page-agent-sdk 2.4.1 → 2.5.1

package/dist/page-agent-sdk.js

@@ -14531,7 +14531,8 @@ function qg(e) {
 	return {
 		save(i) {
 			let a = Kg(e.messages), o = {};
-			for (let t of e.slotPaths) o[t] = Vg(Hg(window, t));
+			if (e.getData) o[""] = Vg(e.getData());
+			else for (let t of e.slotPaths ?? []) o[t] = Vg(Hg(window, t));
 			let s = {
 				id: r++,
 				label: i,
@@ -14559,8 +14560,13 @@ function qg(e) {
 		restore(n) {
 			let r = n == null ? t[t.length - 1] : t.find((e) => e.id === n);
 			if (!r) return !1;
-			e.messages.splice(0, e.messages.length, ...Vg(r.messages));
-			for (let [e, t] of Object.entries(r.windowVals)) Gg(e, Vg(t));
+			if (e.messages.splice(0, e.messages.length, ...Vg(r.messages)), e.getData) {
+				let t = r.windowVals[""];
+				if (t !== void 0) {
+					let n = e.getData();
+					typeof n == "object" && n && Wg(n, Vg(t));
+				}
+			} else for (let [e, t] of Object.entries(r.windowVals)) Gg(e, Vg(t));
 			let i = e.vfsStore.files;
 			for (let e of Object.keys(i)) delete i[e];
 			return Object.assign(i, Vg(r.vfs)), e.todosMw.reset(Vg(r.todos)), !0;
@@ -14604,7 +14610,7 @@ async function t_(e, t, n, r, i) {
 			temperature: t.temperature ?? t.llm.temperature,
 			maxTokens: t.maxTokens ?? t.llm.maxTokens
 		},
-		systemPrompt: e.role?.trim() || t.systemPrompt || "你是一个专注的子任务执行者。你只有只读工具(读 window / 抓文档),用它们完成给定任务,给出简洁结论,不要展开多余解释。",
+		systemPrompt: e.role?.trim() || t.systemPrompt || "你是一个专注的子任务执行者。你只有只读工具(读主数据 / 抓文档),用它们完成给定任务,给出简洁结论,不要展开多余解释。",
 		tools: c,
 		middleware: [...t.skills?.length ? [kg(t.skills)] : [], ...l],
 		maxToolRounds: t.maxToolRounds ?? $g,
@@ -14653,7 +14659,7 @@ function n_(e) {
 			schema: t.object({
 				prompt: t.string().describe("子任务描述(子 agent 的唯一输入)"),
 				role: t.string().optional().describe("子 agent 身份(如\"你是代码审查专家\")"),
-				tools: t.array(t.string()).optional().describe("子 agent 可用工具名白名单(默认只读 window + fetch)"),
+				tools: t.array(t.string()).optional().describe("子 agent 可用工具名白名单(默认只读主数据 + fetch)"),
 				model: t.string().optional().describe("覆盖模型(默认同主)")
 			})
 		}), n(async ({ tasks: t }) => (await $h(t, r, async (t, n) => {
@@ -14796,25 +14802,25 @@ function d_(e, t) {
 	return n;
 }
 function f_(e = {}) {
-	let t = e.window ?? globalThis.window, n = typeof e.schemas == "function" ? e.schemas : () => e.schemas ?? {};
+	let t = typeof e.root == "function" ? e.root : e.root === void 0 ? () => e.window ?? globalThis.window : () => e.root, n = typeof e.schemas == "function" ? e.schemas : () => e.schemas ?? {};
 	return async ({ messages: e }) => {
 		let r = l_(e);
 		if (!r.length) return { ok: !0 };
-		let i = u_(e), a = n()[""], o = [];
-		for (let { path: e, op: n, callId: s } of r) {
-			let r = s ? i.get(s) : void 0;
+		let i = u_(e), a = n()[""], o = t(), s = [];
+		for (let { path: e, op: t, callId: n } of r) {
+			let r = n ? i.get(n) : void 0;
 			if (r && c_.test(r)) continue;
-			let c = d_(t, e);
-			if (n === "delete_data") c !== void 0 && o.push(`${e} 删除后读回仍有值,疑似未生效`);
-			else if (c == null) o.push(`写入 ${e} 后读回为空,疑似未生效`);
+			let c = d_(o, e);
+			if (t === "delete_data") c !== void 0 && s.push(`${e} 删除后读回仍有值,疑似未生效`);
+			else if (c == null) s.push(`写入 ${e} 后读回为空,疑似未生效`);
 			else if (a) {
-				let n = a.safeParse(t);
-				n.success || o.push(`${e} 读回值不符合 schema:${n.error.issues?.[0]?.message ?? "校验失败"}`);
+				let t = a.safeParse(o);
+				t.success || s.push(`${e} 读回值不符合 schema:${t.error.issues?.[0]?.message ?? "校验失败"}`);
 			}
 		}
-		return o.length ? {
+		return s.length ? {
 			ok: !1,
-			feedback: o.join(";\n")
+			feedback: s.join(";\n")
 		} : { ok: !0 };
 	};
 }
@@ -15017,7 +15023,18 @@ function P_(e = {}) {
 		...e
 	};
 	async function n(e) {
-		let n = C_(e), r = e.length, i = (t) => ({
+		let n = C_(e), r = e.length, i = "";
+		if (n.length) {
+			let t = n[0].startIdx;
+			for (let n = 0; n < t; n++) {
+				let t = e[n];
+				if (t.role === "system" && typeof t.content == "string" && t.content.startsWith("【更早对话摘要")) {
+					i = t.content.replace(/^【[^】]*】\n?/, "");
+					break;
+				}
+			}
+		}
+		let a = (t) => ({
 			messages: e,
 			stats: {
 				triggered: !1,
@@ -15028,82 +15045,66 @@ function P_(e = {}) {
 				compressedMessages: r,
 				strategy: t
 			}
-		}), a, o, s;
+		}), o, s, c;
 		if (t.contextWindow && t.contextWindow > 0) {
-			if (n.reduce((e, t) => e + j_(t), 0) <= t.contextWindow * (t.summaryThresholdRatio ?? .5)) return i("none");
-			let e = t.contextWindow * (t.windowRatio ?? .4), r = 0, c = 0;
+			if (n.reduce((e, t) => e + j_(t), 0) <= t.contextWindow * (t.summaryThresholdRatio ?? .5)) return a("none");
+			let e = t.contextWindow * (t.windowRatio ?? .4), r = 0, i = 0;
 			for (let t = n.length - 1; t >= 0; t--) if (r += j_(n[t]), r >= e) {
-				c = t + 1;
+				i = t + 1;
 				break;
 			}
-			if (c > n.length - 1 && (c = n.length - 1), c < 0 && (c = 0), a = n.slice(c), o = n.slice(0, c), !o.length) return i("none");
-			s = "token-window+";
+			if (i > n.length - 1 && (i = n.length - 1), i < 0 && (i = 0), o = n.slice(i), s = n.slice(0, i), !s.length) return a("none");
+			c = "token-window+";
 		} else {
-			if (n.length <= t.summaryThresholdRounds) return i("none");
+			if (n.length <= t.summaryThresholdRounds) return a("none");
 			let e = Math.min(t.windowRounds, n.length);
-			a = n.slice(n.length - e), o = n.slice(0, n.length - e), s = "window+";
+			o = n.slice(n.length - e), s = n.slice(0, n.length - e), c = "window+";
 		}
-		let c = [...e].reverse().find((e) => e.role === "user")?.content || "", l = t.preserveLastToolResults?.length ? new Set(t.preserveLastToolResults) : void 0, u, d;
+		let l = [...e].reverse().find((e) => e.role === "user")?.content || "", u = t.preserveLastToolResults?.length ? new Set(t.preserveLastToolResults) : void 0, d, f;
 		if (t.enableLLMSummary && t.llmInvoke) try {
-			u = await t.llmInvoke(M_(o, l)), d = s + "llm_summary";
+			d = await t.llmInvoke(M_(s, u)), f = c + "llm_summary";
 		} catch {
-			u = M_(o, l), d = s + "index_summary(llm_fallback)";
-		}
-		else u = M_(o, l), d = s + "index_summary";
-		let f = t.enableRecall ? N_(o, c, t.recallTopK) : [], p = f.length ? f.map((e) => `- 第${e.round}轮：${w_(e.userMsg.content, 60)} → ${e.assistantMsgs[0] ? w_(e.assistantMsgs[0].content, 80) : ""}`).join("\n") : "", m = [`【对话历史摘要】以下是之前 ${o.length} 轮对话的要点（最新 ${a.length} 轮已完整保留）：`, u];
-		if (p && m.push("\n【与当前问题可能相关的早期对话】", p), t.getRegisteredSlots) try {
-			let e = t.getRegisteredSlots();
+			d = M_(s, u), f = c + "index_summary(llm_fallback)";
+		}
+		else d = M_(s, u), f = c + "index_summary";
+		let p = t.enableRecall ? N_(s, l, t.recallTopK) : [], m = p.length ? p.map((e) => `- 第${e.round}轮：${w_(e.userMsg.content, 60)} → ${e.assistantMsgs[0] ? w_(e.assistantMsgs[0].content, 80) : ""}`).join("\n") : "", h = i ? `${d}\n【更早累积摘要】\n${i}` : d, g = [`【对话历史摘要】以下是之前 ${s.length} 轮对话的要点（最新 ${o.length} 轮已完整保留）：`, h];
+		m && g.push("\n【与当前问题可能相关的早期对话】", m);
+		let _ = t.getRegisteredData ?? t.getRegisteredSlots;
+		if (_) try {
+			let e = _();
 			if (e.length) {
 				let t = e.map((e) => `- ${e.path ? e.path + ": " : ""}${e.description}`).join("\n");
-				m.push("\n【当前可操作数据(动态增删后的最新状态,操作前以 describe_data / read 为准)】", t);
+				g.push("\n【当前可操作数据(动态增删后的最新状态,操作前以 describe_data / read 为准)】", t);
 			}
 		} catch {}
-		let h = {
+		let v = {
 			role: "system",
-			content: m.join("\n"),
+			content: g.join("\n"),
 			timestamp: Date.now()
-		}, g = [];
-		for (let e of a) g.push(e.userMsg), g.push(...e.assistantMsgs);
-		let _ = [h, ...g];
+		}, y = [];
+		for (let e of o) y.push(e.userMsg), y.push(...e.assistantMsgs);
+		let b = [v, ...y];
 		return {
-			messages: _,
+			messages: b,
 			stats: {
 				triggered: !0,
 				roundsTotal: n.length,
-				roundsSummarized: o.length,
-				roundsRecalled: f.length,
+				roundsSummarized: s.length,
+				roundsRecalled: p.length,
 				originalMessages: r,
-				compressedMessages: _.length,
-				strategy: d
+				compressedMessages: b.length,
+				strategy: f
 			}
 		};
 	}
 	return {
 		compress: n,
-		config: t,
-		trimToolResults: F_
+		config: t
 	};
 }
-function F_(e, t) {
-	let n = [];
-	if (e.forEach((e, t) => {
-		e instanceof o && n.push(t);
-	}), n.length <= 2) return e;
-	let r = new Set(n.slice(-2));
-	return e.map((e, n) => {
-		if (!(e instanceof o) || r.has(n)) return e;
-		let i = typeof e.content == "string" ? e.content : JSON.stringify(e.content);
-		if (i.length <= t) return e;
-		let a = i.slice(0, t) + `\n…[已截断，原长度 ${i.length}]`;
-		return new o({
-			tool_call_id: e.tool_call_id || e.lc_id || "trimmed",
-			content: a
-		});
-	});
-}
 //#endregion
 //#region src/core/harness/summarization.ts
-function I_(e = {}) {
+function F_(e = {}) {
 	let t = P_(e);
 	return {
 		name: "summarization",
@@ -15118,7 +15119,7 @@ function I_(e = {}) {
 }
 //#endregion
 //#region src/core/presets.ts
-var L_ = {
+var I_ = {
 	pageBuilder: { systemPrompt: "你是页面构建助手。按用户意图读写主数据(经 data 声明 + schema 校验),改完页面实时更新。" },
 	researcher: {
 		systemPrompt: "你是调研助手。多路调研用 spawn_agents 并行委派子 agent(各负责一个方向);单份资料用 fetch_document 抓取;最后结构化汇总,给出结论与依据。",
@@ -15132,15 +15133,15 @@ var L_ = {
 		memory: !1,
 		subagent: !1
 	} }
-}, R_ = { reliableWriteRules: [
+}, L_ = { reliableWriteRules: [
 	"【可靠写入规则】",
-	"1. 改任何属性前,先用 read({ path }) 读其当前真实值,基于真实值改,不要凭记忆;",
-	"2. 若不确定可操作哪些属性,先 read() 不传 path 查看当前注册项(动态组件场景下注册表会增删,以工具返回为准,勿凭旧记忆);",
-	"3. 不确定某属性字段结构时,read({ path }) 返回含格式说明,字段以返回为准;",
+	"1. 改任何字段前,先用 read({ jsonPath }) 读其当前真实值,基于真实值改,不要凭记忆;",
+	"2. 若不确定可操作哪些字段,先 read() 不传 jsonPath 查看主数据说明 + schema 声明字段(集成方可经 sdk.setData 运行时替换 schema,以工具返回为准,勿凭旧记忆);",
+	"3. 不确定某字段结构时,read({ jsonPath }) 返回含格式说明,字段以返回为准;",
 	"4. 写入若被 schema 校验拒绝(返回结构化错误含字段名与期望类型),按错误修正后重试,不要放弃;",
-	"5. 优先用 write 的 patch 增量改(只发改动,如 write({ path, value, patch:{ op, jsonPath } })),避免整体重传大 JSON 被截断。"
+	"5. 优先用 write 的 patch 增量改(只发改动,如 write({ value, patch:{ op, jsonPath } })),避免整体重传大 JSON 被截断。"
 ].join("\n") };
-function z_(e) {
+function R_(e) {
 	if (!e) return "";
 	try {
 		let t = e.shape ?? (e._def?.shape ? typeof e._def.shape == "function" ? e._def.shape() : e._def.shape : null);
@@ -15153,7 +15154,7 @@ function z_(e) {
 }
 //#endregion
 //#region src/core/sdk/contextPreset.ts
-var B_ = {
+var z_ = {
 	auto: {
 		summaryThresholdRatio: .5,
 		windowRatio: .4,
@@ -15175,8 +15176,8 @@ var B_ = {
 		enableLLMSummary: !0
 	}
 };
-function V_(e, t) {
-	let n = B_[e.contextPreset ?? "auto"] ?? {}, r = e.contextOptions === !1 ? {} : e.contextOptions ?? {};
+function B_(e, t) {
+	let n = z_[e.contextPreset ?? "auto"] ?? {}, r = e.contextOptions === !1 ? {} : e.contextOptions ?? {};
 	return {
 		...n,
 		...r,
@@ -15193,7 +15194,7 @@ function $(e) {
 	};
 	return e.path !== void 0 && (t.path = e.path), e.hint && (t.hint = e.hint), e.details !== void 0 && (t.details = e.details), `ERROR: ${JSON.stringify(t)}`;
 }
-function H_(e) {
+function V_(e) {
 	return e.slice(0, 10).map((e) => {
 		let t = e, n = {
 			path: (Array.isArray(t.path) ? t.path.join(".") : String(t.path ?? "")) || "(root)",
@@ -15202,16 +15203,16 @@ function H_(e) {
 		return t.expected !== void 0 && (n.expected = t.expected), t.received !== void 0 && (n.received = t.received), t.code !== void 0 && (n.code = t.code), n;
 	});
 }
-function U_(e, t) {
+function H_(e, t) {
 	return $({
 		code: "SCHEMA_INVALID",
 		path: e,
 		message: `值不符合 "${e}" 的 schema(${t.length} 处问题)`,
 		hint: `用 read({jsonPath:"${e}"}) 查看当前值,按 describe_data() 查看主数据 schema,修正后重试;改大对象优先用 write 的 patch 增量(只发改动部分)`,
-		details: H_(t)
+		details: V_(t)
 	});
 }
-function W_(e, t, n) {
+function U_(e, t, n) {
 	let r = n?.message || String(n);
 	return $({
 		code: "JSON_PARSE",
@@ -15220,18 +15221,18 @@ function W_(e, t, n) {
 		hint: `检查引号/逗号/括号是否闭合;字符串值需双引号包裹(如 '"dark"' 表示字符串 dark,数字直接写如 5);预览前 80 字符:${t.slice(0, 80)}`
 	});
 }
-var G_ = .9;
-function K_(e, t = {}) {
+var W_ = .9;
+function G_(e, t = {}) {
 	let n = Object.create(null);
-	if (e) for (let [t, r] of Object.entries(e)) n[Y_(t)] = {
+	if (e) for (let [t, r] of Object.entries(e)) n[J_(t)] = {
 		content: r,
-		updatedAt: Z_()
+		updatedAt: X_()
 	};
 	let { persist: r } = t, i = t.maxBytes ?? 4194304;
 	function a() {
-		if (J_(n) <= i) return;
-		let e = i * G_, t = Object.entries(n).sort((e, t) => e[1].updatedAt - t[1].updatedAt);
-		for (let [r] of t) if (delete n[r], J_(n) <= e) break;
+		if (q_(n) <= i) return;
+		let e = i * W_, t = Object.entries(n).sort((e, t) => e[1].updatedAt - t[1].updatedAt);
+		for (let [r] of t) if (delete n[r], q_(n) <= e) break;
 	}
 	let o = null;
 	function s() {
@@ -15256,7 +15257,7 @@ function K_(e, t = {}) {
 		}
 	}) };
 	return r && (l.hydrate = (e) => {
-		for (let [t, r] of Object.entries(e)) n[Y_(t)] = r;
+		for (let [t, r] of Object.entries(e)) n[J_(t)] = r;
 		a();
 	}, l.flush = () => {
 		o &&= (clearTimeout(o), null), s();
@@ -15265,17 +15266,17 @@ function K_(e, t = {}) {
 		c();
 	}), l;
 }
-var q_ = null;
-function J_(e) {
-	q_ ||= new TextEncoder();
+var K_ = null;
+function q_(e) {
+	K_ ||= new TextEncoder();
 	let t = 0;
-	for (let n of Object.values(e)) t += q_.encode(n.content).length;
+	for (let n of Object.values(e)) t += K_.encode(n.content).length;
 	return t;
 }
-function Y_(e) {
+function J_(e) {
 	return e.replace(/^\/+/, "").replace(/\/+/g, "/");
 }
-function X_(e) {
+function Y_(e) {
 	let t = "";
 	for (let n = 0; n < e.length; n++) {
 		let r = e[n];
@@ -15283,13 +15284,13 @@ function X_(e) {
 	}
 	return RegExp("^" + t + "$");
 }
-function Z_() {
+function X_() {
 	return Date.now();
 }
-function Q_(e) {
+function Z_(e) {
 	return [
 		n(async ({ path: t, offset: n, limit: r }) => {
-			let i = e.files[Y_(t)];
+			let i = e.files[J_(t)];
 			if (!i) return $({
 				code: "NOT_FOUND",
 				path: t,
@@ -15307,9 +15308,9 @@ function Q_(e) {
 				limit: t.number().int().min(1).default(2e3).describe("读取行数")
 			})
 		}),
-		n(async ({ path: t, content: n }) => (e.files[Y_(t)] = {
+		n(async ({ path: t, content: n }) => (e.files[J_(t)] = {
 			content: n,
-			updatedAt: Z_()
+			updatedAt: X_()
 		}, `已写入 ${t}(${n.length} 字符)`), {
 			name: "vfs_write",
 			description: "写入/覆盖虚拟工作区文件,作为中间工作记忆。",
@@ -15319,7 +15320,7 @@ function Q_(e) {
 			})
 		}),
 		n(async ({ path: t, oldString: n, newString: r }) => {
-			let i = Y_(t), a = e.files[i];
+			let i = J_(t), a = e.files[i];
 			if (!a) return $({
 				code: "NOT_FOUND",
 				path: t,
@@ -15349,7 +15350,7 @@ function Q_(e) {
 			}
 			return e.files[i] = {
 				content: a.content.replace(n, r),
-				updatedAt: Z_()
+				updatedAt: X_()
 			}, `已替换 ${t} 中 1 处。`;
 		}, {
 			name: "vfs_edit",
@@ -15371,7 +15372,7 @@ function Q_(e) {
 		n(async ({ pattern: t }) => {
 			let n;
 			try {
-				n = X_(t);
+				n = Y_(t);
 			} catch (e) {
 				return $({
 					code: "GLOB_INVALID",
@@ -15400,7 +15401,7 @@ function Q_(e) {
 					details: { pattern: t }
 				});
 			}
-			let i = n ? [Y_(n)] : Object.keys(e.files), a = [];
+			let i = n ? [J_(n)] : Object.keys(e.files), a = [];
 			for (let t of i) {
 				let n = e.files[t];
 				n && n.content.split("\n").forEach((e, n) => {
@@ -15418,17 +15419,17 @@ function Q_(e) {
 		})
 	];
 }
-function $_(e) {
+function Q_(e) {
 	return {
 		name: "vfs",
-		tools: Q_(e),
+		tools: Z_(e),
 		beforeAgent: () => ({ files: e.files })
 	};
 }
 //#endregion
 //#region src/core/tools/dataSlotQuery.ts
-var ev = /[\w$-]/;
-function tv(e) {
+var $_ = /[\w$-]/;
+function ev(e) {
 	let t = [], n = e.trim(), r = +(n[0] === "$");
 	for (; r < n.length;) {
 		let e = n[r];
@@ -15439,7 +15440,7 @@ function tv(e) {
 					continue;
 				}
 				let e = "";
-				for (; r < n.length && ev.test(n[r]);) e += n[r++];
+				for (; r < n.length && $_.test(n[r]);) e += n[r++];
 				if (!e) throw Error("JSONPath: .. 后缺属性名");
 				t.push({
 					type: "descendKey",
@@ -15452,7 +15453,7 @@ function tv(e) {
 				continue;
 			}
 			let e = "";
-			for (; r < n.length && ev.test(n[r]);) e += n[r++];
+			for (; r < n.length && $_.test(n[r]);) e += n[r++];
 			if (!e) throw Error("JSONPath: . 后缺属性名");
 			t.push({
 				type: "key",
@@ -15508,7 +15509,7 @@ function tv(e) {
 	}
 	return t;
 }
-function nv(e) {
+function tv(e) {
 	let t = [], n = 0, r = e.trim();
 	for (; n < r.length;) {
 		let e = r[n];
@@ -15553,7 +15554,7 @@ function nv(e) {
 	}
 	return t;
 }
-var rv = class {
+var nv = class {
 	toks;
 	item;
 	pos = 0;
@@ -15589,12 +15590,12 @@ var rv = class {
 			return this.next(), e;
 		}
 		let e = this.operand(), t = this.peek();
-		return t === "==" || t === "!=" || t === "<" || t === "<=" || t === ">" || t === ">=" ? (this.next(), ov(t, e, this.operand())) : iv(e);
+		return t === "==" || t === "!=" || t === "<" || t === "<=" || t === ">" || t === ">=" ? (this.next(), av(t, e, this.operand())) : rv(e);
 	}
 	operand() {
 		let e = this.next();
 		if (e === void 0) throw Error("过滤表达式:缺操作数");
-		if (e.startsWith("@")) return av(e, this.item);
+		if (e.startsWith("@")) return iv(e, this.item);
 		if (e[0] === "'" || e[0] === "\"") return e.slice(1, -1);
 		if (e === "true") return !0;
 		if (e === "false") return !1;
@@ -15604,10 +15605,10 @@ var rv = class {
 		throw Error(`过滤表达式:未知操作数 '${e}'`);
 	}
 };
-function iv(e) {
+function rv(e) {
 	return !!e && e !== 0 && e !== "" && e !== null;
 }
-function av(e, t) {
+function iv(e, t) {
 	let n = e.split(".").filter((e) => e && e !== "@"), r = t;
 	for (let e of n) {
 		if (typeof r != "object" || !r) return;
@@ -15615,7 +15616,7 @@ function av(e, t) {
 	}
 	return r;
 }
-function ov(e, t, n) {
+function av(e, t, n) {
 	switch (e) {
 		case "==": return t === n;
 		case "!=": return t !== n;
@@ -15626,47 +15627,47 @@ function ov(e, t, n) {
 		default: return !1;
 	}
 }
-function sv(e, t) {
-	return new rv(nv(e), t).parse();
+function ov(e, t) {
+	return new nv(tv(e), t).parse();
 }
-function cv(e, t) {
+function sv(e, t) {
 	return e ? `${e}.${t}` : String(t);
 }
-function lv(e, t) {
+function cv(e, t) {
 	let n = [{
 		path: "",
 		value: e
 	}];
-	for (let e of tv(t)) {
+	for (let e of ev(t)) {
 		let t = [];
 		if (e.type === "key") for (let r of n) r.value != null && typeof r.value == "object" && e.key in r.value && t.push({
-			path: cv(r.path, e.key),
+			path: sv(r.path, e.key),
 			value: r.value[e.key]
 		});
 		else if (e.type === "index") {
 			for (let r of n) if (Array.isArray(r.value)) {
 				let n = r.value[e.index];
 				e.index >= 0 && e.index < r.value.length && t.push({
-					path: cv(r.path, e.index),
+					path: sv(r.path, e.index),
 					value: n,
 					index: e.index
 				});
 			}
 		} else if (e.type === "wildcard") {
 			for (let e of n) if (Array.isArray(e.value)) e.value.forEach((n, r) => t.push({
-				path: cv(e.path, r),
+				path: sv(e.path, r),
 				value: n,
 				index: r
 			}));
 			else if (e.value != null && typeof e.value == "object") for (let n of Object.keys(e.value)) t.push({
-				path: cv(e.path, n),
+				path: sv(e.path, n),
 				value: e.value[n]
 			});
 		} else if (e.type === "descendKey") {
 			let r = e.key, i = (e) => {
 				if (!(e.value == null || typeof e.value != "object")) for (let n of Object.keys(e.value)) {
 					let a = {
-						path: cv(e.path, n),
+						path: sv(e.path, n),
 						value: e.value[n]
 					};
 					n === r && t.push(a), i(a);
@@ -15677,7 +15678,7 @@ function lv(e, t) {
 			let e = (n) => {
 				if (!(n.value == null || typeof n.value != "object")) for (let r of Object.keys(n.value)) {
 					let i = {
-						path: cv(n.path, r),
+						path: sv(n.path, r),
 						value: n.value[r]
 					};
 					t.push(i), e(i);
@@ -15686,16 +15687,16 @@ function lv(e, t) {
 			for (let t of n) e(t);
 		} else if (e.type === "filter") {
 			for (let r of n) if (Array.isArray(r.value)) r.value.forEach((n, i) => {
-				sv(e.filter, n) && t.push({
-					path: cv(r.path, i),
+				ov(e.filter, n) && t.push({
+					path: sv(r.path, i),
 					value: n,
 					index: i
 				});
 			});
 			else if (r.value != null && typeof r.value == "object") for (let n of Object.keys(r.value)) {
 				let i = r.value[n];
-				sv(e.filter, i) && t.push({
-					path: cv(r.path, n),
+				ov(e.filter, i) && t.push({
+					path: sv(r.path, n),
 					value: i
 				});
 			}
@@ -15704,7 +15705,7 @@ function lv(e, t) {
 	}
 	return n;
 }
-function uv(e, t) {
+function lv(e, t) {
 	let n = e.length, r = t.length;
 	if (!n) return r;
 	if (!r) return n;
@@ -15720,7 +15721,7 @@ function uv(e, t) {
 	}
 	return i[r];
 }
-function dv(e, t, n = {}) {
+function uv(e, t, n = {}) {
 	let r = n.mode || "substring", i = n.limit ?? 50, a = n.matchKey !== !1, o = [], s = null;
 	if (r === "regex") try {
 		s = new RegExp(t, "i");
@@ -15730,11 +15731,11 @@ function dv(e, t, n = {}) {
 	let c = (e, l, u) => {
 		if (o.length >= i || e == null) return;
 		if (typeof e == "object") {
-			if (Array.isArray(e)) e.forEach((e, t) => c(e, cv(l, t), String(t)));
-			else for (let t of Object.keys(e)) c(e[t], cv(l, t), t);
+			if (Array.isArray(e)) e.forEach((e, t) => c(e, sv(l, t), String(t)));
+			else for (let t of Object.keys(e)) c(e[t], sv(l, t), t);
 			return;
 		}
-		let d = String(e), f = fv(d, t, r, n.fuzzyThreshold ?? 2, s);
+		let d = String(e), f = dv(d, t, r, n.fuzzyThreshold ?? 2, s);
 		if (f) {
 			o.push({
 				path: l,
@@ -15745,7 +15746,7 @@ function dv(e, t, n = {}) {
 			return;
 		}
 		if (a && u) {
-			let e = fv(u, t, r, n.fuzzyThreshold ?? 2, s);
+			let e = dv(u, t, r, n.fuzzyThreshold ?? 2, s);
 			e && o.push({
 				path: l,
 				key: u,
@@ -15756,18 +15757,18 @@ function dv(e, t, n = {}) {
 	};
 	return c(e, ""), o;
 }
-function fv(e, t, n, r, i) {
+function dv(e, t, n, r, i) {
 	let a = e.toLowerCase(), o = t.toLowerCase();
 	if (n === "substring") return a.includes(o) ? 1 : null;
 	if (n === "regex") return i && i.test(e) ? 1 : null;
 	if (n === "fuzzy") {
 		if (a.includes(o)) return 2;
-		let e = uv(a, o);
+		let e = lv(a, o);
 		return e <= r ? r - e + 1 : null;
 	}
 	return null;
 }
-var pv = [
+var fv = [
 	"self.fetch = () => { throw new Error('fetch 已被沙箱禁用') }",
 	"self.XMLHttpRequest = function(){ throw new Error('XMLHttpRequest 已被沙箱禁用') }",
 	"self.importScripts = () => { throw new Error('importScripts 已被沙箱禁用') }",
@@ -15780,7 +15781,7 @@ var pv = [
 	"try { self.BroadcastChannel = undefined } catch {}",
 	"if (self.navigator && self.navigator.sendBeacon) self.navigator.sendBeacon = () => { throw new Error('sendBeacon 已被沙箱禁用') }"
 ].join("\n");
-function mv(e, t, n = 3e3) {
+function pv(e, t, n = 3e3) {
 	return new Promise((r) => {
 		let i = Date.now(), a = !1, o = (e) => {
 			if (!a) {
@@ -15793,7 +15794,7 @@ function mv(e, t, n = 3e3) {
 					elapsedMs: Date.now() - i
 				});
 			}
-		}, s = pv + "\nself.onmessage = async (e) => {\n  try {\n    const fn = new Function(\"data\", e.data.script);\n    let result = fn(e.data.data);\n    if (result && typeof result.then === \"function\") result = await result;\n    self.postMessage({ ok: true, result });\n  } catch (err) {\n    self.postMessage({ ok: false, error: String((err && err.message) || err) });\n  }\n};", c, l;
+		}, s = fv + "\nself.onmessage = async (e) => {\n  try {\n    const fn = new Function(\"data\", e.data.script);\n    let result = fn(e.data.data);\n    if (result && typeof result.then === \"function\") result = await result;\n    self.postMessage({ ok: true, result });\n  } catch (err) {\n    self.postMessage({ ok: false, error: String((err && err.message) || err) });\n  }\n};", c, l;
 		try {
 			let e = new Blob([s], { type: "application/javascript" });
 			c = URL.createObjectURL(e), l = new Worker(c);
@@ -15828,20 +15829,20 @@ function mv(e, t, n = 3e3) {
 }
 //#endregion
 //#region src/core/tools/dataOps.ts
-var hv = /* @__PURE__ */ new Set([
+var mv = /* @__PURE__ */ new Set([
 	"__proto__",
 	"constructor",
 	"prototype"
 ]);
-function gv(e) {
-	return e.split(".").some((e) => hv.has(e));
+function hv(e) {
+	return e.split(".").some((e) => mv.has(e));
 }
-function _v(e, t) {
-	if (!(!t || typeof t != "object" || Array.isArray(t))) for (let n of Object.keys(t)) hv.has(n) || (e[n] = t[n]);
+function gv(e, t) {
+	if (!(!t || typeof t != "object" || Array.isArray(t))) for (let n of Object.keys(t)) mv.has(n) || (e[n] = t[n]);
 }
-function vv(e, t) {
+function _v(e, t) {
 	if (!t) return e;
-	if (gv(t)) return;
+	if (hv(t)) return;
 	let n = t.split("."), r = e;
 	for (let e of n) {
 		if (r == null) return;
@@ -15849,8 +15850,8 @@ function vv(e, t) {
 	}
 	return r;
 }
-function yv(e, t, n) {
-	if (!t || gv(t)) return;
+function vv(e, t, n) {
+	if (!t || hv(t)) return;
 	let r = t.split("."), i = e;
 	for (let e = 0; e < r.length - 1; e++) {
 		let t = r[e];
@@ -15858,8 +15859,8 @@ function yv(e, t, n) {
 	}
 	i[r[r.length - 1]] = n;
 }
-function bv(e, t) {
-	if (!t || gv(t)) return !1;
+function yv(e, t) {
+	if (!t || hv(t)) return !1;
 	let n = t.split("."), r = e;
 	for (let e = 0; e < n.length - 1; e++) {
 		if (r == null) return !1;
@@ -15868,10 +15869,37 @@ function bv(e, t) {
 	let i = n[n.length - 1];
 	return r == null || !(i in r) ? !1 : (delete r[i], !0);
 }
-function xv(e) {
+function bv(e) {
 	return e === void 0 ? void 0 : JSON.parse(JSON.stringify(e));
 }
-function Sv(e, t = Infinity) {
+function xv(e) {
+	if (typeof e != "string") return { parsed: e };
+	let t = e.trim();
+	if (!t) return { parsed: e };
+	let n = t[0] === "{" || t[0] === "[";
+	try {
+		return { parsed: JSON.parse(t) };
+	} catch (t) {
+		return n ? { parseError: t } : { parsed: e };
+	}
+}
+function Sv(e, t) {
+	if (typeof e != "object" || !e) return e;
+	let n = new Set(t);
+	if (Array.isArray(e)) return e.map((e) => Sv(e, t));
+	let r = {};
+	for (let t of Object.keys(e)) n.has(t) && (r[t] = e[t]);
+	return r;
+}
+function Cv(e, t) {
+	if (typeof e != "object" || !e) return e;
+	if (t <= 0) return Array.isArray(e) ? `[...${e.length}]` : "{...}";
+	if (Array.isArray(e)) return e.map((e) => Cv(e, t - 1));
+	let n = {};
+	for (let r of Object.keys(e)) n[r] = Cv(e[r], t - 1);
+	return n;
+}
+function wv(e, t = Infinity) {
 	let n = /* @__PURE__ */ new WeakSet(), r;
 	try {
 		r = JSON.stringify(e, (e, t) => {
@@ -15890,34 +15918,62 @@ function Sv(e, t = Infinity) {
 	}
 	return r.length > t && (r = r.slice(0, t) + `\n…[已截断,原长度 ${r.length}]`), r;
 }
-function Cv(e) {
-	let t = Sv(e), n = 5381;
+function Tv(e) {
+	let t = wv(e), n = 5381;
 	for (let e = 0; e < t.length; e++) n = (n << 5) + n + t.charCodeAt(e) >>> 0;
 	return n.toString(36);
 }
-function wv(e, t, n, r) {
-	if (t === "set") return n ? (yv(e, n, r), null) : "set 操作需要 jsonPath(整体替换请用 set_data)";
-	if (t === "remove") return n ? (bv(e, n), null) : "remove 操作需要 jsonPath";
+function Ev(e) {
+	let t = e;
+	for (let e = 0; e < 5 && t && t._def; e++) {
+		if (t._def.innerType) {
+			t = t._def.innerType;
+			continue;
+		}
+		break;
+	}
+	if (!t || !t.shape || typeof t.shape != "object") return null;
+	try {
+		let e = typeof t.shape == "function" ? t.shape() : t.shape;
+		return Object.keys(e);
+	} catch {
+		return null;
+	}
+}
+function Dv(e, t) {
+	if (!t || !e) return !0;
+	let n = e.split(".")[0];
+	return t.includes(n);
+}
+function Ov(e, t) {
+	if (!t || typeof e != "object" || !e || Array.isArray(e)) return e;
+	let n = new Set(t), r = {};
+	for (let t of Object.keys(e)) n.has(t) && (r[t] = e[t]);
+	return r;
+}
+function kv(e, t, n, r) {
+	if (t === "set") return n ? (vv(e, n, r), null) : "set 操作需要 jsonPath(整体替换请用 set_data)";
+	if (t === "remove") return n ? (yv(e, n), null) : "remove 操作需要 jsonPath";
 	if (t === "merge") {
-		let t = n ? vv(e, n) : e;
-		return typeof t != "object" || !t || Array.isArray(t) ? `merge 目标${n ? `(${n})` : "(根)"}不是对象` : (_v(t, r), null);
+		let t = n ? _v(e, n) : e;
+		return typeof t != "object" || !t || Array.isArray(t) ? `merge 目标${n ? `(${n})` : "(根)"}不是对象` : (gv(t, r), null);
 	}
-	let i = n ? vv(e, n) : e;
+	let i = n ? _v(e, n) : e;
 	return Array.isArray(i) ? (Array.isArray(r) ? i.push(...r) : i.push(r), null) : `append 目标${n ? `(${n})` : "(根)"}不是数组`;
 }
-function Tv(e, t, n, r) {
-	if (t === "set") yv(e, n, r);
-	else if (t === "remove") bv(e, n);
-	else if (t === "merge") _v(n ? vv(e, n) : e, r);
+function Av(e, t, n, r) {
+	if (t === "set") vv(e, n, r);
+	else if (t === "remove") yv(e, n);
+	else if (t === "merge") gv(n ? _v(e, n) : e, r);
 	else {
-		let t = n ? vv(e, n) : e;
+		let t = n ? _v(e, n) : e;
 		Array.isArray(r) ? t.push(...r) : t.push(r);
 	}
 }
-function Ev(e, t) {
-	typeof e == "object" && e && Dv(e, t);
+function jv(e, t) {
+	typeof e == "object" && e && Mv(e, t);
 }
-function Dv(e, t) {
+function Mv(e, t) {
 	if (Array.isArray(e)) {
 		e.length = 0, Array.isArray(t) && e.push(...t);
 		return;
@@ -15926,51 +15982,51 @@ function Dv(e, t) {
 	for (let t of Object.keys(e)) t in n || delete e[t];
 	for (let t of Object.keys(n)) e[t] = n[t];
 }
-var Ov = /* @__PURE__ */ new Set([
+var Nv = /* @__PURE__ */ new Set([
 	"describe_data",
 	"get_data",
 	"set_data",
 	"edit_data",
 	"delete_data"
-]), kv = /* @__PURE__ */ new Set(["read", "write"]);
-function Av(e, t = "simple") {
-	return t === "advanced" ? e : t === "minimal" ? e.filter((e) => kv.has(e.name)) : e.filter((e) => !Ov.has(e.name));
+]), Pv = /* @__PURE__ */ new Set(["read", "write"]);
+function Fv(e, t = "simple") {
+	return t === "advanced" ? e : t === "minimal" ? e.filter((e) => Pv.has(e.name)) : e.filter((e) => !Nv.has(e.name));
 }
-function jv(e, r = {}) {
-	let i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s = [], c = r.maxSnapshots ?? 20, l, u = r.autoLock !== !1, d = {
+function Iv(e, r = {}) {
+	let i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s = Ev(i), c = [], l = r.maxSnapshots ?? 20, u, d = r.autoLock !== !1, f = {
 		get: () => ({
 			schema: i,
 			bind: a,
 			description: o
 		}),
 		set: (e) => {
-			i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s.length = 0, l = void 0;
+			i = e.schema, a = e.bind, o = e.description ?? "主数据对象", s = Ev(i), c.length = 0, u = void 0;
 		},
 		update: (e) => {
-			a = e, s.length = 0, l = void 0;
+			a = e, c.length = 0, u = void 0;
 		}
-	}, f = (e) => {
+	}, p = (e) => {
 		r.onAudit?.(e);
 	};
-	function p(e, t) {
-		let n = xv(a), r = s.length ? s[s.length - 1].id + 1 : 1;
-		for (s.push({
+	function m(e, t) {
+		let n = bv(a), r = c.length ? c[c.length - 1].id + 1 : 1;
+		for (c.push({
 			id: r,
 			ts: Date.now(),
 			op: e,
 			label: t,
 			value: n
-		}); s.length > c;) s.shift();
+		}); c.length > l;) c.shift();
 		return r;
 	}
-	async function m(e, t, n) {
+	async function h(e, t, n) {
 		if (!t || t === "") return null;
-		let i = Cv(a);
+		let i = Tv(a);
 		if (i === t) return null;
 		if (!r.onConflict) return $({
 			code: "VERSION_CONFLICT",
 			message: `乐观锁冲突:expectedHash=${t} 但当前 hash=${i}。主数据在你 read 之后已被修改(外部代码/其他 agent/用户手动改)。`,
-			hint: `重新 read 拿最新值与 hash,基于最新值修改后再写入(传新的 expectedHash)。当前值:${Sv(a, 400)}`
+			hint: `重新 read 拿最新值与 hash,基于最新值修改后再写入(传新的 expectedHash)。当前值:${wv(a, 400)}`
 		});
 		let o = await r.onConflict({
 			op: e,
@@ -15980,44 +16036,52 @@ function jv(e, r = {}) {
 			expectedHash: t,
 			snapshotId: 0
 		});
-		if (o.action === "keep_external") return `已保留外部修改(未写入)。当前值:${Sv(a, 400)} (hash=${i})。请重新 read 拿最新值与 hash 再改。`;
+		if (o.action === "keep_external") return `已保留外部修改(未写入)。当前值:${wv(a, 400)} (hash=${i})。请重新 read 拿最新值与 hash 再改。`;
 		if (o.action === "restore") {
-			if (!s.length) return `无历史快照可回退(本次为首次操作)。当前值:${Sv(a, 400)} (hash=${i})。请重新 read 再改或选「强制覆盖」。`;
-			let e = s[s.length - 1];
-			return Ev(a, xv(e.value)), `已回退主数据到历史快照 #${e.id}[${e.op}]。当前值:${Sv(a, 400)} (hash=${Cv(a)})。请基于回退后的值重写或停止。`;
+			if (!c.length) return `无历史快照可回退(本次为首次操作)。当前值:${wv(a, 400)} (hash=${i})。请重新 read 再改或选「强制覆盖」。`;
+			let e = c[c.length - 1];
+			return jv(a, bv(e.value)), `已回退主数据到历史快照 #${e.id}[${e.op}]。当前值:${wv(a, 400)} (hash=${Tv(a)})。请基于回退后的值重写或停止。`;
 		}
 		return null;
 	}
-	let h = [
+	let g = [
 		n(async () => [`说明: ${o}`, "格式: 写入值需为 JSON,且通过声明的 schema 校验(校验失败时 set_data/edit_data 会返回结构化错误,含具体字段与期望类型)。"].join("\n"), {
 			name: "describe_data",
 			description: "获取主数据的说明与格式要求。",
 			schema: t.object({})
 		}),
 		n(async ({ jsonPath: e }) => {
-			let t = vv(a, e || ""), n = Cv(a);
-			return l = n, t === void 0 ? `主数据${e ? ` @ ${e}` : ""} = (undefined) (hash=${n})` : `主数据${e ? ` @ ${e}` : ""} = ${Sv(t)} (hash=${n})`;
+			let t = e || "";
+			if (!Dv(t, s)) return $({
+				code: "PATH_DENIED",
+				message: `get_data @ "${t}" 不在 schema 声明字段内(仅 schema 声明的 key 可读)`,
+				hint: "主数据仅暴露 schema 声明的字段;若需操作该字段,集成方需在 schema 中声明它"
+			});
+			let n = t ? _v(a, t) : a;
+			t || (n = Ov(n, s));
+			let r = Tv(a);
+			return u = r, n === void 0 ? `主数据${t ? ` @ ${t}` : ""} = (undefined) (hash=${r})` : `主数据${t ? ` @ ${t}` : ""} = ${wv(n)} (hash=${r})`;
 		}, {
 			name: "get_data",
 			description: "读取主数据的当前值(安全序列化:函数/DOM/循环引用做摘要;大结果由系统自动外存,提示用 vfs_read 回读)。返回含 hash(乐观锁):改前先 read/get 拿 hash,写入时传 expectedHash 回传,系统对比当前 hash 防\"基于过期值覆盖\"。jsonPath 可选:读整个主数据不传,读子路径传(如 components.0.text)。",
 			schema: t.object({ jsonPath: t.string().optional().describe("相对主数据根的点号路径(如 components.0.text);不传则读整个主数据") })
 		}),
 		n(async ({ value: e, expectedHash: t }) => {
-			let n = await m("set", t || (u ? l : void 0));
+			let n = await h("set", t || (d ? u : void 0));
 			if (n !== null) return n;
-			let r;
-			if (typeof e == "string") try {
-				r = JSON.parse(e);
-			} catch (t) {
-				return W_("", e, t);
-			}
-			else r = e;
-			let o = i.safeParse(r);
-			return o.success ? (p("set"), typeof a == "object" && a && o.data !== null && typeof o.data == "object" && Dv(a, o.data), f({
+			let r, o = xv(e);
+			if (o.parseError) return U_("", e, o.parseError);
+			r = o.parsed;
+			let c = i.safeParse(r);
+			return c.success ? typeof a != "object" || !a ? $({
+				code: "LEAF_BIND",
+				message: `主数据 bind 为原始类型(${a === null ? "null" : typeof a}),set_data 无法就地替换外部持有的值引用`,
+				hint: "主数据 bind 必须为对象/数组(低代码主 JSON 本就是);叶子值请用对象包裹(如 {value:\"x\"})或集成方通过 sdk.setData 替换 bind"
+			}) : (m("set"), c.data !== null && typeof c.data == "object" && (s ? gv(a, c.data) : Mv(a, c.data)), p({
 				op: "set",
-				value: o.data,
+				value: c.data,
 				timestamp: Date.now()
-			}), l = Cv(a), `已设置主数据 = ${Sv(o.data, 600)} (新 hash=${Cv(a)})`) : U_("", o.error.issues);
+			}), u = Tv(a), `已设置主数据 = ${wv(c.data, 600)} (新 hash=${Tv(a)})${s ? "(白名单模式:仅更新 schema 声明字段,未声明字段保留)" : ""}`) : H_("", c.error.issues);
 		}, {
 			name: "set_data",
 			description: "设置主数据的值(整体替换)。value 为 JSON 对象(或 JSON 字符串),需通过 schema 校验。校验失败会返回错误而非写入。expectedHash(可选):改前 read/get 返回的 hash,传入则启用乐观锁;不传时系统自动用你最后一次读到的 hash 比对(autoLock,默认开)。大对象/数组强烈建议改用 edit_data 增量 patch。",
@@ -16028,45 +16092,47 @@ function jv(e, r = {}) {
 		}),
 		n(async ({ op: e, jsonPath: t, value: n, expectedHash: r }) => {
 			let o = t || "";
-			if (gv(o)) return $({
+			if (hv(o)) return $({
 				code: "PATH_UNSAFE",
 				message: `jsonPath "${o}" 含非法段(__proto__/constructor/prototype)`,
 				hint: "使用正常的属性路径,如 components.0.text(数组索引用数字)"
 			});
-			let s = await m("edit", r || (u ? l : void 0));
-			if (s !== null) return s;
+			if (!Dv(o, s)) return $({
+				code: "PATH_DENIED",
+				message: `edit_data @ "${o}" 不在 schema 声明字段内`,
+				hint: "仅 schema 声明的 key 可写;若需操作该字段,集成方需在 schema 中声明它"
+			});
+			let c = await h("edit", r || (d ? u : void 0));
+			if (c !== null) return c;
 			if (typeof a != "object" || !a) return $({
 				code: "NOT_OBJECT",
 				message: `edit 仅适用于对象/数组主数据,当前是 ${a === void 0 ? "undefined" : typeof a}`,
 				hint: "叶子(原始类型)请用 set_data 整体设置"
 			});
-			let c;
+			let l;
 			if (e !== "remove") {
 				if (n === void 0 || n === "") return $({
 					code: "MISSING_VALUE",
 					message: `${e} 操作需要 value`,
 					hint: `op 为 ${e} 时 value 必填;删除请用 op:'remove'`
 				});
-				if (typeof n == "string") try {
-					c = JSON.parse(n);
-				} catch (e) {
-					return W_("", n, e);
-				}
-				else c = n;
+				let t = xv(n);
+				if (t.parseError) return U_("", n, t.parseError);
+				l = t.parsed;
 			}
-			let d = xv(a), h = wv(d, e, o, c);
-			if (h) return $({
+			let f = bv(a), g = kv(f, e, o, l);
+			if (g) return $({
 				code: "PATCH_FAILED",
-				message: h,
+				message: g,
 				hint: "检查 op 与目标类型:merge 需对象,append 需数组;jsonPath 指向需存在"
 			});
-			let g = i.safeParse(d);
-			return g.success ? (p("edit"), Tv(a, e, o, c), f({
+			let _ = i.safeParse(f);
+			return _.success ? (m("edit"), Av(a, e, o, l), p({
 				op: "edit",
 				detail: `${e}${o ? "@" + o : ""}`,
-				value: c,
+				value: l,
 				timestamp: Date.now()
-			}), l = Cv(a), `已 edit 主数据(${e}${o ? " @ " + o : ""})。当前值:${Sv(a, 600)} (新 hash=${Cv(a)})`) : U_("", g.error.issues);
+			}), u = Tv(a), `已 edit 主数据(${e}${o ? " @ " + o : ""})。当前值:${wv(a, 600)} (新 hash=${Tv(a)})`) : H_("", _.error.issues);
 		}, {
 			name: "edit_data",
 			description: "增量编辑主数据(对象/数组),只发改动的 patch,无需重传整个大对象。op:set(在 jsonPath 设值)、remove(删 jsonPath)、merge(把 value 合并到 jsonPath 指向的对象,默认根)、append(把 value 追加到 jsonPath 指向的数组,默认根)。jsonPath 为相对主数据根的点号路径(数组索引用数字,如 components.0.text);value 为 JSON 对象(推荐直传)或 JSON 字符串。整体仍经 schema 校验,失败不写入。expectedHash(可选):改前 read/get 返回的 hash;不传时自动用你最后读到的 hash(autoLock,默认开)防\"基于过期值覆盖\"。",
@@ -16088,20 +16154,25 @@ function jv(e, r = {}) {
 				message: "delete_data 需要 jsonPath 指定要删的子路径(主数据整体不可删,用 set_data 整体替换)",
 				hint: "如 jsonPath:\"components.0\" 删数组首项"
 			});
-			if (gv(e)) return $({
+			if (hv(e)) return $({
 				code: "PATH_UNSAFE",
 				message: `jsonPath "${e}" 含非法段`,
 				hint: "使用正常属性路径"
 			});
-			let n = await m("delete", t || (u ? l : void 0));
+			if (!Dv(e, s)) return $({
+				code: "PATH_DENIED",
+				message: `delete_data @ "${e}" 不在 schema 声明字段内`,
+				hint: "仅 schema 声明的 key 可删"
+			});
+			let n = await h("delete", t || (d ? u : void 0));
 			if (n !== null) return n;
-			p("delete");
-			let r = bv(a, e);
-			return f({
+			m("delete");
+			let r = yv(a, e);
+			return p({
 				op: "delete",
 				detail: e,
 				timestamp: Date.now()
-			}), l = Cv(a), r ? `已删除主数据 @ ${e}` : `主数据 @ ${e} 不存在(无需删除)`;
+			}), u = Tv(a), r ? `已删除主数据 @ ${e}` : `主数据 @ ${e} 不存在(无需删除)`;
 		}, {
 			name: "delete_data",
 			description: "删除主数据的某个子路径(jsonPath)。主数据整体不可删(用 set_data 整体替换)。expectedHash(可选):改前 read/get 返回的 hash;不传时自动用你最后读到的 hash(autoLock,默认开)防\"基于过期值删除\"。",
@@ -16110,45 +16181,45 @@ function jv(e, r = {}) {
 				expectedHash: t.string().optional().describe("乐观锁:改前 read/get 返回的 hash;传入则校验,不一致拒绝删除防覆盖")
 			})
 		}),
-		n(async ({ label: e }) => `已为主数据创建快照 #${p("manual", e)}${e ? `(${e})` : ""}。可用 list_data_snapshots 查看、restore_data 回退。`, {
+		n(async ({ label: e }) => `已为主数据创建快照 #${m("manual", e)}${e ? `(${e})` : ""}。可用 list_data_snapshots 查看、restore_data 回退。`, {
 			name: "snapshot_data",
 			description: "为主数据手动创建一个命名快照(检查点)。set/edit/delete 也会自动存快照。",
 			schema: t.object({ label: t.string().optional().describe("可选的快照标签,便于识别") })
 		}),
 		n(async () => {
-			if (!s.length) return "无快照。set/edit/delete 会自动存快照,也可用 snapshot_data 手动创建检查点。";
-			let e = s.map((e) => {
+			if (!c.length) return "无快照。set/edit/delete 会自动存快照,也可用 snapshot_data 手动创建检查点。";
+			let e = c.map((e) => {
 				let t = JSON.stringify(e.value ?? "").length, n = new Date(e.ts).toLocaleTimeString("zh-CN", { hour12: !1 });
 				return `  #${e.id} [${e.op}]${e.label ? ` "${e.label}"` : ""} ${n} 修改前≈${t}字符`;
 			});
-			return `主数据快照(共 ${s.length} 条):\n${e.join("\n")}`;
+			return `主数据快照(共 ${c.length} 条):\n${e.join("\n")}`;
 		}, {
 			name: "list_data_snapshots",
 			description: "列出主数据的快照时间线(序号、操作类型、标签、大小)。",
 			schema: t.object({})
 		}),
 		n(async ({ id: e }) => {
-			if (!s.length) return $({
+			if (!c.length) return $({
 				code: "NO_SNAPSHOT",
 				message: "无快照可回退",
 				hint: "set/edit/delete 会自动存快照;也可先 snapshot_data 手动创建检查点"
 			});
-			let t = e === void 0 ? s[s.length - 1] : s.find((t) => t.id === e);
+			let t = e === void 0 ? c[c.length - 1] : c.find((t) => t.id === e);
 			if (!t) return $({
 				code: "SNAPSHOT_NOT_FOUND",
 				message: `未找到快照 #${e}`,
 				hint: "用 list_data_snapshots 查看可用快照序号"
 			});
 			let n = i.safeParse(t.value);
-			return n.success ? (Ev(a, xv(t.value)), f({
+			return n.success ? (jv(a, bv(t.value)), p({
 				op: "restore",
 				detail: `#${t.id}`,
 				timestamp: Date.now()
-			}), l = Cv(a), `已回退主数据到快照 #${t.id}[${t.op}]${t.label ? `(${t.label})` : ""}。`) : $({
+			}), u = Tv(a), `已回退主数据到快照 #${t.id}[${t.op}]${t.label ? `(${t.label})` : ""}。`) : $({
 				code: "SNAPSHOT_SCHEMA_INVALID",
 				message: `快照 #${t.id} 的值不符合当前 schema,无法回退`,
 				hint: "schema 可能已变更;该快照已过期,选其他快照或重新设置",
-				details: H_(n.error.issues)
+				details: V_(n.error.issues)
 			});
 		}, {
 			name: "restore_data",
@@ -16161,9 +16232,9 @@ function jv(e, r = {}) {
 				message: `主数据不是对象/数组,无法查询(当前为 ${a === void 0 ? "undefined" : typeof a})`,
 				hint: "query 仅适用于对象/数组;叶子用 get_data 读"
 			});
-			let n;
+			let n = s ? Ov(a, s) : a, r;
 			try {
-				n = lv(a, e);
+				r = cv(n, e);
 			} catch (t) {
 				return $({
 					code: "JSONPATH_SYNTAX",
@@ -16172,8 +16243,8 @@ function jv(e, r = {}) {
 					details: { expr: e }
 				});
 			}
-			let r = t ?? 50, i = n.slice(0, r), o = i.map((e) => `{"path":${JSON.stringify(e.path)},"index":${e.index === void 0 ? "null" : e.index},"value":${Sv(e.value)}}`);
-			return `{"matched":${n.length},"returned":${i.length},"truncated":${n.length > r},"results":[${o.join(",")}]}`;
+			let i = t ?? 50, o = r.slice(0, i), c = o.map((e) => `{"path":${JSON.stringify(e.path)},"index":${e.index === void 0 ? "null" : e.index},"value":${wv(e.value)}}`);
+			return `{"matched":${r.length},"returned":${o.length},"truncated":${r.length > i},"results":[${c.join(",")}]}`;
 		}, {
 			name: "query_data",
 			description: "用 JSONPath 表达式对主数据做结构化查询(只读,无副作用)。语法子集:$ 根、.key、[n]、[\"key\"]、[*] 通配、[?(filter)] 过滤、..key 递归找后代、..* 全后代。过滤表达式:@.field op literal(op:==/!=/</<=/>/>=),&&/||/() 连接;@ 指当前元素。注意过滤作用于\"当前节点的子元素数组\",若主数据是对象需先点出数组字段再过滤,如 $.components[?(@.type==\"card\" && @.price<100)]。返回匹配元素的 path(相对主数据根,数组索引可作后续 edit_data 的 jsonPath)+ index(若父为数组)+ value。适合在大数组里按条件筛选元素,定位后再用 edit_data 增量改。",
@@ -16188,13 +16259,13 @@ function jv(e, r = {}) {
 				message: "主数据为空,无可搜索内容"
 			});
 			try {
-				let o = dv(a, e, {
+				let o = uv(s ? Ov(a, s) : a, e, {
 					mode: t,
 					fuzzyThreshold: n,
 					matchKey: r,
 					limit: i ?? 50
 				});
-				return Sv({
+				return wv({
 					matched: o.length,
 					results: o
 				});
@@ -16227,7 +16298,7 @@ function jv(e, r = {}) {
 				message: `脚本过长(${e.length} 字符,上限 8000)`,
 				hint: "精简脚本;复杂逻辑可分步(先 query 探查再 transform 改),或拆成多次 eval"
 			});
-			let n = await mv(xv(a), e, 3e3);
+			let n = await pv(bv(s ? Ov(a, s) : a), e, 3e3);
 			if (!n.ok) {
 				let t = /超时/.test(n.error || "");
 				return $({
@@ -16241,143 +16312,255 @@ function jv(e, r = {}) {
 				});
 			}
 			if (t === "transform") {
-				let e = i.safeParse(n.result);
-				return e.success ? (p("edit", "eval_transform"), typeof a == "object" && a && e.data !== null && typeof e.data == "object" && Dv(a, e.data), f({
+				let e = n.result;
+				if (e && typeof e == "object" && !Array.isArray(e) && "patches" in e && Array.isArray(e.patches)) {
+					if (typeof a != "object" || !a) return $({
+						code: "LEAF_BIND",
+						message: `主数据 bind 为原始类型(${a === null ? "null" : typeof a}),eval transform(patches) 无法就地替换`,
+						hint: "主数据 bind 必须为对象/数组;叶子值请用对象包裹或集成方通过 sdk.setData 替换 bind"
+					});
+					let t = e.patches, r = bv(a), o = [];
+					for (let e = 0; e < t.length; e++) {
+						let n = t[e], i = n.jsonPath || "";
+						if (hv(i)) return $({
+							code: "PATH_UNSAFE",
+							message: `patches[${e}] jsonPath "${i}" 含非法段`,
+							hint: "使用正常属性路径"
+						});
+						if (!Dv(i, s)) return $({
+							code: "PATH_DENIED",
+							message: `patches[${e}] @ "${i}" 不在 schema 声明字段内`,
+							hint: "仅 schema 声明的 key 可写"
+						});
+						let a = n.op, c;
+						if (a !== "remove") {
+							if (n.value === void 0 || n.value === "") return $({
+								code: "MISSING_VALUE",
+								message: `patches[${e}] ${a} 操作需要 value`,
+								hint: `op 为 ${a} 时 value 必填`
+							});
+							let t = xv(n.value);
+							if (t.parseError) return U_(`patches[${e}]`, n.value, t.parseError);
+							c = t.parsed;
+						}
+						let l = kv(r, a, i, c);
+						if (l) return $({
+							code: "PATCH_FAILED",
+							message: `patches[${e}]: ${l}`,
+							hint: "检查 op 与目标类型:merge 需对象,append 需数组"
+						});
+						o.push({
+							op: a,
+							jp: i,
+							value: c
+						});
+					}
+					let c = i.safeParse(r);
+					if (!c.success) return $({
+						code: "SCHEMA_INVALID",
+						message: "脚本 patches 应用后整体校验失败,未写入",
+						hint: "确认 patches 合并后整体仍符合 schema",
+						details: V_(c.error.issues)
+					});
+					m("edit", "eval_transform");
+					for (let e of o) Av(a, e.op, e.jp, e.value);
+					return p({
+						op: "edit",
+						detail: `eval_transform(${o.length} patches)`,
+						timestamp: Date.now()
+					}), u = Tv(a), `已通过脚本 transform(patches) 更新主数据(${o.length} 个 patch,耗时 ${n.elapsedMs}ms)。当前值: ${wv(a, 600)}`;
+				}
+				let t = i.safeParse(e);
+				return t.success ? typeof a != "object" || !a ? $({
+					code: "LEAF_BIND",
+					message: `主数据 bind 为原始类型(${a === null ? "null" : typeof a}),eval transform 无法就地替换外部持有的值引用`,
+					hint: "主数据 bind 必须为对象/数组;叶子值请用对象包裹或集成方通过 sdk.setData 替换 bind"
+				}) : (m("edit", "eval_transform"), t.data !== null && typeof t.data == "object" && (s ? gv(a, t.data) : Mv(a, t.data)), p({
 					op: "edit",
 					detail: "eval_transform",
 					timestamp: Date.now()
-				}), l = Cv(a), `已通过脚本 transform 更新主数据(耗时 ${n.elapsedMs}ms)。当前值: ${Sv(a, 600)}`) : $({
+				}), u = Tv(a), `已通过脚本 transform 更新主数据(耗时 ${n.elapsedMs}ms)。当前值: ${wv(a, 600)}`) : $({
 					code: "SCHEMA_INVALID",
 					message: "脚本返回值校验失败,未写入(transform 模式要求返回主数据的完整新值且符合 schema)",
-					hint: "确认脚本 return 了完整新值(非部分);按 describe_data() 查看格式",
-					details: H_(e.error.issues)
+					hint: "确认脚本 return 了完整新值(非部分);或返回 {patches:[...]} 走增量模式;按 describe_data() 查看格式",
+					details: V_(t.error.issues)
 				});
 			}
-			return Sv({
+			return wv({
 				ok: !0,
 				result: n.result,
 				elapsedMs: n.elapsedMs
 			});
 		}, {
 			name: "eval_script",
-			description: "在隔离的 Web Worker 沙箱里对主数据跑自定义 JS 脚本(无 window/document 访问,fetch/XHR/WebSocket/importScripts 已禁用,超时 3s 可终止)。脚本以 `data` 为入参(主数据的深拷贝),返回值即结果。mode:query(默认,只读,把返回值回给 LLM,适合过滤/映射/聚合/统计大数组)、transform(把返回值作为主数据的新整体值,经 schema 校验后就地落地,适合批量重写)。注意:transform 需返回完整新值;query 不改主数据。脚本内可用标准 JS(Array/Object/JSON/Math 等)与 async/await。",
+			description: "在隔离的 Web Worker 沙箱里对主数据跑自定义 JS 脚本(无 window/document 访问,fetch/XHR/WebSocket/importScripts 已禁用,超时 3s 可终止)。脚本以 `data` 为入参(主数据的深拷贝),返回值即结果。mode:query(默认,只读,把返回值回给 LLM,适合过滤/映射/聚合/统计大数组)、transform(把返回值作为主数据的新整体值,经 schema 校验后就地落地,适合批量重写)。transform 支持两种返回形式:① 完整新值(整体替换);② {patches:[{op,jsonPath,value},...]} 增量 patch(按 patch 应用,避免大对象整体重传,任一 patch 失败或整体 schema 校验失败则不写入)。query 不改主数据。脚本内可用标准 JS(Array/Object/JSON/Math 等)与 async/await。",
 			schema: t.object({
 				script: t.string().describe("JS 脚本体,如 data.filter(c=>c.stock>0).map(c=>c.id);入参名 data;末尾表达式或 return 即返回值"),
 				mode: t.enum(["query", "transform"]).optional().describe("query=只读返回结果(默认),transform=校验后落地为新值")
 			})
 		}),
-		n(async ({ jsonPath: e }) => {
-			let t = e ? vv(a, e) : a;
+		n(async ({ jsonPath: e, fields: t, depth: n }) => {
+			let i = e || "";
+			if (!Dv(i, s)) return $({
+				code: "PATH_DENIED",
+				message: `read @ "${i}" 不在 schema 声明字段内`,
+				hint: "主数据仅暴露 schema 声明的字段;若需操作该字段,集成方需在 schema 中声明它"
+			});
+			let c = i ? _v(a, i) : a;
+			i || (c = Ov(c, s));
+			let l = c;
 			if (r.interceptors?.read) try {
-				t = r.interceptors.read(t);
+				l = r.interceptors.read(l);
 			} catch (e) {
 				return $({
 					code: "READ_INTERCEPT",
 					message: `read 拦截器抛错: ${e.message}`
 				});
 			}
-			let n = Cv(a);
-			l = n;
-			let i = e ? "" : `主数据说明: ${o}\n格式: 写入值需为 JSON,且通过声明的 schema 校验(校验失败时 write 会返回结构化错误)。\n\n`;
-			return t === void 0 ? `${i}主数据${e ? ` @ ${e}` : ""} = (undefined) (hash=${n})` : `${i}主数据${e ? ` @ ${e}` : ""} = ${Sv(t)} (hash=${n})`;
+			t && t.length && (l = Sv(l, t)), n != null && (l = Cv(l, n));
+			let d = Tv(a);
+			u = d;
+			let f = t && t.length ? `(字段裁剪:${t.join(",")})` : "", p = n == null ? "" : `(深度≤${n})`, m = f || p ? ` ${f}${p}` : "", h = e ? "" : `主数据说明: ${o}\n格式: 写入值需为 JSON,且通过声明的 schema 校验(校验失败时 write 会返回结构化错误)。\n\n`;
+			return l === void 0 ? `${h}主数据${e ? ` @ ${e}` : ""}${m} = (undefined) (hash=${d})` : `${h}主数据${e ? ` @ ${e}` : ""}${m} = ${wv(l)} (hash=${d})`;
 		}, {
 			name: "read",
-			description: "读取主数据(高层入口,合并 describe/get)。不传 jsonPath → 返回主数据说明 + 格式提示;传 jsonPath → 返回该子路径当前值 + hash。hash 用于乐观锁(默认 autoLock,write 时自动比对,无需手动传)。集成方可能经 read 拦截器对返回值脱敏/派生。",
-			schema: t.object({ jsonPath: t.string().optional().describe("要读的子路径(相对主数据根,如 components.0.text);不传则读整个主数据并返回说明") })
+			description: "读取主数据(高层入口,合并 describe/get)。不传 jsonPath → 返回主数据说明 + 格式提示;传 jsonPath → 返回该子路径当前值 + hash。hash 用于乐观锁(默认 autoLock,write 时自动比对,无需手动传)。fields(可选):字段裁剪,只返回对象(及数组元素)的指定字段,减少大对象返回体积;depth(可选):嵌套深度限制(0=只根占位,1=根+子,递归截断深层),减少深层结构返回体积。两者可组合,先裁字段再截深度。集成方可能经 read 拦截器对返回值脱敏/派生。",
+			schema: t.object({
+				jsonPath: t.string().optional().describe("要读的子路径(相对主数据根,如 components.0.text);不传则读整个主数据并返回说明"),
+				fields: t.array(t.string()).optional().describe("字段裁剪:只返回指定字段(对对象/数组元素投影),减少返回体积,如 [\"id\",\"title\"]"),
+				depth: t.number().int().min(0).optional().describe("嵌套深度限制:0=只根占位,1=根+子,递归到 depth 层后用 {...}/[...] 占位截断,减少深层返回体积")
+			})
 		}),
-		n(async ({ value: e, patch: t, del: n }) => {
-			let o = "set";
-			n ? o = "delete" : t && (o = "edit");
-			let s = e;
+		n(async ({ value: e, patch: t, patches: n, del: o }) => {
+			let c = "set";
+			o ? c = "delete" : (n && n.length || t) && (c = "edit");
+			let l = e, f;
 			if (r.interceptors?.write) try {
-				let n = r.interceptors.write(t ?? e, a);
-				if (n && typeof n == "object" && "error" in n) return $({
+				let i = c === "delete" ? {
+					del: !0,
+					jsonPath: t?.jsonPath
+				} : c === "edit" && n && n.length ? { patches: n } : c === "edit" ? {
+					op: t.op,
+					jsonPath: t.jsonPath || "",
+					value: e
+				} : e, o = r.interceptors.write(i, a);
+				if (o && typeof o == "object" && "error" in o) return $({
 					code: "WRITE_INTERCEPT",
-					message: `write 拦截器拒绝: ${n.error}`
+					message: `write 拦截器拒绝: ${o.error}`
 				});
-				o === "edit" ? t = n : s = n;
+				c === "delete" || (c === "edit" && n && n.length ? f = o && Array.isArray(o) ? o : n : l = o);
 			} catch (e) {
 				return $({
 					code: "WRITE_INTERCEPT",
 					message: `write 拦截器抛错: ${e.message}`
 				});
 			}
-			let c = u ? l : void 0;
-			if (o === "delete") {
+			let g = d ? u : void 0;
+			if (c === "delete") {
 				if (!t?.jsonPath) return $({
 					code: "MISSING_VALUE",
 					message: "delete 需要 patch.jsonPath 指定要删的子路径(主数据整体不可删,用 write(value) 整体替换)",
 					hint: "如 patch:{jsonPath:\"components.0\"}, del:true"
 				});
-				if (gv(t.jsonPath)) return $({
+				if (hv(t.jsonPath)) return $({
 					code: "PATH_UNSAFE",
 					message: `jsonPath "${t.jsonPath}" 含非法段`,
 					hint: "使用正常属性路径"
 				});
-				let e = await m("delete", c);
+				if (!Dv(t.jsonPath, s)) return $({
+					code: "PATH_DENIED",
+					message: `write delete @ "${t.jsonPath}" 不在 schema 声明字段内`,
+					hint: "仅 schema 声明的 key 可删"
+				});
+				let e = await h("delete", g);
 				if (e !== null) return e;
-				p("delete");
-				let n = bv(a, t.jsonPath);
-				return f({
+				m("delete");
+				let n = yv(a, t.jsonPath);
+				return p({
 					op: "delete",
 					detail: t.jsonPath,
 					timestamp: Date.now()
-				}), l = Cv(a), n ? `已删除主数据 @ ${t.jsonPath}` : `主数据 @ ${t.jsonPath} 不存在(无需删除)`;
-			}
-			let d;
-			if (typeof s == "string") try {
-				d = JSON.parse(s);
-			} catch {
-				d = s;
+				}), u = Tv(a), n ? `已删除主数据 @ ${t.jsonPath}` : `主数据 @ ${t.jsonPath} 不存在(无需删除)`;
 			}
-			else d = s;
-			if (o === "edit") {
-				let e = t.jsonPath || "";
-				if (gv(e)) return $({
-					code: "PATH_UNSAFE",
-					message: `jsonPath "${e}" 含非法段`,
-					hint: "使用正常属性路径,如 components.0.text"
-				});
+			if (c === "edit") {
 				if (typeof a != "object" || !a) return $({
 					code: "NOT_OBJECT",
 					message: `edit 仅适用于对象/数组主数据,当前是 ${a === void 0 ? "undefined" : typeof a}`,
 					hint: "叶子用 write(value) 整体设置"
 				});
-				let n = await m("edit", c);
-				if (n !== null) return n;
-				let r = t.op;
-				if (r !== "remove" && (d === void 0 || d === "")) return $({
-					code: "MISSING_VALUE",
-					message: `${r} 操作需要 value`,
-					hint: `op 为 ${r} 时 value 必填;删除请用 del:true`
-				});
-				let o = xv(a), s = wv(o, r, e, d);
-				if (s) return $({
-					code: "PATCH_FAILED",
-					message: s,
-					hint: "检查 op 与目标类型:merge 需对象,append 需数组"
-				});
-				let u = i.safeParse(o);
-				return u.success ? (p("edit"), Tv(a, r, e, d), f({
+				let e = await h("edit", g);
+				if (e !== null) return e;
+				let r = f || (n && n.length ? n : [{
+					op: t.op,
+					jsonPath: t.jsonPath || "",
+					value: l
+				}]), o = bv(a), c = [];
+				for (let e = 0; e < r.length; e++) {
+					let t = r[e], n = t.jsonPath || "";
+					if (hv(n)) return $({
+						code: "PATH_UNSAFE",
+						message: `patches[${e}] jsonPath "${n}" 含非法段`,
+						hint: "使用正常属性路径,如 components.0.text"
+					});
+					if (!Dv(n, s)) return $({
+						code: "PATH_DENIED",
+						message: `patches[${e}] @ "${n}" 不在 schema 声明字段内`,
+						hint: "仅 schema 声明的 key 可写"
+					});
+					let i = t.op, a;
+					if (i !== "remove") {
+						if (t.value === void 0 || t.value === "") return $({
+							code: "MISSING_VALUE",
+							message: `patches[${e}] ${i} 操作需要 value`,
+							hint: `op 为 ${i} 时 value 必填;删除请用 op:'remove'`
+						});
+						let n = xv(t.value);
+						if (n.parseError) return U_(`patches[${e}]`, t.value, n.parseError);
+						a = n.parsed;
+					}
+					let l = kv(o, i, n, a);
+					if (l) return $({
+						code: "PATCH_FAILED",
+						message: `patches[${e}]: ${l}`,
+						hint: "检查 op 与目标类型:merge 需对象,append 需数组"
+					});
+					c.push({
+						op: i,
+						jp: n,
+						value: a
+					});
+				}
+				let d = i.safeParse(o);
+				if (!d.success) return H_("", d.error.issues);
+				m("edit");
+				for (let e of c) Av(a, e.op, e.jp, e.value);
+				return p({
 					op: "edit",
-					detail: `${r}${e ? "@" + e : ""}`,
-					value: d,
+					detail: `${c.length} 个 patch${c.length > 1 ? "(批量)" : ""}`,
+					value: c.map((e) => `${e.op}@${e.jp}`),
 					timestamp: Date.now()
-				}), l = Cv(a), `已 write(edit) 主数据(${r}${e ? " @ " + e : ""})。当前值:${Sv(a, 600)} (新 hash=${Cv(a)})`) : U_("", u.error.issues);
+				}), u = Tv(a), `已 write(edit) 主数据(${c.length} 个 patch)。当前值:${wv(a, 600)} (新 hash=${Tv(a)})`;
 			}
-			let h = await m("set", c);
-			if (h !== null) return h;
-			let g = i.safeParse(d);
-			return g.success ? (p("set"), typeof a == "object" && a && g.data !== null && typeof g.data == "object" && Dv(a, g.data), f({
+			let _, v = xv(l);
+			if (v.parseError) return U_("", l, v.parseError);
+			_ = v.parsed;
+			let y = await h("set", g);
+			if (y !== null) return y;
+			let b = i.safeParse(_);
+			return b.success ? typeof a != "object" || !a ? $({
+				code: "LEAF_BIND",
+				message: `主数据 bind 为原始类型(${a === null ? "null" : typeof a}),write(set) 无法就地替换外部持有的值引用`,
+				hint: "主数据 bind 必须为对象/数组;叶子值请用对象包裹(如 {value:\"x\"})或集成方通过 sdk.setData 替换 bind"
+			}) : (m("set"), b.data !== null && typeof b.data == "object" && (s ? gv(a, b.data) : Mv(a, b.data)), p({
 				op: "set",
-				value: g.data,
+				value: b.data,
 				timestamp: Date.now()
-			}), l = Cv(a), `已 write(set) 主数据 = ${Sv(g.data, 600)} (新 hash=${Cv(a)})`) : U_("", g.error.issues);
+			}), u = Tv(a), `已 write(set) 主数据 = ${wv(b.data, 600)} (新 hash=${Tv(a)})${s ? "(白名单模式:仅更新 schema 声明字段,未声明字段保留)" : ""}`) : H_("", b.error.issues);
 		}, {
 			name: "write",
-			description: "写入主数据(高层入口,合并 set/edit/delete + 自动乐观锁 + 自动快照)。三种意图:① 整体替换 write({ value }) value 为 JSON 对象(推荐)或字符串;② 增量 patch write({ value, patch:{op,jsonPath} }) op=set/remove/merge/append,jsonPath 相对主数据根(如 components.0.text);③ 删除 write({ patch:{jsonPath}, del:true })。写入自动经 schema 校验(失败不写)+ 自动存快照(可 restore_data 回退)+ 自动乐观锁(autoLock,用你最后 read 到的 hash 比对,冲突则 VERSION_CONFLICT)。集成方可能经 write 拦截器校验/转换/拒绝。",
+			description: "写入主数据(高层入口,合并 set/edit/delete + 自动乐观锁 + 自动快照)。四种意图:① 整体替换 write({ value }) value 为 JSON 对象(推荐)或字符串;② 单个增量 patch write({ value, patch:{op,jsonPath} }) op=set/remove/merge/append,jsonPath 相对主数据根(如 components.0.text),value 作为该 patch 的值;③ 批量增量 write({ patches:[{op,jsonPath,value},...] }) 一次原子应用多个 patch(任一失败整体不写入,适合一次改多处);④ 删除 write({ patch:{jsonPath}, del:true })。写入自动经 schema 校验(失败不写)+ 自动存快照(可 restore_data 回退)+ 自动乐观锁(autoLock,用你最后 read 到的 hash 比对,冲突则 VERSION_CONFLICT)。集成方可能经 write 拦截器校验/转换/拒绝(批量模式拦截器收到 {patches},返回新 patches 数组或 {error})。",
 			schema: t.object({
-				value: t.unknown().optional().describe("JSON 对象(推荐,如 {title:\"x\"})或 JSON 字符串;set/patch 的 set/merge/append 必填"),
+				value: t.unknown().optional().describe("JSON 对象(推荐,如 {title:\"x\"})或 JSON 字符串;set 整体或单个 patch 的 set/merge/append 必填"),
 				patch: t.object({
 					op: t.enum([
 						"set",
@@ -16386,22 +16569,32 @@ function jv(e, r = {}) {
 						"append"
 					]),
 					jsonPath: t.string().optional().describe("相对主数据根的点号路径(如 components.0.text);set/remove 必填,merge/append 不填则作用于根")
-				}).optional().describe("增量编辑;传 patch 则走 edit 语义,否则整体 set;删除用 del:true 且 patch.jsonPath 指定子路径"),
+				}).optional().describe("单个增量编辑;传 patch(无 patches)走单 patch edit 语义,value 作为该 patch 的 value"),
+				patches: t.array(t.object({
+					op: t.enum([
+						"set",
+						"remove",
+						"merge",
+						"append"
+					]),
+					jsonPath: t.string().optional().describe("相对主数据根的点号路径;set/remove 必填,merge/append 不填则作用于根"),
+					value: t.unknown().optional().describe("JSON 值(推荐直传)或 JSON 字符串;set/merge/append 必填,remove 不需")
+				})).optional().describe("批量增量编辑:一次原子应用多个 patch(任一失败则整体不写入,clone 试跑全部 + schema 校验通过才落 live)。适合一次改多处,减少多轮往返"),
 				del: t.boolean().optional().describe("true 则删除 patch.jsonPath 指定的子路径(等价 delete_data)")
 			})
 		})
 	];
-	return Object.defineProperty(h, "controller", {
-		value: d,
+	return Object.defineProperty(g, "controller", {
+		value: f,
 		enumerable: !1,
 		configurable: !1,
 		writable: !1
-	}), h;
+	}), g;
 }
 //#endregion
 //#region src/core/tools/fetchDoc.ts
-var Mv = 3e4, Nv = [n(async ({ url: e, as: t }) => {
-	let n = new AbortController(), r = setTimeout(() => n.abort(), Mv);
+var Lv = 3e4, Rv = [n(async ({ url: e, as: t }) => {
+	let n = new AbortController(), r = setTimeout(() => n.abort(), Lv);
 	try {
 		let r = await fetch(e, {
 			method: "GET",
@@ -16418,7 +16611,7 @@ var Mv = 3e4, Nv = [n(async ({ url: e, as: t }) => {
 		].join("\n");
 	} catch (t) {
 		let r = t?.message || String(t);
-		return n.signal.aborted ? `获取失败:请求超时(${Mv}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
+		return n.signal.aborted ? `获取失败:请求超时(${Lv}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
 	} finally {
 		clearTimeout(r);
 	}
@@ -16429,25 +16622,25 @@ var Mv = 3e4, Nv = [n(async ({ url: e, as: t }) => {
 		url: t.string().describe("要抓取的 URL(同源或已配 CORS)"),
 		as: t.enum(["text", "markdown"]).optional().describe("返回格式标签,默认 text")
 	})
-})], Pv = Nv;
-function Fv(e, t) {
-	return jv(e, t);
+})], zv = Rv;
+function Bv(e, t) {
+	return Iv(e, t);
 }
-function Iv(e, t, n) {
+function Vv(e, t, n) {
 	let r = e?.dataOps !== !1, i = e?.fetch !== !1;
 	return [...r ? t : [], ...i ? n : []];
 }
 //#endregion
 //#region src/core/harness/usageHints.ts
-var Lv = .7;
-function Rv(e, t, n = "simple") {
+var Hv = .7;
+function Uv(e, t, n = "simple") {
 	let r = n !== "advanced";
 	return {
 		name: "usageHints",
 		augmentPrompt: () => {
 			let n = [];
 			if (e?.planning !== !1 && n.push("多步任务建议先 write_todos 拆解为步骤并逐步推进。"), t && (r ? (n.push("读写主数据用 read/write(高层入口,自动乐观锁 + 自动快照)。read({jsonPath}) 读子路径当前值(返回含 hash,write 时自动比对,无需手动传);read() 不传读整个主数据 + 说明。write({value}) 整体替换(value 直传 JSON 对象,如 {title:\"x\"},无需 stringify);write({value, patch:{op,jsonPath}}) 增量 patch(op=set/remove/merge/append);write({patch:{jsonPath}, del:true}) 删除子路径。写入自动经 schema 校验(失败不写)+ 自动存快照(出错可用 restore_data 回退)。"), n.push("修改大对象/数组优先用 write 的 patch 增量(只发改动部分),避免整体重传被 max_tokens 截断致 JSON 不完整。"), n.push("在大数组里按条件筛选用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素 path/index;定位后用 write patch 改。找名字记不清的元素用 search_data(substring/regex/fuzzy)。批量过滤/映射/聚合/重写大数组用 eval_script(沙箱脚本,mode=query 只读/transform 落地)。")) : (n.push("改主数据前先 get_data({jsonPath}) 读其当前真实值与 hash(返回末尾 hash=xxx),基于真实值改,不要凭记忆。写入(set/edit/delete)时回传 expectedHash=该 hash 启用乐观锁——若主数据在你 get 之后被外部代码/其他 agent/用户手动改过,会触发冲突:集成方若开启人工介入,工具会挂起等用户决定(保留外部/强制覆盖/回退),你应等待工具返回后按结果继续(保留外部→重新 get 再改;强制覆盖→已写入,继续;回退→已回退到历史快照,基于回退值重写);未开启人工介入时返回 VERSION_CONFLICT 不写入,重新 get 拿最新值与 hash 再改。"), n.push("不确定主数据字段结构时用 describe_data 查看说明。"), n.push("修改大对象/数组优先用 edit_data 增量 patch(只发改动部分),避免 set_data 整体重传被 max_tokens 截断导致 JSON 不完整、校验失败。"), n.push("修改主数据出错时可用 restore_data 回退最近一次。"), n.push("在大数组里按条件筛选元素用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素的 path/index;定位后再 edit_data 改。"), n.push("找名字记不清的元素用 search_data(支持 substring/regex/fuzzy 模糊搜索)。"), n.push("需要过滤/映射/聚合/批量重写大数组时用 eval_script(沙箱脚本,入参 data);只读探查用 mode=query,批量重写用 mode=transform(返回值经校验后落地)。"))), e?.subagent !== !1 && n.push("独立子任务可 spawn_agent 委派(只读工具,过程不占主上下文)。"), e?.subagents?.length) {
-				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Lv || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), i = e.subagents.filter((e) => (e.temperature ?? 0) < Lv && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
+				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Hv || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), i = e.subagents.filter((e) => (e.temperature ?? 0) < Hv && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
 				n.push("【规划-反思-执行·路由】按任务性质选模式,不要对简单任务过度编排:"), t.length && (n.push(`  · 创作/设计/开放性需求(如"设计主题风格""换个感觉")→ 先调 ${t.map((e) => "use_" + e.id).join("/")} 出 2-3 套方案(高温创意),`), n.push("    不要自己拍板;拿到方案后,若需用户拍板用 request_human_confirmation 弹选项。")), i.length && n.push(`  · 严谨/易错/校验类 → 可先调 ${i.map((e) => "use_" + e.id).join("/")} 反思挑刺(低温审查),据反馈修订。`), n.push(r ? "  · 方案定稿后,由你(主 agent)用 write 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。" : "  · 方案定稿后,由你(主 agent)用 edit_data 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。"), n.push("  · 简单/明确任务(如\"标题改红色\")直接执行,不必走规划-反思。");
 			}
 			return e?.humanConfirm && (n.push("【人工确认·必读】以下情形必须先调 request_human_confirmation 征询用户、拿到答复后再继续,不要自行拍板:"), n.push("  1) 用户让你「给方案/列选项/我来选/挑一个」时:把每个方案作为一个 option,调 request_human_confirmation(question=简述, options=[方案A,方案B,...], recommendation=你推荐的)。不要只回文字罗列方案让用户自己回复——要用工具把选项做成可点选按钮。"), n.push("  2) 需求有歧义/不确定时:调工具问清楚(options 不传则用户答同意或拒绝)。"), n.push("  3) 即将执行高风险不可逆操作(删除/覆盖/批量改动)前:调工具确认。"), n.push("用户在选项里选了哪个,就按那个方案继续;选「拒绝」则停止并询问如何调整。")), n.length && n.unshift("调用工具务必用标准 function calling(工具调用)格式发起,不要在回复正文里输出伪 XML/标签(如 deepseek 的 tool_calls 标签、invoke、function_call、tool_call 等)或 JSON 文本——那不会被识别为工具调用,会被当普通文字,工具不执行。"), n.length ? "## 能力使用提示\n" + n.join("\n") : void 0;
@@ -16456,7 +16649,7 @@ function Rv(e, t, n = "simple") {
 }
 //#endregion
 //#region src/core/utils/id.ts
-function zv() {
+function Wv() {
 	try {
 		if (typeof crypto < "u" && typeof crypto.randomUUID == "function") return crypto.randomUUID();
 	} catch {}
@@ -16464,57 +16657,57 @@ function zv() {
 }
 //#endregion
 //#region src/core/backends/storage.ts
-var Bv = "chat-sdk", Vv = 50 * 1024 * 1024, Hv = 4 * 1024 * 1024, Uv = 10 * 1024 * 1024, Wv = .9, Gv = 500, Kv = 300, qv = "__meta__", Jv = "v:1", Yv = [
+var Gv = "chat-sdk", Kv = 50 * 1024 * 1024, qv = 4 * 1024 * 1024, Jv = 10 * 1024 * 1024, Yv = .9, Xv = 500, Zv = 300, Qv = "__meta__", $v = "v:1", ey = [
 	"messages",
 	"vfs",
 	"todos",
 	"memory"
 ];
-function Xv(e) {
-	return e === "local" || e === "session" ? Hv : Vv;
+function ty(e) {
+	return e === "local" || e === "session" ? qv : Kv;
 }
-function Zv(e) {
+function ny(e) {
 	if (typeof e != "object" || !e) return !1;
 	let t = e;
 	return t.name === "QuotaExceededError" || t.name === "NS_ERROR_DOM_QUOTA_REACHED" || t.code === 22 || t.code === 1014;
 }
-function Qv(e, t, n, r) {
+function ry(e, t, n, r) {
 	return [
-		Jv,
+		$v,
 		e,
 		t,
 		n,
 		r
 	].join("::");
 }
-function $v(e, t, n) {
+function iy(e, t, n) {
 	return [
-		Jv,
+		$v,
 		e,
 		t,
 		n
 	].join("::") + "::";
 }
-function ey(e, t) {
+function ay(e, t) {
 	return [
-		Jv,
+		$v,
 		e,
 		t
 	].join("::") + "::";
 }
-function ty(e) {
-	return [Jv, e].join("::") + "::";
+function oy(e) {
+	return [$v, e].join("::") + "::";
 }
-var ny = null;
-function ry(e) {
-	ny ||= new TextEncoder();
+var sy = null;
+function cy(e) {
+	sy ||= new TextEncoder();
 	try {
-		return ny.encode(JSON.stringify(e)).length;
+		return sy.encode(JSON.stringify(e)).length;
 	} catch {
 		return 0;
 	}
 }
-function iy(e, t, n) {
+function ly(e, t, n) {
 	let r = e.reduce((e, t) => e + t.bytes, 0);
 	if (r <= t) return [];
 	let i = t * n, a = [...e].sort((e, t) => e.lastAccessed - t.lastAccessed), o = [];
@@ -16524,7 +16717,7 @@ function iy(e, t, n) {
 	}
 	return o;
 }
-function ay() {
+function uy() {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		async get(t) {
@@ -16544,7 +16737,7 @@ function ay() {
 		}
 	};
 }
-function oy(e) {
+function dy(e) {
 	return new Promise((t, n) => {
 		if (typeof indexedDB > "u") {
 			n(/* @__PURE__ */ Error("indexedDB 不可用"));
@@ -16605,7 +16798,7 @@ function oy(e) {
 		}, r.onerror = () => n(r.error);
 	});
 }
-function sy(e) {
+function fy(e) {
 	return {
 		async get(t) {
 			let n = e.getItem(t);
@@ -16639,12 +16832,12 @@ function sy(e) {
 		}
 	};
 }
-function cy(e, t, n) {
+function py(e, t, n) {
 	let r = (e.get(t) ?? Promise.resolve()).then(n, n);
 	return e.set(t, r.then(() => void 0, () => void 0)), r;
 }
-function ly(e = {}) {
-	let t = e.dbName ?? Bv, n = e.backend ?? "indexed", r = e.maxBytes ?? Xv(n), i = e.maxBytesPerSession ?? Uv, a = e.evictionWatermark ?? Wv, o = e.debounceMs ?? Gv, s = /* @__PURE__ */ new Set();
+function my(e = {}) {
+	let t = e.dbName ?? Gv, n = e.backend ?? "indexed", r = e.maxBytes ?? ty(n), i = e.maxBytesPerSession ?? Jv, a = e.evictionWatermark ?? Yv, o = e.debounceMs ?? Xv, s = /* @__PURE__ */ new Set();
 	function c(e) {
 		for (let t of s) try {
 			t(e);
@@ -16657,16 +16850,16 @@ function ly(e = {}) {
 		try {
 			if (n === "indexed") {
 				if (typeof indexedDB > "u") throw Error("indexedDB 不可用");
-				l = await oy(t), d(!0);
+				l = await dy(t), d(!0);
 			} else if (n === "session") {
 				if (typeof sessionStorage > "u") throw Error("sessionStorage 不可用");
-				l = sy(sessionStorage), d(!0);
+				l = fy(sessionStorage), d(!0);
 			} else if (n === "local") {
 				if (typeof localStorage > "u") throw Error("localStorage 不可用");
-				l = sy(localStorage), d(!0);
-			} else l = ay(), d(!1);
+				l = fy(localStorage), d(!0);
+			} else l = uy(), d(!1);
 		} catch (e) {
-			l = ay();
+			l = uy();
 			let t = e instanceof Error ? e.message : String(e);
 			d(!1), Promise.resolve().then(() => c({
 				type: "degraded",
@@ -16676,10 +16869,10 @@ function ly(e = {}) {
 	})();
 	let p = /* @__PURE__ */ new Map(), m = /* @__PURE__ */ new Map(), h = /* @__PURE__ */ new Map();
 	function g(e, n, r, a) {
-		let o = Qv(t, r, a, qv);
-		return cy(h, o, async () => {
+		let o = ry(t, r, a, Qv);
+		return py(h, o, async () => {
 			let t = async () => {
-				let t = await l.get(o), s = await l.get(e), u = s == null ? 0 : ry(s), d = ry(n), f = (t?.bytes ?? 0) + (d - u);
+				let t = await l.get(o), s = await l.get(e), u = s == null ? 0 : cy(s), d = cy(n), f = (t?.bytes ?? 0) + (d - u);
 				if (f > i) {
 					c({
 						type: "quota",
@@ -16701,12 +16894,12 @@ function ly(e = {}) {
 			try {
 				await t();
 			} catch (e) {
-				if (Zv(e) && !u) {
+				if (ny(e) && !u) {
 					u = !0;
 					try {
 						await b();
 					} catch {}
-					l = ay(), Promise.resolve().then(() => c({
+					l = uy(), Promise.resolve().then(() => c({
 						type: "degraded",
 						reason: "存储配额超限(QuotaExceededError),已淘汰最旧会话并降级内存"
 					}));
@@ -16718,7 +16911,7 @@ function ly(e = {}) {
 		});
 	}
 	function _(e, n, r, i) {
-		let a = Qv(t, e, n, r), s = p.get(a);
+		let a = ry(t, e, n, r), s = p.get(a);
 		s && s.resolve();
 		let c = m.get(a);
 		return c && clearTimeout(c), new Promise((t) => {
@@ -16745,15 +16938,15 @@ function ly(e = {}) {
 	function y() {
 		v ||= setTimeout(() => {
 			v = null, b();
-		}, Kv);
+		}, Zv);
 	}
 	async function b() {
 		let e = [];
-		await l.scan(ty(t), (t, n) => {
+		await l.scan(oy(t), (t, n) => {
 			t.endsWith("::__meta__") && e.push(n);
 		});
-		let n = iy(e, r, a);
-		for (let e of n) await l.clearPrefix($v(t, e.agentId, e.sessionId)), c({
+		let n = ly(e, r, a);
+		for (let e of n) await l.clearPrefix(iy(t, e.agentId, e.sessionId)), c({
 			type: "evicted",
 			agentId: e.agentId,
 			sessionId: e.sessionId,
@@ -16764,13 +16957,13 @@ function ly(e = {}) {
 		ready: f,
 		async listSessions(e) {
 			let n = [];
-			return await l.scan(ey(t, e), (e, t) => {
+			return await l.scan(ay(t, e), (e, t) => {
 				e.endsWith("::__meta__") && n.push(t);
 			}), n.sort((e, t) => t.lastAccessed - e.lastAccessed);
 		},
 		async load(e, n) {
-			let r = Qv(t, e, n, qv);
-			return await cy(h, r, async () => {
+			let r = ry(t, e, n, Qv);
+			return await py(h, r, async () => {
 				let i = await l.get(r);
 				if (!i) return;
 				let a = {
@@ -16779,8 +16972,8 @@ function ly(e = {}) {
 					todos: [],
 					memory: ""
 				};
-				for (let r of Yv) {
-					let i = await l.get(Qv(t, e, n, r));
+				for (let r of ey) {
+					let i = await l.get(ry(t, e, n, r));
 					i != null && (a[r] = i);
 				}
 				return i.lastAccessed = Date.now(), await l.set(r, i), a;
@@ -16788,7 +16981,7 @@ function ly(e = {}) {
 		},
 		async save(e, t, n) {
 			let r = [];
-			for (let i of Yv) n[i] !== void 0 && r.push(_(e, t, i, n[i]));
+			for (let i of ey) n[i] !== void 0 && r.push(_(e, t, i, n[i]));
 			await Promise.all(r);
 		},
 		async flush() {
@@ -16802,10 +16995,10 @@ function ly(e = {}) {
 			})), c({ type: "flush" }), await b();
 		},
 		async deleteSession(e, n) {
-			await l.clearPrefix($v(t, e, n));
+			await l.clearPrefix(iy(t, e, n));
 		},
 		async createSession(e, n, r) {
-			let i = r ?? zv(), a = Date.now(), o = {
+			let i = r ?? Wv(), a = Date.now(), o = {
 				agentId: e,
 				sessionId: i,
 				createdAt: a,
@@ -16813,7 +17006,7 @@ function ly(e = {}) {
 				bytes: 0,
 				title: n
 			};
-			return await l.set(Qv(t, e, i, qv), o), i;
+			return await l.set(ry(t, e, i, Qv), o), i;
 		},
 		onEvent(e) {
 			s.add(e);
@@ -16828,34 +17021,34 @@ function ly(e = {}) {
 }
 //#endregion
 //#region src/core/sdk/createChatSdk.ts
-var uy = [
-	"你是一个页面操作助手。宿主页面在 window 对象上注册了可操作的属性,你通过专用工具安全地读写这些属性来操作页面。",
-	"所有写操作都经范围控制(仅注册表内)与 schema 校验(不合法会返回结构化错误而非写入),并自动留快照可回退。",
+var hy = [
+	"你是一个 JSON 操作助手。集成方声明了一个主数据对象(含 zod schema 校验),你通过专用工具安全地读写它来完成任务。",
+	"所有写操作都经范围控制(仅 schema 声明字段内)与 schema 校验(不合法会返回结构化错误而非写入),并自动留快照可回退。",
 	"大对象/数组优先用增量 patch(只发改动)而非整体重传,避免输出被截断。",
-	R_.reliableWriteRules
+	L_.reliableWriteRules
 ].join("\n\n");
-function dy(e) {
+function gy(e) {
 	if (!e) return "";
-	let t = z_(e.schema);
+	let t = R_(e.schema);
 	return `\n\n## 可操作数据(字段以 read 工具返回的实际值为准)\n${e.description ? e.description + "\n" : ""}${t}`;
 }
-var fy = 50;
-function py(e) {
-	return e === void 0 || e === !1 ? null : typeof e == "string" ? ly({ backend: e }) : e.enabled === !1 ? null : ly(e);
+var _y = 50;
+function vy(e) {
+	return e === void 0 || e === !1 ? null : typeof e == "string" ? my({ backend: e }) : e.enabled === !1 ? null : my(e);
 }
-function my(e) {
+function yy(e) {
 	return !!e && typeof e == "object" && typeof e.invoke == "function" && typeof e.stream == "function";
 }
-var hy = /* @__PURE__ */ new Map();
-function gy(e) {
+var by = /* @__PURE__ */ new Map();
+function xy(e) {
 	let t = e.content;
 	return typeof t == "string" ? t : Array.isArray(t) ? t.map((e) => typeof e == "string" ? e : e?.text ?? "").join("") : String(t ?? "");
 }
-function _y(e) {
+function Sy(e) {
 	let t = e.summaryLlm ?? e.llm;
 	if (!t) return;
 	let n = e.summaryTemperature ?? .3, r = e.summaryMaxTokens ?? 1024, o = e.summaryTimeoutMs ?? 15e3, c;
-	if (my(t)) c = t;
+	if (yy(t)) c = t;
 	else {
 		let i = t;
 		if (!i.apiKey) {
@@ -16873,20 +17066,20 @@ function _y(e) {
 	return async (e) => {
 		let t = new AbortController(), n = setTimeout(() => t.abort(), o);
 		try {
-			return gy(await c.invoke([new a("你是对话历史压缩助手。把下面按轮次索引的对话要点,改写成一段连贯、紧凑的中文摘要,保留关键事实、用户意图与已用工具,不要编造。直接输出摘要正文。"), new i(e)], { signal: t.signal })).trim();
+			return xy(await c.invoke([new a("你是对话历史压缩助手。把下面按轮次索引的对话要点,改写成一段连贯、紧凑的中文摘要,保留关键事实、用户意图与已用工具,不要编造。直接输出摘要正文。"), new i(e)], { signal: t.signal })).trim();
 		} finally {
 			clearTimeout(n);
 		}
 	};
 }
-function vy(e, t) {
+function Cy(e, t) {
 	return e === "set_data" ? "set" : e === "edit_data" ? "edit" : e === "delete_data" ? "delete" : e === "restore_data" ? "restore" : e === "write" ? t?.del ? "delete" : t?.patch ? "edit" : "set" : null;
 }
-function yy(e, t, n) {
+function wy(e, t, n) {
 	return {
 		name: "sdk-events",
 		wrapToolCall: async (t, r) => {
-			let i = await r(t), a = vy(t.name, t.args);
+			let i = await r(t), a = Cy(t.name, t.args);
 			return a && e({
 				type: "data_change",
 				operation: a,
@@ -16901,7 +17094,7 @@ function yy(e, t, n) {
 		}
 	};
 }
-function by(e, r) {
+function Ty(e, r) {
 	let i = /* @__PURE__ */ fn(null), a = 0;
 	function o(e) {
 		return new Promise((t) => {
@@ -16922,17 +17115,17 @@ function by(e, r) {
 		let t = i.value;
 		t && (i.value = null, t.resolve({ action: e }));
 	}
-	let c = py(e.storage);
+	let c = vy(e.storage);
 	e.debug && c && c.onEvent((e) => console.log("[page-agent-sdk][storage]", e));
-	let l = my(e.llm) ? void 0 : e.llm, u = ng({
+	let l = yy(e.llm) ? void 0 : e.llm, u = ng({
 		model: l?.model,
 		contextWindow: e.contextWindow ?? l?.contextWindow,
 		maxOutputTokens: e.maxOutputTokens ?? l?.maxOutputTokens
 	});
 	e.debug && console.log("[page-agent-sdk][modelCaps]", u);
-	let d = _y(e);
+	let d = Sy(e);
 	e.debug && !d && console.warn("[page-agent-sdk][summarization] 未构造 llmInvoke(apiKey 缺失?),摘要回退零成本索引摘要");
-	let f = /* @__PURE__ */ Qt([]), p = K_(e.vfs?.initialFiles, {
+	let f = /* @__PURE__ */ Qt([]), p = G_(e.vfs?.initialFiles, {
 		persist: c ? { save: (e) => {
 			B.sessionId && c && c.save(r, B.sessionId, { vfs: e });
 		} } : void 0,
@@ -16941,19 +17134,20 @@ function by(e, r) {
 		...e.data,
 		description: e.data.description ?? "主数据对象"
 	} : void 0, v = e.checkpoint, y = v !== void 0 && v !== !1, b = y ? qg({
+		getData: () => O()?.bind,
 		slotPaths: _ ? [""] : [],
 		vfsStore: p,
 		todosMw: m,
 		getTodos: () => g.current?.getState?.()?.todos ?? [],
 		messages: f,
 		maxCheckpoints: v && typeof v == "object" ? v.maxCheckpoints : void 0
-	}) : null, x = !v || typeof v != "object" || v.auto !== !1, S = e.capabilities, C = S?.dataOps !== !1, w = (e.systemPrompt ?? uy) + dy(_), T = C && _ ? jv(_, {
+	}) : null, x = !v || typeof v != "object" || v.auto !== !1, S = e.capabilities, C = S?.dataOps !== !1, w = (e.systemPrompt ?? hy) + gy(_), T = C && _ ? Iv(_, {
 		onAudit: e.debug ? (e) => console.log("[page-agent-sdk][data audit]", e) : void 0,
 		maxSnapshots: e.maxSnapshots,
 		onConflict: o,
 		autoLock: e.autoLock,
 		interceptors: e.interceptors
-	}) : [], E = C ? Av(T, e.toolMode) : [], D = C && _ ? T.controller ?? null : null, O = () => D?.get() ?? _, k = /* @__PURE__ */ new Map(), A = Iv(S, E, Nv);
+	}) : [], E = C ? Fv(T, e.toolMode) : [], D = C && _ ? T.controller ?? null : null, O = () => D?.get() ?? _, k = /* @__PURE__ */ new Map(), A = Vv(S, E, Rv);
 	A.forEach((e) => k.set(e.name, "builtin"));
 	let j = [...e.tools || []];
 	j.forEach((e) => k.set(e.name, "user"));
@@ -16961,10 +17155,10 @@ function by(e, r) {
 	N && k.set(Lg, "builtin");
 	let P = y && b ? [n(async () => {
 		let e = b.list();
-		return e.length ? b.restore() ? `已回退到最近一次正常状态(checkpoint #${e[e.length - 1].id})。对话历史、数据槽注册项、vfs、todos 已整体还原。请基于回退后的状态重新判断并继续。` : "回退失败:无可用 checkpoint。" : "无可用 checkpoint,无法回退。";
+		return e.length ? b.restore() ? `已回退到最近一次正常状态(checkpoint #${e[e.length - 1].id})。对话历史、主数据、vfs、todos 已整体还原。请基于回退后的状态重新判断并继续。` : "回退失败:无可用 checkpoint。" : "无可用 checkpoint,无法回退。";
 	}, {
 		name: "restore_last_checkpoint",
-		description: "回退到最近一次正常状态(整体还原对话历史 + 数据槽注册项 + vfs + todos)。当本轮操作出错、页面被改坏、或走偏时调用,回到本轮起点重新来过。不传参数即回退最近一次。",
+		description: "回退到最近一次正常状态(整体还原对话历史 + 主数据 + vfs + todos)。当本轮操作出错、页面被改坏、或走偏时调用,回到本轮起点重新来过。不传参数即回退最近一次。",
 		schema: t.object({}).optional()
 	}), n(async () => {
 		let e = b.list();
@@ -17003,12 +17197,15 @@ function by(e, r) {
 		"read",
 		"fetch_document"
 	], le = F.filter((e) => ce.includes(e.name)), ue = re ? o_({
-		check: e.verify.check ?? f_({ schemas: () => O() ? { "": O().schema } : {} }),
+		check: e.verify.check ?? f_({
+			schemas: () => O() ? { "": O().schema } : {},
+			root: () => O()?.bind
+		}),
 		adversarial: e.verify?.adversarial ? {
 			llm: e.llm,
 			tools: le
 		} : void 0
-	}) : void 0, de = Rv({
+	}) : void 0, de = Uv({
 		...S,
 		humanConfirm: M,
 		subagents: e.subagents?.map((e) => ({
@@ -17029,14 +17226,11 @@ function by(e, r) {
 		de,
 		...I ? [m] : [],
 		...L ? [kg(e.skills || [], { readVfs: ee ? (e) => p.files[e]?.content : void 0 })] : [],
-		...ee ? [$_(p)] : [],
-		...R ? [I_({
-			...V_(e, u.contextWindow),
+		...ee ? [Q_(p)] : [],
+		...R ? [F_({
+			...B_(e, u.contextWindow),
 			llmInvoke: d,
-			getRegisteredSlots: () => O() ? [{
-				path: "",
-				description: O().description ?? "主数据对象"
-			}] : [],
+			getRegisteredData: () => O() ? [{ description: O().description ?? "主数据对象" }] : [],
 			preserveLastToolResults: (e.contextOptions && e.contextOptions.preserveLastToolResults) ?? ["describe_data", "read"]
 		})] : [],
 		...z ? [h] : [],
@@ -17048,8 +17242,8 @@ function by(e, r) {
 		...oe ? [oe] : [],
 		...se ? [se] : [],
 		...e.middleware || [],
-		yy(me, f, O)
-	], ge = e.maxMemoryRounds ?? fy, B = {
+		wy(me, f, O)
+	], ge = e.maxMemoryRounds ?? _y, B = {
 		agentId: r,
 		store: c,
 		messages: f,
@@ -17124,14 +17318,14 @@ function by(e, r) {
 			if (B.refCount--, B.refCount <= 0) {
 				c && (p.flush?.(), c.flush(), c.dispose());
 				let e = B.mcpClosers.splice(0);
-				e.length && Promise.allSettled(e.map((e) => e())), hy.delete(r);
+				e.length && Promise.allSettled(e.map((e) => e())), by.delete(r);
 			}
 		},
 		resolveConflict: s,
 		getInfo() {
 			return {
 				id: r,
-				model: my(e.llm) ? e.llm.model ?? e.llm.modelName : e.llm.model,
+				model: yy(e.llm) ? e.llm.model ?? e.llm.modelName : e.llm.model,
 				systemPrompt: w,
 				tools: F.map((e) => ({
 					name: e.name,
@@ -17218,7 +17412,7 @@ function by(e, r) {
 			}), F.push(...n), e.debug && console.log(`[page-agent-sdk][mcp] 注入 ${n.length} 个工具,${B.mcpServers.length} 个 server`);
 		}
 		B.agent = bg({
-			...my(e.llm) ? { llm: e.llm } : {
+			...yy(e.llm) ? { llm: e.llm } : {
 				apiKey: e.llm.apiKey,
 				baseUrl: e.llm.baseUrl,
 				model: e.llm.model,
@@ -17238,11 +17432,11 @@ function by(e, r) {
 		}), g.current = B.agent;
 	})(), B;
 }
-function xy(e) {
-	let t = e.id ?? zv();
+function Ey(e) {
+	let t = e.id ?? Wv();
 	e.id || console.warn(`[page-agent-sdk] 未传 options.id,已生成随机 id "${t}"。刷新后持久化数据无法恢复,请传稳定 id。`);
-	let n = e.streaming ?? !0, r = e.ui ?? "default", i, a = e.shareContext ? hy.get(t) : void 0;
-	a ? i = a : (i = by(e, t), e.shareContext && hy.set(t, i)), i.refCount++;
+	let n = e.streaming ?? !0, r = e.ui ?? "default", i, a = e.shareContext ? by.get(t) : void 0;
+	a ? i = a : (i = Ty(e, t), e.shareContext && by.set(t, i)), i.refCount++;
 	let o = null, s = null, c = null;
 	async function l() {
 		if (await i.initDone, r === !1) {
@@ -17277,7 +17471,7 @@ function xy(e) {
 					i.afterRound(), i.store && await i.store.flush();
 				},
 				onClear: () => {
-					i.store && (i.sessionId = zv(), i.vfsStore.clear?.(), i.todosMw.reset([]), e.memory || i.memoryMw.reset(""), i.agent.debugLogs.value = [], i.store.createSession(i.agentId, e.session?.title, i.sessionId));
+					i.store && (i.sessionId = Wv(), i.vfsStore.clear?.(), i.todosMw.reset([]), e.memory || i.memoryMw.reset(""), i.agent.debugLogs.value = [], i.store.createSession(i.agentId, e.session?.title, i.sessionId));
 				},
 				pendingConflict: i.pendingConflict.value,
 				onResolveConflict: (e) => i.resolveConflict(e)
@@ -17316,7 +17510,7 @@ function xy(e) {
 }
 //#endregion
 //#region src/core/sdk/defineTool.ts
-function Sy(e) {
+function Dy(e) {
 	return n(async (t) => {
 		let n = await e.handler(t);
 		return typeof n == "string" ? n : JSON.stringify(n);
@@ -17327,4 +17521,4 @@ function Sy(e) {
 	});
 }
 //#endregion
-export { B_ as CONTEXT_PRESETS, Xh as ChatDialog, ef as CodePreview, Lg as HUMAN_CONFIRM_TOOL_NAME, nf as MessageContent, S_ as connectMcp, Sl as copyText, bg as createAgent, Ig as createApprovalMiddleware, xy as createChatSdk, qg as createCheckpointManager, Jg as createCheckpointMiddleware, jv as createDataOps, Bg as createHumanConfirmMiddleware, zg as createHumanConfirmTool, ay as createMemoryBackend, ly as createSessionStore, n_ as createSubagentMiddleware, a_ as createSubagentsMiddleware, Rv as createUsageHintsMiddleware, o_ as createVerifyMiddleware, K_ as createVfs, sy as createWebStorageBackend, f_ as createWriteBackCheck, Fv as defineDataToolset, Cg as defineSkill, Sy as defineTool, hg as detectGarbledToolCall, rg as estimateTokens, z_ as extractSchemaHint, y_ as extractText, Nv as fetchDocTools, Pv as fetchTools, Av as filterByToolMode, H_ as formatZodIssues, Zv as isQuotaError, lv as jpEval, W_ as jsonParseError, ag as offloadPassThroughChars, ig as offloadThresholdChars, L_ as presets, V_ as resolveContextOptions, ng as resolveModelCaps, mv as runSandboxedScript, dv as searchJson, Iv as selectBuiltinTools, R_ as systemPromptHelpers, $ as toolError, xl as useChat, e as z, U_ as zodError };
+export { z_ as CONTEXT_PRESETS, Xh as ChatDialog, ef as CodePreview, Lg as HUMAN_CONFIRM_TOOL_NAME, nf as MessageContent, S_ as connectMcp, Sl as copyText, bg as createAgent, Ig as createApprovalMiddleware, Ey as createChatSdk, qg as createCheckpointManager, Jg as createCheckpointMiddleware, Iv as createDataOps, Bg as createHumanConfirmMiddleware, zg as createHumanConfirmTool, uy as createMemoryBackend, my as createSessionStore, n_ as createSubagentMiddleware, a_ as createSubagentsMiddleware, Uv as createUsageHintsMiddleware, o_ as createVerifyMiddleware, G_ as createVfs, fy as createWebStorageBackend, f_ as createWriteBackCheck, Bv as defineDataToolset, Cg as defineSkill, Dy as defineTool, hg as detectGarbledToolCall, rg as estimateTokens, R_ as extractSchemaHint, y_ as extractText, Rv as fetchDocTools, zv as fetchTools, Fv as filterByToolMode, V_ as formatZodIssues, ny as isQuotaError, cv as jpEval, U_ as jsonParseError, ag as offloadPassThroughChars, ig as offloadThresholdChars, I_ as presets, B_ as resolveContextOptions, ng as resolveModelCaps, pv as runSandboxedScript, uv as searchJson, Vv as selectBuiltinTools, L_ as systemPromptHelpers, $ as toolError, xl as useChat, e as z, H_ as zodError };