@houser/edus-plugin 1.0.0

package/lib/index.js

@@ -0,0 +1,718 @@
+import z from "@deepseek-ai/schemastery";
+import { basename, extname } from "node:path";
+import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
+import { SessionId } from "@deepseek-ai/dsh-session";
+import { defineTool } from "@deepseek-ai/dsh-tools";
+import { createUserMessage } from "@deepseek-ai/dsh-llm";
+//#region lib/types/marker.js
+const MARKER = /<!--\s*edus-publish:(.*?)-->\s*/gs;
+function extractMarker(content) {
+	MARKER.lastIndex = 0;
+	const matched = MARKER.exec(content);
+	if (matched?.[1] === void 0) return null;
+	try {
+		const value = JSON.parse(matched[1]);
+		if (typeof value.id !== "string") return null;
+		return {
+			id: value.id,
+			...typeof value.sharePath === "string" ? { sharePath: value.sharePath } : {},
+			...typeof value.hash === "string" ? { hash: value.hash } : {},
+			...typeof value.owner === "string" ? { owner: value.owner } : {}
+		};
+	} catch {
+		return null;
+	}
+}
+function stripMarker(content) {
+	return content.replace(MARKER, "");
+}
+function canonicalizeBody(content) {
+	return `${stripMarker(content).replace(/\n+$/, "")}\n`;
+}
+function withMarker(body, marker) {
+	return `${canonicalizeBody(body)}<!-- edus-publish:${JSON.stringify(marker)} -->\n`;
+}
+async function sha256Hex(value) {
+	const bytes = new TextEncoder().encode(value);
+	const digest = await crypto.subtle.digest("SHA-256", bytes);
+	return Array.from(new Uint8Array(digest), (value) => value.toString(16).padStart(2, "0")).join("");
+}
+//#endregion
+//#region lib/types/auth.js
+/** Host-only ai-edu bridge. File methods are always fenced to the caller's session cwd. */
+var __runInitializers = function(thisArg, initializers, value) {
+	var useValue = arguments.length > 2;
+	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+	return useValue ? value : void 0;
+};
+var __esDecorate = function(ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+	function accept(f) {
+		if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected");
+		return f;
+	}
+	var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+	var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+	var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+	var _, done = false;
+	for (var i = decorators.length - 1; i >= 0; i--) {
+		var context = {};
+		for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+		for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+		context.addInitializer = function(f) {
+			if (done) throw new TypeError("Cannot add initializers after decoration has completed");
+			extraInitializers.push(accept(f || null));
+		};
+		var result = (0, decorators[i])(kind === "accessor" ? {
+			get: descriptor.get,
+			set: descriptor.set
+		} : descriptor[key], context);
+		if (kind === "accessor") {
+			if (result === void 0) continue;
+			if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+			if (_ = accept(result.get)) descriptor.get = _;
+			if (_ = accept(result.set)) descriptor.set = _;
+			if (_ = accept(result.init)) initializers.unshift(_);
+		} else if (_ = accept(result)) if (kind === "field") initializers.unshift(_);
+		else descriptor[key] = _;
+	}
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
+};
+const MAX_FILES = 300;
+const MAX_DIRS = 500;
+const INLINE_IMAGE = /data:(image\/[a-z0-9.+-]+);base64,([A-Z0-9+/=]+)/gi;
+const LOCAL_REF = /(?:src|href)\s*=\s*["'](?!https?:|data:|\/\/|#|mailto:)([^"']+)["']/gi;
+function htmlPath(value) {
+	return [".html", ".htm"].includes(extname(value).toLowerCase());
+}
+function login(wire) {
+	return {
+		id: wire.id,
+		phone: wire.phone,
+		token: wire.token ?? "",
+		isAdmin: wire.is_admin ?? false,
+		isVip: wire.is_vip ?? false,
+		title: wire.title,
+		vipLevel: wire.vip_level
+	};
+}
+async function publicCall(base, path, body) {
+	const response = await fetch(`${base}${path}`, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify(body)
+	});
+	if (!response.ok) throw new Error(`ai-edu 请求失败：HTTP ${response.status}`);
+	const data = await response.json();
+	if (data.code !== 0) throw new Error(data.msg);
+	return data.data;
+}
+async function protectedCall(base, token, path, init) {
+	const response = await fetch(`${base}${path}`, {
+		...init,
+		headers: {
+			...init.headers,
+			authorization: `Bearer ${token}`
+		}
+	});
+	if (!response.ok) throw new Error(`ai-edu 请求失败：HTTP ${response.status}`);
+	const data = await response.json();
+	if (data.code !== 0) throw new Error(data.msg);
+	return data.data;
+}
+function assertSelfContained(body) {
+	LOCAL_REF.lastIndex = 0;
+	const references = [...body.matchAll(LOCAL_REF)].map((match) => match[1]).filter((item) => item !== void 0);
+	if (references.length > 0) throw new Error(`页面引用了本地资源：${[...new Set(references)].slice(0, 5).join("、")}。请将样式和脚本内联，并使用图片绝对 URL。`);
+}
+async function uploadInlineImages(base, content) {
+	INLINE_IMAGE.lastIndex = 0;
+	const unique = /* @__PURE__ */ new Map();
+	for (const [all, mediaType, payload] of content.matchAll(INLINE_IMAGE)) {
+		if (mediaType === void 0 || payload === void 0 || unique.has(all)) continue;
+		const bytes = Buffer.from(payload, "base64");
+		if (bytes.byteLength > 10 * 1024 * 1024) throw new Error("页面内嵌图片超过 10MB 上限");
+		unique.set(all, (async () => {
+			const form = new FormData();
+			form.append("file", new Blob([new Uint8Array(bytes)], { type: mediaType }), `${(await sha256Hex(payload)).slice(0, 16)}.${mediaType.split("/")[1] ?? "png"}`);
+			const response = await fetch(`${base}/api/common/upload`, {
+				method: "POST",
+				body: form
+			});
+			if (!response.ok) throw new Error(`图片上传失败：HTTP ${response.status}`);
+			const wire = await response.json();
+			if (typeof wire.url !== "string" || wire.url === "") throw new Error("图片上传未返回 URL");
+			return wire.url;
+		})());
+	}
+	const urls = new Map(await Promise.all([...unique.entries()].map(async ([source, upload]) => [source, await upload])));
+	return content.replace(INLINE_IMAGE, (source) => urls.get(source) ?? source);
+}
+let EdusAuthService = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _shareOrigin_decorators;
+	let _login_decorators;
+	let _loginInfo_decorators;
+	let _sendPhoneCode_decorators;
+	let _loginByPhone_decorators;
+	let _htmlList_decorators;
+	let _htmlShare_decorators;
+	let _listHtmlFiles_decorators;
+	let _readHtmlFile_decorators;
+	let _writeHtmlFile_decorators;
+	let _publishFile_decorators;
+	let _htmlVersions_decorators;
+	let _htmlVersionDetail_decorators;
+	let _applyVersion_decorators;
+	let _htmlVersionDelete_decorators;
+	return class EdusAuthService extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_shareOrigin_decorators = [Remote("shareOrigin")];
+			_login_decorators = [Remote("login")];
+			_loginInfo_decorators = [Remote("loginInfo")];
+			_sendPhoneCode_decorators = [Remote("sendPhoneCode")];
+			_loginByPhone_decorators = [Remote("loginByPhone")];
+			_htmlList_decorators = [Remote("htmlList")];
+			_htmlShare_decorators = [Remote("htmlShare")];
+			_listHtmlFiles_decorators = [Remote("listHtmlFiles")];
+			_readHtmlFile_decorators = [Remote("readHtmlFile")];
+			_writeHtmlFile_decorators = [Remote("writeHtmlFile")];
+			_publishFile_decorators = [Remote("publishFile")];
+			_htmlVersions_decorators = [Remote("htmlVersions")];
+			_htmlVersionDetail_decorators = [Remote("htmlVersionDetail")];
+			_applyVersion_decorators = [Remote("applyVersion")];
+			_htmlVersionDelete_decorators = [Remote("htmlVersionDelete")];
+			__esDecorate(this, null, _shareOrigin_decorators, {
+				kind: "method",
+				name: "shareOrigin",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "shareOrigin" in obj,
+					get: (obj) => obj.shareOrigin
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _login_decorators, {
+				kind: "method",
+				name: "login",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "login" in obj,
+					get: (obj) => obj.login
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _loginInfo_decorators, {
+				kind: "method",
+				name: "loginInfo",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "loginInfo" in obj,
+					get: (obj) => obj.loginInfo
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _sendPhoneCode_decorators, {
+				kind: "method",
+				name: "sendPhoneCode",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "sendPhoneCode" in obj,
+					get: (obj) => obj.sendPhoneCode
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _loginByPhone_decorators, {
+				kind: "method",
+				name: "loginByPhone",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "loginByPhone" in obj,
+					get: (obj) => obj.loginByPhone
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _htmlList_decorators, {
+				kind: "method",
+				name: "htmlList",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "htmlList" in obj,
+					get: (obj) => obj.htmlList
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _htmlShare_decorators, {
+				kind: "method",
+				name: "htmlShare",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "htmlShare" in obj,
+					get: (obj) => obj.htmlShare
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _listHtmlFiles_decorators, {
+				kind: "method",
+				name: "listHtmlFiles",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "listHtmlFiles" in obj,
+					get: (obj) => obj.listHtmlFiles
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _readHtmlFile_decorators, {
+				kind: "method",
+				name: "readHtmlFile",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "readHtmlFile" in obj,
+					get: (obj) => obj.readHtmlFile
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _writeHtmlFile_decorators, {
+				kind: "method",
+				name: "writeHtmlFile",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "writeHtmlFile" in obj,
+					get: (obj) => obj.writeHtmlFile
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _publishFile_decorators, {
+				kind: "method",
+				name: "publishFile",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "publishFile" in obj,
+					get: (obj) => obj.publishFile
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _htmlVersions_decorators, {
+				kind: "method",
+				name: "htmlVersions",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "htmlVersions" in obj,
+					get: (obj) => obj.htmlVersions
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _htmlVersionDetail_decorators, {
+				kind: "method",
+				name: "htmlVersionDetail",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "htmlVersionDetail" in obj,
+					get: (obj) => obj.htmlVersionDetail
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _applyVersion_decorators, {
+				kind: "method",
+				name: "applyVersion",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "applyVersion" in obj,
+					get: (obj) => obj.applyVersion
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _htmlVersionDelete_decorators, {
+				kind: "method",
+				name: "htmlVersionDelete",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "htmlVersionDelete" in obj,
+					get: (obj) => obj.htmlVersionDelete
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		baseUrl = __runInitializers(this, _instanceExtraInitializers);
+		/** Session cwd and filesystem authority are mandatory for every file Remote call. */
+		static inject = ["sessions", "fs"];
+		constructor(ctx, baseUrl) {
+			super(ctx, "edus");
+			this.baseUrl = baseUrl;
+		}
+		sessionCwd(sessionId) {
+			const session = this.ctx.sessions.get(SessionId(sessionId));
+			if (session?.header.cwd === void 0) throw new Error("当前会话没有可用工作区");
+			return session.header.cwd;
+		}
+		async target(sessionId, path) {
+			if (!htmlPath(path)) throw new Error("只能操作 .html 或 .htm 文件");
+			const cwd = this.sessionCwd(sessionId);
+			const root = await this.ctx.fs.resolve(cwd);
+			if ((await this.ctx.fs.lstat(path, { cwd }))?.type === "symlink") throw new Error("不允许操作符号链接");
+			const target = await this.ctx.fs.resolve(path, { cwd });
+			if (!this.ctx.fs.contains(root, target)) throw new Error("文件必须位于当前会话工作区内");
+			if ((await this.ctx.fs.stat(target))?.type !== "file") throw new Error("目标不是普通文件");
+			return target;
+		}
+		policy(sessionId) {
+			const policy = this.ctx.get("sandboxPolicy");
+			const session = this.ctx.sessions.get(SessionId(sessionId));
+			return policy?.resolve(session === void 0 ? {} : { session });
+		}
+		shareOrigin() {
+			return Promise.resolve(this.baseUrl);
+		}
+		async login(phone, password) {
+			return login(await publicCall(this.baseUrl, "/api/login/login_by_password", {
+				phone,
+				password
+			}));
+		}
+		async loginInfo(token) {
+			return {
+				...login(await protectedCall(this.baseUrl, token, "/api/login/login_info", { method: "GET" })),
+				token
+			};
+		}
+		async sendPhoneCode(phone, captcha) {
+			await publicCall(this.baseUrl, "/api/login/send_phone_code", {
+				phone,
+				captcha
+			});
+		}
+		async loginByPhone(phone, code) {
+			return login(await publicCall(this.baseUrl, "/api/login/login_by_phone", {
+				phone,
+				code
+			}));
+		}
+		async htmlList(token, page, size, search) {
+			const query = new URLSearchParams({
+				page: String(page),
+				size: String(size)
+			});
+			if (search?.trim()) query.set("search", search.trim());
+			const result = await protectedCall(this.baseUrl, token, `/api/ai/html_list?${query}`, { method: "GET" });
+			return {
+				list: result.list.map((value) => ({
+					id: value.id,
+					title: value.title,
+					text: value.text,
+					images: value.images,
+					status: value.status,
+					views: value.views,
+					thumb: value.thumb,
+					from: value.from,
+					createdAt: value.created_at,
+					updatedAt: value.updated_at
+				})),
+				total: result.total,
+				page: result.page,
+				size: result.size
+			};
+		}
+		async htmlShare(token, id) {
+			const result = await protectedCall(this.baseUrl, token, `/api/ai/html_share?id=${encodeURIComponent(id)}`, { method: "GET" });
+			return `${this.baseUrl}${result.share_path}`;
+		}
+		async listHtmlFiles(sessionId) {
+			const cwd = this.sessionCwd(sessionId);
+			const root = await this.ctx.fs.resolve(cwd);
+			const files = [];
+			let dirs = 0;
+			let truncated = false;
+			const visit = async (directory, relative) => {
+				if (truncated || dirs++ >= MAX_DIRS) {
+					truncated = true;
+					return;
+				}
+				for (const entry of await this.ctx.fs.listDir(directory)) {
+					if (truncated) return;
+					if (entry.name.startsWith(".") || entry.name === "node_modules" || entry.name === ".git") continue;
+					const path = relative === "" ? entry.name : `${relative}/${entry.name}`;
+					if (entry.type === "directory") await visit(entry.target, path);
+					if (entry.type === "file" && htmlPath(entry.name)) {
+						if (files.length >= MAX_FILES) {
+							truncated = true;
+							return;
+						}
+						files.push({
+							path,
+							name: basename(path),
+							size: entry.size ?? 0,
+							modifiedAt: ""
+						});
+					}
+				}
+			};
+			await visit(root, "");
+			return {
+				files: files.sort((a, b) => a.path.localeCompare(b.path)),
+				truncated
+			};
+		}
+		async readHtmlFile(sessionId, path) {
+			return this.ctx.fs.readText(await this.target(sessionId, path));
+		}
+		async writeHtmlFile(sessionId, path, content) {
+			await this.ctx.fs.writeText(await this.target(sessionId, path), content, void 0, void 0, this.policy(sessionId));
+		}
+		async publishFile(token, sessionId, path, account, title, createNew) {
+			const publishAsNew = createNew ?? false;
+			const target = await this.target(sessionId, path);
+			const current = await this.ctx.fs.readText(target);
+			const previous = extractMarker(current);
+			const beforeImages = canonicalizeBody(current);
+			const body = canonicalizeBody(await uploadInlineImages(this.baseUrl, stripMarker(beforeImages)));
+			assertSelfContained(body);
+			const hash = await sha256Hex(body);
+			if (!publishAsNew && previous?.owner === account && previous.hash === hash) return {
+				id: previous.id,
+				content: null,
+				unchanged: true,
+				reassigned: false,
+				shareUrl: previous.sharePath === void 0 ? null : `${this.baseUrl}${previous.sharePath}`
+			};
+			const foreign = previous?.owner !== void 0 && previous.owner !== account;
+			const publishTitle = title?.trim() || basename(path);
+			const publish = async (id) => protectedCall(this.baseUrl, token, "/api/ai/html_publish", {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					...id === void 0 ? {} : { id },
+					title: publishTitle,
+					html: body,
+					from: "edus"
+				})
+			});
+			let record;
+			let reassigned = foreign;
+			try {
+				record = await publish(publishAsNew || foreign ? void 0 : previous?.id);
+			} catch (error) {
+				if (previous?.owner !== void 0 || previous?.id === void 0) throw error;
+				record = await publish();
+				reassigned = true;
+			}
+			protectedCall(this.baseUrl, token, "/api/ai/html_thumb", {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({ id: record.id })
+			}).catch(() => void 0);
+			let sharePath = publishAsNew || reassigned || previous === null ? void 0 : previous?.sharePath;
+			if (sharePath === void 0) sharePath = (await protectedCall(this.baseUrl, token, `/api/ai/html_share?id=${encodeURIComponent(record.id)}`, { method: "GET" })).share_path;
+			const written = withMarker(body, {
+				id: record.id,
+				sharePath,
+				hash,
+				owner: account
+			});
+			await this.ctx.fs.writeText(target, written, void 0, void 0, this.policy(sessionId));
+			return {
+				id: record.id,
+				content: written,
+				unchanged: false,
+				reassigned,
+				shareUrl: `${this.baseUrl}${sharePath}`
+			};
+		}
+		async htmlVersions(token, htmlId) {
+			return (await protectedCall(this.baseUrl, token, `/api/ai/html_versions?html_id=${encodeURIComponent(htmlId)}`, { method: "GET" })).map((value) => ({
+				id: value.id,
+				status: value.status,
+				createdAt: value.created_at
+			}));
+		}
+		async htmlVersionDetail(token, id) {
+			return (await protectedCall(this.baseUrl, token, `/api/ai/html_version_detail?id=${encodeURIComponent(id)}`, { method: "GET" })).html;
+		}
+		async applyVersion(token, sessionId, path, id) {
+			const target = await this.target(sessionId, path);
+			const marker = extractMarker(await this.ctx.fs.readText(target));
+			const body = await this.htmlVersionDetail(token, id);
+			const written = marker === null ? body : withMarker(body, marker);
+			await this.ctx.fs.writeText(target, written, void 0, void 0, this.policy(sessionId));
+			return written;
+		}
+		async htmlVersionDelete(token, id) {
+			await protectedCall(this.baseUrl, token, "/api/ai/html_version_delete", {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({ id })
+			});
+		}
+	};
+})();
+//#endregion
+//#region lib/types/publish-image-tool.js
+function findImage(blocks, id) {
+	for (const block of blocks) {
+		if (block.type === "image" && String(block.attachment.attachmentId) === id) return block.attachment;
+		if (block.type === "tool-result") {
+			const found = findImage(block.content, id);
+			if (found !== void 0) return found;
+		}
+	}
+}
+/** Publish only images already attached to the calling conversation. */
+function applyPublishImageTool(ctx, baseUrl) {
+	ctx.inject(["tools"], (toolCtx) => {
+		toolCtx.tools.register(defineTool({
+			name: "publish_image",
+			description: "上传当前对话中用户明确要求使用的图片，返回用于 HTML 的公开绝对 URL。",
+			parameters: { attachmentId: {
+				type: "string",
+				required: true,
+				description: "对话中显示的 Image sha256:… id。"
+			} },
+			output: {
+				schema: {
+					type: "object",
+					additionalProperties: false,
+					properties: { url: {
+						type: "string",
+						required: true
+					} }
+				},
+				render: (_args, value) => [{
+					type: "text",
+					text: `Uploaded image: ${value.url}`
+				}]
+			},
+			async execute(args, execution) {
+				if (execution.agent === void 0) throw new Error("publish_image requires an agent session");
+				const attachment = execution.agent.session.deriveMessages().map((message) => findImage(message.content, args.attachmentId)).find(Boolean);
+				const store = ctx.get("attachments");
+				if (attachment === void 0 || store === void 0) throw new Error("该图片不在当前会话或附件服务不可用");
+				const image = await store.readImage(attachment);
+				const form = new FormData();
+				form.append("file", new Blob([new Uint8Array(image.data)], { type: attachment.mediaType }), attachment.name ?? "page-image.png");
+				const response = await fetch(`${baseUrl}/api/common/upload`, {
+					method: "POST",
+					body: form
+				});
+				if (!response.ok) throw new Error(`图片上传失败：HTTP ${response.status}`);
+				const data = await response.json();
+				if (typeof data.url !== "string" || data.url === "") throw new Error("图片上传未返回 URL");
+				return { url: data.url };
+			}
+		}));
+	});
+}
+//#endregion
+//#region lib/types/webpage-instruction.js
+const WEBPAGE_INSTRUCTION = `# 网页生成规则
+
+当用户要求创建或修改网页时，必须遵守以下规则。
+
+## 文件结构
+
+- 最终网页必须是一个自包含的 \`.html\` 文件。
+- 不得将 HTML、CSS、JavaScript 拆分为多个本地文件。
+- CSS 必须写在 HTML 的 \`<style>\` 中。
+- JavaScript 必须写在 HTML 的 \`<script>\` 中。
+- 禁止引用 \`./xxx.css\`、\`./xxx.js\` 等本地相对资源。
+
+## 图片和外部资源
+
+- 禁止将图片编码为 \`data:\` URI。
+- 用户明确要求使用当前对话中提供的图片时，必须调用 \`publish_image\` 获取可访问的绝对 URL，再将该 URL 写入 \`<img src="...">\` 等位置。
+- 已有的外部图片绝对 URL 可以直接使用。
+- 字体、图标等外部资源必须使用可公开访问的绝对 URL，例如 CDN。
+- 不得引用工作区中的本地资源文件。
+
+## 原因
+
+发布系统以单个 HTML 字符串存储网页，并通过不存在同级资源目录的分享链接提供页面。因此，本地相对路径可能在工作区预览时正常，但发布后无法访问。
+
+## 完成任务
+
+网页完成后：
+
+1. 将最终文件保存到当前工作区。
+2. 文件扩展名必须为 \`.html\`。
+3. 告知用户可以从文件侧边栏打开该 HTML。
+4. 告知用户可以通过页面面板中的「发布」功能生成分享链接。
+5. 不得自行发布网页，除非用户明确要求发布。`;
+//#endregion
+//#region lib/types/webpage-command.js
+/** Register the user-facing slash command without making webpage rules optional. */
+function applyWebpageCommand(ctx) {
+	ctx.inject(["commands"], (commandCtx) => {
+		commandCtx.commands.register({
+			name: "generate-webpage",
+			description: "制作网页：根据文字需求和配图生成网页",
+			input: {
+				hint: "[网页需求]",
+				attachments: true
+			},
+			recordInput: false,
+			handler: ({ agent, rawInput, attachments }) => {
+				const request = rawInput.trim();
+				if (request === "" && attachments.length === 0) return {
+					kind: "error",
+					text: "请在 /generate-webpage 后描述网页需求，或附上要使用的图片。"
+				};
+				agent.inject(createUserMessage({
+					content: [{
+						type: "text",
+						text: WEBPAGE_INSTRUCTION
+					}],
+					source: {
+						kind: "plugin",
+						plugin: "edus-plugin",
+						form: "instructions"
+					}
+				}));
+				agent.steer(createUserMessage({
+					content: [...attachments, {
+						type: "text",
+						text: request === "" ? "请根据用户提供的图片制作网页。" : request
+					}],
+					source: { kind: "user" }
+				}));
+				return {
+					kind: "success",
+					text: "已提交网页制作需求。"
+				};
+			}
+		});
+	});
+}
+//#endregion
+//#region lib/types/index.js
+const name = "edus-plugin";
+const Config = z.object({ aiEduBaseUrl: z.string().required() });
+const inject = [];
+function apply(ctx, config) {
+	const baseUrl = config.aiEduBaseUrl.replace(/\/+$/, "");
+	ctx.plugin(EdusAuthService, baseUrl);
+	applyPublishImageTool(ctx, baseUrl);
+	applyWebpageCommand(ctx);
+}
+//#endregion
+export { Config, EdusAuthService, apply, inject, name };