpServers = [], t.forEach((t, n) => {
 				let r = e.mcp[n], i = r.name ?? r.url;
 				t.status === "fulfilled" ? (W.mcpServers.push({
@@ -9317,12 +9364,12 @@ function ou(e, n) {
 				}), t.value.tools.forEach((e) => I.set(e.name, `mcp:${i}`)), ue.push(...t.value.tools)) : console.warn(`[page-agent-sdk][mcp] server ${i} 连接失败:`, t.reason);
 			}), B = be(), e.debug && console.log(`[page-agent-sdk][mcp] 注入 ${ue.length} 个工具,${W.mcpServers.length} 个 server`);
 		}
-		let t = hs(e.llm) ? e.llm : await f(e.llm);
+		let t = vs(e.llm) ? e.llm : await f(e.llm);
 		W.agent = ji({
 			llm: t,
 			systemPrompt: P,
 			tools: B,
-			middleware: $e,
+			middleware: nt,
 			maxToolRounds: e.maxToolRounds,
 			maxRetries: e.maxRetries,
 			maxParallelTools: e.maxParallelTools,
@@ -9334,7 +9381,7 @@ function ou(e, n) {
 			},
 			onTrace: N ? (e, t) => {
 				try {
-					H({
+					U({
 						type: "trace",
 						spans: e,
 						metrics: t
@@ -9342,17 +9389,17 @@ function ou(e, n) {
 				} catch {}
 			} : void 0,
 			debug: e.debug
-		}), ee.current = W.agent, Le && Le.setReconfigureHook && Le.setReconfigureHook(() => {
+		}), ee.current = W.agent, H && H.setReconfigureHook && H.setReconfigureHook(() => {
 			W.agent && W.agent.setTools(be());
 		});
 	})(), W;
 }
-function su(e, t) {
-	let n = e.id ?? Es();
+function uu(e, t) {
+	let n = e.id ?? ks();
 	e.id || console.warn(`[page-agent-sdk] 未传 options.id,已生成随机 id "${n}"。刷新后持久化数据无法恢复,请传稳定 id。`);
-	let r = e.streaming ?? !0, i = e.ui ?? "default", a, o = e.shareContext ? nu.get(n) : void 0;
-	o ? a = o : (a = ou(e, n), e.shareContext && nu.set(n, a)), a.refCount++;
-	let s = null, c = Qs(e), l = null, u = null;
+	let r = e.streaming ?? !0, i = e.ui ?? "default", a, o = e.shareContext ? au.get(n) : void 0;
+	o ? a = o : (a = lu(e, n), e.shareContext && au.set(n, a)), a.refCount++;
+	let s = null, c = tc(e), l = null, u = null;
 	async function d(n) {
 		if (await a.initDone, s) {
 			s.show();
@@ -9394,7 +9441,7 @@ function su(e, t) {
 	function m() {
 		s?.show();
 	}
-	let h = eu();
+	let h = ru();
 	return {
 		mount: d,
 		unmount: f,
@@ -9507,7 +9554,7 @@ function su(e, t) {
 		},
 		vfsWrite: (e, t) => {
 			let n = typeof t == "string" ? t : JSON.stringify(t);
-			a.vfsStore.files[kc(e)] = {
+			a.vfsStore.files[Mc(e)] = {
 				content: n,
 				updatedAt: Date.now()
 			};
@@ -9550,12 +9597,12 @@ function su(e, t) {
 }
 //#endregion
 //#region src/core/sdk/ragSubagent.ts
-var cu = "你是知识检索专家。可用工具:search_docs(语义检索)/ load_doc(按 source 加载)/ vfs_grep+vfs_read(搜预注入文档)/ fetch_document(公网 URL)。\n\n工作方式:\n1. 分析任务,拆出需查证的要点(如:需要哪些组件、各自的 props 约束、UI 规范要求);\n2. 多源检索:先 vfs_grep 搜预注入文档(快、静态)→ 不够用 search_docs 语义检索 → 需特定文档用 load_doc → 公网用 fetch_document;\n3. 检索结果不足时换关键词、扩大 topK、或换源重试;\n4. 综合成结构化、可执行结论(不堆原文,提炼成可直接用于决策/配置的信息);\n5. 标注关键信息来源(文档名/段落),便于溯源;检索不到明确说「未检索到」,不编造。\n\n你是只读检索角色,不要尝试修改任何数据。", lu = "# 知识检索策略(RAG)\n\n## 多源决策树\n- vfs_grep / vfs_read:搜集成方预注入 vfs 的文档(组件文档 / UI 规范)—— 快、静态,先查\n- search_docs:语义检索(retriever 向量库)—— 模糊匹配,关键词不确定 / 语义相似时用\n- load_doc:按 source 精确加载(已知文档 id / URL / key)—— 精确取特定文档\n- fetch_document:公网 URL —— 查公开资料\n\n## 综合规范\n- 多源交叉验证(关键结论优先 ≥2 源印证,或单一权威源)\n- 标注来源(文档名 / URL / 段落),便于溯源\n- 结构化、可执行结论(组件清单 + 各自 props 约束 + 适用场景),不堆原文\n- 未检索到明确说「未检索到」,不编造;建议替代方案(改关键词 / 建议写代码组件等)\n\n## 何时用何源\n- 静态文档(组件库文档 / UI 规范):vfs_grep\n- 语义相似(「瀑布流组件」「倒计时」「拼团」):search_docs\n- 已知文档 id / URL:load_doc\n- 公开 URL(设计规范网站 / 第三方文档):fetch_document", uu = {
+var du = "你是知识检索专家。可用工具:search_docs(语义检索)/ load_doc(按 source 加载)/ vfs_grep+vfs_read(搜预注入文档)/ fetch_document(公网 URL)。\n\n工作方式:\n1. 分析任务,拆出需查证的要点(如:需要哪些组件、各自的 props 约束、UI 规范要求);\n2. 多源检索:先 vfs_grep 搜预注入文档(快、静态)→ 不够用 search_docs 语义检索 → 需特定文档用 load_doc → 公网用 fetch_document;\n3. 检索结果不足时换关键词、扩大 topK、或换源重试;\n4. 综合成结构化、可执行结论(不堆原文,提炼成可直接用于决策/配置的信息);\n5. 标注关键信息来源(文档名/段落),便于溯源;检索不到明确说「未检索到」,不编造。\n\n你是只读检索角色,不要尝试修改任何数据。", fu = "# 知识检索策略(RAG)\n\n## 多源决策树\n- vfs_grep / vfs_read:搜集成方预注入 vfs 的文档(组件文档 / UI 规范)—— 快、静态,先查\n- search_docs:语义检索(retriever 向量库)—— 模糊匹配,关键词不确定 / 语义相似时用\n- load_doc:按 source 精确加载(已知文档 id / URL / key)—— 精确取特定文档\n- fetch_document:公网 URL —— 查公开资料\n\n## 综合规范\n- 多源交叉验证(关键结论优先 ≥2 源印证,或单一权威源)\n- 标注来源(文档名 / URL / 段落),便于溯源\n- 结构化、可执行结论(组件清单 + 各自 props 约束 + 适用场景),不堆原文\n- 未检索到明确说「未检索到」,不编造;建议替代方案(改关键词 / 建议写代码组件等)\n\n## 何时用何源\n- 静态文档(组件库文档 / UI 规范):vfs_grep\n- 语义相似(「瀑布流组件」「倒计时」「拼团」):search_docs\n- 已知文档 id / URL:load_doc\n- 公开 URL(设计规范网站 / 第三方文档):fetch_document", pu = {
 	name: "rag-search",
 	description: "多源知识检索策略:vfs 预注入文档 → 语义检索 → 指定文档加载 → 公网;综合结构化结论 + 溯源",
-	getContent: () => lu
+	getContent: () => fu
 };
-function du(e, n, i) {
+function mu(e, n, i) {
 	return r(async ({ query: e, topK: t }) => {
 		try {
 			let r = await n(e, { topK: t ?? i });
@@ -9572,7 +9619,7 @@ function du(e, n, i) {
 		})
 	});
 }
-function fu(e, n) {
+function hu(e, n) {
 	return r(async ({ source: e }) => {
 		try {
 			let t = await n(e), r = Array.isArray(t) ? t : [t];
@@ -9586,11 +9633,11 @@ function fu(e, n) {
 		schema: t.object({ source: t.string().describe("文档标识(id/URL/key)") })
 	});
 }
-function pu(e) {
+function gu(e) {
 	let { retriever: t, loader: n, useVfs: r = !0, id: i = "rag", description: a, topK: o = 5, searchToolName: s = "search_docs", loadToolName: c = "load_doc", maxToolRounds: l = 8, summarization: u, skills: d, extraTools: f } = e;
 	if (!t && !n && r === !1) throw Error("[page-agent-sdk][createRagSubagent] 至少配一种知识源:retriever / loader / useVfs(true)");
 	let p = [];
-	t && p.push(du(s, t, o)), n && p.push(fu(c, n)), f && p.push(...f);
+	t && p.push(mu(s, t, o)), n && p.push(hu(c, n)), f && p.push(...f);
 	let m = r ? [
 		"vfs_grep",
 		"vfs_read",
@@ -9599,17 +9646,17 @@ function pu(e) {
 	return {
 		id: i,
 		description: a ?? "检索知识库(组件文档/UI 规范/业务规则),返回有依据的结构化结论。需要查阅文档才能回答或决定如何配置时委派",
-		systemPrompt: cu,
+		systemPrompt: du,
 		tools: p.length ? p : void 0,
 		allowedTools: m,
-		skills: d ?? [uu],
+		skills: d ?? [pu],
 		maxToolRounds: l,
 		...u === void 0 ? {} : { summarization: u }
 	};
 }
 //#endregion
 //#region src/core/sdk/htmlSubagent.ts
-function mu(e) {
+function _u(e) {
 	return `你是纯代码组件生成专家。可用工具:vfs_write / vfs_edit / vfs_rm(写/改/删代码到 vfs ${e}) / vfs_grep + vfs_read(读 vfs) / write + set(写 data 引用,writablePaths 限定) / read / write_todos + update_todo(规划)。
 
 代码存储约定(重要):
@@ -9623,12 +9670,12 @@ function mu(e) {
 3. 小段代码 vfs_write 整体写;大段用 vfs_edit 增量拼(避免单次输出超限);
 4. 生成后 read(vfs 文件 + data 引用)确认结构正确;只写 writablePaths 内 data + ${e} 下 vfs。`;
 }
-var hu = "# 纯代码组件生成规范\n\n## 代码存储约定(重要)\n- 代码正文写 vfs:html/<name>.vue(如 html/hero.vue)\n- data 存引用:{ type:'custom', codeRef:'vfs://html/<name>.vue', name, props }\n- 改代码:vfs_edit 改 vfs 文件(data 的 codeRef 引用不变)\n\n## 何时写代码组件\n- 组件库无对应类型(高度定制交互 / 一次性特效 / 特殊布局)→ 写 custom 代码组件\n- 组件库已有(按钮 / 卡片 / 列表)→ 用现有组件配置,不重造\n\n## Vue SFC 规范\n- Vue 3 <template> + <script setup>(组合式)\n- props 用 defineProps;事件用 defineEmits\n- 只渲染 UI,不做副作用(不发请求 / 不读写 storage)\n\n## props 定义\n- 代码组件 defineProps 接受外部 data 传入(集成方渲染时按 data 的 props 字段传)\n\n## 组件库引用\n- 代码内可 import 组件库组件(如 <Button>);所用依赖以集成方渲染层已注入为准,不重复造\n\n## 安全底线(必须)\n- 禁 eval / new Function / Function 构造器\n- 禁访问 window 敏感属性(document.cookie / apiKey / token)\n- 不引入外部脚本 / CDN\n\n## 可访问性 + 语义化\n- 语义化标签(button / nav / section);图片 alt;交互可键盘聚焦\n- 颜色对比达标;不只用颜色传达信息", gu = {
+var vu = "# 纯代码组件生成规范\n\n## 代码存储约定(重要)\n- 代码正文写 vfs:html/<name>.vue(如 html/hero.vue)\n- data 存引用:{ type:'custom', codeRef:'vfs://html/<name>.vue', name, props }\n- 改代码:vfs_edit 改 vfs 文件(data 的 codeRef 引用不变)\n\n## 何时写代码组件\n- 组件库无对应类型(高度定制交互 / 一次性特效 / 特殊布局)→ 写 custom 代码组件\n- 组件库已有(按钮 / 卡片 / 列表)→ 用现有组件配置,不重造\n\n## Vue SFC 规范\n- Vue 3 <template> + <script setup>(组合式)\n- props 用 defineProps;事件用 defineEmits\n- 只渲染 UI,不做副作用(不发请求 / 不读写 storage)\n\n## props 定义\n- 代码组件 defineProps 接受外部 data 传入(集成方渲染时按 data 的 props 字段传)\n\n## 组件库引用\n- 代码内可 import 组件库组件(如 <Button>);所用依赖以集成方渲染层已注入为准,不重复造\n\n## 安全底线(必须)\n- 禁 eval / new Function / Function 构造器\n- 禁访问 window 敏感属性(document.cookie / apiKey / token)\n- 不引入外部脚本 / CDN\n\n## 可访问性 + 语义化\n- 语义化标签(button / nav / section);图片 alt;交互可键盘聚焦\n- 颜色对比达标;不只用颜色传达信息", yu = {
 	name: "html-builder",
 	description: "纯代码组件(custom Vue SFC)生成规范:代码存 vfs+data 引用 / SFC 规范 / 安全底线 / props / 组件库引用 / 可访问性",
-	getContent: () => hu
+	getContent: () => vu
 };
-function _u(e) {
+function bu(e) {
 	let { writablePaths: t, codeVfsPrefix: n = "html/", id: r = "html", description: i, planning: a = !0, summarization: o = !0, maxToolRounds: s = 12, temperature: c = .4, skills: l, extraTools: u } = e;
 	if (!t?.length) throw Error("[page-agent-sdk][createHtmlSubagent] writablePaths 必填(代码组件 data 区,如 [\"components\"])");
 	let d = [];
@@ -9637,7 +9684,7 @@ function _u(e) {
 	return {
 		id: r,
 		description: i ?? "生成/修改纯代码组件(custom Vue SFC)。代码写 vfs,data 存引用;能规划(write_todos)+ 执行。需写代码组件或灵活定制时委派",
-		systemPrompt: mu(n),
+		systemPrompt: _u(n),
 		writablePaths: t,
 		allowedTools: [
 			"vfs_write",
@@ -9649,14 +9696,14 @@ function _u(e) {
 		middleware: d.length ? d : void 0,
 		summarization: o === !1 ? void 0 : o,
 		temperature: c,
-		skills: l ?? [gu],
+		skills: l ?? [yu],
 		maxToolRounds: s,
 		tools: f.length ? f : void 0
 	};
 }
 //#endregion
 //#region src/core/utils/clipboard.ts
-async function vu(e) {
+async function xu(e) {
 	try {
 		let t = globalThis.navigator?.clipboard;
 		if (t && typeof t.writeText == "function") return await t.writeText(e), !0;
@@ -9674,7 +9721,7 @@ async function vu(e) {
 }
 //#endregion
 //#region src/core/composables/useChat.ts
-function yu(e = {}) {
+function Su(e = {}) {
 	let { fetchResponse: t, fetchStream: n, onPersist: r, onClear: i } = e, a = /* @__PURE__ */ _t({
 		messages: e.messages ?? [],
 		loading: !1,
@@ -9853,9 +9900,9 @@ function yu(e = {}) {
 }
 //#endregion
 //#region src/core/composables/chatContext.ts
-var bu = Symbol("chatContext");
-function xu(e = {}) {
-	let t = yu({
+var Cu = Symbol("chatContext");
+function wu(e = {}) {
+	let t = Su({
 		fetchResponse: e.fetchResponse,
 		fetchStream: e.fetchStream,
 		messages: e.messages,
@@ -9874,7 +9921,7 @@ function xu(e = {}) {
 	}, h = /* @__PURE__ */ Ot({}), g = (e) => h.value[e] !== !1, _ = (e) => {
 		h.value[e] = !g(e);
 	}, v = /* @__PURE__ */ Ot(!1), y = (e) => {
-		vu(e).then((e) => {
+		xu(e).then((e) => {
 			e && (v.value = !0, setTimeout(() => {
 				v.value = !1;
 			}, 1500));
@@ -9942,15 +9989,15 @@ function xu(e = {}) {
 		}
 	};
 }
-function Su() {
-	let e = Fn(bu);
+function Tu() {
+	let e = Fn(Cu);
 	if (!e) throw Error("useChatContext 必须在 provide(chatContextKey) 的组件子树内调用");
 	return e;
 }
 //#endregion
 //#region src/core/index.headless.ts
-function Cu(e) {
-	return su(e);
+function Eu(e) {
+	return uu(e);
 }
 //#endregion
-export { $s as CAPABILITIES, nc as CONTEXT_PRESETS, ps as CompressDecisionSchema, ss as DEFAULT_SYSTEM_PROMPT, Ha as HUMAN_CONFIRM_TOOL_NAME, ti as MIN_CONTEXT_WINDOW, lo as STOP_WORDS, sc as UNSAFE_KEYS, Ll as actionsToInspectInfo, Il as actionsToTools, Jr as agentError, ts as analyzeContext, _c as applyPatchToClone, vc as applyPatchToLive, qr as asAgentError, cs as buildDataPrompt, ls as buildSystemPrompt, bu as chatContextKey, gl as commitSetToBind, os as connectMcp, f as constructLlmFromConfig, d as constructOpenLlmSync, vu as copyText, ji as createAgent, Va as createApprovalMiddleware, xu as createChatContext, Cu as createChatSdk, Qa as createCheckpointManager, $a as createCheckpointMiddleware, Ts as createConflictManager, ns as createContextInspectorMiddleware, vl as createDataOps, _u as createHtmlSubagent, Ga as createHumanConfirmMiddleware, Wa as createHumanConfirmTool, Ks as createMemoryBackend, Pa as createMemoryMiddleware, u as createProxyLlm, pu as createRagSubagent, ba as createSandboxRunner, tc as createSdkEvents, eu as createSerialRunner, Xs as createSessionStore, Xl as createSkillStore, Mo as createSubagentMiddleware, bo as createSubagentTracker, Fo as createSubagentsMiddleware, Wl as createUsageHintsMiddleware, Io as createVerifyMiddleware, Tc as createVfs, Js as createWebStorageBackend, Ho as createWriteBackCheck, fc as deepClone, Bl as defineDataToolset, Sa as defineSkill, us as defineTool, dc as deleteByPath, ms as deriveTitle, Ui as describeSchemaNode, xi as detectGarbledToolCall, xc as diffObjects, wl as domToStructure, El as domTools, zl as domToolsStatic, fo as estimateMessageTokens, po as estimateRoundTokens, X as estimateTokens, m as extractReasoningDelta, ca as extractSchemaHint, rs as extractText, p as extractTextDelta, h as extractUsage, bl as fetchDocTools, Rl as fetchTools, hl as filterByToolMode, Wi as formatConstraints, Ur as formatZodIssues, Z as getByPath, Tl as getDomTool, kl as getEnvSummary, Fi as getSchemaAtPath, Mi as getSchemaTopKeys, ai as getTraceMetrics, $ as hashValue, mo as indexSummarize, Ml as inspectEnvTool, Nl as inspectTools, hs as isChatModel, fi as isContextLengthError, Ni as isPathAllowed, Rs as isQuotaError, cc as isUnsafePath, Wc as jpEval, Gr as jsonParseError, hc as limitDepth, pc as maybeParseValue, ii as offloadPassThroughChars, ri as offloadThresholdChars, ra as presets, Li as projectBySchema, Ii as projectBySchemaDeep, mc as projectFields, ho as recallRounds, Gi as renderSchemaHint, Ki as renderSchemaOverview, Ji as renderSchemaShallow, ec as resolveCapabilities, ic as resolveContextOptions, Qs as resolveDialogConfig, ws as resolveLlm, ni as resolveModelCaps, Zs as resolveStorage, bc as restoreInPlace, yc as restoreLive, Kr as routeError, xa as runHostScript, Jc as runSandboxedScript, lc as safeMerge, Ol as safeSerialize, Q as safeStringify, Kc as searchJson, Vl as selectBuiltinTools, uc as setByPath, go as shouldTriggerCompression, ia as systemPromptHelpers, uo as tokenize, Y as toolError, Pi as unwrapSchema, yu as useChat, Su as useChatContext, e as z, Wr as zodError };
+export { nc as CAPABILITIES, ac as CONTEXT_PRESETS, gs as CompressDecisionSchema, us as DEFAULT_SYSTEM_PROMPT, Ha as HUMAN_CONFIRM_TOOL_NAME, ti as MIN_CONTEXT_WINDOW, lo as STOP_WORDS, uc as UNSAFE_KEYS, Bl as actionsToInspectInfo, zl as actionsToTools, Jr as agentError, is as analyzeContext, bc as applyPatchToClone, xc as applyPatchToLive, qr as asAgentError, ds as buildDataPrompt, fs as buildSystemPrompt, Cu as chatContextKey, yl as commitSetToBind, ls as connectMcp, f as constructLlmFromConfig, d as constructOpenLlmSync, xu as copyText, ji as createAgent, Va as createApprovalMiddleware, wu as createChatContext, Eu as createChatSdk, Qa as createCheckpointManager, $a as createCheckpointMiddleware, Os as createConflictManager, as as createContextInspectorMiddleware, xl as createDataOps, bu as createHtmlSubagent, Ga as createHumanConfirmMiddleware, Wa as createHumanConfirmTool, Ys as createMemoryBackend, Pa as createMemoryMiddleware, u as createProxyLlm, gu as createRagSubagent, ba as createSandboxRunner, ic as createSdkEvents, ru as createSerialRunner, $s as createSessionStore, $l as createSkillStore, Fo as createSubagentMiddleware, bo as createSubagentTracker, Ro as createSubagentsMiddleware, ql as createUsageHintsMiddleware, zo as createVerifyMiddleware, Oc as createVfs, Zs as createWebStorageBackend, Go as createWriteBackCheck, hc as deepClone, Ul as defineDataToolset, Sa as defineSkill, ps as defineTool, mc as deleteByPath, _s as deriveTitle, Ui as describeSchemaNode, xi as detectGarbledToolCall, wc as diffObjects, Dl as domToStructure, kl as domTools, Hl as domToolsStatic, fo as estimateMessageTokens, po as estimateRoundTokens, X as estimateTokens, m as extractReasoningDelta, ca as extractSchemaHint, os as extractText, p as extractTextDelta, h as extractUsage, Cl as fetchDocTools, Vl as fetchTools, vl as filterByToolMode, Wi as formatConstraints, Ur as formatZodIssues, Z as getByPath, Ol as getDomTool, Ml as getEnvSummary, Fi as getSchemaAtPath, Mi as getSchemaTopKeys, ai as getTraceMetrics, $ as hashValue, mo as indexSummarize, Fl as inspectEnvTool, Il as inspectTools, vs as isChatModel, fi as isContextLengthError, Ni as isPathAllowed, Vs as isQuotaError, dc as isUnsafePath, qc as jpEval, Gr as jsonParseError, vc as limitDepth, gc as maybeParseValue, ii as offloadPassThroughChars, ri as offloadThresholdChars, ra as presets, Li as projectBySchema, Ii as projectBySchemaDeep, _c as projectFields, ho as recallRounds, Gi as renderSchemaHint, Ki as renderSchemaOverview, Ji as renderSchemaShallow, rc as resolveCapabilities, sc as resolveContextOptions, tc as resolveDialogConfig, Ds as resolveLlm, ni as resolveModelCaps, ec as resolveStorage, Cc as restoreInPlace, Sc as restoreLive, Kr as routeError, xa as runHostScript, Zc as runSandboxedScript, fc as safeMerge, jl as safeSerialize, Q as safeStringify, Yc as searchJson, Wl as selectBuiltinTools, pc as setByPath, go as shouldTriggerCompression, ia as systemPromptHelpers, uo as tokenize, Y as toolError, Pi as unwrapSchema, Su as useChat, Tu as useChatContext, e as z, Wr as zodError };