@webskill/chatbot 0.10.0 → 0.12.0

package/dist/index.js

@@ -6,11 +6,11 @@ import { t as yaml } from "./yaml-C888tCbJ.js";
 import { t as json } from "./json-BOcU6nei.js";
 import { t as typescript } from "./typescript-DAau_Qyl.js";
 import { t as jsx$1 } from "./jsx-D2Jv0wvt.js";
-import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, atomicWriteText, diffUserProfile, exportUserProfile, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
+import { BEHAVIOR_RECORDS_KEY, DEFAULT_LOOP_LIMITS, DEFAULT_USER_PROFILE_LIMITS, EventBus, FsArtifactStore, FsMemoryStore, FsRunSnapshotStore, FsRunTraceStore, FsSessionStore, FsToolStepStore, FullDisclosureRouter, SUPPORTED_DOCUMENT_MIME, SerializingMemoryStore, SkillDiscovery, USER_PROFILE_KEY, WebSkillError, WebSkillRuntime, applyUserProfileImport, assertRemoteUrlAllowed, assertSafePathSegment, atomicWriteText, diffUserProfile, exportUserProfile, formatAttachmentText, isUnsupportedRunSnapshot, messageOf, readBehaviorRecords, readUserProfile, refineUserProfile, resolveInsideRoot, sanitizeUntrustedLine, summarizeRunUsage, summarizeToolCalls, textParts } from "@webskill/sdk";
 import { BrowserWorkerScriptExecutor, checkDictationAvailability, compressImageToBudget, createEncryptedMemoryStore, createLlmClient, deleteMemoryEncryptionKey, openMemoryEncryptionKey, probeChromeBuiltinAvailability, startDictation } from "@webskill/sdk/browser";
 import { JsonRenderSpecSurface, NativeSpecSurface, OpenUiSpecSurface, ReactBridgeState, SpecInteractionChannel, SurfaceFormTextsProvider, UiSurfaceSnapshotList, probeJsonRenderAvailability } from "@webskill/sdk/ui-react";
 import { A2UI_SPEC_FORM_PATH, collectFormScopes, createUiCatalogToolSource, fromA2uiSpecAction, fromA2uiSurfaceAction, interactionToFormModel, interactionToUiSpec, loadOpenUiPeers, loadWebSkillLitCatalog, renderMiniChart, shapeInteractionValue, toA2uiSpecMessages, toA2uiSurfaceAction, toVercelToolInvocation, uiCatalog } from "@webskill/sdk/ui";
-import { TodoStore, createDelegationToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
+import { DownloadedFilePolicy, PAGE_ACTION_KINDS, TodoStore, createDelegationToolSource, createDownloadedFileToolSource, createPageActionToolSource, createPagePerceptionToolSource, createSkillGenerationToolSource, createTodoToolSource, withDelegationOrigin } from "@webskill/sdk/agent";
 import * as React$1 from "react";
 import React, { Children, Component, Fragment, createContext, createElement, forwardRef, isValidElement, memo, useCallback, useContext, useDeferredValue, useEffect, useEffectEvent, useId, useInsertionEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -30335,6 +30335,55 @@ const fadeInUp = {
 	}
 };
 
+//#endregion
+//#region ../core/src/attachment/kind.ts
+/** 可作为图片分片外发的 MIME 类型 @experimental */
+const IMAGE_MIME_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif"
+];
+/**
+* 可按文本读取的扩展名。accept 白名单与判定白名单共用这一份——
+* 0.5.x 两处不一致，`log`/`yaml`/`yml` 能通过判定却在文件选择器里选不到。
+*/
+const TEXT_EXTENSIONS = [
+	"txt",
+	"md",
+	"csv",
+	"json",
+	"log",
+	"yaml",
+	"yml"
+];
+/** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） @experimental */
+const FILE_MIME_TYPES = ["application/pdf"];
+/**
+* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5）。
+* 不走直通的 `file`：docx / xlsx 发给 provider 会被当成二进制垃圾。
+*/
+const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
+const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
+const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
+const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([DOCX_MIME, XLSX_MIME]);
+const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set(["docx", "xlsx"]);
+function extensionOf(fileName) {
+	return fileName.split(".").pop()?.toLowerCase() ?? "";
+}
+/** 分类集中一处，不散落在各 UI 分支里 @experimental */
+function classifyAttachment(contentType, fileName) {
+	const type = contentType.toLowerCase();
+	if (IMAGE_MIME_SET.has(type)) return "image";
+	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
+	if (FILE_MIME_SET.has(type)) return "file";
+	if (type.startsWith("text/") || type === "application/json") return "text";
+	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
+	if (type === "" && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
+}
+
 //#endregion
 //#region ../runtime/src/tools/types.ts
 /**
@@ -30367,6 +30416,11 @@ const DEFAULT_MAX_DOCUMENT_TEXT_BYTES = 512e3;
 * 结构化数据不是文档，量级差一个数量级；超出**只拒不截**——截断的 JSON 解不出来。
 */
 const DEFAULT_MAX_DATA_SOURCE_BYTES = 1024e3;
+/**
+* 单个上传文件交给脚本的字节上限（0.15.0 分册 17，FR-17.5）：20 MB。
+* 取得比模型图片预算宽：字节不进模型上下文，只进脚本，护的是内存不是 token。
+*/
+const DEFAULT_MAX_UPLOAD_FILE_BYTES = 20 * 1024 * 1024;
 
 //#endregion
 //#region ../runtime/src/engine/limits.ts
@@ -30534,11 +30588,15 @@ function defaultRuntimeConfig() {
 				fetchData: false
 			},
 			maxDataSourceBytes: DEFAULT_MAX_DATA_SOURCE_BYTES,
+			dataSources: [],
 			remoteUrl: {
 				allowHttp: false,
 				allowPrivateHosts: false
 			},
-			typescript: { enabled: false }
+			typescript: { enabled: false },
+			downloadedFiles: false,
+			uploadFiles: false,
+			maxUploadFileBytes: DEFAULT_MAX_UPLOAD_FILE_BYTES
 		},
 		llm: { entries: [] },
 		agentCapabilities: {
@@ -30644,7 +30702,8 @@ function mergeRuntimeConfigDefaults(partial) {
 			typescript: {
 				...d.sandbox.typescript,
 				...p["sandbox"]?.["typescript"] ?? {}
-			}
+			},
+			dataSources: readDataSourceEntries(p["sandbox"]?.["dataSources"])
 		},
 		llm: mergeLlmSelection(p["llm"]),
 		agentCapabilities: {
@@ -30711,6 +30770,29 @@ function readQuickPrompts(raw) {
 	}
 	return out;
 }
+/**
+* 逐条校验用户配的数据源：`id` / `url` 缺失或非字符串即整条丢弃。
+* 不整段回退，一条脏数据不该连坐其余几条。
+*/
+function readDataSourceEntries(raw) {
+	if (!Array.isArray(raw)) return [];
+	const out = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const item of raw) {
+		if (typeof item !== "object" || item === null) continue;
+		const entry = item;
+		const id = typeof entry["id"] === "string" ? entry["id"].trim() : "";
+		const url = typeof entry["url"] === "string" ? entry["url"].trim() : "";
+		if (id === "" || url === "" || seen.has(id)) continue;
+		seen.add(id);
+		out.push({
+			id,
+			url,
+			description: typeof entry["description"] === "string" ? entry["description"] : ""
+		});
+	}
+	return out;
+}
 /** 上限字段非正数时回退默认值：0 或负数会把整条通道变成永远拒收 */
 function mergeMultimodal(raw, d) {
 	const p = typeof raw === "object" && raw !== null ? raw : {};
@@ -31513,7 +31595,6 @@ const chatbotDictionary = defineDictionary({
 		"welcome.capability.transparency.title": "Run transparency",
 		"welcome.capability.transparency.description": "Routing, skill activation, tool calls and results are visible live, step by step.",
 		"welcome.quickPrompts": "Try an example",
-		"welcome.dynamicPrompts": "Suggested for this page",
 		"message.copy": "Copy",
 		"message.copied": "Copied",
 		"message.retry": "Retry",
@@ -31599,11 +31680,20 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.click": "Allow the assistant to click “{target}”?",
 		"interaction.pageAction.fill": "Allow the assistant to fill “{target}” with:",
 		"interaction.pageAction.submit": "Allow the assistant to submit “{target}”?",
+		"interaction.pageAction.select": "Allow the assistant to select an option in “{target}”?",
+		"interaction.pageAction.set": "Allow the assistant to toggle “{target}”?",
+		"interaction.pageAction.attach": "Allow the assistant to attach a file to “{target}”?",
 		"interaction.pageAction.role.click": "this control",
 		"interaction.pageAction.role.fill": "this field",
 		"interaction.pageAction.role.submit": "this form",
+		"interaction.pageAction.role.select": "this list",
+		"interaction.pageAction.role.set": "this switch",
+		"interaction.pageAction.role.attach": "this upload field",
+		"interaction.pageAction.remember": "Don’t ask again for this kind of action",
 		"interaction.pageAction.frame": "The target is in the embedded frame \"{frame}\".",
 		"interaction.pageAction.elevated": "This dialog is outside the usual allowlist; it was opened by this task.",
+		"interaction.downloadedFile.file": "{name} · {size}",
+		"interaction.downloadedFile.remember": "Don’t ask again for this kind of access",
 		"interaction.traceEvidence.title": "Steps this skill claims",
 		"interaction.traceEvidence.columnDraft": "In the skill",
 		"interaction.traceEvidence.columnTrace": "Actually run in this session",
@@ -31625,6 +31715,7 @@ const chatbotDictionary = defineDictionary({
 		"surface.readOnlySnapshot": "This is a saved record — its actions are no longer available.",
 		"surface.suggested": "Suggested:",
 		"surface.useSuggestion": "Use",
+		"surface.openDocument": "Open document",
 		"surface.control.previousPage": "Previous page",
 		"surface.control.previous": "Previous",
 		"surface.control.nextPage": "Next page",
@@ -31866,7 +31957,6 @@ const chatbotDictionary = defineDictionary({
 		"welcome.capability.transparency.title": "运行透明",
 		"welcome.capability.transparency.description": "路由、技能激活、工具调用与结果，逐步实时可见。",
 		"welcome.quickPrompts": "试试这些示例",
-		"welcome.dynamicPrompts": "当前页面可用的快捷指令",
 		"message.copy": "复制",
 		"message.copied": "已复制",
 		"message.edit": "编辑消息",
@@ -31952,11 +32042,20 @@ const chatbotDictionary = defineDictionary({
 		"interaction.pageAction.click": "允许助手点击「{target}」吗？",
 		"interaction.pageAction.fill": "允许助手在「{target}」中填入：",
 		"interaction.pageAction.submit": "允许助手提交「{target}」吗？",
+		"interaction.pageAction.select": "允许助手在「{target}」中选择选项吗？",
+		"interaction.pageAction.set": "允许助手切换「{target}」吗？",
+		"interaction.pageAction.attach": "允许助手向「{target}」附加文件吗？",
 		"interaction.pageAction.role.click": "这个控件",
 		"interaction.pageAction.role.fill": "这个输入框",
 		"interaction.pageAction.role.submit": "这个表单",
+		"interaction.pageAction.role.select": "这个选择框",
+		"interaction.pageAction.role.set": "这个开关",
+		"interaction.pageAction.role.attach": "这个上传控件",
+		"interaction.pageAction.remember": "以后不再询问此类操作",
 		"interaction.pageAction.frame": "目标位于嵌入帧「{frame}」中。",
 		"interaction.pageAction.elevated": "该对话框不在常规允许清单内，是本次任务打开的。",
+		"interaction.downloadedFile.file": "{name} · {size}",
+		"interaction.downloadedFile.remember": "以后不再询问此类访问",
 		"interaction.traceEvidence.title": "该技能声称的步骤",
 		"interaction.traceEvidence.columnDraft": "技能里写的",
 		"interaction.traceEvidence.columnTrace": "本会话实际执行的",
@@ -31978,6 +32077,7 @@ const chatbotDictionary = defineDictionary({
 		"surface.readOnlySnapshot": "这是已保存的记录，其中的操作已不可用。",
 		"surface.suggested": "建议：",
 		"surface.useSuggestion": "使用",
+		"surface.openDocument": "打开文档",
 		"surface.control.previousPage": "上一页",
 		"surface.control.previous": "上一页",
 		"surface.control.nextPage": "下一页",
@@ -32329,8 +32429,6 @@ function redactInteractionValues(value, request) {
 	}
 	return out;
 }
-/** 注入模型的单个附件正文上限（超出截断并标注） */
-const ATTACHMENT_TEXT_LIMIT = 32 * 1024;
 /**
 * 行为记录与画像归属的 user 作用域标识。chatbot 是单人本地应用，没有账号体系，
 * 固定值即可；它只决定 memory 里的作用域名，不参与任何鉴权。
@@ -32508,11 +32606,18 @@ var ChatEngine = class {
 	#ready;
 	/** 已装配的 runtime（cancel 等同步委托用；未装配时为 undefined） */
 	#runtime;
+	/**
+	* 每轮 `send()` 开头刷新的运行时配置快照（0.15.0 分册 15 · FR-15.6）。
+	* 只给那些必须同步回答、又不能等到重建运行时的开关用。
+	*/
+	#liveConfig;
 	#handles = /* @__PURE__ */ new Map();
 	#currentSessionId;
 	#listeners = /* @__PURE__ */ new Set();
 	/** runId → 已激活技能累积（skill-activated 事件用；终态清理） */
 	#runSkills = /* @__PURE__ */ new Map();
+	/** 文档投放端口只构造一次：渲染侧把它放进 memo 依赖，每次取新对象会触发无谓重渲染 */
+	#documentSurfacePort;
 	/** 当前渲染框架档（复合 uiBridge 分发；setRenderer 热切换） */
 	#renderer;
 	/** 非 native 三档共用的交互通道（Chatbot 的 SpecInteraction attach 后生效） */
@@ -32721,6 +32826,52 @@ var ChatEngine = class {
 	get interactionChannel() {
 		return this.#interactionChannel;
 	}
+	/**
+	* 文档投放端口（0.15.0 分册 13）。宿主没注入 `adapter.documentSurface` 时为 `undefined`，
+	* 渲染侧据此整个不渲染按钮。
+	*
+	* 端口实现落在引擎里而不是宿主里，是因为「产物在哪、技能叫什么」这两件事只有引擎知道：
+	* 交给宿主就等于把产物目录布局变成宿主必须复刻的知识，两个宿主各抄一份必然分叉，
+	* 而那正是本册要消灭的东西。
+	* @experimental
+	*/
+	get documentSurface() {
+		const host = this.#adapter.documentSurface;
+		if (!host) return void 0;
+		return this.#documentSurfacePort ??= { open: async ({ runId, artifact, style, dataSource }) => {
+			const dir = `${this.#chatRoot}/artifacts/${runId}`;
+			const html = await this.#adapter.storage.readText(this.#artifactPath(dir, artifact));
+			const css = style === void 0 ? void 0 : await this.#adapter.storage.readText(this.#artifactPath(dir, style));
+			await host.open({
+				skillName: await this.#skillNamesOfRun(runId),
+				dataSource: sanitizeUntrustedLine(dataSource),
+				document: {
+					html,
+					...css === void 0 ? {} : { css }
+				}
+			});
+		} };
+	}
+	/**
+	* 产物名 → 绝对路径。`assertSafePathSegment` + `resolveInsideRoot` 两道都不是可选写法：
+	* 少了它们，「组件只收产物名」就退化成「组件收完整路径」，凭空开出一个读取面。
+	*/
+	#artifactPath(dir, artifact) {
+		assertSafePathSegment(artifact, "artifact");
+		return resolveInsideRoot(dir, artifact);
+	}
+	/**
+	* 这次 run 激活过的技能名。它是授权告知的主语，因此**不能**由发出 surface 的技能自报——
+	* 那等于让被授权方自己写授权提示。
+	*
+	* 进行中的 run 读内存累积；已结束的（历史消息里的按钮就是这种）读 trace，
+	* 只读内存会在 run 收尾清表后得到空串。
+	*/
+	async #skillNamesOfRun(runId) {
+		const live = this.#runSkills.get(runId);
+		if (live && live.size > 0) return [...live].sort().join(", ");
+		return [...(await this.#traceStore.get(runId).catch(() => void 0))?.activeSkills ?? []].sort().join(", ");
+	}
 	/** 探测 @a2ui/lit 是否安装（Appearance/设置区 A2UI 档置灰判定） */
 	probeA2uiAvailability() {
 		return probeA2uiAvailability();
@@ -32780,6 +32931,17 @@ var ChatEngine = class {
 		this.#maxHistoryMessages = void 0;
 	}
 	/**
+	* 技能仓变更后调用（安装/卸载/发布）：作废 runtime 缓存的技能目录，下次 send 重新扫描。
+	*
+	* 比 `reloadConfig()` 轻，因为它不清 `#handles`——那会连带丢掉每个会话的模型上下文。
+	* 装技能的界面与对话不在同一个页面时（如扩展的 options 页 vs side panel），
+	* 宿主必须自己把变更通知过来，否则新技能要等页面重载才出现在 catalog 里。
+	* @experimental
+	*/
+	invalidateSkills() {
+		this.#ready?.then((runtime) => runtime.invalidate(), () => void 0);
+	}
+	/**
 	* 会话列表页。归档会话也返回：UI 自己分区展示。
 	* `limit` 不给默认值——缺省属于 `SessionStore` 实现，在这里兜底就等于只下推了一半。
 	*/
@@ -32907,6 +33069,7 @@ var ChatEngine = class {
 	async send(text, attachments = []) {
 		if (this.#disposed) throw new WebSkillError("RUN_FAILED", "This ChatEngine was disposed; create a new one to keep chatting.");
 		if (text.trim() === "" && attachments.length === 0) return;
+		this.#liveConfig = await this.#runtimeConfigStore()?.load();
 		const admitted = await this.#admitAttachments(attachments);
 		const runtime = await this.#ensureReady();
 		const sessionId = this.#currentSessionId ?? (await this.createSession({ title: truncateTitle(text) })).id;
@@ -32934,12 +33097,36 @@ var ChatEngine = class {
 		});
 		const handle = this.#sessionHandle(runtime, sessionId);
 		try {
-			const result = await handle.run(prompt);
+			const uploadFiles = this.#uploadFilesFor(admitted.accepted);
+			const result = await handle.run(prompt, uploadFiles ? { uploadFiles } : {});
 			await this.#finishRun(sessionId, result);
 		} catch (e) {
 			this.#emitError(e);
 		}
 	}
+	/**
+	* 本轮触发消息里的附件，包成只对这一次 run 生效的读取端口（0.15.0 分册 17）。
+	* 开关关着就返回 undefined → 脚本上下文里那两个成员整个不存在，
+	* 与「本轮没传附件」（空数组）分得开。
+	*/
+	#uploadFilesFor(attachments) {
+		if (!(this.#liveConfig?.sandbox.uploadFiles ?? false)) return void 0;
+		const files = attachments.map((a) => ({ ...a }));
+		const infos = files.map((a) => ({
+			id: a.id,
+			name: a.name,
+			contentType: a.contentType,
+			size: a.size
+		}));
+		return {
+			list: async () => infos,
+			read: async (id) => {
+				const attachment = files.find((a) => a.id === id);
+				if (!attachment) throw new WebSkillError("UPLOAD_FILE_NOT_FOUND", `Upload file "${id}" is not part of the message that started this run`);
+				return this.#adapter.storage.readBinary(`${this.attachmentsRoot}/${attachment.path}`);
+			}
+		};
+	}
 	/** 附件落盘根目录（composer 附件适配器写入，send 时读回） */
 	get attachmentsRoot() {
 		return `${this.#chatRoot}/attachments`;
@@ -32978,11 +33165,14 @@ var ChatEngine = class {
 			if (!await this.#adapter.storage.exists(path)) continue;
 			if (attachment.kind === "text" || attachment.kind === "document-text") {
 				const body = await this.#adapter.storage.readText(path);
-				const clipped = body.length > ATTACHMENT_TEXT_LIMIT ? `${body.slice(0, ATTACHMENT_TEXT_LIMIT)}\n[truncated]` : body;
-				const label = attachment.kind === "document-text" ? `${attachment.name} (${attachment.contentType}, body text only)` : `${attachment.name} (${attachment.contentType})`;
 				parts.push({
 					type: "text",
-					text: `--- Attachment: ${label} ---\n${clipped}`
+					text: formatAttachmentText({
+						name: attachment.name,
+						contentType: attachment.contentType,
+						body,
+						kind: attachment.kind
+					})
 				});
 				continue;
 			}
@@ -33082,6 +33272,13 @@ var ChatEngine = class {
 		return this.#ready;
 	}
 	/**
+	* `sandbox.downloadedFiles` 的实时取值（分册 15 · FR-15.6）。
+	* 优先读每轮 `send()` 刷新的快照；还没发过消息时回落到装配期的那一份。
+	*/
+	#sandboxDownloadedFiles(assembled) {
+		return (this.#liveConfig ?? assembled)?.sandbox.downloadedFiles === true;
+	}
+	/**
 	* LLM 选择链：options.llm（demo/测试）→ `RuntimeConfig.llm` 里选中/默认的条目
 	* → 内置演示。streaming=false 时包装掉 stream（AgentLoop 走 complete）。
 	*/
@@ -33332,6 +33529,7 @@ var ChatEngine = class {
 			})] : [],
 			...pagePerception ? [createPagePerceptionToolSource({
 				policy: pagePerception,
+				...this.#adapter.pagePerceptionPaging === void 0 ? {} : { paging: () => this.#adapter.pagePerceptionPaging },
 				imageCapture: async () => {
 					const live = await this.#runtimeConfigStore()?.load();
 					return {
@@ -33342,7 +33540,19 @@ var ChatEngine = class {
 					};
 				}
 			})] : [],
-			...this.#adapter.pageActions ? [createPageActionToolSource({ policy: this.#adapter.pageActions })] : []
+			...this.#adapter.pageActions ? [createPageActionToolSource({ policy: this.#adapter.pageActions })] : [],
+			...this.#adapter.downloads ? [createDownloadedFileToolSource({ policy: new DownloadedFilePolicy({
+				reader: this.#adapter.downloads.reader,
+				ui: this.#uiBridge,
+				capabilityEnabled: () => this.#sandboxDownloadedFiles(rc),
+				imageCapable: async () => {
+					return entryCapabilities(pickLlmEntry(await this.#runtimeConfigStore()?.load(), this.#selectedModelId)).image;
+				},
+				...this.#adapter.downloads.consent ? { consent: this.#adapter.downloads.consent } : {},
+				...this.#adapter.docxExtractor ? { docxExtractor: this.#adapter.docxExtractor } : {},
+				...this.#adapter.xlsxExtractor ? { xlsxExtractor: this.#adapter.xlsxExtractor } : {},
+				...this.#adapter.documentAudit ? { audit: this.#adapter.documentAudit } : {}
+			}) })] : []
 		];
 		const deps = {
 			fs,
@@ -33377,11 +33587,15 @@ var ChatEngine = class {
 			...Object.keys(loopConfig).length > 0 ? { config: loopConfig } : {},
 			...model ? { model } : {},
 			...this.#options.fetchData ? { fetchData: this.#options.fetchData } : {},
+			...this.#options.dataSources ? { dataSources: this.#options.dataSources } : {},
 			...this.#adapter.linkedDocuments ? { linkedDocuments: this.#adapter.linkedDocuments } : {},
 			...this.#adapter.docxExtractor ? { docxExtractor: this.#adapter.docxExtractor } : {},
 			...this.#adapter.xlsxExtractor ? { xlsxExtractor: this.#adapter.xlsxExtractor } : {},
 			...this.#adapter.pdfExtractor ? { pdfExtractor: this.#adapter.pdfExtractor } : {},
 			...this.#adapter.documentAudit ? { documentAudit: this.#adapter.documentAudit } : {},
+			...this.#adapter.documentAudit ? { uploadFileAudit: this.#adapter.documentAudit } : {},
+			maxUploadFileBytes: rc?.sandbox.maxUploadFileBytes ?? defaultRuntimeConfig().sandbox.maxUploadFileBytes,
+			...this.#adapter.documentSurface ? { documentSurface: true } : {},
 			...toolStepStore ? { toolSteps: toolStepStore } : {}
 		};
 		const runtime = new WebSkillRuntime({
@@ -33684,7 +33898,8 @@ function ChatbotSurfaceTexts({ children }) {
 			arrayFirstItemOnly: t("surface.arrayFirstItemOnly"),
 			readOnlySnapshot: t("surface.readOnlySnapshot"),
 			suggested: t("surface.suggested"),
-			useSuggestion: t("surface.useSuggestion")
+			useSuggestion: t("surface.useSuggestion"),
+			openDocument: t("surface.openDocument")
 		}), [t]),
 		hostControlTexts: useMemo(() => ({
 			previousPage: t("surface.control.previousPage"),
@@ -34656,33 +34871,10 @@ function AssistantUiEmptyState({ title, prompts, dynamicPrompts, limit, disabled
 	});
 }
 /**
-* 对话进行中的动态快捷指令条（FR-17.6）。
-* 只接**动态**那一批：静态清单不随上下文变，常驻只会变成噪声。
-* 空列表时整条不渲染，DOM 里不留空容器。
+* 对话进行中的动态快捷指令条（0.13.0 FR-17.6）已废止：
+* 每轮对话结束都在输入区上方冒出一条横向滚动的胶囊带，构成持续干扰。
+* `ChatbotConfig.dynamicQuickPrompts` 保留，但只在空态（`AssistantUiEmptyState`）生效。
 */
-function AssistantUiDynamicPrompts({ prompts, limit, onPrompt }) {
-	const t = useT();
-	const items = mergeQuickPrompts(prompts, [], useLocale(), limit);
-	if (items.length === 0) return null;
-	return /* @__PURE__ */ jsx("div", {
-		"data-testid": "chatbot-dynamic-prompts",
-		"aria-label": t("welcome.dynamicPrompts"),
-		className: "flex gap-2 overflow-x-auto px-4 pb-2",
-		children: items.map((item, index) => {
-			const Icon = resolveQuickPromptIcon(item.icon);
-			return /* @__PURE__ */ jsxs("button", {
-				type: "button",
-				"data-testid": "chatbot-dynamic-prompt",
-				onClick: () => onPrompt(item.text),
-				className: "inline-flex shrink-0 items-center gap-1.5 rounded-full border border-border bg-card px-3 py-1.5 text-xs text-muted transition-colors hover:bg-subtle hover:text-ink",
-				children: [Icon ? /* @__PURE__ */ jsx(Icon, {
-					className: "size-3.5 shrink-0",
-					"aria-hidden": true
-				}) : null, item.text]
-			}, `${index}:${item.text}`);
-		})
-	});
-}
 
 //#endregion
 //#region src/react/format.ts
@@ -45571,7 +45763,7 @@ function resolveByNonce(bridge, snapshots, event) {
 * 一组 surface 快照 → 当前渲染档的宿主（分册 17）。
 * 四档与原 `HistoricalSurfaces` 一一对应；差别只在 `bridge` 存在时补上动作/草稿回接。
 */
-function SurfaceByRenderer({ snapshots, renderer, registry, bridge }) {
+function SurfaceByRenderer({ snapshots, renderer, registry, bridge, documentSurface }) {
 	const drafts = bridge && snapshots[0]?.runId ? bridge.surfaceDrafts(snapshots[0].runId) : void 0;
 	const onDraftChange = bridge ? (event) => bridge.setSurfaceDraft(event.runId, event.surfaceId, event.value) : void 0;
 	if (renderer === "a2ui") {
@@ -45610,6 +45802,7 @@ function SurfaceByRenderer({ snapshots, renderer, registry, bridge }) {
 	return /* @__PURE__ */ jsx(UiSurfaceSnapshotList, {
 		snapshots,
 		...registry ? { registry } : {},
+		...documentSurface ? { documentSurface } : {},
 		...bridge ? { onAction: (event) => resolveByNonce(bridge, snapshots, event) } : {},
 		...drafts ? { drafts } : {},
 		...onDraftChange ? { onDraftChange } : {}
@@ -45644,6 +45837,7 @@ function InlineSurface({ surfaceId }) {
 			snapshots: [snapshot],
 			...ctx.renderer ? { renderer: ctx.renderer } : {},
 			...ctx.registry ? { registry: ctx.registry } : {},
+			...ctx.documentSurface ? { documentSurface: ctx.documentSurface } : {},
 			...!persisted && bridge ? { bridge } : {}
 		})
 	});
@@ -46477,7 +46671,7 @@ function SkillBadges({ skills }) {
 //#endregion
 //#region src/react/WebSkillMessageExtensions.tsx
 /** WebSkill domain content rendered beneath a Base message without choosing its chat layout. */
-function WebSkillMessageExtensions({ message, onDownload, surfaceRegistry, renderer }) {
+function WebSkillMessageExtensions({ message, onDownload, surfaceRegistry, documentSurface, renderer }) {
 	const t = useT();
 	if (message.role === "user") return null;
 	const contentParts = message.contentParts ?? [];
@@ -46498,7 +46692,8 @@ function WebSkillMessageExtensions({ message, onDownload, surfaceRegistry, rende
 				children: /* @__PURE__ */ jsx(SurfaceByRenderer, {
 					snapshots: renderable,
 					...renderer ? { renderer } : {},
-					...surfaceRegistry ? { registry: surfaceRegistry } : {}
+					...surfaceRegistry ? { registry: surfaceRegistry } : {},
+					...documentSurface ? { documentSurface } : {}
 				})
 			}) : null,
 			renderable.length < surfaces.filter((snapshot) => !inlineIds.has(snapshot.id)).length ? /* @__PURE__ */ jsx("p", {
@@ -46625,6 +46820,7 @@ function AssistantUiMessage(props) {
 		...props.bridge ? { bridge: props.bridge } : {},
 		...props.renderer ? { renderer: props.renderer } : {},
 		...props.surfaceRegistry ? { registry: props.surfaceRegistry } : {},
+		...props.documentSurface ? { documentSurface: props.documentSurface } : {},
 		...props.onDownload ? { onDownload: props.onDownload } : {}
 	}), [
 		message?.surfaces,
@@ -46633,6 +46829,7 @@ function AssistantUiMessage(props) {
 		props.bridge,
 		props.renderer,
 		props.surfaceRegistry,
+		props.documentSurface,
 		props.onDownload
 	]);
 	if (role === "user") return /* @__PURE__ */ jsxs("div", {
@@ -46688,6 +46885,7 @@ function AssistantUiMessage(props) {
 				message,
 				...props.onDownload ? { onDownload: props.onDownload } : {},
 				...props.surfaceRegistry ? { surfaceRegistry: props.surfaceRegistry } : {},
+				...props.documentSurface ? { documentSurface: props.documentSurface } : {},
 				...props.renderer ? { renderer: props.renderer } : {}
 			}) : null,
 			/* @__PURE__ */ jsx(AssistantUiMessageActions, { ...props })
@@ -46697,52 +46895,6 @@ function AssistantUiMessage(props) {
 
 //#endregion
 //#region src/core/attachmentKind.ts
-/** 可作为图片分片外发的 MIME 类型 @experimental */
-const IMAGE_MIME_TYPES = [
-	"image/png",
-	"image/jpeg",
-	"image/webp",
-	"image/gif"
-];
-/**
-* 可按文本读取的扩展名。accept 白名单与判定白名单共用这一份——
-* 0.5.x 两处不一致，`log`/`yaml`/`yml` 能通过判定却在文件选择器里选不到。
-*/
-const TEXT_EXTENSIONS = [
-	"txt",
-	"md",
-	"csv",
-	"json",
-	"log",
-	"yaml",
-	"yml"
-];
-const TEXT_EXTENSION_SET = new Set(TEXT_EXTENSIONS);
-const IMAGE_MIME_SET = new Set(IMAGE_MIME_TYPES);
-/** 非文本非图片但仍可整体外发的类型（provider 的 file 分片） */
-const FILE_MIME_TYPES = ["application/pdf"];
-const FILE_MIME_SET = new Set(FILE_MIME_TYPES);
-/**
-* 需要**客户端先抽取成文本**才能外发的类型（FR-23.9 / 0.13.0 FR-12.5）。
-* 不走直通的 `file`：docx / xlsx 发给 provider 会被当成二进制垃圾。
-*/
-const DOCX_MIME = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
-const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
-const EXTRACTED_MIME_SET = /* @__PURE__ */ new Set([DOCX_MIME, XLSX_MIME]);
-const EXTRACTED_EXTENSION_SET = /* @__PURE__ */ new Set(["docx", "xlsx"]);
-function extensionOf(fileName) {
-	return fileName.split(".").pop()?.toLowerCase() ?? "";
-}
-/** 分类集中一处，不散落在各 UI 分支里 @experimental */
-function classifyAttachment(contentType, fileName) {
-	const type = contentType.toLowerCase();
-	if (IMAGE_MIME_SET.has(type)) return "image";
-	if (EXTRACTED_MIME_SET.has(type)) return "document-text";
-	if (FILE_MIME_SET.has(type)) return "file";
-	if (type.startsWith("text/") || type === "application/json") return "text";
-	if (type === "" && TEXT_EXTENSION_SET.has(extensionOf(fileName))) return "text";
-	if (type === "" && EXTRACTED_EXTENSION_SET.has(extensionOf(fileName))) return "document-text";
-}
 const TEXT_ACCEPT = [
 	"text/plain",
 	"text/markdown",
@@ -47264,18 +47416,43 @@ function pageActionDetails(details) {
 	const record = details;
 	const action = record["action"];
 	const target = record["target"];
-	if (action !== "click" && action !== "fill" && action !== "submit") return void 0;
+	if (typeof action !== "string" || !PAGE_ACTION_KINDS.includes(action)) return void 0;
 	if (typeof target !== "object" || target === null) return void 0;
 	const { role, name, frame } = target;
 	if (typeof role !== "string") return void 0;
 	const value = record["value"];
+	const rememberLabel = record["rememberLabel"];
 	return {
 		action,
 		role,
 		...typeof name === "string" ? { name } : {},
 		...typeof value === "string" ? { value } : {},
 		...typeof frame === "string" ? { frame } : {},
-		...record["elevated"] === true ? { elevated: true } : {}
+		...record["elevated"] === true ? { elevated: true } : {},
+		...record["rememberable"] === true ? { rememberable: true } : {},
+		...typeof rememberLabel === "string" ? { rememberLabel } : {}
+	};
+}
+/**
+* 下载文件确认卡的载荷（0.14.0 分册 20）。与 `pageActionDetails` 同一条规矩：
+* 形状不对就整段不渲染，退回通用授权展示，不猜。
+*/
+function downloadedFileDetails(details) {
+	if (typeof details !== "object" || details === null) return void 0;
+	const record = details;
+	const action = record["action"];
+	if (action !== "list" && action !== "read") return void 0;
+	const file = record["file"];
+	const rememberLabel = record["rememberLabel"];
+	const named = typeof file === "object" && file !== null ? file : void 0;
+	return {
+		action,
+		...typeof named?.["name"] === "string" && typeof named["size"] === "number" ? { file: {
+			name: named["name"],
+			size: named["size"]
+		} } : {},
+		...record["rememberable"] === true ? { rememberable: true } : {},
+		...typeof rememberLabel === "string" ? { rememberLabel } : {}
 	};
 }
 /**
@@ -47308,8 +47485,10 @@ function traceEvidenceDetails(details) {
 }
 function ActiveInteractionCard({ request, bridge }) {
 	const t = useT();
+	const [remember, setRemember] = useState(false);
 	const isAuthorize = request.type === "authorize";
 	const pageAction = isAuthorize && request.capability === "pageAction" ? pageActionDetails(request.details) : void 0;
+	const downloadedFile = isAuthorize && request.capability === "readDownloadedFile" ? downloadedFileDetails(request.details) : void 0;
 	const traceEvidence = isAuthorize ? traceEvidenceDetails(request.details) : void 0;
 	const spec = interactionToUiSpec(request.type === "authorize" && pageAction !== void 0 ? {
 		...request,
@@ -47337,7 +47516,8 @@ function ActiveInteractionCard({ request, bridge }) {
 		const value = shapeInteractionValue(interactionToFormModel(request), event.value ?? {});
 		bridge.resolve({
 			id: request.id,
-			value
+			value,
+			...remember ? { remembered: true } : {}
 		});
 	};
 	return /* @__PURE__ */ jsxs(motion.div, {
@@ -47413,8 +47593,33 @@ function ActiveInteractionCard({ request, bridge }) {
 							"data-testid": "interaction-page-action-elevated",
 							className: "text-sm font-medium text-warning",
 							children: t("interaction.pageAction.elevated")
+						}) : null,
+						pageAction.rememberable === true ? /* @__PURE__ */ jsxs("label", {
+							className: "flex items-center gap-2 text-sm text-ink",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "checkbox",
+								"data-testid": "interaction-page-action-remember",
+								checked: remember,
+								onChange: (event) => setRemember(event.currentTarget.checked)
+							}), pageAction.rememberLabel ?? t("interaction.pageAction.remember")]
 						}) : null
 					] }) : null,
+					downloadedFile ? /* @__PURE__ */ jsxs(Fragment$1, { children: [downloadedFile.file ? /* @__PURE__ */ jsx("p", {
+						"data-testid": "interaction-downloaded-file",
+						className: "text-sm text-ink",
+						children: t("interaction.downloadedFile.file", {
+							name: downloadedFile.file.name,
+							size: formatBytes(downloadedFile.file.size)
+						})
+					}) : null, downloadedFile.rememberable === true ? /* @__PURE__ */ jsxs("label", {
+						className: "flex items-center gap-2 text-sm text-ink",
+						children: [/* @__PURE__ */ jsx("input", {
+							type: "checkbox",
+							"data-testid": "interaction-downloaded-file-remember",
+							checked: remember,
+							onChange: (event) => setRemember(event.currentTarget.checked)
+						}), downloadedFile.rememberLabel ?? t("interaction.downloadedFile.remember")]
+					}) : null] }) : null,
 					traceEvidence ? /* @__PURE__ */ jsxs("div", {
 						"data-testid": "interaction-trace-evidence",
 						children: [/* @__PURE__ */ jsx("div", {
@@ -47894,6 +48099,8 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		...config?.governance ? { governance: config.governance } : {},
 		...config?.skillCandidates ? { skillCandidates: config.skillCandidates } : {},
 		...config?.fetchData ? { fetchData: config.fetchData } : {},
+		...config?.dataSources ? { dataSources: config.dataSources } : {},
+		...config?.executorFactory ? { executorFactory: config.executorFactory } : {},
 		...rendererProp ? { renderer: rendererProp } : {}
 	}), [
 		adapter,
@@ -47906,6 +48113,8 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		config?.governance,
 		config?.skillCandidates,
 		config?.fetchData,
+		config?.dataSources,
+		config?.executorFactory,
 		rendererProp
 	]);
 	useEffect(() => {
@@ -48089,7 +48298,9 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 			unsubscribe?.();
 		};
 	}, [configStore, engine]);
+	const hasBuiltinEntry = llmSelection.entries.some((entry) => entry.provider === "chrome-builtin");
 	useEffect(() => {
+		if (!hasBuiltinEntry) return void 0;
 		let cancelled = false;
 		probeChromeBuiltinAvailability().then((result) => {
 			if (!cancelled) setChromeBuiltin(result);
@@ -48097,7 +48308,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 		return () => {
 			cancelled = true;
 		};
-	}, []);
+	}, [hasBuiltinEntry]);
 	/** 选中模型条目 id：能力受限提示、设置面板置灰与附件门槛都以它为准 */
 	const selectedModelId = modelId ?? llmSelection.defaultId ?? llmSelection.entries[0]?.id ?? "";
 	const selectedEntry = llmSelection.entries.find((entry) => entry.id === selectedModelId);
@@ -48514,6 +48725,7 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 														modelLabels,
 														resolveAttachmentUrl,
 														...surfaceRegistry ? { surfaceRegistry } : {},
+														...engine.documentSurface ? { documentSurface: engine.documentSurface } : {},
 														renderer,
 														bridge: engine.bridge,
 														...adapter.navigation.openConsoleTrace ? { onViewTrace: adapter.navigation.openConsoleTrace } : {},
@@ -48557,11 +48769,6 @@ function Chatbot({ adapter, config, locale: localeProp, theme: themeProp, render
 									} : {},
 									onLocate: handleLocateInteraction
 								}),
-								messages.length > 0 && !sending && config?.dynamicQuickPrompts ? /* @__PURE__ */ jsx(AssistantUiDynamicPrompts, {
-									prompts: config.dynamicQuickPrompts,
-									limit: quickPromptLimit,
-									onPrompt: handleSend
-								}) : null,
 								/* @__PURE__ */ jsx(AssistantUiComposer, {
 									...modelCapabilities ? { capabilities: {
 										tools: modelCapabilities.tools,
@@ -48654,7 +48861,7 @@ function VercelPayloadPreview({ bridge }) {
 * Version of the published `@webskill/chatbot` package, injected at build time.
 * @stable
 */
-const CHATBOT_VERSION = "0.10.0";
+const CHATBOT_VERSION = "0.12.0";
 
 //#endregion
 export { A2uiSurfaceHost, A2uiSurfaceSnapshotHost, CHATBOT_VERSION, ChatEngine, Chatbot, CompositeUiBridge, DEFAULT_RENDERER_CAPABILITIES, DEFAULT_RUNTIME_CONFIG_STORAGE_KEY, ErrorCard, InteractionCard, InterruptedBanner, OpenUiSurfaceHost, OpenUiSurfaceSnapshotHost, ResultBlockList, ResultBlocksPro, SkillBadges, SpecInteraction, VercelPayloadPreview, VercelSurfaceHost, VercelSurfaceSnapshotHost, chatbotDictionary, configureA2uiMarkdown, createLocalStorageRuntimeConfigStore, createMemoryRuntimeConfigStore, isLlmEntryUsable, pickUsableLlmEntry, probeA2uiAvailability, probeOpenUiAvailability, sandboxExecutorDeps, useT };