page-agent-sdk 4.16.0 → 4.17.0

package/dist/page-agent-sdk.headless.js

@@ -562,19 +562,19 @@ var G, Ee = /* @__PURE__ */ new WeakSet(), De = class {
 	}
 	run() {
 		if (!(this.flags & 1)) return this.fn();
-		this.flags |= 2, We(this), Pe(this);
-		let e = G, t = Be;
-		G = this, Be = !0;
+		this.flags |= 2, Ue(this), Pe(this);
+		let e = G, t = K;
+		G = this, K = !0;
 		try {
 			return this.fn();
 		} finally {
-			process.env.NODE_ENV !== "production" && G !== this && Ce("Active effect was not restored correctly - this is likely a Vue internal bug."), Fe(this), G = e, Be = t, this.flags &= -3;
+			process.env.NODE_ENV !== "production" && G !== this && Ce("Active effect was not restored correctly - this is likely a Vue internal bug."), Fe(this), G = e, K = t, this.flags &= -3;
 		}
 	}
 	stop() {
 		if (this.flags & 1) {
 			for (let e = this.deps; e; e = e.nextDep) Re(e);
-			this.deps = this.depsTail = void 0, We(this), this.onStop && this.onStop(), this.flags &= -2;
+			this.deps = this.depsTail = void 0, Ue(this), this.onStop && this.onStop(), this.flags &= -2;
 		}
 	}
 	trigger() {
@@ -637,10 +637,10 @@ function Ie(e) {
 	return !!e._dirty;
 }
 function Le(e) {
-	if (e.flags & 4 && !(e.flags & 16) || (e.flags &= -17, e.globalVersion === Ge) || (e.globalVersion = Ge, !e.isSSR && e.flags & 128 && (!e.deps && !e._dirty || !Ie(e)))) return;
+	if (e.flags & 4 && !(e.flags & 16) || (e.flags &= -17, e.globalVersion === We) || (e.globalVersion = We, !e.isSSR && e.flags & 128 && (!e.deps && !e._dirty || !Ie(e)))) return;
 	e.flags |= 2;
-	let t = e.dep, n = G, r = Be;
-	G = e, Be = !0;
+	let t = e.dep, n = G, r = K;
+	G = e, K = !0;
 	try {
 		Pe(e);
 		let n = e.fn(e._value);
@@ -648,7 +648,7 @@ function Le(e) {
 	} catch (e) {
 		throw t.version++, e;
 	} finally {
-		G = n, Be = r, Fe(e), e.flags &= -3;
+		G = n, K = r, Fe(e), e.flags &= -3;
 	}
 }
 function Re(e, t = !1) {
@@ -663,15 +663,15 @@ function ze(e) {
 	let { prevDep: t, nextDep: n } = e;
 	t && (t.nextDep = n, e.prevDep = void 0), n && (n.prevDep = t, e.nextDep = void 0);
 }
-var Be = !0, Ve = [];
-function He() {
-	Ve.push(Be), Be = !1;
+var K = !0, Be = [];
+function Ve() {
+	Be.push(K), K = !1;
 }
-function Ue() {
-	let e = Ve.pop();
-	Be = e === void 0 || e;
+function He() {
+	let e = Be.pop();
+	K = e === void 0 || e;
 }
-function We(e) {
+function Ue(e) {
 	let { cleanup: t } = e;
 	if (e.cleanup = void 0, t) {
 		let e = G;
@@ -683,18 +683,18 @@ function We(e) {
 		}
 	}
 }
-var Ge = 0, Ke = class {
+var We = 0, Ge = class {
 	constructor(e, t) {
 		this.sub = e, this.dep = t, this.version = t.version, this.nextDep = this.prevDep = this.nextSub = this.prevSub = this.prevActiveLink = void 0;
 	}
-}, qe = class {
+}, Ke = class {
 	constructor(e) {
 		this.computed = e, this.version = 0, this.activeLink = void 0, this.subs = void 0, this.map = void 0, this.key = void 0, this.sc = 0, this.__v_skip = !0, process.env.NODE_ENV !== "production" && (this.subsHead = void 0);
 	}
 	track(e) {
-		if (!G || !Be || G === this.computed) return;
+		if (!G || !K || G === this.computed) return;
 		let t = this.activeLink;
-		if (t === void 0 || t.sub !== G) t = this.activeLink = new Ke(G, this), G.deps ? (t.prevDep = G.depsTail, G.depsTail.nextDep = t, G.depsTail = t) : G.deps = G.depsTail = t, K(t);
+		if (t === void 0 || t.sub !== G) t = this.activeLink = new Ge(G, this), G.deps ? (t.prevDep = G.depsTail, G.depsTail.nextDep = t, G.depsTail = t) : G.deps = G.depsTail = t, qe(t);
 		else if (t.version === -1 && (t.version = this.version, t.nextDep)) {
 			let e = t.nextDep;
 			e.prevDep = t.prevDep, t.prevDep && (t.prevDep.nextDep = e), t.prevDep = G.depsTail, t.nextDep = void 0, G.depsTail.nextDep = t, G.depsTail = t, G.deps === t && (G.deps = e);
@@ -702,7 +702,7 @@ var Ge = 0, Ke = class {
 		return process.env.NODE_ENV !== "production" && G.onTrack && G.onTrack(M({ effect: G }, e)), t;
 	}
 	trigger(e) {
-		this.version++, Ge++, this.notify(e);
+		this.version++, We++, this.notify(e);
 	}
 	notify(e) {
 		Me();
@@ -714,24 +714,24 @@ var Ge = 0, Ke = class {
 		}
 	}
 };
-function K(e) {
+function qe(e) {
 	if (e.dep.sc++, e.sub.flags & 4) {
 		let t = e.dep.computed;
 		if (t && !e.dep.subs) {
 			t.flags |= 20;
-			for (let e = t.deps; e; e = e.nextDep) K(e);
+			for (let e = t.deps; e; e = e.nextDep) qe(e);
 		}
 		let n = e.dep.subs;
 		n !== e && (e.prevSub = n, n && (n.nextSub = e)), process.env.NODE_ENV !== "production" && e.dep.subsHead === void 0 && (e.dep.subsHead = e), e.dep.subs = e;
 	}
 }
-var Je = /* @__PURE__ */ new WeakMap(), Ye = /* @__PURE__ */ Symbol(process.env.NODE_ENV === "production" ? "" : "Object iterate"), Xe = /* @__PURE__ */ Symbol(process.env.NODE_ENV === "production" ? "" : "Map keys iterate"), Ze = /* @__PURE__ */ Symbol(process.env.NODE_ENV === "production" ? "" : "Array iterate");
-function q(e, t, n) {
-	if (Be && G) {
-		let r = Je.get(e);
-		r || Je.set(e, r = /* @__PURE__ */ new Map());
+var q = /* @__PURE__ */ new WeakMap(), Je = /* @__PURE__ */ Symbol(process.env.NODE_ENV === "production" ? "" : "Object iterate"), Ye = /* @__PURE__ */ Symbol(process.env.NODE_ENV === "production" ? "" : "Map keys iterate"), Xe = /* @__PURE__ */ Symbol(process.env.NODE_ENV === "production" ? "" : "Array iterate");
+function Ze(e, t, n) {
+	if (K && G) {
+		let r = q.get(e);
+		r || q.set(e, r = /* @__PURE__ */ new Map());
 		let i = r.get(n);
-		i || (r.set(n, i = new qe()), i.map = r, i.key = n), process.env.NODE_ENV === "production" ? i.track() : i.track({
+		i || (r.set(n, i = new Ke()), i.map = r, i.key = n), process.env.NODE_ENV === "production" ? i.track() : i.track({
 			target: e,
 			type: t,
 			key: n
@@ -739,9 +739,9 @@ function q(e, t, n) {
 	}
 }
 function Qe(e, t, n, r, i, a) {
-	let o = Je.get(e);
+	let o = q.get(e);
 	if (!o) {
-		Ge++;
+		We++;
 		return;
 	}
 	let s = (o) => {
@@ -760,17 +760,17 @@ function Qe(e, t, n, r, i, a) {
 		if (i && n === "length") {
 			let e = Number(r);
 			o.forEach((t, n) => {
-				(n === "length" || n === Ze || !de(n) && n >= e) && s(t);
+				(n === "length" || n === Xe || !de(n) && n >= e) && s(t);
 			});
-		} else switch ((n !== void 0 || o.has(void 0)) && s(o.get(n)), a && s(o.get(Ze)), t) {
+		} else switch ((n !== void 0 || o.has(void 0)) && s(o.get(n)), a && s(o.get(Xe)), t) {
 			case "add":
-				i ? a && s(o.get("length")) : (s(o.get(Ye)), le(e) && s(o.get(Xe)));
+				i ? a && s(o.get("length")) : (s(o.get(Je)), le(e) && s(o.get(Ye)));
 				break;
 			case "delete":
-				i || (s(o.get(Ye)), le(e) && s(o.get(Xe)));
+				i || (s(o.get(Je)), le(e) && s(o.get(Ye)));
 				break;
 			case "set":
-				le(e) && s(o.get(Ye));
+				le(e) && s(o.get(Je));
 				break;
 		}
 	}
@@ -778,10 +778,10 @@ function Qe(e, t, n, r, i, a) {
 }
 function $e(e) {
 	let t = /* @__PURE__ */ Y(e);
-	return t === e ? t : (q(t, "iterate", Ze), /* @__PURE__ */ Rt(e) ? t : t.map(Vt));
+	return t === e ? t : (Ze(t, "iterate", Xe), /* @__PURE__ */ Rt(e) ? t : t.map(Vt));
 }
 function et(e) {
-	return q(e = /* @__PURE__ */ Y(e), "iterate", Ze), e;
+	return Ze(e = /* @__PURE__ */ Y(e), "iterate", Xe), e;
 }
 function tt(e, t) {
 	return /* @__PURE__ */ Lt(e) ? Ht(/* @__PURE__ */ It(e) ? Vt(t) : t) : Vt(t);
@@ -905,20 +905,20 @@ function ot(e, t, n, r) {
 }
 function st(e, t, n) {
 	let r = /* @__PURE__ */ Y(e);
-	q(r, "iterate", Ze);
+	Ze(r, "iterate", Xe);
 	let i = r[t](...n);
 	return (i === -1 || i === !1) && /* @__PURE__ */ zt(n[0]) ? (n[0] = /* @__PURE__ */ Y(n[0]), r[t](...n)) : i;
 }
 function ct(e, t, n = []) {
-	He(), Me();
+	Ve(), Me();
 	let r = (/* @__PURE__ */ Y(e))[t].apply(e, n);
-	return Ne(), Ue(), r;
+	return Ne(), He(), r;
 }
 var lt = /* @__PURE__ */ ae("__proto__,__v_isRef,__isVue"), ut = new Set(/* @__PURE__ */ Object.getOwnPropertyNames(Symbol).filter((e) => e !== "arguments" && e !== "caller").map((e) => Symbol[e]).filter(de));
 function dt(e) {
 	de(e) || (e = String(e));
 	let t = /* @__PURE__ */ Y(this);
-	return q(t, "has", e), t.hasOwnProperty(e);
+	return Ze(t, "has", e), t.hasOwnProperty(e);
 }
 var ft = class {
 	constructor(e = !1, t = !1) {
@@ -930,7 +930,7 @@ var ft = class {
 		if (t === "__v_isReactive") return !r;
 		if (t === "__v_isReadonly") return r;
 		if (t === "__v_isShallow") return i;
-		if (t === "__v_raw") return n === (r ? i ? At : J : i ? kt : Ot).get(e) || Object.getPrototypeOf(e) === Object.getPrototypeOf(n) ? e : void 0;
+		if (t === "__v_raw") return n === (r ? i ? J : At : i ? kt : Ot).get(e) || Object.getPrototypeOf(e) === Object.getPrototypeOf(n) ? e : void 0;
 		let a = F(e);
 		if (!r) {
 			let e;
@@ -938,7 +938,7 @@ var ft = class {
 			if (t === "hasOwnProperty") return dt;
 		}
 		let o = Reflect.get(e, t, /* @__PURE__ */ Ut(e) ? e : n);
-		if ((de(t) ? ut.has(t) : lt(t)) || (r || q(e, "get", t), i)) return o;
+		if ((de(t) ? ut.has(t) : lt(t)) || (r || Ze(e, "get", t), i)) return o;
 		if (/* @__PURE__ */ Ut(o)) {
 			let e = a && me(t) ? o : o.value;
 			return r && R(e) ? /* @__PURE__ */ Nt(e) : e;
@@ -964,10 +964,10 @@ var ft = class {
 	}
 	has(e, t) {
 		let n = Reflect.has(e, t);
-		return (!de(t) || !ut.has(t)) && q(e, "has", t), n;
+		return (!de(t) || !ut.has(t)) && Ze(e, "has", t), n;
 	}
 	ownKeys(e) {
-		return q(e, "iterate", F(e) ? "length" : Ye), Reflect.ownKeys(e);
+		return Ze(e, "iterate", F(e) ? "length" : Je), Reflect.ownKeys(e);
 	}
 }, mt = class extends ft {
 	constructor(e = !1) {
@@ -983,7 +983,7 @@ var ft = class {
 function bt(e, t, n) {
 	return function(...r) {
 		let i = this.__v_raw, a = /* @__PURE__ */ Y(i), o = le(a), s = e === "entries" || e === Symbol.iterator && o, c = e === "keys" && o, l = i[e](...r), u = n ? vt : t ? Ht : Vt;
-		return !t && q(a, "iterate", c ? Xe : Ye), M(Object.create(l), { next() {
+		return !t && Ze(a, "iterate", c ? Ye : Je), M(Object.create(l), { next() {
 			let { value: e, done: t } = l.next();
 			return t ? {
 				value: e,
@@ -1008,7 +1008,7 @@ function St(e, t) {
 	let n = {
 		get(n) {
 			let r = this.__v_raw, i = /* @__PURE__ */ Y(r), a = /* @__PURE__ */ Y(n);
-			e || (H(n, a) && q(i, "get", n), q(i, "get", a));
+			e || (H(n, a) && Ze(i, "get", n), Ze(i, "get", a));
 			let { has: o } = yt(i), s = t ? vt : e ? Ht : Vt;
 			if (o.call(i, n)) return s(r.get(n));
 			if (o.call(i, a)) return s(r.get(a));
@@ -1016,15 +1016,15 @@ function St(e, t) {
 		},
 		get size() {
 			let t = this.__v_raw;
-			return !e && q(/* @__PURE__ */ Y(t), "iterate", Ye), t.size;
+			return !e && Ze(/* @__PURE__ */ Y(t), "iterate", Je), t.size;
 		},
 		has(t) {
 			let n = this.__v_raw, r = /* @__PURE__ */ Y(n), i = /* @__PURE__ */ Y(t);
-			return e || (H(t, i) && q(r, "has", t), q(r, "has", i)), t === i ? n.has(t) : n.has(t) || n.has(i);
+			return e || (H(t, i) && Ze(r, "has", t), Ze(r, "has", i)), t === i ? n.has(t) : n.has(t) || n.has(i);
 		},
 		forEach(n, r) {
 			let i = this, a = i.__v_raw, o = /* @__PURE__ */ Y(a), s = t ? vt : e ? Ht : Vt;
-			return !e && q(o, "iterate", Ye), a.forEach((e, t) => n.call(r, s(e), s(t), i));
+			return !e && Ze(o, "iterate", Je), a.forEach((e, t) => n.call(r, s(e), s(t), i));
 		}
 	};
 	return M(n, e ? {
@@ -1075,7 +1075,7 @@ function Dt(e, t, n) {
 		Ce(`Reactive ${t} contains both the raw and reactive versions of the same object${t === "Map" ? " as keys" : ""}, which can lead to inconsistencies. Avoid differentiating between the raw and reactive versions of an object and only use the reactive version if possible.`);
 	}
 }
-var Ot = /* @__PURE__ */ new WeakMap(), kt = /* @__PURE__ */ new WeakMap(), J = /* @__PURE__ */ new WeakMap(), At = /* @__PURE__ */ new WeakMap();
+var Ot = /* @__PURE__ */ new WeakMap(), kt = /* @__PURE__ */ new WeakMap(), At = /* @__PURE__ */ new WeakMap(), J = /* @__PURE__ */ new WeakMap();
 function jt(e) {
 	switch (e) {
 		case "Object":
@@ -1093,11 +1093,11 @@ function Mt(e) {
 }
 // @__NO_SIDE_EFFECTS__
 function Nt(e) {
-	return Ft(e, !0, gt, Tt, J);
+	return Ft(e, !0, gt, Tt, At);
 }
 // @__NO_SIDE_EFFECTS__
 function Pt(e) {
-	return Ft(e, !0, _t, Et, At);
+	return Ft(e, !0, _t, Et, J);
 }
 function Ft(e, t, n, r, i) {
 	if (!R(e)) return process.env.NODE_ENV !== "production" && Ce(`value cannot be made ${t ? "readonly" : "reactive"}: ${String(e)}`), e;
@@ -1151,7 +1151,7 @@ function Kt(e, t) {
 }
 var qt = class {
 	constructor(e, t) {
-		this.dep = new qe(), this.__v_isRef = !0, this.__v_isShallow = !1, this._rawValue = t ? e : /* @__PURE__ */ Y(e), this._value = t ? e : Vt(e), this.__v_isShallow = t;
+		this.dep = new Ke(), this.__v_isRef = !0, this.__v_isShallow = !1, this._rawValue = t ? e : /* @__PURE__ */ Y(e), this._value = t ? e : Vt(e), this.__v_isShallow = t;
 	}
 	get value() {
 		return process.env.NODE_ENV === "production" ? this.dep.track() : this.dep.track({
@@ -1182,19 +1182,19 @@ function Jt(e) {
 function Yt(e) {
 	return /* @__PURE__ */ Ut(e) ? e.value : e;
 }
-var X = {
+var Xt = {
 	get: (e, t, n) => t === "__v_raw" ? e : Yt(Reflect.get(e, t, n)),
 	set: (e, t, n, r) => {
 		let i = e[t];
 		return /* @__PURE__ */ Ut(i) && !/* @__PURE__ */ Ut(n) ? (i.value = n, !0) : Reflect.set(e, t, n, r);
 	}
 };
-function Xt(e) {
-	return /* @__PURE__ */ It(e) ? e : new Proxy(e, X);
+function X(e) {
+	return /* @__PURE__ */ It(e) ? e : new Proxy(e, Xt);
 }
 var Zt = class {
 	constructor(e, t, n) {
-		this.fn = e, this.setter = t, this._value = void 0, this.dep = new qe(this), this.__v_isRef = !0, this.deps = void 0, this.depsTail = void 0, this.flags = 16, this.globalVersion = Ge - 1, this.next = void 0, this.effect = this, this.__v_isReadonly = !t, this.isSSR = n;
+		this.fn = e, this.setter = t, this._value = void 0, this.dep = new Ke(this), this.__v_isRef = !0, this.deps = void 0, this.depsTail = void 0, this.flags = 16, this.globalVersion = We - 1, this.next = void 0, this.effect = this, this.__v_isReadonly = !t, this.isSSR = n;
 	}
 	notify() {
 		if (this.flags |= 16, !(this.flags & 8) && G !== this) return je(this, !0), !0;
@@ -1237,11 +1237,11 @@ function rn(e, t, n = A) {
 		process.env.NODE_ENV !== "production" && l(e);
 	})) : L(e) ? f = t ? c ? () => c(e, 2) : e : () => {
 		if (p) {
-			He();
+			Ve();
 			try {
 				p();
 			} finally {
-				Ue();
+				He();
 			}
 		}
 		let t = tn;
@@ -1319,7 +1319,7 @@ function cn() {
 var ln = !1;
 function un(e, ...t) {
 	if (ln) return;
-	ln = !0, He();
+	ln = !0, Ve();
 	let n = on.length ? on[on.length - 1].component : null, r = n && n.appContext.config.warnHandler, i = dn();
 	if (r) _n(r, n, 11, [
 		e + t.map((e) => e.toString?.call(e) ?? JSON.stringify(e)).join(""),
@@ -1331,7 +1331,7 @@ function un(e, ...t) {
 		let n = [`[Vue warn]: ${e}`, ...t];
 		i.length && n.push("\n", ...fn(i)), console.warn(...n);
 	}
-	Ue(), ln = !1;
+	He(), ln = !1;
 }
 function dn() {
 	let e = on[on.length - 1];
@@ -1440,11 +1440,11 @@ function yn(e, t, n, r = !0) {
 			r = r.parent;
 		}
 		if (a) {
-			He(), _n(a, null, 10, [
+			Ve(), _n(a, null, 10, [
 				e,
 				i,
 				o
-			]), Ue();
+			]), He();
 			return;
 		}
 	}
@@ -1684,7 +1684,7 @@ var ar = /* @__PURE__ */ Symbol.for("v-ndc"), or = (e) => e ? Yr(e) ? Zr(e) : or
 			else dr && (o[t] = 0);
 		}
 		let l = sr[t], u, d;
-		if (l) return t === "$attrs" ? (q(e.attrs, "get", ""), process.env.NODE_ENV) : process.env.NODE_ENV !== "production" && t === "$slots" && q(e, "get", t), l(e);
+		if (l) return t === "$attrs" ? (Ze(e.attrs, "get", ""), process.env.NODE_ENV) : process.env.NODE_ENV !== "production" && t === "$slots" && Ze(e, "get", t), l(e);
 		if ((u = s.__cssModules) && (u = u[t])) return u;
 		if (n !== A && P(n, t)) return o[t] = 4, n[t];
 		if (d = c.config.globalProperties, P(d, t)) return d[t];
@@ -1943,7 +1943,7 @@ function Yr(e) {
 var Xr = !1;
 process.env.NODE_ENV;
 function Zr(e) {
-	return e.exposed ? e.exposeProxy ||= new Proxy(Xt(Bt(e.exposed)), {
+	return e.exposed ? e.exposeProxy ||= new Proxy(X(Bt(e.exposed)), {
 		get(t, n) {
 			if (n in t) return t[n];
 			if (n in sr) return sr[n](e);
@@ -1994,9 +1994,9 @@ function ii() {
 				"VueInstance"
 			];
 			if (/* @__PURE__ */ Ut(t)) {
-				He();
+				Ve();
 				let n = t.value;
-				return Ue(), [
+				return He(), [
 					"div",
 					{},
 					[
@@ -12401,6 +12401,11 @@ var em = [
 	{
 		name: "pageContext",
 		defaultOn: !1
+	},
+	{
+		name: "domEdit",
+		defaultOn: !1,
+		requires: ["domInspect"]
 	}
 ];
 function tm(e) {
@@ -13307,9 +13312,298 @@ function Rh(e) {
 	});
 }
 //#endregion
+//#region src/core/tools/domEdit.ts
+var zh = "data-pg-snap", Bh = 20, Vh = 256 * 1024, Hh = t.enum([
+	"before",
+	"after",
+	"prepend",
+	"append",
+	"replace"
+]), Uh = /* @__PURE__ */ new Set([
+	"script",
+	"iframe",
+	"object",
+	"embed",
+	"link",
+	"meta",
+	"base"
+]), Wh = /^on\w+$/i, Gh = /* @__PURE__ */ new Set([
+	"href",
+	"src",
+	"action",
+	"formaction",
+	"xlink:href",
+	"data"
+]);
+function Kh(e) {
+	return /^\s*(javascript|vbscript)\s*:/i.test(e);
+}
+function qh(e) {
+	return !e || !/^[a-zA-Z_:][-a-zA-Z0-9_:.]*$/.test(e) ? `非法属性名 "${e}"` : Wh.test(e) ? `事件属性 ${e} 被拒(on* 内联脚本防误执行)` : null;
+}
+function Jh(e, t) {
+	let n = [];
+	Uh.has(e.toLowerCase()) && n.push(`标签 <${e}> 被拒(可执行/页面行为面;文档标注场景请用常规内容标签)`);
+	for (let [e, r] of Object.entries(t ?? {})) {
+		let t = qh(e);
+		t ? n.push(t) : Gh.has(e.toLowerCase()) && Kh(String(r)) && n.push(`${e} 的 javascript:/vbscript: 协议被拒`);
+	}
+	return n;
+}
+var Yh = t.discriminatedUnion("op", [
+	t.object({
+		op: t.literal("set_text"),
+		selector: t.string().min(1),
+		text: t.string()
+	}),
+	t.object({
+		op: t.literal("set_html"),
+		selector: t.string().min(1),
+		html: t.string()
+	}),
+	t.object({
+		op: t.literal("set_attr"),
+		selector: t.string().min(1),
+		name: t.string().min(1),
+		value: t.string()
+	}),
+	t.object({
+		op: t.literal("remove_attr"),
+		selector: t.string().min(1),
+		name: t.string().min(1)
+	}),
+	t.object({
+		op: t.literal("add_class"),
+		selector: t.string().min(1),
+		classes: t.string().min(1).describe("空格分隔")
+	}),
+	t.object({
+		op: t.literal("remove_class"),
+		selector: t.string().min(1),
+		classes: t.string().min(1).describe("空格分隔")
+	}),
+	t.object({
+		op: t.literal("set_style"),
+		selector: t.string().min(1),
+		style: t.record(t.string(), t.string()).describe("CSS 属性 → 值")
+	}),
+	t.object({
+		op: t.literal("insert"),
+		anchor: t.string().min(1).describe("锚元素 selector"),
+		position: Hh.describe("before/after = 锚前后兄弟;prepend/append = 锚首尾子;replace = 换掉锚本身"),
+		tag: t.string().min(1).describe("新元素标签名,如 div/span/mark"),
+		attrs: t.record(t.string(), t.string()).optional(),
+		text: t.string().optional(),
+		html: t.string().optional()
+	}),
+	t.object({
+		op: t.literal("remove"),
+		selector: t.string().min(1)
+	}),
+	t.object({
+		op: t.literal("move"),
+		selector: t.string().min(1).describe("要移动的元素"),
+		to: t.string().min(1).describe("目标父容器 selector"),
+		position: t.enum([
+			"prepend",
+			"append",
+			"before",
+			"after"
+		]).describe("并入 to 的方式")
+	}),
+	t.object({
+		op: t.literal("highlight"),
+		selector: t.string().min(1),
+		color: t.string().optional().describe("高亮色(默认黄 #fef08a)"),
+		scroll: t.boolean().optional().describe("滚动到可视区(默认 true)"),
+		note: t.string().optional().describe("可选浮注文案")
+	})
+]);
+function Xh(e) {
+	let t = [];
+	for (let n = 0; n < e.length; n++) {
+		let r = e[n], i = `patches[${n}](${r.op})`;
+		if (r.op === "set_attr") {
+			let e = qh(r.name);
+			e ? t.push(`${i}: ${e}`) : Gh.has(r.name.toLowerCase()) && Kh(r.value) && t.push(`${i}: ${r.name} 的 javascript:/vbscript: 协议被拒`);
+		}
+		r.op === "insert" && (t.push(...Jh(r.tag, r.attrs).map((e) => `${i}: ${e}`)), r.text !== void 0 && r.html !== void 0 && t.push(`${i}: text 与 html 二选一`)), r.op === "highlight" && r.color && !/^#[0-9a-fA-F]{3,8}$|^[a-zA-Z]+$/.test(r.color) && t.push(`${i}: color 仅接受 hex 或颜色名`);
+	}
+	return t;
+}
+function Zh(e = {}) {
+	let n = [], r = 0, i = () => e.getDocument?.() ?? (typeof document < "u" ? document : null), a = (e, t, n) => {
+		let r = [];
+		try {
+			r = Array.from(e.querySelectorAll(t));
+		} catch {
+			return { err: `${n}: selector 语法错误 "${t}"` };
+		}
+		return r.length ? r.length > 1 ? { err: `${n}: selector 命中 ${r.length} 个元素,写操作要求唯一匹配。加层级/属性约束收窄(如 "${t}:first-child" 不行就用索引路径或唯一 class)` } : { el: r[0] } : { err: `${n}: 未命中任何元素(selector="${t}")。先用 get_dom/dom_search 定位,再写更精确的 selector` };
+	}, o = (e) => ji(e) ? "目标元素位于 SDK 对话框自身 DOM 内,写操作被拒(防 agent 改坏自己的 UI)。请操作宿主页面内容区域" : null, c = (e, t) => {
+		if (!e) return null;
+		let n = e.outerHTML;
+		if (n.length > Vh) return `快照超限:受影响子树 ${(n.length / 1024).toFixed(0)}KB > ${Vh / 1024}KB。缩小 selector 到更深的子树再改(快照是回滚安全网,巨树快照爆内存)`;
+		let i = e.getAttribute?.(zh) ?? "";
+		return i || (i = `pg${++r}`, e.setAttribute?.(zh, i)), t.some((e) => e.id === i) || t.push({
+			id: i,
+			html: n
+		}), null;
+	}, l = (e, t, n) => {
+		switch (t.op) {
+			case "set_text":
+			case "set_html":
+			case "set_attr":
+			case "remove_attr":
+			case "add_class":
+			case "remove_class":
+			case "set_style":
+			case "highlight": {
+				let r = a(e, t.selector, `${t.op} selector`);
+				if ("err" in r) return r.err;
+				let i = o(r.el);
+				if (i) return i;
+				let s = c(r.el, n);
+				if (s) return s;
+				switch (t.op) {
+					case "set_text":
+						r.el.textContent = t.text;
+						break;
+					case "set_html":
+						r.el.innerHTML = t.html;
+						break;
+					case "set_attr":
+						r.el.setAttribute(t.name, t.value);
+						break;
+					case "remove_attr":
+						r.el.removeAttribute(t.name);
+						break;
+					case "add_class":
+						r.el.classList?.add(...t.classes.split(/\s+/).filter(Boolean));
+						break;
+					case "remove_class":
+						r.el.classList?.remove(...t.classes.split(/\s+/).filter(Boolean));
+						break;
+					case "set_style": {
+						let e = r.el.style;
+						for (let [n, r] of Object.entries(t.style)) e[n] = r;
+						break;
+					}
+					case "highlight": {
+						let e = t.color ?? "#fef08a", n = r.el.style;
+						n.backgroundColor = e, n.outline = "2px solid rgba(59,130,246,.85)", t.note && r.el.setAttribute("title", t.note), t.scroll !== !1 && r.el.scrollIntoView?.({
+							behavior: "smooth",
+							block: "center"
+						});
+						break;
+					}
+				}
+				return null;
+			}
+			case "insert": {
+				let r = a(e, t.anchor, "insert anchor");
+				if ("err" in r) return r.err;
+				let i = r.el, s = o(i) ?? (t.position === "replace" ? null : o(i.parentElement ?? i));
+				if (s) return s;
+				let l = t.position === "prepend" || t.position === "append" ? i : i.parentElement, u = c(l ?? i, n);
+				if (u) return u;
+				let d = e.createElement(t.tag);
+				for (let [e, n] of Object.entries(t.attrs ?? {})) d.setAttribute(e, n);
+				return t.html === void 0 ? t.text !== void 0 && (d.textContent = t.text) : d.innerHTML = t.html, t.position === "prepend" ? i.prepend(d) : t.position === "append" ? i.appendChild(d) : t.position === "before" ? (i.parentElement ?? i).insertBefore(d, i) : t.position === "after" ? (i.parentElement ?? i).insertBefore(d, i.nextSibling) : i.replaceWith(d), null;
+			}
+			case "remove": {
+				let r = a(e, t.selector, "remove selector");
+				return "err" in r ? r.err : o(r.el) || (r.el.parentElement ? c(r.el.parentElement, n) || (r.el.remove(), null) : "remove: 目标无父容器(根元素不可删)");
+			}
+			case "move": {
+				let r = a(e, t.selector, "move selector");
+				if ("err" in r) return r.err;
+				let i = a(e, t.to, "move to");
+				if ("err" in i) return i.err;
+				let s = o(r.el) ?? o(i.el);
+				if (s) return s;
+				if (r.el.contains(i.el)) return "move: 不能把元素移进它自己的子孙(循环结构)";
+				let l = r.el.parentElement;
+				return l ? c(l, n) || c(t.position === "prepend" || t.position === "append" ? i.el : i.el.parentElement ?? i.el, n) || (t.position === "prepend" ? i.el.prepend(r.el) : t.position === "append" ? i.el.appendChild(r.el) : t.position === "before" ? (i.el.parentElement ?? i.el).insertBefore(r.el, i.el) : (i.el.parentElement ?? i.el).insertBefore(r.el, i.el.nextSibling), null) : "move: 目标无父容器";
+			}
+		}
+	};
+	return [s(async ({ patches: t, dryRun: r }) => {
+		let s = i();
+		if (!s) return "ERROR: dom_edit 仅在浏览器环境可用(当前运行在 node/服务端,无 DOM)。改数据请用 write 工具。";
+		if (!t?.length) return "ERROR: patches 不能为空。支持 op:set_text/set_html/set_attr/remove_attr/add_class/remove_class/set_style/insert/remove/move/highlight";
+		let c = Xh(t);
+		if (c.length) return `ERROR: 校验失败(整批拒绝,零改动):\n- ${c.join("\n- ")}`;
+		let u = (e, t) => {
+			let n = a(s, e, t);
+			return "err" in n ? n.err : o(n.el);
+		};
+		for (let e = 0; e < t.length; e++) {
+			let n = t[e], r = n.op === "insert" ? u(n.anchor, `patches[${e}](insert) anchor`) : u(n.selector, `patches[${e}](${n.op}) selector`);
+			if (r) return `ERROR: ${r}\n(整批拒绝,零改动)`;
+			if (n.op === "move") {
+				let t = u(n.to, `patches[${e}](move) to`);
+				if (t) return `ERROR: ${t}\n(整批拒绝,零改动)`;
+			}
+		}
+		let d = t.map((e) => e.op === "insert" ? `insert<${e.tag}>` : e.op);
+		if (r) return e.onEdit?.({
+			ops: d,
+			applied: 0,
+			dryRun: !0
+		}), `dryRun 通过:${t.length} 个操作可应用,未落地。\n${d.map((e, t) => `${t + 1}. ${e}`).join("\n")}\n确认后去掉 dryRun 重发。`;
+		let f = [];
+		for (let e = 0; e < t.length; e++) {
+			let n = l(s, t[e], f);
+			if (n) return `ERROR: patches[${e}] 应用失败:${n}\n本条未应用;此前的操作已生效,可用 dom_restore 回滚到本批之前。`;
+		}
+		return f.length && (n.push({
+			snips: f,
+			ops: d
+		}), n.length > Bh && n.shift()), e.onEdit?.({
+			ops: d,
+			applied: t.length,
+			dryRun: !1
+		}), `已应用 ${t.length} 个操作(${d.join(", ")})。页面为临时态(刷新即失);不满意可 dom_restore 回滚到本批之前;视觉验证可 take_screenshot。`;
+	}, {
+		name: "dom_edit",
+		description: "修改宿主页面元素(标注/内容/结构):patches 批量原子操作(任一失败整批拒绝)。op 集:set_text/set_html(内容)、set_attr/remove_attr、add_class/remove_class、set_style(样式)、insert(新建元素,before/after/prepend/append/replace)、remove、move(层级调整)、highlight(高亮+滚动定位)。纪律:selector 必须唯一命中(先 get_dom/dom_search 定位);改前自动快照,dom_restore 回滚;数据驱动页面请改数据而非 DOM。",
+		schema: t.object({
+			patches: t.array(Yh).min(1).max(20).describe("批量操作(原子;顺序应用)"),
+			dryRun: t.boolean().optional().describe("只校验不落地(预检)")
+		})
+	}), s(async () => {
+		let e = i();
+		if (!e) return "ERROR: dom_restore 仅在浏览器环境可用。";
+		let t = n.pop();
+		if (!t) return "无可用快照(栈空)。";
+		let r = 0, a = [];
+		for (let n = t.snips.length - 1; n >= 0; n--) {
+			let { id: i, html: o } = t.snips[n], s = e.querySelector(`[${zh}="${i}"]`);
+			if (!s) {
+				a.push(i);
+				continue;
+			}
+			let c = e.createElement("template");
+			c.innerHTML = o;
+			let l = c.content.firstElementChild;
+			if (!l) {
+				a.push(i);
+				continue;
+			}
+			s.replaceWith(l), r++;
+		}
+		return a.length ? `已回滚 ${r}/${t.snips.length} 处;${a.length} 处快照点已被后续结构变更覆盖(元素被整体替换),未能复原 —— 刷新页面可回宿主初始态。` : `已回滚最近一批 ${t.ops.join(", ")}(共 ${r} 处)。`;
+	}, {
+		name: "dom_restore",
+		description: "回滚最近一次 dom_edit 批操作(自动快照;可连续调用逐批回退,栈上限 20 批)。快照点被后续结构变更覆盖时如实报告未复原数。",
+		schema: t.object({}).optional()
+	})];
+}
+//#endregion
 //#region src/core/tools/fetchDoc.ts
-var zh = 3e4, Bh = [s(async ({ url: e, as: t }) => {
-	let n = new AbortController(), r = setTimeout(() => n.abort(), zh);
+var Qh = 3e4, $h = [s(async ({ url: e, as: t }) => {
+	let n = new AbortController(), r = setTimeout(() => n.abort(), Qh);
 	try {
 		let r = await fetch(e, {
 			method: "GET",
@@ -13326,7 +13620,7 @@ var zh = 3e4, Bh = [s(async ({ url: e, as: t }) => {
 		].join("\n");
 	} catch (t) {
 		let r = t?.message || String(t);
-		return n.signal.aborted ? `获取失败:请求超时(${zh}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
+		return n.signal.aborted ? `获取失败:请求超时(${Qh}ms,${e})。` : /Failed to fetch|NetworkError|CORS|blocked/i.test(r) ? `获取失败:可能是 CORS 跨域拦截或网络错误(${r})。浏览器仅能 GET 同源或服务端已配置 CORS 的资源;跨域抓取需后端代理。` : `获取失败:${r}`;
 	} finally {
 		clearTimeout(r);
 	}
@@ -13337,7 +13631,7 @@ var zh = 3e4, Bh = [s(async ({ url: e, as: t }) => {
 		url: t.string().describe("要抓取的 URL(同源或已配 CORS)"),
 		as: t.enum(["text", "markdown"]).optional().describe("返回格式标签,默认 text")
 	})
-})], Vh = [
+})], eg = [
 	"id",
 	"class",
 	"href",
@@ -13349,12 +13643,12 @@ var zh = 3e4, Bh = [s(async ({ url: e, as: t }) => {
 	"aria-label",
 	"name",
 	"type"
-], Hh = /^(value|srcdoc|formaction|on\w+)$/i, Uh = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session/i;
-function Wh(e, t) {
+], tg = /^(value|srcdoc|formaction|on\w+)$/i, ng = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session/i;
+function rg(e, t) {
 	if (!e) return null;
-	let { depth: n, attrs: r, includeText: i = !0 } = t, a = r !== void 0, o = r ?? Vh, s = (e) => {
+	let { depth: n, attrs: r, includeText: i = !0 } = t, a = r !== void 0, o = r ?? eg, s = (e) => {
 		let t = {};
-		for (let n of Array.from(e.attributes)) (a ? o.includes(n.name) : o.includes(n.name) || n.name.startsWith("data-")) && (Hh.test(n.name) || Uh.test(n.name) || (t[n.name] = n.value));
+		for (let n of Array.from(e.attributes)) (a ? o.includes(n.name) : o.includes(n.name) || n.name.startsWith("data-")) && (tg.test(n.name) || ng.test(n.name) || (t[n.name] = n.value));
 		return t;
 	}, c = (e, t) => {
 		let n = {
@@ -13370,11 +13664,11 @@ function Wh(e, t) {
 	};
 	return c(e, n);
 }
-var Gh = s(({ selector: e, depth: t, attrs: n, includeText: r }) => {
+var ig = s(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 	if (typeof document > "u") return "ERROR: get_dom 仅在浏览器环境可用(当前运行在 node/服务端,无 DOM)。请改用数据工具(read/schema_data)排查结构。";
 	let i = e ? document.querySelector(e) : document.body;
 	if (!i) return `未找到匹配元素:selector="${e}"`;
-	let a = Wh(i, {
+	let a = rg(i, {
 		depth: t ?? 3,
 		attrs: n,
 		includeText: r ?? !0
@@ -13389,7 +13683,7 @@ var Gh = s(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 		attrs: t.array(t.string()).optional().describe("属性白名单(传了 = 严格白名单;不传 = 默认常用 + data-*)"),
 		includeText: t.boolean().optional().describe("是否包含直接文本(默认 true)")
 	})
-}), Kh = [
+}), ag = [
 	"article",
 	"main",
 	"[role=\"main\"]",
@@ -13398,7 +13692,7 @@ var Gh = s(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 	".post-content",
 	".markdown-body",
 	"#content"
-], qh = /* @__PURE__ */ new Set([
+], og = /* @__PURE__ */ new Set([
 	"script",
 	"style",
 	"noscript",
@@ -13406,15 +13700,15 @@ var Gh = s(({ selector: e, depth: t, attrs: n, includeText: r }) => {
 	"svg",
 	"iframe",
 	"canvas"
-]), Jh = "script,style,noscript,template,svg,iframe,canvas";
-function Yh(e) {
-	for (let t of Kh) try {
+]), sg = "script,style,noscript,template,svg,iframe,canvas";
+function cg(e) {
+	for (let t of ag) try {
 		let n = e.querySelector?.(t);
 		if (n) return n;
 	} catch {}
 	return e.body ?? null;
 }
-function Xh(e, t, n) {
+function lg(e, t, n) {
 	if (!e) return "";
 	let r = [], i = (e) => {
 		let t = (e.innerText ?? e.textContent ?? "").replace(/\r\n/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
@@ -13422,7 +13716,7 @@ function Xh(e, t, n) {
 	}, a = (e) => {
 		for (let r of Array.from(e.children ?? [])) {
 			let e = r, o = String(e.tagName ?? "").toLowerCase();
-			if (!(t(e) || qh.has(o))) {
+			if (!(t(e) || og.has(o))) {
 				if (!n(e)) {
 					i(e);
 					continue;
@@ -13433,21 +13727,21 @@ function Xh(e, t, n) {
 	};
 	return a(e), r.join("\n\n").trim();
 }
-function Zh(e) {
+function ug(e) {
 	try {
-		return e.querySelector?.(Jh) != null || e.querySelector?.(".chat-dialog, .chat-mask, .debug-drawer, .skill-mask, .skill-panel, .chat-selection-menu") != null;
+		return e.querySelector?.(sg) != null || e.querySelector?.(".chat-dialog, .chat-mask, .debug-drawer, .skill-mask, .skill-panel, .chat-selection-menu") != null;
 	} catch {
 		return !0;
 	}
 }
-var Qh = [Gh, s(({ selector: e, offset: t, limit: n }) => {
+var dg = [ig, s(({ selector: e, offset: t, limit: n }) => {
 	if (typeof document > "u") return "ERROR: read_page 仅在浏览器环境可用(当前运行在 node/服务端,无 DOM)。请基于用户消息中的引用原文回答。";
 	let r, i;
 	if (e) {
 		if (r = document.querySelector(e), !r) return `未找到匹配元素:selector="${e}"`;
 		i = e;
-	} else r = Yh(document), i = r ? r.tagName.toLowerCase() : "body";
-	let a = Xh(r, ji, Zh), o = t ?? 0, s = n ?? 4e3;
+	} else r = cg(document), i = r ? r.tagName.toLowerCase() : "body";
+	let a = lg(r, ji, ug), o = t ?? 0, s = n ?? 4e3;
 	if (o > a.length) return `offset=${o} 超出正文长度 ${a.length}(先从 offset=0 读,按 hasMore 续读)`;
 	let c = a.slice(o, o + s);
 	return JSON.stringify({
@@ -13466,22 +13760,22 @@ var Qh = [Gh, s(({ selector: e, offset: t, limit: n }) => {
 		offset: t.number().int().min(0).optional().describe("起始字符偏移(默认 0;续读传上次 offset + 返回 text 长度)"),
 		limit: t.number().int().min(200).max(2e4).optional().describe("本次返回字符上限(默认 4000,上限 20000)")
 	})
-})], $h = /* @__PURE__ */ "display.position.visibility.opacity.color.background-color.background-image.font-size.font-weight.line-height.text-align.z-index.overflow.width.height.margin.padding.border.border-radius.box-shadow.transform.transition.animation.cursor.pointer-events.flex-direction.gap.max-width.min-height".split("."), eg = /* @__PURE__ */ new WeakMap(), tg = !1;
-function ng() {
-	if (tg) return;
+})], fg = /* @__PURE__ */ "display.position.visibility.opacity.color.background-color.background-image.font-size.font-weight.line-height.text-align.z-index.overflow.width.height.margin.padding.border.border-radius.box-shadow.transform.transition.animation.cursor.pointer-events.flex-direction.gap.max-width.min-height".split("."), pg = /* @__PURE__ */ new WeakMap(), mg = !1;
+function hg() {
+	if (mg) return;
 	let e = globalThis.EventTarget;
 	if (!e?.prototype?.addEventListener) return;
-	tg = !0;
+	mg = !0;
 	let t = e.prototype.addEventListener, n = e.prototype.removeEventListener;
 	e.prototype.addEventListener = function(e, ...n) {
 		try {
-			let t = eg.get(this);
-			t || (t = /* @__PURE__ */ new Map(), eg.set(this, t)), t.set(String(e), (t.get(String(e)) ?? 0) + 1);
+			let t = pg.get(this);
+			t || (t = /* @__PURE__ */ new Map(), pg.set(this, t)), t.set(String(e), (t.get(String(e)) ?? 0) + 1);
 		} catch {}
 		return t.call(this, e, ...n);
 	}, e.prototype.removeEventListener = function(e, ...t) {
 		try {
-			let t = eg.get(this);
+			let t = pg.get(this);
 			if (t) {
 				let n = (t.get(String(e)) ?? 1) - 1;
 				n <= 0 ? t.delete(String(e)) : t.set(String(e), n);
@@ -13490,10 +13784,10 @@ function ng() {
 		return n.call(this, e, ...t);
 	};
 }
-function rg(e) {
-	return [...eg.get(e)?.entries() ?? []].filter(([, e]) => e > 0).map(([e]) => e);
+function gg(e) {
+	return [...pg.get(e)?.entries() ?? []].filter(([, e]) => e > 0).map(([e]) => e);
 }
-function ig(e, t = 12) {
+function _g(e, t = 12) {
 	let n = [], r = e, i = 0;
 	for (; r && r.tagName && i < t;) {
 		let e = r.tagName.toLowerCase(), t = r.id;
@@ -13514,7 +13808,7 @@ function ig(e, t = 12) {
 	}
 	return n.join(" > ");
 }
-function ag(e, t, n = {}) {
+function vg(e, t, n = {}) {
 	if (!e) return {
 		hits: [],
 		total: 0,
@@ -13552,7 +13846,7 @@ function ag(e, t, n = {}) {
 				n = r.slice(Math.max(0, i - 20), i + t.length + 40);
 			}
 			return {
-				selector: ig(e),
+				selector: _g(e),
 				tag: e.tagName.toLowerCase(),
 				text: n.slice(0, 120)
 			};
@@ -13561,7 +13855,7 @@ function ag(e, t, n = {}) {
 		truncated: a.length > o
 	};
 }
-var og = [
+var yg = [
 	"content",
 	"display",
 	"width",
@@ -13569,14 +13863,14 @@ var og = [
 	"background-color",
 	"position"
 ];
-function sg(e, t = {}) {
+function bg(e, t = {}) {
 	if (!e) return null;
 	let n = {
-		selector: ig(e),
+		selector: _g(e),
 		tag: e.tagName.toLowerCase(),
 		attrs: {}
 	};
-	for (let t of Array.from(e.attributes)) !(Vh.includes(t.name) || t.name.startsWith("data-")) || Hh.test(t.name) || Uh.test(t.name) || (n.attrs[t.name] = t.value);
+	for (let t of Array.from(e.attributes)) !(eg.includes(t.name) || t.name.startsWith("data-")) || tg.test(t.name) || ng.test(t.name) || (n.attrs[t.name] = t.value);
 	let r = Array.from(e.childNodes).filter((e) => e.nodeType === 3).map((e) => e.textContent || "").join("").trim();
 	r && (n.text = r.slice(0, 400));
 	let i = String(e.innerText ?? e.textContent ?? "").trim();
@@ -13598,7 +13892,7 @@ function sg(e, t = {}) {
 		if (typeof a != "function") return r;
 		try {
 			let i = a(e, n ?? null);
-			for (let e of n ? og : t.styles ?? $h) {
+			for (let e of n ? yg : t.styles ?? fg) {
 				let t = typeof i.getPropertyValue == "function" ? i.getPropertyValue(e) : i[e];
 				t && (r[e] = String(t).slice(0, 200));
 			}
@@ -13616,16 +13910,16 @@ function sg(e, t = {}) {
 		n.events = {
 			inline: t,
 			vue: r ? Object.keys(r).filter((e) => /^on[A-Z]/.test(e)).map((e) => e.slice(2).toLowerCase()) : [],
-			captured: rg(e)
+			captured: gg(e)
 		};
 	}
 	return n;
 }
-var cg = s(({ query: e, mode: t, limit: n, root: r }) => {
-	ng();
+var xg = s(({ query: e, mode: t, limit: n, root: r }) => {
+	hg();
 	let i = r ? document.querySelector(r) : document;
 	if (r && !i) return `未找到 root 元素:selector="${r}"`;
-	let a = ag(i, e, {
+	let a = vg(i, e, {
 		mode: t,
 		limit: n
 	});
@@ -13642,11 +13936,11 @@ var cg = s(({ query: e, mode: t, limit: n, root: r }) => {
 		limit: t.number().int().min(1).max(20).optional().describe("返回上限(默认 10)"),
 		root: t.string().optional().describe("限定搜索范围的容器选择器(默认整页)")
 	})
-}), lg = s(({ selector: e, styles: t, includeHtml: n, htmlLimit: r, includeEvents: i, includeRect: a, pseudo: o }) => {
-	ng();
+}), Sg = s(({ selector: e, styles: t, includeHtml: n, htmlLimit: r, includeEvents: i, includeRect: a, pseudo: o }) => {
+	hg();
 	let s = document.querySelector(e);
 	if (!s) return `未找到匹配元素:selector="${e}"(可先用 dom_search 定位)`;
-	let c = sg(s, {
+	let c = bg(s, {
 		styles: t,
 		includeHtml: n,
 		htmlLimit: r,
@@ -13667,10 +13961,10 @@ var cg = s(({ query: e, mode: t, limit: n, root: r }) => {
 		includeRect: t.boolean().optional().describe("是否含几何位置(默认 true)"),
 		pseudo: t.boolean().optional().describe("是否含 ::before/::after 伪元素摘要(默认 false)")
 	})
-}), ug = "dom-inspect";
-function dg(e = {}) {
+}), Cg = "dom-inspect";
+function wg(e = {}) {
 	return {
-		name: ug,
+		name: Cg,
 		description: "页面 DOM 深度检视工具(dom_search 搜索元素 / dom_info 读内容·计算样式·事件绑定·几何)。定位元素、验证样式落地、排查交互绑定时加载",
 		getContent: () => [
 			"# DOM 检视工具用法",
@@ -13692,17 +13986,23 @@ function dg(e = {}) {
 				"- 截图「看」页面:selector 截指定元素区域 / fullPage 截整页 / 都不传截当前视口;截图经压缩投递(多模态直看图,纯文本模型自动走识图转述)",
 				"- 布局/样式/渲染效果类问题优先截图(视觉真值),结构/属性类用 dom_info;截图失败(CSP/跨域图)会回灌原因与替代建议"
 			] : [],
+			...e.withDomEdit ? [
+				"## dom_edit({ patches, dryRun? })—— 修改页面元素(宿主开启才有)",
+				"- patches 批量原子(任一失败整批拒绝):set_text/set_html(内容)、set_attr/remove_attr、add_class/remove_class、set_style、insert(新建元素 anchor+position: before/after/prepend/append/replace)、remove、move(层级调整)、highlight(高亮+滚动)",
+				"- 写纪律:selector 必须唯一命中(多匹配被拒,用 dom_search 拿精确路径);先读后写(get_dom/dom_info 看现状);拿不准先 dryRun 预检",
+				"- 改前自动快照:dom_restore 回滚最近一批(可连续回退);改动为会话临时态(刷新即失);数据驱动页面改数据(write)不要改 DOM"
+			] : [],
 			"## 排障套路",
 			...e.withScreenshot ? ["1. dom_search(mode:\"text\", query:按钮文案) 定位 → 2. 视觉验证 take_screenshot / 结构验证 dom_info(styles) → 3. 不符则改数据(get_dom 看结构对照)"] : ["1. dom_search(mode:\"text\", query:按钮文案) 定位 → 2. dom_info(styles:[\"display\",\"background-color\",\"pointer-events\"]) 验证样式/点击性 → 3. 不符则改数据(get_dom 看结构对照)"]
 		].join("\n"),
-		tools: [() => [cg, lg]]
+		tools: [() => [xg, Sg]]
 	};
 }
-var fg = "page-analysis";
-function pg(e = {}) {
+var Tg = "page-analysis";
+function Eg(e = {}) {
 	return {
-		name: fg,
-		description: "页面内容分析策略:按问题类型选工具(引用原文/整页理解/定位/结构/视觉),含分页探索纪律与基于页面实料的回答纪律。回答用户关于当前页面的问题时加载",
+		name: Tg,
+		description: "页面内容分析策略:按问题类型选工具(引用原文/整页理解/定位/结构/视觉/页面操作),含分页探索纪律与基于页面实料的回答纪律。回答用户关于当前页面的问题时加载",
 		getContent: () => [
 			"# 页面内容分析策略",
 			"## 第一步:问题分型(按类型选主力工具,不要一上来读整页)",
@@ -13711,6 +14011,7 @@ function pg(e = {}) {
 			"- **定位类**(「某概念在本页哪里/那个按钮在哪」):dom_search mode:\"text\" 按关键词定位 → 需要细节再 read_page 带 selector 读该区域",
 			"- **结构/属性类**(「这个区块是什么组件/有哪些属性」):dom_info(selector) 读单元素;层级关系用 get_dom",
 			...e.withScreenshot ? ["- **视觉类**(「看起来对不对/布局乱不乱/渲染效果」):take_screenshot 截图看视觉真值;selector 截局部、fullPage 截整页;截图是唯一能看到实际渲染效果的手段,结构推断不能代替"] : [],
+			...e.withDomEdit ? ["- **操作类**(「把这段高亮/隐藏广告/调大字体/把这个块挪过去」):dom_edit patches 批量操作;纪律 = 先 get_dom/dom_search 定位唯一 selector → 拿不准先 dryRun → 改后 dom_info/截图验证 → 不满意 dom_restore 回滚;页面是临时态,持久修改要走宿主自己的机制"] : [],
 			"## 探索纪律",
 			"1. **先窄后宽**:引用/焦点 → 所在小节 → 整页;每一步只取够回答当前问题的量",
 			"2. **翻页不重复**:read_page 续读传 offset = 上次 offset + 返回 text 长度;不要回头重读已读区",
@@ -13723,14 +14024,14 @@ function pg(e = {}) {
 		].join("\n")
 	};
 }
-var mg = dg();
+var Dg = wg();
 //#endregion
 //#region src/core/tools/envTool.ts
-function hg(e) {
+function Og(e) {
 	let t = e;
 	return typeof t.tagName == "string" || typeof t.nodeType == "number" && typeof t.nodeName == "string";
 }
-function gg(e, t = 3, n = 2e3, r, i) {
+function kg(e, t = 3, n = 2e3, r, i) {
 	if (e == null) return e;
 	if (typeof e == "string") return e.length > n ? e.slice(0, n) + "…(已截断)" : e;
 	if (typeof e == "number" || typeof e == "boolean") return e;
@@ -13739,14 +14040,14 @@ function gg(e, t = 3, n = 2e3, r, i) {
 	if (typeof e == "bigint") return `${e.toString()}n`;
 	if (typeof e != "object") return String(e);
 	let a = e;
-	if (hg(a)) {
+	if (Og(a)) {
 		let e = a;
 		return e.tagName ? `[Element: <${e.tagName.toLowerCase()}>]` : `[Node: ${e.nodeName}]`;
 	}
 	if (r?.has(a)) return "[Circular]";
 	let o = r ?? /* @__PURE__ */ new WeakSet();
 	if (o.add(a), Array.isArray(e)) {
-		let r = e.slice(0, 100).map((e) => gg(e, t - 1, n, o, i));
+		let r = e.slice(0, 100).map((e) => kg(e, t - 1, n, o, i));
 		return e.length > 100 && r.push(`…(共 ${e.length} 项,已截断)`), r;
 	}
 	if (t < 0) return "(对象,已截断)";
@@ -13759,14 +14060,14 @@ function gg(e, t = 3, n = 2e3, r, i) {
 		}
 		try {
 			let e = a[r];
-			i?.test(r) ? s[r] = "[REDACTED]" : s[r] = gg(e, t - 1, n, o, i);
+			i?.test(r) ? s[r] = "[REDACTED]" : s[r] = kg(e, t - 1, n, o, i);
 		} catch {
 			s[r] = "(getter 抛错)";
 		}
 	}
 	return s;
 }
-function _g(e) {
+function Ag(e) {
 	let t = e ?? (typeof window < "u" ? window : {}), n = t.navigator, r = t.location, i = t.document;
 	return {
 		location: {
@@ -13799,9 +14100,9 @@ function _g(e) {
 		} : "(无 document)"
 	};
 }
-var vg = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|opener|parent|top|self|window|globalThis|closed|history|navigation|trustedTypes|origin|crossOriginIsolated)$/, yg = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session|ticket/i, bg = s(({ key: e }) => {
+var jg = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|opener|parent|top|self|window|globalThis|closed|history|navigation|trustedTypes|origin|crossOriginIsolated)$/, Mg = /token|secret|password|passwd|api[-_]?key|auth|cred|csrf|session|ticket/i, Ng = s(({ key: e }) => {
 	if (e) {
-		if (vg.test(e) || yg.test(e)) return JSON.stringify({
+		if (jg.test(e) || Mg.test(e)) return JSON.stringify({
 			key: e,
 			denied: !0,
 			reason: "安全:该 key 在 denylist(localStorage/sessionStorage/cookie/document 或敏感命名 token/secret/key/auth),不读取防泄漏"
@@ -13811,18 +14112,18 @@ var vg = /^(localStorage|sessionStorage|cookie|document|frames|frameElement|open
 			key: e,
 			exists: t !== void 0,
 			type: typeof t,
-			value: gg(t, 3, 2e3, void 0, yg)
+			value: kg(t, 3, 2e3, void 0, Mg)
 		}, null, 2);
 	}
-	return JSON.stringify(_g(), null, 2);
+	return JSON.stringify(Ag(), null, 2);
 }, {
 	name: "inspect_env",
 	description: "读宿主页面环境信息(排查调试)。不传参返回摘要(URL/origin、浏览器/语言、viewport、title/readyState);传 key 读指定 window 属性值(如 key:\"appConfig\")。只读,大结果自动外存 vfs。",
 	schema: t.object({ key: t.string().optional().describe("要读取的 window 属性名(如 \"appConfig\"/\"__DEBUG__\");不传 = 返回环境摘要") })
-}), xg = [bg];
+}), Pg = [Ng];
 //#endregion
 //#region src/core/harness/budget.ts
-function Sg(e, t, n) {
+function Fg(e, t, n) {
 	let i = 0;
 	return {
 		name: "budget",
@@ -13847,12 +14148,12 @@ function Sg(e, t, n) {
 }
 //#endregion
 //#region src/core/sdk/actions.ts
-var Cg = /^[a-zA-Z][a-zA-Z0-9_]*$/;
-function wg(e) {
+var Ig = /^[a-zA-Z][a-zA-Z0-9_]*$/;
+function Lg(e) {
 	let n = [];
 	for (let [r, i] of Object.entries(e)) {
-		if (!Cg.test(r)) {
-			console.warn(`[page-agent-sdk][actions] 动作名 "${r}" 非法(须匹配 ${Cg}),已跳过`);
+		if (!Ig.test(r)) {
+			console.warn(`[page-agent-sdk][actions] 动作名 "${r}" 非法(须匹配 ${Ig}),已跳过`);
 			continue;
 		}
 		let e = i.description || `宿主动作 ${r}`;
@@ -13872,9 +14173,9 @@ function wg(e) {
 	}
 	return n;
 }
-function Tg(e) {
+function Rg(e) {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) Cg.test(n) && (t[n] = {
+	for (let [n, r] of Object.entries(e)) Ig.test(n) && (t[n] = {
 		description: r.description,
 		hasParams: !!r.params
 	});
@@ -13882,11 +14183,11 @@ function Tg(e) {
 }
 //#endregion
 //#region src/core/toolsets.ts
-var Eg = Bh, Dg = Qh;
-function Og(e, t) {
+var zg = $h, Bg = dg;
+function Vg(e, t) {
 	return Yd(e, t);
 }
-function kg(e, t, n, r, i) {
+function Hg(e, t, n, r, i) {
 	let a = tm(e);
 	return [
 		...a.dataOps ? t : [],
@@ -13897,15 +14198,15 @@ function kg(e, t, n, r, i) {
 }
 //#endregion
 //#region src/core/harness/usageHints.ts
-var Ag = .7;
-function jg(e, t, n) {
+var Ug = .7;
+function Wg(e, t, n) {
 	let r = tm(e);
 	return {
 		name: "usageHints",
 		augmentPrompt: (i) => {
 			let a = [];
-			if (r.planning && (a.push("【自适应规划】按任务复杂度决定是否先规划,不要对简单任务过度编排:"), a.push("  · 简单/明确任务(改单字段、调样式、查值)→ 直接 read/write 执行,不必 write_todos。"), a.push("  · 复杂任务(多步、大改、有歧义、不可逆)→ 先 write_todos 拆解,首个任务标 in_progress,逐项推进。"), a.push("  · 执行中发现步骤要改/补/细分 → 用 update_todo({id, content?, status?}) 按 id 增量改单项,不必重传整个清单。"), a.push("  · update_todo 标 completed 时附 evidence: 本次实际写入的 jsonPath(如 \"components.2\"),供收口对账;工作经委派子 agent 完成等无主写路径时,如实写明完成方式(勿编造路径)。"), e?.humanConfirm ? a.push("  · 规划出多步方案若需用户拍板 → 先 request_human_confirmation 给方案选项,确认后再执行。") : a.push("  · 规划出多步方案若需用户拍板 → 以文字列出方案选项等用户回复,勿自行拍板。"), a.push("  · 计划修订有次数上限(maxPlanRevisions,默认 5,只计 write_todos 调用、调研轮不计):勿反复改计划而不执行,规划充分后即开始 write 落地。")), t && (a.push("改主数据前先 read({jsonPath}) 读其当前真实值(返回末尾 hash=xxx 为乐观锁标识),基于真实值改,不要凭记忆。写入是否被自动校验由集成方 conflictWatchFields 声明决定:若已声明且主数据在你 read 之后被外部改过,会触发冲突——集成方若开启人工介入,工具会挂起等用户决定(保留外部/强制覆盖/回退),你应等待工具返回后按结果继续(保留外部→重新 read 再改;强制覆盖→已写入,继续;回退→已回退到历史快照,基于回退值重写);未开启人工介入时返回 VERSION_CONFLICT 不写入,重新 read 拿最新值再改。"), a.push("读类分流:取值/结构 → read(多路径用 jsonPaths);字段约束 → schema_data;条件筛选定位 → query_data(多条一次用 queries);名字模糊找 → search_data;整体说明 → read 不传路径。"), a.push("修改大对象/数组优先用 write 增量改({patch:{op,jsonPath,value}} 只发改动部分),避免 write({value}) 整体重传被 max_tokens 截断导致 JSON 不完整、校验失败。"), a.push("修改主数据出错时可用 restore_data 回退最近一次。"), a.push("在大数组里按条件筛选元素用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素的 path/index;定位后再 write({patch}) 改。"), a.push("找名字记不清的元素用 search_data(支持 substring/regex/fuzzy 模糊搜索)。"), a.push("需要过滤/映射/聚合/批量重写大数组时用 eval_script(沙箱脚本,入参 data);只读探查用 mode=query,批量重写用 mode=transform(返回值经校验后落地)。"), a.push("读大数组用 read({jsonPath,offset,limit}) 分页(返回 hasMore=true 时 offset+=limit 续读);一次读多个不相关子路径用 read({jsonPaths});复杂改动先 write({...,dryRun:true}) 预检不落盘。"), a.push("【省轮次·批量】≥2 个路径一律 read({jsonPaths:[...]}) 一次取回(路径互不相关也合批,禁止连续单路径 read);多条件筛选用 query_data({queries:[expr1,expr2,…]}) 一次取回(2-10 条);改多处用 write({patches:[{op:\"set\",jsonPath,value},...]}) 一次提交多改动(原子任一失败回滚),勿逐个 write 烧轮次预算。"), a.push("读到 <subtree Nkb keys:[…] #指纹> 或 <code Nkb> 占位 = 该子树键名/体积可见但内容未见:写入前先窄读全文(read({jsonPath:\"该子树路径\"}),结果根豁免返全文)或 set_focus 聚焦该区域;勿凭键名印象猜路径/猜值直写(直接写占位子树会被拦下要求先窄读)。"), a.push("对比当前与历史快照(或一段 JSON against)的差异用 diff_data({snapshotId?,against?})(返回结构化 path→from/to,verify 自纠/操作审计/\"刚才改了啥\");只读查历史快照值用 history_data({id?,jsonPath?})。")), r.subagent && a.push("独立子任务可 spawn_agent 委派(过程隔离,不占主上下文):默认只读,需要子 agent 写数据时传 writablePaths(路径前缀白名单,越界 PATH_OUT_OF_SCOPE)。多个独立子任务可 spawn_agents 并行委派(各子互不通信,结论由你汇总;并行委派不可授写权限,写操作由你收尾执行)。"), r.inspectEnv && a.push("排查页面环境(当前 URL/浏览器/视口/集成方调试变量)用 inspect_env——不传参返回环境摘要(location/navigator/viewport/document),传 key 读特定 window 属性(如 inspect_env({key:\"appConfig\"}) 读 window.appConfig)。改完数据看渲染、定位\"为何没生效\"时用它(只读,不改数据)。"), r.domInspect && a.push("回答用户关于当前页面/文档的问题时优先用 read_page({selector?,offset?,limit?}) 读页面正文纯文本(长文按 hasMore 分页续读;自动排除本对话框自身);需要页面结构(检查渲染是否生效/定位元素/辅助 UI 设计问答)再用 get_dom({selector?,depth?}) 读渲染后 DOM(结构化返回 tag/attrs/text/children,depth 控制深度防爆炸,只读)。配合宿主 actions(save_draft/publish 等)形成\"改数据→截图/get_dom 看渲染→触发动作\"闭环。"), e?.screenshot && a.push("视觉验证(看布局/样式/渲染效果像不像、对不对)用 take_screenshot({selector?, fullPage?}) 截图查看:selector 截指定元素、fullPage 截整页、默认当前视口;截图自动压缩投递(多模态直看图/纯文本模型走识图转述)。优先级:视觉问题先截图,结构/属性问题用 dom_info。"), r.draftWrite && (a.push("生成超大 JSON(如 50+ 组件页面,单次 write 受 max_tokens 限制装不下)用 draft_write 分块构建 → draft_commit 原子提交:draft_write({draftId, chunk, mode}) mode:\"start\" 新建/\"append\" 追加(拼 JSON 片段到 drafts 池);累积完 draft_commit({draftId}) 合并 + schema 校验 + 写主数据(失败草稿保留可修后重试,成功自动清草稿)。小改仍用 write patch,只在大 JSON 从零生成时用 draft。"), a.push("⚠️ 大 JSON 分块构建是典型多轮工具调用(draft_write×N + draft_commit + read 确认 + 调研 read/query),默认 maxToolRounds=30(3.43 起;轮次预算吃紧时 system 会注入预算提示段,按提示优先收口);目标组件数很大时集成方仍可在 createChatSdk 显式上调 maxToolRounds(按 N+10 估算)。draft_commit 提交同样走乐观锁(改前 read 拿 hash,bind 被改过会触发冲突介入,不静默覆盖)。")), r.focus && (a.push("【上下文聚焦】判断任务范围,用 set_focus/add_focus/remove_focus/clear_focus 自动收敛工作范围:"), a.push("  · 局部任务(只改某一组件/区域,如「调导航栏」「改 components.3 样式」)→ 先 read 定位 jsonPath,再 set_focus({path:\"该子树路径\"}) 聚焦;聚焦后每轮只看该子树结构,写其他位置会被 PATH_DENIED 拒绝。"), a.push("  · 多个相关组件(如「同时改导航栏和页脚」)→ set_focus 聚焦首个后用 add_focus({path}) 追加其余;聚焦后可写任一焦点子树,越界仍被拒;移除单个用 remove_focus({path})。"), a.push("  · 全局任务(多处/整体结构,如「重排所有组件」「换主题」)→ 不要聚焦,保持全量视野直接写。"), a.push("  · 完成局部精修、要转向其他区域或做整体改动 → 调 clear_focus 退出聚焦(清空全部焦点),恢复全部读写权限。"), a.push("  · set_focus/add_focus 的 path 必须在 schema 内(类型校验);不确定路径先 read 查。")), e?.subagents?.length) {
-				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Ag || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), n = e.subagents.filter((e) => (e.temperature ?? 0) < Ag && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
+			if (r.planning && (a.push("【自适应规划】按任务复杂度决定是否先规划,不要对简单任务过度编排:"), a.push("  · 简单/明确任务(改单字段、调样式、查值)→ 直接 read/write 执行,不必 write_todos。"), a.push("  · 复杂任务(多步、大改、有歧义、不可逆)→ 先 write_todos 拆解,首个任务标 in_progress,逐项推进。"), a.push("  · 执行中发现步骤要改/补/细分 → 用 update_todo({id, content?, status?}) 按 id 增量改单项,不必重传整个清单。"), a.push("  · update_todo 标 completed 时附 evidence: 本次实际写入的 jsonPath(如 \"components.2\"),供收口对账;工作经委派子 agent 完成等无主写路径时,如实写明完成方式(勿编造路径)。"), e?.humanConfirm ? a.push("  · 规划出多步方案若需用户拍板 → 先 request_human_confirmation 给方案选项,确认后再执行。") : a.push("  · 规划出多步方案若需用户拍板 → 以文字列出方案选项等用户回复,勿自行拍板。"), a.push("  · 计划修订有次数上限(maxPlanRevisions,默认 5,只计 write_todos 调用、调研轮不计):勿反复改计划而不执行,规划充分后即开始 write 落地。")), t && (a.push("改主数据前先 read({jsonPath}) 读其当前真实值(返回末尾 hash=xxx 为乐观锁标识),基于真实值改,不要凭记忆。写入是否被自动校验由集成方 conflictWatchFields 声明决定:若已声明且主数据在你 read 之后被外部改过,会触发冲突——集成方若开启人工介入,工具会挂起等用户决定(保留外部/强制覆盖/回退),你应等待工具返回后按结果继续(保留外部→重新 read 再改;强制覆盖→已写入,继续;回退→已回退到历史快照,基于回退值重写);未开启人工介入时返回 VERSION_CONFLICT 不写入,重新 read 拿最新值再改。"), a.push("读类分流:取值/结构 → read(多路径用 jsonPaths);字段约束 → schema_data;条件筛选定位 → query_data(多条一次用 queries);名字模糊找 → search_data;整体说明 → read 不传路径。"), a.push("修改大对象/数组优先用 write 增量改({patch:{op,jsonPath,value}} 只发改动部分),避免 write({value}) 整体重传被 max_tokens 截断导致 JSON 不完整、校验失败。"), a.push("修改主数据出错时可用 restore_data 回退最近一次。"), a.push("在大数组里按条件筛选元素用 query_data(JSONPath,如 $.components[?(@.type==\"card\" && @.price<100)]),返回匹配元素的 path/index;定位后再 write({patch}) 改。"), a.push("找名字记不清的元素用 search_data(支持 substring/regex/fuzzy 模糊搜索)。"), a.push("需要过滤/映射/聚合/批量重写大数组时用 eval_script(沙箱脚本,入参 data);只读探查用 mode=query,批量重写用 mode=transform(返回值经校验后落地)。"), a.push("读大数组用 read({jsonPath,offset,limit}) 分页(返回 hasMore=true 时 offset+=limit 续读);一次读多个不相关子路径用 read({jsonPaths});复杂改动先 write({...,dryRun:true}) 预检不落盘。"), a.push("【省轮次·批量】≥2 个路径一律 read({jsonPaths:[...]}) 一次取回(路径互不相关也合批,禁止连续单路径 read);多条件筛选用 query_data({queries:[expr1,expr2,…]}) 一次取回(2-10 条);改多处用 write({patches:[{op:\"set\",jsonPath,value},...]}) 一次提交多改动(原子任一失败回滚),勿逐个 write 烧轮次预算。"), a.push("读到 <subtree Nkb keys:[…] #指纹> 或 <code Nkb> 占位 = 该子树键名/体积可见但内容未见:写入前先窄读全文(read({jsonPath:\"该子树路径\"}),结果根豁免返全文)或 set_focus 聚焦该区域;勿凭键名印象猜路径/猜值直写(直接写占位子树会被拦下要求先窄读)。"), a.push("对比当前与历史快照(或一段 JSON against)的差异用 diff_data({snapshotId?,against?})(返回结构化 path→from/to,verify 自纠/操作审计/\"刚才改了啥\");只读查历史快照值用 history_data({id?,jsonPath?})。")), r.subagent && a.push("独立子任务可 spawn_agent 委派(过程隔离,不占主上下文):默认只读,需要子 agent 写数据时传 writablePaths(路径前缀白名单,越界 PATH_OUT_OF_SCOPE)。多个独立子任务可 spawn_agents 并行委派(各子互不通信,结论由你汇总;并行委派不可授写权限,写操作由你收尾执行)。"), r.inspectEnv && a.push("排查页面环境(当前 URL/浏览器/视口/集成方调试变量)用 inspect_env——不传参返回环境摘要(location/navigator/viewport/document),传 key 读特定 window 属性(如 inspect_env({key:\"appConfig\"}) 读 window.appConfig)。改完数据看渲染、定位\"为何没生效\"时用它(只读,不改数据)。"), r.domInspect && a.push("回答用户关于当前页面/文档的问题时优先用 read_page({selector?,offset?,limit?}) 读页面正文纯文本(长文按 hasMore 分页续读;自动排除本对话框自身);需要页面结构(检查渲染是否生效/定位元素/辅助 UI 设计问答)再用 get_dom({selector?,depth?}) 读渲染后 DOM(结构化返回 tag/attrs/text/children,depth 控制深度防爆炸,只读)。配合宿主 actions(save_draft/publish 等)形成\"改数据→截图/get_dom 看渲染→触发动作\"闭环。"), e?.screenshot && a.push("视觉验证(看布局/样式/渲染效果像不像、对不对)用 take_screenshot({selector?, fullPage?}) 截图查看:selector 截指定元素、fullPage 截整页、默认当前视口;截图自动压缩投递(多模态直看图/纯文本模型走识图转述)。优先级:视觉问题先截图,结构/属性问题用 dom_info。"), e?.domEdit && a.push("修改宿主页面元素(高亮/改文案/调样式/插删移元素)用 dom_edit({patches:[{op,selector,...}],dryRun?}) 批量原子操作(op:set_text/set_html/set_attr/add_class/remove_class/set_style/insert/remove/move/highlight);selector 必须唯一命中(先 get_dom/dom_search 定位);改前自动快照,dom_restore 回滚最近一批;改动为会话临时态(刷新即失)——数据驱动页面改数据(write)不要改 DOM。"), r.draftWrite && (a.push("生成超大 JSON(如 50+ 组件页面,单次 write 受 max_tokens 限制装不下)用 draft_write 分块构建 → draft_commit 原子提交:draft_write({draftId, chunk, mode}) mode:\"start\" 新建/\"append\" 追加(拼 JSON 片段到 drafts 池);累积完 draft_commit({draftId}) 合并 + schema 校验 + 写主数据(失败草稿保留可修后重试,成功自动清草稿)。小改仍用 write patch,只在大 JSON 从零生成时用 draft。"), a.push("⚠️ 大 JSON 分块构建是典型多轮工具调用(draft_write×N + draft_commit + read 确认 + 调研 read/query),默认 maxToolRounds=30(3.43 起;轮次预算吃紧时 system 会注入预算提示段,按提示优先收口);目标组件数很大时集成方仍可在 createChatSdk 显式上调 maxToolRounds(按 N+10 估算)。draft_commit 提交同样走乐观锁(改前 read 拿 hash,bind 被改过会触发冲突介入,不静默覆盖)。")), r.focus && (a.push("【上下文聚焦】判断任务范围,用 set_focus/add_focus/remove_focus/clear_focus 自动收敛工作范围:"), a.push("  · 局部任务(只改某一组件/区域,如「调导航栏」「改 components.3 样式」)→ 先 read 定位 jsonPath,再 set_focus({path:\"该子树路径\"}) 聚焦;聚焦后每轮只看该子树结构,写其他位置会被 PATH_DENIED 拒绝。"), a.push("  · 多个相关组件(如「同时改导航栏和页脚」)→ set_focus 聚焦首个后用 add_focus({path}) 追加其余;聚焦后可写任一焦点子树,越界仍被拒;移除单个用 remove_focus({path})。"), a.push("  · 全局任务(多处/整体结构,如「重排所有组件」「换主题」)→ 不要聚焦,保持全量视野直接写。"), a.push("  · 完成局部精修、要转向其他区域或做整体改动 → 调 clear_focus 退出聚焦(清空全部焦点),恢复全部读写权限。"), a.push("  · set_focus/add_focus 的 path 必须在 schema 内(类型校验);不确定路径先 read 查。")), e?.subagents?.length) {
+				let t = e.subagents.filter((e) => (e.temperature ?? 0) >= Ug || /规划|创意|设计|方案|brainstorm|plan/i.test(e.description)), n = e.subagents.filter((e) => (e.temperature ?? 0) < Ug && /反思|审查|挑刺|校验|review|critique|reflect/i.test(e.description));
 				a.push("【规划-反思-执行·路由】按任务性质选模式,不要对简单任务过度编排:"), t.length && (a.push(`  · 创作/设计/开放性需求(如"设计主题风格""换个感觉")→ 先调 ${t.map((e) => "use_" + e.id).join("/")} 出 2-3 套方案(高温创意),`), a.push(e?.humanConfirm ? "    不要自己拍板;拿到方案后,若需用户拍板用 request_human_confirmation 弹选项。" : "    不要自己拍板;拿到方案后以文字列出选项等用户回复(humanConfirm 未开,勿调不存在工具)。")), n.length && a.push(`  · 严谨/易错/校验类 → 可先调 ${n.map((e) => "use_" + e.id).join("/")} 反思挑刺(低温审查),据反馈修订。`), a.push("  · 方案定稿后,由你(主 agent)用 write 落地成 JSON(低温度执行 + schema 校验 + 写前确认)。"), a.push("  · 简单/明确任务(如\"标题改红色\")直接执行,不必走规划-反思。");
 			}
 			e?.humanConfirm && (a.push("【人工确认·必读】以下情形必须先调 request_human_confirmation 征询用户、拿到答复后再继续,不要自行拍板:"), a.push("  1) 用户让你「给方案/列选项/我来选/挑一个」时:把每个方案作为一个 option,调 request_human_confirmation(question=简述, options=[方案A,方案B,...], recommendation=你推荐的)。不要只回文字罗列方案让用户自己回复——要用工具把选项做成可点选按钮。"), a.push("  2) 需求有歧义/不确定时:调工具问清楚(options 不传则用户答同意或拒绝)。"), a.push("  3) 即将执行高风险不可逆操作(删除/覆盖/批量改动)前:调工具确认。"), a.push("  4) 规划出多步方案需用户确认时:把整个方案(或关键分步)作为 option 调 request_human_confirmation,确认后再执行。"), a.push("用户在选项里选了哪个,就按那个方案继续;选「拒绝」则停止并询问如何调整。"));
@@ -13925,7 +14226,7 @@ function jg(e, t, n) {
 }
 //#endregion
 //#region src/core/harness/pageContext.ts
-function Mg(e, t) {
+function Gg(e, t) {
 	let n = [
 		"[当前页面] 用户正在浏览:",
 		`- 标题:${e.title}`,
@@ -13934,18 +14235,18 @@ function Mg(e, t) {
 	];
 	return t && n.push("需要页面正文时用 read_page 读取纯文本(长文按 hasMore 分页续读);读结构用 get_dom。"), n.join("\n");
 }
-function Ng(e) {
+function Kg(e) {
 	return {
 		name: "pageContext",
 		augmentPrompt: () => {
 			let t = e.getPageInfo();
-			if (t) return Mg(t, e.canReadPage);
+			if (t) return Gg(t, e.canReadPage);
 		}
 	};
 }
 //#endregion
 //#region src/core/harness/resourcesPin.ts
-function Pg(e) {
+function qg(e) {
 	return {
 		name: "resourcesPin",
 		augmentPrompt: () => {
@@ -13959,15 +14260,15 @@ function Pg(e) {
 }
 //#endregion
 //#region src/core/backends/skillStore.ts
-var Fg = "v:1::skill-store", Ig = "chat-sdk";
-function Lg(e, t, n) {
-	return `${Fg}::${e}::${t}::${n}`;
+var Jg = "v:1::skill-store", Yg = "chat-sdk";
+function Xg(e, t, n) {
+	return `${Jg}::${e}::${t}::${n}`;
 }
-function Rg(e, t) {
-	return `${Fg}::${e}::${t}::`;
+function Zg(e, t) {
+	return `${Jg}::${e}::${t}::`;
 }
-function zg(e = {}) {
-	let t = e.dbName ?? Ig, n = e.backend ?? "indexed", r = e.id ?? "", i, a, o = new Promise((e) => {
+function Qg(e = {}) {
+	let t = e.dbName ?? Yg, n = e.backend ?? "indexed", r = e.id ?? "", i, a, o = new Promise((e) => {
 		a = e;
 	});
 	return (async () => {
@@ -13989,36 +14290,36 @@ function zg(e = {}) {
 		ready: o,
 		async list() {
 			let e = [];
-			return await i.scan(Rg(t, r), (t, n) => {
+			return await i.scan(Zg(t, r), (t, n) => {
 				e.push(n);
 			}), e;
 		},
 		async get(e) {
-			return await i.get(Lg(t, r, e));
+			return await i.get(Xg(t, r, e));
 		},
 		async put(e) {
 			try {
-				await i.set(Lg(t, r, e.name), e);
+				await i.set(Xg(t, r, e.name), e);
 			} catch (e) {
 				Lp(e) && (i = Gp());
 			}
 		},
 		async remove(e) {
-			let n = Lg(t, r, e);
+			let n = Xg(t, r, e);
 			return await i.get(n) == null ? !1 : (await i.del(n), !0);
 		},
 		async clear() {
-			await i.clearPrefix(Rg(t, r));
+			await i.clearPrefix(Zg(t, r));
 		},
 		dispose() {}
 	};
 }
-var Bg = /large_results\/[^\s"'`),]+\.txt/g;
-function Vg(e) {
+var $g = /large_results\/[^\s"'`),]+\.txt/g;
+function e_(e) {
 	let t = /* @__PURE__ */ new Set(), n = (e) => {
 		if (typeof e != "string" || !e) return;
 		let n;
-		for (Bg.lastIndex = 0; (n = Bg.exec(e)) !== null;) t.add(n[0]);
+		for ($g.lastIndex = 0; (n = $g.exec(e)) !== null;) t.add(n[0]);
 	};
 	for (let r of e) {
 		if (n(r.content), r.steps) for (let e of r.steps) n(e.result);
@@ -14026,14 +14327,14 @@ function Vg(e) {
 	}
 	return t;
 }
-function Hg(e, t) {
+function t_(e, t) {
 	let n = [];
 	for (let r of Object.keys(e)) r.startsWith("large_results/") && !t.has(r) && n.push(r);
 	return n;
 }
 //#endregion
 //#region src/core/utils/serialRunner.ts
-function Ug() {
+function n_() {
 	let e = Promise.resolve();
 	return function(t) {
 		let n = e.then(t, t);
@@ -14042,24 +14343,24 @@ function Ug() {
 }
 //#endregion
 //#region src/core/sdk/createChatSdk.ts
-var Wg = 30, Gg = /* @__PURE__ */ new Map();
-function Kg(e, t) {
+var r_ = 30, i_ = /* @__PURE__ */ new Map();
+function a_(e, t) {
 	return e === "restore_data" ? "restore" : e === "write" ? t?.dryRun ? null : t?.del ? "delete" : t?.patch || t?.patches ? "edit" : "set" : e === "eval_script" ? t?.mode === "transform" ? "edit" : null : e === "draft_commit" || e === "resource_update" ? "edit" : null;
 }
-function qg(e) {
+function o_(e) {
 	return e === "spawn_agent" || e === "spawn_agents" || e.startsWith("use_");
 }
-function Jg(e, t, n, r) {
+function s_(e, t, n, r) {
 	let i = 0;
 	return {
 		name: "sdk-events",
 		wrapToolCall: async (t, r) => {
-			let i = await r(t), a = Kg(t.name, t.args), o = typeof i.content == "string" && i.content.startsWith("ERROR:");
+			let i = await r(t), a = a_(t.name, t.args), o = typeof i.content == "string" && i.content.startsWith("ERROR:");
 			return a && !o ? e({
 				type: "data_change",
 				operation: a,
 				value: n()?.bind
-			}) : i.status === "done" && !o && qg(t.name) && e({
+			}) : i.status === "done" && !o && o_(t.name) && e({
 				type: "data_change",
 				operation: "edit",
 				value: n()?.bind
@@ -14087,7 +14388,7 @@ function Jg(e, t, n, r) {
 		}
 	};
 }
-function Yg(e, t, n, r, i) {
+function c_(e, t, n, r, i) {
 	if (!n) return i && console.warn(`[page-agent-sdk][focus] capabilities.focus 关闭,${t} 忽略`), {
 		ok: !1,
 		error: "capabilities.focus 关闭"
@@ -14105,7 +14406,7 @@ function Yg(e, t, n, r, i) {
 		error: "当前无主数据 schema,无法聚焦"
 	});
 }
-function Xg(e, n) {
+function l_(e, n) {
 	let r = {
 		prompt_tokens: 0,
 		completion_tokens: 0,
@@ -14132,7 +14433,7 @@ function Xg(e, n) {
 	e.debug && !u && console.warn("[page-agent-sdk][summarization] 未构造 llmInvoke(apiKey 缺失?),摘要回退零成本索引摘要");
 	let C = /* @__PURE__ */ Mt([]), w = nd(e.vfs?.initialFiles, {
 		persist: c ? { save: (e) => {
-			nn.persistSave({ vfs: e });
+			rn.persistSave({ vfs: e });
 		} } : void 0,
 		maxBytes: e.vfs?.maxBytes,
 		poolBytes: e.vfs?.poolBytes
@@ -14160,7 +14461,7 @@ function Xg(e, n) {
 			context: e
 		});
 	}, ae = au((e) => {
-		te.lastPlanConfirmation = e, nn.persistSave({ planConfirmation: e }), X.agent?.debugLogs?.value?.push({
+		te.lastPlanConfirmation = e, rn.persistSave({ planConfirmation: e }), X.agent?.debugLogs?.value?.push({
 			timestamp: Date.now(),
 			type: "middleware",
 			data: {
@@ -14227,7 +14528,7 @@ function Xg(e, n) {
 		vfsStore: he || N?.resources?.length ? w : void 0,
 		...de.length ? { pgIdPaths: de } : {},
 		...R.length ? { largeTextPaths: R } : {}
-	}) : [], ye = me ? ve : [], U = me && N ? ve.controller ?? null : null, be = me && N ? ve.previewWrite : void 0, xe = me && N?.resources?.length && U?.getResourcesSnapshot ? Pg({ getResourcesSnapshot: () => U?.getResourcesSnapshot?.() ?? [] }) : void 0, W = () => U?.get() ?? N, Se = new Set(ve.map((e) => e.name)), Ce = e.conflictWatchFields ?? [], we = !Ce.includes("*") && Ce.length ? new Set(Ce) : void 0, Te = U ? kf({
+	}) : [], ye = me ? ve : [], U = me && N ? ve.controller ?? null : null, be = me && N ? ve.previewWrite : void 0, xe = me && N?.resources?.length && U?.getResourcesSnapshot ? qg({ getResourcesSnapshot: () => U?.getResourcesSnapshot?.() ?? [] }) : void 0, W = () => U?.get() ?? N, Se = new Set(ve.map((e) => e.name)), Ce = e.conflictWatchFields ?? [], we = !Ce.includes("*") && Ce.length ? new Set(Ce) : void 0, Te = U ? kf({
 		getBind: () => W()?.bind,
 		recomputeAll: () => U.recomputeAllBaselines?.(),
 		hasBaselines: () => U.hasBaselines?.() ?? !1,
@@ -14285,19 +14586,31 @@ function Xg(e, n) {
 			}
 			return t(e);
 		}
-	} : null, je = kg(V, ye, Bh, V.domInspect ? [
-		...Qh,
+	} : null, je = V.domEdit ? Zh({ onEdit: (e) => {
+		X.agent?.debugLogs?.value?.push({
+			timestamp: Date.now(),
+			type: "middleware",
+			data: {
+				stage: "dom_edit",
+				ops: e.ops.join(","),
+				applied: e.applied,
+				dryRun: e.dryRun
+			}
+		});
+	} }) : [], Me = Hg(V, ye, $h, V.domInspect ? [
+		...dg,
+		...je,
 		...Oe ? [Oe] : [],
-		...V.skills ? [] : [cg, lg]
-	] : [], xg);
-	je.forEach((e) => G.set(e.name, "builtin"));
-	let Me = [...e.tools || []];
-	Me.forEach((e) => G.set(e.name, "user"));
-	let Ne = wg(e.actions ?? {});
-	Ne.forEach((e) => G.set(e.name, "action"));
-	let Pe = [], Fe = !1, Ie = e.humanConfirm !== !1 && (!e.approval || e.approval.humanConfirmTool !== !1), Le = Ie ? iu() : null;
-	Le && G.set(nu, "builtin");
-	let Re = fe && B ? [s(async () => {
+		...V.skills ? [] : [xg, Sg]
+	] : [], Pg);
+	Me.forEach((e) => G.set(e.name, "builtin"));
+	let Ne = [...e.tools || []];
+	Ne.forEach((e) => G.set(e.name, "user"));
+	let Pe = Lg(e.actions ?? {});
+	Pe.forEach((e) => G.set(e.name, "action"));
+	let Fe = [], Ie = !1, Le = e.humanConfirm !== !1 && (!e.approval || e.approval.humanConfirmTool !== !1), Re = Le ? iu() : null;
+	Re && G.set(nu, "builtin");
+	let ze = fe && B ? [s(async () => {
 		let e = B.list();
 		return e.length ? B.restore() ? `已回退到最近一次正常状态(checkpoint #${e[e.length - 1].id})。对话历史、主数据、vfs、todos 已整体还原。请基于回退后的状态重新判断并继续。` : "回退失败:无可用 checkpoint。" : "无可用 checkpoint,无法回退。";
 	}, {
@@ -14312,8 +14625,8 @@ function Xg(e, n) {
 		description: "列出可用会话 checkpoint(回退点)。",
 		schema: t.object({}).optional()
 	})] : [];
-	Re.forEach((e) => G.set(e.name, "builtin"));
-	let ze = V.focus, Be = s(async ({ path: e, label: t }) => {
+	ze.forEach((e) => G.set(e.name, "builtin"));
+	let K = V.focus, Be = s(async ({ path: e, label: t }) => {
 		let n = W()?.schema;
 		return n ? _s(n, e) ? (A.setFocus(oe({
 			path: e,
@@ -14356,7 +14669,7 @@ function Xg(e, n) {
 		name: "remove_focus",
 		description: "移除单个聚焦焦点(by path),保留其他焦点。移除最后一个等价退出精修。全部退出用 clear_focus。",
 		schema: t.object({ path: t.string().describe("要移除的焦点 jsonPath") })
-	}), We = ze ? [
+	}), We = K ? [
 		Be,
 		Ve,
 		He,
@@ -14364,55 +14677,55 @@ function Xg(e, n) {
 	] : [];
 	We.forEach((e) => G.set(e.name, "builtin"));
 	let Ge = [], Ke = /* @__PURE__ */ new Map(), qe = fm({
-		builtinTools: () => je,
-		userTools: () => Me,
-		actionTools: () => Ne,
-		humanConfirmTool: () => Le,
-		checkpointTools: () => Re,
+		builtinTools: () => Me,
+		userTools: () => Ne,
+		actionTools: () => Pe,
+		humanConfirmTool: () => Re,
+		checkpointTools: () => ze,
 		focusTools: () => We,
-		mcpTools: () => Pe,
+		mcpTools: () => Fe,
 		loadedSkillTools: () => Ge
-	}), K = qe(), Je = V.planning, Ye = V.missionAnchor, Xe = V.workingMemory, Ze = V.skills, q = V.vfs || ue;
-	if (q) for (let e of cd) G.set(e, "builtin");
+	}), q = qe(), Je = V.planning, Ye = V.missionAnchor, Xe = V.workingMemory, Ze = V.skills, Qe = V.vfs || ue;
+	if (Qe) for (let e of cd) G.set(e, "builtin");
 	if (Je) for (let e of T.tools ?? []) G.set(e.name, "builtin");
-	let Qe = V.summarization, $e = V.agentCompression && !!f;
+	let $e = V.summarization, et = V.agentCompression && !!f;
 	e.debug && V.agentCompression && !f && console.warn("[page-agent-sdk][agentCompression] agentCompression 开启但 summaryLlm 不可用(或缺 apiKey / 模型不支持工具),压缩决策不启用,回退静态压缩");
-	let et = V.memory, tt = V.subagent, nt = tt ? yl() : void 0, rt = e.verify?.maxAttempts ?? 2, it = !!(e.verify?.check || e.verify?.maxAttempts || e.verify?.adversarial), at = e.capabilities?.verify === !1, ot = (V.verify || it && !at) && e.verify?.enabled !== !1 && rt > 0, st = V.contextInspector;
-	it && !ot && e.verify?.enabled !== !1 && console.warn("[page-agent-sdk][verify] 检测到 verify 配置(check/maxAttempts/adversarial)但未装载(capabilities.verify:false 显式关闭 或 maxAttempts≤0)");
-	let ct = e.subagent, lt = ct?.allowedTools ?? [], ut = e.permissions?.length ? eu(e.permissions) : void 0, dt = e.approval && (e.approval.tools !== void 0 || e.approval.confirm) ? tu({
+	let tt = V.memory, nt = V.subagent, rt = nt ? yl() : void 0, it = e.verify?.maxAttempts ?? 2, at = !!(e.verify?.check || e.verify?.maxAttempts || e.verify?.adversarial), ot = e.capabilities?.verify === !1, st = (V.verify || at && !ot) && e.verify?.enabled !== !1 && it > 0, ct = V.contextInspector;
+	at && !st && e.verify?.enabled !== !1 && console.warn("[page-agent-sdk][verify] 检测到 verify 配置(check/maxAttempts/adversarial)但未装载(capabilities.verify:false 显式关闭 或 maxAttempts≤0)");
+	let lt = e.subagent, ut = lt?.allowedTools ?? [], dt = e.permissions?.length ? eu(e.permissions) : void 0, ft = e.approval && (e.approval.tools !== void 0 || e.approval.confirm) ? tu({
 		...e.approval,
 		timeoutMs: e.approval.timeoutMs ?? re,
 		onAutoReject: ie,
 		previewWrite: e.approval.preview === !0 && be ? (e, t) => e === "write" ? be(t) : null : void 0
-	}) : void 0, ft = [
-		...ut ? [ut] : [],
+	}) : void 0, pt = [
 		...dt ? [dt] : [],
+		...ft ? [ft] : [],
 		...Te ? [Te] : []
-	], pt = !tt || ct?.enabled === !1 ? void 0 : zl({
-		llm: ct?.llm ?? e.llm,
-		allTools: () => X.agent?.allTools ?? K,
-		allowedTools: lt.length ? lt : void 0,
+	], mt = !nt || lt?.enabled === !1 ? void 0 : zl({
+		llm: lt?.llm ?? e.llm,
+		allTools: () => X.agent?.allTools ?? q,
+		allowedTools: ut.length ? ut : void 0,
 		...e.staleReadInvalidation === void 0 ? {} : { staleReadInvalidation: e.staleReadInvalidation },
-		systemPrompt: ct?.systemPrompt,
-		temperature: ct?.temperature,
-		maxTokens: ct?.maxTokens,
-		skills: ct?.skills,
-		maxDepth: ct?.maxDepth,
-		maxParallel: ct?.maxParallel,
-		thinkingMode: ct?.thinkingMode,
+		systemPrompt: lt?.systemPrompt,
+		temperature: lt?.temperature,
+		maxTokens: lt?.maxTokens,
+		skills: lt?.skills,
+		maxDepth: lt?.maxDepth,
+		maxParallel: lt?.maxParallel,
+		thinkingMode: lt?.thinkingMode,
 		debug: e.debug,
 		getFocuses: () => A.getActiveFocuses(),
 		getSchema: () => W()?.schema ?? null,
-		tracker: nt,
-		guardMiddleware: ft.length ? ft : void 0,
-		getVfsFiles: q ? () => w.files : void 0,
+		tracker: rt,
+		guardMiddleware: pt.length ? pt : void 0,
+		getVfsFiles: Qe ? () => w.files : void 0,
 		enterDataScope: U?.enterScope ? (e) => U.enterScope(e) : void 0,
 		exitDataScope: U?.exitScope ? (e) => U.exitScope(e) : void 0,
 		onUsage: (e) => {
 			r.prompt_tokens = (r.prompt_tokens ?? 0) + (e.prompt_tokens ?? 0), r.completion_tokens = (r.completion_tokens ?? 0) + (e.completion_tokens ?? 0), r.total_tokens = (r.total_tokens ?? 0) + (e.total_tokens ?? 0), e.reasoning_tokens && (r.reasoning_tokens = (r.reasoning_tokens ?? 0) + e.reasoning_tokens);
 		},
-		timeoutMs: ct?.timeoutMs
-	}), mt = L?.map((e) => {
+		timeoutMs: lt?.timeoutMs
+	}), ht = L?.map((e) => {
 		if (!e._codeAsset) return e;
 		let t = e._codeAsset, n = mf({
 			writablePaths: t.writablePaths,
@@ -14429,74 +14742,75 @@ function Xg(e, n) {
 			...e,
 			middleware: r
 		};
-	}), ht = ue && tt ? hf() : void 0, gt = ht ? Sf({
+	}), gt = ue && nt ? hf() : void 0, _t = gt ? Sf({
 		getBind: () => W()?.bind,
 		writablePaths: de,
-		getLocked: () => ht.locked(),
-		tools: K,
+		getLocked: () => gt.locked(),
+		tools: q,
 		getCodeFieldPaths: () => bf(W()?.bind, I.map((e) => ({
 			writablePaths: e._codeAsset.writablePaths,
 			codeField: e._codeAsset.codeField
 		})))
-	}) : void 0, _t = U?.getSummarizedPaths && U.clearSummarizedPaths ? Tf({
+	}) : void 0, vt = U?.getSummarizedPaths && U.clearSummarizedPaths ? Tf({
 		getSummarizedPaths: () => U.getSummarizedPaths(),
 		clearSummarizedPaths: () => U.clearSummarizedPaths()
-	}) : void 0, vt = tt && mt !== void 0 ? Hl(mt, {
+	}) : void 0, yt = nt && ht !== void 0 ? Hl(ht, {
 		llm: e.llm,
 		thinkingModeDefault: e.subagent?.thinkingMode,
 		staleReadInvalidation: e.staleReadInvalidation,
-		allTools: () => X.agent?.allTools ?? K,
+		allTools: () => X.agent?.allTools ?? q,
 		debug: e.debug,
 		getFocuses: () => A.getActiveFocuses(),
 		getSchema: () => W()?.schema ?? null,
 		getBind: () => W()?.bind,
-		tracker: nt,
-		guardMiddleware: ft.length ? ft : void 0,
-		getVfsFiles: q ? () => w.files : void 0,
+		tracker: rt,
+		guardMiddleware: pt.length ? pt : void 0,
+		getVfsFiles: Qe ? () => w.files : void 0,
 		enterDataScope: U?.enterScope ? (e) => U.enterScope(e) : void 0,
 		exitDataScope: U?.exitScope ? (e) => U.exitScope(e) : void 0,
 		onUsage: (e) => {
 			r.prompt_tokens = (r.prompt_tokens ?? 0) + (e.prompt_tokens ?? 0), r.completion_tokens = (r.completion_tokens ?? 0) + (e.completion_tokens ?? 0), r.total_tokens = (r.total_tokens ?? 0) + (e.total_tokens ?? 0), e.reasoning_tokens && (r.reasoning_tokens = (r.reasoning_tokens ?? 0) + e.reasoning_tokens);
 		},
 		timeoutMs: e.subagent?.timeoutMs,
-		...ht ? {
-			componentLock: ht,
+		...gt ? {
+			componentLock: gt,
 			resolveComponents: (e) => gf(e, uf(W()?.bind, de))
 		} : {}
-	}) : void 0, yt = vt ? vt.controller : null, bt = (t) => {
+	}) : void 0, bt = yt ? yt.controller : null, xt = (t) => {
 		let n = t.thinkingMode ?? e.subagent?.thinkingMode, r = n ? dp(t.llm ?? e.llm) ? "instance-noop" : "applied" : "inherited";
 		return {
 			...t,
 			...n ? { thinkingMode: n } : {},
 			thinkingApplied: r
 		};
-	}, xt = ["read", "fetch_document"], St = K.filter((e) => xt.includes(e.name)), Ct = ot ? gu({
+	}, St = ["read", "fetch_document"], Ct = q.filter((e) => St.includes(e.name)), wt = st ? gu({
 		check: e.verify.check ?? Su({
 			schemas: () => W() ? { "": W().schema } : {},
 			root: () => W()?.bind
 		}),
 		adversarial: e.verify?.adversarial ? {
 			llm: e.llm,
-			tools: St
+			tools: Ct
 		} : void 0
-	}) : void 0, wt = st ? Iu({
+	}) : void 0, Tt = ct ? Iu({
 		contextWindow: m.contextWindow,
 		thresholdRatio: am(e, m.contextWindow).summaryThresholdRatio
-	}) : void 0, Tt = jg({
+	}) : void 0, Et = Wg({
 		...V,
-		humanConfirm: Ie,
+		humanConfirm: Le,
 		screenshot: !!Oe,
-		subagents: L?.map(bt)
-	}, me && !!N, { promptSoftCap: ml(m.contextWindow, g.promptSoftCapTokens) }), Et = V.pageContext ? Ng({
+		domEdit: V.domEdit,
+		subagents: L?.map(xt)
+	}, me && !!N, { promptSoftCap: ml(m.contextWindow, g.promptSoftCapTokens) }), Dt = V.pageContext ? Kg({
 		getPageInfo: () => typeof document < "u" && typeof location < "u" ? {
 			title: document.title || "",
 			url: location.href
 		} : null,
 		canReadPage: V.domInspect === !0
-	}) : void 0, Dt = N ? {
+	}) : void 0, Ot = N ? {
 		name: "dataHint",
 		augmentPrompt: () => Zu(W(), e.schemaHint) || void 0
-	} : null, Ot = e.augmentSystem ? {
+	} : null, kt = e.augmentSystem ? {
 		name: "augmentSystem",
 		augmentPrompt: (t) => {
 			try {
@@ -14509,125 +14823,131 @@ function Xg(e, n) {
 				return;
 			}
 		}
-	} : null, kt = nm(e.onEvent), J = kt.emit, At, jt = [], Nt = (e) => ({
+	} : null, At = nm(e.onEvent), J = At.emit, jt, Nt = [], Pt = (e) => ({
 		name: e.name,
 		description: e.description,
 		content: typeof e.getContent == "function" ? e.getContent() : ""
-	}), Pt = (e) => ({
+	}), Ft = (e) => ({
 		name: e.name,
 		description: e.description,
 		getContent: () => e.content
-	}), Ft = e.skillStorage === !1 ? null : zg({
+	}), It = e.skillStorage === !1 ? null : Qg({
 		...typeof e.skillStorage == "object" ? e.skillStorage : {},
 		id: e.skillStorage && typeof e.skillStorage == "object" && e.skillStorage.id ? e.skillStorage.id : `agent::${n}`
-	}), It = () => {
-		let t = At ? At.controller : null;
+	}), Lt = () => {
+		let t = jt ? jt.controller : null;
 		if (t) {
-			let n = (e.skills || []).filter((e) => !jt.some((t) => t.name === e.name));
-			t.set([...n, ...jt]);
+			let n = (e.skills || []).filter((e) => !Nt.some((t) => t.name === e.name));
+			t.set([...n, ...Nt]);
 		}
 		X.infoTick.value++;
-	}, Lt = async () => {
-		if (Ft) try {
-			let t = await Ft.list();
+	}, Rt = async () => {
+		if (It) try {
+			let t = await It.list();
 			if (t.length) {
-				jt = t.map(Pt);
-				let n = At ? At.controller : null;
+				Nt = t.map(Ft);
+				let n = jt ? jt.controller : null;
 				if (n) {
-					let t = (e.skills || []).filter((e) => !jt.some((t) => t.name === e.name));
-					n.set([...t, ...jt]);
+					let t = (e.skills || []).filter((e) => !Nt.some((t) => t.name === e.name));
+					n.set([...t, ...Nt]);
 				}
 				X.infoTick.value++;
 			}
 		} catch {}
-	}, Rt = Qe ? vl({
+	}, zt = $e ? vl({
 		...g,
 		llmInvoke: u,
 		getRegisteredData: () => W() ? [{ description: W().description ?? "主数据对象" }] : [],
 		preserveLastToolResults: b,
-		...$e ? {
+		...et ? {
 			decideInvoke: f,
-			getSnapshot: () => wt?.getSnapshot()
+			getSnapshot: () => Tt?.getSnapshot()
 		} : {}
-	}) : void 0, zt = Ze ? qc([
-		...V.domInspect && !(e.skills || []).some((e) => e.name === "dom-inspect") ? [dg({ withScreenshot: !!Oe })] : [],
-		...V.domInspect && !(e.skills || []).some((e) => e.name === "page-analysis") ? [pg({ withScreenshot: !!Oe })] : [],
+	}) : void 0, Y = Ze ? qc([
+		...V.domInspect && !(e.skills || []).some((e) => e.name === "dom-inspect") ? [wg({
+			withScreenshot: !!Oe,
+			withDomEdit: V.domEdit
+		})] : [],
+		...V.domInspect && !(e.skills || []).some((e) => e.name === "page-analysis") ? [Eg({
+			withScreenshot: !!Oe,
+			withDomEdit: V.domEdit
+		})] : [],
 		...e.skills || []
 	], {
-		readVfs: q ? (e) => w.files[e]?.content : void 0,
+		readVfs: Qe ? (e) => w.files[e]?.content : void 0,
 		onToolsReady: (e, t) => {
 			for (let n of t) {
 				let t = Ge.findIndex((e) => e.name === n.name);
 				t >= 0 && Ge.splice(t, 1), Ge.push(n), Ke.set(n.name, e), G.set(n.name, `skill:${e}`);
 			}
-			K = qe(), X.agent && X.agent.setTools(K), X.infoTick.value++;
+			q = qe(), X.agent && X.agent.setTools(q), X.infoTick.value++;
 		}
 	}) : void 0;
-	At = zt;
-	let Y = sm([
+	jt = Y;
+	let Bt = sm([
+		...Ot ? [Ot] : [],
+		Et,
 		...Dt ? [Dt] : [],
-		Tt,
-		...Et ? [Et] : [],
 		...Ye ? [D] : [],
 		O,
 		ee,
 		...Je ? [T] : [],
+		...Y ? [Y] : [],
+		...Qe ? [ud(w)] : [],
 		...zt ? [zt] : [],
-		...q ? [ud(w)] : [],
-		...Rt ? [Rt] : [],
 		...Xe ? [j] : [],
-		...ze ? [A] : [],
+		...K ? [A] : [],
 		...xe ? [xe] : [],
-		...et ? [se] : [],
-		...ut ? [ut] : [],
-		...fe && pe && B ? [mu(B)] : [],
-		...Ie ? [ae] : [],
+		...tt ? [se] : [],
 		...dt ? [dt] : [],
+		...fe && pe && B ? [mu(B)] : [],
+		...Le ? [ae] : [],
+		...ft ? [ft] : [],
 		...Te ? [Te] : [],
-		...Ct ? [Ct] : [],
-		...pt ? [pt] : [],
-		...vt ? [vt] : [],
-		...gt ? [gt] : [],
+		...wt ? [wt] : [],
+		...mt ? [mt] : [],
+		...yt ? [yt] : [],
 		..._t ? [_t] : [],
-		...U && tt ? [Of({
+		...vt ? [vt] : [],
+		...U && nt ? [Of({
 			getBind: () => W()?.bind,
-			getTools: () => X.agent?.allTools ?? K
+			getTools: () => X.agent?.allTools ?? q
 		})] : [],
-		...Ot ? [Ot] : [],
-		...wt ? [wt] : [],
+		...kt ? [kt] : [],
+		...Tt ? [Tt] : [],
 		...Ae ? [Ae] : [],
 		...e.middleware || [],
-		...H ? [Sg(r, {
+		...H ? [Fg(r, {
 			tokenBudget: e.tokenBudget,
 			timeBudgetMs: e.timeBudgetMs
 		}, J)] : [],
-		Jg(J, C, W, r)
-	]), Bt = e.maxMemoryRounds ?? Wg;
-	function Vt(e) {
+		s_(J, C, W, r)
+	]), Vt = e.maxMemoryRounds ?? r_;
+	function Ht(e) {
 		return (e) => {
 			e.type !== "approval_request" && J(De(e));
 		};
 	}
-	let Ht = /* @__PURE__ */ Wt([]), Ut = Ug(), Gt = /* @__PURE__ */ new Set();
-	function Kt(e) {
+	let Ut = /* @__PURE__ */ Wt([]), Gt = n_(), Kt = /* @__PURE__ */ new Set();
+	function qt(e) {
 		let t = new AbortController(), n = () => t.abort();
-		return e && (e.aborted ? t.abort() : e.addEventListener("abort", n, { once: !0 })), Gt.add(t), {
+		return e && (e.aborted ? t.abort() : e.addEventListener("abort", n, { once: !0 })), Kt.add(t), {
 			controller: t,
 			untrack: () => {
-				Gt.delete(t), e?.removeEventListener("abort", n);
+				Kt.delete(t), e?.removeEventListener("abort", n);
 			}
 		};
 	}
-	function qt() {
-		for (let e of Gt) e.abort();
-		Gt.clear();
+	function Yt() {
+		for (let e of Kt) e.abort();
+		Kt.clear();
 	}
-	let Yt = /* @__PURE__ */ Wt(null), X = {
+	let Xt = /* @__PURE__ */ Wt(null), X = {
 		agentId: n,
 		store: c,
 		messages: C,
 		vfsStore: w,
-		listeners: kt.listeners,
+		listeners: At.listeners,
 		todosMw: T,
 		memoryMw: se,
 		missionMw: D,
@@ -14642,18 +14962,18 @@ function Xg(e, n) {
 		mcpFailed: [],
 		checkpoint: B,
 		dataOpsController: U,
-		skillsController: At ? At.controller : null,
+		skillsController: jt ? jt.controller : null,
 		infoTick: o,
 		pendingConflict: a.pendingConflict,
-		pendingQuote: Yt,
-		sessions: Ht,
-		refreshSessions: () => nn.refreshSessions(),
+		pendingQuote: Xt,
+		sessions: Ut,
+		refreshSessions: () => rn.refreshSessions(),
 		liveData: W,
 		usage: r,
 		emit: J,
-		runSerial: Ut,
-		trackActive: Kt,
-		abortAllActive: qt,
+		runSerial: Gt,
+		trackActive: qt,
+		abortAllActive: Yt,
 		unloadSkillTools(e) {
 			if (e) {
 				let t = Ge.length;
@@ -14663,10 +14983,10 @@ function Xg(e, n) {
 				for (let e of Ge) G.delete(e.name), Ke.delete(e.name);
 				Ge = [];
 			}
-			K = qe(), X.agent && X.agent.setTools(K);
+			q = qe(), X.agent && X.agent.setTools(q);
 		},
 		applySnapshot(t) {
-			if (t.vfs && w.hydrate && w.hydrate(t.vfs), t.messages?.length && (C.push(...Ci(t.messages, (e) => (e ? X.vfsStore?.files?.[e]?.content : void 0) || void 0)), ee.markResumed()), t.todos?.length && T.reset(t.todos), t.memory && !e.memory && se.reset(t.memory), t.checkpoints?.length && B && B.importStack(t.checkpoints), t.usage && Object.assign(r, t.usage), t.mission && Ye && D.setMission(t.mission), t.workingMemory && Xe && j.restore(t.workingMemory), t.planConfirmation && (te.lastPlanConfirmation = t.planConfirmation), ze) {
+			if (t.vfs && w.hydrate && w.hydrate(t.vfs), t.messages?.length && (C.push(...Ci(t.messages, (e) => (e ? X.vfsStore?.files?.[e]?.content : void 0) || void 0)), ee.markResumed()), t.todos?.length && T.reset(t.todos), t.memory && !e.memory && se.reset(t.memory), t.checkpoints?.length && B && B.importStack(t.checkpoints), t.usage && Object.assign(r, t.usage), t.mission && Ye && D.setMission(t.mission), t.workingMemory && Xe && j.restore(t.workingMemory), t.planConfirmation && (te.lastPlanConfirmation = t.planConfirmation), K) {
 				let n = t.focus, r = n ? Array.isArray(n) ? n : [n] : [];
 				if (r.length) {
 					let t = W()?.schema, n = t ? r.filter((e) => _s(t, e.path)) : [];
@@ -14676,21 +14996,21 @@ function Xg(e, n) {
 					}
 				}
 			}
-			$t();
+			en();
 		},
 		addSkill(e) {
-			let t = jt.findIndex((t) => t.name === e.name);
-			t >= 0 ? jt[t] = e : jt.push(e), It(), Ft && Ft.put(Nt(e));
+			let t = Nt.findIndex((t) => t.name === e.name);
+			t >= 0 ? Nt[t] = e : Nt.push(e), Lt(), It && It.put(Pt(e));
 		},
 		removeSkill(e) {
-			let t = jt.findIndex((t) => t.name === e);
-			return t < 0 ? !1 : (jt.splice(t, 1), It(), Ft && Ft.remove(e), !0);
+			let t = Nt.findIndex((t) => t.name === e);
+			return t < 0 ? !1 : (Nt.splice(t, 1), Lt(), It && It.remove(e), !0);
 		},
 		listUserSkills() {
-			return jt.map((e) => e.name);
+			return Nt.map((e) => e.name);
 		},
 		getUserSkill(e) {
-			let t = jt.find((t) => t.name === e);
+			let t = Nt.find((t) => t.name === e);
 			if (t) return {
 				name: t.name,
 				description: t.description,
@@ -14698,7 +15018,7 @@ function Xg(e, n) {
 			};
 		},
 		afterRound() {
-			en(), nn.persistRuntime();
+			tn(), rn.persistRuntime();
 		},
 		clearCodeReuse() {
 			let e = w;
@@ -14709,7 +15029,7 @@ function Xg(e, n) {
 			t ??= {}, t?.mission && Ye && D.setMission(t.mission);
 			let n = e, r = (t.images ?? []).filter((e) => e && (e.dataUri || e.vfsRef || e.url));
 			if (r.length > 4) throw Error(`[page-agent-sdk] 单轮最多 4 张图片(收到 ${r.length})`);
-			if (r.length && (await tn.stowImages(r), await tn.describeIfNeeded(r, n)), r.length && !m.vision && !r.every((e) => e.description)) {
+			if (r.length && (await nn.stowImages(r), await nn.describeIfNeeded(r, n)), r.length && !m.vision && !r.every((e) => e.description)) {
 				let e = "当前主模型不支持图片输入(modelCaps.vision=false)。请换多模态模型(gpt-4o/claude/qwen-vl)或 LLMConfig 声明 vision:true;或配置 images.describe 绑定识图转述(集成方识图子 agent / 自有 vision API)";
 				throw J({
 					type: "error",
@@ -14718,8 +15038,8 @@ function Xg(e, n) {
 					code: "IMAGE_UNSUPPORTED_MODEL"
 				}), Error(`[page-agent-sdk] ${e}`);
 			}
-			w?.setProtectedRefs?.(Vg(C));
-			let i = H ? t.maxAutoRetries ?? 1 : 0, o = 0, s = !1, l = Vt(t.signal);
+			w?.setProtectedRefs?.(e_(C));
+			let i = H ? t.maxAutoRetries ?? 1 : 0, o = 0, s = !1, l = Ht(t.signal);
 			if (t.signal) {
 				let e = () => a.resolve("keep_external");
 				t.signal.aborted ? e() : t.signal.addEventListener("abort", e, { once: !0 });
@@ -14730,14 +15050,14 @@ function Xg(e, n) {
 					let e = t.quote && t.quote.text ? {
 						text: Ni(t.quote.text),
 						...t.quote.source ? { source: t.quote.source } : {}
-					} : void 0, i = e ?? Yt.value ?? void 0;
+					} : void 0, i = e ?? Xt.value ?? void 0;
 					C.push({
 						role: "user",
 						content: n,
 						timestamp: Date.now(),
 						...r.length ? { images: r } : {},
 						...i ? { quote: i } : {}
-					}), s = !0, !e && Yt.value && (Yt.value = null);
+					}), s = !0, !e && Xt.value && (Xt.value = null);
 				}
 				try {
 					let e = await X.agent.invoke(C, t.signal, l);
@@ -14799,8 +15119,8 @@ function Xg(e, n) {
 		async batch(e, t, n) {
 			if (await X.initDone, !e.length) return [];
 			if (X.refCount <= 0) throw Error("page-agent-sdk: agent 已释放(unmount),拒绝排队中的 batch");
-			let r = [], i = Vt(n);
-			if (w?.setProtectedRefs?.(Vg(C)), n) {
+			let r = [], i = Ht(n);
+			if (w?.setProtectedRefs?.(e_(C)), n) {
 				let e = () => a.resolve("keep_external");
 				n.aborted ? e() : n.addEventListener("abort", e, { once: !0 });
 			}
@@ -14891,14 +15211,14 @@ function Xg(e, n) {
 			}
 			return r;
 		},
-		switchSession: (e) => nn.switchSession(e),
-		exportSession: (e) => nn.exportSession(e),
-		importSession: (e) => nn.importSession(e),
-		resetSession: () => nn.resetSession(),
+		switchSession: (e) => rn.switchSession(e),
+		exportSession: (e) => rn.exportSession(e),
+		importSession: (e) => rn.importSession(e),
+		resetSession: () => rn.resetSession(),
 		stream: async (e, t, n) => {
 			if (!X.agent) throw Error("page-agent-sdk: agent 尚未初始化完成,请先 await mount()");
 			let r = [...e].reverse().find((e) => e.role === "user" && e.images?.length);
-			if (r?.images?.length && (await tn.stowImages(r.images), await tn.describeIfNeeded(r.images, r.content), !m.vision && !r.images.every((e) => e.description))) {
+			if (r?.images?.length && (await nn.stowImages(r.images), await nn.describeIfNeeded(r.images, r.content), !m.vision && !r.images.every((e) => e.description))) {
 				let e = "当前主模型不支持图片输入(modelCaps.vision=false)。请换多模态模型(gpt-4o/claude/qwen-vl)或 LLMConfig 声明 vision:true;或配置 images.describe 绑定识图转述";
 				throw J({
 					type: "error",
@@ -14907,7 +15227,7 @@ function Xg(e, n) {
 					code: "IMAGE_UNSUPPORTED_MODEL"
 				}), Error(`[page-agent-sdk] ${e}`);
 			}
-			w?.setProtectedRefs?.(Vg(e));
+			w?.setProtectedRefs?.(e_(e));
 			let i = (e) => {
 				t?.(De(e)), J(De(e)), e.type === "subagent" && (e.kind === "tool_call" || e.kind === "tool_result") && X.infoTick.value++;
 			};
@@ -14915,30 +15235,30 @@ function Xg(e, n) {
 				let e = () => a.resolve("keep_external");
 				n.aborted ? e() : n.addEventListener("abort", e, { once: !0 });
 			}
-			let { controller: o, untrack: s } = Kt(n);
+			let { controller: o, untrack: s } = qt(n);
 			return X.agent.stream(e, i, o.signal).finally(s);
 		},
 		release() {
 			if (X.refCount--, X.refCount <= 0) {
-				qt(), Fe = !0, c && (w.flush?.(), c.flush(), c.dispose()), Ft && Ft.dispose();
+				Yt(), Ie = !0, c && (w.flush?.(), c.flush(), c.dispose()), It && It.dispose();
 				let e = X.mcpClosers.splice(0);
-				e.length && Promise.allSettled(e.map((e) => e())), Gg.delete(n);
+				e.length && Promise.allSettled(e.map((e) => e())), i_.delete(n);
 			}
 		},
 		resolveConflict: a.resolve,
 		setTools(e) {
-			Me.length = 0, e.forEach((e) => {
-				Me.push(e), G.set(e.name, "user");
-			}), K = qe(), X.agent && X.agent.setTools(K), X.infoTick.value++;
+			Ne.length = 0, e.forEach((e) => {
+				Ne.push(e), G.set(e.name, "user");
+			}), q = qe(), X.agent && X.agent.setTools(q), X.infoTick.value++;
 		},
 		addTool(e) {
-			K.some((t) => t.name === e.name) && console.warn(`[page-agent-sdk] 工具 "${e.name}" 已存在,新工具覆盖(后注册覆盖先注册)`);
-			for (let t = Me.length - 1; t >= 0; t--) Me[t].name === e.name && Me.splice(t, 1);
-			Me.push(e), G.set(e.name, "user"), K = qe(), X.agent && X.agent.setTools(K), X.infoTick.value++;
+			q.some((t) => t.name === e.name) && console.warn(`[page-agent-sdk] 工具 "${e.name}" 已存在,新工具覆盖(后注册覆盖先注册)`);
+			for (let t = Ne.length - 1; t >= 0; t--) Ne[t].name === e.name && Ne.splice(t, 1);
+			Ne.push(e), G.set(e.name, "user"), q = qe(), X.agent && X.agent.setTools(q), X.infoTick.value++;
 		},
 		removeTool(e) {
-			let t = Me.findIndex((t) => t.name === e);
-			return t < 0 ? !1 : (Me.splice(t, 1), G.delete(e), K = qe(), X.agent && X.agent.setTools(K), X.infoTick.value++, !0);
+			let t = Ne.findIndex((t) => t.name === e);
+			return t < 0 ? !1 : (Ne.splice(t, 1), G.delete(e), q = qe(), X.agent && X.agent.setTools(q), X.infoTick.value++, !0);
 		},
 		setLlm(t) {
 			let n;
@@ -14956,7 +15276,7 @@ function Xg(e, n) {
 				maxOutputTokens: e.maxOutputTokens ?? r?.maxOutputTokens,
 				vision: r?.vision ?? t.vision
 			}), m.contextWindow < 2e5) throw Error(`[page-agent-sdk][setLlm] 新模型上下文窗口 ${m.contextWindow} 小于最小支持 ${p}(需 ≥200K 窗口模型)`);
-			X.agent && (X.agent.setLlm(n), X.agent.setModelCaps?.(m)), Rt?.setContextWindow?.(m.contextWindow), wt?.setContextWindow?.(m.contextWindow), X.infoTick.value++, e.debug && console.log("[page-agent-sdk][setLlm] 重解析 modelCaps + 回灌:", m);
+			X.agent && (X.agent.setLlm(n), X.agent.setModelCaps?.(m)), zt?.setContextWindow?.(m.contextWindow), Tt?.setContextWindow?.(m.contextWindow), X.infoTick.value++, e.debug && console.log("[page-agent-sdk][setLlm] 重解析 modelCaps + 回灌:", m);
 		},
 		setMemory(e) {
 			se.reset(e), typeof e == "function" && se.refresh(), X.infoTick.value++;
@@ -14965,29 +15285,29 @@ function Xg(e, n) {
 			return se.refresh();
 		},
 		setSubagents(t) {
-			if (!yt) {
+			if (!bt) {
 				e.debug && console.warn("[page-agent-sdk][setSubagents] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略");
 				return;
 			}
-			yt.set(t), X.infoTick.value++;
+			bt.set(t), X.infoTick.value++;
 		},
 		addSubagent(t) {
-			if (!yt) {
+			if (!bt) {
 				e.debug && console.warn("[page-agent-sdk][addSubagent] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略");
 				return;
 			}
-			yt.add(t), X.infoTick.value++;
+			bt.add(t), X.infoTick.value++;
 		},
 		removeSubagent(t) {
-			if (!yt) return e.debug && console.warn("[page-agent-sdk][removeSubagent] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略"), !1;
-			let n = yt.remove(t);
+			if (!bt) return e.debug && console.warn("[page-agent-sdk][removeSubagent] 未配 subagents:[] 或 capabilities.subagent 关闭,忽略"), !1;
+			let n = bt.remove(t);
 			return n && X.infoTick.value++, n;
 		},
 		getActiveSubagents() {
-			return nt?.getActive() ?? [];
+			return rt?.getActive() ?? [];
 		},
 		get subagentHistory() {
-			return nt?.getHistory() ?? [];
+			return rt?.getHistory() ?? [];
 		},
 		getInfo() {
 			return {
@@ -14995,13 +15315,13 @@ function Xg(e, n) {
 				sessionId: X.sessionId,
 				model: dp(S) ? S.model ?? S.modelName : S.model,
 				systemPrompt: X.agent?.getEffectiveSystemPrompt?.() ?? _e + Zu(W(), e.schemaHint),
-				tools: (X.agent?.allTools ?? K).map((e) => ({
+				tools: (X.agent?.allTools ?? q).map((e) => ({
 					name: e.name,
 					description: e.description,
 					schema: e.schema,
 					source: G.get(e.name) || "user"
 				})),
-				skills: (At ? At.controller.get() : e.skills ?? []).map((e) => ({
+				skills: (jt ? jt.controller.get() : e.skills ?? []).map((e) => ({
 					name: e.name,
 					description: e.description
 				})),
@@ -15019,7 +15339,7 @@ function Xg(e, n) {
 				staleReadsInvalidated: X.agent?.getStaleReadsInvalidated?.() ?? 0,
 				llmRetries: X.agent?.getLlmRetries?.() ?? 0,
 				llmCallFailures: X.agent?.getLlmCallFailures?.() ?? 0,
-				middleware: Y.map((e) => e.name),
+				middleware: Bt.map((e) => e.name),
 				todos: (X.agent?.getState?.()?.todos ?? []).map((e) => ({
 					id: e.id,
 					content: e.content,
@@ -15033,27 +15353,27 @@ function Xg(e, n) {
 				mission: Ye ? D.getMission() : void 0,
 				planConfirmation: te.lastPlanConfirmation,
 				workingMemory: Xe ? j.getWorkingMemory() : void 0,
-				focus: ze ? A.getFocus() : void 0,
-				focuses: ze ? A.getFocuses() : [],
-				actions: Tg(e.actions ?? {}),
+				focus: K ? A.getFocus() : void 0,
+				focuses: K ? A.getFocuses() : [],
+				actions: Rg(e.actions ?? {}),
 				subagent: {
-					enabled: !!pt,
+					enabled: !!mt,
 					maxDepth: e.subagent?.maxDepth ?? 1,
 					maxParallel: e.subagent?.maxParallel ?? 4,
 					timeoutMs: e.subagent?.timeoutMs === void 0 ? 18e5 : e.subagent.timeoutMs > 0 ? e.subagent.timeoutMs : 0,
 					allowedTools: e.subagent?.allowedTools ?? [],
-					subagents: (yt?.get() ?? []).map(bt),
-					active: nt?.getActive() ?? [],
-					history: nt?.getHistory() ?? [],
-					lockedComponents: ht?.locked() ?? {}
+					subagents: (bt?.get() ?? []).map(xt),
+					active: rt?.getActive() ?? [],
+					history: rt?.getHistory() ?? [],
+					lockedComponents: gt?.locked() ?? {}
 				},
 				verify: {
-					enabled: !!Ct,
-					maxAttempts: ot ? rt : 0,
-					adversarial: ot && !!e.verify?.adversarial
+					enabled: !!wt,
+					maxAttempts: st ? it : 0,
+					adversarial: st && !!e.verify?.adversarial
 				},
 				context: (() => {
-					let e = wt?.getSnapshot();
+					let e = Tt?.getSnapshot();
 					if (e) {
 						let t = X.agent?.getState?.()?.lastCompression;
 						t && (e.compression = t);
@@ -15116,40 +15436,40 @@ function Xg(e, n) {
 			D.setMission(t), X.infoTick.value++;
 		},
 		getFocus() {
-			return ze ? A.getFocus() : void 0;
+			return K ? A.getFocus() : void 0;
 		},
 		getFocuses() {
-			return ze ? A.getFocuses() : [];
+			return K ? A.getFocuses() : [];
 		},
 		setFocus(t) {
-			let n = Yg(t, "setFocus", ze, () => W()?.schema, e.debug);
+			let n = c_(t, "setFocus", K, () => W()?.schema, e.debug);
 			return n.ok ? (A.setFocus(oe(t)), e.debug && A.isInvokeActive() && console.info("[page-agent-sdk][focus] 在途流程进行中,聚焦将在下一次输入生效(当前流程不受影响)"), X.infoTick.value++, { ok: !0 }) : n;
 		},
 		addFocus(t) {
-			let n = Yg(t, "addFocus", ze, () => W()?.schema, e.debug);
+			let n = c_(t, "addFocus", K, () => W()?.schema, e.debug);
 			return n.ok ? A.getFocuses().length >= 8 ? (e.debug && console.warn("[page-agent-sdk][focus] addFocus 拒绝:焦点数已达上限 8(augmentPrompt 注入每焦点子树 schema,过多致 system prompt 超预算)"), {
 				ok: !1,
 				error: "焦点数上限 8(避免 system prompt 撑爆)"
 			}) : (A.addFocus(oe(t)), e.debug && A.isInvokeActive() && console.info("[page-agent-sdk][focus] 在途流程进行中,聚焦将在下一次输入生效(当前流程不受影响)"), X.infoTick.value++, { ok: !0 }) : n;
 		},
 		removeFocus(e) {
-			ze && (A.removeFocus(e), X.infoTick.value++);
+			K && (A.removeFocus(e), X.infoTick.value++);
 		},
 		clearFocus() {
-			ze && (A.clearFocus(), X.infoTick.value++);
+			K && (A.clearFocus(), X.infoTick.value++);
 		},
 		setQuote(e, t) {
 			let n = Ni(e ?? "");
-			Yt.value = n ? {
+			Xt.value = n ? {
 				text: n,
 				...t ? { source: t } : {}
 			} : null;
 		},
 		clearQuote() {
-			Yt.value = null;
+			Xt.value = null;
 		}
 	};
-	async function Xt() {
+	async function Zt() {
 		if (!c) return;
 		let t = async (e) => {
 			try {
@@ -15203,25 +15523,25 @@ function Xg(e, n) {
 				}), e.debug && console.log("[page-agent-sdk][restore] 恢复会话", X.sessionId, `${n.messages?.length ?? 0} msgs`)) : e.debug && console.log("[page-agent-sdk][restore] 会话 meta 存在但快照为空", X.sessionId);
 			} else X.sessionId = await c.createSession(n, a.title), e.debug && console.log("[page-agent-sdk][restore] 新建会话(无历史)", X.sessionId);
 		} else X.sessionId = await c.createSession(n, a.title);
-		e.memory && nn.persistSave({ memory: se.get() || (typeof e.memory == "string" ? e.memory : "") }), nn.refreshSessions();
+		e.memory && rn.persistSave({ memory: se.get() || (typeof e.memory == "string" ? e.memory : "") }), rn.refreshSessions();
 	}
-	async function Zt() {
-		await Lt();
+	async function Qt() {
+		await Rt();
 	}
-	function Qt(e) {
+	function $t(e) {
 		let t = {};
-		for (let n of Vg(e)) {
+		for (let n of e_(e)) {
 			let e = w.files[n];
 			e && (t[n] = e.content);
 		}
 		return t;
 	}
-	function $t() {
-		let e = Hg(w.files, Vg(C));
+	function en() {
+		let e = t_(w.files, e_(C));
 		for (let t of e) delete w.files[t];
 	}
-	function en() {
-		let e = nl(C, Bt);
+	function tn() {
+		let e = nl(C, Vt);
 		if (!e.trimmed) return;
 		let { older: t, summary: n } = e;
 		if (J({
@@ -15232,33 +15552,33 @@ function Xg(e, n) {
 				assistant: e.assistantMsgs.map((e) => e.content),
 				steps: e.assistantMsgs.flatMap((e) => e.steps ?? [])
 			})),
-			vfsResults: Qt(t.flatMap((e) => [e.userMsg, ...e.assistantMsgs])),
+			vfsResults: $t(t.flatMap((e) => [e.userMsg, ...e.assistantMsgs])),
 			summary: n.content,
 			reason: "max_memory_rounds"
-		}), C.splice(e.deleteFrom, e.deleteCount, n), $t(), y && u) {
+		}), C.splice(e.deleteFrom, e.deleteCount, n), en(), y && u) {
 			let n = e.summary, { prevSeg: r } = e;
 			(async () => {
 				try {
 					let e = await u(ll(t, x)), i = C.indexOf(n);
 					if (i < 0) return;
-					C[i].content = tl(t, r, e), nn.persistRuntime();
+					C[i].content = tl(t, r, e), rn.persistRuntime();
 				} catch {}
 			})();
 		}
 	}
-	let tn = ki({
+	let nn = ki({
 		getConfig: () => e.images,
 		getVision: () => m.vision === !0,
 		emit: J,
 		getVfsStore: () => X.vfsStore,
-		noteFailure: (e, t) => nn.notePersistFailure(e, t)
-	}), nn = um({
+		noteFailure: (e, t) => rn.notePersistFailure(e, t)
+	}), rn = um({
 		agentId: n,
 		options: e,
 		emit: J,
 		getStore: () => c,
 		core: X,
-		sessionsRef: Ht,
+		sessionsRef: Ut,
 		sessionVars: te,
 		messages: C,
 		getUsage: () => r,
@@ -15268,24 +15588,24 @@ function Xg(e, n) {
 			missionMw: D,
 			workingMemoryMw: j,
 			focusMw: A,
-			summarizationMw: Rt,
+			summarizationMw: zt,
 			resumeNoticeMw: ee,
 			useMission: Ye,
 			useWorkingMemory: Xe,
-			useFocus: ze,
+			useFocus: K,
 			useAutomation: H
 		},
 		vfsStore: w,
 		checkpointMgr: B,
 		conflictResolve: (e) => a.resolve(e),
-		abortAllActive: qt,
+		abortAllActive: Yt,
 		titleLlmInvoke: d
 	});
 	return X.initDone = (async () => {
-		await Xt(), await Zt(), e.mcp?.length && Hu({
+		await Zt(), await Qt(), e.mcp?.length && Hu({
 			servers: e.mcp,
 			emit: J,
-			isReleased: () => Fe,
+			isReleased: () => Ie,
 			core: {
 				mcpClosers: X.mcpClosers,
 				mcpServers: X.mcpServers,
@@ -15294,15 +15614,15 @@ function Xg(e, n) {
 			},
 			reservedNames: () => {
 				let e = /* @__PURE__ */ new Set();
-				for (let t of K) {
+				for (let t of q) {
 					let n = G.get(t.name);
 					n && !n.startsWith("mcp:") && e.add(t.name);
 				}
 				return e;
 			},
-			pushTool: (e, t) => (G.set(e.name, `mcp:${t}`), Pe.push(e), !0),
+			pushTool: (e, t) => (G.set(e.name, `mcp:${t}`), Fe.push(e), !0),
 			rebind: () => {
-				K = qe(), X.agent && X.agent.setTools(K), X.infoTick.value++;
+				q = qe(), X.agent && X.agent.setTools(q), X.infoTick.value++;
 			},
 			debug: e.debug
 		});
@@ -15310,10 +15630,10 @@ function Xg(e, n) {
 		pp(t, { emit: J }), X.agent = ps({
 			llm: t,
 			systemPrompt: _e,
-			tools: K,
-			middleware: Y,
+			tools: q,
+			middleware: Bt,
 			maxToolRounds: e.maxToolRounds,
-			hasSubagent: tt,
+			hasSubagent: nt,
 			maxRetries: e.maxRetries,
 			stallMs: e.streamStallMs ?? 9e4,
 			streamMaxMs: e.streamMaxDurationMs ?? 18e5,
@@ -15323,23 +15643,23 @@ function Xg(e, n) {
 			maxOutputTokens: m.maxOutputTokens,
 			vision: m.vision,
 			imageContentFormat: ke,
-			maxVerifyAttempts: ot ? rt : 0,
+			maxVerifyAttempts: st ? it : 0,
 			roundTokenBudget: e.roundTokenBudget ?? 0,
 			staleReadInvalidation: e.staleReadInvalidation,
 			onLlmChange: (e) => {
 				S = e;
 			},
 			debug: e.debug
-		}), M.current = X.agent, vt && vt.setReconfigureHook(() => {
+		}), M.current = X.agent, yt && yt.setReconfigureHook(() => {
 			X.agent && X.agent.setTools(qe());
 		});
 	})(), X;
 }
-function Zg(e, t) {
+function u_(e, t) {
 	let n = e.id ?? wp();
 	e.id || console.warn(`[page-agent-sdk] 未传 options.id,已生成随机 id "${n}"。刷新后持久化数据无法恢复,请传稳定 id。`);
-	let r = e.streaming ?? !0, i = e.ui ?? "default", a, o = e.shareContext ? Gg.get(n) : void 0;
-	o ? a = o : (a = Xg(e, n), e.shareContext && Gg.set(n, a)), a.refCount++;
+	let r = e.streaming ?? !0, i = e.ui ?? "default", a, o = e.shareContext ? i_.get(n) : void 0;
+	o ? a = o : (a = l_(e, n), e.shareContext && i_.set(n, a)), a.refCount++;
 	let s = null, c = $p(e), l = null, u = null;
 	async function d(n) {
 		if (await a.initDone, s) {
@@ -15571,7 +15891,7 @@ function Zg(e, t) {
 }
 //#endregion
 //#region src/core/sdk/ragSubagent.ts
-function Qg(e, t, n, r, i) {
+function d_(e, t, n, r, i) {
 	let a = [];
 	e && a.push("vfs_grep + vfs_read(搜预注入文档)"), t && a.push(`${r}(语义检索)`), n && a.push(`${i}(按 source 加载)`), a.push("fetch_document(公网 URL)");
 	let o = [];
@@ -15586,7 +15906,7 @@ function Qg(e, t, n, r, i) {
 
 你是只读检索角色,不要尝试修改任何数据。不要尝试上面未列出的工具。`;
 }
-function $g(e, t, n, r, i) {
+function f_(e, t, n, r, i) {
 	let a = [], o = [];
 	return e && (a.push("- vfs_grep / vfs_read:搜集成方预注入 vfs 的文档(组件文档 / UI 规范)—— 快、静态,先查"), o.push("- 静态文档(组件库文档 / UI 规范):vfs_grep")), t && (a.push(`- ${r}:语义检索(retriever 向量库)—— 模糊匹配,关键词不确定 / 语义相似时用`), o.push(`- 语义相似(「瀑布流组件」「倒计时」「拼团」):${r}`)), n && (a.push(`- ${i}:按 source 精确加载(已知文档 id / URL / key)—— 精确取特定文档`), o.push(`- 已知文档 id / URL:${i}`)), a.push("- fetch_document:公网 URL —— 查公开资料"), o.push("- 公开 URL(设计规范网站 / 第三方文档):fetch_document"), `# 知识检索策略(RAG)
 
@@ -15603,12 +15923,12 @@ ${a.join("\n")}
 ## 何时用何源
 ${o.join("\n")}`;
 }
-var e_ = {
+var p_ = {
 	name: "rag-search",
 	description: "多源知识检索策略:vfs 预注入文档 → 语义检索 → 指定文档加载 → 公网;综合结构化结论 + 溯源",
-	getContent: () => $g(!0, !0, !0, "search_docs", "load_doc")
+	getContent: () => f_(!0, !0, !0, "search_docs", "load_doc")
 };
-function t_(e, n, r) {
+function m_(e, n, r) {
 	let i = s(async ({ query: e, topK: t }) => {
 		try {
 			let i = await n(e, { topK: t ?? r });
@@ -15626,7 +15946,7 @@ function t_(e, n, r) {
 	});
 	return qi([i]), i;
 }
-function n_(e, n) {
+function h_(e, n) {
 	let r = s(async ({ source: e }) => {
 		try {
 			let t = await n(e), r = Array.isArray(t) ? t : [t];
@@ -15641,19 +15961,19 @@ function n_(e, n) {
 	});
 	return qi([r]), r;
 }
-function r_(e) {
+function g_(e) {
 	let { retriever: t, loader: n, useVfs: r = !0, id: i = "rag", description: a, topK: o = 5, searchToolName: s = "search_docs", loadToolName: c = "load_doc", maxToolRounds: l = 8, summarization: u, skills: d, extraTools: f } = e;
 	if (!t && !n && r === !1) throw Error("[page-agent-sdk][createRagSubagent] 至少配一种知识源:retriever / loader / useVfs(true)");
 	let p = [];
-	t && p.push(t_(s, t, o)), n && p.push(n_(c, n)), f && p.push(...f);
+	t && p.push(m_(s, t, o)), n && p.push(h_(c, n)), f && p.push(...f);
 	let m = r ? [
 		"vfs_grep",
 		"vfs_read",
 		"vfs_json_read"
-	] : void 0, h = Qg(r, !!t, !!n, s, c), g = {
+	] : void 0, h = d_(r, !!t, !!n, s, c), g = {
 		name: "rag-search",
-		description: e_.description,
-		getContent: () => $g(r, !!t, !!n, s, c)
+		description: p_.description,
+		getContent: () => f_(r, !!t, !!n, s, c)
 	};
 	return {
 		id: i,
@@ -15668,7 +15988,7 @@ function r_(e) {
 }
 //#endregion
 //#region src/core/sdk/evalToolkit.ts
-function i_(e = {}) {
+function __(e = {}) {
 	let t = e.quietMs ?? 9e4, n = e.confirmSamples ?? 3, r = e.baselineMessageCount ?? 0, i = 0;
 	return {
 		push(e) {
@@ -15679,12 +15999,12 @@ function i_(e = {}) {
 		}
 	};
 }
-var a_ = /* @__PURE__ */ new Set(["elapsedSec"]);
-function o_(e, t, n = {}) {
+var v_ = /* @__PURE__ */ new Set(["elapsedSec"]);
+function y_(e, t, n = {}) {
 	let r = n.tokenAbs ?? 2e3, i = n.tokenPct ?? 15, a = n.toolCountAbs ?? 3, o = [], s = 0, c = 0, l = 0, u = /* @__PURE__ */ new Set([...Object.keys(e ?? {}), ...Object.keys(t ?? {})]);
 	for (let n of u) {
 		let u = Number(e?.[n] ?? 0), d = Number(t?.[n] ?? 0), f = u - d, p = d > 0 ? Math.round(f / d * 100) : 0, m = "";
-		a_.has(n) || (n === "toolCount" ? Math.abs(f) > a : Math.abs(f) > r && Math.abs(p) >= i) && (m = f > 0 ? "up" : "down", m === "up" ? (s++, c++) : l++), o.push({
+		v_.has(n) || (n === "toolCount" ? Math.abs(f) > a : Math.abs(f) > r && Math.abs(p) >= i) && (m = f > 0 ? "up" : "down", m === "up" ? (s++, c++) : l++), o.push({
 			key: n,
 			prev: d,
 			cur: u,
@@ -15699,7 +16019,7 @@ function o_(e, t, n = {}) {
 		fields: o
 	};
 }
-function s_(e) {
+function b_(e) {
 	let { sdk: t } = e, n = () => {
 		let e = t.debugLogs.value ?? [], n = e.length ? e[e.length - 1].timestamp : 0;
 		return {
@@ -15712,7 +16032,7 @@ function s_(e) {
 	};
 	return {
 		async waitForIdle(e = {}) {
-			let { timeoutMs: r = 6e5, sampleMs: i = 2500, onSample: a, ...o } = e, s = i_(o), c = Date.now();
+			let { timeoutMs: r = 6e5, sampleMs: i = 2500, onSample: a, ...o } = e, s = __(o), c = Date.now();
 			for (;;) {
 				let e = n(), o = s.push(e);
 				if (a?.(e), o === "done") return e;
@@ -15742,7 +16062,7 @@ function s_(e) {
 }
 //#endregion
 //#region src/core/utils/clipboard.ts
-async function c_(e) {
+async function x_(e) {
 	try {
 		let t = globalThis.navigator?.clipboard;
 		if (t && typeof t.writeText == "function") return await t.writeText(e), !0;
@@ -15760,8 +16080,8 @@ async function c_(e) {
 }
 //#endregion
 //#region src/core/composables/useChat.ts
-var l_ = 4e3;
-function u_(e = {}) {
+var S_ = 4e3;
+function C_(e = {}) {
 	let { fetchResponse: t, fetchStream: n, onPersist: r, onClear: i, onQueuedCleared: a, onBeforeRegenerate: o } = e, s = /* @__PURE__ */ Mt({
 		messages: e.messages ?? [],
 		loading: !1,
@@ -15842,7 +16162,7 @@ function u_(e = {}) {
 								let t = e.delta || "";
 								n.subReasonFull = (n.subReasonFull || "") + t;
 								let r = (n.subReason || "") + t;
-								n.subReason = r.length > l_ ? r.slice(-4e3) : r;
+								n.subReason = r.length > S_ ? r.slice(-4e3) : r;
 								break;
 							}
 							n.children ||= [];
@@ -15973,7 +16293,7 @@ function u_(e = {}) {
 }
 //#endregion
 //#region src/core/components/icons.ts
-var d_ = {
+var w_ = {
 	header: "🤖",
 	subagent: "🤖",
 	subagentProgress: "🧬",
@@ -15984,10 +16304,10 @@ var d_ = {
 	recommend: "💡",
 	conflict: "⚠️"
 };
-function f_(e) {
-	let t = { ...d_ };
+function T_(e) {
+	let t = { ...w_ };
 	if (!e) return t;
-	let n = Object.keys(d_);
+	let n = Object.keys(w_);
 	for (let r of n) {
 		let n = e[r];
 		typeof n == "string" && (t[r] = n);
@@ -15996,7 +16316,7 @@ function f_(e) {
 }
 //#endregion
 //#region src/core/components/messages.ts
-var p_ = {
+var E_ = {
 	defaultTitle: "AI 助手",
 	inputPlaceholder: "输入消息,Enter 发送...",
 	newSession: "新建会话",
@@ -16228,8 +16548,8 @@ var p_ = {
 	codeDemoText: "这是一段示例文字，用于展示 CSS 效果。",
 	codeDemoButton: "按钮",
 	codeDemoInput: "输入框"
-}, m_ = {
-	"zh-CN": p_,
+}, D_ = {
+	"zh-CN": E_,
 	"en-US": {
 		defaultTitle: "AI Assistant",
 		inputPlaceholder: "Type a message, Enter to send...",
@@ -16464,10 +16784,10 @@ var p_ = {
 		codeDemoInput: "Input"
 	}
 };
-function h_(e = "zh-CN", t) {
+function O_(e = "zh-CN", t) {
 	let n = {
-		...p_,
-		...m_[e]
+		...E_,
+		...D_[e]
 	};
 	if (!t) return n;
 	let r = { ...n };
@@ -16479,9 +16799,9 @@ function h_(e = "zh-CN", t) {
 }
 //#endregion
 //#region src/core/composables/chatContext.ts
-var g_ = Symbol("chatContext");
-function __(e = {}) {
-	let t = u_({
+var k_ = Symbol("chatContext");
+function A_(e = {}) {
+	let t = C_({
 		fetchResponse: e.fetchResponse,
 		fetchStream: e.fetchStream,
 		messages: e.messages,
@@ -16503,7 +16823,7 @@ function __(e = {}) {
 	}, h = /* @__PURE__ */ Wt({}), g = (e) => h.value[e] === !0, _ = (e) => {
 		h.value[e] = !g(e);
 	}, v = /* @__PURE__ */ Wt(!1), y = (e) => {
-		c_(e).then((e) => {
+		x_(e).then((e) => {
 			e && (v.value = !0, setTimeout(() => {
 				v.value = !1;
 			}, 1500));
@@ -16569,7 +16889,7 @@ function __(e = {}) {
 		e.onClearFocus?.();
 	}, P = (t) => {
 		e.onFocusChipClick?.(t);
-	}, F = f_(e.icons), le = e.locale ?? "zh-CN", I = h_(le, e.dialogMessages);
+	}, F = T_(e.icons), le = e.locale ?? "zh-CN", I = O_(le, e.dialogMessages);
 	return {
 		chat: t,
 		inputText: o,
@@ -16614,15 +16934,15 @@ function __(e = {}) {
 		toolStepView: e.toolStepView
 	};
 }
-function v_() {
-	let e = Zn(g_);
+function j_() {
+	let e = Zn(k_);
 	if (!e) throw Error("useChatContext 必须在 provide(chatContextKey) 的组件子树内调用");
 	return e;
 }
 //#endregion
 //#region src/core/index.headless.ts
-function y_(e) {
-	return Zg(e);
+function M_(e) {
+	return u_(e);
 }
 //#endregion
-export { em as CAPABILITIES, rm as CONTEXT_PRESETS, cp as CompressDecisionSchema, $h as DEFAULT_COMPUTED_STYLES, fl as DEFAULT_PROMPT_SOFT_CAP, Uu as DEFAULT_SYSTEM_PROMPT, Wu as DEFAULT_SYSTEM_PROMPT_EN, Xd as HTML_VOID_TAGS, nu as HUMAN_CONFIRM_TOOL_NAME, hi as ImageInputError, g as LOW_CAPS_HINT_BASELINE, p as MIN_CONTEXT_WINDOW, ua as MODEL_UNAVAILABLE_GUIDANCE, dl as SOFT_CAP_MIN_WINDOW, rl as STOP_WORDS, ic as UNSAFE_KEYS, Tg as actionsToInspectInfo, wg as actionsToTools, di as agentError, Fu as analyzeContext, _c as applyPatchToClone, bc as applyPatchToLive, Rd as applyPatchesToBind, Cs as arrayMinLength, ui as asAgentError, Hf as buildCollectorJs, ig as buildCssPath, Zu as buildDataPrompt, Pf as buildDiagnosticsReport, Qf as buildHtmlFragmentSkill, Uf as buildSandboxSrcdoc, Qu as buildSystemPrompt, Bi as captureSelectionQuote, g_ as chatContextKey, Ld as commitSetToBind, Yf as composeStructureThenRender, Ei as compressImage, Vu as connectMcp, k as constructLlmFromConfig, E as constructOpenLlmSync, c_ as copyText, ps as createAgent, tu as createApprovalMiddleware, __ as createChatContext, y_ as createChatSdk, pu as createCheckpointManager, mu as createCheckpointMiddleware, Cp as createConflictManager, Iu as createContextInspectorMiddleware, np as createCraftNoteCheck, Yd as createDataOps, s_ as createEvalHarness, ep as createHtmlFormatCheck, Jf as createHtmlRenderCheck, ip as createHtmlSubagent, au as createHumanConfirmMiddleware, iu as createHumanConfirmTool, i_ as createIdleDetector, Gp as createMemoryBackend, Jl as createMemoryMiddleware, u as createProxyLlm, r_ as createRagSubagent, ga as createSandboxRunner, nm as createSdkEvents, Ug as createSerialRunner, Yp as createSessionStore, Xp as createSessionStoreWithBackend, zg as createSkillStore, zl as createSubagentMiddleware, yl as createSubagentTracker, Hl as createSubagentsMiddleware, jg as createUsageHintsMiddleware, gu as createVerifyMiddleware, nd as createVfs, qp as createWebStorageBackend, Su as createWriteBackCheck, da as decorateModelUnavailable, lc as deepClone, Og as defineDataToolset, Nc as defineSkill, ap as defineTool, cc as deleteByPath, lp as deriveTitle, Ls as describeSchemaNode, Xo as detectGarbledToolCall, mo as detectTransitionalReply, wc as diffObjects, o_ as diffReport, lg as domInfoTool, mg as domInspectSkill, cg as domSearchTool, Wh as domToStructure, Qh as domTools, Dg as domToolsStatic, ws as elementSchemaCandidates, ng as ensureDomListenerRecorder, al as estimateMessageTokens, cl as estimateRoundTokens, y as estimateTokens, te as extractReasoningDelta, Xs as extractSchemaHint, Lu as extractText, ee as extractTextDelta, ne as extractUsage, Bh as fetchDocTools, Eg as fetchTools, Cc as findStrippedKeys, Rs as formatConstraints, oi as formatZodIssues, Q as getByPath, Gh as getDomTool, sg as getElementInfo, _g as getEnvSummary, rg as getRecordedListeners, Kf as getSandboxLifecycle, _s as getSchemaAtPath, ms as getSchemaTopKeys, hc as hashValue, $f as htmlFragmentSkill, Gs as htmlOrchestratorPrompt, ll as indexSummarize, bg as inspectEnvTool, xg as inspectTools, dp as isChatModel, ca as isContextLengthError, la as isModelUnavailableError, hs as isPathAllowed, Lp as isQuotaError, ac as isUnsafePath, Ea as jpEval, ci as jsonParseError, pc as limitDepth, _ as lowCapsHint, Mf as maskUrlCredentials, dc as maybeParseValue, Ef as measureWriteScale, yc as moveByPath, T as normalizeBaseUrl, Vf as normalizeRenderResult, ie as normalizeUsage, x as offloadPassThroughChars, b as offloadThresholdChars, Ws as presets, js as projectBySchema, As as projectBySchemaDeep, fc as projectFields, ul as recallRounds, qf as renderInSandbox, zs as renderSchemaHint, Bs as renderSchemaOverview, Us as renderSchemaShallow, tm as resolveCapabilities, am as resolveContextOptions, $p as resolveDialogConfig, Sp as resolveLlm, v as resolveModelCaps, ml as resolvePromptSoftCap, bs as resolveSchemaPath, Qp as resolveStorage, Sc as restoreInPlace, xc as restoreLive, li as routeError, Aa as runSandboxedScript, oc as safeMerge, gg as safeSerialize, $ as safeStringify, Zo as sanitizeGarbledContent, Ss as schemaHasRefinement, ag as searchDom, Oa as searchJson, kg as selectBuiltinTools, sc as setByPath, hl as shouldTriggerCompression, Ff as stringifyDiagnosticsReport, w as stripStainlessFetch, Ks as systemPromptHelpers, h as tableMaxOutputTokens, il as tokenize, Z as toolError, gs as unwrapSchema, u_ as useChat, v_ as useChatContext, xs as validateAtPath, Qd as validateHtmlFormat, Fd as validateRootValueLocally, Id as validateWriteLocally, gc as watchFieldsHash, e as z, si as zodError };
+export { em as CAPABILITIES, rm as CONTEXT_PRESETS, cp as CompressDecisionSchema, fg as DEFAULT_COMPUTED_STYLES, fl as DEFAULT_PROMPT_SOFT_CAP, Uu as DEFAULT_SYSTEM_PROMPT, Wu as DEFAULT_SYSTEM_PROMPT_EN, Xd as HTML_VOID_TAGS, nu as HUMAN_CONFIRM_TOOL_NAME, hi as ImageInputError, g as LOW_CAPS_HINT_BASELINE, p as MIN_CONTEXT_WINDOW, ua as MODEL_UNAVAILABLE_GUIDANCE, dl as SOFT_CAP_MIN_WINDOW, rl as STOP_WORDS, ic as UNSAFE_KEYS, Rg as actionsToInspectInfo, Lg as actionsToTools, di as agentError, Fu as analyzeContext, _c as applyPatchToClone, bc as applyPatchToLive, Rd as applyPatchesToBind, Cs as arrayMinLength, ui as asAgentError, Hf as buildCollectorJs, _g as buildCssPath, Zu as buildDataPrompt, Pf as buildDiagnosticsReport, Qf as buildHtmlFragmentSkill, Uf as buildSandboxSrcdoc, Qu as buildSystemPrompt, Bi as captureSelectionQuote, k_ as chatContextKey, Ld as commitSetToBind, Yf as composeStructureThenRender, Ei as compressImage, Vu as connectMcp, k as constructLlmFromConfig, E as constructOpenLlmSync, x_ as copyText, ps as createAgent, tu as createApprovalMiddleware, A_ as createChatContext, M_ as createChatSdk, pu as createCheckpointManager, mu as createCheckpointMiddleware, Cp as createConflictManager, Iu as createContextInspectorMiddleware, np as createCraftNoteCheck, Yd as createDataOps, b_ as createEvalHarness, ep as createHtmlFormatCheck, Jf as createHtmlRenderCheck, ip as createHtmlSubagent, au as createHumanConfirmMiddleware, iu as createHumanConfirmTool, __ as createIdleDetector, Gp as createMemoryBackend, Jl as createMemoryMiddleware, u as createProxyLlm, g_ as createRagSubagent, ga as createSandboxRunner, nm as createSdkEvents, n_ as createSerialRunner, Yp as createSessionStore, Xp as createSessionStoreWithBackend, Qg as createSkillStore, zl as createSubagentMiddleware, yl as createSubagentTracker, Hl as createSubagentsMiddleware, Wg as createUsageHintsMiddleware, gu as createVerifyMiddleware, nd as createVfs, qp as createWebStorageBackend, Su as createWriteBackCheck, da as decorateModelUnavailable, lc as deepClone, Vg as defineDataToolset, Nc as defineSkill, ap as defineTool, cc as deleteByPath, lp as deriveTitle, Ls as describeSchemaNode, Xo as detectGarbledToolCall, mo as detectTransitionalReply, wc as diffObjects, y_ as diffReport, Sg as domInfoTool, Dg as domInspectSkill, xg as domSearchTool, rg as domToStructure, dg as domTools, Bg as domToolsStatic, ws as elementSchemaCandidates, hg as ensureDomListenerRecorder, al as estimateMessageTokens, cl as estimateRoundTokens, y as estimateTokens, te as extractReasoningDelta, Xs as extractSchemaHint, Lu as extractText, ee as extractTextDelta, ne as extractUsage, $h as fetchDocTools, zg as fetchTools, Cc as findStrippedKeys, Rs as formatConstraints, oi as formatZodIssues, Q as getByPath, ig as getDomTool, bg as getElementInfo, Ag as getEnvSummary, gg as getRecordedListeners, Kf as getSandboxLifecycle, _s as getSchemaAtPath, ms as getSchemaTopKeys, hc as hashValue, $f as htmlFragmentSkill, Gs as htmlOrchestratorPrompt, ll as indexSummarize, Ng as inspectEnvTool, Pg as inspectTools, dp as isChatModel, ca as isContextLengthError, la as isModelUnavailableError, hs as isPathAllowed, Lp as isQuotaError, ac as isUnsafePath, Ea as jpEval, ci as jsonParseError, pc as limitDepth, _ as lowCapsHint, Mf as maskUrlCredentials, dc as maybeParseValue, Ef as measureWriteScale, yc as moveByPath, T as normalizeBaseUrl, Vf as normalizeRenderResult, ie as normalizeUsage, x as offloadPassThroughChars, b as offloadThresholdChars, Ws as presets, js as projectBySchema, As as projectBySchemaDeep, fc as projectFields, ul as recallRounds, qf as renderInSandbox, zs as renderSchemaHint, Bs as renderSchemaOverview, Us as renderSchemaShallow, tm as resolveCapabilities, am as resolveContextOptions, $p as resolveDialogConfig, Sp as resolveLlm, v as resolveModelCaps, ml as resolvePromptSoftCap, bs as resolveSchemaPath, Qp as resolveStorage, Sc as restoreInPlace, xc as restoreLive, li as routeError, Aa as runSandboxedScript, oc as safeMerge, kg as safeSerialize, $ as safeStringify, Zo as sanitizeGarbledContent, Ss as schemaHasRefinement, vg as searchDom, Oa as searchJson, Hg as selectBuiltinTools, sc as setByPath, hl as shouldTriggerCompression, Ff as stringifyDiagnosticsReport, w as stripStainlessFetch, Ks as systemPromptHelpers, h as tableMaxOutputTokens, il as tokenize, Z as toolError, gs as unwrapSchema, C_ as useChat, j_ as useChatContext, xs as validateAtPath, Qd as validateHtmlFormat, Fd as validateRootValueLocally, Id as validateWriteLocally, gc as watchFieldsHash, e as z, si as zodError };