@taloswork/ose-shared 0.1.16 → 0.1.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taloswork/ose-shared",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "Talos cross-OSE shared library — skills + MCP servers auto-loaded into every OSE (P93 2026-07-27).",
   "type": "module",
   "files": [
@@ -10,6 +10,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "_talosPublishHash": "sha256-DEbZ3scJtwwOPm_sj7A7Wh-1-nZGQYK8ZMFeJfxy1i4",
-  "_talosPublishedAt": "2026-10-16T08:11:55.057Z"
+  "_talosPublishHash": "sha256-GSLGl3lk5au4tYXTSTJ6FHkR8NCBTSWGm7wBjC2NOm0",
+  "_talosPublishedAt": "2026-10-22T14:08:12.224Z"
 }

package/skills/document/SKILL.md

@@ -9,6 +9,13 @@ license: Proprietary. LICENSE.txt has complete terms
 Local-first, progressive disclosure: read the extracted text first, render pages only
 when the content is genuinely visual, and write files only through this skill's scripts.
 
+## Where files go
+
+Write the finished file into the working directory itself, named as the user would
+(never `out.pptx`); present_file shows it but does not put it there. Everything else
+(specs, scripts, `plan.json`, `deck.html`, previews) goes in a per-task folder under
+`$TALOS_SCRATCH_DIR` (none → the working directory); `cd` there in the same command.
+
 ## Route (read only what you need)
 
 **Attachments arrive as file pointers** — a `<document … delivery="file">` block gives
@@ -40,22 +47,21 @@ document's content; never guess from the filename. Then:
 
 ## Decks
 
-**CLARIFY FIRST — HARD GATE (applies to EVERY deck).** Before authoring, collect three
-brief fields: **(1) content source** (提供材料 / 联网调研 / 自由创作); **(2) scenario**
-(pitch / 内审 / 销售 / 讲座 / 发布会 / 培训 / 大会 — sets tone, density, required sections);
-**(3) slide count.** Ask only for fields the user did not already supply, in **ONE
-AskUserQuestion call with at most THREE questions**, and wait for the answers. If all
-three are already known, do not ask them again.
+**BRIEF — INFER IT, DO NOT ASK.** Source: material given → 提供材料; current facts or
+figures (market, company, policy, news) → 联网调研; else 自由创作. Scenario from the
+audience or purpose (新人培训 → 培训); slide count as stated, else the scenario default.
+Never ask them on their own: an uninferable scenario rides as a
+second question in the style picker call. The outline gate names all three for correction.
 
-**STYLE PICKER — ONE RESULT PER IMAGE, SCENARIO-RANKED.** After the scenario is
-known, run `node <skill>/bin/deck-styles.cjs --scenario "<the confirmed scenario>"`: it
+**STYLE PICKER — ONE RESULT PER IMAGE, SCENARIO-RANKED.** Run
+`node <skill>/bin/deck-styles.cjs --scenario "<the inferred scenario>"`: it
 reads the current `catalog.json` from disk immediately and ranks the entries (a
 scenario-matching pack first, at least six cards). Never rank from memory, reuse a listing
 from earlier context or scan `packs/`. If it exits non-zero, stop and report that exact
 error instead of presenting stale options.
 
 Unless the user already named an entry id/name, supplied a template file, or explicitly
-said **"无需展示模板，直接替我选定风格"**, send one single-question image-card picker whose
+said **"无需展示模板，直接替我选定风格"**, send one image-card picker question (the style question comes first) whose
 `options` are deck-styles' `options` **as printed** — never rewrite, reorder or add a card.
 
 **"按场景推荐/你推荐" means rank the cards and still ask.** It does NOT waive the
@@ -75,9 +81,8 @@ The selected `entry.id` is the stable
 renders V1 (no `themeVersion`, never `--theme-v2`); every other new deck uses Theme V2 —
 read **theme-system.md** before authoring.
 
-**Keep both calls LEAN:** bare label strings for the content/scenario/count questions,
-one short sentence per stem, no chat preamble beyond one line. If the user answers with
-a correction or question, handle it and re-ask.
+**Keep the call LEAN:** one short sentence per stem, one line of preamble at most. A
+correction or question in the answer: handle it, re-ask.
 
 **Automatic choice, only when explicitly authorized:** rank by a remembered preference,
 an exact user-named style, scenario match, a matching pack before a matching skin, then
@@ -96,7 +101,7 @@ uploaded deck". Never write inside the skill directory.
 if so, read **generated-visuals.md**. In short:
 **plan before you fill** — `bin/deck-plan.cjs plan.json spec.json` picks layouts by
 MEASURED capacity and drafts the spec, `deck-build` fills it, charts are drawn from data
-(never hand-write chart SVG), and `bin/html2pptx.cjs deck.html out.pptx --style <id>`
+(never hand-write chart SVG), and `bin/html2pptx.cjs deck.html <deliverable>.pptx --style <id>`
 (+ `--theme-v2` unless the entry is classic-v1) renders it. `doc-gen` and doc-run
 PptxGenJS make no decks; html2pptx needs a browser — without one, say so and stop, never
 fall back to a lesser deck.

package/skills/document/bin/deck-build.cjs

@@ -10631,7 +10631,8 @@ function normalizeScatter(spec, warnings, errors) {
     let bad = 0;
     const points = [];
     for (const p of rows) {
-      const [x, y, lab] = Array.isArray(p) ? [p[0], p[1], p[2]] : p && typeof p === "object" ? [p.x, p.y, p.label] : [NaN, NaN, ""];
+      const point = p && typeof p === "object" && !Array.isArray(p) ? p : void 0;
+      const [x, y, lab] = Array.isArray(p) ? [p[0], p[1], p[2]] : point ? [point.x, point.y, point.label] : [NaN, NaN, ""];
       const nx = toNum(x);
       const ny = toNum(y);
       if (!Number.isFinite(nx) || !Number.isFinite(ny)) {

package/skills/document/bin/deck-chart.cjs

@@ -646,7 +646,8 @@ function normalizeScatter(spec, warnings, errors) {
     let bad = 0;
     const points = [];
     for (const p of rows) {
-      const [x, y, lab] = Array.isArray(p) ? [p[0], p[1], p[2]] : p && typeof p === "object" ? [p.x, p.y, p.label] : [NaN, NaN, ""];
+      const point = p && typeof p === "object" && !Array.isArray(p) ? p : void 0;
+      const [x, y, lab] = Array.isArray(p) ? [p[0], p[1], p[2]] : point ? [point.x, point.y, point.label] : [NaN, NaN, ""];
       const nx = toNum(x);
       const ny = toNum(y);
       if (!Number.isFinite(nx) || !Number.isFinite(ny)) {

package/skills/document/bin/deck-qa.cjs

@@ -315,7 +315,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join5(s) {
+      BufferList.prototype.join = function join6(s) {
         if (this.length === 0) return "";
         var p = this.head;
         var ret = "" + p.data;
@@ -2347,8 +2347,8 @@ var require_lib2 = __commonJS({
         return this;
       }
       var p = this.constructor;
-      return this.then(resolve2, reject2);
-      function resolve2(value) {
+      return this.then(resolve3, reject2);
+      function resolve3(value) {
         function yes() {
           return value;
         }
@@ -2501,8 +2501,8 @@ var require_lib2 = __commonJS({
       }
       return out;
     }
-    Promise2.resolve = resolve;
-    function resolve(value) {
+    Promise2.resolve = resolve2;
+    function resolve2(value) {
       if (value instanceof this) {
         return value;
       }
@@ -3033,10 +3033,10 @@ var require_utils = __commonJS({
       var promise = external.Promise.resolve(inputData).then(function(data) {
         var isBlob = support.blob && (data instanceof Blob || ["[object File]", "[object Blob]"].indexOf(Object.prototype.toString.call(data)) !== -1);
         if (isBlob && typeof FileReader !== "undefined") {
-          return new external.Promise(function(resolve, reject) {
+          return new external.Promise(function(resolve2, reject) {
             var reader = new FileReader();
             reader.onload = function(e) {
-              resolve(e.target.result);
+              resolve2(e.target.result);
             };
             reader.onerror = function(e) {
               reject(e.target.error);
@@ -3591,7 +3591,7 @@ var require_StreamHelper = __commonJS({
       }
     }
     function accumulate(helper, updateCallback) {
-      return new external.Promise(function(resolve, reject) {
+      return new external.Promise(function(resolve2, reject) {
         var dataArray = [];
         var chunkType = helper._internalType, resultType = helper._outputType, mimeType = helper._mimeType;
         helper.on("data", function(data, meta) {
@@ -3605,7 +3605,7 @@ var require_StreamHelper = __commonJS({
         }).on("end", function() {
           try {
             var result = transformZipOutput(resultType, concat(chunkType, dataArray), mimeType);
-            resolve(result);
+            resolve2(result);
           } catch (e) {
             reject(e);
           }
@@ -9718,7 +9718,7 @@ var require_load = __commonJS({
     var Crc32Probe = require_Crc32Probe();
     var nodejsUtils = require_nodejsUtils();
     function checkEntryCRC32(zipEntry) {
-      return new external.Promise(function(resolve, reject) {
+      return new external.Promise(function(resolve2, reject) {
         var worker = zipEntry.decompressed.getContentWorker().pipe(new Crc32Probe());
         worker.on("error", function(e) {
           reject(e);
@@ -9726,7 +9726,7 @@ var require_load = __commonJS({
           if (worker.streamInfo.crc32 !== zipEntry.decompressed.crc32) {
             reject(new Error("Corrupted zip : CRC32 mismatch"));
           } else {
-            resolve();
+            resolve2();
           }
         }).resume();
       });
@@ -9881,9 +9881,15 @@ function textTableHint(text) {
   const gaps = (text.match(/ {2,}|\t/g) || []).length;
   return gaps >= 6;
 }
+function openPdf(mupdf, bytes) {
+  const doc = mupdf.Document.openDocument(bytes, "application/pdf").asPDF();
+  if (!doc)
+    throw new Error("not a PDF document");
+  return doc;
+}
 async function openDoc(bytes) {
   const mupdf = await loadMupdf();
-  const doc = mupdf.Document.openDocument(bytes, "application/pdf");
+  const doc = openPdf(mupdf, bytes);
   if (doc.needsPassword())
     throw new PdfEncryptedError();
   if (doc.countPages() === 0) {
@@ -9990,17 +9996,15 @@ function isDelimiter(ch) {
 }
 function pageContentStream(page) {
   try {
-    const obj = page.getObject?.();
-    const contents = obj?.get?.("Contents");
-    if (!contents)
+    const contents = page.getObject().get("Contents");
+    if (contents.isNull())
       return "";
-    const streams = contents.isArray?.() && contents.get ? Array.from({ length: contents.length ?? 0 }, (_, i) => contents.get(i)) : [contents];
+    const streams = contents.isArray() ? Array.from({ length: contents.length }, (_, i) => contents.get(i)) : [contents];
     let out = "";
     for (const stream of streams) {
-      const buf = stream?.readStream?.();
-      const bytes = buf?.asUint8Array?.();
-      if (bytes)
-        out += Buffer.from(bytes).toString("latin1");
+      if (!stream.isStream())
+        continue;
+      out += Buffer.from(stream.readStream().asUint8Array()).toString("latin1");
     }
     return out;
   } catch {
@@ -10197,12 +10201,11 @@ async function encryptPdf(bytes, userPassword, ownerPassword) {
 }
 async function pdfNeedsPassword(bytes) {
   const mupdf = await loadMupdf();
-  const doc = mupdf.Document.openDocument(bytes, "application/pdf");
-  return doc.needsPassword();
+  return openPdf(mupdf, bytes).needsPassword();
 }
 async function decryptPdf(bytes, password) {
   const mupdf = await loadMupdf();
-  const doc = mupdf.Document.openDocument(bytes, "application/pdf");
+  const doc = openPdf(mupdf, bytes);
   if (doc.needsPassword()) {
     if (doc.authenticatePassword(password) === 0)
       throw new Error("wrong password");
@@ -10284,11 +10287,11 @@ function __metadata(metadataKey, metadataValue) {
 }
 function __awaiter(thisArg, _arguments, P, generator) {
   function adopt(value) {
-    return value instanceof P ? value : new P(function(resolve) {
-      resolve(value);
+    return value instanceof P ? value : new P(function(resolve2) {
+      resolve2(value);
     });
   }
-  return new (P || (P = Promise))(function(resolve, reject) {
+  return new (P || (P = Promise))(function(resolve2, reject) {
     function fulfilled(value) {
       try {
         step(generator.next(value));
@@ -10304,7 +10307,7 @@ function __awaiter(thisArg, _arguments, P, generator) {
       }
     }
     function step(result) {
-      result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+      result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
     }
     step((generator = generator.apply(thisArg, _arguments || [])).next());
   });
@@ -10482,14 +10485,14 @@ function __asyncValues(o) {
   }, i);
   function verb(n) {
     i[n] = o[n] && function(v) {
-      return new Promise(function(resolve, reject) {
-        v = o[n](v), settle(resolve, reject, v.done, v.value);
+      return new Promise(function(resolve2, reject) {
+        v = o[n](v), settle(resolve2, reject, v.done, v.value);
       });
     };
   }
-  function settle(resolve, reject, d, v) {
+  function settle(resolve2, reject, d, v) {
     Promise.resolve(v).then(function(v2) {
-      resolve({ value: v2, done: d });
+      resolve2({ value: v2, done: d });
     }, reject);
   }
 }
@@ -10908,9 +10911,9 @@ var require_async = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.waitForTick = void 0;
     exports2.waitForTick = function() {
-      return new Promise(function(resolve) {
+      return new Promise(function(resolve2) {
         setTimeout(function() {
-          return resolve();
+          return resolve2();
         }, 0);
       });
     };
@@ -15430,12 +15433,12 @@ var require_CustomFontSubsetEmbedder = __commonJS({
         };
         CustomFontSubsetEmbedder2.prototype.serializeFont = function() {
           var _this = this;
-          return new Promise(function(resolve, reject) {
+          return new Promise(function(resolve2, reject) {
             var parts = [];
             _this.subset.encodeStream().on("data", function(bytes) {
               return parts.push(bytes);
             }).on("end", function() {
-              return resolve(utils_1.mergeUint8Arrays(parts));
+              return resolve2(utils_1.mergeUint8Arrays(parts));
             }).on("error", function(err) {
               return reject(err);
             });
@@ -27984,7 +27987,7 @@ var require_cjs = __commonJS({
 // apps/admin/data/skills.lib/document/bin-src/deck-qa.mjs
 var import_node_child_process = require("node:child_process");
 var import_promises2 = require("node:fs/promises");
-var import_node_path4 = require("node:path");
+var import_node_path5 = require("node:path");
 var import_node_util = require("node:util");
 
 // packages/core/dist/document/doc-design-lint.js
@@ -29310,6 +29313,17 @@ async function checkPptx(bytes, options = {}) {
   return report;
 }
 
+// apps/admin/data/skills.lib/document/bin-src/lib/derived-path.mjs
+var import_node_path4 = require("node:path");
+var SCRATCH_ENV = "TALOS_SCRATCH_DIR";
+function derivedDir(source, env = process.env) {
+  const scratch = env[SCRATCH_ENV];
+  return scratch ? (0, import_node_path4.join)(scratch, "derived") : (0, import_node_path4.dirname)((0, import_node_path4.resolve)(source));
+}
+function derivedPath(source, name, env = process.env) {
+  return (0, import_node_path4.join)(derivedDir(source, env), name);
+}
+
 // apps/admin/data/skills.lib/document/bin-src/deck-qa.mjs
 function die(msg, code = 1) {
   process.stderr.write(`deck-qa: ${msg}
@@ -29334,7 +29348,7 @@ function printLint(result) {
 `);
 }
 async function officeRender(deck, pdf, cacheDir) {
-  const bin = (0, import_node_path4.join)((0, import_node_path4.dirname)(process.argv[1]), "doc-convert.cjs");
+  const bin = (0, import_node_path5.join)((0, import_node_path5.dirname)(process.argv[1]), "doc-convert.cjs");
   try {
     const { stdout } = await (0, import_node_util.promisify)(import_node_child_process.execFile)(process.execPath, [bin, deck, pdf, "--cache-dir", cacheDir, "--require-office"], {
       maxBuffer: 8 * 1024 * 1024
@@ -29352,8 +29366,9 @@ async function finalSignOff(file, bytes, cacheDir, requireOffice) {
     process.stdout.write(JSON.stringify({ ok: false, valid: check.valid, errors: check.errors, strict: check.strict }) + "\n");
     die(check.valid ? "strict XSD validation failed \u2014 the deck is not standard OOXML; fix it before delivering" : "the deck is structurally invalid \u2014 do not deliver it");
   }
-  const stem = (0, import_node_path4.basename)(file).replace(/\.pptx$/i, "");
-  const office = await officeRender(file, (0, import_node_path4.join)((0, import_node_path4.dirname)(file), `${stem}.office.pdf`), cacheDir);
+  const stem = (0, import_node_path5.basename)(file).replace(/\.pptx$/i, "");
+  await (0, import_promises2.mkdir)(derivedDir(file), { recursive: true });
+  const office = await officeRender(file, derivedPath(file, `${stem}.office.pdf`), cacheDir);
   let findings = check.qa.findings;
   let review = [];
   let charts = [];
@@ -29366,7 +29381,7 @@ async function finalSignOff(file, bytes, cacheDir, requireOffice) {
     office.type3Fonts = rendered.type3Fonts;
     if (review.length) {
       for (const r of await renderPdfPages(new Uint8Array(pdfBytes), review, 1)) {
-        const path = (0, import_node_path4.join)((0, import_node_path4.dirname)(office.pdf), `${stem}.office_p${r.page}.png`);
+        const path = (0, import_node_path5.join)((0, import_node_path5.dirname)(office.pdf), `${stem}.office_p${r.page}.png`);
         await (0, import_promises2.writeFile)(path, Buffer.from(r.png));
         previews.push({ slide: r.page, path });
       }
@@ -29398,7 +29413,7 @@ async function main() {
   const rendered = flagValue(args, "--rendered");
   const valued = /* @__PURE__ */ new Set(["--rendered", "--cache-dir"]);
   const file = args.find((a, i) => !a.startsWith("--") && !valued.has(args[i - 1]));
-  const cacheDir = flagValue(args, "--cache-dir") ?? (process.env.TALOS_OFFICE_CACHE_DIR || void 0) ?? (file ? (0, import_node_path4.join)((0, import_node_path4.dirname)(file), ".office-cache") : void 0);
+  const cacheDir = flagValue(args, "--cache-dir") ?? (process.env.TALOS_OFFICE_CACHE_DIR || void 0) ?? (file ? derivedPath(file, ".office-cache") : void 0);
   const requireOffice = args.includes("--require-office");
   const usage = "usage: deck-qa <file.pptx> [--json] [--rendered <office.pdf> | --final [--cache-dir <dir>] [--require-office]]";
   if (!file) die(usage, 64);