@icen.ai/ui 0.8.1 → 0.9.0

package/dist/behaviors/kb-acl.mjs

@@ -0,0 +1,405 @@
+// src/behaviors/ai-core.ts
+var svg = (body) => `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${body}</svg>`;
+var ICON_TERMINAL = svg('<path d="m4 17 6-6-6-6"/><path d="M12 19h8"/>');
+var ICON_FILE = svg(
+  '<path d="M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7z"/><path d="M14 2v4a2 2 0 0 0 2 2h4"/>'
+);
+var ICON_FILE_PEN = svg(
+  '<path d="M12.5 22H6a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8l5 5v3.5"/><path d="M14 2v4a2 2 0 0 0 2 2h4"/><path d="M19 6.5 16.5 4"/><path d="M21.378 16.626a1 1 0 0 0-3.004-3.004l-4.01 4.012a2 2 0 0 0-.506.854l-.837 2.87a.5.5 0 0 0 .62.62l2.87-.837a2 2 0 0 0 .854-.506z"/>'
+);
+var ICON_FILE_PLUS = svg(
+  '<path d="M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7z"/><path d="M14 2v4a2 2 0 0 0 2 2h4"/><path d="M9 15h6"/><path d="M12 12v6"/>'
+);
+var ICON_TRASH = svg(
+  '<path d="M3 6h18"/><path d="M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6"/><path d="M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2"/><path d="M10 11v6"/><path d="M14 11v6"/>'
+);
+var ICON_SEARCH = svg('<circle cx="11" cy="11" r="8"/><path d="m21 21-4.3-4.3"/>');
+var ICON_FOLDER_SEARCH = svg(
+  '<path d="M11 20H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h3.9a2 2 0 0 1 1.69.9l.81 1.2a2 2 0 0 0 1.67.9H20a2 2 0 0 1 2 2v4"/><circle cx="17" cy="17" r="3"/><path d="m21 21-1.9-1.9"/>'
+);
+var ICON_SCAN_SEARCH = svg(
+  '<path d="M3 7V5a2 2 0 0 1 2-2h2"/><path d="M17 3h2a2 2 0 0 1 2 2v2"/><path d="M21 17v2a2 2 0 0 1-2 2h-2"/><path d="M7 21H5a2 2 0 0 1-2-2v-2"/><circle cx="12" cy="12" r="3"/><path d="m16 16-1.9-1.9"/>'
+);
+var ICON_GLOBE = svg(
+  '<circle cx="12" cy="12" r="10"/><path d="M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20"/><path d="M2 12h20"/>'
+);
+var ICON_DOWNLOAD = svg(
+  '<path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><path d="m7 10 5 5 5-5"/><path d="M12 15V3"/>'
+);
+var ICON_BLOCKS = svg(
+  '<rect width="7" height="7" x="4" y="4" rx="1"/><rect width="7" height="7" x="13" y="4" rx="1"/><rect width="7" height="7" x="4" y="13" rx="1"/><rect width="7" height="7" x="13" y="13" rx="1"/>'
+);
+var ICON_ZAP = svg(
+  '<path d="M4 14a1 1 0 0 1-.78-1.63l9.9-10.2a.5.5 0 0 1 .86.46l-1.92 6.02A1 1 0 0 0 13 10h7a1 1 0 0 1 .78 1.63l-9.9 10.2a.5.5 0 0 1-.86-.46l1.92-6.02A1 1 0 0 0 11 14z"/>'
+);
+var ICON_LIST = svg(
+  '<path d="M3 12h.01"/><path d="M3 18h.01"/><path d="M3 6h.01"/><path d="M8 12h13"/><path d="M8 18h13"/><path d="M8 6h13"/>'
+);
+var ICON_LIST_CHECKS = svg(
+  '<path d="m3 17 2 2 4-4"/><path d="m3 7 2 2 4-4"/><path d="M13 6h8"/><path d="M13 12h8"/><path d="M13 18h8"/>'
+);
+var ICON_BOT = svg(
+  '<path d="M12 8V4H8"/><rect width="16" height="12" x="4" y="8" rx="2"/><path d="M2 14h2"/><path d="M20 14h2"/><path d="M15 13v2"/><path d="M9 13v2"/>'
+);
+var ICON_CHART = svg(
+  '<path d="M3 3v18h18"/><path d="M7 15l4-6 3 4 5-8"/>'
+);
+var ICON_FILE_TEXT = svg(
+  '<path d="M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7z"/><path d="M14 2v4a2 2 0 0 0 2 2h4"/><path d="M10 9H8"/><path d="M16 13H8"/><path d="M16 17H8"/>'
+);
+function isObj(v) {
+  return typeof v === "object" && v !== null;
+}
+function pickStr(input, keys) {
+  if (!isObj(input)) return void 0;
+  for (const k of keys) {
+    const v = input[k];
+    if (typeof v === "string" && v) return v;
+  }
+  return void 0;
+}
+function pickNum(src, keys) {
+  if (!isObj(src)) return void 0;
+  for (const k of keys) {
+    const v = src[k];
+    if (typeof v === "number" && Number.isFinite(v)) return v;
+  }
+  return void 0;
+}
+function firstLine(s, max = 80) {
+  const line = s.split("\n", 1)[0]?.trim() ?? "";
+  return line.length > max ? `${line.slice(0, max)}\u2026` : line;
+}
+function filePathOf(input) {
+  return pickStr(input, ["file_path", "path", "file", "filename"]);
+}
+var summarizePath = (input) => filePathOf(input);
+function summarizeRead(input) {
+  const p = filePathOf(input);
+  if (!p) return void 0;
+  const offset = pickNum(input, ["offset", "start_line"]);
+  if (offset == null) return p;
+  const limit = pickNum(input, ["limit", "end_line"]);
+  return limit != null ? `${p}:${offset}-${offset + limit}` : `${p}:${offset}`;
+}
+function summarizeShell(input) {
+  const cmd = typeof input === "string" ? input : pickStr(input, ["command", "cmd", "script"]);
+  return cmd ? firstLine(cmd) : void 0;
+}
+function summarizeGrep(input) {
+  const pattern = pickStr(input, ["pattern", "regex", "query"]);
+  const p = filePathOf(input);
+  if (pattern) return p ? `${firstLine(pattern, 40)} \xB7 ${p}` : firstLine(pattern);
+  return p;
+}
+var sum = (fn) => {
+  return (input) => fn(input) ?? "";
+};
+var BUILTIN_KINDS = {
+  shell: { label: "\u547D\u4EE4", icon: ICON_TERMINAL, tint: "accent", summarize: sum(summarizeShell) },
+  read: { label: "\u8BFB\u53D6", icon: ICON_FILE, tint: "info", summarize: sum(summarizeRead) },
+  edit: { label: "\u7F16\u8F91", icon: ICON_FILE_PEN, tint: "warning", summarize: sum(summarizePath) },
+  write: { label: "\u5199\u5165", icon: ICON_FILE_PLUS, tint: "warning", summarize: sum(summarizePath) },
+  rm: { label: "\u5220\u9664", icon: ICON_TRASH, tint: "error", summarize: sum(summarizePath) },
+  grep: { label: "\u641C\u7D22", icon: ICON_SEARCH, tint: "info", summarize: sum(summarizeGrep) },
+  glob: { label: "\u5339\u914D", icon: ICON_FOLDER_SEARCH, tint: "info", summarize: sum((i) => pickStr(i, ["pattern", "glob", "path"])) },
+  browser: { label: "\u6D4F\u89C8", icon: ICON_GLOBE, tint: "accent", summarize: sum((i) => pickStr(i, ["url", "uri", "target"])) },
+  search: { label: "\u68C0\u7D22", icon: ICON_SCAN_SEARCH, tint: "accent", summarize: sum((i) => pickStr(i, ["query", "q", "pattern"])) },
+  fetch: { label: "\u8BF7\u6C42", icon: ICON_DOWNLOAD, tint: "info", summarize: sum((i) => pickStr(i, ["url", "uri", "endpoint"])) },
+  mcp: { label: "MCP", icon: ICON_BLOCKS, tint: "muted", summarize: sum((i) => pickStr(i, ["tool", "method", "name"])) },
+  skill: { label: "\u6280\u80FD", icon: ICON_ZAP, tint: "accent", summarize: sum((i) => pickStr(i, ["skill", "name", "command"])) },
+  todo: {
+    label: "\u5F85\u529E",
+    icon: ICON_LIST,
+    tint: "info",
+    summarize: sum((input) => {
+      const items = input && typeof input === "object" && Array.isArray(input.items) ? input.items : Array.isArray(input) ? input : [];
+      const done = items.filter((it) => it?.status === "done").length;
+      return items.length > 0 ? `${done}/${items.length} \u5B8C\u6210` : "";
+    })
+  },
+  plan: { label: "\u8BA1\u5212", icon: ICON_LIST_CHECKS, tint: "info" },
+  subagent: { label: "\u5B50\u4EE3\u7406", icon: ICON_BOT, tint: "accent", summarize: sum((i) => pickStr(i, ["task", "description", "prompt", "message", "subagent_type"])) },
+  note: { label: "\u7B14\u8BB0", icon: ICON_FILE_TEXT, tint: "muted" },
+  chart: { label: "\u56FE\u8868", icon: ICON_CHART, tint: "info", summarize: sum((i) => pickStr(i, ["title", "name"])) }
+};
+var kindRegistry = new Map(Object.entries(BUILTIN_KINDS));
+function h(tag, className, text) {
+  const node = document.createElement(tag);
+  if (className) node.className = className;
+  if (text != null) node.textContent = text;
+  return node;
+}
+function svgIcon(svg2) {
+  if (typeof document === "undefined" || typeof DOMParser === "undefined") return null;
+  let parsed;
+  try {
+    parsed = new DOMParser().parseFromString(svg2, "image/svg+xml");
+  } catch {
+    return null;
+  }
+  const root = parsed.documentElement;
+  if (!root || root.tagName.toLowerCase() !== "svg" || parsed.querySelector("parsererror")) {
+    return null;
+  }
+  const sanitize = (el) => {
+    for (const attr of Array.from(el.attributes)) {
+      const name = attr.name.toLowerCase();
+      if (name.startsWith("on")) el.removeAttribute(attr.name);
+      if ((name === "href" || name === "xlink:href") && attr.value.trim().toLowerCase().startsWith("javascript:")) {
+        el.removeAttribute(attr.name);
+      }
+    }
+    for (const child of Array.from(el.children)) {
+      const tag = child.tagName.toLowerCase();
+      if (tag === "script" || tag === "foreignobject") {
+        child.remove();
+        continue;
+      }
+      sanitize(child);
+    }
+  };
+  sanitize(root);
+  return document.importNode(root, true);
+}
+
+// src/behaviors/kb-core.ts
+var ic = (label, d) => ({ label, icon: `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">${d}</svg>` });
+var BUILTIN_SOURCE_TYPES = {
+  doc: ic("\u6587\u6863", '<path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/>'),
+  web: ic("\u7F51\u9875", '<circle cx="12" cy="12" r="10"/><path d="M2 12h20"/><path d="M12 2a15 15 0 0 1 0 20 15 15 0 0 1 0-20z"/>'),
+  wiki: ic("\u77E5\u8BC6\u5E93", '<path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20"/><path d="M6.5 2H20v20H6.5A2.5 2.5 0 0 1 4 19.5v-15A2.5 2.5 0 0 1 6.5 2z"/>'),
+  sheet: ic("\u8868\u683C", '<rect x="3" y="3" width="18" height="18" rx="2"/><path d="M3 9h18M3 15h18M9 3v18M15 3v18"/>'),
+  db: ic("\u6570\u636E\u5E93", '<ellipse cx="12" cy="5" rx="9" ry="3"/><path d="M3 5v14c0 1.7 4 3 9 3s9-1.3 9-3V5"/><path d="M3 12c0 1.7 4 3 9 3s9-1.3 9-3"/>'),
+  ticket: ic("\u5DE5\u5355", '<path d="M3 9V7a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2v2a2 2 0 0 0 0 6v2a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-2a2 2 0 0 0 0-6z"/><path d="M13 5v14"/>'),
+  code: ic("\u4EE3\u7801", '<path d="m16 18 6-6-6-6"/><path d="m8 6-6 6 6 6"/>'),
+  api: ic("\u63A5\u53E3", '<path d="M4 7a2 2 0 0 1 2-2h12a2 2 0 0 1 2 2v3a2 2 0 0 0 0 4v3a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2v-3a2 2 0 0 0 0-4z"/>'),
+  image: ic("\u56FE\u7247", '<rect x="3" y="3" width="18" height="18" rx="2"/><circle cx="9" cy="9" r="2"/><path d="m21 15-4.6-4.6a2 2 0 0 0-2.8 0L3 21"/>'),
+  mail: ic("\u90AE\u4EF6", '<rect x="2" y="4" width="20" height="16" rx="2"/><path d="m22 7-10 7L2 7"/>')
+};
+var sourceTypeRegistry = new Map(Object.entries(BUILTIN_SOURCE_TYPES));
+var KB_ROLES = ["viewer", "commenter", "editor", "owner"];
+function kbRoleLabel(r) {
+  return r === "viewer" ? "\u53EF\u67E5\u770B" : r === "commenter" ? "\u53EF\u8BC4\u8BBA" : r === "editor" ? "\u53EF\u7F16\u8F91" : r === "owner" ? "\u8D1F\u8D23\u4EBA" : "\u65E0\u6743\u9650";
+}
+function normalizeAclEntry(raw) {
+  const r = raw;
+  const s = r.subject ?? {};
+  const kind = s.kind === "user" || s.kind === "group" || s.kind === "org" || s.kind === "anyone" || s.kind === "link" ? s.kind : "user";
+  return {
+    subject: { kind, id: String(s.id ?? ""), label: String(s.label ?? "\u672A\u547D\u540D\u4E3B\u4F53"), note: typeof s.note === "string" ? s.note : void 0 },
+    role: KB_ROLES.includes(r.role) ? r.role : "viewer",
+    inheritedFrom: typeof r.inheritedFrom === "string" && r.inheritedFrom ? r.inheritedFrom : void 0,
+    expiresAt: typeof r.expiresAt === "string" && r.expiresAt ? r.expiresAt : void 0,
+    deny: r.deny === true,
+    system: r.system === true
+  };
+}
+function formatCount(n) {
+  if (n == null || !Number.isFinite(n)) return "\u2014";
+  if (Math.abs(n) >= 1e4) return `${(n / 1e3).toFixed(1)}k`;
+  return n.toLocaleString("en-US");
+}
+function relativeTime(input, now = /* @__PURE__ */ new Date()) {
+  const t = input instanceof Date ? input.getTime() : typeof input === "number" ? input : Date.parse(input);
+  if (!Number.isFinite(t)) return typeof input === "string" ? input : "\u2014";
+  const diff = now.getTime() - t;
+  const MIN = 6e4, HOUR = 36e5, DAY = 864e5;
+  if (diff < MIN) return "\u521A\u521A";
+  if (diff < HOUR) return `${Math.floor(diff / MIN)} \u5206\u949F\u524D`;
+  if (diff < DAY) return `${Math.floor(diff / HOUR)} \u5C0F\u65F6\u524D`;
+  if (diff < 30 * DAY) return `${Math.floor(diff / DAY)} \u5929\u524D`;
+  const d = new Date(t);
+  const ymd = `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}`;
+  return ymd;
+}
+
+// src/behaviors/events.ts
+function emitIcen(source, type, detail) {
+  return source.dispatchEvent(
+    new CustomEvent(type, { detail, bubbles: true, composed: true, cancelable: true })
+  );
+}
+
+// src/behaviors/kb-citation.ts
+var KB_ICON_LOCK = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect width="18" height="11" x="3" y="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>';
+
+// src/behaviors/kb-acl.ts
+function normalizeAclModel(raw) {
+  const r = raw;
+  const ex = r.exceptions;
+  return {
+    resource: String(r.resource ?? "\u672A\u547D\u540D\u8D44\u6E90"),
+    parentChain: Array.isArray(r.parentChain) ? r.parentChain.map(String).filter(Boolean) : [],
+    broken: r.broken === true,
+    exceptions: ex && typeof ex === "object" ? { label: String(ex.label ?? "\u4F8B\u5916"), count: Number.isFinite(ex.count) ? ex.count : 0 } : null,
+    entries: Array.isArray(r.entries) ? r.entries.map((e) => normalizeAclEntry(e)) : [],
+    links: Array.isArray(r.links) ? r.links.map((e) => normalizeAclEntry(e)) : [],
+    exposureCount: typeof r.exposureCount === "number" && Number.isFinite(r.exposureCount) ? r.exposureCount : null
+  };
+}
+var aclPanelMap = /* @__PURE__ */ new WeakMap();
+var aclRowMap = /* @__PURE__ */ new WeakMap();
+var DAY_MS = 864e5;
+var EXPIRING_SOON_MS = 14 * DAY_MS;
+function ymdOf(t) {
+  const d = new Date(t);
+  return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}`;
+}
+function expiryMeta(expiresAt, now) {
+  if (!expiresAt) return { text: "", soon: false };
+  const t = Date.parse(expiresAt);
+  if (!Number.isFinite(t)) return { text: "", soon: false };
+  if (t <= now.getTime()) return { text: `\u5DF2\u8FC7\u671F\uFF08${relativeTime(t, now)}\uFF09`, soon: false };
+  return { text: `${ymdOf(t)} \u5230\u671F`, soon: t - now.getTime() <= EXPIRING_SOON_MS };
+}
+function denyFirst(entries) {
+  return [...entries].sort((a, b) => Number(b.deny === true) - Number(a.deny === true));
+}
+function buildAclRow(entry, now) {
+  const row = h("div", "kb-acl-grant");
+  if (entry.deny) row.classList.add("is-deny");
+  if (entry.system) row.classList.add("is-system");
+  aclRowMap.set(row, entry);
+  const subject = h("span", "kb-acl-subject");
+  subject.dataset.kind = entry.subject.kind;
+  subject.appendChild(h("span", "kb-acl-subject-label", entry.subject.label));
+  const note = entry.system ? "\u7CFB\u7EDF\u81EA\u52A8\uFF0C\u4E0D\u53EF\u624B\u5DE5\u79FB\u9664" : entry.subject.note;
+  if (note) subject.appendChild(h("span", "kb-acl-note kb-meta", note));
+  const role = h("span", "kb-acl-role kb-chip", entry.deny ? "\u62D2\u7EDD" : kbRoleLabel(entry.role));
+  const metaBits = [];
+  if (entry.inheritedFrom) metaBits.push(`\u7EE7\u627F\u81EA ${entry.inheritedFrom}`);
+  const expiry = expiryMeta(entry.expiresAt, now);
+  if (expiry.text) {
+    metaBits.push(expiry.text);
+    if (expiry.soon) row.classList.add("is-expiring");
+  }
+  if (entry.system) metaBits.push("\u7CFB\u7EDF\u7BA1\u7406");
+  const remove = h("button", "kb-acl-remove", "\xD7");
+  remove.type = "button";
+  remove.dataset.aclRemove = "";
+  remove.setAttribute("aria-label", `\u79FB\u9664 ${entry.subject.label}`);
+  remove.title = `\u79FB\u9664 ${entry.subject.label}`;
+  row.append(subject, role);
+  if (metaBits.length) row.appendChild(h("span", "kb-acl-meta", metaBits.join(" \xB7 ")));
+  row.appendChild(remove);
+  return row;
+}
+function renderKbAcl(el, model, opts) {
+  if (typeof document === "undefined") return el;
+  const m = normalizeAclModel(model);
+  const now = /* @__PURE__ */ new Date();
+  el.textContent = "";
+  el.classList.add("kb-acl");
+  aclPanelMap.set(el, opts);
+  const title = h("div", "kb-acl-title");
+  const lock = svgIcon(KB_ICON_LOCK);
+  if (lock) title.appendChild(lock);
+  title.appendChild(h("span", "kb-acl-title-text", m.resource));
+  const inheritBtn = h(
+    "button",
+    m.broken ? "kb-acl-act is-danger" : "kb-acl-act",
+    m.broken ? "\u6062\u590D\u7EE7\u627F" : "\u505C\u6B62\u7EE7\u627F"
+  );
+  inheritBtn.type = "button";
+  if (m.broken) {
+    inheritBtn.dataset.aclRestore = "";
+    inheritBtn.title = "\u6062\u590D\u7EE7\u627F\u5C06\u4E22\u5F03\u672C\u9879\u81EA\u5B9A\u4E49\u7684\u6743\u9650";
+  } else {
+    inheritBtn.dataset.aclBreak = "";
+    inheritBtn.title = "\u505C\u6B62\u4ECE\u7236\u7EA7\u7EE7\u627F\uFF0C\u6539\u4E3A\u72EC\u7ACB\u7BA1\u7406\u672C\u9879\u6743\u9650";
+  }
+  const head = h("header", "kb-acl-head");
+  head.append(title, inheritBtn);
+  el.appendChild(head);
+  const banner = h("div", "kb-acl-inherit");
+  if (m.broken) {
+    banner.classList.add("is-broken");
+    banner.appendChild(h("span", "kb-acl-inherit-text", "\u5DF2\u505C\u6B62\u7EE7\u627F\u2014\u2014\u672C\u9879\u6743\u9650\u72EC\u7ACB\u4E8E\u7236\u7EA7"));
+  } else {
+    if (m.parentChain.length) {
+      banner.appendChild(h("span", "kb-acl-inherit-label", "\u7EE7\u627F\u81EA"));
+      m.parentChain.forEach((name, i) => {
+        if (i > 0) banner.appendChild(h("span", "kb-acl-chain-link", "/"));
+        banner.appendChild(h("span", "kb-acl-chain-node", name));
+      });
+    } else {
+      banner.appendChild(h("span", "kb-acl-inherit-label", "\u6839\u7EA7\u8D44\u6E90\u2014\u2014\u65E0\u7236\u7EA7\u7EE7\u627F"));
+    }
+    if (m.exceptions) {
+      banner.classList.add("is-partial");
+      banner.appendChild(h("span", "kb-acl-chain-link", "\xB7"));
+      banner.appendChild(h("span", "kb-acl-exceptions", `${m.exceptions.label}\uFF1A${m.exceptions.count} \u4E2A\u5B50\u9879\u5DF2\u8131\u79BB`));
+    }
+  }
+  el.appendChild(banner);
+  const grants = h("div", "kb-acl-grants");
+  grants.appendChild(h("div", "kb-acl-sec", "\u76F4\u63A5\u8BBF\u95EE"));
+  const orderedEntries = denyFirst(m.entries);
+  if (!orderedEntries.length) grants.appendChild(h("div", "kb-acl-none kb-meta", "\u6682\u65E0\u76F4\u63A5\u6388\u6743"));
+  for (const entry of orderedEntries) grants.appendChild(buildAclRow(entry, now));
+  el.appendChild(grants);
+  const links = h("div", "kb-acl-links");
+  links.appendChild(h("div", "kb-acl-sec", "\u94FE\u63A5\u8BBF\u95EE"));
+  const orderedLinks = denyFirst(m.links);
+  if (!orderedLinks.length) links.appendChild(h("div", "kb-acl-none kb-meta", "\u65E0\u94FE\u63A5"));
+  for (const entry of orderedLinks) links.appendChild(buildAclRow(entry, now));
+  el.appendChild(links);
+  const foot = h("footer", "kb-acl-foot");
+  const grantBtn = h("button", "kb-acl-grant-btn", "\u6388\u4E88\u8BBF\u95EE");
+  grantBtn.type = "button";
+  grantBtn.dataset.aclGrant = "";
+  foot.appendChild(grantBtn);
+  if (m.exposureCount != null) {
+    foot.appendChild(h("span", "kb-meta", `\u5BF9 ${formatCount(m.exposureCount)} \u4EBA\u53EF\u89C1`));
+  }
+  el.appendChild(foot);
+  return el;
+}
+function initKbAcl(root) {
+  if (typeof document === "undefined") return () => void 0;
+  const scope = root ?? document;
+  const marked = scope;
+  if (marked.__icenKbAclInit) return () => void 0;
+  marked.__icenKbAclInit = true;
+  const target = scope;
+  const onClick = (e) => {
+    const t = e.target instanceof Element ? e.target : null;
+    if (!t) return;
+    const panel = t.closest(".kb-acl");
+    if (!panel) return;
+    const opts = aclPanelMap.get(panel);
+    if (opts === void 0 && !aclPanelMap.has(panel)) return;
+    const removeBtn = t.closest("[data-acl-remove]");
+    if (removeBtn) {
+      const row = removeBtn.closest(".kb-acl-grant");
+      const entry = row ? aclRowMap.get(row) : void 0;
+      if (!entry || row?.classList.contains("is-system")) return;
+      emitIcen(row ?? panel, "icen:kb-acl-remove", { subject: entry.subject });
+      opts?.onRemove?.(entry.subject);
+      return;
+    }
+    if (t.closest("[data-acl-grant]")) {
+      emitIcen(panel, "icen:kb-acl-grant", {});
+      opts?.onGrant?.();
+      return;
+    }
+    const inheritBtn = t.closest("[data-acl-break], [data-acl-restore]");
+    if (inheritBtn) {
+      const action = inheritBtn.hasAttribute("data-acl-restore") ? "restore" : "break";
+      emitIcen(panel, "icen:kb-acl-inherit", { action });
+      if (action === "break") opts?.onBreak?.();
+      else opts?.onRestore?.();
+    }
+  };
+  target.addEventListener("click", onClick);
+  return () => {
+    target.removeEventListener("click", onClick);
+    marked.__icenKbAclInit = false;
+  };
+}
+export {
+  initKbAcl,
+  normalizeAclModel,
+  renderKbAcl
+};

package/dist/behaviors/kb-answer.d.mts

@@ -0,0 +1,38 @@
+import { KbAnswerKind, KbVerifiedVia, KbCitation, KbClarification, KbExplainFact, KbPermissionNotice, KbQueryResult } from './kb-core.js';
+import './ai-core.js';
+
+/** 问数答案的组合模型（各槽位有才渲；共享类型一律 import 自 kb-core） */
+interface KbAnswerModel {
+    /** generated 生成式 / verified 命中可信资产 */
+    kind: KbAnswerKind;
+    verifiedVia?: KbVerifiedVia;
+    /** 答案正文（可含 [n] 引用编号） */
+    body?: string;
+    /** 与正文 [n] 对齐的来源（编号有效性据此判定，无效编号降级纯文本） */
+    citations?: KbCitation[];
+    clarify?: KbClarification;
+    explain?: KbExplainFact;
+    permissionNotice?: KbPermissionNotice;
+    result?: KbQueryResult | Partial<KbQueryResult>;
+    /** ChartSpec（纯 JSON 或其字符串；走 normalizeChartSpec 归一） */
+    chartSpec?: unknown;
+    followUps?: string[];
+}
+/** renderKbAnswer 选项：handle 回调通道（事件通道恒开） */
+interface KbAnswerOptions {
+    /** 结果导出（format 取自 result.exportFormats；未提供则导出钮禁用） */
+    onExport?: (format: string) => void;
+    /** 追问建议点击 */
+    onFollowUp?: (text: string) => void;
+    /** 认证徽章点击（与 icen:kb-verified-open 同语义） */
+    onVerifiedOpen?: (assetId: string) => void;
+}
+/**
+ * 渲染问数答案组合容器（快照式：重复调用整段重建），返回挂载元素 el
+ * （render* 约定；SSR 原样返回）。槽位顺序：徽章区（认证 + 权限提示）→ 正文
+ * （[n] 角标流）→ 澄清反问 → 口径解释折叠 → 结果表（截断声明 + 导出）→ 图表区
+ * （ChartSpec + 类型切换）→ 追问建议。各槽位有才渲；权限提示不可关闭。
+ */
+declare function renderKbAnswer(el: HTMLElement, model: KbAnswerModel | Partial<KbAnswerModel>, opts?: KbAnswerOptions): HTMLElement;
+
+export { type KbAnswerModel, type KbAnswerOptions, renderKbAnswer };